Skip to content

workflow.v1alpha1.workflowSpec

"WorkflowSpec is the specification of a Workflow."

Index

Fields

fn withActiveDeadlineSeconds

withActiveDeadlineSeconds(activeDeadlineSeconds)

"Optional duration in seconds relative to the workflow start time which the workflow is allowed to run before the controller terminates the io.argoproj.workflow.v1alpha1. A value of zero is used to terminate a Running workflow"

fn withArchiveLogs

withArchiveLogs(archiveLogs)

"ArchiveLogs indicates if the container logs should be archived"

fn withAutomountServiceAccountToken

withAutomountServiceAccountToken(automountServiceAccountToken)

"AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in pods. ServiceAccountName of ExecutorConfig must be specified if this value is false."

fn withDnsPolicy

withDnsPolicy(dnsPolicy)

"Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."

fn withEntrypoint

withEntrypoint(entrypoint)

"Entrypoint is a template reference to the starting point of the io.argoproj.workflow.v1alpha1."

fn withHooks

withHooks(hooks)

"Hooks holds the lifecycle hook which is invoked at lifecycle of step, irrespective of the success, failure, or error status of the primary step"

fn withHooksMixin

withHooksMixin(hooks)

"Hooks holds the lifecycle hook which is invoked at lifecycle of step, irrespective of the success, failure, or error status of the primary step"

Note: This function appends passed data to existing values

fn withHostAliases

withHostAliases(hostAliases)

fn withHostAliasesMixin

withHostAliasesMixin(hostAliases)

Note: This function appends passed data to existing values

fn withHostNetwork

withHostNetwork(hostNetwork)

"Host networking requested for this workflow pod. Default to false."

fn withImagePullSecrets

withImagePullSecrets(imagePullSecrets)

"ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod"

fn withImagePullSecretsMixin

withImagePullSecretsMixin(imagePullSecrets)

"ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod"

Note: This function appends passed data to existing values

fn withNodeSelector

withNodeSelector(nodeSelector)

"NodeSelector is a selector which will result in all pods of the workflow to be scheduled on the selected node(s). This is able to be overridden by a nodeSelector specified in the template."

fn withNodeSelectorMixin

withNodeSelectorMixin(nodeSelector)

"NodeSelector is a selector which will result in all pods of the workflow to be scheduled on the selected node(s). This is able to be overridden by a nodeSelector specified in the template."

Note: This function appends passed data to existing values

fn withOnExit

withOnExit(onExit)

"OnExit is a template reference which is invoked at the end of the workflow, irrespective of the success, failure, or error of the primary io.argoproj.workflow.v1alpha1."

fn withParallelism

withParallelism(parallelism)

"Parallelism limits the max total parallel pods that can execute at the same time in a workflow"

fn withPodPriority

withPodPriority(podPriority)

"Priority to apply to workflow pods. DEPRECATED: Use PodPriorityClassName instead."

fn withPodPriorityClassName

withPodPriorityClassName(podPriorityClassName)

"PriorityClassName to apply to workflow pods."

fn withPodSpecPatch

withPodSpecPatch(podSpecPatch)

"PodSpecPatch holds strategic merge patch to apply against the pod spec. Allows parameterization of container fields which are not strings (e.g. resource limits)."

fn withPriority

withPriority(priority)

"Priority is used if controller is configured to process limited number of workflows in parallel. Workflows with higher priority are processed first."

fn withSchedulerName

withSchedulerName(schedulerName)

"Set scheduler name for all pods. Will be overridden if container/script template's scheduler name is set. Default scheduler will be used if neither specified."

fn withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName is the name of the ServiceAccount to run all pods of the workflow as."

fn withShutdown

withShutdown(shutdown)

"Shutdown will shutdown the workflow according to its ShutdownStrategy"

fn withSuspend

withSuspend(suspend)

"Suspend will suspend the workflow and prevent execution of any future steps in the workflow"

fn withTemplates

withTemplates(templates)

"Templates is a list of workflow templates used in a workflow"

fn withTemplatesMixin

withTemplatesMixin(templates)

"Templates is a list of workflow templates used in a workflow"

Note: This function appends passed data to existing values

fn withTolerations

withTolerations(tolerations)

"Tolerations to apply to workflow pods."

fn withTolerationsMixin

withTolerationsMixin(tolerations)

"Tolerations to apply to workflow pods."

Note: This function appends passed data to existing values

fn withVolumeClaimTemplates

withVolumeClaimTemplates(volumeClaimTemplates)

"VolumeClaimTemplates is a list of claims that containers are allowed to reference. The Workflow controller will create the claims at the beginning of the workflow and delete the claims upon completion of the workflow"

fn withVolumeClaimTemplatesMixin

withVolumeClaimTemplatesMixin(volumeClaimTemplates)

"VolumeClaimTemplates is a list of claims that containers are allowed to reference. The Workflow controller will create the claims at the beginning of the workflow and delete the claims upon completion of the workflow"

Note: This function appends passed data to existing values

fn withVolumes

withVolumes(volumes)

"Volumes is a list of volumes that can be mounted by containers in a io.argoproj.workflow.v1alpha1."

fn withVolumesMixin

withVolumesMixin(volumes)

"Volumes is a list of volumes that can be mounted by containers in a io.argoproj.workflow.v1alpha1."

Note: This function appends passed data to existing values

obj affinity

"Affinity is a group of affinity scheduling rules."

obj affinity.nodeAffinity

"Node affinity is a group of node affinity scheduling rules."

fn affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecution

withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."

fn affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin

withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."

Note: This function appends passed data to existing values

obj affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution

"A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms."

fn affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTerms

withNodeSelectorTerms(nodeSelectorTerms)

"Required. A list of node selector terms. The terms are ORed."

fn affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTermsMixin

withNodeSelectorTermsMixin(nodeSelectorTerms)

"Required. A list of node selector terms. The terms are ORed."

Note: This function appends passed data to existing values

obj affinity.podAffinity

"Pod affinity is a group of inter pod affinity scheduling rules."

fn affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecution

withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

fn affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin

withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

Note: This function appends passed data to existing values

fn affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecution

withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)

"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

fn affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin

withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)

"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

Note: This function appends passed data to existing values

obj affinity.podAntiAffinity

"Pod anti affinity is a group of inter pod anti affinity scheduling rules."

fn affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecution

withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

fn affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin

withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

Note: This function appends passed data to existing values

fn affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecution

withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)

"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

fn affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin

withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)

"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

Note: This function appends passed data to existing values

obj arguments

"Arguments to a template"

fn arguments.withArtifacts

withArtifacts(artifacts)

"Artifacts is the list of artifacts to pass to the template or workflow"

fn arguments.withArtifactsMixin

withArtifactsMixin(artifacts)

"Artifacts is the list of artifacts to pass to the template or workflow"

Note: This function appends passed data to existing values

fn arguments.withParameters

withParameters(parameters)

"Parameters is the list of parameters to pass to the template or workflow"

fn arguments.withParametersMixin

withParametersMixin(parameters)

"Parameters is the list of parameters to pass to the template or workflow"

Note: This function appends passed data to existing values

obj artifactGC

"ArtifactGC describes how to delete artifacts from completed Workflows"

fn artifactGC.withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName is an optional field for specifying the Service Account that should be assigned to the Pod doing the deletion"

fn artifactGC.withStrategy

withStrategy(strategy)

"Strategy is the strategy to use."

obj artifactGC.podMetadata

"Pod metdata"

fn artifactGC.podMetadata.withAnnotations

withAnnotations(annotations)

fn artifactGC.podMetadata.withAnnotationsMixin

withAnnotationsMixin(annotations)

Note: This function appends passed data to existing values

fn artifactGC.podMetadata.withLabels

withLabels(labels)

fn artifactGC.podMetadata.withLabelsMixin

withLabelsMixin(labels)

Note: This function appends passed data to existing values

obj artifactRepositoryRef

fn artifactRepositoryRef.withConfigMap

withConfigMap(configMap)

"The name of the config map. Defaults to \"artifact-repositories\"."

fn artifactRepositoryRef.withKey

withKey(key)

"The config map key. Defaults to the value of the \"workflows.argoproj.io/default-artifact-repository\" annotation."

obj dnsConfig

"PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy."

fn dnsConfig.withNameservers

withNameservers(nameservers)

"A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed."

fn dnsConfig.withNameserversMixin

withNameserversMixin(nameservers)

"A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed."

Note: This function appends passed data to existing values

fn dnsConfig.withOptions

withOptions(options)

"A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy."

fn dnsConfig.withOptionsMixin

withOptionsMixin(options)

"A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy."

Note: This function appends passed data to existing values

fn dnsConfig.withSearches

withSearches(searches)

"A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed."

fn dnsConfig.withSearchesMixin

withSearchesMixin(searches)

"A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed."

Note: This function appends passed data to existing values

obj executor

"ExecutorConfig holds configurations of an executor container."

fn executor.withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName specifies the service account name of the executor container."

obj metrics

"Metrics are a list of metrics emitted from a Workflow/Template"

fn metrics.withPrometheus

withPrometheus(prometheus)

"Prometheus is a list of prometheus metrics to be emitted"

fn metrics.withPrometheusMixin

withPrometheusMixin(prometheus)

"Prometheus is a list of prometheus metrics to be emitted"

Note: This function appends passed data to existing values

obj podDisruptionBudget

"PodDisruptionBudgetSpec is a description of a PodDisruptionBudget."

fn podDisruptionBudget.withMaxUnavailable

withMaxUnavailable(maxUnavailable)

fn podDisruptionBudget.withMinAvailable

withMinAvailable(minAvailable)

obj podDisruptionBudget.selector

"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects."

fn podDisruptionBudget.selector.withMatchExpressions

withMatchExpressions(matchExpressions)

"matchExpressions is a list of label selector requirements. The requirements are ANDed."

fn podDisruptionBudget.selector.withMatchExpressionsMixin

withMatchExpressionsMixin(matchExpressions)

"matchExpressions is a list of label selector requirements. The requirements are ANDed."

Note: This function appends passed data to existing values

fn podDisruptionBudget.selector.withMatchLabels

withMatchLabels(matchLabels)

"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."

fn podDisruptionBudget.selector.withMatchLabelsMixin

withMatchLabelsMixin(matchLabels)

"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."

Note: This function appends passed data to existing values

obj podGC

"PodGC describes how to delete completed pods as they complete"

fn podGC.withStrategy

withStrategy(strategy)

"Strategy is the strategy to use. One of \"OnPodCompletion\", \"OnPodSuccess\", \"OnWorkflowCompletion\", \"OnWorkflowSuccess\

obj podGC.labelSelector

"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects."

fn podGC.labelSelector.withMatchExpressions

withMatchExpressions(matchExpressions)

"matchExpressions is a list of label selector requirements. The requirements are ANDed."

fn podGC.labelSelector.withMatchExpressionsMixin

withMatchExpressionsMixin(matchExpressions)

"matchExpressions is a list of label selector requirements. The requirements are ANDed."

Note: This function appends passed data to existing values

fn podGC.labelSelector.withMatchLabels

withMatchLabels(matchLabels)

"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."

fn podGC.labelSelector.withMatchLabelsMixin

withMatchLabelsMixin(matchLabels)

"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."

Note: This function appends passed data to existing values

obj podMetadata

"Pod metdata"

fn podMetadata.withAnnotations

withAnnotations(annotations)

fn podMetadata.withAnnotationsMixin

withAnnotationsMixin(annotations)

Note: This function appends passed data to existing values

fn podMetadata.withLabels

withLabels(labels)

fn podMetadata.withLabelsMixin

withLabelsMixin(labels)

Note: This function appends passed data to existing values

obj retryStrategy

"RetryStrategy provides controls on how to retry a workflow step"

fn retryStrategy.withExpression

withExpression(expression)

"Expression is a condition expression for when a node will be retried. If it evaluates to false, the node will not be retried and the retry strategy will be ignored"

fn retryStrategy.withLimit

withLimit(limit)

fn retryStrategy.withRetryPolicy

withRetryPolicy(retryPolicy)

"RetryPolicy is a policy of NodePhase statuses that will be retried"

obj retryStrategy.affinity

"RetryAffinity prevents running steps on the same host."

fn retryStrategy.affinity.withNodeAntiAffinity

withNodeAntiAffinity(nodeAntiAffinity)

"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."

fn retryStrategy.affinity.withNodeAntiAffinityMixin

withNodeAntiAffinityMixin(nodeAntiAffinity)

"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."

Note: This function appends passed data to existing values

obj retryStrategy.backoff

"Backoff is a backoff strategy to use within retryStrategy"

fn retryStrategy.backoff.withDuration

withDuration(duration)

"Duration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. \"2m\", \"1h\")"

fn retryStrategy.backoff.withFactor

withFactor(factor)

fn retryStrategy.backoff.withMaxDuration

withMaxDuration(maxDuration)

"MaxDuration is the maximum amount of time allowed for the backoff strategy"

obj securityContext

"PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext."

fn securityContext.withFsGroup

withFsGroup(fsGroup)

"A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows."

fn securityContext.withFsGroupChangePolicy

withFsGroupChangePolicy(fsGroupChangePolicy)

"fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used. Note that this field cannot be set when spec.os.name is windows."

fn securityContext.withRunAsGroup

withRunAsGroup(runAsGroup)

"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."

fn securityContext.withRunAsNonRoot

withRunAsNonRoot(runAsNonRoot)

"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

fn securityContext.withRunAsUser

withRunAsUser(runAsUser)

"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."

fn securityContext.withSupplementalGroups

withSupplementalGroups(supplementalGroups)

"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."

fn securityContext.withSupplementalGroupsMixin

withSupplementalGroupsMixin(supplementalGroups)

"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."

Note: This function appends passed data to existing values

fn securityContext.withSysctls

withSysctls(sysctls)

"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."

fn securityContext.withSysctlsMixin

withSysctlsMixin(sysctls)

"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."

Note: This function appends passed data to existing values

obj securityContext.seLinuxOptions

"SELinuxOptions are the labels to be applied to the container"

fn securityContext.seLinuxOptions.withLevel

withLevel(level)

"Level is SELinux level label that applies to the container."

fn securityContext.seLinuxOptions.withRole

withRole(role)

"Role is a SELinux role label that applies to the container."

fn securityContext.seLinuxOptions.withType

withType(type)

"Type is a SELinux type label that applies to the container."

fn securityContext.seLinuxOptions.withUser

withUser(user)

"User is a SELinux user label that applies to the container."

obj securityContext.seccompProfile

"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."

fn securityContext.seccompProfile.withLocalhostProfile

withLocalhostProfile(localhostProfile)

"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."

fn securityContext.seccompProfile.withType

withType(type)

"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\" indicates a profile defined in a file on the node should be used. The file's location relative to /seccomp.\n - \"RuntimeDefault\" represents the default container runtime seccomp profile.\n - \"Unconfined\" indicates no seccomp profile is applied (A.K.A. unconfined)."

obj securityContext.windowsOptions

"WindowsSecurityContextOptions contain Windows-specific options and credentials."

fn securityContext.windowsOptions.withGmsaCredentialSpec

withGmsaCredentialSpec(gmsaCredentialSpec)

"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."

fn securityContext.windowsOptions.withGmsaCredentialSpecName

withGmsaCredentialSpecName(gmsaCredentialSpecName)

"GMSACredentialSpecName is the name of the GMSA credential spec to use."

fn securityContext.windowsOptions.withHostProcess

withHostProcess(hostProcess)

"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."

fn securityContext.windowsOptions.withRunAsUserName

withRunAsUserName(runAsUserName)

"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

obj synchronization

"Synchronization holds synchronization lock configuration"

obj synchronization.mutex

"Mutex holds Mutex configuration"

fn synchronization.mutex.withName

withName(name)

"name of the mutex"

obj synchronization.semaphore

"SemaphoreRef is a reference of Semaphore"

obj synchronization.semaphore.configMapKeyRef

"Selects a key from a ConfigMap."

fn synchronization.semaphore.configMapKeyRef.withKey

withKey(key)

"The key to select."

fn synchronization.semaphore.configMapKeyRef.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn synchronization.semaphore.configMapKeyRef.withOptional

withOptional(optional)

"Specify whether the ConfigMap or its key must be defined"

obj templateDefaults

"Template is a reusable and composable unit of execution in a workflow"

fn templateDefaults.withActiveDeadlineSeconds

withActiveDeadlineSeconds(activeDeadlineSeconds)

fn templateDefaults.withAutomountServiceAccountToken

withAutomountServiceAccountToken(automountServiceAccountToken)

"AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in pods. ServiceAccountName of ExecutorConfig must be specified if this value is false."

fn templateDefaults.withDaemon

withDaemon(daemon)

"Deamon will allow a workflow to proceed to the next step so long as the container reaches readiness"

fn templateDefaults.withFailFast

withFailFast(failFast)

"FailFast, if specified, will fail this template if any of its child pods has failed. This is useful for when this template is expanded with withItems, etc."

fn templateDefaults.withHostAliases

withHostAliases(hostAliases)

"HostAliases is an optional list of hosts and IPs that will be injected into the pod spec"

fn templateDefaults.withHostAliasesMixin

withHostAliasesMixin(hostAliases)

"HostAliases is an optional list of hosts and IPs that will be injected into the pod spec"

Note: This function appends passed data to existing values

fn templateDefaults.withInitContainers

withInitContainers(initContainers)

"InitContainers is a list of containers which run before the main container."

fn templateDefaults.withInitContainersMixin

withInitContainersMixin(initContainers)

"InitContainers is a list of containers which run before the main container."

Note: This function appends passed data to existing values

fn templateDefaults.withName

withName(name)

"Name is the name of the template"

fn templateDefaults.withNodeSelector

withNodeSelector(nodeSelector)

"NodeSelector is a selector to schedule this step of the workflow to be run on the selected node(s). Overrides the selector set at the workflow level."

fn templateDefaults.withNodeSelectorMixin

withNodeSelectorMixin(nodeSelector)

"NodeSelector is a selector to schedule this step of the workflow to be run on the selected node(s). Overrides the selector set at the workflow level."

Note: This function appends passed data to existing values

fn templateDefaults.withParallelism

withParallelism(parallelism)

"Parallelism limits the max total parallel pods that can execute at the same time within the boundaries of this template invocation. If additional steps/dag templates are invoked, the pods created by those templates will not be counted towards this total."

fn templateDefaults.withPlugin

withPlugin(plugin)

"Plugin is an Object with exactly one key"

fn templateDefaults.withPluginMixin

withPluginMixin(plugin)

"Plugin is an Object with exactly one key"

Note: This function appends passed data to existing values

fn templateDefaults.withPodSpecPatch

withPodSpecPatch(podSpecPatch)

"PodSpecPatch holds strategic merge patch to apply against the pod spec. Allows parameterization of container fields which are not strings (e.g. resource limits)."

fn templateDefaults.withPriority

withPriority(priority)

"Priority to apply to workflow pods."

fn templateDefaults.withPriorityClassName

withPriorityClassName(priorityClassName)

"PriorityClassName to apply to workflow pods."

fn templateDefaults.withSchedulerName

withSchedulerName(schedulerName)

"If specified, the pod will be dispatched by specified scheduler. Or it will be dispatched by workflow scope scheduler if specified. If neither specified, the pod will be dispatched by default scheduler."

fn templateDefaults.withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName to apply to workflow pods"

fn templateDefaults.withSidecars

withSidecars(sidecars)

"Sidecars is a list of containers which run alongside the main container Sidecars are automatically killed when the main container completes"

fn templateDefaults.withSidecarsMixin

withSidecarsMixin(sidecars)

"Sidecars is a list of containers which run alongside the main container Sidecars are automatically killed when the main container completes"

Note: This function appends passed data to existing values

fn templateDefaults.withSteps

withSteps(steps)

"Steps define a series of sequential/parallel workflow steps"

fn templateDefaults.withStepsMixin

withStepsMixin(steps)

"Steps define a series of sequential/parallel workflow steps"

Note: This function appends passed data to existing values

fn templateDefaults.withTimeout

withTimeout(timeout)

"Timeout allows to set the total node execution timeout duration counting from the node's start time. This duration also includes time in which the node spends in Pending state. This duration may not be applied to Step or DAG templates."

fn templateDefaults.withTolerations

withTolerations(tolerations)

"Tolerations to apply to workflow pods."

fn templateDefaults.withTolerationsMixin

withTolerationsMixin(tolerations)

"Tolerations to apply to workflow pods."

Note: This function appends passed data to existing values

fn templateDefaults.withVolumes

withVolumes(volumes)

"Volumes is a list of volumes that can be mounted by containers in a template."

fn templateDefaults.withVolumesMixin

withVolumesMixin(volumes)

"Volumes is a list of volumes that can be mounted by containers in a template."

Note: This function appends passed data to existing values

obj templateDefaults.affinity

"Affinity is a group of affinity scheduling rules."

obj templateDefaults.affinity.nodeAffinity

"Node affinity is a group of node affinity scheduling rules."

fn templateDefaults.affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecution

withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."

fn templateDefaults.affinity.nodeAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin

withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred."

Note: This function appends passed data to existing values

obj templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution

"A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms."

fn templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTerms

withNodeSelectorTerms(nodeSelectorTerms)

"Required. A list of node selector terms. The terms are ORed."

fn templateDefaults.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.withNodeSelectorTermsMixin

withNodeSelectorTermsMixin(nodeSelectorTerms)

"Required. A list of node selector terms. The terms are ORed."

Note: This function appends passed data to existing values

obj templateDefaults.affinity.podAffinity

"Pod affinity is a group of inter pod affinity scheduling rules."

fn templateDefaults.affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecution

withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

fn templateDefaults.affinity.podAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin

withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

Note: This function appends passed data to existing values

fn templateDefaults.affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecution

withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)

"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

fn templateDefaults.affinity.podAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin

withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)

"If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

Note: This function appends passed data to existing values

obj templateDefaults.affinity.podAntiAffinity

"Pod anti affinity is a group of inter pod anti affinity scheduling rules."

fn templateDefaults.affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecution

withPreferredDuringSchedulingIgnoredDuringExecution(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

fn templateDefaults.affinity.podAntiAffinity.withPreferredDuringSchedulingIgnoredDuringExecutionMixin

withPreferredDuringSchedulingIgnoredDuringExecutionMixin(preferredDuringSchedulingIgnoredDuringExecution)

"The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred."

Note: This function appends passed data to existing values

fn templateDefaults.affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecution

withRequiredDuringSchedulingIgnoredDuringExecution(requiredDuringSchedulingIgnoredDuringExecution)

"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

fn templateDefaults.affinity.podAntiAffinity.withRequiredDuringSchedulingIgnoredDuringExecutionMixin

withRequiredDuringSchedulingIgnoredDuringExecutionMixin(requiredDuringSchedulingIgnoredDuringExecution)

"If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied."

Note: This function appends passed data to existing values

obj templateDefaults.archiveLocation

"ArtifactLocation describes a location for a single or multiple artifacts. It is used as single artifact in the context of inputs/outputs (e.g. outputs.artifacts.artname). It is also used to describe the location of multiple artifacts such as the archive location of a single workflow step, which the executor will use as a default location to store its files."

fn templateDefaults.archiveLocation.withArchiveLogs

withArchiveLogs(archiveLogs)

"ArchiveLogs indicates if the container logs should be archived"

obj templateDefaults.archiveLocation.artifactory

"ArtifactoryArtifact is the location of an artifactory artifact"

fn templateDefaults.archiveLocation.artifactory.withUrl

withUrl(url)

"URL of the artifact"

obj templateDefaults.archiveLocation.artifactory.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.artifactory.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.artifactory.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.artifactory.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.artifactory.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.artifactory.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.artifactory.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.artifactory.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.azure

"AzureArtifact is the location of a an Azure Storage artifact"

fn templateDefaults.archiveLocation.azure.withBlob

withBlob(blob)

"Blob is the blob name (i.e., path) in the container where the artifact resides"

fn templateDefaults.archiveLocation.azure.withContainer

withContainer(container)

"Container is the container where resources will be stored"

fn templateDefaults.archiveLocation.azure.withEndpoint

withEndpoint(endpoint)

"Endpoint is the service url associated with an account. It is most likely \"https://.blob.core.windows.net\

fn templateDefaults.archiveLocation.azure.withUseSDKCreds

withUseSDKCreds(useSDKCreds)

"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."

obj templateDefaults.archiveLocation.azure.accountKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.azure.accountKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.azure.accountKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.azure.accountKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.gcs

"GCSArtifact is the location of a GCS artifact"

fn templateDefaults.archiveLocation.gcs.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.archiveLocation.gcs.withKey

withKey(key)

"Key is the path in the bucket where the artifact resides"

obj templateDefaults.archiveLocation.gcs.serviceAccountKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.gcs.serviceAccountKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.gcs.serviceAccountKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.gcs.serviceAccountKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.git

"GitArtifact is the location of an git artifact"

fn templateDefaults.archiveLocation.git.withBranch

withBranch(branch)

"Branch is the branch to fetch when SingleBranch is enabled"

fn templateDefaults.archiveLocation.git.withDepth

withDepth(depth)

"Depth specifies clones/fetches should be shallow and include the given number of commits from the branch tip"

fn templateDefaults.archiveLocation.git.withDisableSubmodules

withDisableSubmodules(disableSubmodules)

"DisableSubmodules disables submodules during git clone"

fn templateDefaults.archiveLocation.git.withFetch

withFetch(fetch)

"Fetch specifies a number of refs that should be fetched before checkout"

fn templateDefaults.archiveLocation.git.withFetchMixin

withFetchMixin(fetch)

"Fetch specifies a number of refs that should be fetched before checkout"

Note: This function appends passed data to existing values

fn templateDefaults.archiveLocation.git.withInsecureIgnoreHostKey

withInsecureIgnoreHostKey(insecureIgnoreHostKey)

"InsecureIgnoreHostKey disables SSH strict host key checking during git clone"

fn templateDefaults.archiveLocation.git.withRepo

withRepo(repo)

"Repo is the git repository"

fn templateDefaults.archiveLocation.git.withRevision

withRevision(revision)

"Revision is the git commit, tag, branch to checkout"

fn templateDefaults.archiveLocation.git.withSingleBranch

withSingleBranch(singleBranch)

"SingleBranch enables single branch clone, using the branch parameter"

obj templateDefaults.archiveLocation.git.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.git.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.git.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.git.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.git.sshPrivateKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.git.sshPrivateKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.git.sshPrivateKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.git.sshPrivateKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.git.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.git.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.git.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.git.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.hdfs

"HDFSArtifact is the location of an HDFS artifact"

fn templateDefaults.archiveLocation.hdfs.withAddresses

withAddresses(addresses)

"Addresses is accessible addresses of HDFS name nodes"

fn templateDefaults.archiveLocation.hdfs.withAddressesMixin

withAddressesMixin(addresses)

"Addresses is accessible addresses of HDFS name nodes"

Note: This function appends passed data to existing values

fn templateDefaults.archiveLocation.hdfs.withForce

withForce(force)

"Force copies a file forcibly even if it exists"

fn templateDefaults.archiveLocation.hdfs.withHdfsUser

withHdfsUser(hdfsUser)

"HDFSUser is the user to access HDFS file system. It is ignored if either ccache or keytab is used."

fn templateDefaults.archiveLocation.hdfs.withKrbRealm

withKrbRealm(krbRealm)

"KrbRealm is the Kerberos realm used with Kerberos keytab It must be set if keytab is used."

fn templateDefaults.archiveLocation.hdfs.withKrbServicePrincipalName

withKrbServicePrincipalName(krbServicePrincipalName)

"KrbServicePrincipalName is the principal name of Kerberos service It must be set if either ccache or keytab is used."

fn templateDefaults.archiveLocation.hdfs.withKrbUsername

withKrbUsername(krbUsername)

"KrbUsername is the Kerberos username used with Kerberos keytab It must be set if keytab is used."

fn templateDefaults.archiveLocation.hdfs.withPath

withPath(path)

"Path is a file path in HDFS"

obj templateDefaults.archiveLocation.hdfs.krbCCacheSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.hdfs.krbCCacheSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.hdfs.krbCCacheSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.hdfs.krbCCacheSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.hdfs.krbConfigConfigMap

"Selects a key from a ConfigMap."

fn templateDefaults.archiveLocation.hdfs.krbConfigConfigMap.withKey

withKey(key)

"The key to select."

fn templateDefaults.archiveLocation.hdfs.krbConfigConfigMap.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.hdfs.krbConfigConfigMap.withOptional

withOptional(optional)

"Specify whether the ConfigMap or its key must be defined"

obj templateDefaults.archiveLocation.hdfs.krbKeytabSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.hdfs.krbKeytabSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.hdfs.krbKeytabSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.hdfs.krbKeytabSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http

"HTTPArtifact allows a file served on HTTP to be placed as an input artifact in a container"

fn templateDefaults.archiveLocation.http.withHeaders

withHeaders(headers)

"Headers are an optional list of headers to send with HTTP requests for artifacts"

fn templateDefaults.archiveLocation.http.withHeadersMixin

withHeadersMixin(headers)

"Headers are an optional list of headers to send with HTTP requests for artifacts"

Note: This function appends passed data to existing values

fn templateDefaults.archiveLocation.http.withUrl

withUrl(url)

"URL of the artifact"

obj templateDefaults.archiveLocation.http.auth

obj templateDefaults.archiveLocation.http.auth.basicAuth

"BasicAuth describes the secret selectors required for basic authentication"

obj templateDefaults.archiveLocation.http.auth.basicAuth.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.basicAuth.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.basicAuth.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.basicAuth.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http.auth.basicAuth.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.basicAuth.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.basicAuth.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.basicAuth.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http.auth.clientCert

"ClientCertAuth holds necessary information for client authentication via certificates"

obj templateDefaults.archiveLocation.http.auth.clientCert.clientCertSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.clientCert.clientCertSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.clientCert.clientCertSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.clientCert.clientCertSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http.auth.clientCert.clientKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.clientCert.clientKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.clientCert.clientKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.clientCert.clientKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http.auth.oauth2

"OAuth2Auth holds all information for client authentication via OAuth2 tokens"

fn templateDefaults.archiveLocation.http.auth.oauth2.withEndpointParams

withEndpointParams(endpointParams)

fn templateDefaults.archiveLocation.http.auth.oauth2.withEndpointParamsMixin

withEndpointParamsMixin(endpointParams)

Note: This function appends passed data to existing values

fn templateDefaults.archiveLocation.http.auth.oauth2.withScopes

withScopes(scopes)

fn templateDefaults.archiveLocation.http.auth.oauth2.withScopesMixin

withScopesMixin(scopes)

Note: This function appends passed data to existing values

obj templateDefaults.archiveLocation.http.auth.oauth2.clientIDSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.oauth2.clientIDSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.oauth2.clientIDSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.oauth2.clientIDSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http.auth.oauth2.clientSecretSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.oauth2.clientSecretSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.oauth2.clientSecretSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.oauth2.clientSecretSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.http.auth.oauth2.tokenURLSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.http.auth.oauth2.tokenURLSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.http.auth.oauth2.tokenURLSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.http.auth.oauth2.tokenURLSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.oss

"OSSArtifact is the location of an Alibaba Cloud OSS artifact"

fn templateDefaults.archiveLocation.oss.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.archiveLocation.oss.withCreateBucketIfNotPresent

withCreateBucketIfNotPresent(createBucketIfNotPresent)

"CreateBucketIfNotPresent tells the driver to attempt to create the OSS bucket for output artifacts, if it doesn't exist"

fn templateDefaults.archiveLocation.oss.withEndpoint

withEndpoint(endpoint)

"Endpoint is the hostname of the bucket endpoint"

fn templateDefaults.archiveLocation.oss.withKey

withKey(key)

"Key is the path in the bucket where the artifact resides"

fn templateDefaults.archiveLocation.oss.withSecurityToken

withSecurityToken(securityToken)

"SecurityToken is the user's temporary security token. For more details, check out: https://www.alibabacloud.com/help/doc-detail/100624.htm"

obj templateDefaults.archiveLocation.oss.accessKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.oss.accessKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.oss.accessKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.oss.accessKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.oss.lifecycleRule

"OSSLifecycleRule specifies how to manage bucket's lifecycle"

fn templateDefaults.archiveLocation.oss.lifecycleRule.withMarkDeletionAfterDays

withMarkDeletionAfterDays(markDeletionAfterDays)

"MarkDeletionAfterDays is the number of days before we delete objects in the bucket"

fn templateDefaults.archiveLocation.oss.lifecycleRule.withMarkInfrequentAccessAfterDays

withMarkInfrequentAccessAfterDays(markInfrequentAccessAfterDays)

"MarkInfrequentAccessAfterDays is the number of days before we convert the objects in the bucket to Infrequent Access (IA) storage type"

obj templateDefaults.archiveLocation.oss.secretKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.oss.secretKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.oss.secretKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.oss.secretKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.raw

"RawArtifact allows raw string content to be placed as an artifact in a container"

fn templateDefaults.archiveLocation.raw.withData

withData(data)

"Data is the string contents of the artifact"

obj templateDefaults.archiveLocation.s3

"S3Artifact is the location of an S3 artifact"

fn templateDefaults.archiveLocation.s3.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.archiveLocation.s3.withEndpoint

withEndpoint(endpoint)

"Endpoint is the hostname of the bucket endpoint"

fn templateDefaults.archiveLocation.s3.withInsecure

withInsecure(insecure)

"Insecure will connect to the service with TLS"

fn templateDefaults.archiveLocation.s3.withKey

withKey(key)

"Key is the key in the bucket where the artifact resides"

fn templateDefaults.archiveLocation.s3.withRegion

withRegion(region)

"Region contains the optional bucket region"

fn templateDefaults.archiveLocation.s3.withRoleARN

withRoleARN(roleARN)

"RoleARN is the Amazon Resource Name (ARN) of the role to assume."

fn templateDefaults.archiveLocation.s3.withUseSDKCreds

withUseSDKCreds(useSDKCreds)

"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."

obj templateDefaults.archiveLocation.s3.accessKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.s3.accessKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.s3.accessKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.s3.accessKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.s3.createBucketIfNotPresent

"CreateS3BucketOptions options used to determine automatic automatic bucket-creation process"

fn templateDefaults.archiveLocation.s3.createBucketIfNotPresent.withObjectLocking

withObjectLocking(objectLocking)

"ObjectLocking Enable object locking"

obj templateDefaults.archiveLocation.s3.encryptionOptions

"S3EncryptionOptions used to determine encryption options during s3 operations"

fn templateDefaults.archiveLocation.s3.encryptionOptions.withEnableEncryption

withEnableEncryption(enableEncryption)

"EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used"

fn templateDefaults.archiveLocation.s3.encryptionOptions.withKmsEncryptionContext

withKmsEncryptionContext(kmsEncryptionContext)

"KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information"

fn templateDefaults.archiveLocation.s3.encryptionOptions.withKmsKeyId

withKmsKeyId(kmsKeyId)

"KMSKeyId tells the driver to encrypt the object using the specified KMS Key."

obj templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.s3.encryptionOptions.serverSideCustomerKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.archiveLocation.s3.secretKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.archiveLocation.s3.secretKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.archiveLocation.s3.secretKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.archiveLocation.s3.secretKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.container

"A single application container that you want to run within a pod."

fn templateDefaults.container.withArgs

withArgs(args)

"Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

fn templateDefaults.container.withArgsMixin

withArgsMixin(args)

"Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

Note: This function appends passed data to existing values

fn templateDefaults.container.withCommand

withCommand(command)

"Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

fn templateDefaults.container.withCommandMixin

withCommandMixin(command)

"Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

Note: This function appends passed data to existing values

fn templateDefaults.container.withEnv

withEnv(env)

"List of environment variables to set in the container. Cannot be updated."

fn templateDefaults.container.withEnvFrom

withEnvFrom(envFrom)

"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."

fn templateDefaults.container.withEnvFromMixin

withEnvFromMixin(envFrom)

"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.container.withEnvMixin

withEnvMixin(env)

"List of environment variables to set in the container. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.container.withImage

withImage(image)

"Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets."

fn templateDefaults.container.withImagePullPolicy

withImagePullPolicy(imagePullPolicy)

"Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images\n\nPossible enum values:\n - \"Always\" means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - \"IfNotPresent\" means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - \"Never\" means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present"

fn templateDefaults.container.withName

withName(name)

"Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated."

fn templateDefaults.container.withPorts

withPorts(ports)

"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."

fn templateDefaults.container.withPortsMixin

withPortsMixin(ports)

"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.container.withStdin

withStdin(stdin)

"Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false."

fn templateDefaults.container.withStdinOnce

withStdinOnce(stdinOnce)

"Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false"

fn templateDefaults.container.withTerminationMessagePath

withTerminationMessagePath(terminationMessagePath)

"Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated."

fn templateDefaults.container.withTerminationMessagePolicy

withTerminationMessagePolicy(terminationMessagePolicy)

"Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.\n\nPossible enum values:\n - \"FallbackToLogsOnError\" will read the most recent contents of the container logs for the container status message when the container exits with an error and the terminationMessagePath has no contents.\n - \"File\" is the default behavior and will set the container status message to the contents of the container's terminationMessagePath when the container exits."

fn templateDefaults.container.withTty

withTty(tty)

"Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false."

fn templateDefaults.container.withVolumeDevices

withVolumeDevices(volumeDevices)

"volumeDevices is the list of block devices to be used by the container."

fn templateDefaults.container.withVolumeDevicesMixin

withVolumeDevicesMixin(volumeDevices)

"volumeDevices is the list of block devices to be used by the container."

Note: This function appends passed data to existing values

fn templateDefaults.container.withVolumeMounts

withVolumeMounts(volumeMounts)

"Pod volumes to mount into the container's filesystem. Cannot be updated."

fn templateDefaults.container.withVolumeMountsMixin

withVolumeMountsMixin(volumeMounts)

"Pod volumes to mount into the container's filesystem. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.container.withWorkingDir

withWorkingDir(workingDir)

"Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated."

obj templateDefaults.container.lifecycle

"Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted."

obj templateDefaults.container.lifecycle.postStart

"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."

obj templateDefaults.container.lifecycle.postStart.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.container.lifecycle.postStart.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.container.lifecycle.postStart.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.container.lifecycle.postStart.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.container.lifecycle.postStart.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.container.lifecycle.postStart.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.container.lifecycle.postStart.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.container.lifecycle.postStart.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.container.lifecycle.postStart.httpGet.withPort

withPort(port)

fn templateDefaults.container.lifecycle.postStart.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.container.lifecycle.postStart.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.container.lifecycle.postStart.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.container.lifecycle.postStart.tcpSocket.withPort

withPort(port)

obj templateDefaults.container.lifecycle.preStop

"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."

obj templateDefaults.container.lifecycle.preStop.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.container.lifecycle.preStop.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.container.lifecycle.preStop.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.container.lifecycle.preStop.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.container.lifecycle.preStop.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.container.lifecycle.preStop.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.container.lifecycle.preStop.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.container.lifecycle.preStop.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.container.lifecycle.preStop.httpGet.withPort

withPort(port)

fn templateDefaults.container.lifecycle.preStop.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.container.lifecycle.preStop.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.container.lifecycle.preStop.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.container.lifecycle.preStop.tcpSocket.withPort

withPort(port)

obj templateDefaults.container.livenessProbe

"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."

fn templateDefaults.container.livenessProbe.withFailureThreshold

withFailureThreshold(failureThreshold)

"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."

fn templateDefaults.container.livenessProbe.withInitialDelaySeconds

withInitialDelaySeconds(initialDelaySeconds)

"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

fn templateDefaults.container.livenessProbe.withPeriodSeconds

withPeriodSeconds(periodSeconds)

"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."

fn templateDefaults.container.livenessProbe.withSuccessThreshold

withSuccessThreshold(successThreshold)

"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."

fn templateDefaults.container.livenessProbe.withTerminationGracePeriodSeconds

withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)

"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."

fn templateDefaults.container.livenessProbe.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

obj templateDefaults.container.livenessProbe.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.container.livenessProbe.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.container.livenessProbe.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.container.livenessProbe.grpc

fn templateDefaults.container.livenessProbe.grpc.withPort

withPort(port)

"Port number of the gRPC service. Number must be in the range 1 to 65535."

fn templateDefaults.container.livenessProbe.grpc.withService

withService(service)

"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."

obj templateDefaults.container.livenessProbe.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.container.livenessProbe.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.container.livenessProbe.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.container.livenessProbe.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.container.livenessProbe.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.container.livenessProbe.httpGet.withPort

withPort(port)

fn templateDefaults.container.livenessProbe.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.container.livenessProbe.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.container.livenessProbe.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.container.livenessProbe.tcpSocket.withPort

withPort(port)

obj templateDefaults.container.readinessProbe

"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."

fn templateDefaults.container.readinessProbe.withFailureThreshold

withFailureThreshold(failureThreshold)

"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."

fn templateDefaults.container.readinessProbe.withInitialDelaySeconds

withInitialDelaySeconds(initialDelaySeconds)

"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

fn templateDefaults.container.readinessProbe.withPeriodSeconds

withPeriodSeconds(periodSeconds)

"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."

fn templateDefaults.container.readinessProbe.withSuccessThreshold

withSuccessThreshold(successThreshold)

"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."

fn templateDefaults.container.readinessProbe.withTerminationGracePeriodSeconds

withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)

"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."

fn templateDefaults.container.readinessProbe.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

obj templateDefaults.container.readinessProbe.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.container.readinessProbe.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.container.readinessProbe.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.container.readinessProbe.grpc

fn templateDefaults.container.readinessProbe.grpc.withPort

withPort(port)

"Port number of the gRPC service. Number must be in the range 1 to 65535."

fn templateDefaults.container.readinessProbe.grpc.withService

withService(service)

"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."

obj templateDefaults.container.readinessProbe.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.container.readinessProbe.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.container.readinessProbe.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.container.readinessProbe.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.container.readinessProbe.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.container.readinessProbe.httpGet.withPort

withPort(port)

fn templateDefaults.container.readinessProbe.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.container.readinessProbe.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.container.readinessProbe.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.container.readinessProbe.tcpSocket.withPort

withPort(port)

obj templateDefaults.container.resources

"ResourceRequirements describes the compute resource requirements."

fn templateDefaults.container.resources.withLimits

withLimits(limits)

"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

fn templateDefaults.container.resources.withLimitsMixin

withLimitsMixin(limits)

"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

Note: This function appends passed data to existing values

fn templateDefaults.container.resources.withRequests

withRequests(requests)

"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

fn templateDefaults.container.resources.withRequestsMixin

withRequestsMixin(requests)

"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

Note: This function appends passed data to existing values

obj templateDefaults.container.securityContext

"SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence."

fn templateDefaults.container.securityContext.withAllowPrivilegeEscalation

withAllowPrivilegeEscalation(allowPrivilegeEscalation)

"AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.container.securityContext.withPrivileged

withPrivileged(privileged)

"Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.container.securityContext.withProcMount

withProcMount(procMount)

"procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.container.securityContext.withReadOnlyRootFilesystem

withReadOnlyRootFilesystem(readOnlyRootFilesystem)

"Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.container.securityContext.withRunAsGroup

withRunAsGroup(runAsGroup)

"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.container.securityContext.withRunAsNonRoot

withRunAsNonRoot(runAsNonRoot)

"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

fn templateDefaults.container.securityContext.withRunAsUser

withRunAsUser(runAsUser)

"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."

obj templateDefaults.container.securityContext.capabilities

"Adds and removes POSIX capabilities from running containers."

fn templateDefaults.container.securityContext.capabilities.withAdd

withAdd(add)

"Added capabilities"

fn templateDefaults.container.securityContext.capabilities.withAddMixin

withAddMixin(add)

"Added capabilities"

Note: This function appends passed data to existing values

fn templateDefaults.container.securityContext.capabilities.withDrop

withDrop(drop)

"Removed capabilities"

fn templateDefaults.container.securityContext.capabilities.withDropMixin

withDropMixin(drop)

"Removed capabilities"

Note: This function appends passed data to existing values

obj templateDefaults.container.securityContext.seLinuxOptions

"SELinuxOptions are the labels to be applied to the container"

fn templateDefaults.container.securityContext.seLinuxOptions.withLevel

withLevel(level)

"Level is SELinux level label that applies to the container."

fn templateDefaults.container.securityContext.seLinuxOptions.withRole

withRole(role)

"Role is a SELinux role label that applies to the container."

fn templateDefaults.container.securityContext.seLinuxOptions.withType

withType(type)

"Type is a SELinux type label that applies to the container."

fn templateDefaults.container.securityContext.seLinuxOptions.withUser

withUser(user)

"User is a SELinux user label that applies to the container."

obj templateDefaults.container.securityContext.seccompProfile

"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."

fn templateDefaults.container.securityContext.seccompProfile.withLocalhostProfile

withLocalhostProfile(localhostProfile)

"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."

fn templateDefaults.container.securityContext.seccompProfile.withType

withType(type)

"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\" indicates a profile defined in a file on the node should be used. The file's location relative to /seccomp.\n - \"RuntimeDefault\" represents the default container runtime seccomp profile.\n - \"Unconfined\" indicates no seccomp profile is applied (A.K.A. unconfined)."

obj templateDefaults.container.securityContext.windowsOptions

"WindowsSecurityContextOptions contain Windows-specific options and credentials."

fn templateDefaults.container.securityContext.windowsOptions.withGmsaCredentialSpec

withGmsaCredentialSpec(gmsaCredentialSpec)

"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."

fn templateDefaults.container.securityContext.windowsOptions.withGmsaCredentialSpecName

withGmsaCredentialSpecName(gmsaCredentialSpecName)

"GMSACredentialSpecName is the name of the GMSA credential spec to use."

fn templateDefaults.container.securityContext.windowsOptions.withHostProcess

withHostProcess(hostProcess)

"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."

fn templateDefaults.container.securityContext.windowsOptions.withRunAsUserName

withRunAsUserName(runAsUserName)

"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

obj templateDefaults.container.startupProbe

"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."

fn templateDefaults.container.startupProbe.withFailureThreshold

withFailureThreshold(failureThreshold)

"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."

fn templateDefaults.container.startupProbe.withInitialDelaySeconds

withInitialDelaySeconds(initialDelaySeconds)

"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

fn templateDefaults.container.startupProbe.withPeriodSeconds

withPeriodSeconds(periodSeconds)

"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."

fn templateDefaults.container.startupProbe.withSuccessThreshold

withSuccessThreshold(successThreshold)

"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."

fn templateDefaults.container.startupProbe.withTerminationGracePeriodSeconds

withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)

"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."

fn templateDefaults.container.startupProbe.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

obj templateDefaults.container.startupProbe.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.container.startupProbe.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.container.startupProbe.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.container.startupProbe.grpc

fn templateDefaults.container.startupProbe.grpc.withPort

withPort(port)

"Port number of the gRPC service. Number must be in the range 1 to 65535."

fn templateDefaults.container.startupProbe.grpc.withService

withService(service)

"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."

obj templateDefaults.container.startupProbe.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.container.startupProbe.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.container.startupProbe.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.container.startupProbe.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.container.startupProbe.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.container.startupProbe.httpGet.withPort

withPort(port)

fn templateDefaults.container.startupProbe.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.container.startupProbe.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.container.startupProbe.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.container.startupProbe.tcpSocket.withPort

withPort(port)

obj templateDefaults.containerSet

fn templateDefaults.containerSet.withContainers

withContainers(containers)

fn templateDefaults.containerSet.withContainersMixin

withContainersMixin(containers)

Note: This function appends passed data to existing values

fn templateDefaults.containerSet.withVolumeMounts

withVolumeMounts(volumeMounts)

fn templateDefaults.containerSet.withVolumeMountsMixin

withVolumeMountsMixin(volumeMounts)

Note: This function appends passed data to existing values

obj templateDefaults.containerSet.retryStrategy

fn templateDefaults.containerSet.retryStrategy.withDuration

withDuration(duration)

"Duration is the time between each retry, examples values are \"300ms\", \"1s\" or \"5m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\"."

fn templateDefaults.containerSet.retryStrategy.withRetries

withRetries(retries)

obj templateDefaults.dag

"DAGTemplate is a template subtype for directed acyclic graph templates"

fn templateDefaults.dag.withFailFast

withFailFast(failFast)

"This flag is for DAG logic. The DAG logic has a built-in \"fail fast\" feature to stop scheduling new steps, as soon as it detects that one of the DAG nodes is failed. Then it waits until all DAG nodes are completed before failing the DAG itself. The FailFast flag default is true, if set to false, it will allow a DAG to run all branches of the DAG to completion (either success or failure), regardless of the failed outcomes of branches in the DAG. More info and example about this feature at https://github.com/argoproj/argo-workflows/issues/1442"

fn templateDefaults.dag.withTarget

withTarget(target)

"Target are one or more names of targets to execute in a DAG"

fn templateDefaults.dag.withTasks

withTasks(tasks)

"Tasks are a list of DAG tasks"

fn templateDefaults.dag.withTasksMixin

withTasksMixin(tasks)

"Tasks are a list of DAG tasks"

Note: This function appends passed data to existing values

obj templateDefaults.data

"Data is a data template"

fn templateDefaults.data.withTransformation

withTransformation(transformation)

"Transformation applies a set of transformations"

fn templateDefaults.data.withTransformationMixin

withTransformationMixin(transformation)

"Transformation applies a set of transformations"

Note: This function appends passed data to existing values

obj templateDefaults.data.source

"DataSource sources external data into a data template"

obj templateDefaults.data.source.artifactPaths

"ArtifactPaths expands a step from a collection of artifacts"

fn templateDefaults.data.source.artifactPaths.withArchiveLogs

withArchiveLogs(archiveLogs)

"ArchiveLogs indicates if the container logs should be archived"

fn templateDefaults.data.source.artifactPaths.withDeleted

withDeleted(deleted)

"Has this been deleted?"

fn templateDefaults.data.source.artifactPaths.withFrom

withFrom(from)

"From allows an artifact to reference an artifact from a previous step"

fn templateDefaults.data.source.artifactPaths.withFromExpression

withFromExpression(fromExpression)

"FromExpression, if defined, is evaluated to specify the value for the artifact"

fn templateDefaults.data.source.artifactPaths.withGlobalName

withGlobalName(globalName)

"GlobalName exports an output artifact to the global scope, making it available as '{{io.argoproj.workflow.v1alpha1.outputs.artifacts.XXXX}} and in workflow.status.outputs.artifacts"

fn templateDefaults.data.source.artifactPaths.withMode

withMode(mode)

"mode bits to use on this file, must be a value between 0 and 0777 set when loading input artifacts."

fn templateDefaults.data.source.artifactPaths.withName

withName(name)

"name of the artifact. must be unique within a template's inputs/outputs."

fn templateDefaults.data.source.artifactPaths.withOptional

withOptional(optional)

"Make Artifacts optional, if Artifacts doesn't generate or exist"

fn templateDefaults.data.source.artifactPaths.withPath

withPath(path)

"Path is the container path to the artifact"

fn templateDefaults.data.source.artifactPaths.withRecurseMode

withRecurseMode(recurseMode)

"If mode is set, apply the permission recursively into the artifact if it is a folder"

fn templateDefaults.data.source.artifactPaths.withSubPath

withSubPath(subPath)

"SubPath allows an artifact to be sourced from a subpath within the specified source"

obj templateDefaults.data.source.artifactPaths.archive

"ArchiveStrategy describes how to archive files/directory when saving artifacts"

fn templateDefaults.data.source.artifactPaths.archive.withNone

withNone(none)

"NoneStrategy indicates to skip tar process and upload the files or directory tree as independent files. Note that if the artifact is a directory, the artifact driver must support the ability to save/load the directory appropriately."

fn templateDefaults.data.source.artifactPaths.archive.withNoneMixin

withNoneMixin(none)

"NoneStrategy indicates to skip tar process and upload the files or directory tree as independent files. Note that if the artifact is a directory, the artifact driver must support the ability to save/load the directory appropriately."

Note: This function appends passed data to existing values

fn templateDefaults.data.source.artifactPaths.archive.withZip

withZip(zip)

"ZipStrategy will unzip zipped input artifacts"

fn templateDefaults.data.source.artifactPaths.archive.withZipMixin

withZipMixin(zip)

"ZipStrategy will unzip zipped input artifacts"

Note: This function appends passed data to existing values

obj templateDefaults.data.source.artifactPaths.archive.tar

"TarStrategy will tar and gzip the file or directory when saving"

fn templateDefaults.data.source.artifactPaths.archive.tar.withCompressionLevel

withCompressionLevel(compressionLevel)

"CompressionLevel specifies the gzip compression level to use for the artifact. Defaults to gzip.DefaultCompression."

obj templateDefaults.data.source.artifactPaths.artifactGC

"ArtifactGC describes how to delete artifacts from completed Workflows"

fn templateDefaults.data.source.artifactPaths.artifactGC.withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName is an optional field for specifying the Service Account that should be assigned to the Pod doing the deletion"

fn templateDefaults.data.source.artifactPaths.artifactGC.withStrategy

withStrategy(strategy)

"Strategy is the strategy to use."

obj templateDefaults.data.source.artifactPaths.artifactGC.podMetadata

"Pod metdata"

fn templateDefaults.data.source.artifactPaths.artifactGC.podMetadata.withAnnotations

withAnnotations(annotations)

fn templateDefaults.data.source.artifactPaths.artifactGC.podMetadata.withAnnotationsMixin

withAnnotationsMixin(annotations)

Note: This function appends passed data to existing values

fn templateDefaults.data.source.artifactPaths.artifactGC.podMetadata.withLabels

withLabels(labels)

fn templateDefaults.data.source.artifactPaths.artifactGC.podMetadata.withLabelsMixin

withLabelsMixin(labels)

Note: This function appends passed data to existing values

obj templateDefaults.data.source.artifactPaths.artifactory

"ArtifactoryArtifact is the location of an artifactory artifact"

fn templateDefaults.data.source.artifactPaths.artifactory.withUrl

withUrl(url)

"URL of the artifact"

obj templateDefaults.data.source.artifactPaths.artifactory.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.artifactory.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.artifactory.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.artifactory.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.artifactory.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.artifactory.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.artifactory.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.artifactory.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.azure

"AzureArtifact is the location of a an Azure Storage artifact"

fn templateDefaults.data.source.artifactPaths.azure.withBlob

withBlob(blob)

"Blob is the blob name (i.e., path) in the container where the artifact resides"

fn templateDefaults.data.source.artifactPaths.azure.withContainer

withContainer(container)

"Container is the container where resources will be stored"

fn templateDefaults.data.source.artifactPaths.azure.withEndpoint

withEndpoint(endpoint)

"Endpoint is the service url associated with an account. It is most likely \"https://.blob.core.windows.net\

fn templateDefaults.data.source.artifactPaths.azure.withUseSDKCreds

withUseSDKCreds(useSDKCreds)

"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."

obj templateDefaults.data.source.artifactPaths.azure.accountKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.azure.accountKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.azure.accountKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.azure.accountKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.gcs

"GCSArtifact is the location of a GCS artifact"

fn templateDefaults.data.source.artifactPaths.gcs.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.data.source.artifactPaths.gcs.withKey

withKey(key)

"Key is the path in the bucket where the artifact resides"

obj templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.gcs.serviceAccountKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.git

"GitArtifact is the location of an git artifact"

fn templateDefaults.data.source.artifactPaths.git.withBranch

withBranch(branch)

"Branch is the branch to fetch when SingleBranch is enabled"

fn templateDefaults.data.source.artifactPaths.git.withDepth

withDepth(depth)

"Depth specifies clones/fetches should be shallow and include the given number of commits from the branch tip"

fn templateDefaults.data.source.artifactPaths.git.withDisableSubmodules

withDisableSubmodules(disableSubmodules)

"DisableSubmodules disables submodules during git clone"

fn templateDefaults.data.source.artifactPaths.git.withFetch

withFetch(fetch)

"Fetch specifies a number of refs that should be fetched before checkout"

fn templateDefaults.data.source.artifactPaths.git.withFetchMixin

withFetchMixin(fetch)

"Fetch specifies a number of refs that should be fetched before checkout"

Note: This function appends passed data to existing values

fn templateDefaults.data.source.artifactPaths.git.withInsecureIgnoreHostKey

withInsecureIgnoreHostKey(insecureIgnoreHostKey)

"InsecureIgnoreHostKey disables SSH strict host key checking during git clone"

fn templateDefaults.data.source.artifactPaths.git.withRepo

withRepo(repo)

"Repo is the git repository"

fn templateDefaults.data.source.artifactPaths.git.withRevision

withRevision(revision)

"Revision is the git commit, tag, branch to checkout"

fn templateDefaults.data.source.artifactPaths.git.withSingleBranch

withSingleBranch(singleBranch)

"SingleBranch enables single branch clone, using the branch parameter"

obj templateDefaults.data.source.artifactPaths.git.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.git.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.git.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.git.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.git.sshPrivateKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.git.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.git.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.git.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.git.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.hdfs

"HDFSArtifact is the location of an HDFS artifact"

fn templateDefaults.data.source.artifactPaths.hdfs.withAddresses

withAddresses(addresses)

"Addresses is accessible addresses of HDFS name nodes"

fn templateDefaults.data.source.artifactPaths.hdfs.withAddressesMixin

withAddressesMixin(addresses)

"Addresses is accessible addresses of HDFS name nodes"

Note: This function appends passed data to existing values

fn templateDefaults.data.source.artifactPaths.hdfs.withForce

withForce(force)

"Force copies a file forcibly even if it exists"

fn templateDefaults.data.source.artifactPaths.hdfs.withHdfsUser

withHdfsUser(hdfsUser)

"HDFSUser is the user to access HDFS file system. It is ignored if either ccache or keytab is used."

fn templateDefaults.data.source.artifactPaths.hdfs.withKrbRealm

withKrbRealm(krbRealm)

"KrbRealm is the Kerberos realm used with Kerberos keytab It must be set if keytab is used."

fn templateDefaults.data.source.artifactPaths.hdfs.withKrbServicePrincipalName

withKrbServicePrincipalName(krbServicePrincipalName)

"KrbServicePrincipalName is the principal name of Kerberos service It must be set if either ccache or keytab is used."

fn templateDefaults.data.source.artifactPaths.hdfs.withKrbUsername

withKrbUsername(krbUsername)

"KrbUsername is the Kerberos username used with Kerberos keytab It must be set if keytab is used."

fn templateDefaults.data.source.artifactPaths.hdfs.withPath

withPath(path)

"Path is a file path in HDFS"

obj templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.hdfs.krbCCacheSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap

"Selects a key from a ConfigMap."

fn templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap.withKey

withKey(key)

"The key to select."

fn templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.hdfs.krbConfigConfigMap.withOptional

withOptional(optional)

"Specify whether the ConfigMap or its key must be defined"

obj templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.hdfs.krbKeytabSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http

"HTTPArtifact allows a file served on HTTP to be placed as an input artifact in a container"

fn templateDefaults.data.source.artifactPaths.http.withHeaders

withHeaders(headers)

"Headers are an optional list of headers to send with HTTP requests for artifacts"

fn templateDefaults.data.source.artifactPaths.http.withHeadersMixin

withHeadersMixin(headers)

"Headers are an optional list of headers to send with HTTP requests for artifacts"

Note: This function appends passed data to existing values

fn templateDefaults.data.source.artifactPaths.http.withUrl

withUrl(url)

"URL of the artifact"

obj templateDefaults.data.source.artifactPaths.http.auth

obj templateDefaults.data.source.artifactPaths.http.auth.basicAuth

"BasicAuth describes the secret selectors required for basic authentication"

obj templateDefaults.data.source.artifactPaths.http.auth.basicAuth.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.basicAuth.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.basicAuth.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.basicAuth.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http.auth.basicAuth.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.basicAuth.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.basicAuth.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.basicAuth.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http.auth.clientCert

"ClientCertAuth holds necessary information for client authentication via certificates"

obj templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientCertSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientCertSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientCertSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientCertSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.clientCert.clientKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http.auth.oauth2

"OAuth2Auth holds all information for client authentication via OAuth2 tokens"

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.withEndpointParams

withEndpointParams(endpointParams)

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.withEndpointParamsMixin

withEndpointParamsMixin(endpointParams)

Note: This function appends passed data to existing values

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.withScopes

withScopes(scopes)

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.withScopesMixin

withScopesMixin(scopes)

Note: This function appends passed data to existing values

obj templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientIDSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientIDSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientIDSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientIDSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientSecretSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientSecretSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientSecretSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.clientSecretSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.http.auth.oauth2.tokenURLSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.tokenURLSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.tokenURLSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.http.auth.oauth2.tokenURLSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.oss

"OSSArtifact is the location of an Alibaba Cloud OSS artifact"

fn templateDefaults.data.source.artifactPaths.oss.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.data.source.artifactPaths.oss.withCreateBucketIfNotPresent

withCreateBucketIfNotPresent(createBucketIfNotPresent)

"CreateBucketIfNotPresent tells the driver to attempt to create the OSS bucket for output artifacts, if it doesn't exist"

fn templateDefaults.data.source.artifactPaths.oss.withEndpoint

withEndpoint(endpoint)

"Endpoint is the hostname of the bucket endpoint"

fn templateDefaults.data.source.artifactPaths.oss.withKey

withKey(key)

"Key is the path in the bucket where the artifact resides"

fn templateDefaults.data.source.artifactPaths.oss.withSecurityToken

withSecurityToken(securityToken)

"SecurityToken is the user's temporary security token. For more details, check out: https://www.alibabacloud.com/help/doc-detail/100624.htm"

obj templateDefaults.data.source.artifactPaths.oss.accessKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.oss.accessKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.oss.accessKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.oss.accessKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.oss.lifecycleRule

"OSSLifecycleRule specifies how to manage bucket's lifecycle"

fn templateDefaults.data.source.artifactPaths.oss.lifecycleRule.withMarkDeletionAfterDays

withMarkDeletionAfterDays(markDeletionAfterDays)

"MarkDeletionAfterDays is the number of days before we delete objects in the bucket"

fn templateDefaults.data.source.artifactPaths.oss.lifecycleRule.withMarkInfrequentAccessAfterDays

withMarkInfrequentAccessAfterDays(markInfrequentAccessAfterDays)

"MarkInfrequentAccessAfterDays is the number of days before we convert the objects in the bucket to Infrequent Access (IA) storage type"

obj templateDefaults.data.source.artifactPaths.oss.secretKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.oss.secretKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.oss.secretKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.oss.secretKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.raw

"RawArtifact allows raw string content to be placed as an artifact in a container"

fn templateDefaults.data.source.artifactPaths.raw.withData

withData(data)

"Data is the string contents of the artifact"

obj templateDefaults.data.source.artifactPaths.s3

"S3Artifact is the location of an S3 artifact"

fn templateDefaults.data.source.artifactPaths.s3.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.data.source.artifactPaths.s3.withEndpoint

withEndpoint(endpoint)

"Endpoint is the hostname of the bucket endpoint"

fn templateDefaults.data.source.artifactPaths.s3.withInsecure

withInsecure(insecure)

"Insecure will connect to the service with TLS"

fn templateDefaults.data.source.artifactPaths.s3.withKey

withKey(key)

"Key is the key in the bucket where the artifact resides"

fn templateDefaults.data.source.artifactPaths.s3.withRegion

withRegion(region)

"Region contains the optional bucket region"

fn templateDefaults.data.source.artifactPaths.s3.withRoleARN

withRoleARN(roleARN)

"RoleARN is the Amazon Resource Name (ARN) of the role to assume."

fn templateDefaults.data.source.artifactPaths.s3.withUseSDKCreds

withUseSDKCreds(useSDKCreds)

"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."

obj templateDefaults.data.source.artifactPaths.s3.accessKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.s3.accessKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.s3.accessKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.s3.accessKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.s3.createBucketIfNotPresent

"CreateS3BucketOptions options used to determine automatic automatic bucket-creation process"

fn templateDefaults.data.source.artifactPaths.s3.createBucketIfNotPresent.withObjectLocking

withObjectLocking(objectLocking)

"ObjectLocking Enable object locking"

obj templateDefaults.data.source.artifactPaths.s3.encryptionOptions

"S3EncryptionOptions used to determine encryption options during s3 operations"

fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.withEnableEncryption

withEnableEncryption(enableEncryption)

"EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used"

fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.withKmsEncryptionContext

withKmsEncryptionContext(kmsEncryptionContext)

"KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information"

fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.withKmsKeyId

withKmsKeyId(kmsKeyId)

"KMSKeyId tells the driver to encrypt the object using the specified KMS Key."

obj templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.s3.encryptionOptions.serverSideCustomerKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.data.source.artifactPaths.s3.secretKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.data.source.artifactPaths.s3.secretKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.data.source.artifactPaths.s3.secretKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.data.source.artifactPaths.s3.secretKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.executor

"ExecutorConfig holds configurations of an executor container."

fn templateDefaults.executor.withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName specifies the service account name of the executor container."

obj templateDefaults.http

fn templateDefaults.http.withBody

withBody(body)

"Body is content of the HTTP Request"

fn templateDefaults.http.withHeaders

withHeaders(headers)

"Headers are an optional list of headers to send with HTTP requests"

fn templateDefaults.http.withHeadersMixin

withHeadersMixin(headers)

"Headers are an optional list of headers to send with HTTP requests"

Note: This function appends passed data to existing values

fn templateDefaults.http.withInsecureSkipVerify

withInsecureSkipVerify(insecureSkipVerify)

"InsecureSkipVerify is a bool when if set to true will skip TLS verification for the HTTP client"

fn templateDefaults.http.withMethod

withMethod(method)

"Method is HTTP methods for HTTP Request"

fn templateDefaults.http.withSuccessCondition

withSuccessCondition(successCondition)

"SuccessCondition is an expression if evaluated to true is considered successful"

fn templateDefaults.http.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"TimeoutSeconds is request timeout for HTTP Request. Default is 30 seconds"

fn templateDefaults.http.withUrl

withUrl(url)

"URL of the HTTP Request"

obj templateDefaults.http.bodyFrom

"HTTPBodySource contains the source of the HTTP body."

fn templateDefaults.http.bodyFrom.withBytes

withBytes(bytes)

obj templateDefaults.inputs

"Inputs are the mechanism for passing parameters, artifacts, volumes from one template to another"

fn templateDefaults.inputs.withArtifacts

withArtifacts(artifacts)

"Artifact are a list of artifacts passed as inputs"

fn templateDefaults.inputs.withArtifactsMixin

withArtifactsMixin(artifacts)

"Artifact are a list of artifacts passed as inputs"

Note: This function appends passed data to existing values

fn templateDefaults.inputs.withParameters

withParameters(parameters)

"Parameters are a list of parameters passed as inputs"

fn templateDefaults.inputs.withParametersMixin

withParametersMixin(parameters)

"Parameters are a list of parameters passed as inputs"

Note: This function appends passed data to existing values

obj templateDefaults.memoize

"Memoization enables caching for the Outputs of the template"

fn templateDefaults.memoize.withKey

withKey(key)

"Key is the key to use as the caching key"

fn templateDefaults.memoize.withMaxAge

withMaxAge(maxAge)

"MaxAge is the maximum age (e.g. \"180s\", \"24h\") of an entry that is still considered valid. If an entry is older than the MaxAge, it will be ignored."

obj templateDefaults.memoize.cache

"Cache is the configuration for the type of cache to be used"

obj templateDefaults.memoize.cache.configMap

"Selects a key from a ConfigMap."

fn templateDefaults.memoize.cache.configMap.withKey

withKey(key)

"The key to select."

fn templateDefaults.memoize.cache.configMap.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.memoize.cache.configMap.withOptional

withOptional(optional)

"Specify whether the ConfigMap or its key must be defined"

obj templateDefaults.metadata

"Pod metdata"

fn templateDefaults.metadata.withAnnotations

withAnnotations(annotations)

fn templateDefaults.metadata.withAnnotationsMixin

withAnnotationsMixin(annotations)

Note: This function appends passed data to existing values

fn templateDefaults.metadata.withLabels

withLabels(labels)

fn templateDefaults.metadata.withLabelsMixin

withLabelsMixin(labels)

Note: This function appends passed data to existing values

obj templateDefaults.metrics

"Metrics are a list of metrics emitted from a Workflow/Template"

fn templateDefaults.metrics.withPrometheus

withPrometheus(prometheus)

"Prometheus is a list of prometheus metrics to be emitted"

fn templateDefaults.metrics.withPrometheusMixin

withPrometheusMixin(prometheus)

"Prometheus is a list of prometheus metrics to be emitted"

Note: This function appends passed data to existing values

obj templateDefaults.outputs

"Outputs hold parameters, artifacts, and results from a step"

fn templateDefaults.outputs.withArtifacts

withArtifacts(artifacts)

"Artifacts holds the list of output artifacts produced by a step"

fn templateDefaults.outputs.withArtifactsMixin

withArtifactsMixin(artifacts)

"Artifacts holds the list of output artifacts produced by a step"

Note: This function appends passed data to existing values

fn templateDefaults.outputs.withExitCode

withExitCode(exitCode)

"ExitCode holds the exit code of a script template"

fn templateDefaults.outputs.withParameters

withParameters(parameters)

"Parameters holds the list of output parameters produced by a step"

fn templateDefaults.outputs.withParametersMixin

withParametersMixin(parameters)

"Parameters holds the list of output parameters produced by a step"

Note: This function appends passed data to existing values

fn templateDefaults.outputs.withResult

withResult(result)

"Result holds the result (stdout) of a script template"

obj templateDefaults.resource

"ResourceTemplate is a template subtype to manipulate kubernetes resources"

fn templateDefaults.resource.withAction

withAction(action)

"Action is the action to perform to the resource. Must be one of: get, create, apply, delete, replace, patch"

fn templateDefaults.resource.withFailureCondition

withFailureCondition(failureCondition)

"FailureCondition is a label selector expression which describes the conditions of the k8s resource in which the step was considered failed"

fn templateDefaults.resource.withFlags

withFlags(flags)

"Flags is a set of additional options passed to kubectl before submitting a resource I.e. to disable resource validation: flags: [\n\t\"--validate=false\" # disable resource validation\n]"

fn templateDefaults.resource.withFlagsMixin

withFlagsMixin(flags)

"Flags is a set of additional options passed to kubectl before submitting a resource I.e. to disable resource validation: flags: [\n\t\"--validate=false\" # disable resource validation\n]"

Note: This function appends passed data to existing values

fn templateDefaults.resource.withManifest

withManifest(manifest)

"Manifest contains the kubernetes manifest"

fn templateDefaults.resource.withMergeStrategy

withMergeStrategy(mergeStrategy)

"MergeStrategy is the strategy used to merge a patch. It defaults to \"strategic\" Must be one of: strategic, merge, json"

fn templateDefaults.resource.withSetOwnerReference

withSetOwnerReference(setOwnerReference)

"SetOwnerReference sets the reference to the workflow on the OwnerReference of generated resource."

fn templateDefaults.resource.withSuccessCondition

withSuccessCondition(successCondition)

"SuccessCondition is a label selector expression which describes the conditions of the k8s resource in which it is acceptable to proceed to the following step"

obj templateDefaults.resource.manifestFrom

obj templateDefaults.resource.manifestFrom.artifact

"Artifact indicates an artifact to place at a specified path"

fn templateDefaults.resource.manifestFrom.artifact.withArchiveLogs

withArchiveLogs(archiveLogs)

"ArchiveLogs indicates if the container logs should be archived"

fn templateDefaults.resource.manifestFrom.artifact.withDeleted

withDeleted(deleted)

"Has this been deleted?"

fn templateDefaults.resource.manifestFrom.artifact.withFrom

withFrom(from)

"From allows an artifact to reference an artifact from a previous step"

fn templateDefaults.resource.manifestFrom.artifact.withFromExpression

withFromExpression(fromExpression)

"FromExpression, if defined, is evaluated to specify the value for the artifact"

fn templateDefaults.resource.manifestFrom.artifact.withGlobalName

withGlobalName(globalName)

"GlobalName exports an output artifact to the global scope, making it available as '{{io.argoproj.workflow.v1alpha1.outputs.artifacts.XXXX}} and in workflow.status.outputs.artifacts"

fn templateDefaults.resource.manifestFrom.artifact.withMode

withMode(mode)

"mode bits to use on this file, must be a value between 0 and 0777 set when loading input artifacts."

fn templateDefaults.resource.manifestFrom.artifact.withName

withName(name)

"name of the artifact. must be unique within a template's inputs/outputs."

fn templateDefaults.resource.manifestFrom.artifact.withOptional

withOptional(optional)

"Make Artifacts optional, if Artifacts doesn't generate or exist"

fn templateDefaults.resource.manifestFrom.artifact.withPath

withPath(path)

"Path is the container path to the artifact"

fn templateDefaults.resource.manifestFrom.artifact.withRecurseMode

withRecurseMode(recurseMode)

"If mode is set, apply the permission recursively into the artifact if it is a folder"

fn templateDefaults.resource.manifestFrom.artifact.withSubPath

withSubPath(subPath)

"SubPath allows an artifact to be sourced from a subpath within the specified source"

obj templateDefaults.resource.manifestFrom.artifact.archive

"ArchiveStrategy describes how to archive files/directory when saving artifacts"

fn templateDefaults.resource.manifestFrom.artifact.archive.withNone

withNone(none)

"NoneStrategy indicates to skip tar process and upload the files or directory tree as independent files. Note that if the artifact is a directory, the artifact driver must support the ability to save/load the directory appropriately."

fn templateDefaults.resource.manifestFrom.artifact.archive.withNoneMixin

withNoneMixin(none)

"NoneStrategy indicates to skip tar process and upload the files or directory tree as independent files. Note that if the artifact is a directory, the artifact driver must support the ability to save/load the directory appropriately."

Note: This function appends passed data to existing values

fn templateDefaults.resource.manifestFrom.artifact.archive.withZip

withZip(zip)

"ZipStrategy will unzip zipped input artifacts"

fn templateDefaults.resource.manifestFrom.artifact.archive.withZipMixin

withZipMixin(zip)

"ZipStrategy will unzip zipped input artifacts"

Note: This function appends passed data to existing values

obj templateDefaults.resource.manifestFrom.artifact.archive.tar

"TarStrategy will tar and gzip the file or directory when saving"

fn templateDefaults.resource.manifestFrom.artifact.archive.tar.withCompressionLevel

withCompressionLevel(compressionLevel)

"CompressionLevel specifies the gzip compression level to use for the artifact. Defaults to gzip.DefaultCompression."

obj templateDefaults.resource.manifestFrom.artifact.artifactGC

"ArtifactGC describes how to delete artifacts from completed Workflows"

fn templateDefaults.resource.manifestFrom.artifact.artifactGC.withServiceAccountName

withServiceAccountName(serviceAccountName)

"ServiceAccountName is an optional field for specifying the Service Account that should be assigned to the Pod doing the deletion"

fn templateDefaults.resource.manifestFrom.artifact.artifactGC.withStrategy

withStrategy(strategy)

"Strategy is the strategy to use."

obj templateDefaults.resource.manifestFrom.artifact.artifactGC.podMetadata

"Pod metdata"

fn templateDefaults.resource.manifestFrom.artifact.artifactGC.podMetadata.withAnnotations

withAnnotations(annotations)

fn templateDefaults.resource.manifestFrom.artifact.artifactGC.podMetadata.withAnnotationsMixin

withAnnotationsMixin(annotations)

Note: This function appends passed data to existing values

fn templateDefaults.resource.manifestFrom.artifact.artifactGC.podMetadata.withLabels

withLabels(labels)

fn templateDefaults.resource.manifestFrom.artifact.artifactGC.podMetadata.withLabelsMixin

withLabelsMixin(labels)

Note: This function appends passed data to existing values

obj templateDefaults.resource.manifestFrom.artifact.artifactory

"ArtifactoryArtifact is the location of an artifactory artifact"

fn templateDefaults.resource.manifestFrom.artifact.artifactory.withUrl

withUrl(url)

"URL of the artifact"

obj templateDefaults.resource.manifestFrom.artifact.artifactory.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.artifactory.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.artifactory.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.artifactory.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.artifactory.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.artifactory.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.artifactory.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.artifactory.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.azure

"AzureArtifact is the location of a an Azure Storage artifact"

fn templateDefaults.resource.manifestFrom.artifact.azure.withBlob

withBlob(blob)

"Blob is the blob name (i.e., path) in the container where the artifact resides"

fn templateDefaults.resource.manifestFrom.artifact.azure.withContainer

withContainer(container)

"Container is the container where resources will be stored"

fn templateDefaults.resource.manifestFrom.artifact.azure.withEndpoint

withEndpoint(endpoint)

"Endpoint is the service url associated with an account. It is most likely \"https://.blob.core.windows.net\

fn templateDefaults.resource.manifestFrom.artifact.azure.withUseSDKCreds

withUseSDKCreds(useSDKCreds)

"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."

obj templateDefaults.resource.manifestFrom.artifact.azure.accountKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.azure.accountKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.azure.accountKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.azure.accountKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.gcs

"GCSArtifact is the location of a GCS artifact"

fn templateDefaults.resource.manifestFrom.artifact.gcs.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.resource.manifestFrom.artifact.gcs.withKey

withKey(key)

"Key is the path in the bucket where the artifact resides"

obj templateDefaults.resource.manifestFrom.artifact.gcs.serviceAccountKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.gcs.serviceAccountKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.gcs.serviceAccountKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.gcs.serviceAccountKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.git

"GitArtifact is the location of an git artifact"

fn templateDefaults.resource.manifestFrom.artifact.git.withBranch

withBranch(branch)

"Branch is the branch to fetch when SingleBranch is enabled"

fn templateDefaults.resource.manifestFrom.artifact.git.withDepth

withDepth(depth)

"Depth specifies clones/fetches should be shallow and include the given number of commits from the branch tip"

fn templateDefaults.resource.manifestFrom.artifact.git.withDisableSubmodules

withDisableSubmodules(disableSubmodules)

"DisableSubmodules disables submodules during git clone"

fn templateDefaults.resource.manifestFrom.artifact.git.withFetch

withFetch(fetch)

"Fetch specifies a number of refs that should be fetched before checkout"

fn templateDefaults.resource.manifestFrom.artifact.git.withFetchMixin

withFetchMixin(fetch)

"Fetch specifies a number of refs that should be fetched before checkout"

Note: This function appends passed data to existing values

fn templateDefaults.resource.manifestFrom.artifact.git.withInsecureIgnoreHostKey

withInsecureIgnoreHostKey(insecureIgnoreHostKey)

"InsecureIgnoreHostKey disables SSH strict host key checking during git clone"

fn templateDefaults.resource.manifestFrom.artifact.git.withRepo

withRepo(repo)

"Repo is the git repository"

fn templateDefaults.resource.manifestFrom.artifact.git.withRevision

withRevision(revision)

"Revision is the git commit, tag, branch to checkout"

fn templateDefaults.resource.manifestFrom.artifact.git.withSingleBranch

withSingleBranch(singleBranch)

"SingleBranch enables single branch clone, using the branch parameter"

obj templateDefaults.resource.manifestFrom.artifact.git.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.git.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.git.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.git.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.git.sshPrivateKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.git.sshPrivateKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.git.sshPrivateKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.git.sshPrivateKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.git.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.git.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.git.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.git.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.hdfs

"HDFSArtifact is the location of an HDFS artifact"

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withAddresses

withAddresses(addresses)

"Addresses is accessible addresses of HDFS name nodes"

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withAddressesMixin

withAddressesMixin(addresses)

"Addresses is accessible addresses of HDFS name nodes"

Note: This function appends passed data to existing values

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withForce

withForce(force)

"Force copies a file forcibly even if it exists"

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withHdfsUser

withHdfsUser(hdfsUser)

"HDFSUser is the user to access HDFS file system. It is ignored if either ccache or keytab is used."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withKrbRealm

withKrbRealm(krbRealm)

"KrbRealm is the Kerberos realm used with Kerberos keytab It must be set if keytab is used."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withKrbServicePrincipalName

withKrbServicePrincipalName(krbServicePrincipalName)

"KrbServicePrincipalName is the principal name of Kerberos service It must be set if either ccache or keytab is used."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withKrbUsername

withKrbUsername(krbUsername)

"KrbUsername is the Kerberos username used with Kerberos keytab It must be set if keytab is used."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.withPath

withPath(path)

"Path is a file path in HDFS"

obj templateDefaults.resource.manifestFrom.artifact.hdfs.krbCCacheSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbCCacheSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbCCacheSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbCCacheSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.hdfs.krbConfigConfigMap

"Selects a key from a ConfigMap."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbConfigConfigMap.withKey

withKey(key)

"The key to select."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbConfigConfigMap.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbConfigConfigMap.withOptional

withOptional(optional)

"Specify whether the ConfigMap or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.hdfs.krbKeytabSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbKeytabSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbKeytabSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.hdfs.krbKeytabSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http

"HTTPArtifact allows a file served on HTTP to be placed as an input artifact in a container"

fn templateDefaults.resource.manifestFrom.artifact.http.withHeaders

withHeaders(headers)

"Headers are an optional list of headers to send with HTTP requests for artifacts"

fn templateDefaults.resource.manifestFrom.artifact.http.withHeadersMixin

withHeadersMixin(headers)

"Headers are an optional list of headers to send with HTTP requests for artifacts"

Note: This function appends passed data to existing values

fn templateDefaults.resource.manifestFrom.artifact.http.withUrl

withUrl(url)

"URL of the artifact"

obj templateDefaults.resource.manifestFrom.artifact.http.auth

obj templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth

"BasicAuth describes the secret selectors required for basic authentication"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.passwordSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.passwordSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.passwordSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.passwordSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.usernameSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.usernameSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.usernameSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.basicAuth.usernameSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert

"ClientCertAuth holds necessary information for client authentication via certificates"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientCertSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientCertSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientCertSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientCertSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.clientCert.clientKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2

"OAuth2Auth holds all information for client authentication via OAuth2 tokens"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.withEndpointParams

withEndpointParams(endpointParams)

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.withEndpointParamsMixin

withEndpointParamsMixin(endpointParams)

Note: This function appends passed data to existing values

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.withScopes

withScopes(scopes)

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.withScopesMixin

withScopesMixin(scopes)

Note: This function appends passed data to existing values

obj templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientIDSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientIDSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientIDSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientIDSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientSecretSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientSecretSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientSecretSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.clientSecretSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.tokenURLSecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.tokenURLSecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.tokenURLSecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.http.auth.oauth2.tokenURLSecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.oss

"OSSArtifact is the location of an Alibaba Cloud OSS artifact"

fn templateDefaults.resource.manifestFrom.artifact.oss.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.resource.manifestFrom.artifact.oss.withCreateBucketIfNotPresent

withCreateBucketIfNotPresent(createBucketIfNotPresent)

"CreateBucketIfNotPresent tells the driver to attempt to create the OSS bucket for output artifacts, if it doesn't exist"

fn templateDefaults.resource.manifestFrom.artifact.oss.withEndpoint

withEndpoint(endpoint)

"Endpoint is the hostname of the bucket endpoint"

fn templateDefaults.resource.manifestFrom.artifact.oss.withKey

withKey(key)

"Key is the path in the bucket where the artifact resides"

fn templateDefaults.resource.manifestFrom.artifact.oss.withSecurityToken

withSecurityToken(securityToken)

"SecurityToken is the user's temporary security token. For more details, check out: https://www.alibabacloud.com/help/doc-detail/100624.htm"

obj templateDefaults.resource.manifestFrom.artifact.oss.accessKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.oss.accessKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.oss.accessKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.oss.accessKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.oss.lifecycleRule

"OSSLifecycleRule specifies how to manage bucket's lifecycle"

fn templateDefaults.resource.manifestFrom.artifact.oss.lifecycleRule.withMarkDeletionAfterDays

withMarkDeletionAfterDays(markDeletionAfterDays)

"MarkDeletionAfterDays is the number of days before we delete objects in the bucket"

fn templateDefaults.resource.manifestFrom.artifact.oss.lifecycleRule.withMarkInfrequentAccessAfterDays

withMarkInfrequentAccessAfterDays(markInfrequentAccessAfterDays)

"MarkInfrequentAccessAfterDays is the number of days before we convert the objects in the bucket to Infrequent Access (IA) storage type"

obj templateDefaults.resource.manifestFrom.artifact.oss.secretKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.oss.secretKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.oss.secretKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.oss.secretKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.raw

"RawArtifact allows raw string content to be placed as an artifact in a container"

fn templateDefaults.resource.manifestFrom.artifact.raw.withData

withData(data)

"Data is the string contents of the artifact"

obj templateDefaults.resource.manifestFrom.artifact.s3

"S3Artifact is the location of an S3 artifact"

fn templateDefaults.resource.manifestFrom.artifact.s3.withBucket

withBucket(bucket)

"Bucket is the name of the bucket"

fn templateDefaults.resource.manifestFrom.artifact.s3.withEndpoint

withEndpoint(endpoint)

"Endpoint is the hostname of the bucket endpoint"

fn templateDefaults.resource.manifestFrom.artifact.s3.withInsecure

withInsecure(insecure)

"Insecure will connect to the service with TLS"

fn templateDefaults.resource.manifestFrom.artifact.s3.withKey

withKey(key)

"Key is the key in the bucket where the artifact resides"

fn templateDefaults.resource.manifestFrom.artifact.s3.withRegion

withRegion(region)

"Region contains the optional bucket region"

fn templateDefaults.resource.manifestFrom.artifact.s3.withRoleARN

withRoleARN(roleARN)

"RoleARN is the Amazon Resource Name (ARN) of the role to assume."

fn templateDefaults.resource.manifestFrom.artifact.s3.withUseSDKCreds

withUseSDKCreds(useSDKCreds)

"UseSDKCreds tells the driver to figure out credentials based on sdk defaults."

obj templateDefaults.resource.manifestFrom.artifact.s3.accessKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.s3.accessKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.s3.accessKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.s3.accessKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.s3.createBucketIfNotPresent

"CreateS3BucketOptions options used to determine automatic automatic bucket-creation process"

fn templateDefaults.resource.manifestFrom.artifact.s3.createBucketIfNotPresent.withObjectLocking

withObjectLocking(objectLocking)

"ObjectLocking Enable object locking"

obj templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions

"S3EncryptionOptions used to determine encryption options during s3 operations"

fn templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.withEnableEncryption

withEnableEncryption(enableEncryption)

"EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used"

fn templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.withKmsEncryptionContext

withKmsEncryptionContext(kmsEncryptionContext)

"KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information"

fn templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.withKmsKeyId

withKmsKeyId(kmsKeyId)

"KMSKeyId tells the driver to encrypt the object using the specified KMS Key."

obj templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.serverSideCustomerKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.serverSideCustomerKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.serverSideCustomerKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.s3.encryptionOptions.serverSideCustomerKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.resource.manifestFrom.artifact.s3.secretKeySecret

"SecretKeySelector selects a key of a Secret."

fn templateDefaults.resource.manifestFrom.artifact.s3.secretKeySecret.withKey

withKey(key)

"The key of the secret to select from. Must be a valid secret key."

fn templateDefaults.resource.manifestFrom.artifact.s3.secretKeySecret.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.resource.manifestFrom.artifact.s3.secretKeySecret.withOptional

withOptional(optional)

"Specify whether the Secret or its key must be defined"

obj templateDefaults.retryStrategy

"RetryStrategy provides controls on how to retry a workflow step"

fn templateDefaults.retryStrategy.withExpression

withExpression(expression)

"Expression is a condition expression for when a node will be retried. If it evaluates to false, the node will not be retried and the retry strategy will be ignored"

fn templateDefaults.retryStrategy.withLimit

withLimit(limit)

fn templateDefaults.retryStrategy.withRetryPolicy

withRetryPolicy(retryPolicy)

"RetryPolicy is a policy of NodePhase statuses that will be retried"

obj templateDefaults.retryStrategy.affinity

"RetryAffinity prevents running steps on the same host."

fn templateDefaults.retryStrategy.affinity.withNodeAntiAffinity

withNodeAntiAffinity(nodeAntiAffinity)

"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."

fn templateDefaults.retryStrategy.affinity.withNodeAntiAffinityMixin

withNodeAntiAffinityMixin(nodeAntiAffinity)

"RetryNodeAntiAffinity is a placeholder for future expansion, only empty nodeAntiAffinity is allowed. In order to prevent running steps on the same host, it uses \"kubernetes.io/hostname\"."

Note: This function appends passed data to existing values

obj templateDefaults.retryStrategy.backoff

"Backoff is a backoff strategy to use within retryStrategy"

fn templateDefaults.retryStrategy.backoff.withDuration

withDuration(duration)

"Duration is the amount to back off. Default unit is seconds, but could also be a duration (e.g. \"2m\", \"1h\")"

fn templateDefaults.retryStrategy.backoff.withFactor

withFactor(factor)

fn templateDefaults.retryStrategy.backoff.withMaxDuration

withMaxDuration(maxDuration)

"MaxDuration is the maximum amount of time allowed for the backoff strategy"

obj templateDefaults.script

"ScriptTemplate is a template subtype to enable scripting through code steps"

fn templateDefaults.script.withArgs

withArgs(args)

"Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

fn templateDefaults.script.withArgsMixin

withArgsMixin(args)

"Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

Note: This function appends passed data to existing values

fn templateDefaults.script.withCommand

withCommand(command)

"Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

fn templateDefaults.script.withCommandMixin

withCommandMixin(command)

"Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"

Note: This function appends passed data to existing values

fn templateDefaults.script.withEnv

withEnv(env)

"List of environment variables to set in the container. Cannot be updated."

fn templateDefaults.script.withEnvFrom

withEnvFrom(envFrom)

"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."

fn templateDefaults.script.withEnvFromMixin

withEnvFromMixin(envFrom)

"List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.script.withEnvMixin

withEnvMixin(env)

"List of environment variables to set in the container. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.script.withImage

withImage(image)

"Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets."

fn templateDefaults.script.withImagePullPolicy

withImagePullPolicy(imagePullPolicy)

"Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images"

fn templateDefaults.script.withName

withName(name)

"Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated."

fn templateDefaults.script.withPorts

withPorts(ports)

"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."

fn templateDefaults.script.withPortsMixin

withPortsMixin(ports)

"List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.script.withSource

withSource(source)

"Source contains the source code of the script to execute"

fn templateDefaults.script.withStdin

withStdin(stdin)

"Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false."

fn templateDefaults.script.withStdinOnce

withStdinOnce(stdinOnce)

"Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false"

fn templateDefaults.script.withTerminationMessagePath

withTerminationMessagePath(terminationMessagePath)

"Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated."

fn templateDefaults.script.withTerminationMessagePolicy

withTerminationMessagePolicy(terminationMessagePolicy)

"Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated."

fn templateDefaults.script.withTty

withTty(tty)

"Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false."

fn templateDefaults.script.withVolumeDevices

withVolumeDevices(volumeDevices)

"volumeDevices is the list of block devices to be used by the container."

fn templateDefaults.script.withVolumeDevicesMixin

withVolumeDevicesMixin(volumeDevices)

"volumeDevices is the list of block devices to be used by the container."

Note: This function appends passed data to existing values

fn templateDefaults.script.withVolumeMounts

withVolumeMounts(volumeMounts)

"Pod volumes to mount into the container's filesystem. Cannot be updated."

fn templateDefaults.script.withVolumeMountsMixin

withVolumeMountsMixin(volumeMounts)

"Pod volumes to mount into the container's filesystem. Cannot be updated."

Note: This function appends passed data to existing values

fn templateDefaults.script.withWorkingDir

withWorkingDir(workingDir)

"Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated."

obj templateDefaults.script.lifecycle

"Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted."

obj templateDefaults.script.lifecycle.postStart

"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."

obj templateDefaults.script.lifecycle.postStart.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.script.lifecycle.postStart.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.script.lifecycle.postStart.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.script.lifecycle.postStart.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.script.lifecycle.postStart.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.script.lifecycle.postStart.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.script.lifecycle.postStart.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.script.lifecycle.postStart.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.script.lifecycle.postStart.httpGet.withPort

withPort(port)

fn templateDefaults.script.lifecycle.postStart.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.script.lifecycle.postStart.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.script.lifecycle.postStart.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.script.lifecycle.postStart.tcpSocket.withPort

withPort(port)

obj templateDefaults.script.lifecycle.preStop

"LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified."

obj templateDefaults.script.lifecycle.preStop.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.script.lifecycle.preStop.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.script.lifecycle.preStop.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.script.lifecycle.preStop.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.script.lifecycle.preStop.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.script.lifecycle.preStop.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.script.lifecycle.preStop.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.script.lifecycle.preStop.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.script.lifecycle.preStop.httpGet.withPort

withPort(port)

fn templateDefaults.script.lifecycle.preStop.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.script.lifecycle.preStop.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.script.lifecycle.preStop.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.script.lifecycle.preStop.tcpSocket.withPort

withPort(port)

obj templateDefaults.script.livenessProbe

"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."

fn templateDefaults.script.livenessProbe.withFailureThreshold

withFailureThreshold(failureThreshold)

"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."

fn templateDefaults.script.livenessProbe.withInitialDelaySeconds

withInitialDelaySeconds(initialDelaySeconds)

"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

fn templateDefaults.script.livenessProbe.withPeriodSeconds

withPeriodSeconds(periodSeconds)

"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."

fn templateDefaults.script.livenessProbe.withSuccessThreshold

withSuccessThreshold(successThreshold)

"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."

fn templateDefaults.script.livenessProbe.withTerminationGracePeriodSeconds

withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)

"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."

fn templateDefaults.script.livenessProbe.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

obj templateDefaults.script.livenessProbe.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.script.livenessProbe.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.script.livenessProbe.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.script.livenessProbe.grpc

fn templateDefaults.script.livenessProbe.grpc.withPort

withPort(port)

"Port number of the gRPC service. Number must be in the range 1 to 65535."

fn templateDefaults.script.livenessProbe.grpc.withService

withService(service)

"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."

obj templateDefaults.script.livenessProbe.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.script.livenessProbe.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.script.livenessProbe.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.script.livenessProbe.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.script.livenessProbe.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.script.livenessProbe.httpGet.withPort

withPort(port)

fn templateDefaults.script.livenessProbe.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.script.livenessProbe.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.script.livenessProbe.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.script.livenessProbe.tcpSocket.withPort

withPort(port)

obj templateDefaults.script.readinessProbe

"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."

fn templateDefaults.script.readinessProbe.withFailureThreshold

withFailureThreshold(failureThreshold)

"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."

fn templateDefaults.script.readinessProbe.withInitialDelaySeconds

withInitialDelaySeconds(initialDelaySeconds)

"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

fn templateDefaults.script.readinessProbe.withPeriodSeconds

withPeriodSeconds(periodSeconds)

"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."

fn templateDefaults.script.readinessProbe.withSuccessThreshold

withSuccessThreshold(successThreshold)

"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."

fn templateDefaults.script.readinessProbe.withTerminationGracePeriodSeconds

withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)

"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."

fn templateDefaults.script.readinessProbe.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

obj templateDefaults.script.readinessProbe.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.script.readinessProbe.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.script.readinessProbe.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.script.readinessProbe.grpc

fn templateDefaults.script.readinessProbe.grpc.withPort

withPort(port)

"Port number of the gRPC service. Number must be in the range 1 to 65535."

fn templateDefaults.script.readinessProbe.grpc.withService

withService(service)

"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."

obj templateDefaults.script.readinessProbe.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.script.readinessProbe.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.script.readinessProbe.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.script.readinessProbe.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.script.readinessProbe.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.script.readinessProbe.httpGet.withPort

withPort(port)

fn templateDefaults.script.readinessProbe.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.script.readinessProbe.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.script.readinessProbe.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.script.readinessProbe.tcpSocket.withPort

withPort(port)

obj templateDefaults.script.resources

"ResourceRequirements describes the compute resource requirements."

fn templateDefaults.script.resources.withLimits

withLimits(limits)

"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

fn templateDefaults.script.resources.withLimitsMixin

withLimitsMixin(limits)

"Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

Note: This function appends passed data to existing values

fn templateDefaults.script.resources.withRequests

withRequests(requests)

"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

fn templateDefaults.script.resources.withRequestsMixin

withRequestsMixin(requests)

"Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"

Note: This function appends passed data to existing values

obj templateDefaults.script.securityContext

"SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence."

fn templateDefaults.script.securityContext.withAllowPrivilegeEscalation

withAllowPrivilegeEscalation(allowPrivilegeEscalation)

"AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.script.securityContext.withPrivileged

withPrivileged(privileged)

"Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.script.securityContext.withProcMount

withProcMount(procMount)

"procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.script.securityContext.withReadOnlyRootFilesystem

withReadOnlyRootFilesystem(readOnlyRootFilesystem)

"Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.script.securityContext.withRunAsGroup

withRunAsGroup(runAsGroup)

"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.script.securityContext.withRunAsNonRoot

withRunAsNonRoot(runAsNonRoot)

"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

fn templateDefaults.script.securityContext.withRunAsUser

withRunAsUser(runAsUser)

"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows."

obj templateDefaults.script.securityContext.capabilities

"Adds and removes POSIX capabilities from running containers."

fn templateDefaults.script.securityContext.capabilities.withAdd

withAdd(add)

"Added capabilities"

fn templateDefaults.script.securityContext.capabilities.withAddMixin

withAddMixin(add)

"Added capabilities"

Note: This function appends passed data to existing values

fn templateDefaults.script.securityContext.capabilities.withDrop

withDrop(drop)

"Removed capabilities"

fn templateDefaults.script.securityContext.capabilities.withDropMixin

withDropMixin(drop)

"Removed capabilities"

Note: This function appends passed data to existing values

obj templateDefaults.script.securityContext.seLinuxOptions

"SELinuxOptions are the labels to be applied to the container"

fn templateDefaults.script.securityContext.seLinuxOptions.withLevel

withLevel(level)

"Level is SELinux level label that applies to the container."

fn templateDefaults.script.securityContext.seLinuxOptions.withRole

withRole(role)

"Role is a SELinux role label that applies to the container."

fn templateDefaults.script.securityContext.seLinuxOptions.withType

withType(type)

"Type is a SELinux type label that applies to the container."

fn templateDefaults.script.securityContext.seLinuxOptions.withUser

withUser(user)

"User is a SELinux user label that applies to the container."

obj templateDefaults.script.securityContext.seccompProfile

"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."

fn templateDefaults.script.securityContext.seccompProfile.withLocalhostProfile

withLocalhostProfile(localhostProfile)

"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."

fn templateDefaults.script.securityContext.seccompProfile.withType

withType(type)

"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\" indicates a profile defined in a file on the node should be used. The file's location relative to /seccomp.\n - \"RuntimeDefault\" represents the default container runtime seccomp profile.\n - \"Unconfined\" indicates no seccomp profile is applied (A.K.A. unconfined)."

obj templateDefaults.script.securityContext.windowsOptions

"WindowsSecurityContextOptions contain Windows-specific options and credentials."

fn templateDefaults.script.securityContext.windowsOptions.withGmsaCredentialSpec

withGmsaCredentialSpec(gmsaCredentialSpec)

"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."

fn templateDefaults.script.securityContext.windowsOptions.withGmsaCredentialSpecName

withGmsaCredentialSpecName(gmsaCredentialSpecName)

"GMSACredentialSpecName is the name of the GMSA credential spec to use."

fn templateDefaults.script.securityContext.windowsOptions.withHostProcess

withHostProcess(hostProcess)

"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."

fn templateDefaults.script.securityContext.windowsOptions.withRunAsUserName

withRunAsUserName(runAsUserName)

"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

obj templateDefaults.script.startupProbe

"Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic."

fn templateDefaults.script.startupProbe.withFailureThreshold

withFailureThreshold(failureThreshold)

"Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1."

fn templateDefaults.script.startupProbe.withInitialDelaySeconds

withInitialDelaySeconds(initialDelaySeconds)

"Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

fn templateDefaults.script.startupProbe.withPeriodSeconds

withPeriodSeconds(periodSeconds)

"How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1."

fn templateDefaults.script.startupProbe.withSuccessThreshold

withSuccessThreshold(successThreshold)

"Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1."

fn templateDefaults.script.startupProbe.withTerminationGracePeriodSeconds

withTerminationGracePeriodSeconds(terminationGracePeriodSeconds)

"Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset."

fn templateDefaults.script.startupProbe.withTimeoutSeconds

withTimeoutSeconds(timeoutSeconds)

"Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"

obj templateDefaults.script.startupProbe.exec

"ExecAction describes a \"run in container\" action."

fn templateDefaults.script.startupProbe.exec.withCommand

withCommand(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

fn templateDefaults.script.startupProbe.exec.withCommandMixin

withCommandMixin(command)

"Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy."

Note: This function appends passed data to existing values

obj templateDefaults.script.startupProbe.grpc

fn templateDefaults.script.startupProbe.grpc.withPort

withPort(port)

"Port number of the gRPC service. Number must be in the range 1 to 65535."

fn templateDefaults.script.startupProbe.grpc.withService

withService(service)

"Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC."

obj templateDefaults.script.startupProbe.httpGet

"HTTPGetAction describes an action based on HTTP Get requests."

fn templateDefaults.script.startupProbe.httpGet.withHost

withHost(host)

"Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead."

fn templateDefaults.script.startupProbe.httpGet.withHttpHeaders

withHttpHeaders(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

fn templateDefaults.script.startupProbe.httpGet.withHttpHeadersMixin

withHttpHeadersMixin(httpHeaders)

"Custom headers to set in the request. HTTP allows repeated headers."

Note: This function appends passed data to existing values

fn templateDefaults.script.startupProbe.httpGet.withPath

withPath(path)

"Path to access on the HTTP server."

fn templateDefaults.script.startupProbe.httpGet.withPort

withPort(port)

fn templateDefaults.script.startupProbe.httpGet.withScheme

withScheme(scheme)

"Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - \"HTTP\" means that the scheme used will be http://\n - \"HTTPS\" means that the scheme used will be https://"

obj templateDefaults.script.startupProbe.tcpSocket

"TCPSocketAction describes an action based on opening a socket"

fn templateDefaults.script.startupProbe.tcpSocket.withHost

withHost(host)

"Optional: Host name to connect to, defaults to the pod IP."

fn templateDefaults.script.startupProbe.tcpSocket.withPort

withPort(port)

obj templateDefaults.securityContext

"PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext."

fn templateDefaults.securityContext.withFsGroup

withFsGroup(fsGroup)

"A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.securityContext.withFsGroupChangePolicy

withFsGroupChangePolicy(fsGroupChangePolicy)

"fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.securityContext.withRunAsGroup

withRunAsGroup(runAsGroup)

"The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.securityContext.withRunAsNonRoot

withRunAsNonRoot(runAsNonRoot)

"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

fn templateDefaults.securityContext.withRunAsUser

withRunAsUser(runAsUser)

"The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.securityContext.withSupplementalGroups

withSupplementalGroups(supplementalGroups)

"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.securityContext.withSupplementalGroupsMixin

withSupplementalGroupsMixin(supplementalGroups)

"A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows."

Note: This function appends passed data to existing values

fn templateDefaults.securityContext.withSysctls

withSysctls(sysctls)

"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."

fn templateDefaults.securityContext.withSysctlsMixin

withSysctlsMixin(sysctls)

"Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows."

Note: This function appends passed data to existing values

obj templateDefaults.securityContext.seLinuxOptions

"SELinuxOptions are the labels to be applied to the container"

fn templateDefaults.securityContext.seLinuxOptions.withLevel

withLevel(level)

"Level is SELinux level label that applies to the container."

fn templateDefaults.securityContext.seLinuxOptions.withRole

withRole(role)

"Role is a SELinux role label that applies to the container."

fn templateDefaults.securityContext.seLinuxOptions.withType

withType(type)

"Type is a SELinux type label that applies to the container."

fn templateDefaults.securityContext.seLinuxOptions.withUser

withUser(user)

"User is a SELinux user label that applies to the container."

obj templateDefaults.securityContext.seccompProfile

"SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set."

fn templateDefaults.securityContext.seccompProfile.withLocalhostProfile

withLocalhostProfile(localhostProfile)

"localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\"."

fn templateDefaults.securityContext.seccompProfile.withType

withType(type)

"type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - \"Localhost\" indicates a profile defined in a file on the node should be used. The file's location relative to /seccomp.\n - \"RuntimeDefault\" represents the default container runtime seccomp profile.\n - \"Unconfined\" indicates no seccomp profile is applied (A.K.A. unconfined)."

obj templateDefaults.securityContext.windowsOptions

"WindowsSecurityContextOptions contain Windows-specific options and credentials."

fn templateDefaults.securityContext.windowsOptions.withGmsaCredentialSpec

withGmsaCredentialSpec(gmsaCredentialSpec)

"GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field."

fn templateDefaults.securityContext.windowsOptions.withGmsaCredentialSpecName

withGmsaCredentialSpecName(gmsaCredentialSpecName)

"GMSACredentialSpecName is the name of the GMSA credential spec to use."

fn templateDefaults.securityContext.windowsOptions.withHostProcess

withHostProcess(hostProcess)

"HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true."

fn templateDefaults.securityContext.windowsOptions.withRunAsUserName

withRunAsUserName(runAsUserName)

"The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence."

obj templateDefaults.suspend

"SuspendTemplate is a template subtype to suspend a workflow at a predetermined point in time"

fn templateDefaults.suspend.withDuration

withDuration(duration)

"Duration is the seconds to wait before automatically resuming a template. Must be a string. Default unit is seconds. Could also be a Duration, e.g.: \"2m\", \"6h\", \"1d\

obj templateDefaults.synchronization

"Synchronization holds synchronization lock configuration"

obj templateDefaults.synchronization.mutex

"Mutex holds Mutex configuration"

fn templateDefaults.synchronization.mutex.withName

withName(name)

"name of the mutex"

obj templateDefaults.synchronization.semaphore

"SemaphoreRef is a reference of Semaphore"

obj templateDefaults.synchronization.semaphore.configMapKeyRef

"Selects a key from a ConfigMap."

fn templateDefaults.synchronization.semaphore.configMapKeyRef.withKey

withKey(key)

"The key to select."

fn templateDefaults.synchronization.semaphore.configMapKeyRef.withName

withName(name)

"Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"

fn templateDefaults.synchronization.semaphore.configMapKeyRef.withOptional

withOptional(optional)

"Specify whether the ConfigMap or its key must be defined"

obj ttlStrategy

"TTLStrategy is the strategy for the time to live depending on if the workflow succeeded or failed"

fn ttlStrategy.withSecondsAfterCompletion

withSecondsAfterCompletion(secondsAfterCompletion)

"SecondsAfterCompletion is the number of seconds to live after completion"

fn ttlStrategy.withSecondsAfterFailure

withSecondsAfterFailure(secondsAfterFailure)

"SecondsAfterFailure is the number of seconds to live after failure"

fn ttlStrategy.withSecondsAfterSuccess

withSecondsAfterSuccess(secondsAfterSuccess)

"SecondsAfterSuccess is the number of seconds to live after success"

obj volumeClaimGC

"VolumeClaimGC describes how to delete volumes from completed Workflows"

fn volumeClaimGC.withStrategy

withStrategy(strategy)

"Strategy is the strategy to use. One of \"OnWorkflowCompletion\", \"OnWorkflowSuccess\

obj workflowMetadata

fn workflowMetadata.withAnnotations

withAnnotations(annotations)

fn workflowMetadata.withAnnotationsMixin

withAnnotationsMixin(annotations)

Note: This function appends passed data to existing values

fn workflowMetadata.withLabels

withLabels(labels)

fn workflowMetadata.withLabelsFrom

withLabelsFrom(labelsFrom)

fn workflowMetadata.withLabelsFromMixin

withLabelsFromMixin(labelsFrom)

Note: This function appends passed data to existing values

fn workflowMetadata.withLabelsMixin

withLabelsMixin(labels)

Note: This function appends passed data to existing values

obj workflowTemplateRef

"WorkflowTemplateRef is a reference to a WorkflowTemplate resource."

fn workflowTemplateRef.withClusterScope

withClusterScope(clusterScope)

"ClusterScope indicates the referred template is cluster scoped (i.e. a ClusterWorkflowTemplate)."

fn workflowTemplateRef.withName

withName(name)

"Name is the resource name of the workflow template."