You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
procMount denotes the type of proc mount to use for the containers.
2649
2649
The default value is Default which uses the container runtime defaults for
2650
2650
readonly paths and masked paths.
2651
-
This requires the ProcMountType feature flag to be enabled.
2652
2651
Note that this field cannot be set when spec.os.name is windows.
2653
2652
type: string
2654
2653
readOnlyRootFilesystem:
@@ -4253,7 +4252,6 @@ spec:
4253
4252
procMount denotes the type of proc mount to use for the containers.
4254
4253
The default value is Default which uses the container runtime defaults for
4255
4254
readonly paths and masked paths.
4256
-
This requires the ProcMountType feature flag to be enabled.
4257
4255
Note that this field cannot be set when spec.os.name is windows.
4258
4256
type: string
4259
4257
readOnlyRootFilesystem:
@@ -4745,7 +4743,6 @@ spec:
4745
4743
When set to false, a new userns is created for the pod. Setting false is useful for
4746
4744
mitigating container breakout vulnerabilities even allowing users to run their
4747
4745
containers as root without actually having root privileges on the host.
4748
-
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
4749
4746
type: boolean
4750
4747
hostname:
4751
4748
description: |-
@@ -5938,7 +5935,6 @@ spec:
5938
5935
procMount denotes the type of proc mount to use for the containers.
5939
5936
The default value is Default which uses the container runtime defaults for
5940
5937
readonly paths and masked paths.
5941
-
This requires the ProcMountType feature flag to be enabled.
5942
5938
Note that this field cannot be set when spec.os.name is windows.
5943
5939
type: string
5944
5940
readOnlyRootFilesystem:
@@ -6515,6 +6511,14 @@ spec:
6515
6511
6516
6512
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
6517
6513
Containers that need access to the ResourceClaim reference it with this name.
6514
+
6515
+
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
6516
+
belongs to a PodGroup, a PodResourceClaim is matched to a
6517
+
PodGroupResourceClaim if all of their fields are equal (Name,
6518
+
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
6519
+
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
6520
+
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
6521
+
Pods.
6518
6522
properties:
6519
6523
name:
6520
6524
description: |-
@@ -6540,6 +6544,16 @@ spec:
6540
6544
generated component, will be used to form a unique name for the
6541
6545
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
6542
6546
6547
+
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
6548
+
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
6549
+
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
6550
+
ResourceClaim generated for the PodGroup. All pods in the group that
6551
+
define an equivalent PodResourceClaim matching the
6552
+
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
6553
+
generated ResourceClaim. ResourceClaims generated for a PodGroup are
6554
+
owned by the PodGroup and their lifecycles are tied to the PodGroup
6555
+
instead of any individual pod.
6556
+
6543
6557
This field is immutable and no changes will be made to the
6544
6558
corresponding ResourceClaim by the control plane after creating the
6545
6559
ResourceClaim.
@@ -6666,6 +6680,28 @@ spec:
6666
6680
x-kubernetes-list-map-keys:
6667
6681
- name
6668
6682
x-kubernetes-list-type: map
6683
+
schedulingGroup:
6684
+
description: |-
6685
+
SchedulingGroup provides a reference to the immediate scheduling runtime
6686
+
grouping object that this Pod belongs to.
6687
+
This field is used by the scheduler to identify the group and apply the
6688
+
correct group scheduling policies. The association with a group also
6689
+
impacts other lifecycle aspects of a Pod that are relevant in a wider context
6690
+
of scheduling like preemption, resource attachment, etc. If not specified,
6691
+
the Pod is treated as a single unit in all of these aspects.
6692
+
The group object referenced by this field may not exist at the time the
6693
+
Pod is created.
6694
+
This field is immutable, but a group object with the same name may be
6695
+
recreated with different policies. Doing this during pod scheduling
6696
+
may result in the placement not conforming to the expected policies.
6697
+
properties:
6698
+
podGroupName:
6699
+
description: |-
6700
+
PodGroupName specifies the name of the standalone PodGroup object
6701
+
that represents the runtime instance of this group.
6702
+
Must be a DNS subdomain.
6703
+
type: string
6704
+
type: object
6669
6705
securityContext:
6670
6706
description: |-
6671
6707
SecurityContext holds pod-level security attributes and common container settings.
@@ -8127,7 +8163,7 @@ spec:
8127
8163
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
8128
8164
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
8129
8165
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
8130
-
The volume will be mounted read-only (ro) and non-executable files (noexec).
8166
+
The volume will be mounted read-only (ro).
8131
8167
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
8132
8168
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
8133
8169
properties:
@@ -8301,8 +8337,7 @@ spec:
8301
8337
description: |-
8302
8338
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
8303
8339
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
8304
-
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
8305
-
is on.
8340
+
are redirected to the pxd.portworx.com CSI driver.
8306
8341
properties:
8307
8342
fsType:
8308
8343
description: |-
@@ -9149,42 +9184,6 @@ spec:
9149
9184
x-kubernetes-list-map-keys:
9150
9185
- name
9151
9186
x-kubernetes-list-type: map
9152
-
workloadRef:
9153
-
description: |-
9154
-
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
9155
-
This field is used by the scheduler to identify the PodGroup and apply the
9156
-
correct group scheduling policies. The Workload object referenced
9157
-
by this field may not exist at the time the Pod is created.
9158
-
This field is immutable, but a Workload object with the same name
9159
-
may be recreated with different policies. Doing this during pod scheduling
9160
-
may result in the placement not conforming to the expected policies.
9161
-
properties:
9162
-
name:
9163
-
description: |-
9164
-
Name defines the name of the Workload object this Pod belongs to.
9165
-
Workload must be in the same namespace as the Pod.
9166
-
If it doesn't match any existing Workload, the Pod will remain unschedulable
9167
-
until a Workload object is created and observed by the kube-scheduler.
9168
-
It must be a DNS subdomain.
9169
-
type: string
9170
-
podGroup:
9171
-
description: |-
9172
-
PodGroup is the name of the PodGroup within the Workload that this Pod
9173
-
belongs to. If it doesn't match any existing PodGroup within the Workload,
9174
-
the Pod will remain unschedulable until the Workload object is recreated
9175
-
and observed by the kube-scheduler. It must be a DNS label.
9176
-
type: string
9177
-
podGroupReplicaKey:
9178
-
description: |-
9179
-
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
9180
-
Pod belongs. It is used to distinguish pods belonging to different replicas
9181
-
of the same pod group. The pod group policy is applied separately to each replica.
0 commit comments