workflow.v1alpha1.workflowSpec
"WorkflowSpec is the specification of a Workflow."
Index
fn withActiveDeadlineSeconds(activeDeadlineSeconds)
fn withArchiveLogs(archiveLogs)
fn withAutomountServiceAccountToken(automountServiceAccountToken)
fn withDnsPolicy(dnsPolicy)
fn withEntrypoint(entrypoint)
fn withHooks(hooks)
fn withHooksMixin(hooks)
fn withHostAliases(hostAliases)
fn withHostAliasesMixin(hostAliases)
fn withHostNetwork(hostNetwork)
fn withImagePullSecrets(imagePullSecrets)
fn withImagePullSecretsMixin(imagePullSecrets)
fn withNodeSelector(nodeSelector)
fn withNodeSelectorMixin(nodeSelector)
fn withOnExit(onExit)
fn withParallelism(parallelism)
fn withPodPriority(podPriority)
fn withPodPriorityClassName(podPriorityClassName)
fn withPodSpecPatch(podSpecPatch)
fn withPriority(priority)
fn withSchedulerName(schedulerName)
fn withServiceAccountName(serviceAccountName)
fn withShutdown(shutdown)
fn withSuspend(suspend)
fn withTemplates(templates)
fn withTemplatesMixin(templates)
fn withTolerations(tolerations)
fn withTolerationsMixin(tolerations)
fn withVolumeClaimTemplates(volumeClaimTemplates)
fn withVolumeClaimTemplatesMixin(volumeClaimTemplates)
fn withVolumes(volumes)
fn withVolumesMixin(volumes)
obj affinity
obj affinity.nodeAffinity
obj affinity.podAffinity
fn withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
fn withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
obj affinity.podAntiAffinity
fn withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
fn withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
obj arguments
obj artifactRepositoryRef
obj dnsConfig
obj executor
obj metrics
obj podDisruptionBudget
obj podGC
obj podMetadata
obj retryStrategy
obj securityContext
fn withFsGroup(fsGroup)
fn withFsGroupChangePolicy(fsGroupChangePolicy)
fn withRunAsGroup(runAsGroup)
fn withRunAsNonRoot(runAsNonRoot)
fn withRunAsUser(runAsUser)
fn withSupplementalGroups(supplementalGroups)
fn withSupplementalGroupsMixin(supplementalGroups)
fn withSysctls(sysctls)
fn withSysctlsMixin(sysctls)
obj securityContext.seLinuxOptions
obj securityContext.seccompProfile
obj securityContext.windowsOptions
obj synchronization
obj templateDefaults
fn withActiveDeadlineSeconds(activeDeadlineSeconds)
fn withAutomountServiceAccountToken(automountServiceAccountToken)
fn withDaemon(daemon)
fn withFailFast(failFast)
fn withHostAliases(hostAliases)
fn withHostAliasesMixin(hostAliases)
fn withInitContainers(initContainers)
fn withInitContainersMixin(initContainers)
fn withName(name)
fn withNodeSelector(nodeSelector)
fn withNodeSelectorMixin(nodeSelector)
fn withParallelism(parallelism)
fn withPlugin(plugin)
fn withPluginMixin(plugin)
fn withPodSpecPatch(podSpecPatch)
fn withPriority(priority)
fn withPriorityClassName(priorityClassName)
fn withSchedulerName(schedulerName)
fn withServiceAccountName(serviceAccountName)
fn withSidecars(sidecars)
fn withSidecarsMixin(sidecars)
fn withSteps(steps)
fn withStepsMixin(steps)
fn withTimeout(timeout)
fn withTolerations(tolerations)
fn withTolerationsMixin(tolerations)
fn withVolumes(volumes)
fn withVolumesMixin(volumes)
obj templateDefaults.affinity
obj templateDefaults.affinity.nodeAffinity
fn withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
fn withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
obj templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution
obj templateDefaults.affinity.podAffinity
fn withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
fn withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
obj templateDefaults.affinity.podAntiAffinity
fn withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
fn withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
fn withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
obj templateDefaults.archiveLocation
fn withArchiveLogs(archiveLogs)
obj templateDefaults.archiveLocation.artifactory
obj templateDefaults.archiveLocation.gcs
obj templateDefaults.archiveLocation.git
fn withDepth(depth)
fn withDisableSubmodules(disableSubmodules)
fn withFetch(fetch)
fn withFetchMixin(fetch)
fn withInsecureIgnoreHostKey(insecureIgnoreHostKey)
fn withRepo(repo)
fn withRevision(revision)
obj templateDefaults.archiveLocation.git.passwordSecret
obj templateDefaults.archiveLocation.git.sshPrivateKeySecret
obj templateDefaults.archiveLocation.git.usernameSecret
obj templateDefaults.archiveLocation.hdfs
fn withAddresses(addresses)
fn withAddressesMixin(addresses)
fn withForce(force)
fn withHdfsUser(hdfsUser)
fn withKrbRealm(krbRealm)
fn withKrbServicePrincipalName(krbServicePrincipalName)
fn withKrbUsername(krbUsername)
fn withPath(path)
obj templateDefaults.archiveLocation.hdfs.krbCCacheSecret
obj templateDefaults.archiveLocation.hdfs.krbConfigConfigMap
obj templateDefaults.archiveLocation.hdfs.krbKeytabSecret
obj templateDefaults.archiveLocation.http
obj templateDefaults.archiveLocation.oss
fn withBucket(bucket)
fn withCreateBucketIfNotPresent(createBucketIfNotPresent)
fn withEndpoint(endpoint)
fn withKey(key)
fn withSecurityToken(securityToken)
obj templateDefaults.archiveLocation.oss.accessKeySecret
obj templateDefaults.archiveLocation.oss.lifecycleRule
obj templateDefaults.archiveLocation.oss.secretKeySecret
obj templateDefaults.archiveLocation.raw
obj templateDefaults.archiveLocation.s3
fn withBucket(bucket)
fn withEndpoint(endpoint)
fn withInsecure(insecure)
fn withKey(key)
fn withRegion(region)
fn withRoleARN(roleARN)
fn withUseSDKCreds(useSDKCreds)
obj templateDefaults.archiveLocation.s3.accessKeySecret
obj templateDefaults.archiveLocation.s3.createBucketIfNotPresent
obj templateDefaults.archiveLocation.s3.encryptionOptions
obj templateDefaults.archiveLocation.s3.secretKeySecret
obj templateDefaults.container
fn withArgs(args)
fn withArgsMixin(args)
fn withCommand(command)
fn withCommandMixin(command)
fn withEnv(env)
fn withEnvFrom(envFrom)
fn withEnvFromMixin(envFrom)
fn withEnvMixin(env)
fn withImage(image)
fn withImagePullPolicy(imagePullPolicy)
fn withName(name)
fn withPorts(ports)
fn withPortsMixin(ports)
fn withStdin(stdin)
fn withStdinOnce(stdinOnce)
fn withTerminationMessagePath(terminationMessagePath)
fn withTerminationMessagePolicy(terminationMessagePolicy)
fn withTty(tty)
fn withVolumeDevices(volumeDevices)
fn withVolumeDevicesMixin(volumeDevices)
fn withVolumeMounts(volumeMounts)
fn withVolumeMountsMixin(volumeMounts)
fn withWorkingDir(workingDir)
obj templateDefaults.container.lifecycle
obj templateDefaults.container.lifecycle.postStart
obj templateDefaults.container.lifecycle.preStop
obj templateDefaults.container.livenessProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
fn withTimeoutSeconds(timeoutSeconds)
obj templateDefaults.container.livenessProbe.exec
obj templateDefaults.container.livenessProbe.grpc
obj templateDefaults.container.livenessProbe.httpGet
obj templateDefaults.container.livenessProbe.tcpSocket
obj templateDefaults.container.readinessProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
fn withTimeoutSeconds(timeoutSeconds)
obj templateDefaults.container.readinessProbe.exec
obj templateDefaults.container.readinessProbe.grpc
obj templateDefaults.container.readinessProbe.httpGet
obj templateDefaults.container.readinessProbe.tcpSocket
obj templateDefaults.container.resources
obj templateDefaults.container.securityContext
fn withAllowPrivilegeEscalation(allowPrivilegeEscalation)
fn withPrivileged(privileged)
fn withProcMount(procMount)
fn withReadOnlyRootFilesystem(readOnlyRootFilesystem)
fn withRunAsGroup(runAsGroup)
fn withRunAsNonRoot(runAsNonRoot)
fn withRunAsUser(runAsUser)
obj templateDefaults.container.securityContext.capabilities
obj templateDefaults.container.securityContext.seLinuxOptions
obj templateDefaults.container.securityContext.seccompProfile
obj templateDefaults.container.securityContext.windowsOptions
obj templateDefaults.container.startupProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
fn withTimeoutSeconds(timeoutSeconds)
obj templateDefaults.container.startupProbe.exec
obj templateDefaults.container.startupProbe.grpc
obj templateDefaults.container.startupProbe.httpGet
obj templateDefaults.container.startupProbe.tcpSocket
obj templateDefaults.containerSet
obj templateDefaults.dag
obj templateDefaults.data
fn withTransformation(transformation)
fn withTransformationMixin(transformation)
obj templateDefaults.data.source
obj templateDefaults.data.source.artifactPaths
fn withArchiveLogs(archiveLogs)
fn withFrom(from)
fn withFromExpression(fromExpression)
fn withGlobalName(globalName)
fn withMode(mode)
fn withName(name)
fn withOptional(optional)
fn withPath(path)
fn withRecurseMode(recurseMode)
fn withSubPath(subPath)
obj templateDefaults.data.source.artifactPaths.archive
obj templateDefaults.data.source.artifactPaths.artifactory
obj templateDefaults.data.source.artifactPaths.gcs
obj templateDefaults.data.source.artifactPaths.git
fn withDepth(depth)
fn withDisableSubmodules(disableSubmodules)
fn withFetch(fetch)
fn withFetchMixin(fetch)
fn withInsecureIgnoreHostKey(insecureIgnoreHostKey)
fn withRepo(repo)
fn withRevision(revision)
obj templateDefaults.data.source.artifactPaths.git.passwordSecret
obj templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret
obj templateDefaults.data.source.artifactPaths.git.usernameSecret
obj templateDefaults.data.source.artifactPaths.hdfs
fn withAddresses(addresses)
fn withAddressesMixin(addresses)
fn withForce(force)
fn withHdfsUser(hdfsUser)
fn withKrbRealm(krbRealm)
fn withKrbServicePrincipalName(krbServicePrincipalName)
fn withKrbUsername(krbUsername)
fn withPath(path)
obj templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret
obj templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap
obj templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret
obj templateDefaults.data.source.artifactPaths.http
obj templateDefaults.data.source.artifactPaths.oss
fn withBucket(bucket)
fn withCreateBucketIfNotPresent(createBucketIfNotPresent)
fn withEndpoint(endpoint)
fn withKey(key)
fn withSecurityToken(securityToken)
obj templateDefaults.data.source.artifactPaths.oss.accessKeySecret
obj templateDefaults.data.source.artifactPaths.oss.lifecycleRule
obj templateDefaults.data.source.artifactPaths.oss.secretKeySecret
obj templateDefaults.data.source.artifactPaths.raw
obj templateDefaults.data.source.artifactPaths.s3
fn withBucket(bucket)
fn withEndpoint(endpoint)
fn withInsecure(insecure)
fn withKey(key)
fn withRegion(region)
fn withRoleARN(roleARN)
fn withUseSDKCreds(useSDKCreds)
obj templateDefaults.data.source.artifactPaths.s3.accessKeySecret
obj templateDefaults.data.source.artifactPaths.s3.createBucketIfNotPresent
obj templateDefaults.data.source.artifactPaths.s3.encryptionOptions
obj templateDefaults.data.source.artifactPaths.s3.secretKeySecret
obj templateDefaults.executor
obj templateDefaults.http
obj templateDefaults.inputs
obj templateDefaults.memoize
obj templateDefaults.metadata
obj templateDefaults.metrics
obj templateDefaults.outputs
obj templateDefaults.resource
obj templateDefaults.retryStrategy
obj templateDefaults.script
fn withArgs(args)
fn withArgsMixin(args)
fn withCommand(command)
fn withCommandMixin(command)
fn withEnv(env)
fn withEnvFrom(envFrom)
fn withEnvFromMixin(envFrom)
fn withEnvMixin(env)
fn withImage(image)
fn withImagePullPolicy(imagePullPolicy)
fn withName(name)
fn withPorts(ports)
fn withPortsMixin(ports)
fn withSource(source)
fn withStdin(stdin)
fn withStdinOnce(stdinOnce)
fn withTerminationMessagePath(terminationMessagePath)
fn withTerminationMessagePolicy(terminationMessagePolicy)
fn withTty(tty)
fn withVolumeDevices(volumeDevices)
fn withVolumeDevicesMixin(volumeDevices)
fn withVolumeMounts(volumeMounts)
fn withVolumeMountsMixin(volumeMounts)
fn withWorkingDir(workingDir)
obj templateDefaults.script.lifecycle
obj templateDefaults.script.lifecycle.postStart
obj templateDefaults.script.lifecycle.preStop
obj templateDefaults.script.livenessProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
fn withTimeoutSeconds(timeoutSeconds)
obj templateDefaults.script.livenessProbe.exec
obj templateDefaults.script.livenessProbe.grpc
obj templateDefaults.script.livenessProbe.httpGet
obj templateDefaults.script.livenessProbe.tcpSocket
obj templateDefaults.script.readinessProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
fn withTimeoutSeconds(timeoutSeconds)
obj templateDefaults.script.readinessProbe.exec
obj templateDefaults.script.readinessProbe.grpc
obj templateDefaults.script.readinessProbe.httpGet
obj templateDefaults.script.readinessProbe.tcpSocket
obj templateDefaults.script.resources
obj templateDefaults.script.securityContext
fn withAllowPrivilegeEscalation(allowPrivilegeEscalation)
fn withPrivileged(privileged)
fn withProcMount(procMount)
fn withReadOnlyRootFilesystem(readOnlyRootFilesystem)
fn withRunAsGroup(runAsGroup)
fn withRunAsNonRoot(runAsNonRoot)
fn withRunAsUser(runAsUser)
obj templateDefaults.script.securityContext.capabilities
obj templateDefaults.script.securityContext.seLinuxOptions
obj templateDefaults.script.securityContext.seccompProfile
obj templateDefaults.script.securityContext.windowsOptions
obj templateDefaults.script.startupProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
fn withTimeoutSeconds(timeoutSeconds)
obj templateDefaults.script.startupProbe.exec
obj templateDefaults.script.startupProbe.grpc
obj templateDefaults.script.startupProbe.httpGet
obj templateDefaults.script.startupProbe.tcpSocket
obj templateDefaults.securityContext
fn withFsGroup(fsGroup)
fn withFsGroupChangePolicy(fsGroupChangePolicy)
fn withRunAsGroup(runAsGroup)
fn withRunAsNonRoot(runAsNonRoot)
fn withRunAsUser(runAsUser)
fn withSupplementalGroups(supplementalGroups)
fn withSupplementalGroupsMixin(supplementalGroups)
fn withSysctls(sysctls)
fn withSysctlsMixin(sysctls)
obj templateDefaults.securityContext.seLinuxOptions
obj templateDefaults.securityContext.seccompProfile
obj templateDefaults.securityContext.windowsOptions
obj templateDefaults.suspend
obj templateDefaults.synchronization
obj ttlStrategy
obj volumeClaimGC
obj workflowMetadata
obj workflowTemplateRef
Fields
fn withActiveDeadlineSeconds
withActiveDeadlineSeconds(activeDeadlineSeconds)
"Optional duration in seconds relative to the workflow start time which the workflow is allowed to run before the controller terminates the io.argoproj.workflow.v1alpha1. A value of zero is used to terminate a Running workflow"
fn withArchiveLogs
withArchiveLogs(archiveLogs)
"ArchiveLogs indicates if the container logs should be archived"
fn withAutomountServiceAccountToken
withAutomountServiceAccountToken(automountServiceAccountToken)
"AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in pods. ServiceAccountName of ExecutorConfig must be specified if this value is false."
fn withDnsPolicy
withDnsPolicy(dnsPolicy)
"Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
fn withEntrypoint
withEntrypoint(entrypoint)
"Entrypoint is a template reference to the starting point of the io.argoproj.workflow.v1alpha1."
fn withHooks
withHooks(hooks)
"Hooks holds the lifecycle hook which is invoked at lifecycle of step, irrespective of the success, failure, or error status of the primary step"
fn withHooksMixin
withHooksMixin(hooks)
"Hooks holds the lifecycle hook which is invoked at lifecycle of step, irrespective of the success, failure, or error status of the primary step"
Note: This function appends passed data to existing values
fn withHostAliases
withHostAliases(hostAliases)
fn withHostAliasesMixin
withHostAliasesMixin(hostAliases)
Note: This function appends passed data to existing values
fn withHostNetwork
withHostNetwork(hostNetwork)
"Host networking requested for this workflow pod. Default to false."
fn withImagePullSecrets
withImagePullSecrets(imagePullSecrets)
"ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod"
fn withImagePullSecretsMixin
withImagePullSecretsMixin(imagePullSecrets)
"ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod"
Note: This function appends passed data to existing values
fn withNodeSelector
withNodeSelector(nodeSelector)
"NodeSelector is a selector which will result in all pods of the workflow to be scheduled on the selected node(s). This is able to be overridden by a nodeSelector specified in the template."
fn withNodeSelectorMixin
withNodeSelectorMixin(nodeSelector)
"NodeSelector is a selector which will result in all pods of the workflow to be scheduled on the selected node(s). This is able to be overridden by a nodeSelector specified in the template."
Note: This function appends passed data to existing values
fn withOnExit
withOnExit(onExit)
"OnExit is a template reference which is invoked at the end of the workflow, irrespective of the success, failure, or error of the primary io.argoproj.workflow.v1alpha1."
fn withParallelism
withParallelism(parallelism)
"Parallelism limits the max total parallel pods that can execute at the same time in a workflow"
fn withPodPriority
withPodPriority(podPriority)
"Priority to apply to workflow pods."
fn withPodPriorityClassName
withPodPriorityClassName(podPriorityClassName)
"PriorityClassName to apply to workflow pods."
fn withPodSpecPatch
withPodSpecPatch(podSpecPatch)
"PodSpecPatch holds strategic merge patch to apply against the pod spec. Allows parameterization of container fields which are not strings (e.g. resource limits)."
fn withPriority
withPriority(priority)
"Priority is used if controller is configured to process limited number of workflows in parallel. Workflows with higher priority are processed first."
fn withSchedulerName
withSchedulerName(schedulerName)
"Set scheduler name for all pods. Will be overridden if container/script template's scheduler name is set. Default scheduler will be used if neither specified."
fn withServiceAccountName
withServiceAccountName(serviceAccountName)
"ServiceAccountName is the name of the ServiceAccount to run all pods of the workflow as."
fn withShutdown
withShutdown(shutdown)
"Shutdown will shutdown the workflow according to its ShutdownStrategy"
fn withSuspend
withSuspend(suspend)
"Suspend will suspend the workflow and prevent execution of any future steps in the workflow"
fn withTemplates
withTemplates(templates)
"Templates is a list of workflow templates used in a workflow"
fn withTemplatesMixin
withTemplatesMixin(templates)
"Templates is a list of workflow templates used in a workflow"
Note: This function appends passed data to existing values
fn withTolerations
withTolerations(tolerations)
"Tolerations to apply to workflow pods."
fn withTolerationsMixin
withTolerationsMixin(tolerations)
"Tolerations to apply to workflow pods."
Note: This function appends passed data to existing values
fn withVolumeClaimTemplates
withVolumeClaimTemplates(volumeClaimTemplates)
"VolumeClaimTemplates is a list of claims that containers are allowed to reference. The Workflow controller will create the claims at the beginning of the workflow and delete the claims upon completion of the workflow"
fn withVolumeClaimTemplatesMixin
withVolumeClaimTemplatesMixin(volumeClaimTemplates)
"VolumeClaimTemplates is a list of claims that containers are allowed to reference. The Workflow controller will create the claims at the beginning of the workflow and delete the claims upon completion of the workflow"
Note: This function appends passed data to existing values
fn withVolumes
withVolumes(volumes)
"Volumes is a list of volumes that can be mounted by containers in a io.argoproj.workflow.v1alpha1."
fn withVolumesMixin
withVolumesMixin(volumes)
"Volumes is a list of volumes that can be mounted by containers in a io.argoproj.workflow.v1alpha1."
Note: This function appends passed data to existing values
obj affinity
"Affinity is a group of affinity scheduling rules."
obj affinity.nodeAffinity
"Node affinity is a group of node affinity scheduling rules."
fn affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecution
withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."
fn affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin
withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."
Note: This function appends passed data to existing values
obj affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution
"A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms."
fn affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTerms
withNodeSelectorTerms(nodeSelectorTerms)
"Required. A list of node selector terms. The terms are ORed."
fn affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTermsMixin
withNodeSelectorTermsMixin(nodeSelectorTerms)
"Required. A list of node selector terms. The terms are ORed."
Note: This function appends passed data to existing values
obj affinity.podAffinity
"Pod affinity is a group of inter pod affinity scheduling rules."
fn affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecution
withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
fn affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin
withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
Note: This function appends passed data to existing values
fn affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecution
withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
fn affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin
withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
Note: This function appends passed data to existing values
obj affinity.podAntiAffinity
"Pod anti affinity is a group of inter pod anti affinity scheduling rules."
fn affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecution
withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
fn affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin
withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
Note: This function appends passed data to existing values
fn affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecution
withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
fn affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin
withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
Note: This function appends passed data to existing values
obj arguments
"Arguments to a template"
fn arguments.withArtifacts
withArtifacts(artifacts)
"Artifacts is the list of artifacts to pass to the template or workflow"
fn arguments.withArtifactsMixin
withArtifactsMixin(artifacts)
"Artifacts is the list of artifacts to pass to the template or workflow"
Note: This function appends passed data to existing values
fn arguments.withParameters
withParameters(parameters)
"Parameters is the list of parameters to pass to the template or workflow"
fn arguments.withParametersMixin
withParametersMixin(parameters)
"Parameters is the list of parameters to pass to the template or workflow"
Note: This function appends passed data to existing values
obj artifactRepositoryRef
fn artifactRepositoryRef.withConfigMap
withConfigMap(configMap)
"The name of the config map. Defaults to \"artifact-repositories\"."
fn artifactRepositoryRef.withKey
withKey(key)
"The config map key. Defaults to the value of the \"workflows.argoproj.io/default-artifact-repository\" annotation."
obj dnsConfig
"PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy."
fn dnsConfig.withNameservers
withNameservers(nameservers)
"A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed."
fn dnsConfig.withNameserversMixin
withNameserversMixin(nameservers)
"A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed."
Note: This function appends passed data to existing values
fn dnsConfig.withOptions
withOptions(options)
"A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy."
fn dnsConfig.withOptionsMixin
withOptionsMixin(options)
"A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy."
Note: This function appends passed data to existing values
fn dnsConfig.withSearches
withSearches(searches)
"A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed."
fn dnsConfig.withSearchesMixin
withSearchesMixin(searches)
"A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed."
Note: This function appends passed data to existing values
obj executor
"ExecutorConfig holds configurations of an executor container."
fn executor.withServiceAccountName
withServiceAccountName(serviceAccountName)
"ServiceAccountName specifies the service account name of the executor container."
obj metrics
"Metrics are a list of metrics emitted from a Workflow/Template"
fn metrics.withPrometheus
withPrometheus(prometheus)
"Prometheus is a list of prometheus metrics to be emitted"
fn metrics.withPrometheusMixin
withPrometheusMixin(prometheus)
"Prometheus is a list of prometheus metrics to be emitted"
Note: This function appends passed data to existing values
obj podDisruptionBudget
"PodDisruptionBudgetSpec is a description of a PodDisruptionBudget."
fn podDisruptionBudget.withMaxUnavailable
withMaxUnavailable(maxUnavailable)
fn podDisruptionBudget.withMinAvailable
withMinAvailable(minAvailable)
obj podDisruptionBudget.selector
"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects."
fn podDisruptionBudget.selector.withMatchExpressions
withMatchExpressions(matchExpressions)
"matchExpressions is a list of label selector requirements. The requirements are ANDed."
fn podDisruptionBudget.selector.withMatchExpressionsMixin
withMatchExpressionsMixin(matchExpressions)
"matchExpressions is a list of label selector requirements. The requirements are ANDed."
Note: This function appends passed data to existing values
fn podDisruptionBudget.selector.withMatchLabels
withMatchLabels(matchLabels)
"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
fn podDisruptionBudget.selector.withMatchLabelsMixin
withMatchLabelsMixin(matchLabels)
"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
Note: This function appends passed data to existing values
obj podGC
"PodGC describes how to delete completed pods as they complete"
fn podGC.withStrategy
withStrategy(strategy)
"Strategy is the strategy to use. One of \"OnPodCompletion\", \"OnPodSuccess\", \"OnWorkflowCompletion\", \"OnWorkflowSuccess\
obj podGC.labelSelector
"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects."
fn podGC.labelSelector.withMatchExpressions
withMatchExpressions(matchExpressions)
"matchExpressions is a list of label selector requirements. The requirements are ANDed."
fn podGC.labelSelector.withMatchExpressionsMixin
withMatchExpressionsMixin(matchExpressions)
"matchExpressions is a list of label selector requirements. The requirements are ANDed."
Note: This function appends passed data to existing values
fn podGC.labelSelector.withMatchLabels
withMatchLabels(matchLabels)
"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
fn podGC.labelSelector.withMatchLabelsMixin
withMatchLabelsMixin(matchLabels)
"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
Note: This function appends passed data to existing values
obj podMetadata
"Pod metdata"
fn podMetadata.withAnnotations
withAnnotations(annotations)
fn podMetadata.withAnnotationsMixin
withAnnotationsMixin(annotations)
Note: This function appends passed data to existing values
fn podMetadata.withLabels
withLabels(labels)
fn podMetadata.withLabelsMixin
withLabelsMixin(labels)
Note: This function appends passed data to existing values
obj retryStrategy
"RetryStrategy provides controls on how to retry a workflow step"
fn retryStrategy.withExpression
withExpression(expression)
"Expression is a condition expression for when a node will be retried. If it evaluates to false, the node will not be retried and the retry strategy will be ignored"
fn retryStrategy.withLimit
withLimit(limit)
fn retryStrategy.withRetryPolicy
withRetryPolicy(retryPolicy)
"RetryPolicy is a policy of NodePhase statuses that will be retried"
obj retryStrategy.affinity
"RetryAffinity prevents running steps on the same host."
fn retryStrategy.affinity.withNodeAntiAffinity
withNodeAntiAffinity(nodeAntiAffinity)
"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."
fn retryStrategy.affinity.withNodeAntiAffinityMixin
withNodeAntiAffinityMixin(nodeAntiAffinity)
"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."
Note: This function appends passed data to existing values
obj retryStrategy.backoff
"Backoff is a backoff strategy to use within retryStrategy"
fn retryStrategy.backoff.withDuration
withDuration(duration)
"Duration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. \"2m\", \"1h\")"
fn retryStrategy.backoff.withFactor
withFactor(factor)
fn retryStrategy.backoff.withMaxDuration
withMaxDuration(maxDuration)
"MaxDuration is the maximum amount of time allowed for the backoff strategy"
obj securityContext
"PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext."
fn securityContext.withFsGroup
withFsGroup(fsGroup)
"A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows."
fn securityContext.withFsGroupChangePolicy
withFsGroupChangePolicy(fsGroupChangePolicy)
"fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used. Note that this field cannot be set when spec.os.name is windows."
fn securityContext.withRunAsGroup
withRunAsGroup(runAsGroup)
"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."
fn securityContext.withRunAsNonRoot
withRunAsNonRoot(runAsNonRoot)
"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
fn securityContext.withRunAsUser
withRunAsUser(runAsUser)
"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."
fn securityContext.withSupplementalGroups
withSupplementalGroups(supplementalGroups)
"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."
fn securityContext.withSupplementalGroupsMixin
withSupplementalGroupsMixin(supplementalGroups)
"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."
Note: This function appends passed data to existing values
fn securityContext.withSysctls
withSysctls(sysctls)
"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."
fn securityContext.withSysctlsMixin
withSysctlsMixin(sysctls)
"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."
Note: This function appends passed data to existing values
obj securityContext.seLinuxOptions
"SELinuxOptions are the labels to be applied to the container"
fn securityContext.seLinuxOptions.withLevel
withLevel(level)
"Level is SELinux level label that applies to the container."
fn securityContext.seLinuxOptions.withRole
withRole(role)
"Role is a SELinux role label that applies to the container."
fn securityContext.seLinuxOptions.withType
withType(type)
"Type is a SELinux type label that applies to the container."
fn securityContext.seLinuxOptions.withUser
withUser(user)
"User is a SELinux user label that applies to the container."
obj securityContext.seccompProfile
"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."
fn securityContext.seccompProfile.withLocalhostProfile
withLocalhostProfile(localhostProfile)
"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."
fn securityContext.seccompProfile.withType
withType(type)
"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\"
indicates a profile defined in a file on the node should be used. The file's location relative to \"RuntimeDefault\"
represents the default container runtime seccomp profile.\n - \"Unconfined\"
indicates no seccomp profile is applied (A.K.A. unconfined)."
obj securityContext.windowsOptions
"WindowsSecurityContextOptions contain Windows-specific options and credentials."
fn securityContext.windowsOptions.withGmsaCredentialSpec
withGmsaCredentialSpec(gmsaCredentialSpec)
"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."
fn securityContext.windowsOptions.withGmsaCredentialSpecName
withGmsaCredentialSpecName(gmsaCredentialSpecName)
"GMSACredentialSpecName is the name of the GMSA credential spec to use."
fn securityContext.windowsOptions.withHostProcess
withHostProcess(hostProcess)
"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."
fn securityContext.windowsOptions.withRunAsUserName
withRunAsUserName(runAsUserName)
"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
obj synchronization
"Synchronization holds synchronization lock configuration"
obj synchronization.mutex
"Mutex holds Mutex configuration"
fn synchronization.mutex.withName
withName(name)
"name of the mutex"
obj synchronization.semaphore
"SemaphoreRef is a reference of Semaphore"
obj synchronization.semaphore.configMapKeyRef
"Selects a key from a ConfigMap."
fn synchronization.semaphore.configMapKeyRef.withKey
withKey(key)
"The key to select."
fn synchronization.semaphore.configMapKeyRef.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn synchronization.semaphore.configMapKeyRef.withOptional
withOptional(optional)
"Specify whether the ConfigMap or its key must be defined"
obj templateDefaults
"Template is a reusable and composable unit of execution in a workflow"
fn templateDefaults.withActiveDeadlineSeconds
withActiveDeadlineSeconds(activeDeadlineSeconds)
fn templateDefaults.withAutomountServiceAccountToken
withAutomountServiceAccountToken(automountServiceAccountToken)
"AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in pods. ServiceAccountName of ExecutorConfig must be specified if this value is false."
fn templateDefaults.withDaemon
withDaemon(daemon)
"Deamon will allow a workflow to proceed to the next step so long as the container reaches readiness"
fn templateDefaults.withFailFast
withFailFast(failFast)
"FailFast, if specified, will fail this template if any of its child pods has failed. This is useful for when this template is expanded with withItems
, etc."
fn templateDefaults.withHostAliases
withHostAliases(hostAliases)
"HostAliases is an optional list of hosts and IPs that will be injected into the pod spec"
fn templateDefaults.withHostAliasesMixin
withHostAliasesMixin(hostAliases)
"HostAliases is an optional list of hosts and IPs that will be injected into the pod spec"
Note: This function appends passed data to existing values
fn templateDefaults.withInitContainers
withInitContainers(initContainers)
"InitContainers is a list of containers which run before the main container."
fn templateDefaults.withInitContainersMixin
withInitContainersMixin(initContainers)
"InitContainers is a list of containers which run before the main container."
Note: This function appends passed data to existing values
fn templateDefaults.withName
withName(name)
"Name is the name of the template"
fn templateDefaults.withNodeSelector
withNodeSelector(nodeSelector)
"NodeSelector is a selector to schedule this step of the workflow to be run on the selected node(s). Overrides the selector set at the workflow level."
fn templateDefaults.withNodeSelectorMixin
withNodeSelectorMixin(nodeSelector)
"NodeSelector is a selector to schedule this step of the workflow to be run on the selected node(s). Overrides the selector set at the workflow level."
Note: This function appends passed data to existing values
fn templateDefaults.withParallelism
withParallelism(parallelism)
"Parallelism limits the max total parallel pods that can execute at the same time within the boundaries of this template invocation. If additional steps/dag templates are invoked, the pods created by those templates will not be counted towards this total."
fn templateDefaults.withPlugin
withPlugin(plugin)
"Plugin is an Object with exactly one key"
fn templateDefaults.withPluginMixin
withPluginMixin(plugin)
"Plugin is an Object with exactly one key"
Note: This function appends passed data to existing values
fn templateDefaults.withPodSpecPatch
withPodSpecPatch(podSpecPatch)
"PodSpecPatch holds strategic merge patch to apply against the pod spec. Allows parameterization of container fields which are not strings (e.g. resource limits)."
fn templateDefaults.withPriority
withPriority(priority)
"Priority to apply to workflow pods."
fn templateDefaults.withPriorityClassName
withPriorityClassName(priorityClassName)
"PriorityClassName to apply to workflow pods."
fn templateDefaults.withSchedulerName
withSchedulerName(schedulerName)
"If specified, the pod will be dispatched by specified scheduler. Or it will be dispatched by workflow scope scheduler if specified. If neither specified, the pod will be dispatched by default scheduler."
fn templateDefaults.withServiceAccountName
withServiceAccountName(serviceAccountName)
"ServiceAccountName to apply to workflow pods"
fn templateDefaults.withSidecars
withSidecars(sidecars)
"Sidecars is a list of containers which run alongside the main container Sidecars are automatically killed when the main container completes"
fn templateDefaults.withSidecarsMixin
withSidecarsMixin(sidecars)
"Sidecars is a list of containers which run alongside the main container Sidecars are automatically killed when the main container completes"
Note: This function appends passed data to existing values
fn templateDefaults.withSteps
withSteps(steps)
"Steps define a series of sequential/parallel workflow steps"
fn templateDefaults.withStepsMixin
withStepsMixin(steps)
"Steps define a series of sequential/parallel workflow steps"
Note: This function appends passed data to existing values
fn templateDefaults.withTimeout
withTimeout(timeout)
"Timeout allows to set the total node execution timeout duration counting from the node's start time. This duration also includes time in which the node spends in Pending state. This duration may not be applied to Step or DAG templates."
fn templateDefaults.withTolerations
withTolerations(tolerations)
"Tolerations to apply to workflow pods."
fn templateDefaults.withTolerationsMixin
withTolerationsMixin(tolerations)
"Tolerations to apply to workflow pods."
Note: This function appends passed data to existing values
fn templateDefaults.withVolumes
withVolumes(volumes)
"Volumes is a list of volumes that can be mounted by containers in a template."
fn templateDefaults.withVolumesMixin
withVolumesMixin(volumes)
"Volumes is a list of volumes that can be mounted by containers in a template."
Note: This function appends passed data to existing values
obj templateDefaults.affinity
"Affinity is a group of affinity scheduling rules."
obj templateDefaults.affinity.nodeAffinity
"Node affinity is a group of node affinity scheduling rules."
fn templateDefaults.affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecution
withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."
fn templateDefaults.affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin
withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."
Note: This function appends passed data to existing values
obj templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution
"A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms."
fn templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTerms
withNodeSelectorTerms(nodeSelectorTerms)
"Required. A list of node selector terms. The terms are ORed."
fn templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTermsMixin
withNodeSelectorTermsMixin(nodeSelectorTerms)
"Required. A list of node selector terms. The terms are ORed."
Note: This function appends passed data to existing values
obj templateDefaults.affinity.podAffinity
"Pod affinity is a group of inter pod affinity scheduling rules."
fn templateDefaults.affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecution
withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
fn templateDefaults.affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin
withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
Note: This function appends passed data to existing values
fn templateDefaults.affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecution
withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
fn templateDefaults.affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin
withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
Note: This function appends passed data to existing values
obj templateDefaults.affinity.podAntiAffinity
"Pod anti affinity is a group of inter pod anti affinity scheduling rules."
fn templateDefaults.affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecution
withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
fn templateDefaults.affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin
withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)
"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."
Note: This function appends passed data to existing values
fn templateDefaults.affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecution
withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)
"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
fn templateDefaults.affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin
withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)
"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."
Note: This function appends passed data to existing values
obj templateDefaults.archiveLocation
"ArtifactLocation describes a location for a single or multiple artifacts. It is used as single artifact in the context of inputs/outputs (e.g. outputs.artifacts.artname). It is also used to describe the location of multiple artifacts such as the archive location of a single workflow step, which the executor will use as a default location to store its files."
fn templateDefaults.archiveLocation.withArchiveLogs
withArchiveLogs(archiveLogs)
"ArchiveLogs indicates if the container logs should be archived"
obj templateDefaults.archiveLocation.artifactory
"ArtifactoryArtifact is the location of an artifactory artifact"
fn templateDefaults.archiveLocation.artifactory.withUrl
withUrl(url)
"URL of the artifact"
obj templateDefaults.archiveLocation.artifactory.passwordSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.artifactory.passwordSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.artifactory.passwordSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.artifactory.passwordSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.artifactory.usernameSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.artifactory.usernameSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.artifactory.usernameSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.artifactory.usernameSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.gcs
"GCSArtifact is the location of a GCS artifact"
fn templateDefaults.archiveLocation.gcs.withBucket
withBucket(bucket)
"Bucket is the name of the bucket"
fn templateDefaults.archiveLocation.gcs.withKey
withKey(key)
"Key is the path in the bucket where the artifact resides"
obj templateDefaults.archiveLocation.gcs.serviceAccountKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.gcs.serviceAccountKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.gcs.serviceAccountKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.gcs.serviceAccountKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.git
"GitArtifact is the location of an git artifact"
fn templateDefaults.archiveLocation.git.withDepth
withDepth(depth)
"Depth specifies clones/fetches should be shallow and include the given number of commits from the branch tip"
fn templateDefaults.archiveLocation.git.withDisableSubmodules
withDisableSubmodules(disableSubmodules)
"DisableSubmodules disables submodules during git clone"
fn templateDefaults.archiveLocation.git.withFetch
withFetch(fetch)
"Fetch specifies a number of refs that should be fetched before checkout"
fn templateDefaults.archiveLocation.git.withFetchMixin
withFetchMixin(fetch)
"Fetch specifies a number of refs that should be fetched before checkout"
Note: This function appends passed data to existing values
fn templateDefaults.archiveLocation.git.withInsecureIgnoreHostKey
withInsecureIgnoreHostKey(insecureIgnoreHostKey)
"InsecureIgnoreHostKey disables SSH strict host key checking during git clone"
fn templateDefaults.archiveLocation.git.withRepo
withRepo(repo)
"Repo is the git repository"
fn templateDefaults.archiveLocation.git.withRevision
withRevision(revision)
"Revision is the git commit, tag, branch to checkout"
obj templateDefaults.archiveLocation.git.passwordSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.git.passwordSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.git.passwordSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.git.passwordSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.git.sshPrivateKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.git.sshPrivateKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.git.sshPrivateKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.git.sshPrivateKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.git.usernameSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.git.usernameSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.git.usernameSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.git.usernameSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.hdfs
"HDFSArtifact is the location of an HDFS artifact"
fn templateDefaults.archiveLocation.hdfs.withAddresses
withAddresses(addresses)
"Addresses is accessible addresses of HDFS name nodes"
fn templateDefaults.archiveLocation.hdfs.withAddressesMixin
withAddressesMixin(addresses)
"Addresses is accessible addresses of HDFS name nodes"
Note: This function appends passed data to existing values
fn templateDefaults.archiveLocation.hdfs.withForce
withForce(force)
"Force copies a file forcibly even if it exists"
fn templateDefaults.archiveLocation.hdfs.withHdfsUser
withHdfsUser(hdfsUser)
"HDFSUser is the user to access HDFS file system. It is ignored if either ccache or keytab is used."
fn templateDefaults.archiveLocation.hdfs.withKrbRealm
withKrbRealm(krbRealm)
"KrbRealm is the Kerberos realm used with Kerberos keytab It must be set if keytab is used."
fn templateDefaults.archiveLocation.hdfs.withKrbServicePrincipalName
withKrbServicePrincipalName(krbServicePrincipalName)
"KrbServicePrincipalName is the principal name of Kerberos service It must be set if either ccache or keytab is used."
fn templateDefaults.archiveLocation.hdfs.withKrbUsername
withKrbUsername(krbUsername)
"KrbUsername is the Kerberos username used with Kerberos keytab It must be set if keytab is used."
fn templateDefaults.archiveLocation.hdfs.withPath
withPath(path)
"Path is a file path in HDFS"
obj templateDefaults.archiveLocation.hdfs.krbCCacheSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.hdfs.krbCCacheSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.hdfs.krbCCacheSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.hdfs.krbCCacheSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.hdfs.krbConfigConfigMap
"Selects a key from a ConfigMap."
fn templateDefaults.archiveLocation.hdfs.krbConfigConfigMap.withKey
withKey(key)
"The key to select."
fn templateDefaults.archiveLocation.hdfs.krbConfigConfigMap.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.hdfs.krbConfigConfigMap.withOptional
withOptional(optional)
"Specify whether the ConfigMap or its key must be defined"
obj templateDefaults.archiveLocation.hdfs.krbKeytabSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.hdfs.krbKeytabSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.hdfs.krbKeytabSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.hdfs.krbKeytabSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.http
"HTTPArtifact allows an file served on HTTP to be placed as an input artifact in a container"
fn templateDefaults.archiveLocation.http.withHeaders
withHeaders(headers)
"Headers are an optional list of headers to send with HTTP requests for artifacts"
fn templateDefaults.archiveLocation.http.withHeadersMixin
withHeadersMixin(headers)
"Headers are an optional list of headers to send with HTTP requests for artifacts"
Note: This function appends passed data to existing values
fn templateDefaults.archiveLocation.http.withUrl
withUrl(url)
"URL of the artifact"
obj templateDefaults.archiveLocation.oss
"OSSArtifact is the location of an Alibaba Cloud OSS artifact"
fn templateDefaults.archiveLocation.oss.withBucket
withBucket(bucket)
"Bucket is the name of the bucket"
fn templateDefaults.archiveLocation.oss.withCreateBucketIfNotPresent
withCreateBucketIfNotPresent(createBucketIfNotPresent)
"CreateBucketIfNotPresent tells the driver to attempt to create the OSS bucket for output artifacts, if it doesn't exist"
fn templateDefaults.archiveLocation.oss.withEndpoint
withEndpoint(endpoint)
"Endpoint is the hostname of the bucket endpoint"
fn templateDefaults.archiveLocation.oss.withKey
withKey(key)
"Key is the path in the bucket where the artifact resides"
fn templateDefaults.archiveLocation.oss.withSecurityToken
withSecurityToken(securityToken)
"SecurityToken is the user's temporary security token. For more details, check out: https://www.alibabacloud.com/help/doc-detail/100624.htm"
obj templateDefaults.archiveLocation.oss.accessKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.oss.accessKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.oss.accessKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.oss.accessKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.oss.lifecycleRule
"OSSLifecycleRule specifies how to manage bucket's lifecycle"
fn templateDefaults.archiveLocation.oss.lifecycleRule.withMarkDeletionAfterDays
withMarkDeletionAfterDays(markDeletionAfterDays)
"MarkDeletionAfterDays is the number of days before we delete objects in the bucket"
fn templateDefaults.archiveLocation.oss.lifecycleRule.withMarkInfrequentAccessAfterDays
withMarkInfrequentAccessAfterDays(markInfrequentAccessAfterDays)
"MarkInfrequentAccessAfterDays is the number of days before we convert the objects in the bucket to Infrequent Access (IA) storage type"
obj templateDefaults.archiveLocation.oss.secretKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.oss.secretKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.oss.secretKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.oss.secretKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.raw
"RawArtifact allows raw string content to be placed as an artifact in a container"
fn templateDefaults.archiveLocation.raw.withData
withData(data)
"Data is the string contents of the artifact"
obj templateDefaults.archiveLocation.s3
"S3Artifact is the location of an S3 artifact"
fn templateDefaults.archiveLocation.s3.withBucket
withBucket(bucket)
"Bucket is the name of the bucket"
fn templateDefaults.archiveLocation.s3.withEndpoint
withEndpoint(endpoint)
"Endpoint is the hostname of the bucket endpoint"
fn templateDefaults.archiveLocation.s3.withInsecure
withInsecure(insecure)
"Insecure will connect to the service with TLS"
fn templateDefaults.archiveLocation.s3.withKey
withKey(key)
"Key is the key in the bucket where the artifact resides"
fn templateDefaults.archiveLocation.s3.withRegion
withRegion(region)
"Region contains the optional bucket region"
fn templateDefaults.archiveLocation.s3.withRoleARN
withRoleARN(roleARN)
"RoleARN is the Amazon Resource Name (ARN) of the role to assume."
fn templateDefaults.archiveLocation.s3.withUseSDKCreds
withUseSDKCreds(useSDKCreds)
"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."
obj templateDefaults.archiveLocation.s3.accessKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.s3.accessKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.s3.accessKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.s3.accessKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.s3.createBucketIfNotPresent
"CreateS3BucketOptions options used to determine automatic automatic bucket-creation process"
fn templateDefaults.archiveLocation.s3.createBucketIfNotPresent.withObjectLocking
withObjectLocking(objectLocking)
"ObjectLocking Enable object locking"
obj templateDefaults.archiveLocation.s3.encryptionOptions
"S3EncryptionOptions used to determine encryption options during s3 operations"
fn templateDefaults.archiveLocation.s3.encryptionOptions.withEnableEncryption
withEnableEncryption(enableEncryption)
"EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used"
fn templateDefaults.archiveLocation.s3.encryptionOptions.withKmsEncryptionContext
withKmsEncryptionContext(kmsEncryptionContext)
"KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information"
fn templateDefaults.archiveLocation.s3.encryptionOptions.withKmsKeyId
withKmsKeyId(kmsKeyId)
"KMSKeyId tells the driver to encrypt the object using the specified KMS Key."
obj templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.archiveLocation.s3.secretKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.archiveLocation.s3.secretKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.archiveLocation.s3.secretKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.archiveLocation.s3.secretKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.container
"A single application container that you want to run within a pod."
fn templateDefaults.container.withArgs
withArgs(args)
"Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
fn templateDefaults.container.withArgsMixin
withArgsMixin(args)
"Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
Note: This function appends passed data to existing values
fn templateDefaults.container.withCommand
withCommand(command)
"Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
fn templateDefaults.container.withCommandMixin
withCommandMixin(command)
"Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
Note: This function appends passed data to existing values
fn templateDefaults.container.withEnv
withEnv(env)
"List of environment variables to set in the container. Cannot be updated."
fn templateDefaults.container.withEnvFrom
withEnvFrom(envFrom)
"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."
fn templateDefaults.container.withEnvFromMixin
withEnvFromMixin(envFrom)
"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.container.withEnvMixin
withEnvMixin(env)
"List of environment variables to set in the container. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.container.withImage
withImage(image)
"Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets."
fn templateDefaults.container.withImagePullPolicy
withImagePullPolicy(imagePullPolicy)
"Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images\n\nPossible enum values:\n - \"Always\"
means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - \"IfNotPresent\"
means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - \"Never\"
means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present"
fn templateDefaults.container.withName
withName(name)
"Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated."
fn templateDefaults.container.withPorts
withPorts(ports)
"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."
fn templateDefaults.container.withPortsMixin
withPortsMixin(ports)
"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.container.withStdin
withStdin(stdin)
"Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false."
fn templateDefaults.container.withStdinOnce
withStdinOnce(stdinOnce)
"Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false"
fn templateDefaults.container.withTerminationMessagePath
withTerminationMessagePath(terminationMessagePath)
"Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated."
fn templateDefaults.container.withTerminationMessagePolicy
withTerminationMessagePolicy(terminationMessagePolicy)
"Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.\n\nPossible enum values:\n - \"FallbackToLogsOnError\"
will read the most recent contents of the container logs for the container status message when the container exits with an error and the terminationMessagePath has no contents.\n - \"File\"
is the default behavior and will set the container status message to the contents of the container's terminationMessagePath when the container exits."
fn templateDefaults.container.withTty
withTty(tty)
"Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false."
fn templateDefaults.container.withVolumeDevices
withVolumeDevices(volumeDevices)
"volumeDevices is the list of block devices to be used by the container."
fn templateDefaults.container.withVolumeDevicesMixin
withVolumeDevicesMixin(volumeDevices)
"volumeDevices is the list of block devices to be used by the container."
Note: This function appends passed data to existing values
fn templateDefaults.container.withVolumeMounts
withVolumeMounts(volumeMounts)
"Pod volumes to mount into the container's filesystem. Cannot be updated."
fn templateDefaults.container.withVolumeMountsMixin
withVolumeMountsMixin(volumeMounts)
"Pod volumes to mount into the container's filesystem. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.container.withWorkingDir
withWorkingDir(workingDir)
"Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated."
obj templateDefaults.container.lifecycle
"Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted."
obj templateDefaults.container.lifecycle.postStart
"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."
obj templateDefaults.container.lifecycle.postStart.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.container.lifecycle.postStart.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.container.lifecycle.postStart.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.container.lifecycle.postStart.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.container.lifecycle.postStart.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.container.lifecycle.postStart.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.container.lifecycle.postStart.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.container.lifecycle.postStart.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.container.lifecycle.postStart.httpGet.withPort
withPort(port)
fn templateDefaults.container.lifecycle.postStart.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.container.lifecycle.postStart.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.container.lifecycle.postStart.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.container.lifecycle.postStart.tcpSocket.withPort
withPort(port)
obj templateDefaults.container.lifecycle.preStop
"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."
obj templateDefaults.container.lifecycle.preStop.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.container.lifecycle.preStop.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.container.lifecycle.preStop.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.container.lifecycle.preStop.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.container.lifecycle.preStop.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.container.lifecycle.preStop.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.container.lifecycle.preStop.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.container.lifecycle.preStop.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.container.lifecycle.preStop.httpGet.withPort
withPort(port)
fn templateDefaults.container.lifecycle.preStop.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.container.lifecycle.preStop.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.container.lifecycle.preStop.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.container.lifecycle.preStop.tcpSocket.withPort
withPort(port)
obj templateDefaults.container.livenessProbe
"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."
fn templateDefaults.container.livenessProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."
fn templateDefaults.container.livenessProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn templateDefaults.container.livenessProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."
fn templateDefaults.container.livenessProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn templateDefaults.container.livenessProbe.withTerminationGracePeriodSeconds
withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."
fn templateDefaults.container.livenessProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj templateDefaults.container.livenessProbe.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.container.livenessProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.container.livenessProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.container.livenessProbe.grpc
fn templateDefaults.container.livenessProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn templateDefaults.container.livenessProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."
obj templateDefaults.container.livenessProbe.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.container.livenessProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.container.livenessProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.container.livenessProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.container.livenessProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.container.livenessProbe.httpGet.withPort
withPort(port)
fn templateDefaults.container.livenessProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.container.livenessProbe.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.container.livenessProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.container.livenessProbe.tcpSocket.withPort
withPort(port)
obj templateDefaults.container.readinessProbe
"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."
fn templateDefaults.container.readinessProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."
fn templateDefaults.container.readinessProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn templateDefaults.container.readinessProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."
fn templateDefaults.container.readinessProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn templateDefaults.container.readinessProbe.withTerminationGracePeriodSeconds
withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."
fn templateDefaults.container.readinessProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj templateDefaults.container.readinessProbe.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.container.readinessProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.container.readinessProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.container.readinessProbe.grpc
fn templateDefaults.container.readinessProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn templateDefaults.container.readinessProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."
obj templateDefaults.container.readinessProbe.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.container.readinessProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.container.readinessProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.container.readinessProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.container.readinessProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.container.readinessProbe.httpGet.withPort
withPort(port)
fn templateDefaults.container.readinessProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.container.readinessProbe.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.container.readinessProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.container.readinessProbe.tcpSocket.withPort
withPort(port)
obj templateDefaults.container.resources
"ResourceRequirements describes the compute resource requirements."
fn templateDefaults.container.resources.withLimits
withLimits(limits)
"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn templateDefaults.container.resources.withLimitsMixin
withLimitsMixin(limits)
"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
Note: This function appends passed data to existing values
fn templateDefaults.container.resources.withRequests
withRequests(requests)
"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn templateDefaults.container.resources.withRequestsMixin
withRequestsMixin(requests)
"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
Note: This function appends passed data to existing values
obj templateDefaults.container.securityContext
"SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence."
fn templateDefaults.container.securityContext.withAllowPrivilegeEscalation
withAllowPrivilegeEscalation(allowPrivilegeEscalation)
"AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.container.securityContext.withPrivileged
withPrivileged(privileged)
"Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.container.securityContext.withProcMount
withProcMount(procMount)
"procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.container.securityContext.withReadOnlyRootFilesystem
withReadOnlyRootFilesystem(readOnlyRootFilesystem)
"Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.container.securityContext.withRunAsGroup
withRunAsGroup(runAsGroup)
"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.container.securityContext.withRunAsNonRoot
withRunAsNonRoot(runAsNonRoot)
"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
fn templateDefaults.container.securityContext.withRunAsUser
withRunAsUser(runAsUser)
"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."
obj templateDefaults.container.securityContext.capabilities
"Adds and removes POSIX capabilities from running containers."
fn templateDefaults.container.securityContext.capabilities.withAdd
withAdd(add)
"Added capabilities"
fn templateDefaults.container.securityContext.capabilities.withAddMixin
withAddMixin(add)
"Added capabilities"
Note: This function appends passed data to existing values
fn templateDefaults.container.securityContext.capabilities.withDrop
withDrop(drop)
"Removed capabilities"
fn templateDefaults.container.securityContext.capabilities.withDropMixin
withDropMixin(drop)
"Removed capabilities"
Note: This function appends passed data to existing values
obj templateDefaults.container.securityContext.seLinuxOptions
"SELinuxOptions are the labels to be applied to the container"
fn templateDefaults.container.securityContext.seLinuxOptions.withLevel
withLevel(level)
"Level is SELinux level label that applies to the container."
fn templateDefaults.container.securityContext.seLinuxOptions.withRole
withRole(role)
"Role is a SELinux role label that applies to the container."
fn templateDefaults.container.securityContext.seLinuxOptions.withType
withType(type)
"Type is a SELinux type label that applies to the container."
fn templateDefaults.container.securityContext.seLinuxOptions.withUser
withUser(user)
"User is a SELinux user label that applies to the container."
obj templateDefaults.container.securityContext.seccompProfile
"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."
fn templateDefaults.container.securityContext.seccompProfile.withLocalhostProfile
withLocalhostProfile(localhostProfile)
"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."
fn templateDefaults.container.securityContext.seccompProfile.withType
withType(type)
"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\"
indicates a profile defined in a file on the node should be used. The file's location relative to \"RuntimeDefault\"
represents the default container runtime seccomp profile.\n - \"Unconfined\"
indicates no seccomp profile is applied (A.K.A. unconfined)."
obj templateDefaults.container.securityContext.windowsOptions
"WindowsSecurityContextOptions contain Windows-specific options and credentials."
fn templateDefaults.container.securityContext.windowsOptions.withGmsaCredentialSpec
withGmsaCredentialSpec(gmsaCredentialSpec)
"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."
fn templateDefaults.container.securityContext.windowsOptions.withGmsaCredentialSpecName
withGmsaCredentialSpecName(gmsaCredentialSpecName)
"GMSACredentialSpecName is the name of the GMSA credential spec to use."
fn templateDefaults.container.securityContext.windowsOptions.withHostProcess
withHostProcess(hostProcess)
"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."
fn templateDefaults.container.securityContext.windowsOptions.withRunAsUserName
withRunAsUserName(runAsUserName)
"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
obj templateDefaults.container.startupProbe
"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."
fn templateDefaults.container.startupProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."
fn templateDefaults.container.startupProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn templateDefaults.container.startupProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."
fn templateDefaults.container.startupProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn templateDefaults.container.startupProbe.withTerminationGracePeriodSeconds
withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."
fn templateDefaults.container.startupProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj templateDefaults.container.startupProbe.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.container.startupProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.container.startupProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.container.startupProbe.grpc
fn templateDefaults.container.startupProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn templateDefaults.container.startupProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."
obj templateDefaults.container.startupProbe.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.container.startupProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.container.startupProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.container.startupProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.container.startupProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.container.startupProbe.httpGet.withPort
withPort(port)
fn templateDefaults.container.startupProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.container.startupProbe.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.container.startupProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.container.startupProbe.tcpSocket.withPort
withPort(port)
obj templateDefaults.containerSet
fn templateDefaults.containerSet.withContainers
withContainers(containers)
fn templateDefaults.containerSet.withContainersMixin
withContainersMixin(containers)
Note: This function appends passed data to existing values
fn templateDefaults.containerSet.withVolumeMounts
withVolumeMounts(volumeMounts)
fn templateDefaults.containerSet.withVolumeMountsMixin
withVolumeMountsMixin(volumeMounts)
Note: This function appends passed data to existing values
obj templateDefaults.containerSet.retryStrategy
fn templateDefaults.containerSet.retryStrategy.withDuration
withDuration(duration)
"Duration is the time between each retry, examples values are \"300ms\", \"1s\" or \"5m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\"."
fn templateDefaults.containerSet.retryStrategy.withRetries
withRetries(retries)
obj templateDefaults.dag
"DAGTemplate is a template subtype for directed acyclic graph templates"
fn templateDefaults.dag.withFailFast
withFailFast(failFast)
"This flag is for DAG logic. The DAG logic has a built-in \"fail fast\" feature to stop scheduling new steps, as soon as it detects that one of the DAG nodes is failed. Then it waits until all DAG nodes are completed before failing the DAG itself. The FailFast flag default is true, if set to false, it will allow a DAG to run all branches of the DAG to completion (either success or failure), regardless of the failed outcomes of branches in the DAG. More info and example about this feature at https://github.com/argoproj/argo-workflows/issues/1442"
fn templateDefaults.dag.withTarget
withTarget(target)
"Target are one or more names of targets to execute in a DAG"
fn templateDefaults.dag.withTasks
withTasks(tasks)
"Tasks are a list of DAG tasks"
fn templateDefaults.dag.withTasksMixin
withTasksMixin(tasks)
"Tasks are a list of DAG tasks"
Note: This function appends passed data to existing values
obj templateDefaults.data
"Data is a data template"
fn templateDefaults.data.withTransformation
withTransformation(transformation)
"Transformation applies a set of transformations"
fn templateDefaults.data.withTransformationMixin
withTransformationMixin(transformation)
"Transformation applies a set of transformations"
Note: This function appends passed data to existing values
obj templateDefaults.data.source
"DataSource sources external data into a data template"
obj templateDefaults.data.source.artifactPaths
"ArtifactPaths expands a step from a collection of artifacts"
fn templateDefaults.data.source.artifactPaths.withArchiveLogs
withArchiveLogs(archiveLogs)
"ArchiveLogs indicates if the container logs should be archived"
fn templateDefaults.data.source.artifactPaths.withFrom
withFrom(from)
"From allows an artifact to reference an artifact from a previous step"
fn templateDefaults.data.source.artifactPaths.withFromExpression
withFromExpression(fromExpression)
"FromExpression, if defined, is evaluated to specify the value for the artifact"
fn templateDefaults.data.source.artifactPaths.withGlobalName
withGlobalName(globalName)
"GlobalName exports an output artifact to the global scope, making it available as '{{io.argoproj.workflow.v1alpha1.outputs.artifacts.XXXX}} and in workflow.status.outputs.artifacts"
fn templateDefaults.data.source.artifactPaths.withMode
withMode(mode)
"mode bits to use on this file, must be a value between 0 and 0777 set when loading input artifacts."
fn templateDefaults.data.source.artifactPaths.withName
withName(name)
"name of the artifact. must be unique within a template's inputs/outputs."
fn templateDefaults.data.source.artifactPaths.withOptional
withOptional(optional)
"Make Artifacts optional, if Artifacts doesn't generate or exist"
fn templateDefaults.data.source.artifactPaths.withPath
withPath(path)
"Path is the container path to the artifact"
fn templateDefaults.data.source.artifactPaths.withRecurseMode
withRecurseMode(recurseMode)
"If mode is set, apply the permission recursively into the artifact if it is a folder"
fn templateDefaults.data.source.artifactPaths.withSubPath
withSubPath(subPath)
"SubPath allows an artifact to be sourced from a subpath within the specified source"
obj templateDefaults.data.source.artifactPaths.archive
"ArchiveStrategy describes how to archive files/directory when saving artifacts"
fn templateDefaults.data.source.artifactPaths.archive.withNone
withNone(none)
"NoneStrategy indicates to skip tar process and upload the files or directory tree as independent files. Note that if the artifact is a directory, the artifact driver must support the ability to save/load the directory appropriately."
fn templateDefaults.data.source.artifactPaths.archive.withNoneMixin
withNoneMixin(none)
"NoneStrategy indicates to skip tar process and upload the files or directory tree as independent files. Note that if the artifact is a directory, the artifact driver must support the ability to save/load the directory appropriately."
Note: This function appends passed data to existing values
fn templateDefaults.data.source.artifactPaths.archive.withZip
withZip(zip)
"ZipStrategy will unzip zipped input artifacts"
fn templateDefaults.data.source.artifactPaths.archive.withZipMixin
withZipMixin(zip)
"ZipStrategy will unzip zipped input artifacts"
Note: This function appends passed data to existing values
obj templateDefaults.data.source.artifactPaths.archive.tar
"TarStrategy will tar and gzip the file or directory when saving"
fn templateDefaults.data.source.artifactPaths.archive.tar.withCompressionLevel
withCompressionLevel(compressionLevel)
"CompressionLevel specifies the gzip compression level to use for the artifact. Defaults to gzip.DefaultCompression."
obj templateDefaults.data.source.artifactPaths.artifactory
"ArtifactoryArtifact is the location of an artifactory artifact"
fn templateDefaults.data.source.artifactPaths.artifactory.withUrl
withUrl(url)
"URL of the artifact"
obj templateDefaults.data.source.artifactPaths.artifactory.passwordSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.artifactory.passwordSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.artifactory.passwordSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.artifactory.passwordSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.artifactory.usernameSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.artifactory.usernameSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.artifactory.usernameSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.artifactory.usernameSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.gcs
"GCSArtifact is the location of a GCS artifact"
fn templateDefaults.data.source.artifactPaths.gcs.withBucket
withBucket(bucket)
"Bucket is the name of the bucket"
fn templateDefaults.data.source.artifactPaths.gcs.withKey
withKey(key)
"Key is the path in the bucket where the artifact resides"
obj templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.git
"GitArtifact is the location of an git artifact"
fn templateDefaults.data.source.artifactPaths.git.withDepth
withDepth(depth)
"Depth specifies clones/fetches should be shallow and include the given number of commits from the branch tip"
fn templateDefaults.data.source.artifactPaths.git.withDisableSubmodules
withDisableSubmodules(disableSubmodules)
"DisableSubmodules disables submodules during git clone"
fn templateDefaults.data.source.artifactPaths.git.withFetch
withFetch(fetch)
"Fetch specifies a number of refs that should be fetched before checkout"
fn templateDefaults.data.source.artifactPaths.git.withFetchMixin
withFetchMixin(fetch)
"Fetch specifies a number of refs that should be fetched before checkout"
Note: This function appends passed data to existing values
fn templateDefaults.data.source.artifactPaths.git.withInsecureIgnoreHostKey
withInsecureIgnoreHostKey(insecureIgnoreHostKey)
"InsecureIgnoreHostKey disables SSH strict host key checking during git clone"
fn templateDefaults.data.source.artifactPaths.git.withRepo
withRepo(repo)
"Repo is the git repository"
fn templateDefaults.data.source.artifactPaths.git.withRevision
withRevision(revision)
"Revision is the git commit, tag, branch to checkout"
obj templateDefaults.data.source.artifactPaths.git.passwordSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.git.passwordSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.git.passwordSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.git.passwordSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.git.usernameSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.git.usernameSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.git.usernameSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.git.usernameSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.hdfs
"HDFSArtifact is the location of an HDFS artifact"
fn templateDefaults.data.source.artifactPaths.hdfs.withAddresses
withAddresses(addresses)
"Addresses is accessible addresses of HDFS name nodes"
fn templateDefaults.data.source.artifactPaths.hdfs.withAddressesMixin
withAddressesMixin(addresses)
"Addresses is accessible addresses of HDFS name nodes"
Note: This function appends passed data to existing values
fn templateDefaults.data.source.artifactPaths.hdfs.withForce
withForce(force)
"Force copies a file forcibly even if it exists"
fn templateDefaults.data.source.artifactPaths.hdfs.withHdfsUser
withHdfsUser(hdfsUser)
"HDFSUser is the user to access HDFS file system. It is ignored if either ccache or keytab is used."
fn templateDefaults.data.source.artifactPaths.hdfs.withKrbRealm
withKrbRealm(krbRealm)
"KrbRealm is the Kerberos realm used with Kerberos keytab It must be set if keytab is used."
fn templateDefaults.data.source.artifactPaths.hdfs.withKrbServicePrincipalName
withKrbServicePrincipalName(krbServicePrincipalName)
"KrbServicePrincipalName is the principal name of Kerberos service It must be set if either ccache or keytab is used."
fn templateDefaults.data.source.artifactPaths.hdfs.withKrbUsername
withKrbUsername(krbUsername)
"KrbUsername is the Kerberos username used with Kerberos keytab It must be set if keytab is used."
fn templateDefaults.data.source.artifactPaths.hdfs.withPath
withPath(path)
"Path is a file path in HDFS"
obj templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap
"Selects a key from a ConfigMap."
fn templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap.withKey
withKey(key)
"The key to select."
fn templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap.withOptional
withOptional(optional)
"Specify whether the ConfigMap or its key must be defined"
obj templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.http
"HTTPArtifact allows an file served on HTTP to be placed as an input artifact in a container"
fn templateDefaults.data.source.artifactPaths.http.withHeaders
withHeaders(headers)
"Headers are an optional list of headers to send with HTTP requests for artifacts"
fn templateDefaults.data.source.artifactPaths.http.withHeadersMixin
withHeadersMixin(headers)
"Headers are an optional list of headers to send with HTTP requests for artifacts"
Note: This function appends passed data to existing values
fn templateDefaults.data.source.artifactPaths.http.withUrl
withUrl(url)
"URL of the artifact"
obj templateDefaults.data.source.artifactPaths.oss
"OSSArtifact is the location of an Alibaba Cloud OSS artifact"
fn templateDefaults.data.source.artifactPaths.oss.withBucket
withBucket(bucket)
"Bucket is the name of the bucket"
fn templateDefaults.data.source.artifactPaths.oss.withCreateBucketIfNotPresent
withCreateBucketIfNotPresent(createBucketIfNotPresent)
"CreateBucketIfNotPresent tells the driver to attempt to create the OSS bucket for output artifacts, if it doesn't exist"
fn templateDefaults.data.source.artifactPaths.oss.withEndpoint
withEndpoint(endpoint)
"Endpoint is the hostname of the bucket endpoint"
fn templateDefaults.data.source.artifactPaths.oss.withKey
withKey(key)
"Key is the path in the bucket where the artifact resides"
fn templateDefaults.data.source.artifactPaths.oss.withSecurityToken
withSecurityToken(securityToken)
"SecurityToken is the user's temporary security token. For more details, check out: https://www.alibabacloud.com/help/doc-detail/100624.htm"
obj templateDefaults.data.source.artifactPaths.oss.accessKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.oss.accessKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.oss.accessKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.oss.accessKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.oss.lifecycleRule
"OSSLifecycleRule specifies how to manage bucket's lifecycle"
fn templateDefaults.data.source.artifactPaths.oss.lifecycleRule.withMarkDeletionAfterDays
withMarkDeletionAfterDays(markDeletionAfterDays)
"MarkDeletionAfterDays is the number of days before we delete objects in the bucket"
fn templateDefaults.data.source.artifactPaths.oss.lifecycleRule.withMarkInfrequentAccessAfterDays
withMarkInfrequentAccessAfterDays(markInfrequentAccessAfterDays)
"MarkInfrequentAccessAfterDays is the number of days before we convert the objects in the bucket to Infrequent Access (IA) storage type"
obj templateDefaults.data.source.artifactPaths.oss.secretKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.oss.secretKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.oss.secretKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.oss.secretKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.raw
"RawArtifact allows raw string content to be placed as an artifact in a container"
fn templateDefaults.data.source.artifactPaths.raw.withData
withData(data)
"Data is the string contents of the artifact"
obj templateDefaults.data.source.artifactPaths.s3
"S3Artifact is the location of an S3 artifact"
fn templateDefaults.data.source.artifactPaths.s3.withBucket
withBucket(bucket)
"Bucket is the name of the bucket"
fn templateDefaults.data.source.artifactPaths.s3.withEndpoint
withEndpoint(endpoint)
"Endpoint is the hostname of the bucket endpoint"
fn templateDefaults.data.source.artifactPaths.s3.withInsecure
withInsecure(insecure)
"Insecure will connect to the service with TLS"
fn templateDefaults.data.source.artifactPaths.s3.withKey
withKey(key)
"Key is the key in the bucket where the artifact resides"
fn templateDefaults.data.source.artifactPaths.s3.withRegion
withRegion(region)
"Region contains the optional bucket region"
fn templateDefaults.data.source.artifactPaths.s3.withRoleARN
withRoleARN(roleARN)
"RoleARN is the Amazon Resource Name (ARN) of the role to assume."
fn templateDefaults.data.source.artifactPaths.s3.withUseSDKCreds
withUseSDKCreds(useSDKCreds)
"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."
obj templateDefaults.data.source.artifactPaths.s3.accessKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.s3.accessKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.s3.accessKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.s3.accessKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.s3.createBucketIfNotPresent
"CreateS3BucketOptions options used to determine automatic automatic bucket-creation process"
fn templateDefaults.data.source.artifactPaths.s3.createBucketIfNotPresent.withObjectLocking
withObjectLocking(objectLocking)
"ObjectLocking Enable object locking"
obj templateDefaults.data.source.artifactPaths.s3.encryptionOptions
"S3EncryptionOptions used to determine encryption options during s3 operations"
fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.withEnableEncryption
withEnableEncryption(enableEncryption)
"EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used"
fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.withKmsEncryptionContext
withKmsEncryptionContext(kmsEncryptionContext)
"KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information"
fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.withKmsKeyId
withKmsKeyId(kmsKeyId)
"KMSKeyId tells the driver to encrypt the object using the specified KMS Key."
obj templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.data.source.artifactPaths.s3.secretKeySecret
"SecretKeySelector selects a key of a Secret."
fn templateDefaults.data.source.artifactPaths.s3.secretKeySecret.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn templateDefaults.data.source.artifactPaths.s3.secretKeySecret.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.data.source.artifactPaths.s3.secretKeySecret.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj templateDefaults.executor
"ExecutorConfig holds configurations of an executor container."
fn templateDefaults.executor.withServiceAccountName
withServiceAccountName(serviceAccountName)
"ServiceAccountName specifies the service account name of the executor container."
obj templateDefaults.http
fn templateDefaults.http.withBody
withBody(body)
"Body is content of the HTTP Request"
fn templateDefaults.http.withHeaders
withHeaders(headers)
"Headers are an optional list of headers to send with HTTP requests"
fn templateDefaults.http.withHeadersMixin
withHeadersMixin(headers)
"Headers are an optional list of headers to send with HTTP requests"
Note: This function appends passed data to existing values
fn templateDefaults.http.withInsecureSkipVerify
withInsecureSkipVerify(insecureSkipVerify)
"insecureSkipVerify is a bool when if set to true will skip TLS verification for the HTTP client"
fn templateDefaults.http.withMethod
withMethod(method)
"Method is HTTP methods for HTTP Request"
fn templateDefaults.http.withSuccessCondition
withSuccessCondition(successCondition)
"SuccessCondition is an expression if evaluated to true is considered successful"
fn templateDefaults.http.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"TimeoutSeconds is request timeout for HTTP Request. Default is 30 seconds"
fn templateDefaults.http.withUrl
withUrl(url)
"URL of the HTTP Request"
obj templateDefaults.inputs
"Inputs are the mechanism for passing parameters, artifacts, volumes from one template to another"
fn templateDefaults.inputs.withArtifacts
withArtifacts(artifacts)
"Artifact are a list of artifacts passed as inputs"
fn templateDefaults.inputs.withArtifactsMixin
withArtifactsMixin(artifacts)
"Artifact are a list of artifacts passed as inputs"
Note: This function appends passed data to existing values
fn templateDefaults.inputs.withParameters
withParameters(parameters)
"Parameters are a list of parameters passed as inputs"
fn templateDefaults.inputs.withParametersMixin
withParametersMixin(parameters)
"Parameters are a list of parameters passed as inputs"
Note: This function appends passed data to existing values
obj templateDefaults.memoize
"Memoization enables caching for the Outputs of the template"
fn templateDefaults.memoize.withKey
withKey(key)
"Key is the key to use as the caching key"
fn templateDefaults.memoize.withMaxAge
withMaxAge(maxAge)
"MaxAge is the maximum age (e.g. \"180s\", \"24h\") of an entry that is still considered valid. If an entry is older than the MaxAge, it will be ignored."
obj templateDefaults.memoize.cache
"Cache is the configuration for the type of cache to be used"
obj templateDefaults.memoize.cache.configMap
"Selects a key from a ConfigMap."
fn templateDefaults.memoize.cache.configMap.withKey
withKey(key)
"The key to select."
fn templateDefaults.memoize.cache.configMap.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.memoize.cache.configMap.withOptional
withOptional(optional)
"Specify whether the ConfigMap or its key must be defined"
obj templateDefaults.metadata
"Pod metdata"
fn templateDefaults.metadata.withAnnotations
withAnnotations(annotations)
fn templateDefaults.metadata.withAnnotationsMixin
withAnnotationsMixin(annotations)
Note: This function appends passed data to existing values
fn templateDefaults.metadata.withLabels
withLabels(labels)
fn templateDefaults.metadata.withLabelsMixin
withLabelsMixin(labels)
Note: This function appends passed data to existing values
obj templateDefaults.metrics
"Metrics are a list of metrics emitted from a Workflow/Template"
fn templateDefaults.metrics.withPrometheus
withPrometheus(prometheus)
"Prometheus is a list of prometheus metrics to be emitted"
fn templateDefaults.metrics.withPrometheusMixin
withPrometheusMixin(prometheus)
"Prometheus is a list of prometheus metrics to be emitted"
Note: This function appends passed data to existing values
obj templateDefaults.outputs
"Outputs hold parameters, artifacts, and results from a step"
fn templateDefaults.outputs.withArtifacts
withArtifacts(artifacts)
"Artifacts holds the list of output artifacts produced by a step"
fn templateDefaults.outputs.withArtifactsMixin
withArtifactsMixin(artifacts)
"Artifacts holds the list of output artifacts produced by a step"
Note: This function appends passed data to existing values
fn templateDefaults.outputs.withExitCode
withExitCode(exitCode)
"ExitCode holds the exit code of a script template"
fn templateDefaults.outputs.withParameters
withParameters(parameters)
"Parameters holds the list of output parameters produced by a step"
fn templateDefaults.outputs.withParametersMixin
withParametersMixin(parameters)
"Parameters holds the list of output parameters produced by a step"
Note: This function appends passed data to existing values
fn templateDefaults.outputs.withResult
withResult(result)
"Result holds the result (stdout) of a script template"
obj templateDefaults.resource
"ResourceTemplate is a template subtype to manipulate kubernetes resources"
fn templateDefaults.resource.withAction
withAction(action)
"Action is the action to perform to the resource. Must be one of: get, create, apply, delete, replace, patch"
fn templateDefaults.resource.withFailureCondition
withFailureCondition(failureCondition)
"FailureCondition is a label selector expression which describes the conditions of the k8s resource in which the step was considered failed"
fn templateDefaults.resource.withFlags
withFlags(flags)
"Flags is a set of additional options passed to kubectl before submitting a resource I.e. to disable resource validation: flags: [\n\t\"--validate=false\" # disable resource validation\n]"
fn templateDefaults.resource.withFlagsMixin
withFlagsMixin(flags)
"Flags is a set of additional options passed to kubectl before submitting a resource I.e. to disable resource validation: flags: [\n\t\"--validate=false\" # disable resource validation\n]"
Note: This function appends passed data to existing values
fn templateDefaults.resource.withManifest
withManifest(manifest)
"Manifest contains the kubernetes manifest"
fn templateDefaults.resource.withMergeStrategy
withMergeStrategy(mergeStrategy)
"MergeStrategy is the strategy used to merge a patch. It defaults to \"strategic\" Must be one of: strategic, merge, json"
fn templateDefaults.resource.withSetOwnerReference
withSetOwnerReference(setOwnerReference)
"SetOwnerReference sets the reference to the workflow on the OwnerReference of generated resource."
fn templateDefaults.resource.withSuccessCondition
withSuccessCondition(successCondition)
"SuccessCondition is a label selector expression which describes the conditions of the k8s resource in which it is acceptable to proceed to the following step"
obj templateDefaults.retryStrategy
"RetryStrategy provides controls on how to retry a workflow step"
fn templateDefaults.retryStrategy.withExpression
withExpression(expression)
"Expression is a condition expression for when a node will be retried. If it evaluates to false, the node will not be retried and the retry strategy will be ignored"
fn templateDefaults.retryStrategy.withLimit
withLimit(limit)
fn templateDefaults.retryStrategy.withRetryPolicy
withRetryPolicy(retryPolicy)
"RetryPolicy is a policy of NodePhase statuses that will be retried"
obj templateDefaults.retryStrategy.affinity
"RetryAffinity prevents running steps on the same host."
fn templateDefaults.retryStrategy.affinity.withNodeAntiAffinity
withNodeAntiAffinity(nodeAntiAffinity)
"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."
fn templateDefaults.retryStrategy.affinity.withNodeAntiAffinityMixin
withNodeAntiAffinityMixin(nodeAntiAffinity)
"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."
Note: This function appends passed data to existing values
obj templateDefaults.retryStrategy.backoff
"Backoff is a backoff strategy to use within retryStrategy"
fn templateDefaults.retryStrategy.backoff.withDuration
withDuration(duration)
"Duration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. \"2m\", \"1h\")"
fn templateDefaults.retryStrategy.backoff.withFactor
withFactor(factor)
fn templateDefaults.retryStrategy.backoff.withMaxDuration
withMaxDuration(maxDuration)
"MaxDuration is the maximum amount of time allowed for the backoff strategy"
obj templateDefaults.script
"ScriptTemplate is a template subtype to enable scripting through code steps"
fn templateDefaults.script.withArgs
withArgs(args)
"Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
fn templateDefaults.script.withArgsMixin
withArgsMixin(args)
"Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
Note: This function appends passed data to existing values
fn templateDefaults.script.withCommand
withCommand(command)
"Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
fn templateDefaults.script.withCommandMixin
withCommandMixin(command)
"Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
Note: This function appends passed data to existing values
fn templateDefaults.script.withEnv
withEnv(env)
"List of environment variables to set in the container. Cannot be updated."
fn templateDefaults.script.withEnvFrom
withEnvFrom(envFrom)
"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."
fn templateDefaults.script.withEnvFromMixin
withEnvFromMixin(envFrom)
"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.script.withEnvMixin
withEnvMixin(env)
"List of environment variables to set in the container. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.script.withImage
withImage(image)
"Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets."
fn templateDefaults.script.withImagePullPolicy
withImagePullPolicy(imagePullPolicy)
"Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images"
fn templateDefaults.script.withName
withName(name)
"Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated."
fn templateDefaults.script.withPorts
withPorts(ports)
"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."
fn templateDefaults.script.withPortsMixin
withPortsMixin(ports)
"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.script.withSource
withSource(source)
"Source contains the source code of the script to execute"
fn templateDefaults.script.withStdin
withStdin(stdin)
"Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false."
fn templateDefaults.script.withStdinOnce
withStdinOnce(stdinOnce)
"Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false"
fn templateDefaults.script.withTerminationMessagePath
withTerminationMessagePath(terminationMessagePath)
"Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated."
fn templateDefaults.script.withTerminationMessagePolicy
withTerminationMessagePolicy(terminationMessagePolicy)
"Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated."
fn templateDefaults.script.withTty
withTty(tty)
"Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false."
fn templateDefaults.script.withVolumeDevices
withVolumeDevices(volumeDevices)
"volumeDevices is the list of block devices to be used by the container."
fn templateDefaults.script.withVolumeDevicesMixin
withVolumeDevicesMixin(volumeDevices)
"volumeDevices is the list of block devices to be used by the container."
Note: This function appends passed data to existing values
fn templateDefaults.script.withVolumeMounts
withVolumeMounts(volumeMounts)
"Pod volumes to mount into the container's filesystem. Cannot be updated."
fn templateDefaults.script.withVolumeMountsMixin
withVolumeMountsMixin(volumeMounts)
"Pod volumes to mount into the container's filesystem. Cannot be updated."
Note: This function appends passed data to existing values
fn templateDefaults.script.withWorkingDir
withWorkingDir(workingDir)
"Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated."
obj templateDefaults.script.lifecycle
"Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted."
obj templateDefaults.script.lifecycle.postStart
"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."
obj templateDefaults.script.lifecycle.postStart.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.script.lifecycle.postStart.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.script.lifecycle.postStart.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.script.lifecycle.postStart.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.script.lifecycle.postStart.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.script.lifecycle.postStart.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.script.lifecycle.postStart.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.script.lifecycle.postStart.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.script.lifecycle.postStart.httpGet.withPort
withPort(port)
fn templateDefaults.script.lifecycle.postStart.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.script.lifecycle.postStart.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.script.lifecycle.postStart.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.script.lifecycle.postStart.tcpSocket.withPort
withPort(port)
obj templateDefaults.script.lifecycle.preStop
"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."
obj templateDefaults.script.lifecycle.preStop.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.script.lifecycle.preStop.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.script.lifecycle.preStop.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.script.lifecycle.preStop.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.script.lifecycle.preStop.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.script.lifecycle.preStop.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.script.lifecycle.preStop.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.script.lifecycle.preStop.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.script.lifecycle.preStop.httpGet.withPort
withPort(port)
fn templateDefaults.script.lifecycle.preStop.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.script.lifecycle.preStop.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.script.lifecycle.preStop.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.script.lifecycle.preStop.tcpSocket.withPort
withPort(port)
obj templateDefaults.script.livenessProbe
"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."
fn templateDefaults.script.livenessProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."
fn templateDefaults.script.livenessProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn templateDefaults.script.livenessProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."
fn templateDefaults.script.livenessProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn templateDefaults.script.livenessProbe.withTerminationGracePeriodSeconds
withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."
fn templateDefaults.script.livenessProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj templateDefaults.script.livenessProbe.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.script.livenessProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.script.livenessProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.script.livenessProbe.grpc
fn templateDefaults.script.livenessProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn templateDefaults.script.livenessProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."
obj templateDefaults.script.livenessProbe.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.script.livenessProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.script.livenessProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.script.livenessProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.script.livenessProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.script.livenessProbe.httpGet.withPort
withPort(port)
fn templateDefaults.script.livenessProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.script.livenessProbe.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.script.livenessProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.script.livenessProbe.tcpSocket.withPort
withPort(port)
obj templateDefaults.script.readinessProbe
"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."
fn templateDefaults.script.readinessProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."
fn templateDefaults.script.readinessProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn templateDefaults.script.readinessProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."
fn templateDefaults.script.readinessProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn templateDefaults.script.readinessProbe.withTerminationGracePeriodSeconds
withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."
fn templateDefaults.script.readinessProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj templateDefaults.script.readinessProbe.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.script.readinessProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.script.readinessProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.script.readinessProbe.grpc
fn templateDefaults.script.readinessProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn templateDefaults.script.readinessProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."
obj templateDefaults.script.readinessProbe.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.script.readinessProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.script.readinessProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.script.readinessProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.script.readinessProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.script.readinessProbe.httpGet.withPort
withPort(port)
fn templateDefaults.script.readinessProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.script.readinessProbe.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.script.readinessProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.script.readinessProbe.tcpSocket.withPort
withPort(port)
obj templateDefaults.script.resources
"ResourceRequirements describes the compute resource requirements."
fn templateDefaults.script.resources.withLimits
withLimits(limits)
"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn templateDefaults.script.resources.withLimitsMixin
withLimitsMixin(limits)
"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
Note: This function appends passed data to existing values
fn templateDefaults.script.resources.withRequests
withRequests(requests)
"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn templateDefaults.script.resources.withRequestsMixin
withRequestsMixin(requests)
"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
Note: This function appends passed data to existing values
obj templateDefaults.script.securityContext
"SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence."
fn templateDefaults.script.securityContext.withAllowPrivilegeEscalation
withAllowPrivilegeEscalation(allowPrivilegeEscalation)
"AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.script.securityContext.withPrivileged
withPrivileged(privileged)
"Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.script.securityContext.withProcMount
withProcMount(procMount)
"procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.script.securityContext.withReadOnlyRootFilesystem
withReadOnlyRootFilesystem(readOnlyRootFilesystem)
"Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.script.securityContext.withRunAsGroup
withRunAsGroup(runAsGroup)
"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.script.securityContext.withRunAsNonRoot
withRunAsNonRoot(runAsNonRoot)
"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
fn templateDefaults.script.securityContext.withRunAsUser
withRunAsUser(runAsUser)
"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."
obj templateDefaults.script.securityContext.capabilities
"Adds and removes POSIX capabilities from running containers."
fn templateDefaults.script.securityContext.capabilities.withAdd
withAdd(add)
"Added capabilities"
fn templateDefaults.script.securityContext.capabilities.withAddMixin
withAddMixin(add)
"Added capabilities"
Note: This function appends passed data to existing values
fn templateDefaults.script.securityContext.capabilities.withDrop
withDrop(drop)
"Removed capabilities"
fn templateDefaults.script.securityContext.capabilities.withDropMixin
withDropMixin(drop)
"Removed capabilities"
Note: This function appends passed data to existing values
obj templateDefaults.script.securityContext.seLinuxOptions
"SELinuxOptions are the labels to be applied to the container"
fn templateDefaults.script.securityContext.seLinuxOptions.withLevel
withLevel(level)
"Level is SELinux level label that applies to the container."
fn templateDefaults.script.securityContext.seLinuxOptions.withRole
withRole(role)
"Role is a SELinux role label that applies to the container."
fn templateDefaults.script.securityContext.seLinuxOptions.withType
withType(type)
"Type is a SELinux type label that applies to the container."
fn templateDefaults.script.securityContext.seLinuxOptions.withUser
withUser(user)
"User is a SELinux user label that applies to the container."
obj templateDefaults.script.securityContext.seccompProfile
"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."
fn templateDefaults.script.securityContext.seccompProfile.withLocalhostProfile
withLocalhostProfile(localhostProfile)
"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."
fn templateDefaults.script.securityContext.seccompProfile.withType
withType(type)
"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\"
indicates a profile defined in a file on the node should be used. The file's location relative to \"RuntimeDefault\"
represents the default container runtime seccomp profile.\n - \"Unconfined\"
indicates no seccomp profile is applied (A.K.A. unconfined)."
obj templateDefaults.script.securityContext.windowsOptions
"WindowsSecurityContextOptions contain Windows-specific options and credentials."
fn templateDefaults.script.securityContext.windowsOptions.withGmsaCredentialSpec
withGmsaCredentialSpec(gmsaCredentialSpec)
"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."
fn templateDefaults.script.securityContext.windowsOptions.withGmsaCredentialSpecName
withGmsaCredentialSpecName(gmsaCredentialSpecName)
"GMSACredentialSpecName is the name of the GMSA credential spec to use."
fn templateDefaults.script.securityContext.windowsOptions.withHostProcess
withHostProcess(hostProcess)
"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."
fn templateDefaults.script.securityContext.windowsOptions.withRunAsUserName
withRunAsUserName(runAsUserName)
"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
obj templateDefaults.script.startupProbe
"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."
fn templateDefaults.script.startupProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."
fn templateDefaults.script.startupProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn templateDefaults.script.startupProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."
fn templateDefaults.script.startupProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn templateDefaults.script.startupProbe.withTerminationGracePeriodSeconds
withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)
"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."
fn templateDefaults.script.startupProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj templateDefaults.script.startupProbe.exec
"ExecAction describes a \"run in container\" action."
fn templateDefaults.script.startupProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn templateDefaults.script.startupProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj templateDefaults.script.startupProbe.grpc
fn templateDefaults.script.startupProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn templateDefaults.script.startupProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."
obj templateDefaults.script.startupProbe.httpGet
"HTTPGetAction describes an action based on HTTP Get requests."
fn templateDefaults.script.startupProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."
fn templateDefaults.script.startupProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn templateDefaults.script.startupProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn templateDefaults.script.startupProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn templateDefaults.script.startupProbe.httpGet.withPort
withPort(port)
fn templateDefaults.script.startupProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\"
means that the scheme used will be http://\n - \"HTTPS\"
means that the scheme used will be https://"
obj templateDefaults.script.startupProbe.tcpSocket
"TCPSocketAction describes an action based on opening a socket"
fn templateDefaults.script.startupProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn templateDefaults.script.startupProbe.tcpSocket.withPort
withPort(port)
obj templateDefaults.securityContext
"PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext."
fn templateDefaults.securityContext.withFsGroup
withFsGroup(fsGroup)
"A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.securityContext.withFsGroupChangePolicy
withFsGroupChangePolicy(fsGroupChangePolicy)
"fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.securityContext.withRunAsGroup
withRunAsGroup(runAsGroup)
"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.securityContext.withRunAsNonRoot
withRunAsNonRoot(runAsNonRoot)
"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
fn templateDefaults.securityContext.withRunAsUser
withRunAsUser(runAsUser)
"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.securityContext.withSupplementalGroups
withSupplementalGroups(supplementalGroups)
"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.securityContext.withSupplementalGroupsMixin
withSupplementalGroupsMixin(supplementalGroups)
"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."
Note: This function appends passed data to existing values
fn templateDefaults.securityContext.withSysctls
withSysctls(sysctls)
"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."
fn templateDefaults.securityContext.withSysctlsMixin
withSysctlsMixin(sysctls)
"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."
Note: This function appends passed data to existing values
obj templateDefaults.securityContext.seLinuxOptions
"SELinuxOptions are the labels to be applied to the container"
fn templateDefaults.securityContext.seLinuxOptions.withLevel
withLevel(level)
"Level is SELinux level label that applies to the container."
fn templateDefaults.securityContext.seLinuxOptions.withRole
withRole(role)
"Role is a SELinux role label that applies to the container."
fn templateDefaults.securityContext.seLinuxOptions.withType
withType(type)
"Type is a SELinux type label that applies to the container."
fn templateDefaults.securityContext.seLinuxOptions.withUser
withUser(user)
"User is a SELinux user label that applies to the container."
obj templateDefaults.securityContext.seccompProfile
"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."
fn templateDefaults.securityContext.seccompProfile.withLocalhostProfile
withLocalhostProfile(localhostProfile)
"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."
fn templateDefaults.securityContext.seccompProfile.withType
withType(type)
"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\"
indicates a profile defined in a file on the node should be used. The file's location relative to \"RuntimeDefault\"
represents the default container runtime seccomp profile.\n - \"Unconfined\"
indicates no seccomp profile is applied (A.K.A. unconfined)."
obj templateDefaults.securityContext.windowsOptions
"WindowsSecurityContextOptions contain Windows-specific options and credentials."
fn templateDefaults.securityContext.windowsOptions.withGmsaCredentialSpec
withGmsaCredentialSpec(gmsaCredentialSpec)
"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."
fn templateDefaults.securityContext.windowsOptions.withGmsaCredentialSpecName
withGmsaCredentialSpecName(gmsaCredentialSpecName)
"GMSACredentialSpecName is the name of the GMSA credential spec to use."
fn templateDefaults.securityContext.windowsOptions.withHostProcess
withHostProcess(hostProcess)
"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."
fn templateDefaults.securityContext.windowsOptions.withRunAsUserName
withRunAsUserName(runAsUserName)
"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."
obj templateDefaults.suspend
"SuspendTemplate is a template subtype to suspend a workflow at a predetermined point in time"
fn templateDefaults.suspend.withDuration
withDuration(duration)
"Duration is the seconds to wait before automatically resuming a template"
obj templateDefaults.synchronization
"Synchronization holds synchronization lock configuration"
obj templateDefaults.synchronization.mutex
"Mutex holds Mutex configuration"
fn templateDefaults.synchronization.mutex.withName
withName(name)
"name of the mutex"
obj templateDefaults.synchronization.semaphore
"SemaphoreRef is a reference of Semaphore"
obj templateDefaults.synchronization.semaphore.configMapKeyRef
"Selects a key from a ConfigMap."
fn templateDefaults.synchronization.semaphore.configMapKeyRef.withKey
withKey(key)
"The key to select."
fn templateDefaults.synchronization.semaphore.configMapKeyRef.withName
withName(name)
"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn templateDefaults.synchronization.semaphore.configMapKeyRef.withOptional
withOptional(optional)
"Specify whether the ConfigMap or its key must be defined"
obj ttlStrategy
"TTLStrategy is the strategy for the time to live depending on if the workflow succeeded or failed"
fn ttlStrategy.withSecondsAfterCompletion
withSecondsAfterCompletion(secondsAfterCompletion)
"SecondsAfterCompletion is the number of seconds to live after completion"
fn ttlStrategy.withSecondsAfterFailure
withSecondsAfterFailure(secondsAfterFailure)
"SecondsAfterFailure is the number of seconds to live after failure"
fn ttlStrategy.withSecondsAfterSuccess
withSecondsAfterSuccess(secondsAfterSuccess)
"SecondsAfterSuccess is the number of seconds to live after success"
obj volumeClaimGC
"VolumeClaimGC describes how to delete volumes from completed Workflows"
fn volumeClaimGC.withStrategy
withStrategy(strategy)
"Strategy is the strategy to use. One of \"OnWorkflowCompletion\", \"OnWorkflowSuccess\
obj workflowMetadata
fn workflowMetadata.withAnnotations
withAnnotations(annotations)
fn workflowMetadata.withAnnotationsMixin
withAnnotationsMixin(annotations)
Note: This function appends passed data to existing values
fn workflowMetadata.withLabels
withLabels(labels)
fn workflowMetadata.withLabelsFrom
withLabelsFrom(labelsFrom)
fn workflowMetadata.withLabelsFromMixin
withLabelsFromMixin(labelsFrom)
Note: This function appends passed data to existing values
fn workflowMetadata.withLabelsMixin
withLabelsMixin(labels)
Note: This function appends passed data to existing values
obj workflowTemplateRef
"WorkflowTemplateRef is a reference to a WorkflowTemplate resource."
fn workflowTemplateRef.withClusterScope
withClusterScope(clusterScope)
"ClusterScope indicates the referred template is cluster scoped (i.e. a ClusterWorkflowTemplate)."
fn workflowTemplateRef.withName
withName(name)
"Name is the resource name of the workflow template."