pulumi-kubernetes-kotlin/com.pulumi.kubernetes.policy.v1beta1.kotlin.outputs

Package-level declarations

Types

AllowedCSIDriver

data class AllowedCSIDriver(val name: String)

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

AllowedCSIDriverPatch

data class AllowedCSIDriverPatch(val name: String? = null)

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

AllowedFlexVolume

data class AllowedFlexVolume(val driver: String)

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

AllowedFlexVolumePatch

data class AllowedFlexVolumePatch(val driver: String? = null)

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

AllowedHostPath

data class AllowedHostPath(val pathPrefix: String? = null, val readOnly: Boolean? = null)

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

AllowedHostPathPatch

data class AllowedHostPathPatch(val pathPrefix: String? = null, val readOnly: Boolean? = null)

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

FSGroupStrategyOptions

data class FSGroupStrategyOptions(val ranges: List<IDRange>? = null, val rule: String? = null)

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

FSGroupStrategyOptionsPatch

data class FSGroupStrategyOptionsPatch(val ranges: List<IDRangePatch>? = null, val rule: String? = null)

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

HostPortRange

data class HostPortRange(val max: Int, val min: Int)

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

HostPortRangePatch

data class HostPortRangePatch(val max: Int? = null, val min: Int? = null)

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

IDRange

data class IDRange(val max: Int, val min: Int)

IDRange provides a min/max of an allowed range of IDs.

IDRangePatch

data class IDRangePatch(val max: Int? = null, val min: Int? = null)

IDRange provides a min/max of an allowed range of IDs.

PodDisruptionBudget

data class PodDisruptionBudget(val apiVersion: String? = null, val kind: String? = null, val metadata: ObjectMeta? = null, val spec: PodDisruptionBudgetSpec? = null, val status: PodDisruptionBudgetStatus? = null)

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

PodDisruptionBudgetSpec

data class PodDisruptionBudgetSpec(val maxUnavailable: Either<Int, String>? = null, val minAvailable: Either<Int, String>? = null, val selector: LabelSelector? = null)

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

PodDisruptionBudgetSpecPatch

data class PodDisruptionBudgetSpecPatch(val maxUnavailable: Either<Int, String>? = null, val minAvailable: Either<Int, String>? = null, val selector: LabelSelectorPatch? = null)

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

PodDisruptionBudgetStatus

data class PodDisruptionBudgetStatus(val currentHealthy: Int, val desiredHealthy: Int, val disruptedPods: Map<String, String>? = null, val disruptionsAllowed: Int, val expectedPods: Int, val observedGeneration: Int? = null)

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

PodDisruptionBudgetStatusPatch

data class PodDisruptionBudgetStatusPatch(val currentHealthy: Int? = null, val desiredHealthy: Int? = null, val disruptedPods: Map<String, String>? = null, val disruptionsAllowed: Int? = null, val expectedPods: Int? = null, val observedGeneration: Int? = null)

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

PodSecurityPolicy

data class PodSecurityPolicy(val apiVersion: String? = null, val kind: String? = null, val metadata: ObjectMeta? = null, val spec: PodSecurityPolicySpec? = null)

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

PodSecurityPolicySpec

data class PodSecurityPolicySpec(val allowPrivilegeEscalation: Boolean? = null, val allowedCSIDrivers: List<AllowedCSIDriver>? = null, val allowedCapabilities: List<String>? = null, val allowedFlexVolumes: List<AllowedFlexVolume>? = null, val allowedHostPaths: List<AllowedHostPath>? = null, val allowedProcMountTypes: List<String>? = null, val allowedUnsafeSysctls: List<String>? = null, val defaultAddCapabilities: List<String>? = null, val defaultAllowPrivilegeEscalation: Boolean? = null, val forbiddenSysctls: List<String>? = null, val fsGroup: FSGroupStrategyOptions, val hostIPC: Boolean? = null, val hostNetwork: Boolean? = null, val hostPID: Boolean? = null, val hostPorts: List<HostPortRange>? = null, val privileged: Boolean? = null, val readOnlyRootFilesystem: Boolean? = null, val requiredDropCapabilities: List<String>? = null, val runAsGroup: RunAsGroupStrategyOptions? = null, val runAsUser: RunAsUserStrategyOptions, val runtimeClass: RuntimeClassStrategyOptions? = null, val seLinux: SELinuxStrategyOptions, val supplementalGroups: SupplementalGroupsStrategyOptions, val volumes: List<String>? = null)

PodSecurityPolicySpec defines the policy enforced.

PodSecurityPolicySpecPatch

data class PodSecurityPolicySpecPatch(val allowPrivilegeEscalation: Boolean? = null, val allowedCSIDrivers: List<AllowedCSIDriverPatch>? = null, val allowedCapabilities: List<String>? = null, val allowedFlexVolumes: List<AllowedFlexVolumePatch>? = null, val allowedHostPaths: List<AllowedHostPathPatch>? = null, val allowedProcMountTypes: List<String>? = null, val allowedUnsafeSysctls: List<String>? = null, val defaultAddCapabilities: List<String>? = null, val defaultAllowPrivilegeEscalation: Boolean? = null, val forbiddenSysctls: List<String>? = null, val fsGroup: FSGroupStrategyOptionsPatch? = null, val hostIPC: Boolean? = null, val hostNetwork: Boolean? = null, val hostPID: Boolean? = null, val hostPorts: List<HostPortRangePatch>? = null, val privileged: Boolean? = null, val readOnlyRootFilesystem: Boolean? = null, val requiredDropCapabilities: List<String>? = null, val runAsGroup: RunAsGroupStrategyOptionsPatch? = null, val runAsUser: RunAsUserStrategyOptionsPatch? = null, val runtimeClass: RuntimeClassStrategyOptionsPatch? = null, val seLinux: SELinuxStrategyOptionsPatch? = null, val supplementalGroups: SupplementalGroupsStrategyOptionsPatch? = null, val volumes: List<String>? = null)

PodSecurityPolicySpec defines the policy enforced.

RunAsGroupStrategyOptions

data class RunAsGroupStrategyOptions(val ranges: List<IDRange>? = null, val rule: String)

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

RunAsGroupStrategyOptionsPatch

data class RunAsGroupStrategyOptionsPatch(val ranges: List<IDRangePatch>? = null, val rule: String? = null)

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

RunAsUserStrategyOptions

data class RunAsUserStrategyOptions(val ranges: List<IDRange>? = null, val rule: String)

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

RunAsUserStrategyOptionsPatch

data class RunAsUserStrategyOptionsPatch(val ranges: List<IDRangePatch>? = null, val rule: String? = null)

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

RuntimeClassStrategyOptions

data class RuntimeClassStrategyOptions(val allowedRuntimeClassNames: List<String>, val defaultRuntimeClassName: String? = null)

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

RuntimeClassStrategyOptionsPatch

data class RuntimeClassStrategyOptionsPatch(val allowedRuntimeClassNames: List<String>? = null, val defaultRuntimeClassName: String? = null)

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

SELinuxStrategyOptions

data class SELinuxStrategyOptions(val rule: String, val seLinuxOptions: SELinuxOptions? = null)

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

SELinuxStrategyOptionsPatch

data class SELinuxStrategyOptionsPatch(val rule: String? = null, val seLinuxOptions: SELinuxOptionsPatch? = null)

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

SupplementalGroupsStrategyOptions

data class SupplementalGroupsStrategyOptions(val ranges: List<IDRange>? = null, val rule: String? = null)

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

SupplementalGroupsStrategyOptionsPatch

data class SupplementalGroupsStrategyOptionsPatch(val ranges: List<IDRangePatch>? = null, val rule: String? = null)

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.