devworkspaceoperatorconfigs.controller.devfile.io.CustomResourceDefinition.yaml

apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.18.0
  labels:
    app.kubernetes.io/name: devworkspace-controller
    app.kubernetes.io/part-of: devworkspace-operator
  name: devworkspaceoperatorconfigs.controller.devfile.io
spec:
  group: controller.devfile.io
  names:
    kind: DevWorkspaceOperatorConfig
    listKind: DevWorkspaceOperatorConfigList
    plural: devworkspaceoperatorconfigs
    shortNames:
    - dwoc
    singular: devworkspaceoperatorconfig
  scope: Namespaced
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: DevWorkspaceOperatorConfig is the Schema for the devworkspaceoperatorconfigs
          API
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          config:
            description: |-
              OperatorConfiguration defines configuration options for the DevWorkspace
              Operator.
            properties:
              enableExperimentalFeatures:
                description: |-
                  EnableExperimentalFeatures turns on in-development features of the controller.
                  This option should generally not be enabled, as any capabilites are subject
                  to removal without notice.
                type: boolean
              routing:
                description: Routing defines configuration options related to DevWorkspace
                  networking
                properties:
                  clusterHostSuffix:
                    description: |-
                      ClusterHostSuffix is the hostname suffix to be used for DevWorkspace endpoints.
                      On OpenShift, the DevWorkspace Operator will attempt to determine the appropriate
                      value automatically. Must be specified on Kubernetes.
                    type: string
                  defaultRoutingClass:
                    description: |-
                      DefaultRoutingClass specifies the routingClass to be used when a DevWorkspace
                      specifies an empty `.spec.routingClass`. Supported routingClasses can be defined
                      in other controllers. If not specified, the default value of "basic" is used.
                    type: string
                  proxyConfig:
                    description: |-
                      ProxyConfig defines the proxy settings that should be used for all DevWorkspaces.
                      These values are propagated to workspace containers as environment variables.

                      On OpenShift, the operator automatically reads values from the "cluster" proxies.config.openshift.io
                      object and this value only needs to be set to override those defaults. Values for httpProxy
                      and httpsProxy override the cluster configuration directly. Entries for noProxy are merged
                      with the noProxy values in the cluster configuration. To ignore automatically read values from the cluster,
                      set values in fields to the empty string ("")

                      Changes to the proxy configuration are detected by the DevWorkspace Operator and propagated to
                      DevWorkspaces. However, changing the proxy configuration for the DevWorkspace Operator itself
                      requires restarting the controller deployment.
                    properties:
                      httpProxy:
                        description: |-
                          HttpProxy is the URL of the proxy for HTTP requests, in the format http://USERNAME:PASSWORD@SERVER:PORT/. To ignore
                          automatically detected proxy settings for the cluster, set this field to an empty string ("")
                        type: string
                      httpsProxy:
                        description: |-
                          HttpsProxy is the URL of the proxy for HTTPS requests, in the format http://USERNAME:PASSWORD@SERVER:PORT/. To ignore
                          automatically detected proxy settings for the cluster, set this field to an empty string ("")
                        type: string
                      noProxy:
                        description: |-
                          NoProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used. Ignored
                          when HttpProxy and HttpsProxy are unset. To ignore automatically detected proxy settings for the cluster, set this
                          field to an empty string ("")
                        type: string
                    type: object
                  tlsCertificateConfigmapRef:
                    description: |-
                      TLSCertificateConfigmapRef defines the name and namespace of the configmap with a certificate to inject into the
                      HTTP client.
                    properties:
                      name:
                        description: Name is the name of the configmap
                        type: string
                      namespace:
                        description: Namespace is the namespace of the configmap
                        type: string
                    required:
                    - name
                    - namespace
                    type: object
                type: object
              webhook:
                description: |-
                  Webhook defines configuration options for the DevWorkspace Webhook Server.
                  Note: In order for changes made to the webhook configuration to take effect:

                  - The changes must be made in the global DevWorkspaceOperatorConfig, which has the
                    name 'devworkspace-operator-config' and exists in the same namespace where the
                    DevWorkspaceOperator is deployed.

                  - The devworkspace-controller-manager pod must be terminated and recreated for the
                    DevWorkspace Webhook Server deployment to be updated.
                properties:
                  nodeSelector:
                    additionalProperties:
                      type: string
                    description: |-
                      NodeSelector defines the map of Kubernetes nodeSelectors to apply to the DevWorkspace Webhook
                      Server pod(s).
                      No NodeSelectors are added by default.
                    type: object
                  replicas:
                    default: 2
                    description: |-
                      Replicas defines the number of desired DevWorkspace Webhook Server pods.
                      Defaults to 2.
                    format: int32
                    minimum: 1
                    type: integer
                  tolerations:
                    description: |-
                      Tolerations defines the array of Kubernetes pod tolerations to apply to the DevWorkspace Webhook
                      Server pod(s).
                      No Tolerations are added by default.
                    items:
                      description: |-
                        The pod this Toleration is attached to tolerates any taint that matches
                        the triple <key,value,effect> using the matching operator <operator>.
                      properties:
                        effect:
                          description: |-
                            Effect indicates the taint effect to match. Empty means match all taint effects.
                            When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
                          type: string
                        key:
                          description: |-
                            Key is the taint key that the toleration applies to. Empty means match all taint keys.
                            If the key is empty, operator must be Exists; this combination means to match all values and all keys.
                          type: string
                        operator:
                          description: |-
                            Operator represents a key's relationship to the value.
                            Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal.
                            Exists is equivalent to wildcard for value, so that a pod can
                            tolerate all taints of a particular category.
                            Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
                          type: string
                        tolerationSeconds:
                          description: |-
                            TolerationSeconds represents the period of time the toleration (which must be
                            of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
                            it is not set, which means tolerate the taint forever (do not evict). Zero and
                            negative values will be treated as 0 (evict immediately) by the system.
                          format: int64
                          type: integer
                        value:
                          description: |-
                            Value is the taint value the toleration matches to.
                            If the operator is Exists, the value should be empty, otherwise just a regular string.
                          type: string
                      type: object
                    type: array
                type: object
              workspace:
                description: |-
                  Workspace defines configuration options related to how DevWorkspaces are
                  managed
                properties:
                  backupCronJob:
                    description: BackupCronJobConfig defines configuration options
                      for a cron job that automatically backs up workspace PVCs.
                    properties:
                      backoffLimit:
                        default: 1
                        description: |-
                          BackoffLimit specifies the number of retries before marking a backup job as failed.
                          Defaults to 1 if not specified.
                        format: int32
                        minimum: 0
                        type: integer
                      enable:
                        description: |-
                          Enable determines whether backup CronJobs should be created for workspace PVCs.
                          Defaults to false if not specified.
                        type: boolean
                      oras:
                        description: |-
                          OrasConfig defines additional configuration options for the oras CLI used to
                          push and pull backup images.
                        properties:
                          extraArgs:
                            description: ExtraArgs are additional arguments passed
                              to the oras CLI
                            type: string
                        type: object
                      registry:
                        description: RegistryConfig defines the registry configuration
                          where backup images are stored.
                        properties:
                          authSecret:
                            description: |-
                              AuthSecret is the name of a Kubernetes secret of
                              type kubernetes.io/dockerconfigjson.
                              The secret is expected to be in the same namespace the workspace is running in.
                              If secret is not found in the workspace namespace, the operator will look for the secret
                              in the namespace where the operator is running in.
                              as the DevWorkspaceOperatorCongfig.
                              The secret must contain "controller.devfile.io/watch-secret=true" label so that it can be
                              recognized by the operator.
                            type: string
                          path:
                            description: |-
                              A registry where backup images are stored. Images are stored
                              in {path}/${DEVWORKSPACE_NAMESPACE}/${DEVWORKSPACE_NAME}:latest
                            type: string
                        required:
                        - path
                        type: object
                      schedule:
                        default: 0 0 1 * *
                        description: |-
                          Schedule specifies the cron schedule for the backup cron job.
                          For example, "0 1 * * *" runs daily at 1 AM.
                        type: string
                    required:
                    - registry
                    type: object
                  cleanupCronJob:
                    description: CleanupCronJobConfig defines configuration options
                      for a cron job that automatically cleans up stale DevWorkspaces.
                    properties:
                      dryRun:
                        description: |-
                          DryRun determines whether the cleanup cron job should be run in dry-run mode.
                          If set to true, the cron job will not delete any DevWorkspaces, but will log the DevWorkspaces that would have been deleted.
                          Defaults to false if not specified.
                        type: boolean
                      enable:
                        description: |-
                          Enable determines whether the cleanup cron job is enabled.
                          Defaults to false if not specified.
                        type: boolean
                      retainTime:
                        default: 2592000
                        description: |-
                          RetainTime specifies the minimum time (in seconds) since a DevWorkspace was last started before it is considered stale and eligible for cleanup.
                          For example, a value of 2592000 (30 days) would mean that any DevWorkspace that has not been started in the last 30 days will be deleted.
                          Defaults to 2592000 seconds (30 days) if not specified.
                        format: int32
                        minimum: 0
                        type: integer
                      schedule:
                        default: 0 0 1 * *
                        description: Schedule specifies the cron schedule for the
                          cleanup cron job.
                        type: string
                    type: object
                  cleanupOnStop:
                    description: |-
                      CleanupOnStop governs how the Operator handles stopped DevWorkspaces. If set to
                      true, additional resources associated with a DevWorkspace (e.g. services, deployments,
                      configmaps, etc.) will be removed from the cluster when a DevWorkspace has
                      .spec.started = false. If set to false, resources will be scaled down (e.g. deployments
                      but the objects will be left on the cluster). The default value is false.
                    type: boolean
                  containerResourceCaps:
                    description: |-
                      ContainerResourceCaps defines the maximum resource requirements enforced for workspace
                      containers. If a container specifies limits or requests that exceed these values, they
                      will be capped at the maximum. Note: Caps only apply when resources are already specified
                      on a container. For containers without resource specifications, use DefaultContainerResources
                      instead. These resource caps do not apply to initContainers or the projectClone container.
                    properties:
                      claims:
                        description: |-
                          Claims lists the names of resources, defined in spec.resourceClaims,
                          that are used by this container.

                          This field depends on the
                          DynamicResourceAllocation feature gate.

                          This field is immutable. It can only be set for containers.
                        items:
                          description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                          properties:
                            name:
                              description: |-
                                Name must match the name of one entry in pod.spec.resourceClaims of
                                the Pod where this field is used. It makes that resource available
                                inside a container.
                              type: string
                            request:
                              description: |-
                                Request is the name chosen for a request in the referenced claim.
                                If empty, everything from the claim is made available, otherwise
                                only the result of this request.
                              type: string
                          required:
                          - name
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      limits:
                        additionalProperties:
                          anyOf:
                          - type: integer
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
                        description: |-
                          Limits describes the maximum amount of compute resources allowed.
                          More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        type: object
                      requests:
                        additionalProperties:
                          anyOf:
                          - type: integer
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
                        description: |-
                          Requests describes the minimum amount of compute resources required.
                          If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                          otherwise to an implementation-defined value. Requests cannot exceed Limits.
                          More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        type: object
                    type: object
                  containerSecurityContext:
                    description: |-
                      ContainerSecurityContext overrides the default ContainerSecurityContext used for all
                      workspace-related containers created by the DevWorkspace Operator. If set, defined
                      values are merged into the default configuration
                    properties:
                      allowPrivilegeEscalation:
                        description: |-
                          AllowPrivilegeEscalation controls whether a process can gain more
                          privileges than its parent process. This bool directly controls if
                          the no_new_privs flag will be set on the container process.
                          AllowPrivilegeEscalation is true always when the container is:
                          1) run as Privileged
                          2) has CAP_SYS_ADMIN
                          Note that this field cannot be set when spec.os.name is windows.
                        type: boolean
                      appArmorProfile:
                        description: |-
                          appArmorProfile is the AppArmor options to use by this container. If set, this profile
                          overrides the pod's appArmorProfile.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          localhostProfile:
                            description: |-
                              localhostProfile indicates a profile loaded on the node that should be used.
                              The profile must be preconfigured on the node to work.
                              Must match the loaded name of the profile.
                              Must be set if and only if type is "Localhost".
                            type: string
                          type:
                            description: |-
                              type indicates which kind of AppArmor profile will be applied.
                              Valid options are:
                                Localhost - a profile pre-loaded on the node.
                                RuntimeDefault - the container runtime's default profile.
                                Unconfined - no AppArmor enforcement.
                            type: string
                        required:
                        - type
                        type: object
                      capabilities:
                        description: |-
                          The capabilities to add/drop when running containers.
                          Defaults to the default set of capabilities granted by the container runtime.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          add:
                            description: Added capabilities
                            items:
                              description: Capability represent POSIX capabilities
                                type
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          drop:
                            description: Removed capabilities
                            items:
                              description: Capability represent POSIX capabilities
                                type
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                        type: object
                      privileged:
                        description: |-
                          Run container in privileged mode.
                          Processes in privileged containers are essentially equivalent to root on the host.
                          Defaults to false.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: boolean
                      procMount:
                        description: |-
                          procMount denotes the type of proc mount to use for the containers.
                          The default value is Default which uses the container runtime defaults for
                          readonly paths and masked paths.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: string
                      readOnlyRootFilesystem:
                        description: |-
                          Whether this container has a read-only root filesystem.
                          Default is false.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: boolean
                      runAsGroup:
                        description: |-
                          The GID to run the entrypoint of the container process.
                          Uses runtime default if unset.
                          May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      runAsNonRoot:
                        description: |-
                          Indicates that the container must run as a non-root user.
                          If true, the Kubelet will validate the image at runtime to ensure that it
                          does not run as UID 0 (root) and fail to start the container if it does.
                          If unset or false, no such validation will be performed.
                          May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                        type: boolean
                      runAsUser:
                        description: |-
                          The UID to run the entrypoint of the container process.
                          Defaults to user specified in image metadata if unspecified.
                          May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      seLinuxOptions:
                        description: |-
                          The SELinux context to be applied to the container.
                          If unspecified, the container runtime will allocate a random SELinux context for each
                          container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          level:
                            description: Level is SELinux level label that applies
                              to the container.
                            type: string
                          role:
                            description: Role is a SELinux role label that applies
                              to the container.
                            type: string
                          type:
                            description: Type is a SELinux type label that applies
                              to the container.
                            type: string
                          user:
                            description: User is a SELinux user label that applies
                              to the container.
                            type: string
                        type: object
                      seccompProfile:
                        description: |-
                          The seccomp options to use by this container. If seccomp options are
                          provided at both the pod & container level, the container options
                          override the pod options.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          localhostProfile:
                            description: |-
                              localhostProfile indicates a profile defined in a file on the node should be used.
                              The profile must be preconfigured on the node to work.
                              Must be a descending path, relative to the kubelet's configured seccomp profile location.
                              Must be set if type is "Localhost". Must NOT be set for any other type.
                            type: string
                          type:
                            description: |-
                              type indicates which kind of seccomp profile will be applied.
                              Valid options are:

                              Localhost - a profile defined in a file on the node should be used.
                              RuntimeDefault - the container runtime default profile should be used.
                              Unconfined - no profile should be applied.
                            type: string
                        required:
                        - type
                        type: object
                      windowsOptions:
                        description: |-
                          The Windows specific settings applied to all containers.
                          If unspecified, the options from the PodSecurityContext will be used.
                          If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is linux.
                        properties:
                          gmsaCredentialSpec:
                            description: |-
                              GMSACredentialSpec is where the GMSA admission webhook
                              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                              GMSA credential spec named by the GMSACredentialSpecName field.
                            type: string
                          gmsaCredentialSpecName:
                            description: GMSACredentialSpecName is the name of the
                              GMSA credential spec to use.
                            type: string
                          hostProcess:
                            description: |-
                              HostProcess determines if a container should be run as a 'Host Process' container.
                              All of a Pod's containers must have the same effective HostProcess value
                              (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                              In addition, if HostProcess is true then HostNetwork must also be set to true.
                            type: boolean
                          runAsUserName:
                            description: |-
                              The UserName in Windows to run the entrypoint of the container process.
                              Defaults to the user specified in image metadata if unspecified.
                              May also be set in PodSecurityContext. If set in both SecurityContext and
                              PodSecurityContext, the value specified in SecurityContext takes precedence.
                            type: string
                        type: object
                    type: object
                  defaultContainerResources:
                    description: |-
                      DefaultContainerResources defines the resource requirements (memory/cpu limit/request) used for
                      container components that do not define limits or requests. In order to not set a field by default,
                      the value "0" should be used. By default, the memory limit is 128Mi and the memory request is 64Mi.
                      No CPU limit or request is added by default.
                    properties:
                      claims:
                        description: |-
                          Claims lists the names of resources, defined in spec.resourceClaims,
                          that are used by this container.

                          This field depends on the
                          DynamicResourceAllocation feature gate.

                          This field is immutable. It can only be set for containers.
                        items:
                          description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                          properties:
                            name:
                              description: |-
                                Name must match the name of one entry in pod.spec.resourceClaims of
                                the Pod where this field is used. It makes that resource available
                                inside a container.
                              type: string
                            request:
                              description: |-
                                Request is the name chosen for a request in the referenced claim.
                                If empty, everything from the claim is made available, otherwise
                                only the result of this request.
                              type: string
                          required:
                          - name
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      limits:
                        additionalProperties:
                          anyOf:
                          - type: integer
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
                        description: |-
                          Limits describes the maximum amount of compute resources allowed.
                          More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        type: object
                      requests:
                        additionalProperties:
                          anyOf:
                          - type: integer
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
                        description: |-
                          Requests describes the minimum amount of compute resources required.
                          If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                          otherwise to an implementation-defined value. Requests cannot exceed Limits.
                          More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        type: object
                    type: object
                  defaultStorageSize:
                    description: |-
                      DefaultStorageSize defines an optional struct with fields to specify the sizes of Persistent Volume Claims for storage
                      classes used by DevWorkspaces.
                    properties:
                      common:
                        anyOf:
                        - type: integer
                        - type: string
                        description: |-
                          The default Persistent Volume Claim size for the "common" storage class.
                          Note that the "async" storage class also uses the PVC size set for the "common" storage class.
                          If not specified, the "common" and "async" Persistent Volume Claim sizes are set to 10Gi
                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                        x-kubernetes-int-or-string: true
                      perWorkspace:
                        anyOf:
                        - type: integer
                        - type: string
                        description: |-
                          The default Persistent Volume Claim size for the "per-workspace" storage class.
                          If not specified, the "per-workspace" Persistent Volume Claim size is set to 10Gi
                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                        x-kubernetes-int-or-string: true
                    type: object
                  defaultTemplate:
                    description: |-
                      DefaultTemplate defines an optional DevWorkspace Spec Template which gets applied to the workspace
                      if the workspace's Template Spec Components are not defined. The DefaultTemplate will overwrite the existing
                      Template Spec, with the exception of Projects (if any are defined).
                    properties:
                      attributes:
                        description: Map of implementation-dependant free-form YAML
                          attributes.
                        type: object
                        x-kubernetes-preserve-unknown-fields: true
                      commands:
                        description: Predefined, ready-to-use, devworkspace-related
                          commands
                        items:
                          properties:
                            apply:
                              description: |-
                                Command that consists in applying a given component definition,
                                typically bound to a devworkspace event.

                                For example, when an `apply` command is bound to a `preStart` event,
                                and references a `container` component, it will start the container as a
                                K8S initContainer in the devworkspace POD, unless the component has its
                                `dedicatedPod` field set to `true`.

                                When no `apply` command exist for a given component,
                                it is assumed the component will be applied at devworkspace start
                                by default, unless `deployByDefault` for that component is set to false.
                              properties:
                                component:
                                  description: Describes component that will be applied
                                  type: string
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                              required:
                              - component
                              type: object
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            commandType:
                              description: Type of devworkspace command
                              enum:
                              - Exec
                              - Apply
                              - Composite
                              - Custom
                              type: string
                            composite:
                              description: |-
                                Composite command that allows executing several sub-commands
                                either sequentially or concurrently
                              properties:
                                commands:
                                  description: The commands that comprise this composite
                                    command
                                  items:
                                    type: string
                                  type: array
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                                parallel:
                                  description: Indicates if the sub-commands should
                                    be executed concurrently
                                  type: boolean
                              type: object
                            custom:
                              description: |-
                                Custom command whose logic is implementation-dependant
                                and should be provided by the user
                                possibly through some dedicated plugin
                              properties:
                                commandClass:
                                  description: |-
                                    Class of command that the associated implementation component
                                    should use to process this command with the appropriate logic
                                  type: string
                                embeddedResource:
                                  description: |-
                                    Additional free-form configuration for this custom command
                                    that the implementation component will know how to use
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                              required:
                              - commandClass
                              - embeddedResource
                              type: object
                            exec:
                              description: CLI Command executed in an existing component
                                container
                              properties:
                                commandLine:
                                  description: |-
                                    The actual command-line string

                                    Special variables that can be used:

                                     - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.

                                     - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                  type: string
                                component:
                                  description: Describes component to which given
                                    action relates
                                  type: string
                                env:
                                  description: |-
                                    Optional list of environment variables that have to be set
                                    before running the command
                                  items:
                                    properties:
                                      name:
                                        type: string
                                      value:
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                hotReloadCapable:
                                  description: |-
                                    Specify whether the command is restarted or not when the source code changes.
                                    If set to `true` the command won't be restarted.
                                    A *hotReloadCapable* `run` or `debug` command is expected to handle file changes on its own and won't be restarted.
                                    A *hotReloadCapable* `build` command is expected to be executed only once and won't be executed again.
                                    This field is taken into account only for commands `build`, `run` and `debug` with `isDefault` set to `true`.

                                    Default value is `false`
                                  type: boolean
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                                workingDir:
                                  description: |-
                                    Working directory where the command should be executed

                                    Special variables that can be used:

                                     - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.

                                     - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                  type: string
                              required:
                              - commandLine
                              - component
                              type: object
                            id:
                              description: |-
                                Mandatory identifier that allows referencing
                                this command in composite commands, from
                                a parent, or in events.
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                          required:
                          - id
                          type: object
                        type: array
                      components:
                        description: |-
                          List of the devworkspace components, such as editor and plugins,
                          user-provided containers, or other types of components
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            componentType:
                              description: Type of component
                              enum:
                              - Container
                              - Kubernetes
                              - Openshift
                              - Volume
                              - Image
                              - Plugin
                              - Custom
                              type: string
                            container:
                              description: Allows adding and configuring devworkspace-related
                                containers
                              properties:
                                annotation:
                                  description: Annotations that should be added to
                                    specific resources for this container
                                  properties:
                                    deployment:
                                      additionalProperties:
                                        type: string
                                      description: Annotations to be added to deployment
                                      type: object
                                    service:
                                      additionalProperties:
                                        type: string
                                      description: Annotations to be added to service
                                      type: object
                                  type: object
                                args:
                                  description: |-
                                    The arguments to supply to the command running the dockerimage component. The arguments are supplied either to the default command provided in the image or to the overridden command.

                                    Defaults to an empty array, meaning use whatever is defined in the image.
                                  items:
                                    type: string
                                  type: array
                                command:
                                  description: |-
                                    The command to run in the dockerimage component instead of the default one provided in the image.

                                    Defaults to an empty array, meaning use whatever is defined in the image.
                                  items:
                                    type: string
                                  type: array
                                cpuLimit:
                                  type: string
                                cpuRequest:
                                  type: string
                                dedicatedPod:
                                  description: |-
                                    Specify if a container should run in its own separated pod,
                                    instead of running as part of the main development environment pod.

                                    Default value is `false`
                                  type: boolean
                                endpoints:
                                  items:
                                    properties:
                                      annotation:
                                        additionalProperties:
                                          type: string
                                        description: Annotations to be added to Kubernetes
                                          Ingress or Openshift Route
                                        type: object
                                      attributes:
                                        description: |-
                                          Map of implementation-dependant string-based free-form attributes.

                                          Examples of Che-specific attributes:

                                          - cookiesAuthEnabled: "true" / "false",

                                          - type: "terminal" / "ide" / "ide-dev",
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      exposure:
                                        default: public
                                        description: |-
                                          Describes how the endpoint should be exposed on the network.

                                          - `public` means that the endpoint will be exposed on the public network, typically through
                                          a K8S ingress or an OpenShift route.

                                          - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                          typically by K8S services, to be consumed by other elements running
                                          on the same cloud internal network.

                                          - `none` means that the endpoint will not be exposed and will only be accessible
                                          inside the main devworkspace POD, on a local address.

                                          Default value is `public`
                                        enum:
                                        - public
                                        - internal
                                        - none
                                        type: string
                                      name:
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: Path of the endpoint URL
                                        type: string
                                      protocol:
                                        default: http
                                        description: |-
                                          Describes the application and transport protocols of the traffic that will go through this endpoint.

                                          - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `https` when the `secure` field is set to `true`.

                                          - `https`: Endpoint will have `https` traffic, typically on a TCP connection.

                                          - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.

                                          - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.

                                          - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.

                                          - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.

                                          Default value is `http`
                                        enum:
                                        - http
                                        - https
                                        - ws
                                        - wss
                                        - tcp
                                        - udp
                                        type: string
                                      secure:
                                        description: |-
                                          Describes whether the endpoint should be secured and protected by some
                                          authentication process. This requires a protocol of `https` or `wss`.
                                        type: boolean
                                      targetPort:
                                        description: |-
                                          Port number to be used within the container component. The same port cannot
                                          be used by two different container components.
                                        type: integer
                                    required:
                                    - name
                                    - targetPort
                                    type: object
                                  type: array
                                env:
                                  description: |-
                                    Environment variables used in this container.

                                    The following variables are reserved and cannot be overridden via env:

                                     - `$PROJECTS_ROOT`

                                     - `$PROJECT_SOURCE`
                                  items:
                                    properties:
                                      name:
                                        type: string
                                      value:
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                image:
                                  type: string
                                memoryLimit:
                                  type: string
                                memoryRequest:
                                  type: string
                                mountSources:
                                  description: |-
                                    Toggles whether or not the project source code should
                                    be mounted in the component.

                                    Defaults to true for all component types except plugins and components that set `dedicatedPod` to true.
                                  type: boolean
                                sourceMapping:
                                  default: /projects
                                  description: |-
                                    Optional specification of the path in the container where
                                    project sources should be transferred/mounted when `mountSources` is `true`.
                                    When omitted, the default value of /projects is used.
                                  type: string
                                volumeMounts:
                                  description: List of volumes mounts that should
                                    be mounted is this container.
                                  items:
                                    description: Volume that should be mounted to
                                      a component container
                                    properties:
                                      name:
                                        description: |-
                                          The volume mount name is the name of an existing `Volume` component.
                                          If several containers mount the same volume name
                                          then they will reuse the same volume and will be able to access to the same files.
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: |-
                                          The path in the component container where the volume should be mounted.
                                          If not path is mentioned, default path is the is `/<name>`.
                                        type: string
                                    required:
                                    - name
                                    type: object
                                  type: array
                              required:
                              - image
                              type: object
                            custom:
                              description: |-
                                Custom component whose logic is implementation-dependant
                                and should be provided by the user
                                possibly through some dedicated controller
                              properties:
                                componentClass:
                                  description: |-
                                    Class of component that the associated implementation controller
                                    should use to process this command with the appropriate logic
                                  type: string
                                embeddedResource:
                                  description: |-
                                    Additional free-form configuration for this custom component
                                    that the implementation controller will know how to use
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                              required:
                              - componentClass
                              - embeddedResource
                              type: object
                            image:
                              description: Allows specifying the definition of an
                                image for outer loop builds
                              properties:
                                autoBuild:
                                  description: |-
                                    Defines if the image should be built during startup.

                                    Default value is `false`
                                  type: boolean
                                dockerfile:
                                  description: Allows specifying dockerfile type build
                                  properties:
                                    args:
                                      description: The arguments to supply to the
                                        dockerfile build.
                                      items:
                                        type: string
                                      type: array
                                    buildContext:
                                      description: Path of source directory to establish
                                        build context. Defaults to ${PROJECT_SOURCE}
                                        in the container
                                      type: string
                                    devfileRegistry:
                                      description: Dockerfile's Devfile Registry source
                                      properties:
                                        id:
                                          description: |-
                                            Id in a devfile registry that contains a Dockerfile. The src in the OCI registry
                                            required for the Dockerfile build will be downloaded for building the image.
                                          type: string
                                        registryUrl:
                                          description: |-
                                            Devfile Registry URL to pull the Dockerfile from when using the Devfile Registry as Dockerfile src.
                                            To ensure the Dockerfile gets resolved consistently in different environments,
                                            it is recommended to always specify the `devfileRegistryUrl` when `Id` is used.
                                          type: string
                                      required:
                                      - id
                                      type: object
                                    git:
                                      description: Dockerfile's Git source
                                      properties:
                                        checkoutFrom:
                                          description: Defines from what the project
                                            should be checked out. Required if there
                                            are more than one remote configured
                                          properties:
                                            remote:
                                              description: The remote name should
                                                be used as init. Required if there
                                                are more than one remote configured
                                              type: string
                                            revision:
                                              description: |-
                                                The revision to checkout from. Should be branch name, tag or commit id.
                                                Default branch is used if missing or specified revision is not found.
                                              type: string
                                          type: object
                                        fileLocation:
                                          description: |-
                                            Location of the Dockerfile in the Git repository when using git as Dockerfile src.
                                            Defaults to Dockerfile.
                                          type: string
                                        remotes:
                                          additionalProperties:
                                            type: string
                                          description: |-
                                            The remotes map which should be initialized in the git project.
                                            Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                          type: object
                                      required:
                                      - remotes
                                      type: object
                                    rootRequired:
                                      description: |-
                                        Specify if a privileged builder pod is required.

                                        Default value is `false`
                                      type: boolean
                                    srcType:
                                      description: Type of Dockerfile src
                                      enum:
                                      - Uri
                                      - DevfileRegistry
                                      - Git
                                      type: string
                                    uri:
                                      description: |-
                                        URI Reference of a Dockerfile.
                                        It can be a full URL or a relative URI from the current devfile as the base URI.
                                      type: string
                                  type: object
                                imageName:
                                  description: Name of the image for the resulting
                                    outerloop build
                                  type: string
                                imageType:
                                  description: Type of image
                                  enum:
                                  - Dockerfile
                                  type: string
                              required:
                              - imageName
                              type: object
                            kubernetes:
                              description: |-
                                Allows importing into the devworkspace the Kubernetes resources
                                defined in a given manifest. For example this allows reusing the Kubernetes
                                definitions used to deploy some runtime components in production.
                              properties:
                                deployByDefault:
                                  description: |-
                                    Defines if the component should be deployed during startup.

                                    Default value is `false`
                                  type: boolean
                                endpoints:
                                  items:
                                    properties:
                                      annotation:
                                        additionalProperties:
                                          type: string
                                        description: Annotations to be added to Kubernetes
                                          Ingress or Openshift Route
                                        type: object
                                      attributes:
                                        description: |-
                                          Map of implementation-dependant string-based free-form attributes.

                                          Examples of Che-specific attributes:

                                          - cookiesAuthEnabled: "true" / "false",

                                          - type: "terminal" / "ide" / "ide-dev",
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      exposure:
                                        default: public
                                        description: |-
                                          Describes how the endpoint should be exposed on the network.

                                          - `public` means that the endpoint will be exposed on the public network, typically through
                                          a K8S ingress or an OpenShift route.

                                          - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                          typically by K8S services, to be consumed by other elements running
                                          on the same cloud internal network.

                                          - `none` means that the endpoint will not be exposed and will only be accessible
                                          inside the main devworkspace POD, on a local address.

                                          Default value is `public`
                                        enum:
                                        - public
                                        - internal
                                        - none
                                        type: string
                                      name:
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: Path of the endpoint URL
                                        type: string
                                      protocol:
                                        default: http
                                        description: |-
                                          Describes the application and transport protocols of the traffic that will go through this endpoint.

                                          - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `https` when the `secure` field is set to `true`.

                                          - `https`: Endpoint will have `https` traffic, typically on a TCP connection.

                                          - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.

                                          - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.

                                          - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.

                                          - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.

                                          Default value is `http`
                                        enum:
                                        - http
                                        - https
                                        - ws
                                        - wss
                                        - tcp
                                        - udp
                                        type: string
                                      secure:
                                        description: |-
                                          Describes whether the endpoint should be secured and protected by some
                                          authentication process. This requires a protocol of `https` or `wss`.
                                        type: boolean
                                      targetPort:
                                        description: |-
                                          Port number to be used within the container component. The same port cannot
                                          be used by two different container components.
                                        type: integer
                                    required:
                                    - name
                                    - targetPort
                                    type: object
                                  type: array
                                inlined:
                                  description: Inlined manifest
                                  type: string
                                locationType:
                                  description: Type of Kubernetes-like location
                                  enum:
                                  - Uri
                                  - Inlined
                                  type: string
                                uri:
                                  description: Location in a file fetched from a uri.
                                  type: string
                              type: object
                            name:
                              description: |-
                                Mandatory name that allows referencing the component
                                from other elements (such as commands) or from an external
                                devfile that may reference this component through a parent or a plugin.
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            openshift:
                              description: |-
                                Allows importing into the devworkspace the OpenShift resources
                                defined in a given manifest. For example this allows reusing the OpenShift
                                definitions used to deploy some runtime components in production.
                              properties:
                                deployByDefault:
                                  description: |-
                                    Defines if the component should be deployed during startup.

                                    Default value is `false`
                                  type: boolean
                                endpoints:
                                  items:
                                    properties:
                                      annotation:
                                        additionalProperties:
                                          type: string
                                        description: Annotations to be added to Kubernetes
                                          Ingress or Openshift Route
                                        type: object
                                      attributes:
                                        description: |-
                                          Map of implementation-dependant string-based free-form attributes.

                                          Examples of Che-specific attributes:

                                          - cookiesAuthEnabled: "true" / "false",

                                          - type: "terminal" / "ide" / "ide-dev",
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      exposure:
                                        default: public
                                        description: |-
                                          Describes how the endpoint should be exposed on the network.

                                          - `public` means that the endpoint will be exposed on the public network, typically through
                                          a K8S ingress or an OpenShift route.

                                          - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                          typically by K8S services, to be consumed by other elements running
                                          on the same cloud internal network.

                                          - `none` means that the endpoint will not be exposed and will only be accessible
                                          inside the main devworkspace POD, on a local address.

                                          Default value is `public`
                                        enum:
                                        - public
                                        - internal
                                        - none
                                        type: string
                                      name:
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: Path of the endpoint URL
                                        type: string
                                      protocol:
                                        default: http
                                        description: |-
                                          Describes the application and transport protocols of the traffic that will go through this endpoint.

                                          - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `https` when the `secure` field is set to `true`.

                                          - `https`: Endpoint will have `https` traffic, typically on a TCP connection.

                                          - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.

                                          - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.

                                          - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.

                                          - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.

                                          Default value is `http`
                                        enum:
                                        - http
                                        - https
                                        - ws
                                        - wss
                                        - tcp
                                        - udp
                                        type: string
                                      secure:
                                        description: |-
                                          Describes whether the endpoint should be secured and protected by some
                                          authentication process. This requires a protocol of `https` or `wss`.
                                        type: boolean
                                      targetPort:
                                        description: |-
                                          Port number to be used within the container component. The same port cannot
                                          be used by two different container components.
                                        type: integer
                                    required:
                                    - name
                                    - targetPort
                                    type: object
                                  type: array
                                inlined:
                                  description: Inlined manifest
                                  type: string
                                locationType:
                                  description: Type of Kubernetes-like location
                                  enum:
                                  - Uri
                                  - Inlined
                                  type: string
                                uri:
                                  description: Location in a file fetched from a uri.
                                  type: string
                              type: object
                            plugin:
                              description: |-
                                Allows importing a plugin.

                                Plugins are mainly imported devfiles that contribute components, commands
                                and events as a consistent single unit. They are defined in either YAML files
                                following the devfile syntax,
                                or as `DevWorkspaceTemplate` Kubernetes Custom Resources
                              properties:
                                commands:
                                  description: |-
                                    Overrides of commands encapsulated in a parent devfile or a plugin.
                                    Overriding is done according to K8S strategic merge patch standard rules.
                                  items:
                                    properties:
                                      apply:
                                        description: |-
                                          Command that consists in applying a given component definition,
                                          typically bound to a devworkspace event.

                                          For example, when an `apply` command is bound to a `preStart` event,
                                          and references a `container` component, it will start the container as a
                                          K8S initContainer in the devworkspace POD, unless the component has its
                                          `dedicatedPod` field set to `true`.

                                          When no `apply` command exist for a given component,
                                          it is assumed the component will be applied at devworkspace start
                                          by default, unless `deployByDefault` for that component is set to false.
                                        properties:
                                          component:
                                            description: Describes component that
                                              will be applied
                                            type: string
                                          group:
                                            description: Defines the group this command
                                              is part of
                                            properties:
                                              isDefault:
                                                description: Identifies the default
                                                  command for a given group kind
                                                type: boolean
                                              kind:
                                                description: Kind of group the command
                                                  is part of
                                                enum:
                                                - build
                                                - run
                                                - test
                                                - debug
                                                - deploy
                                                type: string
                                            type: object
                                          label:
                                            description: |-
                                              Optional label that provides a label for this command
                                              to be used in Editor UI menus for example
                                            type: string
                                        type: object
                                      attributes:
                                        description: Map of implementation-dependant
                                          free-form YAML attributes.
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      commandType:
                                        description: Type of devworkspace command
                                        enum:
                                        - Exec
                                        - Apply
                                        - Composite
                                        type: string
                                      composite:
                                        description: |-
                                          Composite command that allows executing several sub-commands
                                          either sequentially or concurrently
                                        properties:
                                          commands:
                                            description: The commands that comprise
                                              this composite command
                                            items:
                                              type: string
                                            type: array
                                          group:
                                            description: Defines the group this command
                                              is part of
                                            properties:
                                              isDefault:
                                                description: Identifies the default
                                                  command for a given group kind
                                                type: boolean
                                              kind:
                                                description: Kind of group the command
                                                  is part of
                                                enum:
                                                - build
                                                - run
                                                - test
                                                - debug
                                                - deploy
                                                type: string
                                            type: object
                                          label:
                                            description: |-
                                              Optional label that provides a label for this command
                                              to be used in Editor UI menus for example
                                            type: string
                                          parallel:
                                            description: Indicates if the sub-commands
                                              should be executed concurrently
                                            type: boolean
                                        type: object
                                      exec:
                                        description: CLI Command executed in an existing
                                          component container
                                        properties:
                                          commandLine:
                                            description: |-
                                              The actual command-line string

                                              Special variables that can be used:

                                               - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.

                                               - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                            type: string
                                          component:
                                            description: Describes component to which
                                              given action relates
                                            type: string
                                          env:
                                            description: |-
                                              Optional list of environment variables that have to be set
                                              before running the command
                                            items:
                                              properties:
                                                name:
                                                  type: string
                                                value:
                                                  type: string
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          group:
                                            description: Defines the group this command
                                              is part of
                                            properties:
                                              isDefault:
                                                description: Identifies the default
                                                  command for a given group kind
                                                type: boolean
                                              kind:
                                                description: Kind of group the command
                                                  is part of
                                                enum:
                                                - build
                                                - run
                                                - test
                                                - debug
                                                - deploy
                                                type: string
                                            type: object
                                          hotReloadCapable:
                                            description: |-
                                              Specify whether the command is restarted or not when the source code changes.
                                              If set to `true` the command won't be restarted.
                                              A *hotReloadCapable* `run` or `debug` command is expected to handle file changes on its own and won't be restarted.
                                              A *hotReloadCapable* `build` command is expected to be executed only once and won't be executed again.
                                              This field is taken into account only for commands `build`, `run` and `debug` with `isDefault` set to `true`.

                                              Default value is `false`
                                            type: boolean
                                          label:
                                            description: |-
                                              Optional label that provides a label for this command
                                              to be used in Editor UI menus for example
                                            type: string
                                          workingDir:
                                            description: |-
                                              Working directory where the command should be executed

                                              Special variables that can be used:

                                               - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.

                                               - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                            type: string
                                        type: object
                                      id:
                                        description: |-
                                          Mandatory identifier that allows referencing
                                          this command in composite commands, from
                                          a parent, or in events.
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                    required:
                                    - id
                                    type: object
                                  type: array
                                components:
                                  description: |-
                                    Overrides of components encapsulated in a parent devfile or a plugin.
                                    Overriding is done according to K8S strategic merge patch standard rules.
                                  items:
                                    properties:
                                      attributes:
                                        description: Map of implementation-dependant
                                          free-form YAML attributes.
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      componentType:
                                        description: Type of component
                                        enum:
                                        - Container
                                        - Kubernetes
                                        - Openshift
                                        - Volume
                                        - Image
                                        type: string
                                      container:
                                        description: Allows adding and configuring
                                          devworkspace-related containers
                                        properties:
                                          annotation:
                                            description: Annotations that should be
                                              added to specific resources for this
                                              container
                                            properties:
                                              deployment:
                                                additionalProperties:
                                                  type: string
                                                description: Annotations to be added
                                                  to deployment
                                                type: object
                                              service:
                                                additionalProperties:
                                                  type: string
                                                description: Annotations to be added
                                                  to service
                                                type: object
                                            type: object
                                          args:
                                            description: |-
                                              The arguments to supply to the command running the dockerimage component. The arguments are supplied either to the default command provided in the image or to the overridden command.

                                              Defaults to an empty array, meaning use whatever is defined in the image.
                                            items:
                                              type: string
                                            type: array
                                          command:
                                            description: |-
                                              The command to run in the dockerimage component instead of the default one provided in the image.

                                              Defaults to an empty array, meaning use whatever is defined in the image.
                                            items:
                                              type: string
                                            type: array
                                          cpuLimit:
                                            type: string
                                          cpuRequest:
                                            type: string
                                          dedicatedPod:
                                            description: |-
                                              Specify if a container should run in its own separated pod,
                                              instead of running as part of the main development environment pod.

                                              Default value is `false`
                                            type: boolean
                                          endpoints:
                                            items:
                                              properties:
                                                annotation:
                                                  additionalProperties:
                                                    type: string
                                                  description: Annotations to be added
                                                    to Kubernetes Ingress or Openshift
                                                    Route
                                                  type: object
                                                attributes:
                                                  description: |-
                                                    Map of implementation-dependant string-based free-form attributes.

                                                    Examples of Che-specific attributes:

                                                    - cookiesAuthEnabled: "true" / "false",

                                                    - type: "terminal" / "ide" / "ide-dev",
                                                  type: object
                                                  x-kubernetes-preserve-unknown-fields: true
                                                exposure:
                                                  description: |-
                                                    Describes how the endpoint should be exposed on the network.

                                                    - `public` means that the endpoint will be exposed on the public network, typically through
                                                    a K8S ingress or an OpenShift route.

                                                    - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                                    typically by K8S services, to be consumed by other elements running
                                                    on the same cloud internal network.

                                                    - `none` means that the endpoint will not be exposed and will only be accessible
                                                    inside the main devworkspace POD, on a local address.

                                                    Default value is `public`
                                                  enum:
                                                  - public
                                                  - internal
                                                  - none
                                                  type: string
                                                name:
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: Path of the endpoint
                                                    URL
                                                  type: string
                                                protocol:
                                                  description: |-
                                                    Describes the application and transport protocols of the traffic that will go through this endpoint.

                                                    - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `https` when the `secure` field is set to `true`.

                                                    - `https`: Endpoint will have `https` traffic, typically on a TCP connection.

                                                    - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.

                                                    - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.

                                                    - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.

                                                    - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.

                                                    Default value is `http`
                                                  enum:
                                                  - http
                                                  - https
                                                  - ws
                                                  - wss
                                                  - tcp
                                                  - udp
                                                  type: string
                                                secure:
                                                  description: |-
                                                    Describes whether the endpoint should be secured and protected by some
                                                    authentication process. This requires a protocol of `https` or `wss`.
                                                  type: boolean
                                                targetPort:
                                                  description: |-
                                                    Port number to be used within the container component. The same port cannot
                                                    be used by two different container components.
                                                  type: integer
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          env:
                                            description: |-
                                              Environment variables used in this container.

                                              The following variables are reserved and cannot be overridden via env:

                                               - `$PROJECTS_ROOT`

                                               - `$PROJECT_SOURCE`
                                            items:
                                              properties:
                                                name:
                                                  type: string
                                                value:
                                                  type: string
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          image:
                                            type: string
                                          memoryLimit:
                                            type: string
                                          memoryRequest:
                                            type: string
                                          mountSources:
                                            description: |-
                                              Toggles whether or not the project source code should
                                              be mounted in the component.

                                              Defaults to true for all component types except plugins and components that set `dedicatedPod` to true.
                                            type: boolean
                                          sourceMapping:
                                            description: |-
                                              Optional specification of the path in the container where
                                              project sources should be transferred/mounted when `mountSources` is `true`.
                                              When omitted, the default value of /projects is used.
                                            type: string
                                          volumeMounts:
                                            description: List of volumes mounts that
                                              should be mounted is this container.
                                            items:
                                              description: Volume that should be mounted
                                                to a component container
                                              properties:
                                                name:
                                                  description: |-
                                                    The volume mount name is the name of an existing `Volume` component.
                                                    If several containers mount the same volume name
                                                    then they will reuse the same volume and will be able to access to the same files.
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: |-
                                                    The path in the component container where the volume should be mounted.
                                                    If not path is mentioned, default path is the is `/<name>`.
                                                  type: string
                                              required:
                                              - name
                                              type: object
                                            type: array
                                        type: object
                                      image:
                                        description: Allows specifying the definition
                                          of an image for outer loop builds
                                        properties:
                                          autoBuild:
                                            description: |-
                                              Defines if the image should be built during startup.

                                              Default value is `false`
                                            type: boolean
                                          dockerfile:
                                            description: Allows specifying dockerfile
                                              type build
                                            properties:
                                              args:
                                                description: The arguments to supply
                                                  to the dockerfile build.
                                                items:
                                                  type: string
                                                type: array
                                              buildContext:
                                                description: Path of source directory
                                                  to establish build context. Defaults
                                                  to ${PROJECT_SOURCE} in the container
                                                type: string
                                              devfileRegistry:
                                                description: Dockerfile's Devfile
                                                  Registry source
                                                properties:
                                                  id:
                                                    description: |-
                                                      Id in a devfile registry that contains a Dockerfile. The src in the OCI registry
                                                      required for the Dockerfile build will be downloaded for building the image.
                                                    type: string
                                                  registryUrl:
                                                    description: |-
                                                      Devfile Registry URL to pull the Dockerfile from when using the Devfile Registry as Dockerfile src.
                                                      To ensure the Dockerfile gets resolved consistently in different environments,
                                                      it is recommended to always specify the `devfileRegistryUrl` when `Id` is used.
                                                    type: string
                                                type: object
                                              git:
                                                description: Dockerfile's Git source
                                                properties:
                                                  checkoutFrom:
                                                    description: Defines from what
                                                      the project should be checked
                                                      out. Required if there are more
                                                      than one remote configured
                                                    properties:
                                                      remote:
                                                        description: The remote name
                                                          should be used as init.
                                                          Required if there are more
                                                          than one remote configured
                                                        type: string
                                                      revision:
                                                        description: |-
                                                          The revision to checkout from. Should be branch name, tag or commit id.
                                                          Default branch is used if missing or specified revision is not found.
                                                        type: string
                                                    type: object
                                                  fileLocation:
                                                    description: |-
                                                      Location of the Dockerfile in the Git repository when using git as Dockerfile src.
                                                      Defaults to Dockerfile.
                                                    type: string
                                                  remotes:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      The remotes map which should be initialized in the git project.
                                                      Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                                    type: object
                                                type: object
                                              rootRequired:
                                                description: |-
                                                  Specify if a privileged builder pod is required.

                                                  Default value is `false`
                                                type: boolean
                                              srcType:
                                                description: Type of Dockerfile src
                                                enum:
                                                - Uri
                                                - DevfileRegistry
                                                - Git
                                                type: string
                                              uri:
                                                description: |-
                                                  URI Reference of a Dockerfile.
                                                  It can be a full URL or a relative URI from the current devfile as the base URI.
                                                type: string
                                            type: object
                                          imageName:
                                            description: Name of the image for the
                                              resulting outerloop build
                                            type: string
                                          imageType:
                                            description: Type of image
                                            enum:
                                            - Dockerfile
                                            - AutoBuild
                                            type: string
                                        type: object
                                      kubernetes:
                                        description: |-
                                          Allows importing into the devworkspace the Kubernetes resources
                                          defined in a given manifest. For example this allows reusing the Kubernetes
                                          definitions used to deploy some runtime components in production.
                                        properties:
                                          deployByDefault:
                                            description: |-
                                              Defines if the component should be deployed during startup.

                                              Default value is `false`
                                            type: boolean
                                          endpoints:
                                            items:
                                              properties:
                                                annotation:
                                                  additionalProperties:
                                                    type: string
                                                  description: Annotations to be added
                                                    to Kubernetes Ingress or Openshift
                                                    Route
                                                  type: object
                                                attributes:
                                                  description: |-
                                                    Map of implementation-dependant string-based free-form attributes.

                                                    Examples of Che-specific attributes:

                                                    - cookiesAuthEnabled: "true" / "false",

                                                    - type: "terminal" / "ide" / "ide-dev",
                                                  type: object
                                                  x-kubernetes-preserve-unknown-fields: true
                                                exposure:
                                                  description: |-
                                                    Describes how the endpoint should be exposed on the network.

                                                    - `public` means that the endpoint will be exposed on the public network, typically through
                                                    a K8S ingress or an OpenShift route.

                                                    - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                                    typically by K8S services, to be consumed by other elements running
                                                    on the same cloud internal network.

                                                    - `none` means that the endpoint will not be exposed and will only be accessible
                                                    inside the main devworkspace POD, on a local address.

                                                    Default value is `public`
                                                  enum:
                                                  - public
                                                  - internal
                                                  - none
                                                  type: string
                                                name:
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: Path of the endpoint
                                                    URL
                                                  type: string
                                                protocol:
                                                  description: |-
                                                    Describes the application and transport protocols of the traffic that will go through this endpoint.

                                                    - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `https` when the `secure` field is set to `true`.

                                                    - `https`: Endpoint will have `https` traffic, typically on a TCP connection.

                                                    - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.

                                                    - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.

                                                    - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.

                                                    - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.

                                                    Default value is `http`
                                                  enum:
                                                  - http
                                                  - https
                                                  - ws
                                                  - wss
                                                  - tcp
                                                  - udp
                                                  type: string
                                                secure:
                                                  description: |-
                                                    Describes whether the endpoint should be secured and protected by some
                                                    authentication process. This requires a protocol of `https` or `wss`.
                                                  type: boolean
                                                targetPort:
                                                  description: |-
                                                    Port number to be used within the container component. The same port cannot
                                                    be used by two different container components.
                                                  type: integer
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          inlined:
                                            description: Inlined manifest
                                            type: string
                                          locationType:
                                            description: Type of Kubernetes-like location
                                            enum:
                                            - Uri
                                            - Inlined
                                            type: string
                                          uri:
                                            description: Location in a file fetched
                                              from a uri.
                                            type: string
                                        type: object
                                      name:
                                        description: |-
                                          Mandatory name that allows referencing the component
                                          from other elements (such as commands) or from an external
                                          devfile that may reference this component through a parent or a plugin.
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      openshift:
                                        description: |-
                                          Allows importing into the devworkspace the OpenShift resources
                                          defined in a given manifest. For example this allows reusing the OpenShift
                                          definitions used to deploy some runtime components in production.
                                        properties:
                                          deployByDefault:
                                            description: |-
                                              Defines if the component should be deployed during startup.

                                              Default value is `false`
                                            type: boolean
                                          endpoints:
                                            items:
                                              properties:
                                                annotation:
                                                  additionalProperties:
                                                    type: string
                                                  description: Annotations to be added
                                                    to Kubernetes Ingress or Openshift
                                                    Route
                                                  type: object
                                                attributes:
                                                  description: |-
                                                    Map of implementation-dependant string-based free-form attributes.

                                                    Examples of Che-specific attributes:

                                                    - cookiesAuthEnabled: "true" / "false",

                                                    - type: "terminal" / "ide" / "ide-dev",
                                                  type: object
                                                  x-kubernetes-preserve-unknown-fields: true
                                                exposure:
                                                  description: |-
                                                    Describes how the endpoint should be exposed on the network.

                                                    - `public` means that the endpoint will be exposed on the public network, typically through
                                                    a K8S ingress or an OpenShift route.

                                                    - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                                    typically by K8S services, to be consumed by other elements running
                                                    on the same cloud internal network.

                                                    - `none` means that the endpoint will not be exposed and will only be accessible
                                                    inside the main devworkspace POD, on a local address.

                                                    Default value is `public`
                                                  enum:
                                                  - public
                                                  - internal
                                                  - none
                                                  type: string
                                                name:
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: Path of the endpoint
                                                    URL
                                                  type: string
                                                protocol:
                                                  description: |-
                                                    Describes the application and transport protocols of the traffic that will go through this endpoint.

                                                    - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `https` when the `secure` field is set to `true`.

                                                    - `https`: Endpoint will have `https` traffic, typically on a TCP connection.

                                                    - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.

                                                    - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.

                                                    - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.

                                                    - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.

                                                    Default value is `http`
                                                  enum:
                                                  - http
                                                  - https
                                                  - ws
                                                  - wss
                                                  - tcp
                                                  - udp
                                                  type: string
                                                secure:
                                                  description: |-
                                                    Describes whether the endpoint should be secured and protected by some
                                                    authentication process. This requires a protocol of `https` or `wss`.
                                                  type: boolean
                                                targetPort:
                                                  description: |-
                                                    Port number to be used within the container component. The same port cannot
                                                    be used by two different container components.
                                                  type: integer
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          inlined:
                                            description: Inlined manifest
                                            type: string
                                          locationType:
                                            description: Type of Kubernetes-like location
                                            enum:
                                            - Uri
                                            - Inlined
                                            type: string
                                          uri:
                                            description: Location in a file fetched
                                              from a uri.
                                            type: string
                                        type: object
                                      volume:
                                        description: |-
                                          Allows specifying the definition of a volume
                                          shared by several other components
                                        properties:
                                          ephemeral:
                                            description: |-
                                              Ephemeral volumes are not stored persistently across restarts. Defaults
                                              to false
                                            type: boolean
                                          size:
                                            description: Size of the volume
                                            type: string
                                        type: object
                                    required:
                                    - name
                                    type: object
                                  type: array
                                id:
                                  description: Id in a registry that contains a Devfile
                                    yaml file
                                  type: string
                                importReferenceType:
                                  description: type of location from where the referenced
                                    template structure should be retrieved
                                  enum:
                                  - Uri
                                  - Id
                                  - Kubernetes
                                  type: string
                                kubernetes:
                                  description: Reference to a Kubernetes CRD of type
                                    DevWorkspaceTemplate
                                  properties:
                                    name:
                                      type: string
                                    namespace:
                                      type: string
                                  required:
                                  - name
                                  type: object
                                registryUrl:
                                  description: |-
                                    Registry URL to pull the parent devfile from when using id in the parent reference.
                                    To ensure the parent devfile gets resolved consistently in different environments,
                                    it is recommended to always specify the `registryUrl` when `id` is used.
                                  type: string
                                uri:
                                  description: |-
                                    URI Reference of a parent devfile YAML file.
                                    It can be a full URL or a relative URI with the current devfile as the base URI.
                                  type: string
                                version:
                                  description: |-
                                    Specific stack/sample version to pull the parent devfile from, when using id in the parent reference.
                                    To specify `version`, `id` must be defined and used as the import reference source.
                                    `version` can be either a specific stack version, or `latest`.
                                    If no `version` specified, default version will be used.
                                  pattern: ^(latest)|(([1-9])\.([0-9]+)\.([0-9]+)(\-[0-9a-z-]+(\.[0-9a-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?)$
                                  type: string
                              type: object
                            volume:
                              description: |-
                                Allows specifying the definition of a volume
                                shared by several other components
                              properties:
                                ephemeral:
                                  description: |-
                                    Ephemeral volumes are not stored persistently across restarts. Defaults
                                    to false
                                  type: boolean
                                size:
                                  description: Size of the volume
                                  type: string
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      dependentProjects:
                        description: Additional projects related to the main project
                          in the devfile, contianing names and sources locations
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            clonePath:
                              description: Path relative to the root of the projects
                                to which this project should be cloned into. This
                                is a unix-style relative path (i.e. uses forward slashes).
                                The path is invalid if it is absolute or tries to
                                escape the project root through the usage of '..'.
                                If not specified, defaults to the project name.
                              type: string
                            custom:
                              description: Project's Custom source
                              properties:
                                embeddedResource:
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                projectSourceClass:
                                  type: string
                              required:
                              - embeddedResource
                              - projectSourceClass
                              type: object
                            git:
                              description: Project's Git source
                              properties:
                                checkoutFrom:
                                  description: Defines from what the project should
                                    be checked out. Required if there are more than
                                    one remote configured
                                  properties:
                                    remote:
                                      description: The remote name should be used
                                        as init. Required if there are more than one
                                        remote configured
                                      type: string
                                    revision:
                                      description: |-
                                        The revision to checkout from. Should be branch name, tag or commit id.
                                        Default branch is used if missing or specified revision is not found.
                                      type: string
                                  type: object
                                remotes:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    The remotes map which should be initialized in the git project.
                                    Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                  type: object
                              required:
                              - remotes
                              type: object
                            name:
                              description: Project name
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            sourceType:
                              description: Type of project source
                              enum:
                              - Git
                              - Zip
                              - Custom
                              type: string
                            zip:
                              description: Project's Zip source
                              properties:
                                location:
                                  description: Zip project's source location address.
                                    Should be file path of the archive, e.g. file://$FILE_PATH
                                  type: string
                              required:
                              - location
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      events:
                        description: |-
                          Bindings of commands to events.
                          Each command is referred-to by its name.
                        properties:
                          postStart:
                            description: |-
                              IDs of commands that should be executed after the devworkspace is completely started.
                              In the case of Che-Theia, these commands should be executed after all plugins and extensions have started, including project cloning.
                              This means that those commands are not triggered until the user opens the IDE in his browser.
                            items:
                              type: string
                            type: array
                          postStop:
                            description: IDs of commands that should be executed after
                              stopping the devworkspace.
                            items:
                              type: string
                            type: array
                          preStart:
                            description: |-
                              IDs of commands that should be executed before the devworkspace start.
                              Kubernetes-wise, these commands would typically be executed in init containers of the devworkspace POD.
                            items:
                              type: string
                            type: array
                          preStop:
                            description: IDs of commands that should be executed before
                              stopping the devworkspace.
                            items:
                              type: string
                            type: array
                        type: object
                      projects:
                        description: Projects worked on in the devworkspace, containing
                          names and sources locations
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            clonePath:
                              description: Path relative to the root of the projects
                                to which this project should be cloned into. This
                                is a unix-style relative path (i.e. uses forward slashes).
                                The path is invalid if it is absolute or tries to
                                escape the project root through the usage of '..'.
                                If not specified, defaults to the project name.
                              type: string
                            custom:
                              description: Project's Custom source
                              properties:
                                embeddedResource:
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                projectSourceClass:
                                  type: string
                              required:
                              - embeddedResource
                              - projectSourceClass
                              type: object
                            git:
                              description: Project's Git source
                              properties:
                                checkoutFrom:
                                  description: Defines from what the project should
                                    be checked out. Required if there are more than
                                    one remote configured
                                  properties:
                                    remote:
                                      description: The remote name should be used
                                        as init. Required if there are more than one
                                        remote configured
                                      type: string
                                    revision:
                                      description: |-
                                        The revision to checkout from. Should be branch name, tag or commit id.
                                        Default branch is used if missing or specified revision is not found.
                                      type: string
                                  type: object
                                remotes:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    The remotes map which should be initialized in the git project.
                                    Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                  type: object
                              required:
                              - remotes
                              type: object
                            name:
                              description: Project name
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            sourceType:
                              description: Type of project source
                              enum:
                              - Git
                              - Zip
                              - Custom
                              type: string
                            zip:
                              description: Project's Zip source
                              properties:
                                location:
                                  description: Zip project's source location address.
                                    Should be file path of the archive, e.g. file://$FILE_PATH
                                  type: string
                              required:
                              - location
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      starterProjects:
                        description: StarterProjects is a project that can be used
                          as a starting point when bootstrapping new projects
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            custom:
                              description: Project's Custom source
                              properties:
                                embeddedResource:
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                projectSourceClass:
                                  type: string
                              required:
                              - embeddedResource
                              - projectSourceClass
                              type: object
                            description:
                              description: Description of a starter project
                              type: string
                            git:
                              description: Project's Git source
                              properties:
                                checkoutFrom:
                                  description: Defines from what the project should
                                    be checked out. Required if there are more than
                                    one remote configured
                                  properties:
                                    remote:
                                      description: The remote name should be used
                                        as init. Required if there are more than one
                                        remote configured
                                      type: string
                                    revision:
                                      description: |-
                                        The revision to checkout from. Should be branch name, tag or commit id.
                                        Default branch is used if missing or specified revision is not found.
                                      type: string
                                  type: object
                                remotes:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    The remotes map which should be initialized in the git project.
                                    Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                  type: object
                              required:
                              - remotes
                              type: object
                            name:
                              description: Project name
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            sourceType:
                              description: Type of project source
                              enum:
                              - Git
                              - Zip
                              - Custom
                              type: string
                            subDir:
                              description: Sub-directory from a starter project to
                                be used as root for starter project.
                              type: string
                            zip:
                              description: Project's Zip source
                              properties:
                                location:
                                  description: Zip project's source location address.
                                    Should be file path of the archive, e.g. file://$FILE_PATH
                                  type: string
                              required:
                              - location
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      variables:
                        additionalProperties:
                          type: string
                        description: |-
                          Map of key-value variables used for string replacement in the devfile. Values can be referenced via {{variable-key}}
                          to replace the corresponding value in string fields in the devfile. Replacement cannot be used for

                           - schemaVersion, metadata, parent source

                           - element identifiers, e.g. command id, component name, endpoint name, project name

                           - references to identifiers, e.g. in events, a command's component, container's volume mount name

                           - string enums, e.g. command group kind, endpoint exposure
                        type: object
                    type: object
                  deploymentStrategy:
                    description: |-
                      DeploymentStrategy defines the deployment strategy to use to replace existing DevWorkspace pods
                      with new ones. The available deployment stragies are "Recreate" and "RollingUpdate".
                      With the "Recreate" deployment strategy, the existing workspace pod is killed before the new one is created.
                      With the "RollingUpdate" deployment strategy, a new workspace pod is created and the existing workspace pod is deleted
                      only when the new workspace pod is in a ready state.
                      If not specified, the default "Recreate" deployment strategy is used.
                    enum:
                    - Recreate
                    - RollingUpdate
                    type: string
                  hostUsers:
                    description: |-
                      Controls whether the Pod uses the host's user namespace.
                      If true (or omitted), the Pod runs in the host's user namespace.
                      If false, a new user namespace is created for the Pod.
                      This field is only used when the UserNamespacesSupport feature is enabled.
                      If the feature is disabled, setting this field may cause an endless workspace start loop.
                    type: boolean
                  idleTimeout:
                    description: |-
                      IdleTimeout determines how long a workspace should sit idle before being
                      automatically scaled down. Proper functionality of this configuration property
                      requires support in the workspace being started. If not specified, the default
                      value of "15m" is used.
                    type: string
                  ignoredUnrecoverableEvents:
                    description: |-
                      IgnoredUnrecoverableEvents defines a list of Kubernetes event names that should
                      be ignored when deciding to fail a DevWorkspace startup. This option should be used
                      if a transient cluster issue is triggering false-positives (for example, if
                      the cluster occasionally encounters FailedScheduling events). Events listed
                      here will not trigger DevWorkspace failures.
                    items:
                      type: string
                    type: array
                  imagePullPolicy:
                    description: |-
                      ImagePullPolicy defines the imagePullPolicy used for containers in a DevWorkspace
                      For additional information, see Kubernetes documentation for imagePullPolicy. If
                      not specified, the default value of "Always" is used.
                    enum:
                    - IfNotPresent
                    - Always
                    - Never
                    type: string
                  initContainers:
                    description: |-
                      InitContainers defines a list of Kubernetes init containers that are automatically injected into all workspace pods.
                      Typical uses cases include injecting organization tools/configs, initializing persistent home, etc.
                    items:
                      description: A single application container that you want to
                        run within a pod.
                      properties:
                        args:
                          description: |-
                            Arguments to the entrypoint.
                            The container image's CMD is used if this is not provided.
                            Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                            cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                            to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                            produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                            of whether the variable exists or not. Cannot be updated.
                            More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
                        command:
                          description: |-
                            Entrypoint array. Not executed within a shell.
                            The container image's ENTRYPOINT is used if this is not provided.
                            Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                            cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                            to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                            produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                            of whether the variable exists or not. Cannot be updated.
                            More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
                        env:
                          description: |-
                            List of environment variables to set in the container.
                            Cannot be updated.
                          items:
                            description: EnvVar represents an environment variable
                              present in a Container.
                            properties:
                              name:
                                description: |-
                                  Name of the environment variable.
                                  May consist of any printable ASCII characters except '='.
                                type: string
                              value:
                                description: |-
                                  Variable references $(VAR_NAME) are expanded
                                  using the previously defined environment variables in the container and
                                  any service environment variables. If a variable cannot be resolved,
                                  the reference in the input string will be unchanged. Double $$ are reduced
                                  to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                  "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                  Escaped references will never be expanded, regardless of whether the variable
                                  exists or not.
                                  Defaults to "".
                                type: string
                              valueFrom:
                                description: Source for the environment variable's
                                  value. Cannot be used if value is not empty.
                                properties:
                                  configMapKeyRef:
                                    description: Selects a key of a ConfigMap.
                                    properties:
                                      key:
                                        description: The key to select.
                                        type: string
                                      name:
                                        default: ""
                                        description: |-
                                          Name of the referent.
                                          This field is effectively required, but due to backwards compatibility is
                                          allowed to be empty. Instances of this type with an empty value here are
                                          almost certainly wrong.
                                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                        type: string
                                      optional:
                                        description: Specify whether the ConfigMap
                                          or its key must be defined
                                        type: boolean
                                    required:
                                    - key
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  fieldRef:
                                    description: |-
                                      Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                      spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                                    properties:
                                      apiVersion:
                                        description: Version of the schema the FieldPath
                                          is written in terms of, defaults to "v1".
                                        type: string
                                      fieldPath:
                                        description: Path of the field to select in
                                          the specified API version.
                                        type: string
                                    required:
                                    - fieldPath
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  fileKeyRef:
                                    description: |-
                                      FileKeyRef selects a key of the env file.
                                      Requires the EnvFiles feature gate to be enabled.
                                    properties:
                                      key:
                                        description: |-
                                          The key within the env file. An invalid key will prevent the pod from starting.
                                          The keys defined within a source may consist of any printable ASCII characters except '='.
                                          During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
                                        type: string
                                      optional:
                                        default: false
                                        description: |-
                                          Specify whether the file or its key must be defined. If the file or key
                                          does not exist, then the env var is not published.
                                          If optional is set to true and the specified key does not exist,
                                          the environment variable will not be set in the Pod's containers.

                                          If optional is set to false and the specified key does not exist,
                                          an error will be returned during Pod creation.
                                        type: boolean
                                      path:
                                        description: |-
                                          The path within the volume from which to select the file.
                                          Must be relative and may not contain the '..' path or start with '..'.
                                        type: string
                                      volumeName:
                                        description: The name of the volume mount
                                          containing the env file.
                                        type: string
                                    required:
                                    - key
                                    - path
                                    - volumeName
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  resourceFieldRef:
                                    description: |-
                                      Selects a resource of the container: only resources limits and requests
                                      (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
                                    properties:
                                      containerName:
                                        description: 'Container name: required for
                                          volumes, optional for env vars'
                                        type: string
                                      divisor:
                                        anyOf:
                                        - type: integer
                                        - type: string
                                        description: Specifies the output format of
                                          the exposed resources, defaults to "1"
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      resource:
                                        description: 'Required: resource to select'
                                        type: string
                                    required:
                                    - resource
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  secretKeyRef:
                                    description: Selects a key of a secret in the
                                      pod's namespace
                                    properties:
                                      key:
                                        description: The key of the secret to select
                                          from.  Must be a valid secret key.
                                        type: string
                                      name:
                                        default: ""
                                        description: |-
                                          Name of the referent.
                                          This field is effectively required, but due to backwards compatibility is
                                          allowed to be empty. Instances of this type with an empty value here are
                                          almost certainly wrong.
                                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                        type: string
                                      optional:
                                        description: Specify whether the Secret or
                                          its key must be defined
                                        type: boolean
                                    required:
                                    - key
                                    type: object
                                    x-kubernetes-map-type: atomic
                                type: object
                            required:
                            - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                          - name
                          x-kubernetes-list-type: map
                        envFrom:
                          description: |-
                            List of sources to populate environment variables in the container.
                            The keys defined within a source may consist of any printable ASCII characters except '='.
                            When a key exists in multiple
                            sources, the value associated with the last source will take precedence.
                            Values defined by an Env with a duplicate key will take precedence.
                            Cannot be updated.
                          items:
                            description: EnvFromSource represents the source of a
                              set of ConfigMaps or Secrets
                            properties:
                              configMapRef:
                                description: The ConfigMap to select from
                                properties:
                                  name:
                                    default: ""
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  optional:
                                    description: Specify whether the ConfigMap must
                                      be defined
                                    type: boolean
                                type: object
                                x-kubernetes-map-type: atomic
                              prefix:
                                description: |-
                                  Optional text to prepend to the name of each environment variable.
                                  May consist of any printable ASCII characters except '='.
                                type: string
                              secretRef:
                                description: The Secret to select from
                                properties:
                                  name:
                                    default: ""
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                    type: string
                                  optional:
                                    description: Specify whether the Secret must be
                                      defined
                                    type: boolean
                                type: object
                                x-kubernetes-map-type: atomic
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        image:
                          description: |-
                            Container image name.
                            More info: https://kubernetes.io/docs/concepts/containers/images
                            This field is optional to allow higher level config management to default or override
                            container images in workload controllers like Deployments and StatefulSets.
                          type: string
                        imagePullPolicy:
                          description: |-
                            Image pull policy.
                            One of Always, Never, IfNotPresent.
                            Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
                          type: string
                        lifecycle:
                          description: |-
                            Actions that the management system should take in response to container lifecycle events.
                            Cannot be updated.
                          properties:
                            postStart:
                              description: |-
                                PostStart is called immediately after a container is created. If the handler fails,
                                the container is terminated and restarted according to its restart policy.
                                Other management of the container blocks until the hook completes.
                                More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                              properties:
                                exec:
                                  description: Exec specifies a command to execute
                                    in the container.
                                  properties:
                                    command:
                                      description: |-
                                        Command is the command line to execute inside the container, the working directory for the
                                        command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                        not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                        a shell, you need to explicitly call out to that shell.
                                        Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
                                      items:
                                        type: string
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                                httpGet:
                                  description: HTTPGet specifies an HTTP GET request
                                    to perform.
                                  properties:
                                    host:
                                      description: |-
                                        Host name to connect to, defaults to the pod IP. You probably want to set
                                        "Host" in httpHeaders instead.
                                      type: string
                                    httpHeaders:
                                      description: Custom headers to set in the request.
                                        HTTP allows repeated headers.
                                      items:
                                        description: HTTPHeader describes a custom
                                          header to be used in HTTP probes
                                        properties:
                                          name:
                                            description: |-
                                              The header field name.
                                              This will be canonicalized upon output, so case-variant names will be understood as the same header.
                                            type: string
                                          value:
                                            description: The header field value
                                            type: string
                                        required:
                                        - name
                                        - value
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    path:
                                      description: Path to access on the HTTP server.
                                      type: string
                                    port:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: |-
                                        Name or number of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
                                      x-kubernetes-int-or-string: true
                                    scheme:
                                      description: |-
                                        Scheme to use for connecting to the host.
                                        Defaults to HTTP.
                                      type: string
                                  required:
                                  - port
                                  type: object
                                sleep:
                                  description: Sleep represents a duration that the
                                    container should sleep.
                                  properties:
                                    seconds:
                                      description: Seconds is the number of seconds
                                        to sleep.
                                      format: int64
                                      type: integer
                                  required:
                                  - seconds
                                  type: object
                                tcpSocket:
                                  description: |-
                                    Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                    for backward compatibility. There is no validation of this field and
                                    lifecycle hooks will fail at runtime when it is specified.
                                  properties:
                                    host:
                                      description: 'Optional: Host name to connect
                                        to, defaults to the pod IP.'
                                      type: string
                                    port:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: |-
                                        Number or name of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
                                      x-kubernetes-int-or-string: true
                                  required:
                                  - port
                                  type: object
                              type: object
                            preStop:
                              description: |-
                                PreStop is called immediately before a container is terminated due to an
                                API request or management event such as liveness/startup probe failure,
                                preemption, resource contention, etc. The handler is not called if the
                                container crashes or exits. The Pod's termination grace period countdown begins before the
                                PreStop hook is executed. Regardless of the outcome of the handler, the
                                container will eventually terminate within the Pod's termination grace
                                period (unless delayed by finalizers). Other management of the container blocks until the hook completes
                                or until the termination grace period is reached.
                                More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                              properties:
                                exec:
                                  description: Exec specifies a command to execute
                                    in the container.
                                  properties:
                                    command:
                                      description: |-
                                        Command is the command line to execute inside the container, the working directory for the
                                        command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                        not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                        a shell, you need to explicitly call out to that shell.
                                        Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
                                      items:
                                        type: string
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                                httpGet:
                                  description: HTTPGet specifies an HTTP GET request
                                    to perform.
                                  properties:
                                    host:
                                      description: |-
                                        Host name to connect to, defaults to the pod IP. You probably want to set
                                        "Host" in httpHeaders instead.
                                      type: string
                                    httpHeaders:
                                      description: Custom headers to set in the request.
                                        HTTP allows repeated headers.
                                      items:
                                        description: HTTPHeader describes a custom
                                          header to be used in HTTP probes
                                        properties:
                                          name:
                                            description: |-
                                              The header field name.
                                              This will be canonicalized upon output, so case-variant names will be understood as the same header.
                                            type: string
                                          value:
                                            description: The header field value
                                            type: string
                                        required:
                                        - name
                                        - value
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    path:
                                      description: Path to access on the HTTP server.
                                      type: string
                                    port:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: |-
                                        Name or number of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
                                      x-kubernetes-int-or-string: true
                                    scheme:
                                      description: |-
                                        Scheme to use for connecting to the host.
                                        Defaults to HTTP.
                                      type: string
                                  required:
                                  - port
                                  type: object
                                sleep:
                                  description: Sleep represents a duration that the
                                    container should sleep.
                                  properties:
                                    seconds:
                                      description: Seconds is the number of seconds
                                        to sleep.
                                      format: int64
                                      type: integer
                                  required:
                                  - seconds
                                  type: object
                                tcpSocket:
                                  description: |-
                                    Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                    for backward compatibility. There is no validation of this field and
                                    lifecycle hooks will fail at runtime when it is specified.
                                  properties:
                                    host:
                                      description: 'Optional: Host name to connect
                                        to, defaults to the pod IP.'
                                      type: string
                                    port:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: |-
                                        Number or name of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
                                      x-kubernetes-int-or-string: true
                                  required:
                                  - port
                                  type: object
                              type: object
                            stopSignal:
                              description: |-
                                StopSignal defines which signal will be sent to a container when it is being stopped.
                                If not specified, the default is defined by the container runtime in use.
                                StopSignal can only be set for Pods with a non-empty .spec.os.name
                              type: string
                          type: object
                        livenessProbe:
                          description: |-
                            Periodic probe of container liveness.
                            Container will be restarted if the probe fails.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                          properties:
                            exec:
                              description: Exec specifies a command to execute in
                                the container.
                              properties:
                                command:
                                  description: |-
                                    Command is the command line to execute inside the container, the working directory for the
                                    command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                    not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                    a shell, you need to explicitly call out to that shell.
                                    Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            failureThreshold:
                              description: |-
                                Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                Defaults to 3. Minimum value is 1.
                              format: int32
                              type: integer
                            grpc:
                              description: GRPC specifies a GRPC HealthCheckRequest.
                              properties:
                                port:
                                  description: Port number of the gRPC service. Number
                                    must be in the range 1 to 65535.
                                  format: int32
                                  type: integer
                                service:
                                  default: ""
                                  description: |-
                                    Service is the name of the service to place in the gRPC HealthCheckRequest
                                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                    If this is not specified, the default behavior is defined by gRPC.
                                  type: string
                              required:
                              - port
                              type: object
                            httpGet:
                              description: HTTPGet specifies an HTTP GET request to
                                perform.
                              properties:
                                host:
                                  description: |-
                                    Host name to connect to, defaults to the pod IP. You probably want to set
                                    "Host" in httpHeaders instead.
                                  type: string
                                httpHeaders:
                                  description: Custom headers to set in the request.
                                    HTTP allows repeated headers.
                                  items:
                                    description: HTTPHeader describes a custom header
                                      to be used in HTTP probes
                                    properties:
                                      name:
                                        description: |-
                                          The header field name.
                                          This will be canonicalized upon output, so case-variant names will be understood as the same header.
                                        type: string
                                      value:
                                        description: The header field value
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                  x-kubernetes-list-type: atomic
                                path:
                                  description: Path to access on the HTTP server.
                                  type: string
                                port:
                                  anyOf:
                                  - type: integer
                                  - type: string
                                  description: |-
                                    Name or number of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
                                  x-kubernetes-int-or-string: true
                                scheme:
                                  description: |-
                                    Scheme to use for connecting to the host.
                                    Defaults to HTTP.
                                  type: string
                              required:
                              - port
                              type: object
                            initialDelaySeconds:
                              description: |-
                                Number of seconds after the container has started before liveness probes are initiated.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                              format: int32
                              type: integer
                            periodSeconds:
                              description: |-
                                How often (in seconds) to perform the probe.
                                Default to 10 seconds. Minimum value is 1.
                              format: int32
                              type: integer
                            successThreshold:
                              description: |-
                                Minimum consecutive successes for the probe to be considered successful after having failed.
                                Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
                              format: int32
                              type: integer
                            tcpSocket:
                              description: TCPSocket specifies a connection to a TCP
                                port.
                              properties:
                                host:
                                  description: 'Optional: Host name to connect to,
                                    defaults to the pod IP.'
                                  type: string
                                port:
                                  anyOf:
                                  - type: integer
                                  - type: string
                                  description: |-
                                    Number or name of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
                                  x-kubernetes-int-or-string: true
                              required:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
                              description: |-
                                Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                The grace period is the duration in seconds after the processes running in the pod are sent
                                a termination signal and the time when the processes are forcibly halted with a kill signal.
                                Set this value longer than the expected cleanup time for your process.
                                If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                value overrides the value provided by the pod spec.
                                Value must be non-negative integer. The value zero indicates stop immediately via
                                the kill signal (no opportunity to shut down).
                                This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
                              description: |-
                                Number of seconds after which the probe times out.
                                Defaults to 1 second. Minimum value is 1.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                              format: int32
                              type: integer
                          type: object
                        name:
                          description: |-
                            Name of the container specified as a DNS_LABEL.
                            Each container in a pod must have a unique name (DNS_LABEL).
                            Cannot be updated.
                          type: string
                        ports:
                          description: |-
                            List of ports to expose from the container. Not specifying a port here
                            DOES NOT prevent that port from being exposed. Any port which is
                            listening on the default "0.0.0.0" address inside a container will be
                            accessible from the network.
                            Modifying this array with strategic merge patch may corrupt the data.
                            For more information See https://github.com/kubernetes/kubernetes/issues/108255.
                            Cannot be updated.
                          items:
                            description: ContainerPort represents a network port in
                              a single container.
                            properties:
                              containerPort:
                                description: |-
                                  Number of port to expose on the pod's IP address.
                                  This must be a valid port number, 0 < x < 65536.
                                format: int32
                                type: integer
                              hostIP:
                                description: What host IP to bind the external port
                                  to.
                                type: string
                              hostPort:
                                description: |-
                                  Number of port to expose on the host.
                                  If specified, this must be a valid port number, 0 < x < 65536.
                                  If HostNetwork is specified, this must match ContainerPort.
                                  Most containers do not need this.
                                format: int32
                                type: integer
                              name:
                                description: |-
                                  If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                                  named port in a pod must have a unique name. Name for the port that can be
                                  referred to by services.
                                type: string
                              protocol:
                                default: TCP
                                description: |-
                                  Protocol for port. Must be UDP, TCP, or SCTP.
                                  Defaults to "TCP".
                                type: string
                            required:
                            - containerPort
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                          - containerPort
                          - protocol
                          x-kubernetes-list-type: map
                        readinessProbe:
                          description: |-
                            Periodic probe of container service readiness.
                            Container will be removed from service endpoints if the probe fails.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                          properties:
                            exec:
                              description: Exec specifies a command to execute in
                                the container.
                              properties:
                                command:
                                  description: |-
                                    Command is the command line to execute inside the container, the working directory for the
                                    command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                    not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                    a shell, you need to explicitly call out to that shell.
                                    Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            failureThreshold:
                              description: |-
                                Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                Defaults to 3. Minimum value is 1.
                              format: int32
                              type: integer
                            grpc:
                              description: GRPC specifies a GRPC HealthCheckRequest.
                              properties:
                                port:
                                  description: Port number of the gRPC service. Number
                                    must be in the range 1 to 65535.
                                  format: int32
                                  type: integer
                                service:
                                  default: ""
                                  description: |-
                                    Service is the name of the service to place in the gRPC HealthCheckRequest
                                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                    If this is not specified, the default behavior is defined by gRPC.
                                  type: string
                              required:
                              - port
                              type: object
                            httpGet:
                              description: HTTPGet specifies an HTTP GET request to
                                perform.
                              properties:
                                host:
                                  description: |-
                                    Host name to connect to, defaults to the pod IP. You probably want to set
                                    "Host" in httpHeaders instead.
                                  type: string
                                httpHeaders:
                                  description: Custom headers to set in the request.
                                    HTTP allows repeated headers.
                                  items:
                                    description: HTTPHeader describes a custom header
                                      to be used in HTTP probes
                                    properties:
                                      name:
                                        description: |-
                                          The header field name.
                                          This will be canonicalized upon output, so case-variant names will be understood as the same header.
                                        type: string
                                      value:
                                        description: The header field value
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                  x-kubernetes-list-type: atomic
                                path:
                                  description: Path to access on the HTTP server.
                                  type: string
                                port:
                                  anyOf:
                                  - type: integer
                                  - type: string
                                  description: |-
                                    Name or number of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
                                  x-kubernetes-int-or-string: true
                                scheme:
                                  description: |-
                                    Scheme to use for connecting to the host.
                                    Defaults to HTTP.
                                  type: string
                              required:
                              - port
                              type: object
                            initialDelaySeconds:
                              description: |-
                                Number of seconds after the container has started before liveness probes are initiated.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                              format: int32
                              type: integer
                            periodSeconds:
                              description: |-
                                How often (in seconds) to perform the probe.
                                Default to 10 seconds. Minimum value is 1.
                              format: int32
                              type: integer
                            successThreshold:
                              description: |-
                                Minimum consecutive successes for the probe to be considered successful after having failed.
                                Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
                              format: int32
                              type: integer
                            tcpSocket:
                              description: TCPSocket specifies a connection to a TCP
                                port.
                              properties:
                                host:
                                  description: 'Optional: Host name to connect to,
                                    defaults to the pod IP.'
                                  type: string
                                port:
                                  anyOf:
                                  - type: integer
                                  - type: string
                                  description: |-
                                    Number or name of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
                                  x-kubernetes-int-or-string: true
                              required:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
                              description: |-
                                Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                The grace period is the duration in seconds after the processes running in the pod are sent
                                a termination signal and the time when the processes are forcibly halted with a kill signal.
                                Set this value longer than the expected cleanup time for your process.
                                If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                value overrides the value provided by the pod spec.
                                Value must be non-negative integer. The value zero indicates stop immediately via
                                the kill signal (no opportunity to shut down).
                                This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
                              description: |-
                                Number of seconds after which the probe times out.
                                Defaults to 1 second. Minimum value is 1.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                              format: int32
                              type: integer
                          type: object
                        resizePolicy:
                          description: |-
                            Resources resize policy for the container.
                            This field cannot be set on ephemeral containers.
                          items:
                            description: ContainerResizePolicy represents resource
                              resize policy for the container.
                            properties:
                              resourceName:
                                description: |-
                                  Name of the resource to which this resource resize policy applies.
                                  Supported values: cpu, memory.
                                type: string
                              restartPolicy:
                                description: |-
                                  Restart policy to apply when specified resource is resized.
                                  If not specified, it defaults to NotRequired.
                                type: string
                            required:
                            - resourceName
                            - restartPolicy
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        resources:
                          description: |-
                            Compute Resources required by this container.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          properties:
                            claims:
                              description: |-
                                Claims lists the names of resources, defined in spec.resourceClaims,
                                that are used by this container.

                                This field depends on the
                                DynamicResourceAllocation feature gate.

                                This field is immutable. It can only be set for containers.
                              items:
                                description: ResourceClaim references one entry in
                                  PodSpec.ResourceClaims.
                                properties:
                                  name:
                                    description: |-
                                      Name must match the name of one entry in pod.spec.resourceClaims of
                                      the Pod where this field is used. It makes that resource available
                                      inside a container.
                                    type: string
                                  request:
                                    description: |-
                                      Request is the name chosen for a request in the referenced claim.
                                      If empty, everything from the claim is made available, otherwise
                                      only the result of this request.
                                    type: string
                                required:
                                - name
                                type: object
                              type: array
                              x-kubernetes-list-map-keys:
                              - name
                              x-kubernetes-list-type: map
                            limits:
                              additionalProperties:
                                anyOf:
                                - type: integer
                                - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              description: |-
                                Limits describes the maximum amount of compute resources allowed.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                              type: object
                            requests:
                              additionalProperties:
                                anyOf:
                                - type: integer
                                - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              description: |-
                                Requests describes the minimum amount of compute resources required.
                                If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                              type: object
                          type: object
                        restartPolicy:
                          description: |-
                            RestartPolicy defines the restart behavior of individual containers in a pod.
                            This overrides the pod-level restart policy. When this field is not specified,
                            the restart behavior is defined by the Pod's restart policy and the container type.
                            Additionally, setting the RestartPolicy as "Always" for the init container will
                            have the following effect:
                            this init container will be continually restarted on
                            exit until all regular containers have terminated. Once all regular
                            containers have completed, all init containers with restartPolicy "Always"
                            will be shut down. This lifecycle differs from normal init containers and
                            is often referred to as a "sidecar" container. Although this init
                            container still starts in the init container sequence, it does not wait
                            for the container to complete before proceeding to the next init
                            container. Instead, the next init container starts immediately after this
                            init container is started, or after any startupProbe has successfully
                            completed.
                          type: string
                        restartPolicyRules:
                          description: |-
                            Represents a list of rules to be checked to determine if the
                            container should be restarted on exit. The rules are evaluated in
                            order. Once a rule matches a container exit condition, the remaining
                            rules are ignored. If no rule matches the container exit condition,
                            the Container-level restart policy determines the whether the container
                            is restarted or not. Constraints on the rules:
                            - At most 20 rules are allowed.
                            - Rules can have the same action.
                            - Identical rules are not forbidden in validations.
                            When rules are specified, container MUST set RestartPolicy explicitly
                            even it if matches the Pod's RestartPolicy.
                          items:
                            description: ContainerRestartRule describes how a container
                              exit is handled.
                            properties:
                              action:
                                description: |-
                                  Specifies the action taken on a container exit if the requirements
                                  are satisfied. The only possible value is "Restart" to restart the
                                  container.
                                type: string
                              exitCodes:
                                description: Represents the exit codes to check on
                                  container exits.
                                properties:
                                  operator:
                                    description: |-
                                      Represents the relationship between the container exit code(s) and the
                                      specified values. Possible values are:
                                      - In: the requirement is satisfied if the container exit code is in the
                                        set of specified values.
                                      - NotIn: the requirement is satisfied if the container exit code is
                                        not in the set of specified values.
                                    type: string
                                  values:
                                    description: |-
                                      Specifies the set of values to check for container exit codes.
                                      At most 255 elements are allowed.
                                    items:
                                      format: int32
                                      type: integer
                                    type: array
                                    x-kubernetes-list-type: set
                                required:
                                - operator
                                type: object
                            required:
                            - action
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        securityContext:
                          description: |-
                            SecurityContext defines the security options the container should be run with.
                            If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.
                            More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
                          properties:
                            allowPrivilegeEscalation:
                              description: |-
                                AllowPrivilegeEscalation controls whether a process can gain more
                                privileges than its parent process. This bool directly controls if
                                the no_new_privs flag will be set on the container process.
                                AllowPrivilegeEscalation is true always when the container is:
                                1) run as Privileged
                                2) has CAP_SYS_ADMIN
                                Note that this field cannot be set when spec.os.name is windows.
                              type: boolean
                            appArmorProfile:
                              description: |-
                                appArmorProfile is the AppArmor options to use by this container. If set, this profile
                                overrides the pod's appArmorProfile.
                                Note that this field cannot be set when spec.os.name is windows.
                              properties:
                                localhostProfile:
                                  description: |-
                                    localhostProfile indicates a profile loaded on the node that should be used.
                                    The profile must be preconfigured on the node to work.
                                    Must match the loaded name of the profile.
                                    Must be set if and only if type is "Localhost".
                                  type: string
                                type:
                                  description: |-
                                    type indicates which kind of AppArmor profile will be applied.
                                    Valid options are:
                                      Localhost - a profile pre-loaded on the node.
                                      RuntimeDefault - the container runtime's default profile.
                                      Unconfined - no AppArmor enforcement.
                                  type: string
                              required:
                              - type
                              type: object
                            capabilities:
                              description: |-
                                The capabilities to add/drop when running containers.
                                Defaults to the default set of capabilities granted by the container runtime.
                                Note that this field cannot be set when spec.os.name is windows.
                              properties:
                                add:
                                  description: Added capabilities
                                  items:
                                    description: Capability represent POSIX capabilities
                                      type
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                                drop:
                                  description: Removed capabilities
                                  items:
                                    description: Capability represent POSIX capabilities
                                      type
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            privileged:
                              description: |-
                                Run container in privileged mode.
                                Processes in privileged containers are essentially equivalent to root on the host.
                                Defaults to false.
                                Note that this field cannot be set when spec.os.name is windows.
                              type: boolean
                            procMount:
                              description: |-
                                procMount denotes the type of proc mount to use for the containers.
                                The default value is Default which uses the container runtime defaults for
                                readonly paths and masked paths.
                                Note that this field cannot be set when spec.os.name is windows.
                              type: string
                            readOnlyRootFilesystem:
                              description: |-
                                Whether this container has a read-only root filesystem.
                                Default is false.
                                Note that this field cannot be set when spec.os.name is windows.
                              type: boolean
                            runAsGroup:
                              description: |-
                                The GID to run the entrypoint of the container process.
                                Uses runtime default if unset.
                                May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is windows.
                              format: int64
                              type: integer
                            runAsNonRoot:
                              description: |-
                                Indicates that the container must run as a non-root user.
                                If true, the Kubelet will validate the image at runtime to ensure that it
                                does not run as UID 0 (root) and fail to start the container if it does.
                                If unset or false, no such validation will be performed.
                                May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                              type: boolean
                            runAsUser:
                              description: |-
                                The UID to run the entrypoint of the container process.
                                Defaults to user specified in image metadata if unspecified.
                                May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is windows.
                              format: int64
                              type: integer
                            seLinuxOptions:
                              description: |-
                                The SELinux context to be applied to the container.
                                If unspecified, the container runtime will allocate a random SELinux context for each
                                container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is windows.
                              properties:
                                level:
                                  description: Level is SELinux level label that applies
                                    to the container.
                                  type: string
                                role:
                                  description: Role is a SELinux role label that applies
                                    to the container.
                                  type: string
                                type:
                                  description: Type is a SELinux type label that applies
                                    to the container.
                                  type: string
                                user:
                                  description: User is a SELinux user label that applies
                                    to the container.
                                  type: string
                              type: object
                            seccompProfile:
                              description: |-
                                The seccomp options to use by this container. If seccomp options are
                                provided at both the pod & container level, the container options
                                override the pod options.
                                Note that this field cannot be set when spec.os.name is windows.
                              properties:
                                localhostProfile:
                                  description: |-
                                    localhostProfile indicates a profile defined in a file on the node should be used.
                                    The profile must be preconfigured on the node to work.
                                    Must be a descending path, relative to the kubelet's configured seccomp profile location.
                                    Must be set if type is "Localhost". Must NOT be set for any other type.
                                  type: string
                                type:
                                  description: |-
                                    type indicates which kind of seccomp profile will be applied.
                                    Valid options are:

                                    Localhost - a profile defined in a file on the node should be used.
                                    RuntimeDefault - the container runtime default profile should be used.
                                    Unconfined - no profile should be applied.
                                  type: string
                              required:
                              - type
                              type: object
                            windowsOptions:
                              description: |-
                                The Windows specific settings applied to all containers.
                                If unspecified, the options from the PodSecurityContext will be used.
                                If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is linux.
                              properties:
                                gmsaCredentialSpec:
                                  description: |-
                                    GMSACredentialSpec is where the GMSA admission webhook
                                    (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                                    GMSA credential spec named by the GMSACredentialSpecName field.
                                  type: string
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name
                                    of the GMSA credential spec to use.
                                  type: string
                                hostProcess:
                                  description: |-
                                    HostProcess determines if a container should be run as a 'Host Process' container.
                                    All of a Pod's containers must have the same effective HostProcess value
                                    (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                                    In addition, if HostProcess is true then HostNetwork must also be set to true.
                                  type: boolean
                                runAsUserName:
                                  description: |-
                                    The UserName in Windows to run the entrypoint of the container process.
                                    Defaults to the user specified in image metadata if unspecified.
                                    May also be set in PodSecurityContext. If set in both SecurityContext and
                                    PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
                              type: object
                          type: object
                        startupProbe:
                          description: |-
                            StartupProbe indicates that the Pod has successfully initialized.
                            If specified, no other probes are executed until this completes successfully.
                            If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.
                            This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,
                            when it might take a long time to load data or warm a cache, than during steady-state operation.
                            This cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                          properties:
                            exec:
                              description: Exec specifies a command to execute in
                                the container.
                              properties:
                                command:
                                  description: |-
                                    Command is the command line to execute inside the container, the working directory for the
                                    command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                    not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                    a shell, you need to explicitly call out to that shell.
                                    Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            failureThreshold:
                              description: |-
                                Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                Defaults to 3. Minimum value is 1.
                              format: int32
                              type: integer
                            grpc:
                              description: GRPC specifies a GRPC HealthCheckRequest.
                              properties:
                                port:
                                  description: Port number of the gRPC service. Number
                                    must be in the range 1 to 65535.
                                  format: int32
                                  type: integer
                                service:
                                  default: ""
                                  description: |-
                                    Service is the name of the service to place in the gRPC HealthCheckRequest
                                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                    If this is not specified, the default behavior is defined by gRPC.
                                  type: string
                              required:
                              - port
                              type: object
                            httpGet:
                              description: HTTPGet specifies an HTTP GET request to
                                perform.
                              properties:
                                host:
                                  description: |-
                                    Host name to connect to, defaults to the pod IP. You probably want to set
                                    "Host" in httpHeaders instead.
                                  type: string
                                httpHeaders:
                                  description: Custom headers to set in the request.
                                    HTTP allows repeated headers.
                                  items:
                                    description: HTTPHeader describes a custom header
                                      to be used in HTTP probes
                                    properties:
                                      name:
                                        description: |-
                                          The header field name.
                                          This will be canonicalized upon output, so case-variant names will be understood as the same header.
                                        type: string
                                      value:
                                        description: The header field value
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                  x-kubernetes-list-type: atomic
                                path:
                                  description: Path to access on the HTTP server.
                                  type: string
                                port:
                                  anyOf:
                                  - type: integer
                                  - type: string
                                  description: |-
                                    Name or number of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
                                  x-kubernetes-int-or-string: true
                                scheme:
                                  description: |-
                                    Scheme to use for connecting to the host.
                                    Defaults to HTTP.
                                  type: string
                              required:
                              - port
                              type: object
                            initialDelaySeconds:
                              description: |-
                                Number of seconds after the container has started before liveness probes are initiated.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                              format: int32
                              type: integer
                            periodSeconds:
                              description: |-
                                How often (in seconds) to perform the probe.
                                Default to 10 seconds. Minimum value is 1.
                              format: int32
                              type: integer
                            successThreshold:
                              description: |-
                                Minimum consecutive successes for the probe to be considered successful after having failed.
                                Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
                              format: int32
                              type: integer
                            tcpSocket:
                              description: TCPSocket specifies a connection to a TCP
                                port.
                              properties:
                                host:
                                  description: 'Optional: Host name to connect to,
                                    defaults to the pod IP.'
                                  type: string
                                port:
                                  anyOf:
                                  - type: integer
                                  - type: string
                                  description: |-
                                    Number or name of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
                                  x-kubernetes-int-or-string: true
                              required:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
                              description: |-
                                Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                The grace period is the duration in seconds after the processes running in the pod are sent
                                a termination signal and the time when the processes are forcibly halted with a kill signal.
                                Set this value longer than the expected cleanup time for your process.
                                If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                value overrides the value provided by the pod spec.
                                Value must be non-negative integer. The value zero indicates stop immediately via
                                the kill signal (no opportunity to shut down).
                                This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
                              description: |-
                                Number of seconds after which the probe times out.
                                Defaults to 1 second. Minimum value is 1.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                              format: int32
                              type: integer
                          type: object
                        stdin:
                          description: |-
                            Whether this container should allocate a buffer for stdin in the container runtime. If this
                            is not set, reads from stdin in the container will always result in EOF.
                            Default is false.
                          type: boolean
                        stdinOnce:
                          description: |-
                            Whether the container runtime should close the stdin channel after it has been opened by
                            a single attach. When stdin is true the stdin stream will remain open across multiple attach
                            sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the
                            first client attaches to stdin, and then remains open and accepts data until the client disconnects,
                            at which time stdin is closed and remains closed until the container is restarted. If this
                            flag is false, a container processes that reads from stdin will never receive an EOF.
                            Default is false
                          type: boolean
                        terminationMessagePath:
                          description: |-
                            Optional: Path at which the file to which the container's termination message
                            will be written is mounted into the container's filesystem.
                            Message written is intended to be brief final status, such as an assertion failure message.
                            Will be truncated by the node if greater than 4096 bytes. The total message length across
                            all containers will be limited to 12kb.
                            Defaults to /dev/termination-log.
                            Cannot be updated.
                          type: string
                        terminationMessagePolicy:
                          description: |-
                            Indicate how the termination message should be populated. File will use the contents of
                            terminationMessagePath to populate the container status message on both success and failure.
                            FallbackToLogsOnError will use the last chunk of container log output if the termination
                            message file is empty and the container exited with an error.
                            The log output is limited to 2048 bytes or 80 lines, whichever is smaller.
                            Defaults to File.
                            Cannot be updated.
                          type: string
                        tty:
                          description: |-
                            Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.
                            Default is false.
                          type: boolean
                        volumeDevices:
                          description: volumeDevices is the list of block devices
                            to be used by the container.
                          items:
                            description: volumeDevice describes a mapping of a raw
                              block device within a container.
                            properties:
                              devicePath:
                                description: devicePath is the path inside of the
                                  container that the device will be mapped to.
                                type: string
                              name:
                                description: name must match the name of a persistentVolumeClaim
                                  in the pod
                                type: string
                            required:
                            - devicePath
                            - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                          - devicePath
                          x-kubernetes-list-type: map
                        volumeMounts:
                          description: |-
                            Pod volumes to mount into the container's filesystem.
                            Cannot be updated.
                          items:
                            description: VolumeMount describes a mounting of a Volume
                              within a container.
                            properties:
                              mountPath:
                                description: |-
                                  Path within the container at which the volume should be mounted.  Must
                                  not contain ':'.
                                type: string
                              mountPropagation:
                                description: |-
                                  mountPropagation determines how mounts are propagated from the host
                                  to container and the other way around.
                                  When not set, MountPropagationNone is used.
                                  This field is beta in 1.10.
                                  When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified
                                  (which defaults to None).
                                type: string
                              name:
                                description: This must match the Name of a Volume.
                                type: string
                              readOnly:
                                description: |-
                                  Mounted read-only if true, read-write otherwise (false or unspecified).
                                  Defaults to false.
                                type: boolean
                              recursiveReadOnly:
                                description: |-
                                  RecursiveReadOnly specifies whether read-only mounts should be handled
                                  recursively.

                                  If ReadOnly is false, this field has no meaning and must be unspecified.

                                  If ReadOnly is true, and this field is set to Disabled, the mount is not made
                                  recursively read-only.  If this field is set to IfPossible, the mount is made
                                  recursively read-only, if it is supported by the container runtime.  If this
                                  field is set to Enabled, the mount is made recursively read-only if it is
                                  supported by the container runtime, otherwise the pod will not be started and
                                  an error will be generated to indicate the reason.

                                  If this field is set to IfPossible or Enabled, MountPropagation must be set to
                                  None (or be unspecified, which defaults to None).

                                  If this field is not specified, it is treated as an equivalent of Disabled.
                                type: string
                              subPath:
                                description: |-
                                  Path within the volume from which the container's volume should be mounted.
                                  Defaults to "" (volume's root).
                                type: string
                              subPathExpr:
                                description: |-
                                  Expanded path within the volume from which the container's volume should be mounted.
                                  Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.
                                  Defaults to "" (volume's root).
                                  SubPathExpr and SubPath are mutually exclusive.
                                type: string
                            required:
                            - mountPath
                            - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                          - mountPath
                          x-kubernetes-list-type: map
                        workingDir:
                          description: |-
                            Container's working directory.
                            If not specified, the container runtime's default will be used, which
                            might be configured in the container image.
                            Cannot be updated.
                          type: string
                      required:
                      - name
                      type: object
                    type: array
                  persistUserHome:
                    description: |-
                      PersistUserHome defines configuration options for persisting the `/home/user/`
                      directory in workspaces.
                    properties:
                      disableInitContainer:
                        description: |-
                          Determines whether the init container that initializes the persistent home directory should be disabled.
                          When the `/home/user` directory is persisted, the init container is used to initialize the directory before
                          the workspace starts. If set to true, the init container will not be created.
                          This field is not used if the `workspace.persistUserHome.enabled` field is set to false.
                          Enabled by default.
                        type: boolean
                      enabled:
                        description: |-
                          Determines whether the `/home/user/` directory in workspaces should persist between
                          workspace shutdown and startup.
                          Must be used with the 'per-user'/'common' or 'per-workspace' storage class in order to take effect.
                          Disabled by default.
                        type: boolean
                    type: object
                  podAnnotations:
                    additionalProperties:
                      type: string
                    description: PodAnnotations defines the metadata.annotations for
                      DevWorkspace pods created by the DevWorkspace Operator.
                    type: object
                  podSecurityContext:
                    description: |-
                      PodSecurityContext overrides the default PodSecurityContext used for all workspace-related
                      pods created by the DevWorkspace Operator. If set, defined values are merged into the default
                      configuration
                    properties:
                      appArmorProfile:
                        description: |-
                          appArmorProfile is the AppArmor options to use by the containers in this pod.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          localhostProfile:
                            description: |-
                              localhostProfile indicates a profile loaded on the node that should be used.
                              The profile must be preconfigured on the node to work.
                              Must match the loaded name of the profile.
                              Must be set if and only if type is "Localhost".
                            type: string
                          type:
                            description: |-
                              type indicates which kind of AppArmor profile will be applied.
                              Valid options are:
                                Localhost - a profile pre-loaded on the node.
                                RuntimeDefault - the container runtime's default profile.
                                Unconfined - no AppArmor enforcement.
                            type: string
                        required:
                        - type
                        type: object
                      fsGroup:
                        description: |-
                          A special supplemental group that applies to all containers in a pod.
                          Some volume types allow the Kubelet to change the ownership of that volume
                          to be owned by the pod:

                          1. The owning GID will be the FSGroup
                          2. The setgid bit is set (new files created in the volume will be owned by FSGroup)
                          3. The permission bits are OR'd with rw-rw----

                          If unset, the Kubelet will not modify the ownership and permissions of any volume.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      fsGroupChangePolicy:
                        description: |-
                          fsGroupChangePolicy defines behavior of changing ownership and permission of the volume
                          before being exposed inside Pod. This field will only apply to
                          volume types which support fsGroup based ownership(and permissions).
                          It will have no effect on ephemeral volume types such as: secret, configmaps
                          and emptydir.
                          Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: string
                      runAsGroup:
                        description: |-
                          The GID to run the entrypoint of the container process.
                          Uses runtime default if unset.
                          May also be set in SecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence
                          for that container.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      runAsNonRoot:
                        description: |-
                          Indicates that the container must run as a non-root user.
                          If true, the Kubelet will validate the image at runtime to ensure that it
                          does not run as UID 0 (root) and fail to start the container if it does.
                          If unset or false, no such validation will be performed.
                          May also be set in SecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                        type: boolean
                      runAsUser:
                        description: |-
                          The UID to run the entrypoint of the container process.
                          Defaults to user specified in image metadata if unspecified.
                          May also be set in SecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence
                          for that container.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      seLinuxChangePolicy:
                        description: |-
                          seLinuxChangePolicy defines how the container's SELinux label is applied to all volumes used by the Pod.
                          It has no effect on nodes that do not support SELinux or to volumes does not support SELinux.
                          Valid values are "MountOption" and "Recursive".

                          "Recursive" means relabeling of all files on all Pod volumes by the container runtime.
                          This may be slow for large volumes, but allows mixing privileged and unprivileged Pods sharing the same volume on the same node.

                          "MountOption" mounts all eligible Pod volumes with `-o context` mount option.
                          This requires all Pods that share the same volume to use the same SELinux label.
                          It is not possible to share the same volume among privileged and unprivileged Pods.
                          Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
                          whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
                          CSIDriver instance. Other volumes are always re-labelled recursively.
                          "MountOption" value is allowed only when SELinuxMount feature gate is enabled.

                          If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
                          If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
                          and "Recursive" for all other volumes.

                          This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.

                          All Pods that use the same volume should use the same seLinuxChangePolicy, otherwise some pods can get stuck in ContainerCreating state.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: string
                      seLinuxOptions:
                        description: |-
                          The SELinux context to be applied to all containers.
                          If unspecified, the container runtime will allocate a random SELinux context for each
                          container.  May also be set in SecurityContext.  If set in
                          both SecurityContext and PodSecurityContext, the value specified in SecurityContext
                          takes precedence for that container.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          level:
                            description: Level is SELinux level label that applies
                              to the container.
                            type: string
                          role:
                            description: Role is a SELinux role label that applies
                              to the container.
                            type: string
                          type:
                            description: Type is a SELinux type label that applies
                              to the container.
                            type: string
                          user:
                            description: User is a SELinux user label that applies
                              to the container.
                            type: string
                        type: object
                      seccompProfile:
                        description: |-
                          The seccomp options to use by the containers in this pod.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          localhostProfile:
                            description: |-
                              localhostProfile indicates a profile defined in a file on the node should be used.
                              The profile must be preconfigured on the node to work.
                              Must be a descending path, relative to the kubelet's configured seccomp profile location.
                              Must be set if type is "Localhost". Must NOT be set for any other type.
                            type: string
                          type:
                            description: |-
                              type indicates which kind of seccomp profile will be applied.
                              Valid options are:

                              Localhost - a profile defined in a file on the node should be used.
                              RuntimeDefault - the container runtime default profile should be used.
                              Unconfined - no profile should be applied.
                            type: string
                        required:
                        - type
                        type: object
                      supplementalGroups:
                        description: |-
                          A list of groups applied to the first process run in each container, in
                          addition to the container's primary GID and fsGroup (if specified).  If
                          the SupplementalGroupsPolicy feature is enabled, the
                          supplementalGroupsPolicy field determines whether these are in addition
                          to or instead of any group memberships defined in the container image.
                          If unspecified, no additional groups are added, though group memberships
                          defined in the container image may still be used, depending on the
                          supplementalGroupsPolicy field.
                          Note that this field cannot be set when spec.os.name is windows.
                        items:
                          format: int64
                          type: integer
                        type: array
                        x-kubernetes-list-type: atomic
                      supplementalGroupsPolicy:
                        description: |-
                          Defines how supplemental groups of the first container processes are calculated.
                          Valid values are "Merge" and "Strict". If not specified, "Merge" is used.
                          (Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabled
                          and the container runtime must implement support for this feature.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: string
                      sysctls:
                        description: |-
                          Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported
                          sysctls (by the container runtime) might fail to launch.
                          Note that this field cannot be set when spec.os.name is windows.
                        items:
                          description: Sysctl defines a kernel parameter to be set
                          properties:
                            name:
                              description: Name of a property to set
                              type: string
                            value:
                              description: Value of a property to set
                              type: string
                          required:
                          - name
                          - value
                          type: object
                        type: array
                        x-kubernetes-list-type: atomic
                      windowsOptions:
                        description: |-
                          The Windows specific settings applied to all containers.
                          If unspecified, the options within a container's SecurityContext will be used.
                          If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is linux.
                        properties:
                          gmsaCredentialSpec:
                            description: |-
                              GMSACredentialSpec is where the GMSA admission webhook
                              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                              GMSA credential spec named by the GMSACredentialSpecName field.
                            type: string
                          gmsaCredentialSpecName:
                            description: GMSACredentialSpecName is the name of the
                              GMSA credential spec to use.
                            type: string
                          hostProcess:
                            description: |-
                              HostProcess determines if a container should be run as a 'Host Process' container.
                              All of a Pod's containers must have the same effective HostProcess value
                              (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                              In addition, if HostProcess is true then HostNetwork must also be set to true.
                            type: boolean
                          runAsUserName:
                            description: |-
                              The UserName in Windows to run the entrypoint of the container process.
                              Defaults to the user specified in image metadata if unspecified.
                              May also be set in PodSecurityContext. If set in both SecurityContext and
                              PodSecurityContext, the value specified in SecurityContext takes precedence.
                            type: string
                        type: object
                    type: object
                  postStartTimeout:
                    description: |-
                      PostStartTimeout defines the maximum duration the PostStart hook can run
                      before it is automatically failed. This timeout is used for the postStart lifecycle hook
                      that is used to run commands in the workspace container. The timeout is specified in seconds.
                      Duration should be specified in a format parseable by Go's time package, e.g. "20s", "2m".
                      If not specified or "0", the timeout is disabled.
                    type: string
                  progressTimeout:
                    description: |-
                      ProgressTimeout determines the maximum duration a DevWorkspace can be in
                      a "Starting" or "Failing" phase without progressing before it is automatically failed.
                      Duration should be specified in a format parseable by Go's time package, e.g.
                      "15m", "20s", "1h30m", etc. If not specified, the default value of "5m" is used.
                    type: string
                  projectClone:
                    description: |-
                      ProjectCloneConfig defines configuration related to the project clone init container
                      that is used to clone git projects into the DevWorkspace.
                    properties:
                      env:
                        description: Env allows defining additional environment variables
                          for the project clone container.
                        items:
                          description: EnvVar represents an environment variable present
                            in a Container.
                          properties:
                            name:
                              description: |-
                                Name of the environment variable.
                                May consist of any printable ASCII characters except '='.
                              type: string
                            value:
                              description: |-
                                Variable references $(VAR_NAME) are expanded
                                using the previously defined environment variables in the container and
                                any service environment variables. If a variable cannot be resolved,
                                the reference in the input string will be unchanged. Double $$ are reduced
                                to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                Escaped references will never be expanded, regardless of whether the variable
                                exists or not.
                                Defaults to "".
                              type: string
                            valueFrom:
                              description: Source for the environment variable's value.
                                Cannot be used if value is not empty.
                              properties:
                                configMapKeyRef:
                                  description: Selects a key of a ConfigMap.
                                  properties:
                                    key:
                                      description: The key to select.
                                      type: string
                                    name:
                                      default: ""
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      type: string
                                    optional:
                                      description: Specify whether the ConfigMap or
                                        its key must be defined
                                      type: boolean
                                  required:
                                  - key
                                  type: object
                                  x-kubernetes-map-type: atomic
                                fieldRef:
                                  description: |-
                                    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                    spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                                  properties:
                                    apiVersion:
                                      description: Version of the schema the FieldPath
                                        is written in terms of, defaults to "v1".
                                      type: string
                                    fieldPath:
                                      description: Path of the field to select in
                                        the specified API version.
                                      type: string
                                  required:
                                  - fieldPath
                                  type: object
                                  x-kubernetes-map-type: atomic
                                fileKeyRef:
                                  description: |-
                                    FileKeyRef selects a key of the env file.
                                    Requires the EnvFiles feature gate to be enabled.
                                  properties:
                                    key:
                                      description: |-
                                        The key within the env file. An invalid key will prevent the pod from starting.
                                        The keys defined within a source may consist of any printable ASCII characters except '='.
                                        During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
                                      type: string
                                    optional:
                                      default: false
                                      description: |-
                                        Specify whether the file or its key must be defined. If the file or key
                                        does not exist, then the env var is not published.
                                        If optional is set to true and the specified key does not exist,
                                        the environment variable will not be set in the Pod's containers.

                                        If optional is set to false and the specified key does not exist,
                                        an error will be returned during Pod creation.
                                      type: boolean
                                    path:
                                      description: |-
                                        The path within the volume from which to select the file.
                                        Must be relative and may not contain the '..' path or start with '..'.
                                      type: string
                                    volumeName:
                                      description: The name of the volume mount containing
                                        the env file.
                                      type: string
                                  required:
                                  - key
                                  - path
                                  - volumeName
                                  type: object
                                  x-kubernetes-map-type: atomic
                                resourceFieldRef:
                                  description: |-
                                    Selects a resource of the container: only resources limits and requests
                                    (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
                                  properties:
                                    containerName:
                                      description: 'Container name: required for volumes,
                                        optional for env vars'
                                      type: string
                                    divisor:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: Specifies the output format of
                                        the exposed resources, defaults to "1"
                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                      x-kubernetes-int-or-string: true
                                    resource:
                                      description: 'Required: resource to select'
                                      type: string
                                  required:
                                  - resource
                                  type: object
                                  x-kubernetes-map-type: atomic
                                secretKeyRef:
                                  description: Selects a key of a secret in the pod's
                                    namespace
                                  properties:
                                    key:
                                      description: The key of the secret to select
                                        from.  Must be a valid secret key.
                                      type: string
                                    name:
                                      default: ""
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      type: string
                                    optional:
                                      description: Specify whether the Secret or its
                                        key must be defined
                                      type: boolean
                                  required:
                                  - key
                                  type: object
                                  x-kubernetes-map-type: atomic
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      image:
                        description: Image is the container image to use for cloning
                          projects
                        type: string
                      imagePullPolicy:
                        description: |-
                          ImagePullPolicy configures the imagePullPolicy for the project clone container.
                          If undefined, the general setting .config.workspace.imagePullPolicy is used instead.
                        type: string
                      resources:
                        description: |-
                          Resources defines the resource (cpu, memory) limits and requests for the project
                          clone container. To explicitly not specify a limit or request, define the resource
                          quantity as zero ('0')
                        properties:
                          claims:
                            description: |-
                              Claims lists the names of resources, defined in spec.resourceClaims,
                              that are used by this container.

                              This field depends on the
                              DynamicResourceAllocation feature gate.

                              This field is immutable. It can only be set for containers.
                            items:
                              description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                              properties:
                                name:
                                  description: |-
                                    Name must match the name of one entry in pod.spec.resourceClaims of
                                    the Pod where this field is used. It makes that resource available
                                    inside a container.
                                  type: string
                                request:
                                  description: |-
                                    Request is the name chosen for a request in the referenced claim.
                                    If empty, everything from the claim is made available, otherwise
                                    only the result of this request.
                                  type: string
                              required:
                              - name
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                            - name
                            x-kubernetes-list-type: map
                          limits:
                            additionalProperties:
                              anyOf:
                              - type: integer
                              - type: string
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            description: |-
                              Limits describes the maximum amount of compute resources allowed.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                            type: object
                          requests:
                            additionalProperties:
                              anyOf:
                              - type: integer
                              - type: string
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            description: |-
                              Requests describes the minimum amount of compute resources required.
                              If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                              otherwise to an implementation-defined value. Requests cannot exceed Limits.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                            type: object
                        type: object
                    type: object
                  pvcName:
                    description: |-
                      PVCName defines the name used for the persistent volume claim created
                      to support workspace storage when the 'common' storage class is used.
                      If not specified, the default value of `claim-devworkspace` is used.
                      Note that changing this configuration value after workspaces have been
                      created will disconnect all existing workspaces from the previously-used
                      persistent volume claim, and will require manual removal of the old PVCs
                      in the cluster.
                    maxLength: 63
                    pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                    type: string
                  restore:
                    description: |-
                      RestoreConfig defines configuration related to the workspace restore init container
                      that is used to restore workspace data from a backup image.
                    properties:
                      env:
                        description: Env allows defining additional environment variables
                          for the restore container.
                        items:
                          description: EnvVar represents an environment variable present
                            in a Container.
                          properties:
                            name:
                              description: |-
                                Name of the environment variable.
                                May consist of any printable ASCII characters except '='.
                              type: string
                            value:
                              description: |-
                                Variable references $(VAR_NAME) are expanded
                                using the previously defined environment variables in the container and
                                any service environment variables. If a variable cannot be resolved,
                                the reference in the input string will be unchanged. Double $$ are reduced
                                to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                Escaped references will never be expanded, regardless of whether the variable
                                exists or not.
                                Defaults to "".
                              type: string
                            valueFrom:
                              description: Source for the environment variable's value.
                                Cannot be used if value is not empty.
                              properties:
                                configMapKeyRef:
                                  description: Selects a key of a ConfigMap.
                                  properties:
                                    key:
                                      description: The key to select.
                                      type: string
                                    name:
                                      default: ""
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      type: string
                                    optional:
                                      description: Specify whether the ConfigMap or
                                        its key must be defined
                                      type: boolean
                                  required:
                                  - key
                                  type: object
                                  x-kubernetes-map-type: atomic
                                fieldRef:
                                  description: |-
                                    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                    spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                                  properties:
                                    apiVersion:
                                      description: Version of the schema the FieldPath
                                        is written in terms of, defaults to "v1".
                                      type: string
                                    fieldPath:
                                      description: Path of the field to select in
                                        the specified API version.
                                      type: string
                                  required:
                                  - fieldPath
                                  type: object
                                  x-kubernetes-map-type: atomic
                                fileKeyRef:
                                  description: |-
                                    FileKeyRef selects a key of the env file.
                                    Requires the EnvFiles feature gate to be enabled.
                                  properties:
                                    key:
                                      description: |-
                                        The key within the env file. An invalid key will prevent the pod from starting.
                                        The keys defined within a source may consist of any printable ASCII characters except '='.
                                        During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
                                      type: string
                                    optional:
                                      default: false
                                      description: |-
                                        Specify whether the file or its key must be defined. If the file or key
                                        does not exist, then the env var is not published.
                                        If optional is set to true and the specified key does not exist,
                                        the environment variable will not be set in the Pod's containers.

                                        If optional is set to false and the specified key does not exist,
                                        an error will be returned during Pod creation.
                                      type: boolean
                                    path:
                                      description: |-
                                        The path within the volume from which to select the file.
                                        Must be relative and may not contain the '..' path or start with '..'.
                                      type: string
                                    volumeName:
                                      description: The name of the volume mount containing
                                        the env file.
                                      type: string
                                  required:
                                  - key
                                  - path
                                  - volumeName
                                  type: object
                                  x-kubernetes-map-type: atomic
                                resourceFieldRef:
                                  description: |-
                                    Selects a resource of the container: only resources limits and requests
                                    (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
                                  properties:
                                    containerName:
                                      description: 'Container name: required for volumes,
                                        optional for env vars'
                                      type: string
                                    divisor:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: Specifies the output format of
                                        the exposed resources, defaults to "1"
                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                      x-kubernetes-int-or-string: true
                                    resource:
                                      description: 'Required: resource to select'
                                      type: string
                                  required:
                                  - resource
                                  type: object
                                  x-kubernetes-map-type: atomic
                                secretKeyRef:
                                  description: Selects a key of a secret in the pod's
                                    namespace
                                  properties:
                                    key:
                                      description: The key of the secret to select
                                        from.  Must be a valid secret key.
                                      type: string
                                    name:
                                      default: ""
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                      type: string
                                    optional:
                                      description: Specify whether the Secret or its
                                        key must be defined
                                      type: boolean
                                  required:
                                  - key
                                  type: object
                                  x-kubernetes-map-type: atomic
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      imagePullPolicy:
                        description: |-
                          ImagePullPolicy configures the imagePullPolicy for the restore container.
                          If undefined, the general setting .config.workspace.imagePullPolicy is used instead.
                        type: string
                      resources:
                        description: |-
                          Resources defines the resource (cpu, memory) limits and requests for the restore
                          container. To explicitly not specify a limit or request, define the resource
                          quantity as zero ('0')
                        properties:
                          claims:
                            description: |-
                              Claims lists the names of resources, defined in spec.resourceClaims,
                              that are used by this container.

                              This field depends on the
                              DynamicResourceAllocation feature gate.

                              This field is immutable. It can only be set for containers.
                            items:
                              description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                              properties:
                                name:
                                  description: |-
                                    Name must match the name of one entry in pod.spec.resourceClaims of
                                    the Pod where this field is used. It makes that resource available
                                    inside a container.
                                  type: string
                                request:
                                  description: |-
                                    Request is the name chosen for a request in the referenced claim.
                                    If empty, everything from the claim is made available, otherwise
                                    only the result of this request.
                                  type: string
                              required:
                              - name
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                            - name
                            x-kubernetes-list-type: map
                          limits:
                            additionalProperties:
                              anyOf:
                              - type: integer
                              - type: string
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            description: |-
                              Limits describes the maximum amount of compute resources allowed.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                            type: object
                          requests:
                            additionalProperties:
                              anyOf:
                              - type: integer
                              - type: string
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            description: |-
                              Requests describes the minimum amount of compute resources required.
                              If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                              otherwise to an implementation-defined value. Requests cannot exceed Limits.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                            type: object
                        type: object
                    type: object
                  runtimeClassName:
                    description: RuntimeClassName defines the spec.runtimeClassName
                      for DevWorkspace pods created by the DevWorkspace Operator.
                    type: string
                  schedulerName:
                    description: |-
                      SchedulerName is the name of the pod scheduler for DevWorkspace pods.
                      If not specified, the pod scheduler is set to the default scheduler on the cluster.
                    type: string
                  serviceAccount:
                    description: |-
                      ServiceAccount defines configuration options for the ServiceAccount used for
                      DevWorkspaces.
                    properties:
                      disableCreation:
                        description: |-
                          Disable creation of DevWorkspace ServiceAccounts by the DevWorkspace Operator. If set to true, the serviceAccountName
                          field must also be set. If ServiceAccount creation is disabled, it is assumed that the specified ServiceAccount already
                          exists in any namespace where a workspace is created. If a suitable ServiceAccount does not exist, starting DevWorkspaces
                          will fail.
                        type: boolean
                      serviceAccountName:
                        description: |-
                          ServiceAccountName defines a fixed name to be used for all DevWorkspaces. If set, the DevWorkspace
                          Operator will not generate a separate ServiceAccount for each DevWorkspace, and will instead create
                          a ServiceAccount with the specified name in each namespace where DevWorkspaces are created. If specified,
                          the created ServiceAccount will not be removed when DevWorkspaces are deleted and must be cleaned up manually.
                        maxLength: 63
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                        type: string
                      serviceAccountTokens:
                        description: List of ServiceAccount tokens that will be mounted
                          into workspace pods as projected volumes.
                        items:
                          properties:
                            audience:
                              description: |-
                                Audience is the intended audience of the token. A recipient of a token
                                must identify itself with an identifier specified in the audience of the
                                token, and otherwise should reject the token. The audience defaults to the
                                identifier of the apiserver.
                              type: string
                            expirationSeconds:
                              default: 3600
                              description: |-
                                ExpirationSeconds is the requested duration of validity of the service
                                account token. As the token approaches expiration, the kubelet volume
                                plugin will proactively rotate the service account token. The kubelet will
                                start trying to rotate the token if the token is older than 80 percent of
                                its time to live or if the token is older than 24 hours. Defaults to 1 hour
                                and must be at least 10 minutes.
                              format: int64
                              minimum: 600
                              type: integer
                            mountPath:
                              description: |-
                                Path within the workspace container at which the token should be mounted.  Must
                                not contain ':'.
                              type: string
                            name:
                              description: |-
                                Identifiable name of the ServiceAccount token.
                                If multiple ServiceAccount tokens use the same mount path, a generic name will be used
                                for the projected volume instead.
                              type: string
                            path:
                              description: |-
                                Path is the path relative to the mount point of the file to project the
                                token into.
                              type: string
                          required:
                          - mountPath
                          - name
                          - path
                          type: object
                        type: array
                    type: object
                  storageAccessMode:
                    description: |-
                      StorageAccessMode are the desired access modes the volume should have. It defaults
                      to ReadWriteOnce if not specified
                    items:
                      type: string
                    type: array
                  storageClassName:
                    description: |-
                      StorageClassName defines an optional storageClass to use for persistent
                      volume claims created to support DevWorkspaces
                    type: string
                type: object
            type: object
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
          status:
            description: |-
              Status represents the current status of the DevWorkspaceOperatorConfig
              automatically managed by the DevWorkspace Operator.
            properties:
              conditions:
                description: Conditions represent the latest available observations
                  of the OperatorConfiguration's state
                items:
                  description: Condition contains details for one aspect of the current
                    state of this API Resource.
                  properties:
                    lastTransitionTime:
                      description: |-
                        lastTransitionTime is the last time the condition transitioned from one status to another.
                        This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                      format: date-time
                      type: string
                    message:
                      description: |-
                        message is a human readable message indicating details about the transition.
                        This may be an empty string.
                      maxLength: 32768
                      type: string
                    observedGeneration:
                      description: |-
                        observedGeneration represents the .metadata.generation that the condition was set based upon.
                        For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                        with respect to the current state of the instance.
                      format: int64
                      minimum: 0
                      type: integer
                    reason:
                      description: |-
                        reason contains a programmatic identifier indicating the reason for the condition's last transition.
                        Producers of specific condition types may define expected values and meanings for this field,
                        and whether the values are considered a guaranteed API.
                        The value should be a CamelCase string.
                        This field may not be empty.
                      maxLength: 1024
                      minLength: 1
                      pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                      type: string
                    status:
                      description: status of the condition, one of True, False, Unknown.
                      enum:
                      - "True"
                      - "False"
                      - Unknown
                      type: string
                    type:
                      description: type of condition in CamelCase or in foo.example.com/CamelCase.
                      maxLength: 316
                      pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                      type: string
                  required:
                  - lastTransitionTime
                  - message
                  - reason
                  - status
                  - type
                  type: object
                type: array
              lastBackupTime:
                description: |-
                  LastBackupTime is the timestamp of the last successful backup. Nil if
                  no backup is configured or no backup has yet succeeded.
                format: date-time
                type: string
            type: object
        type: object
    served: true
    storage: true
    subresources:
      status: {}