serving.v1.configuration
"Configuration represents the \"floating HEAD\" of a linear history of Revisions.\nUsers create new Revisions by updating the Configuration's spec.\nThe \"latest created\" revision's name is available under status, as is the\n\"latest ready\" revision's name.\nSee also: https://github.com/knative/serving/blob/main/docs/spec/overview.md#configuration"
Index
fn new(name)
obj metadata
fn withAnnotations(annotations)
fn withAnnotationsMixin(annotations)
fn withClusterName(clusterName)
fn withCreationTimestamp(creationTimestamp)
fn withDeletionGracePeriodSeconds(deletionGracePeriodSeconds)
fn withDeletionTimestamp(deletionTimestamp)
fn withFinalizers(finalizers)
fn withFinalizersMixin(finalizers)
fn withGenerateName(generateName)
fn withGeneration(generation)
fn withLabels(labels)
fn withLabelsMixin(labels)
fn withName(name)
fn withNamespace(namespace)
fn withOwnerReferences(ownerReferences)
fn withOwnerReferencesMixin(ownerReferences)
fn withResourceVersion(resourceVersion)
fn withSelfLink(selfLink)
fn withUid(uid)
obj spec
obj spec.template
obj spec.template.metadata
obj spec.template.spec
fn withAffinity(affinity)
fn withAffinityMixin(affinity)
fn withAutomountServiceAccountToken(automountServiceAccountToken)
fn withContainerConcurrency(containerConcurrency)
fn withContainers(containers)
fn withContainersMixin(containers)
fn withDnsConfig(dnsConfig)
fn withDnsConfigMixin(dnsConfig)
fn withDnsPolicy(dnsPolicy)
fn withEnableServiceLinks(enableServiceLinks)
fn withHostAliases(hostAliases)
fn withHostAliasesMixin(hostAliases)
fn withIdleTimeoutSeconds(idleTimeoutSeconds)
fn withImagePullSecrets(imagePullSecrets)
fn withImagePullSecretsMixin(imagePullSecrets)
fn withInitContainers(initContainers)
fn withInitContainersMixin(initContainers)
fn withNodeSelector(nodeSelector)
fn withNodeSelectorMixin(nodeSelector)
fn withPriorityClassName(priorityClassName)
fn withResponseStartTimeoutSeconds(responseStartTimeoutSeconds)
fn withRuntimeClassName(runtimeClassName)
fn withSchedulerName(schedulerName)
fn withSecurityContext(securityContext)
fn withSecurityContextMixin(securityContext)
fn withServiceAccountName(serviceAccountName)
fn withShareProcessNamespace(shareProcessNamespace)
fn withTimeoutSeconds(timeoutSeconds)
fn withTolerations(tolerations)
fn withTolerationsMixin(tolerations)
fn withTopologySpreadConstraints(topologySpreadConstraints)
fn withTopologySpreadConstraintsMixin(topologySpreadConstraints)
fn withVolumes(volumes)
fn withVolumesMixin(volumes)
obj spec.template.spec.containers
fn withArgs(args)
fn withArgsMixin(args)
fn withCommand(command)
fn withCommandMixin(command)
fn withEnv(env)
fn withEnvFrom(envFrom)
fn withEnvFromMixin(envFrom)
fn withEnvMixin(env)
fn withImage(image)
fn withImagePullPolicy(imagePullPolicy)
fn withName(name)
fn withPorts(ports)
fn withPortsMixin(ports)
fn withTerminationMessagePath(terminationMessagePath)
fn withTerminationMessagePolicy(terminationMessagePolicy)
fn withVolumeMounts(volumeMounts)
fn withVolumeMountsMixin(volumeMounts)
fn withWorkingDir(workingDir)
obj spec.template.spec.containers.env
fn withName(name)
fn withValue(value)
obj spec.template.spec.containers.env.valueFrom
obj spec.template.spec.containers.envFrom
obj spec.template.spec.containers.livenessProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTimeoutSeconds(timeoutSeconds)
obj spec.template.spec.containers.livenessProbe.exec
obj spec.template.spec.containers.livenessProbe.grpc
obj spec.template.spec.containers.livenessProbe.httpGet
obj spec.template.spec.containers.livenessProbe.tcpSocket
obj spec.template.spec.containers.ports
obj spec.template.spec.containers.readinessProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTimeoutSeconds(timeoutSeconds)
obj spec.template.spec.containers.readinessProbe.exec
obj spec.template.spec.containers.readinessProbe.grpc
obj spec.template.spec.containers.readinessProbe.httpGet
obj spec.template.spec.containers.readinessProbe.tcpSocket
obj spec.template.spec.containers.resources
obj spec.template.spec.containers.securityContext
fn withAllowPrivilegeEscalation(allowPrivilegeEscalation)
fn withReadOnlyRootFilesystem(readOnlyRootFilesystem)
fn withRunAsGroup(runAsGroup)
fn withRunAsNonRoot(runAsNonRoot)
fn withRunAsUser(runAsUser)
obj spec.template.spec.containers.securityContext.capabilities
obj spec.template.spec.containers.securityContext.seccompProfile
obj spec.template.spec.containers.startupProbe
fn withFailureThreshold(failureThreshold)
fn withInitialDelaySeconds(initialDelaySeconds)
fn withPeriodSeconds(periodSeconds)
fn withSuccessThreshold(successThreshold)
fn withTimeoutSeconds(timeoutSeconds)
obj spec.template.spec.containers.startupProbe.exec
obj spec.template.spec.containers.startupProbe.grpc
obj spec.template.spec.containers.startupProbe.httpGet
obj spec.template.spec.containers.startupProbe.tcpSocket
obj spec.template.spec.containers.volumeMounts
obj spec.template.spec.imagePullSecrets
obj spec.template.spec.volumes
fn withEmptyDir(emptyDir)
fn withEmptyDirMixin(emptyDir)
fn withName(name)
fn withPersistentVolumeClaim(persistentVolumeClaim)
fn withPersistentVolumeClaimMixin(persistentVolumeClaim)
obj spec.template.spec.volumes.configMap
obj spec.template.spec.volumes.projected
fn withDefaultMode(defaultMode)
fn withSources(sources)
fn withSourcesMixin(sources)
obj spec.template.spec.volumes.projected.sources
obj spec.template.spec.volumes.projected.sources.configMap
obj spec.template.spec.volumes.projected.sources.downwardAPI
fn withItems(items)
fn withItemsMixin(items)
obj spec.template.spec.volumes.projected.sources.downwardAPI.items
obj spec.template.spec.volumes.projected.sources.secret
obj spec.template.spec.volumes.projected.sources.serviceAccountToken
obj spec.template.spec.volumes.secret
Fields
fn new
new(name)
new returns an instance of Configuration
obj metadata
"ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create."
fn metadata.withAnnotations
withAnnotations(annotations)
"Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations"
fn metadata.withAnnotationsMixin
withAnnotationsMixin(annotations)
"Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations"
Note: This function appends passed data to existing values
fn metadata.withClusterName
withClusterName(clusterName)
"The name of the cluster which the object belongs to. This is used to distinguish resources with same name and namespace in different clusters. This field is not set anywhere right now and apiserver is going to ignore it if set in create or update request."
fn metadata.withCreationTimestamp
withCreationTimestamp(creationTimestamp)
"Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers."
fn metadata.withDeletionGracePeriodSeconds
withDeletionGracePeriodSeconds(deletionGracePeriodSeconds)
"Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only."
fn metadata.withDeletionTimestamp
withDeletionTimestamp(deletionTimestamp)
"Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers."
fn metadata.withFinalizers
withFinalizers(finalizers)
"Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list."
fn metadata.withFinalizersMixin
withFinalizersMixin(finalizers)
"Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list."
Note: This function appends passed data to existing values
fn metadata.withGenerateName
withGenerateName(generateName)
"GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
fn metadata.withGeneration
withGeneration(generation)
"A sequence number representing a specific generation of the desired state. Populated by the system. Read-only."
fn metadata.withLabels
withLabels(labels)
"Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels"
fn metadata.withLabelsMixin
withLabelsMixin(labels)
"Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels"
Note: This function appends passed data to existing values
fn metadata.withName
withName(name)
"Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names"
fn metadata.withNamespace
withNamespace(namespace)
"Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
fn metadata.withOwnerReferences
withOwnerReferences(ownerReferences)
"List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller."
fn metadata.withOwnerReferencesMixin
withOwnerReferencesMixin(ownerReferences)
"List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller."
Note: This function appends passed data to existing values
fn metadata.withResourceVersion
withResourceVersion(resourceVersion)
"An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.\n\nPopulated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency"
fn metadata.withSelfLink
withSelfLink(selfLink)
"SelfLink is a URL representing this object. Populated by the system. Read-only.\n\nDEPRECATED Kubernetes will stop propagating this field in 1.20 release and the field is planned to be removed in 1.21 release."
fn metadata.withUid
withUid(uid)
"UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids"
obj spec
"ConfigurationSpec holds the desired state of the Configuration (from the client)."
obj spec.template
"Template holds the latest specification for the Revision to be stamped out."
obj spec.template.metadata
fn spec.template.metadata.withAnnotations
withAnnotations(annotations)
fn spec.template.metadata.withAnnotationsMixin
withAnnotationsMixin(annotations)
Note: This function appends passed data to existing values
fn spec.template.metadata.withFinalizers
withFinalizers(finalizers)
fn spec.template.metadata.withFinalizersMixin
withFinalizersMixin(finalizers)
Note: This function appends passed data to existing values
fn spec.template.metadata.withLabels
withLabels(labels)
fn spec.template.metadata.withLabelsMixin
withLabelsMixin(labels)
Note: This function appends passed data to existing values
fn spec.template.metadata.withName
withName(name)
fn spec.template.metadata.withNamespace
withNamespace(namespace)
obj spec.template.spec
"RevisionSpec holds the desired state of the Revision (from the client)."
fn spec.template.spec.withAffinity
withAffinity(affinity)
"This is accessible behind a feature flag - kubernetes.podspec-affinity"
fn spec.template.spec.withAffinityMixin
withAffinityMixin(affinity)
"This is accessible behind a feature flag - kubernetes.podspec-affinity"
Note: This function appends passed data to existing values
fn spec.template.spec.withAutomountServiceAccountToken
withAutomountServiceAccountToken(automountServiceAccountToken)
"AutomountServiceAccountToken indicates whether a service account token should be automatically mounted."
fn spec.template.spec.withContainerConcurrency
withContainerConcurrency(containerConcurrency)
"ContainerConcurrency specifies the maximum allowed in-flight (concurrent)\nrequests per container of the Revision. Defaults to 0
which means\nconcurrency to the application is not limited, and the system decides the\ntarget concurrency for the autoscaler."
fn spec.template.spec.withContainers
withContainers(containers)
"List of containers belonging to the pod.\nContainers cannot currently be added or removed.\nThere must be at least one container in a Pod.\nCannot be updated."
fn spec.template.spec.withContainersMixin
withContainersMixin(containers)
"List of containers belonging to the pod.\nContainers cannot currently be added or removed.\nThere must be at least one container in a Pod.\nCannot be updated."
Note: This function appends passed data to existing values
fn spec.template.spec.withDnsConfig
withDnsConfig(dnsConfig)
"This is accessible behind a feature flag - kubernetes.podspec-dnsconfig"
fn spec.template.spec.withDnsConfigMixin
withDnsConfigMixin(dnsConfig)
"This is accessible behind a feature flag - kubernetes.podspec-dnsconfig"
Note: This function appends passed data to existing values
fn spec.template.spec.withDnsPolicy
withDnsPolicy(dnsPolicy)
"This is accessible behind a feature flag - kubernetes.podspec-dnspolicy"
fn spec.template.spec.withEnableServiceLinks
withEnableServiceLinks(enableServiceLinks)
"EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Knative defaults this to false."
fn spec.template.spec.withHostAliases
withHostAliases(hostAliases)
"This is accessible behind a feature flag - kubernetes.podspec-hostaliases"
fn spec.template.spec.withHostAliasesMixin
withHostAliasesMixin(hostAliases)
"This is accessible behind a feature flag - kubernetes.podspec-hostaliases"
Note: This function appends passed data to existing values
fn spec.template.spec.withIdleTimeoutSeconds
withIdleTimeoutSeconds(idleTimeoutSeconds)
"IdleTimeoutSeconds is the maximum duration in seconds a request will be allowed\nto stay open while not receiving any bytes from the user's application. If\nunspecified, a system default will be provided."
fn spec.template.spec.withImagePullSecrets
withImagePullSecrets(imagePullSecrets)
"ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.\nIf specified, these secrets will be passed to individual puller implementations for them to use.\nMore info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod"
fn spec.template.spec.withImagePullSecretsMixin
withImagePullSecretsMixin(imagePullSecrets)
"ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.\nIf specified, these secrets will be passed to individual puller implementations for them to use.\nMore info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod"
Note: This function appends passed data to existing values
fn spec.template.spec.withInitContainers
withInitContainers(initContainers)
"List of initialization containers belonging to the pod.\nInit containers are executed in order prior to containers being started. If any\ninit container fails, the pod is considered to have failed and is handled according\nto its restartPolicy. The name for an init container or normal container must be\nunique among all containers.\nInit containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.\nThe resourceRequirements of an init container are taken into account during scheduling\nby finding the highest request/limit for each resource type, and then using the max of\nof that value or the sum of the normal containers. Limits are applied to init containers\nin a similar fashion.\nInit containers cannot currently be added or removed.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/"
fn spec.template.spec.withInitContainersMixin
withInitContainersMixin(initContainers)
"List of initialization containers belonging to the pod.\nInit containers are executed in order prior to containers being started. If any\ninit container fails, the pod is considered to have failed and is handled according\nto its restartPolicy. The name for an init container or normal container must be\nunique among all containers.\nInit containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.\nThe resourceRequirements of an init container are taken into account during scheduling\nby finding the highest request/limit for each resource type, and then using the max of\nof that value or the sum of the normal containers. Limits are applied to init containers\nin a similar fashion.\nInit containers cannot currently be added or removed.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/"
Note: This function appends passed data to existing values
fn spec.template.spec.withNodeSelector
withNodeSelector(nodeSelector)
"This is accessible behind a feature flag - kubernetes.podspec-nodeselector"
fn spec.template.spec.withNodeSelectorMixin
withNodeSelectorMixin(nodeSelector)
"This is accessible behind a feature flag - kubernetes.podspec-nodeselector"
Note: This function appends passed data to existing values
fn spec.template.spec.withPriorityClassName
withPriorityClassName(priorityClassName)
"This is accessible behind a feature flag - kubernetes.podspec-priorityclassname"
fn spec.template.spec.withResponseStartTimeoutSeconds
withResponseStartTimeoutSeconds(responseStartTimeoutSeconds)
"ResponseStartTimeoutSeconds is the maximum duration in seconds that the request\nrouting layer will wait for a request delivered to a container to begin\nsending any network traffic."
fn spec.template.spec.withRuntimeClassName
withRuntimeClassName(runtimeClassName)
"This is accessible behind a feature flag - kubernetes.podspec-runtimeclassname"
fn spec.template.spec.withSchedulerName
withSchedulerName(schedulerName)
"This is accessible behind a feature flag - kubernetes.podspec-schedulername"
fn spec.template.spec.withSecurityContext
withSecurityContext(securityContext)
"This is accessible behind a feature flag - kubernetes.podspec-securitycontext"
fn spec.template.spec.withSecurityContextMixin
withSecurityContextMixin(securityContext)
"This is accessible behind a feature flag - kubernetes.podspec-securitycontext"
Note: This function appends passed data to existing values
fn spec.template.spec.withServiceAccountName
withServiceAccountName(serviceAccountName)
"ServiceAccountName is the name of the ServiceAccount to use to run this pod.\nMore info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/"
fn spec.template.spec.withShareProcessNamespace
withShareProcessNamespace(shareProcessNamespace)
"This is accessible behind a feature flag - kubernetes.podspec-shareproccessnamespace"
fn spec.template.spec.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"TimeoutSeconds is the maximum duration in seconds that the request instance\nis allowed to respond to a request. If unspecified, a system default will\nbe provided."
fn spec.template.spec.withTolerations
withTolerations(tolerations)
"This is accessible behind a feature flag - kubernetes.podspec-tolerations"
fn spec.template.spec.withTolerationsMixin
withTolerationsMixin(tolerations)
"This is accessible behind a feature flag - kubernetes.podspec-tolerations"
Note: This function appends passed data to existing values
fn spec.template.spec.withTopologySpreadConstraints
withTopologySpreadConstraints(topologySpreadConstraints)
"This is accessible behind a feature flag - kubernetes.podspec-topologyspreadconstraints"
fn spec.template.spec.withTopologySpreadConstraintsMixin
withTopologySpreadConstraintsMixin(topologySpreadConstraints)
"This is accessible behind a feature flag - kubernetes.podspec-topologyspreadconstraints"
Note: This function appends passed data to existing values
fn spec.template.spec.withVolumes
withVolumes(volumes)
"List of volumes that can be mounted by containers belonging to the pod.\nMore info: https://kubernetes.io/docs/concepts/storage/volumes"
fn spec.template.spec.withVolumesMixin
withVolumesMixin(volumes)
"List of volumes that can be mounted by containers belonging to the pod.\nMore info: https://kubernetes.io/docs/concepts/storage/volumes"
Note: This function appends passed data to existing values
obj spec.template.spec.containers
"List of containers belonging to the pod.\nContainers cannot currently be added or removed.\nThere must be at least one container in a Pod.\nCannot be updated."
fn spec.template.spec.containers.withArgs
withArgs(args)
"Arguments to the entrypoint.\nThe container image's CMD is used if this is not provided.\nVariable references $(VAR_NAME) are expanded using the container's environment. If a variable\ncannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced\nto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\nproduce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless\nof whether the variable exists or not. Cannot be updated.\nMore info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
fn spec.template.spec.containers.withArgsMixin
withArgsMixin(args)
"Arguments to the entrypoint.\nThe container image's CMD is used if this is not provided.\nVariable references $(VAR_NAME) are expanded using the container's environment. If a variable\ncannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced\nto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\nproduce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless\nof whether the variable exists or not. Cannot be updated.\nMore info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
Note: This function appends passed data to existing values
fn spec.template.spec.containers.withCommand
withCommand(command)
"Entrypoint array. Not executed within a shell.\nThe container image's ENTRYPOINT is used if this is not provided.\nVariable references $(VAR_NAME) are expanded using the container's environment. If a variable\ncannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced\nto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\nproduce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless\nof whether the variable exists or not. Cannot be updated.\nMore info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
fn spec.template.spec.containers.withCommandMixin
withCommandMixin(command)
"Entrypoint array. Not executed within a shell.\nThe container image's ENTRYPOINT is used if this is not provided.\nVariable references $(VAR_NAME) are expanded using the container's environment. If a variable\ncannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced\nto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will\nproduce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless\nof whether the variable exists or not. Cannot be updated.\nMore info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell"
Note: This function appends passed data to existing values
fn spec.template.spec.containers.withEnv
withEnv(env)
"List of environment variables to set in the container.\nCannot be updated."
fn spec.template.spec.containers.withEnvFrom
withEnvFrom(envFrom)
"List of sources to populate environment variables in the container.\nThe keys defined within a source must be a C_IDENTIFIER. All invalid keys\nwill be reported as an event when the container is starting. When a key exists in multiple\nsources, the value associated with the last source will take precedence.\nValues defined by an Env with a duplicate key will take precedence.\nCannot be updated."
fn spec.template.spec.containers.withEnvFromMixin
withEnvFromMixin(envFrom)
"List of sources to populate environment variables in the container.\nThe keys defined within a source must be a C_IDENTIFIER. All invalid keys\nwill be reported as an event when the container is starting. When a key exists in multiple\nsources, the value associated with the last source will take precedence.\nValues defined by an Env with a duplicate key will take precedence.\nCannot be updated."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.withEnvMixin
withEnvMixin(env)
"List of environment variables to set in the container.\nCannot be updated."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.withImage
withImage(image)
"Container image name.\nMore info: https://kubernetes.io/docs/concepts/containers/images\nThis field is optional to allow higher level config management to default or override\ncontainer images in workload controllers like Deployments and StatefulSets."
fn spec.template.spec.containers.withImagePullPolicy
withImagePullPolicy(imagePullPolicy)
"Image pull policy.\nOne of Always, Never, IfNotPresent.\nDefaults to Always if :latest tag is specified, or IfNotPresent otherwise.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/containers/images#updating-images"
fn spec.template.spec.containers.withName
withName(name)
"Name of the container specified as a DNS_LABEL.\nEach container in a pod must have a unique name (DNS_LABEL).\nCannot be updated."
fn spec.template.spec.containers.withPorts
withPorts(ports)
"List of ports to expose from the container. Not specifying a port here\nDOES NOT prevent that port from being exposed. Any port which is\nlistening on the default \"0.0.0.0\" address inside a container will be\naccessible from the network.\nModifying this array with strategic merge patch may corrupt the data.\nFor more information See https://github.com/kubernetes/kubernetes/issues/108255.\nCannot be updated."
fn spec.template.spec.containers.withPortsMixin
withPortsMixin(ports)
"List of ports to expose from the container. Not specifying a port here\nDOES NOT prevent that port from being exposed. Any port which is\nlistening on the default \"0.0.0.0\" address inside a container will be\naccessible from the network.\nModifying this array with strategic merge patch may corrupt the data.\nFor more information See https://github.com/kubernetes/kubernetes/issues/108255.\nCannot be updated."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.withTerminationMessagePath
withTerminationMessagePath(terminationMessagePath)
"Optional: Path at which the file to which the container's termination message\nwill be written is mounted into the container's filesystem.\nMessage written is intended to be brief final status, such as an assertion failure message.\nWill be truncated by the node if greater than 4096 bytes. The total message length across\nall containers will be limited to 12kb.\nDefaults to /dev/termination-log.\nCannot be updated."
fn spec.template.spec.containers.withTerminationMessagePolicy
withTerminationMessagePolicy(terminationMessagePolicy)
"Indicate how the termination message should be populated. File will use the contents of\nterminationMessagePath to populate the container status message on both success and failure.\nFallbackToLogsOnError will use the last chunk of container log output if the termination\nmessage file is empty and the container exited with an error.\nThe log output is limited to 2048 bytes or 80 lines, whichever is smaller.\nDefaults to File.\nCannot be updated."
fn spec.template.spec.containers.withVolumeMounts
withVolumeMounts(volumeMounts)
"Pod volumes to mount into the container's filesystem.\nCannot be updated."
fn spec.template.spec.containers.withVolumeMountsMixin
withVolumeMountsMixin(volumeMounts)
"Pod volumes to mount into the container's filesystem.\nCannot be updated."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.withWorkingDir
withWorkingDir(workingDir)
"Container's working directory.\nIf not specified, the container runtime's default will be used, which\nmight be configured in the container image.\nCannot be updated."
obj spec.template.spec.containers.env
"List of environment variables to set in the container.\nCannot be updated."
fn spec.template.spec.containers.env.withName
withName(name)
"Name of the environment variable. Must be a C_IDENTIFIER."
fn spec.template.spec.containers.env.withValue
withValue(value)
"Variable references $(VAR_NAME) are expanded\nusing the previously defined environment variables in the container and\nany service environment variables. If a variable cannot be resolved,\nthe reference in the input string will be unchanged. Double $$ are reduced\nto a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.\n\"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\".\nEscaped references will never be expanded, regardless of whether the variable\nexists or not.\nDefaults to \"\"."
obj spec.template.spec.containers.env.valueFrom
"Source for the environment variable's value. Cannot be used if value is not empty."
fn spec.template.spec.containers.env.valueFrom.withFieldRef
withFieldRef(fieldRef)
"This is accessible behind a feature flag - kubernetes.podspec-fieldref"
fn spec.template.spec.containers.env.valueFrom.withFieldRefMixin
withFieldRefMixin(fieldRef)
"This is accessible behind a feature flag - kubernetes.podspec-fieldref"
Note: This function appends passed data to existing values
fn spec.template.spec.containers.env.valueFrom.withResourceFieldRef
withResourceFieldRef(resourceFieldRef)
"This is accessible behind a feature flag - kubernetes.podspec-fieldref"
fn spec.template.spec.containers.env.valueFrom.withResourceFieldRefMixin
withResourceFieldRefMixin(resourceFieldRef)
"This is accessible behind a feature flag - kubernetes.podspec-fieldref"
Note: This function appends passed data to existing values
obj spec.template.spec.containers.env.valueFrom.configMapKeyRef
"Selects a key of a ConfigMap."
fn spec.template.spec.containers.env.valueFrom.configMapKeyRef.withKey
withKey(key)
"The key to select."
fn spec.template.spec.containers.env.valueFrom.configMapKeyRef.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.containers.env.valueFrom.configMapKeyRef.withOptional
withOptional(optional)
"Specify whether the ConfigMap or its key must be defined"
obj spec.template.spec.containers.env.valueFrom.secretKeyRef
"Selects a key of a secret in the pod's namespace"
fn spec.template.spec.containers.env.valueFrom.secretKeyRef.withKey
withKey(key)
"The key of the secret to select from. Must be a valid secret key."
fn spec.template.spec.containers.env.valueFrom.secretKeyRef.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.containers.env.valueFrom.secretKeyRef.withOptional
withOptional(optional)
"Specify whether the Secret or its key must be defined"
obj spec.template.spec.containers.envFrom
"List of sources to populate environment variables in the container.\nThe keys defined within a source must be a C_IDENTIFIER. All invalid keys\nwill be reported as an event when the container is starting. When a key exists in multiple\nsources, the value associated with the last source will take precedence.\nValues defined by an Env with a duplicate key will take precedence.\nCannot be updated."
fn spec.template.spec.containers.envFrom.withPrefix
withPrefix(prefix)
"An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER."
obj spec.template.spec.containers.envFrom.configMapRef
"The ConfigMap to select from"
fn spec.template.spec.containers.envFrom.configMapRef.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.containers.envFrom.configMapRef.withOptional
withOptional(optional)
"Specify whether the ConfigMap must be defined"
obj spec.template.spec.containers.envFrom.secretRef
"The Secret to select from"
fn spec.template.spec.containers.envFrom.secretRef.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.containers.envFrom.secretRef.withOptional
withOptional(optional)
"Specify whether the Secret must be defined"
obj spec.template.spec.containers.livenessProbe
"Periodic probe of container liveness.\nContainer will be restarted if the probe fails.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn spec.template.spec.containers.livenessProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded.\nDefaults to 3. Minimum value is 1."
fn spec.template.spec.containers.livenessProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn spec.template.spec.containers.livenessProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe."
fn spec.template.spec.containers.livenessProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed.\nDefaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn spec.template.spec.containers.livenessProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out.\nDefaults to 1 second. Minimum value is 1.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj spec.template.spec.containers.livenessProbe.exec
"Exec specifies the action to take."
fn spec.template.spec.containers.livenessProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the\ncommand is root ('/') in the container's filesystem. The command is simply exec'd, it is\nnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To use\na shell, you need to explicitly call out to that shell.\nExit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn spec.template.spec.containers.livenessProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the\ncommand is root ('/') in the container's filesystem. The command is simply exec'd, it is\nnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To use\na shell, you need to explicitly call out to that shell.\nExit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj spec.template.spec.containers.livenessProbe.grpc
"GRPC specifies an action involving a GRPC port."
fn spec.template.spec.containers.livenessProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn spec.template.spec.containers.livenessProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest\n(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\n\nIf this is not specified, the default behavior is defined by gRPC."
obj spec.template.spec.containers.livenessProbe.httpGet
"HTTPGet specifies the http request to perform."
fn spec.template.spec.containers.livenessProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set\n\"Host\" in httpHeaders instead."
fn spec.template.spec.containers.livenessProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn spec.template.spec.containers.livenessProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.livenessProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn spec.template.spec.containers.livenessProbe.httpGet.withPort
withPort(port)
"Name or number of the port to access on the container.\nNumber must be in the range 1 to 65535.\nName must be an IANA_SVC_NAME."
fn spec.template.spec.containers.livenessProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host.\nDefaults to HTTP."
obj spec.template.spec.containers.livenessProbe.httpGet.httpHeaders
"Custom headers to set in the request. HTTP allows repeated headers."
fn spec.template.spec.containers.livenessProbe.httpGet.httpHeaders.withName
withName(name)
"The header field name.\nThis will be canonicalized upon output, so case-variant names will be understood as the same header."
fn spec.template.spec.containers.livenessProbe.httpGet.httpHeaders.withValue
withValue(value)
"The header field value"
obj spec.template.spec.containers.livenessProbe.tcpSocket
"TCPSocket specifies an action involving a TCP port."
fn spec.template.spec.containers.livenessProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn spec.template.spec.containers.livenessProbe.tcpSocket.withPort
withPort(port)
"Number or name of the port to access on the container.\nNumber must be in the range 1 to 65535.\nName must be an IANA_SVC_NAME."
obj spec.template.spec.containers.ports
"List of ports to expose from the container. Not specifying a port here\nDOES NOT prevent that port from being exposed. Any port which is\nlistening on the default \"0.0.0.0\" address inside a container will be\naccessible from the network.\nModifying this array with strategic merge patch may corrupt the data.\nFor more information See https://github.com/kubernetes/kubernetes/issues/108255.\nCannot be updated."
fn spec.template.spec.containers.ports.withContainerPort
withContainerPort(containerPort)
"Number of port to expose on the pod's IP address.\nThis must be a valid port number, 0 < x < 65536."
fn spec.template.spec.containers.ports.withName
withName(name)
"If specified, this must be an IANA_SVC_NAME and unique within the pod. Each\nnamed port in a pod must have a unique name. Name for the port that can be\nreferred to by services."
fn spec.template.spec.containers.ports.withProtocol
withProtocol(protocol)
"Protocol for port. Must be UDP, TCP, or SCTP.\nDefaults to \"TCP\"."
obj spec.template.spec.containers.readinessProbe
"Periodic probe of container service readiness.\nContainer will be removed from service endpoints if the probe fails.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn spec.template.spec.containers.readinessProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded.\nDefaults to 3. Minimum value is 1."
fn spec.template.spec.containers.readinessProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn spec.template.spec.containers.readinessProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe."
fn spec.template.spec.containers.readinessProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed.\nDefaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn spec.template.spec.containers.readinessProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out.\nDefaults to 1 second. Minimum value is 1.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj spec.template.spec.containers.readinessProbe.exec
"Exec specifies the action to take."
fn spec.template.spec.containers.readinessProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the\ncommand is root ('/') in the container's filesystem. The command is simply exec'd, it is\nnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To use\na shell, you need to explicitly call out to that shell.\nExit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn spec.template.spec.containers.readinessProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the\ncommand is root ('/') in the container's filesystem. The command is simply exec'd, it is\nnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To use\na shell, you need to explicitly call out to that shell.\nExit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj spec.template.spec.containers.readinessProbe.grpc
"GRPC specifies an action involving a GRPC port."
fn spec.template.spec.containers.readinessProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn spec.template.spec.containers.readinessProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest\n(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\n\nIf this is not specified, the default behavior is defined by gRPC."
obj spec.template.spec.containers.readinessProbe.httpGet
"HTTPGet specifies the http request to perform."
fn spec.template.spec.containers.readinessProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set\n\"Host\" in httpHeaders instead."
fn spec.template.spec.containers.readinessProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn spec.template.spec.containers.readinessProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.readinessProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn spec.template.spec.containers.readinessProbe.httpGet.withPort
withPort(port)
"Name or number of the port to access on the container.\nNumber must be in the range 1 to 65535.\nName must be an IANA_SVC_NAME."
fn spec.template.spec.containers.readinessProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host.\nDefaults to HTTP."
obj spec.template.spec.containers.readinessProbe.httpGet.httpHeaders
"Custom headers to set in the request. HTTP allows repeated headers."
fn spec.template.spec.containers.readinessProbe.httpGet.httpHeaders.withName
withName(name)
"The header field name.\nThis will be canonicalized upon output, so case-variant names will be understood as the same header."
fn spec.template.spec.containers.readinessProbe.httpGet.httpHeaders.withValue
withValue(value)
"The header field value"
obj spec.template.spec.containers.readinessProbe.tcpSocket
"TCPSocket specifies an action involving a TCP port."
fn spec.template.spec.containers.readinessProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn spec.template.spec.containers.readinessProbe.tcpSocket.withPort
withPort(port)
"Number or name of the port to access on the container.\nNumber must be in the range 1 to 65535.\nName must be an IANA_SVC_NAME."
obj spec.template.spec.containers.resources
"Compute Resources required by this container.\nCannot be updated.\nMore info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn spec.template.spec.containers.resources.withClaims
withClaims(claims)
"Claims lists the names of resources, defined in spec.resourceClaims,\nthat are used by this container.\n\n\nThis is an alpha field and requires enabling the\nDynamicResourceAllocation feature gate.\n\n\nThis field is immutable. It can only be set for containers."
fn spec.template.spec.containers.resources.withClaimsMixin
withClaimsMixin(claims)
"Claims lists the names of resources, defined in spec.resourceClaims,\nthat are used by this container.\n\n\nThis is an alpha field and requires enabling the\nDynamicResourceAllocation feature gate.\n\n\nThis field is immutable. It can only be set for containers."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.resources.withLimits
withLimits(limits)
"Limits describes the maximum amount of compute resources allowed.\nMore info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn spec.template.spec.containers.resources.withLimitsMixin
withLimitsMixin(limits)
"Limits describes the maximum amount of compute resources allowed.\nMore info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
Note: This function appends passed data to existing values
fn spec.template.spec.containers.resources.withRequests
withRequests(requests)
"Requests describes the minimum amount of compute resources required.\nIf Requests is omitted for a container, it defaults to Limits if that is explicitly specified,\notherwise to an implementation-defined value. Requests cannot exceed Limits.\nMore info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
fn spec.template.spec.containers.resources.withRequestsMixin
withRequestsMixin(requests)
"Requests describes the minimum amount of compute resources required.\nIf Requests is omitted for a container, it defaults to Limits if that is explicitly specified,\notherwise to an implementation-defined value. Requests cannot exceed Limits.\nMore info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
Note: This function appends passed data to existing values
obj spec.template.spec.containers.resources.claims
"Claims lists the names of resources, defined in spec.resourceClaims,\nthat are used by this container.\n\n\nThis is an alpha field and requires enabling the\nDynamicResourceAllocation feature gate.\n\n\nThis field is immutable. It can only be set for containers."
fn spec.template.spec.containers.resources.claims.withName
withName(name)
"Name must match the name of one entry in pod.spec.resourceClaims of\nthe Pod where this field is used. It makes that resource available\ninside a container."
obj spec.template.spec.containers.securityContext
"SecurityContext defines the security options the container should be run with.\nIf set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.\nMore info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/"
fn spec.template.spec.containers.securityContext.withAllowPrivilegeEscalation
withAllowPrivilegeEscalation(allowPrivilegeEscalation)
"AllowPrivilegeEscalation controls whether a process can gain more\nprivileges than its parent process. This bool directly controls if\nthe no_new_privs flag will be set on the container process.\nAllowPrivilegeEscalation is true always when the container is:\n1) run as Privileged\n2) has CAP_SYS_ADMIN\nNote that this field cannot be set when spec.os.name is windows."
fn spec.template.spec.containers.securityContext.withReadOnlyRootFilesystem
withReadOnlyRootFilesystem(readOnlyRootFilesystem)
"Whether this container has a read-only root filesystem.\nDefault is false.\nNote that this field cannot be set when spec.os.name is windows."
fn spec.template.spec.containers.securityContext.withRunAsGroup
withRunAsGroup(runAsGroup)
"The GID to run the entrypoint of the container process.\nUses runtime default if unset.\nMay also be set in PodSecurityContext. If set in both SecurityContext and\nPodSecurityContext, the value specified in SecurityContext takes precedence.\nNote that this field cannot be set when spec.os.name is windows."
fn spec.template.spec.containers.securityContext.withRunAsNonRoot
withRunAsNonRoot(runAsNonRoot)
"Indicates that the container must run as a non-root user.\nIf true, the Kubelet will validate the image at runtime to ensure that it\ndoes not run as UID 0 (root) and fail to start the container if it does.\nIf unset or false, no such validation will be performed.\nMay also be set in PodSecurityContext. If set in both SecurityContext and\nPodSecurityContext, the value specified in SecurityContext takes precedence."
fn spec.template.spec.containers.securityContext.withRunAsUser
withRunAsUser(runAsUser)
"The UID to run the entrypoint of the container process.\nDefaults to user specified in image metadata if unspecified.\nMay also be set in PodSecurityContext. If set in both SecurityContext and\nPodSecurityContext, the value specified in SecurityContext takes precedence.\nNote that this field cannot be set when spec.os.name is windows."
obj spec.template.spec.containers.securityContext.capabilities
"The capabilities to add/drop when running containers.\nDefaults to the default set of capabilities granted by the container runtime.\nNote that this field cannot be set when spec.os.name is windows."
fn spec.template.spec.containers.securityContext.capabilities.withAdd
withAdd(add)
"This is accessible behind a feature flag - kubernetes.containerspec-addcapabilities"
fn spec.template.spec.containers.securityContext.capabilities.withAddMixin
withAddMixin(add)
"This is accessible behind a feature flag - kubernetes.containerspec-addcapabilities"
Note: This function appends passed data to existing values
fn spec.template.spec.containers.securityContext.capabilities.withDrop
withDrop(drop)
"Removed capabilities"
fn spec.template.spec.containers.securityContext.capabilities.withDropMixin
withDropMixin(drop)
"Removed capabilities"
Note: This function appends passed data to existing values
obj spec.template.spec.containers.securityContext.seccompProfile
"The seccomp options to use by this container. If seccomp options are\nprovided at both the pod & container level, the container options\noverride the pod options.\nNote that this field cannot be set when spec.os.name is windows."
fn spec.template.spec.containers.securityContext.seccompProfile.withLocalhostProfile
withLocalhostProfile(localhostProfile)
"localhostProfile indicates a profile defined in a file on the node should be used.\nThe profile must be preconfigured on the node to work.\nMust be a descending path, relative to the kubelet's configured seccomp profile location.\nMust be set if type is \"Localhost\". Must NOT be set for any other type."
fn spec.template.spec.containers.securityContext.seccompProfile.withType
withType(type)
"type indicates which kind of seccomp profile will be applied.\nValid options are:\n\n\nLocalhost - a profile defined in a file on the node should be used.\nRuntimeDefault - the container runtime default profile should be used.\nUnconfined - no profile should be applied."
obj spec.template.spec.containers.startupProbe
"StartupProbe indicates that the Pod has successfully initialized.\nIf specified, no other probes are executed until this completes successfully.\nIf this probe fails, the Pod will be restarted, just as if the livenessProbe failed.\nThis can be used to provide different probe parameters at the beginning of a Pod's lifecycle,\nwhen it might take a long time to load data or warm a cache, than during steady-state operation.\nThis cannot be updated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn spec.template.spec.containers.startupProbe.withFailureThreshold
withFailureThreshold(failureThreshold)
"Minimum consecutive failures for the probe to be considered failed after having succeeded.\nDefaults to 3. Minimum value is 1."
fn spec.template.spec.containers.startupProbe.withInitialDelaySeconds
withInitialDelaySeconds(initialDelaySeconds)
"Number of seconds after the container has started before liveness probes are initiated.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
fn spec.template.spec.containers.startupProbe.withPeriodSeconds
withPeriodSeconds(periodSeconds)
"How often (in seconds) to perform the probe."
fn spec.template.spec.containers.startupProbe.withSuccessThreshold
withSuccessThreshold(successThreshold)
"Minimum consecutive successes for the probe to be considered successful after having failed.\nDefaults to 1. Must be 1 for liveness and startup. Minimum value is 1."
fn spec.template.spec.containers.startupProbe.withTimeoutSeconds
withTimeoutSeconds(timeoutSeconds)
"Number of seconds after which the probe times out.\nDefaults to 1 second. Minimum value is 1.\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes"
obj spec.template.spec.containers.startupProbe.exec
"Exec specifies the action to take."
fn spec.template.spec.containers.startupProbe.exec.withCommand
withCommand(command)
"Command is the command line to execute inside the container, the working directory for the\ncommand is root ('/') in the container's filesystem. The command is simply exec'd, it is\nnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To use\na shell, you need to explicitly call out to that shell.\nExit status of 0 is treated as live/healthy and non-zero is unhealthy."
fn spec.template.spec.containers.startupProbe.exec.withCommandMixin
withCommandMixin(command)
"Command is the command line to execute inside the container, the working directory for the\ncommand is root ('/') in the container's filesystem. The command is simply exec'd, it is\nnot run inside a shell, so traditional shell instructions ('|', etc) won't work. To use\na shell, you need to explicitly call out to that shell.\nExit status of 0 is treated as live/healthy and non-zero is unhealthy."
Note: This function appends passed data to existing values
obj spec.template.spec.containers.startupProbe.grpc
"GRPC specifies an action involving a GRPC port."
fn spec.template.spec.containers.startupProbe.grpc.withPort
withPort(port)
"Port number of the gRPC service. Number must be in the range 1 to 65535."
fn spec.template.spec.containers.startupProbe.grpc.withService
withService(service)
"Service is the name of the service to place in the gRPC HealthCheckRequest\n(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\n\nIf this is not specified, the default behavior is defined by gRPC."
obj spec.template.spec.containers.startupProbe.httpGet
"HTTPGet specifies the http request to perform."
fn spec.template.spec.containers.startupProbe.httpGet.withHost
withHost(host)
"Host name to connect to, defaults to the pod IP. You probably want to set\n\"Host\" in httpHeaders instead."
fn spec.template.spec.containers.startupProbe.httpGet.withHttpHeaders
withHttpHeaders(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
fn spec.template.spec.containers.startupProbe.httpGet.withHttpHeadersMixin
withHttpHeadersMixin(httpHeaders)
"Custom headers to set in the request. HTTP allows repeated headers."
Note: This function appends passed data to existing values
fn spec.template.spec.containers.startupProbe.httpGet.withPath
withPath(path)
"Path to access on the HTTP server."
fn spec.template.spec.containers.startupProbe.httpGet.withPort
withPort(port)
"Name or number of the port to access on the container.\nNumber must be in the range 1 to 65535.\nName must be an IANA_SVC_NAME."
fn spec.template.spec.containers.startupProbe.httpGet.withScheme
withScheme(scheme)
"Scheme to use for connecting to the host.\nDefaults to HTTP."
obj spec.template.spec.containers.startupProbe.httpGet.httpHeaders
"Custom headers to set in the request. HTTP allows repeated headers."
fn spec.template.spec.containers.startupProbe.httpGet.httpHeaders.withName
withName(name)
"The header field name.\nThis will be canonicalized upon output, so case-variant names will be understood as the same header."
fn spec.template.spec.containers.startupProbe.httpGet.httpHeaders.withValue
withValue(value)
"The header field value"
obj spec.template.spec.containers.startupProbe.tcpSocket
"TCPSocket specifies an action involving a TCP port."
fn spec.template.spec.containers.startupProbe.tcpSocket.withHost
withHost(host)
"Optional: Host name to connect to, defaults to the pod IP."
fn spec.template.spec.containers.startupProbe.tcpSocket.withPort
withPort(port)
"Number or name of the port to access on the container.\nNumber must be in the range 1 to 65535.\nName must be an IANA_SVC_NAME."
obj spec.template.spec.containers.volumeMounts
"Pod volumes to mount into the container's filesystem.\nCannot be updated."
fn spec.template.spec.containers.volumeMounts.withMountPath
withMountPath(mountPath)
"Path within the container at which the volume should be mounted. Must\nnot contain ':'."
fn spec.template.spec.containers.volumeMounts.withName
withName(name)
"This must match the Name of a Volume."
fn spec.template.spec.containers.volumeMounts.withReadOnly
withReadOnly(readOnly)
"Mounted read-only if true, read-write otherwise (false or unspecified).\nDefaults to false."
fn spec.template.spec.containers.volumeMounts.withSubPath
withSubPath(subPath)
"Path within the volume from which the container's volume should be mounted.\nDefaults to \"\" (volume's root)."
obj spec.template.spec.imagePullSecrets
"ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.\nIf specified, these secrets will be passed to individual puller implementations for them to use.\nMore info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod"
fn spec.template.spec.imagePullSecrets.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
obj spec.template.spec.volumes
"List of volumes that can be mounted by containers belonging to the pod.\nMore info: https://kubernetes.io/docs/concepts/storage/volumes"
fn spec.template.spec.volumes.withEmptyDir
withEmptyDir(emptyDir)
"This is accessible behind a feature flag - kubernetes.podspec-emptydir"
fn spec.template.spec.volumes.withEmptyDirMixin
withEmptyDirMixin(emptyDir)
"This is accessible behind a feature flag - kubernetes.podspec-emptydir"
Note: This function appends passed data to existing values
fn spec.template.spec.volumes.withName
withName(name)
"name of the volume.\nMust be a DNS_LABEL and unique within the pod.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names"
fn spec.template.spec.volumes.withPersistentVolumeClaim
withPersistentVolumeClaim(persistentVolumeClaim)
"This is accessible behind a feature flag - kubernetes.podspec-persistent-volume-claim"
fn spec.template.spec.volumes.withPersistentVolumeClaimMixin
withPersistentVolumeClaimMixin(persistentVolumeClaim)
"This is accessible behind a feature flag - kubernetes.podspec-persistent-volume-claim"
Note: This function appends passed data to existing values
obj spec.template.spec.volumes.configMap
"configMap represents a configMap that should populate this volume"
fn spec.template.spec.volumes.configMap.withDefaultMode
withDefaultMode(defaultMode)
"defaultMode is optional: mode bits used to set permissions on created files by default.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nDefaults to 0644.\nDirectories within the path are not affected by this setting.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.configMap.withItems
withItems(items)
"items if unspecified, each key-value pair in the Data field of the referenced\nConfigMap will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the ConfigMap,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.configMap.withItemsMixin
withItemsMixin(items)
"items if unspecified, each key-value pair in the Data field of the referenced\nConfigMap will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the ConfigMap,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
Note: This function appends passed data to existing values
fn spec.template.spec.volumes.configMap.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.volumes.configMap.withOptional
withOptional(optional)
"optional specify whether the ConfigMap or its keys must be defined"
obj spec.template.spec.volumes.configMap.items
"items if unspecified, each key-value pair in the Data field of the referenced\nConfigMap will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the ConfigMap,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.configMap.items.withKey
withKey(key)
"key is the key to project."
fn spec.template.spec.volumes.configMap.items.withMode
withMode(mode)
"mode is Optional: mode bits used to set permissions on this file.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nIf not specified, the volume defaultMode will be used.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.configMap.items.withPath
withPath(path)
"path is the relative path of the file to map the key to.\nMay not be an absolute path.\nMay not contain the path element '..'.\nMay not start with the string '..'."
obj spec.template.spec.volumes.projected
"projected items for all in one resources secrets, configmaps, and downward API"
fn spec.template.spec.volumes.projected.withDefaultMode
withDefaultMode(defaultMode)
"defaultMode are the mode bits used to set permissions on created files by default.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nDirectories within the path are not affected by this setting.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.projected.withSources
withSources(sources)
"sources is the list of volume projections"
fn spec.template.spec.volumes.projected.withSourcesMixin
withSourcesMixin(sources)
"sources is the list of volume projections"
Note: This function appends passed data to existing values
obj spec.template.spec.volumes.projected.sources
"sources is the list of volume projections"
obj spec.template.spec.volumes.projected.sources.configMap
"configMap information about the configMap data to project"
fn spec.template.spec.volumes.projected.sources.configMap.withItems
withItems(items)
"items if unspecified, each key-value pair in the Data field of the referenced\nConfigMap will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the ConfigMap,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.projected.sources.configMap.withItemsMixin
withItemsMixin(items)
"items if unspecified, each key-value pair in the Data field of the referenced\nConfigMap will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the ConfigMap,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
Note: This function appends passed data to existing values
fn spec.template.spec.volumes.projected.sources.configMap.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.volumes.projected.sources.configMap.withOptional
withOptional(optional)
"optional specify whether the ConfigMap or its keys must be defined"
obj spec.template.spec.volumes.projected.sources.configMap.items
"items if unspecified, each key-value pair in the Data field of the referenced\nConfigMap will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the ConfigMap,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.projected.sources.configMap.items.withKey
withKey(key)
"key is the key to project."
fn spec.template.spec.volumes.projected.sources.configMap.items.withMode
withMode(mode)
"mode is Optional: mode bits used to set permissions on this file.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nIf not specified, the volume defaultMode will be used.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.projected.sources.configMap.items.withPath
withPath(path)
"path is the relative path of the file to map the key to.\nMay not be an absolute path.\nMay not contain the path element '..'.\nMay not start with the string '..'."
obj spec.template.spec.volumes.projected.sources.downwardAPI
"downwardAPI information about the downwardAPI data to project"
fn spec.template.spec.volumes.projected.sources.downwardAPI.withItems
withItems(items)
"Items is a list of DownwardAPIVolume file"
fn spec.template.spec.volumes.projected.sources.downwardAPI.withItemsMixin
withItemsMixin(items)
"Items is a list of DownwardAPIVolume file"
Note: This function appends passed data to existing values
obj spec.template.spec.volumes.projected.sources.downwardAPI.items
"Items is a list of DownwardAPIVolume file"
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.withMode
withMode(mode)
"Optional: mode bits used to set permissions on this file, must be an octal value\nbetween 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nIf not specified, the volume defaultMode will be used.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.withPath
withPath(path)
"Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'"
obj spec.template.spec.volumes.projected.sources.downwardAPI.items.fieldRef
"Required: Selects a field of the pod: only annotations, labels, name and namespace are supported."
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.fieldRef.withApiVersion
withApiVersion(apiVersion)
"Version of the schema the FieldPath is written in terms of, defaults to \"v1\"."
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.fieldRef.withFieldPath
withFieldPath(fieldPath)
"Path of the field to select in the specified API version."
obj spec.template.spec.volumes.projected.sources.downwardAPI.items.resourceFieldRef
"Selects a resource of the container: only resources limits and requests\n(limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported."
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.resourceFieldRef.withContainerName
withContainerName(containerName)
"Container name: required for volumes, optional for env vars"
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.resourceFieldRef.withDivisor
withDivisor(divisor)
"Specifies the output format of the exposed resources, defaults to \"1\
fn spec.template.spec.volumes.projected.sources.downwardAPI.items.resourceFieldRef.withResource
withResource(resource)
"Required: resource to select"
obj spec.template.spec.volumes.projected.sources.secret
"secret information about the secret data to project"
fn spec.template.spec.volumes.projected.sources.secret.withItems
withItems(items)
"items if unspecified, each key-value pair in the Data field of the referenced\nSecret will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the Secret,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.projected.sources.secret.withItemsMixin
withItemsMixin(items)
"items if unspecified, each key-value pair in the Data field of the referenced\nSecret will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the Secret,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
Note: This function appends passed data to existing values
fn spec.template.spec.volumes.projected.sources.secret.withName
withName(name)
"Name of the referent.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names\nTODO: Add other useful fields. apiVersion, kind, uid?"
fn spec.template.spec.volumes.projected.sources.secret.withOptional
withOptional(optional)
"optional field specify whether the Secret or its key must be defined"
obj spec.template.spec.volumes.projected.sources.secret.items
"items if unspecified, each key-value pair in the Data field of the referenced\nSecret will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the Secret,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.projected.sources.secret.items.withKey
withKey(key)
"key is the key to project."
fn spec.template.spec.volumes.projected.sources.secret.items.withMode
withMode(mode)
"mode is Optional: mode bits used to set permissions on this file.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nIf not specified, the volume defaultMode will be used.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.projected.sources.secret.items.withPath
withPath(path)
"path is the relative path of the file to map the key to.\nMay not be an absolute path.\nMay not contain the path element '..'.\nMay not start with the string '..'."
obj spec.template.spec.volumes.projected.sources.serviceAccountToken
"serviceAccountToken is information about the serviceAccountToken data to project"
fn spec.template.spec.volumes.projected.sources.serviceAccountToken.withAudience
withAudience(audience)
"audience is the intended audience of the token. A recipient of a token\nmust identify itself with an identifier specified in the audience of the\ntoken, and otherwise should reject the token. The audience defaults to the\nidentifier of the apiserver."
fn spec.template.spec.volumes.projected.sources.serviceAccountToken.withExpirationSeconds
withExpirationSeconds(expirationSeconds)
"expirationSeconds is the requested duration of validity of the service\naccount token. As the token approaches expiration, the kubelet volume\nplugin will proactively rotate the service account token. The kubelet will\nstart trying to rotate the token if the token is older than 80 percent of\nits time to live or if the token is older than 24 hours.Defaults to 1 hour\nand must be at least 10 minutes."
fn spec.template.spec.volumes.projected.sources.serviceAccountToken.withPath
withPath(path)
"path is the path relative to the mount point of the file to project the\ntoken into."
obj spec.template.spec.volumes.secret
"secret represents a secret that should populate this volume.\nMore info: https://kubernetes.io/docs/concepts/storage/volumes#secret"
fn spec.template.spec.volumes.secret.withDefaultMode
withDefaultMode(defaultMode)
"defaultMode is Optional: mode bits used to set permissions on created files by default.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values\nfor mode bits. Defaults to 0644.\nDirectories within the path are not affected by this setting.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.secret.withItems
withItems(items)
"items If unspecified, each key-value pair in the Data field of the referenced\nSecret will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the Secret,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.secret.withItemsMixin
withItemsMixin(items)
"items If unspecified, each key-value pair in the Data field of the referenced\nSecret will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the Secret,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
Note: This function appends passed data to existing values
fn spec.template.spec.volumes.secret.withOptional
withOptional(optional)
"optional field specify whether the Secret or its keys must be defined"
fn spec.template.spec.volumes.secret.withSecretName
withSecretName(secretName)
"secretName is the name of the secret in the pod's namespace to use.\nMore info: https://kubernetes.io/docs/concepts/storage/volumes#secret"
obj spec.template.spec.volumes.secret.items
"items If unspecified, each key-value pair in the Data field of the referenced\nSecret will be projected into the volume as a file whose name is the\nkey and content is the value. If specified, the listed keys will be\nprojected into the specified paths, and unlisted keys will not be\npresent. If a key is specified which is not present in the Secret,\nthe volume setup will error unless it is marked optional. Paths must be\nrelative and may not contain the '..' path or start with '..'."
fn spec.template.spec.volumes.secret.items.withKey
withKey(key)
"key is the key to project."
fn spec.template.spec.volumes.secret.items.withMode
withMode(mode)
"mode is Optional: mode bits used to set permissions on this file.\nMust be an octal value between 0000 and 0777 or a decimal value between 0 and 511.\nYAML accepts both octal and decimal values, JSON requires decimal values for mode bits.\nIf not specified, the volume defaultMode will be used.\nThis might be in conflict with other options that affect the file\nmode, like fsGroup, and the result can be other mode bits set."
fn spec.template.spec.volumes.secret.items.withPath
withPath(path)
"path is the relative path of the file to map the key to.\nMay not be an absolute path.\nMay not contain the path element '..'.\nMay not start with the string '..'."