devworkspaceoperatorconfigs.controller.devfile.io.CustomResourceDefinition.yaml

apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.15.0
  labels:
    app.kubernetes.io/name: devworkspace-controller
    app.kubernetes.io/part-of: devworkspace-operator
  name: devworkspaceoperatorconfigs.controller.devfile.io
spec:
  group: controller.devfile.io
  names:
    kind: DevWorkspaceOperatorConfig
    listKind: DevWorkspaceOperatorConfigList
    plural: devworkspaceoperatorconfigs
    shortNames:
    - dwoc
    singular: devworkspaceoperatorconfig
  scope: Namespaced
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: DevWorkspaceOperatorConfig is the Schema for the devworkspaceoperatorconfigs
          API
        properties:
          apiVersion:
            description: |-
              APIVersion defines the versioned schema of this representation of an object.
              Servers should convert recognized schemas to the latest internal value, and
              may reject unrecognized values.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
            type: string
          config:
            description: |-
              OperatorConfiguration defines configuration options for the DevWorkspace
              Operator.
            properties:
              enableExperimentalFeatures:
                description: |-
                  EnableExperimentalFeatures turns on in-development features of the controller.
                  This option should generally not be enabled, as any capabilites are subject
                  to removal without notice.
                type: boolean
              routing:
                description: Routing defines configuration options related to DevWorkspace
                  networking
                properties:
                  clusterHostSuffix:
                    description: |-
                      ClusterHostSuffix is the hostname suffix to be used for DevWorkspace endpoints.
                      On OpenShift, the DevWorkspace Operator will attempt to determine the appropriate
                      value automatically. Must be specified on Kubernetes.
                    type: string
                  defaultRoutingClass:
                    description: |-
                      DefaultRoutingClass specifies the routingClass to be used when a DevWorkspace
                      specifies an empty `.spec.routingClass`. Supported routingClasses can be defined
                      in other controllers. If not specified, the default value of "basic" is used.
                    type: string
                  proxyConfig:
                    description: |-
                      ProxyConfig defines the proxy settings that should be used for all DevWorkspaces.
                      These values are propagated to workspace containers as environment variables.


                      On OpenShift, the operator automatically reads values from the "cluster" proxies.config.openshift.io
                      object and this value only needs to be set to override those defaults. Values for httpProxy
                      and httpsProxy override the cluster configuration directly. Entries for noProxy are merged
                      with the noProxy values in the cluster configuration. To ignore automatically read values from the cluster,
                      set values in fields to the empty string ("")


                      Changes to the proxy configuration are detected by the DevWorkspace Operator and propagated to
                      DevWorkspaces. However, changing the proxy configuration for the DevWorkspace Operator itself
                      requires restarting the controller deployment.
                    properties:
                      httpProxy:
                        description: |-
                          HttpProxy is the URL of the proxy for HTTP requests, in the format http://USERNAME:PASSWORD@SERVER:PORT/. To ignore
                          automatically detected proxy settings for the cluster, set this field to an empty string ("")
                        type: string
                      httpsProxy:
                        description: |-
                          HttpsProxy is the URL of the proxy for HTTPS requests, in the format http://USERNAME:PASSWORD@SERVER:PORT/. To ignore
                          automatically detected proxy settings for the cluster, set this field to an empty string ("")
                        type: string
                      noProxy:
                        description: |-
                          NoProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used. Ignored
                          when HttpProxy and HttpsProxy are unset. To ignore automatically detected proxy settings for the cluster, set this
                          field to an empty string ("")
                        type: string
                    type: object
                  tlsCertificateConfigmapRef:
                    description: |-
                      TLSCertificateConfigmapRef defines the name and namespace of the configmap with a certificate to inject into the
                      HTTP client.
                    properties:
                      name:
                        description: Name is the name of the configmap
                        type: string
                      namespace:
                        description: Namespace is the namespace of the configmap
                        type: string
                    required:
                    - name
                    - namespace
                    type: object
                type: object
              webhook:
                description: |-
                  Webhook defines configuration options for the DevWorkspace Webhook Server.
                  Note: In order for changes made to the webhook configuration to take effect:


                  - The changes must be made in the global DevWorkspaceOperatorConfig, which has the
                    name 'devworkspace-operator-config' and exists in the same namespace where the
                    DevWorkspaceOperator is deployed.


                  - The devworkspace-controller-manager pod must be terminated and recreated for the
                    DevWorkspace Webhook Server deployment to be updated.
                properties:
                  nodeSelector:
                    additionalProperties:
                      type: string
                    description: |-
                      NodeSelector defines the map of Kubernetes nodeSelectors to apply to the DevWorkspace Webhook
                      Server pod(s).
                      No NodeSelectors are added by default.
                    type: object
                  replicas:
                    default: 2
                    description: |-
                      Replicas defines the number of desired DevWorkspace Webhook Server pods.
                      Defaults to 2.
                    format: int32
                    minimum: 1
                    type: integer
                  tolerations:
                    description: |-
                      Tolerations defines the array of Kubernetes pod tolerations to apply to the DevWorkspace Webhook
                      Server pod(s).
                      No Tolerations are added by default.
                    items:
                      description: |-
                        The pod this Toleration is attached to tolerates any taint that matches
                        the triple <key,value,effect> using the matching operator <operator>.
                      properties:
                        effect:
                          description: |-
                            Effect indicates the taint effect to match. Empty means match all taint effects.
                            When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
                          type: string
                        key:
                          description: |-
                            Key is the taint key that the toleration applies to. Empty means match all taint keys.
                            If the key is empty, operator must be Exists; this combination means to match all values and all keys.
                          type: string
                        operator:
                          description: |-
                            Operator represents a key's relationship to the value.
                            Valid operators are Exists and Equal. Defaults to Equal.
                            Exists is equivalent to wildcard for value, so that a pod can
                            tolerate all taints of a particular category.
                          type: string
                        tolerationSeconds:
                          description: |-
                            TolerationSeconds represents the period of time the toleration (which must be
                            of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
                            it is not set, which means tolerate the taint forever (do not evict). Zero and
                            negative values will be treated as 0 (evict immediately) by the system.
                          format: int64
                          type: integer
                        value:
                          description: |-
                            Value is the taint value the toleration matches to.
                            If the operator is Exists, the value should be empty, otherwise just a regular string.
                          type: string
                      type: object
                    type: array
                type: object
              workspace:
                description: |-
                  Workspace defines configuration options related to how DevWorkspaces are
                  managed
                properties:
                  cleanupCronJob:
                    description: CleanupCronJobConfig defines configuration options
                      for a cron job that automatically cleans up stale DevWorkspaces.
                    properties:
                      dryRun:
                        description: |-
                          DryRun determines whether the cleanup cron job should be run in dry-run mode.
                          If set to true, the cron job will not delete any DevWorkspaces, but will log the DevWorkspaces that would have been deleted.
                          Defaults to false if not specified.
                        type: boolean
                      enable:
                        description: |-
                          Enable determines whether the cleanup cron job is enabled.
                          Defaults to false if not specified.
                        type: boolean
                      retainTime:
                        default: 2592000
                        description: |-
                          RetainTime specifies the minimum time (in seconds) since a DevWorkspace was last started before it is considered stale and eligible for cleanup.
                          For example, a value of 2592000 (30 days) would mean that any DevWorkspace that has not been started in the last 30 days will be deleted.
                          Defaults to 2592000 seconds (30 days) if not specified.
                        format: int32
                        minimum: 0
                        type: integer
                      schedule:
                        default: 0 0 1 * *
                        description: Schedule specifies the cron schedule for the
                          cleanup cron job.
                        type: string
                    type: object
                  cleanupOnStop:
                    description: |-
                      CleanupOnStop governs how the Operator handles stopped DevWorkspaces. If set to
                      true, additional resources associated with a DevWorkspace (e.g. services, deployments,
                      configmaps, etc.) will be removed from the cluster when a DevWorkspace has
                      .spec.started = false. If set to false, resources will be scaled down (e.g. deployments
                      but the objects will be left on the cluster). The default value is false.
                    type: boolean
                  containerSecurityContext:
                    description: |-
                      ContainerSecurityContext overrides the default ContainerSecurityContext used for all
                      workspace-related containers created by the DevWorkspace Operator. If set, defined
                      values are merged into the default configuration
                    properties:
                      allowPrivilegeEscalation:
                        description: |-
                          AllowPrivilegeEscalation controls whether a process can gain more
                          privileges than its parent process. This bool directly controls if
                          the no_new_privs flag will be set on the container process.
                          AllowPrivilegeEscalation is true always when the container is:
                          1) run as Privileged
                          2) has CAP_SYS_ADMIN
                          Note that this field cannot be set when spec.os.name is windows.
                        type: boolean
                      capabilities:
                        description: |-
                          The capabilities to add/drop when running containers.
                          Defaults to the default set of capabilities granted by the container runtime.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          add:
                            description: Added capabilities
                            items:
                              description: Capability represent POSIX capabilities
                                type
                              type: string
                            type: array
                          drop:
                            description: Removed capabilities
                            items:
                              description: Capability represent POSIX capabilities
                                type
                              type: string
                            type: array
                        type: object
                      privileged:
                        description: |-
                          Run container in privileged mode.
                          Processes in privileged containers are essentially equivalent to root on the host.
                          Defaults to false.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: boolean
                      procMount:
                        description: |-
                          procMount denotes the type of proc mount to use for the containers.
                          The default is DefaultProcMount which uses the container runtime defaults for
                          readonly paths and masked paths.
                          This requires the ProcMountType feature flag to be enabled.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: string
                      readOnlyRootFilesystem:
                        description: |-
                          Whether this container has a read-only root filesystem.
                          Default is false.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: boolean
                      runAsGroup:
                        description: |-
                          The GID to run the entrypoint of the container process.
                          Uses runtime default if unset.
                          May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      runAsNonRoot:
                        description: |-
                          Indicates that the container must run as a non-root user.
                          If true, the Kubelet will validate the image at runtime to ensure that it
                          does not run as UID 0 (root) and fail to start the container if it does.
                          If unset or false, no such validation will be performed.
                          May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                        type: boolean
                      runAsUser:
                        description: |-
                          The UID to run the entrypoint of the container process.
                          Defaults to user specified in image metadata if unspecified.
                          May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      seLinuxOptions:
                        description: |-
                          The SELinux context to be applied to the container.
                          If unspecified, the container runtime will allocate a random SELinux context for each
                          container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          level:
                            description: Level is SELinux level label that applies
                              to the container.
                            type: string
                          role:
                            description: Role is a SELinux role label that applies
                              to the container.
                            type: string
                          type:
                            description: Type is a SELinux type label that applies
                              to the container.
                            type: string
                          user:
                            description: User is a SELinux user label that applies
                              to the container.
                            type: string
                        type: object
                      seccompProfile:
                        description: |-
                          The seccomp options to use by this container. If seccomp options are
                          provided at both the pod & container level, the container options
                          override the pod options.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          localhostProfile:
                            description: |-
                              localhostProfile indicates a profile defined in a file on the node should be used.
                              The profile must be preconfigured on the node to work.
                              Must be a descending path, relative to the kubelet's configured seccomp profile location.
                              Must only be set if type is "Localhost".
                            type: string
                          type:
                            description: |-
                              type indicates which kind of seccomp profile will be applied.
                              Valid options are:


                              Localhost - a profile defined in a file on the node should be used.
                              RuntimeDefault - the container runtime default profile should be used.
                              Unconfined - no profile should be applied.
                            type: string
                        required:
                        - type
                        type: object
                      windowsOptions:
                        description: |-
                          The Windows specific settings applied to all containers.
                          If unspecified, the options from the PodSecurityContext will be used.
                          If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is linux.
                        properties:
                          gmsaCredentialSpec:
                            description: |-
                              GMSACredentialSpec is where the GMSA admission webhook
                              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                              GMSA credential spec named by the GMSACredentialSpecName field.
                            type: string
                          gmsaCredentialSpecName:
                            description: GMSACredentialSpecName is the name of the
                              GMSA credential spec to use.
                            type: string
                          hostProcess:
                            description: |-
                              HostProcess determines if a container should be run as a 'Host Process' container.
                              This field is alpha-level and will only be honored by components that enable the
                              WindowsHostProcessContainers feature flag. Setting this field without the feature
                              flag will result in errors when validating the Pod. All of a Pod's containers must
                              have the same effective HostProcess value (it is not allowed to have a mix of HostProcess
                              containers and non-HostProcess containers).  In addition, if HostProcess is true
                              then HostNetwork must also be set to true.
                            type: boolean
                          runAsUserName:
                            description: |-
                              The UserName in Windows to run the entrypoint of the container process.
                              Defaults to the user specified in image metadata if unspecified.
                              May also be set in PodSecurityContext. If set in both SecurityContext and
                              PodSecurityContext, the value specified in SecurityContext takes precedence.
                            type: string
                        type: object
                    type: object
                  defaultContainerResources:
                    description: |-
                      DefaultContainerResources defines the resource requirements (memory/cpu limit/request) used for
                      container components that do not define limits or requests. In order to not set a field by default,
                      the value "0" should be used. By default, the memory limit is 128Mi and the memory request is 64Mi.
                      No CPU limit or request is added by default.
                    properties:
                      claims:
                        description: |-
                          Claims lists the names of resources, defined in spec.resourceClaims,
                          that are used by this container.


                          This is an alpha field and requires enabling the
                          DynamicResourceAllocation feature gate.


                          This field is immutable.
                        items:
                          description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                          properties:
                            name:
                              description: |-
                                Name must match the name of one entry in pod.spec.resourceClaims of
                                the Pod where this field is used. It makes that resource available
                                inside a container.
                              type: string
                          required:
                          - name
                          type: object
                        type: array
                        x-kubernetes-list-map-keys:
                        - name
                        x-kubernetes-list-type: map
                      limits:
                        additionalProperties:
                          anyOf:
                          - type: integer
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
                        description: |-
                          Limits describes the maximum amount of compute resources allowed.
                          More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        type: object
                      requests:
                        additionalProperties:
                          anyOf:
                          - type: integer
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
                        description: |-
                          Requests describes the minimum amount of compute resources required.
                          If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                          otherwise to an implementation-defined value.
                          More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        type: object
                    type: object
                  defaultStorageSize:
                    description: |-
                      DefaultStorageSize defines an optional struct with fields to specify the sizes of Persistent Volume Claims for storage
                      classes used by DevWorkspaces.
                    properties:
                      common:
                        anyOf:
                        - type: integer
                        - type: string
                        description: |-
                          The default Persistent Volume Claim size for the "common" storage class.
                          Note that the "async" storage class also uses the PVC size set for the "common" storage class.
                          If not specified, the "common" and "async" Persistent Volume Claim sizes are set to 10Gi
                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                        x-kubernetes-int-or-string: true
                      perWorkspace:
                        anyOf:
                        - type: integer
                        - type: string
                        description: |-
                          The default Persistent Volume Claim size for the "per-workspace" storage class.
                          If not specified, the "per-workspace" Persistent Volume Claim size is set to 5Gi
                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                        x-kubernetes-int-or-string: true
                    type: object
                  defaultTemplate:
                    description: |-
                      DefaultTemplate defines an optional DevWorkspace Spec Template which gets applied to the workspace
                      if the workspace's Template Spec Components are not defined. The DefaultTemplate will overwrite the existing
                      Template Spec, with the exception of Projects (if any are defined).
                    properties:
                      attributes:
                        description: Map of implementation-dependant free-form YAML
                          attributes.
                        type: object
                        x-kubernetes-preserve-unknown-fields: true
                      commands:
                        description: Predefined, ready-to-use, devworkspace-related
                          commands
                        items:
                          properties:
                            apply:
                              description: |-
                                Command that consists in applying a given component definition,
                                typically bound to a devworkspace event.


                                For example, when an `apply` command is bound to a `preStart` event,
                                and references a `container` component, it will start the container as a
                                K8S initContainer in the devworkspace POD, unless the component has its
                                `dedicatedPod` field set to `true`.


                                When no `apply` command exist for a given component,
                                it is assumed the component will be applied at devworkspace start
                                by default, unless `deployByDefault` for that component is set to false.
                              properties:
                                component:
                                  description: Describes component that will be applied
                                  type: string
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                              required:
                              - component
                              type: object
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            commandType:
                              description: Type of devworkspace command
                              enum:
                              - Exec
                              - Apply
                              - Composite
                              - Custom
                              type: string
                            composite:
                              description: |-
                                Composite command that allows executing several sub-commands
                                either sequentially or concurrently
                              properties:
                                commands:
                                  description: The commands that comprise this composite
                                    command
                                  items:
                                    type: string
                                  type: array
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                                parallel:
                                  description: Indicates if the sub-commands should
                                    be executed concurrently
                                  type: boolean
                              type: object
                            custom:
                              description: |-
                                Custom command whose logic is implementation-dependant
                                and should be provided by the user
                                possibly through some dedicated plugin
                              properties:
                                commandClass:
                                  description: |-
                                    Class of command that the associated implementation component
                                    should use to process this command with the appropriate logic
                                  type: string
                                embeddedResource:
                                  description: |-
                                    Additional free-form configuration for this custom command
                                    that the implementation component will know how to use
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                              required:
                              - commandClass
                              - embeddedResource
                              type: object
                            exec:
                              description: CLI Command executed in an existing component
                                container
                              properties:
                                commandLine:
                                  description: |-
                                    The actual command-line string


                                    Special variables that can be used:


                                     - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.


                                     - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                  type: string
                                component:
                                  description: Describes component to which given
                                    action relates
                                  type: string
                                env:
                                  description: |-
                                    Optional list of environment variables that have to be set
                                    before running the command
                                  items:
                                    properties:
                                      name:
                                        type: string
                                      value:
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                group:
                                  description: Defines the group this command is part
                                    of
                                  properties:
                                    isDefault:
                                      description: Identifies the default command
                                        for a given group kind
                                      type: boolean
                                    kind:
                                      description: Kind of group the command is part
                                        of
                                      enum:
                                      - build
                                      - run
                                      - test
                                      - debug
                                      - deploy
                                      type: string
                                  required:
                                  - kind
                                  type: object
                                hotReloadCapable:
                                  description: |-
                                    Specify whether the command is restarted or not when the source code changes.
                                    If set to `true` the command won't be restarted.
                                    A *hotReloadCapable* `run` or `debug` command is expected to handle file changes on its own and won't be restarted.
                                    A *hotReloadCapable* `build` command is expected to be executed only once and won't be executed again.
                                    This field is taken into account only for commands `build`, `run` and `debug` with `isDefault` set to `true`.


                                    Default value is `false`
                                  type: boolean
                                label:
                                  description: |-
                                    Optional label that provides a label for this command
                                    to be used in Editor UI menus for example
                                  type: string
                                workingDir:
                                  description: |-
                                    Working directory where the command should be executed


                                    Special variables that can be used:


                                     - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.


                                     - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                  type: string
                              required:
                              - commandLine
                              - component
                              type: object
                            id:
                              description: |-
                                Mandatory identifier that allows referencing
                                this command in composite commands, from
                                a parent, or in events.
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                          required:
                          - id
                          type: object
                        type: array
                      components:
                        description: |-
                          List of the devworkspace components, such as editor and plugins,
                          user-provided containers, or other types of components
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            componentType:
                              description: Type of component
                              enum:
                              - Container
                              - Kubernetes
                              - Openshift
                              - Volume
                              - Image
                              - Plugin
                              - Custom
                              type: string
                            container:
                              description: Allows adding and configuring devworkspace-related
                                containers
                              properties:
                                annotation:
                                  description: Annotations that should be added to
                                    specific resources for this container
                                  properties:
                                    deployment:
                                      additionalProperties:
                                        type: string
                                      description: Annotations to be added to deployment
                                      type: object
                                    service:
                                      additionalProperties:
                                        type: string
                                      description: Annotations to be added to service
                                      type: object
                                  type: object
                                args:
                                  description: |-
                                    The arguments to supply to the command running the dockerimage component. The arguments are supplied either to the default command provided in the image or to the overridden command.


                                    Defaults to an empty array, meaning use whatever is defined in the image.
                                  items:
                                    type: string
                                  type: array
                                command:
                                  description: |-
                                    The command to run in the dockerimage component instead of the default one provided in the image.


                                    Defaults to an empty array, meaning use whatever is defined in the image.
                                  items:
                                    type: string
                                  type: array
                                cpuLimit:
                                  type: string
                                cpuRequest:
                                  type: string
                                dedicatedPod:
                                  description: |-
                                    Specify if a container should run in its own separated pod,
                                    instead of running as part of the main development environment pod.


                                    Default value is `false`
                                  type: boolean
                                endpoints:
                                  items:
                                    properties:
                                      annotation:
                                        additionalProperties:
                                          type: string
                                        description: Annotations to be added to Kubernetes
                                          Ingress or Openshift Route
                                        type: object
                                      attributes:
                                        description: |-
                                          Map of implementation-dependant string-based free-form attributes.


                                          Examples of Che-specific attributes:


                                          - cookiesAuthEnabled: "true" / "false",


                                          - type: "terminal" / "ide" / "ide-dev",
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      exposure:
                                        default: public
                                        description: |-
                                          Describes how the endpoint should be exposed on the network.


                                          - `public` means that the endpoint will be exposed on the public network, typically through
                                          a K8S ingress or an OpenShift route.


                                          - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                          typically by K8S services, to be consumed by other elements running
                                          on the same cloud internal network.


                                          - `none` means that the endpoint will not be exposed and will only be accessible
                                          inside the main devworkspace POD, on a local address.


                                          Default value is `public`
                                        enum:
                                        - public
                                        - internal
                                        - none
                                        type: string
                                      name:
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: Path of the endpoint URL
                                        type: string
                                      protocol:
                                        default: http
                                        description: |-
                                          Describes the application and transport protocols of the traffic that will go through this endpoint.


                                          - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `https` when the `secure` field is set to `true`.


                                          - `https`: Endpoint will have `https` traffic, typically on a TCP connection.


                                          - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.


                                          - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.


                                          - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.


                                          - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.


                                          Default value is `http`
                                        enum:
                                        - http
                                        - https
                                        - ws
                                        - wss
                                        - tcp
                                        - udp
                                        type: string
                                      secure:
                                        description: |-
                                          Describes whether the endpoint should be secured and protected by some
                                          authentication process. This requires a protocol of `https` or `wss`.
                                        type: boolean
                                      targetPort:
                                        description: |-
                                          Port number to be used within the container component. The same port cannot
                                          be used by two different container components.
                                        type: integer
                                    required:
                                    - name
                                    - targetPort
                                    type: object
                                  type: array
                                env:
                                  description: |-
                                    Environment variables used in this container.


                                    The following variables are reserved and cannot be overridden via env:


                                     - `$PROJECTS_ROOT`


                                     - `$PROJECT_SOURCE`
                                  items:
                                    properties:
                                      name:
                                        type: string
                                      value:
                                        type: string
                                    required:
                                    - name
                                    - value
                                    type: object
                                  type: array
                                image:
                                  type: string
                                memoryLimit:
                                  type: string
                                memoryRequest:
                                  type: string
                                mountSources:
                                  description: |-
                                    Toggles whether or not the project source code should
                                    be mounted in the component.


                                    Defaults to true for all component types except plugins and components that set `dedicatedPod` to true.
                                  type: boolean
                                sourceMapping:
                                  default: /projects
                                  description: |-
                                    Optional specification of the path in the container where
                                    project sources should be transferred/mounted when `mountSources` is `true`.
                                    When omitted, the default value of /projects is used.
                                  type: string
                                volumeMounts:
                                  description: List of volumes mounts that should
                                    be mounted is this container.
                                  items:
                                    description: Volume that should be mounted to
                                      a component container
                                    properties:
                                      name:
                                        description: |-
                                          The volume mount name is the name of an existing `Volume` component.
                                          If several containers mount the same volume name
                                          then they will reuse the same volume and will be able to access to the same files.
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: |-
                                          The path in the component container where the volume should be mounted.
                                          If not path is mentioned, default path is the is `/<name>`.
                                        type: string
                                    required:
                                    - name
                                    type: object
                                  type: array
                              required:
                              - image
                              type: object
                            custom:
                              description: |-
                                Custom component whose logic is implementation-dependant
                                and should be provided by the user
                                possibly through some dedicated controller
                              properties:
                                componentClass:
                                  description: |-
                                    Class of component that the associated implementation controller
                                    should use to process this command with the appropriate logic
                                  type: string
                                embeddedResource:
                                  description: |-
                                    Additional free-form configuration for this custom component
                                    that the implementation controller will know how to use
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                              required:
                              - componentClass
                              - embeddedResource
                              type: object
                            image:
                              description: Allows specifying the definition of an
                                image for outer loop builds
                              properties:
                                autoBuild:
                                  description: |-
                                    Defines if the image should be built during startup.


                                    Default value is `false`
                                  type: boolean
                                dockerfile:
                                  description: Allows specifying dockerfile type build
                                  properties:
                                    args:
                                      description: The arguments to supply to the
                                        dockerfile build.
                                      items:
                                        type: string
                                      type: array
                                    buildContext:
                                      description: Path of source directory to establish
                                        build context. Defaults to ${PROJECT_SOURCE}
                                        in the container
                                      type: string
                                    devfileRegistry:
                                      description: Dockerfile's Devfile Registry source
                                      properties:
                                        id:
                                          description: |-
                                            Id in a devfile registry that contains a Dockerfile. The src in the OCI registry
                                            required for the Dockerfile build will be downloaded for building the image.
                                          type: string
                                        registryUrl:
                                          description: |-
                                            Devfile Registry URL to pull the Dockerfile from when using the Devfile Registry as Dockerfile src.
                                            To ensure the Dockerfile gets resolved consistently in different environments,
                                            it is recommended to always specify the `devfileRegistryUrl` when `Id` is used.
                                          type: string
                                      required:
                                      - id
                                      type: object
                                    git:
                                      description: Dockerfile's Git source
                                      properties:
                                        checkoutFrom:
                                          description: Defines from what the project
                                            should be checked out. Required if there
                                            are more than one remote configured
                                          properties:
                                            remote:
                                              description: The remote name should
                                                be used as init. Required if there
                                                are more than one remote configured
                                              type: string
                                            revision:
                                              description: |-
                                                The revision to checkout from. Should be branch name, tag or commit id.
                                                Default branch is used if missing or specified revision is not found.
                                              type: string
                                          type: object
                                        fileLocation:
                                          description: |-
                                            Location of the Dockerfile in the Git repository when using git as Dockerfile src.
                                            Defaults to Dockerfile.
                                          type: string
                                        remotes:
                                          additionalProperties:
                                            type: string
                                          description: |-
                                            The remotes map which should be initialized in the git project.
                                            Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                          type: object
                                      required:
                                      - remotes
                                      type: object
                                    rootRequired:
                                      description: |-
                                        Specify if a privileged builder pod is required.


                                        Default value is `false`
                                      type: boolean
                                    srcType:
                                      description: Type of Dockerfile src
                                      enum:
                                      - Uri
                                      - DevfileRegistry
                                      - Git
                                      type: string
                                    uri:
                                      description: |-
                                        URI Reference of a Dockerfile.
                                        It can be a full URL or a relative URI from the current devfile as the base URI.
                                      type: string
                                  type: object
                                imageName:
                                  description: Name of the image for the resulting
                                    outerloop build
                                  type: string
                                imageType:
                                  description: Type of image
                                  enum:
                                  - Dockerfile
                                  type: string
                              required:
                              - imageName
                              type: object
                            kubernetes:
                              description: |-
                                Allows importing into the devworkspace the Kubernetes resources
                                defined in a given manifest. For example this allows reusing the Kubernetes
                                definitions used to deploy some runtime components in production.
                              properties:
                                deployByDefault:
                                  description: |-
                                    Defines if the component should be deployed during startup.


                                    Default value is `false`
                                  type: boolean
                                endpoints:
                                  items:
                                    properties:
                                      annotation:
                                        additionalProperties:
                                          type: string
                                        description: Annotations to be added to Kubernetes
                                          Ingress or Openshift Route
                                        type: object
                                      attributes:
                                        description: |-
                                          Map of implementation-dependant string-based free-form attributes.


                                          Examples of Che-specific attributes:


                                          - cookiesAuthEnabled: "true" / "false",


                                          - type: "terminal" / "ide" / "ide-dev",
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      exposure:
                                        default: public
                                        description: |-
                                          Describes how the endpoint should be exposed on the network.


                                          - `public` means that the endpoint will be exposed on the public network, typically through
                                          a K8S ingress or an OpenShift route.


                                          - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                          typically by K8S services, to be consumed by other elements running
                                          on the same cloud internal network.


                                          - `none` means that the endpoint will not be exposed and will only be accessible
                                          inside the main devworkspace POD, on a local address.


                                          Default value is `public`
                                        enum:
                                        - public
                                        - internal
                                        - none
                                        type: string
                                      name:
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: Path of the endpoint URL
                                        type: string
                                      protocol:
                                        default: http
                                        description: |-
                                          Describes the application and transport protocols of the traffic that will go through this endpoint.


                                          - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `https` when the `secure` field is set to `true`.


                                          - `https`: Endpoint will have `https` traffic, typically on a TCP connection.


                                          - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.


                                          - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.


                                          - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.


                                          - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.


                                          Default value is `http`
                                        enum:
                                        - http
                                        - https
                                        - ws
                                        - wss
                                        - tcp
                                        - udp
                                        type: string
                                      secure:
                                        description: |-
                                          Describes whether the endpoint should be secured and protected by some
                                          authentication process. This requires a protocol of `https` or `wss`.
                                        type: boolean
                                      targetPort:
                                        description: |-
                                          Port number to be used within the container component. The same port cannot
                                          be used by two different container components.
                                        type: integer
                                    required:
                                    - name
                                    - targetPort
                                    type: object
                                  type: array
                                inlined:
                                  description: Inlined manifest
                                  type: string
                                locationType:
                                  description: Type of Kubernetes-like location
                                  enum:
                                  - Uri
                                  - Inlined
                                  type: string
                                uri:
                                  description: Location in a file fetched from a uri.
                                  type: string
                              type: object
                            name:
                              description: |-
                                Mandatory name that allows referencing the component
                                from other elements (such as commands) or from an external
                                devfile that may reference this component through a parent or a plugin.
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            openshift:
                              description: |-
                                Allows importing into the devworkspace the OpenShift resources
                                defined in a given manifest. For example this allows reusing the OpenShift
                                definitions used to deploy some runtime components in production.
                              properties:
                                deployByDefault:
                                  description: |-
                                    Defines if the component should be deployed during startup.


                                    Default value is `false`
                                  type: boolean
                                endpoints:
                                  items:
                                    properties:
                                      annotation:
                                        additionalProperties:
                                          type: string
                                        description: Annotations to be added to Kubernetes
                                          Ingress or Openshift Route
                                        type: object
                                      attributes:
                                        description: |-
                                          Map of implementation-dependant string-based free-form attributes.


                                          Examples of Che-specific attributes:


                                          - cookiesAuthEnabled: "true" / "false",


                                          - type: "terminal" / "ide" / "ide-dev",
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      exposure:
                                        default: public
                                        description: |-
                                          Describes how the endpoint should be exposed on the network.


                                          - `public` means that the endpoint will be exposed on the public network, typically through
                                          a K8S ingress or an OpenShift route.


                                          - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                          typically by K8S services, to be consumed by other elements running
                                          on the same cloud internal network.


                                          - `none` means that the endpoint will not be exposed and will only be accessible
                                          inside the main devworkspace POD, on a local address.


                                          Default value is `public`
                                        enum:
                                        - public
                                        - internal
                                        - none
                                        type: string
                                      name:
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      path:
                                        description: Path of the endpoint URL
                                        type: string
                                      protocol:
                                        default: http
                                        description: |-
                                          Describes the application and transport protocols of the traffic that will go through this endpoint.


                                          - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `https` when the `secure` field is set to `true`.


                                          - `https`: Endpoint will have `https` traffic, typically on a TCP connection.


                                          - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                          It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.


                                          - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.


                                          - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.


                                          - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.


                                          Default value is `http`
                                        enum:
                                        - http
                                        - https
                                        - ws
                                        - wss
                                        - tcp
                                        - udp
                                        type: string
                                      secure:
                                        description: |-
                                          Describes whether the endpoint should be secured and protected by some
                                          authentication process. This requires a protocol of `https` or `wss`.
                                        type: boolean
                                      targetPort:
                                        description: |-
                                          Port number to be used within the container component. The same port cannot
                                          be used by two different container components.
                                        type: integer
                                    required:
                                    - name
                                    - targetPort
                                    type: object
                                  type: array
                                inlined:
                                  description: Inlined manifest
                                  type: string
                                locationType:
                                  description: Type of Kubernetes-like location
                                  enum:
                                  - Uri
                                  - Inlined
                                  type: string
                                uri:
                                  description: Location in a file fetched from a uri.
                                  type: string
                              type: object
                            plugin:
                              description: |-
                                Allows importing a plugin.


                                Plugins are mainly imported devfiles that contribute components, commands
                                and events as a consistent single unit. They are defined in either YAML files
                                following the devfile syntax,
                                or as `DevWorkspaceTemplate` Kubernetes Custom Resources
                              properties:
                                commands:
                                  description: |-
                                    Overrides of commands encapsulated in a parent devfile or a plugin.
                                    Overriding is done according to K8S strategic merge patch standard rules.
                                  items:
                                    properties:
                                      apply:
                                        description: |-
                                          Command that consists in applying a given component definition,
                                          typically bound to a devworkspace event.


                                          For example, when an `apply` command is bound to a `preStart` event,
                                          and references a `container` component, it will start the container as a
                                          K8S initContainer in the devworkspace POD, unless the component has its
                                          `dedicatedPod` field set to `true`.


                                          When no `apply` command exist for a given component,
                                          it is assumed the component will be applied at devworkspace start
                                          by default, unless `deployByDefault` for that component is set to false.
                                        properties:
                                          component:
                                            description: Describes component that
                                              will be applied
                                            type: string
                                          group:
                                            description: Defines the group this command
                                              is part of
                                            properties:
                                              isDefault:
                                                description: Identifies the default
                                                  command for a given group kind
                                                type: boolean
                                              kind:
                                                description: Kind of group the command
                                                  is part of
                                                enum:
                                                - build
                                                - run
                                                - test
                                                - debug
                                                - deploy
                                                type: string
                                            type: object
                                          label:
                                            description: |-
                                              Optional label that provides a label for this command
                                              to be used in Editor UI menus for example
                                            type: string
                                        type: object
                                      attributes:
                                        description: Map of implementation-dependant
                                          free-form YAML attributes.
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      commandType:
                                        description: Type of devworkspace command
                                        enum:
                                        - Exec
                                        - Apply
                                        - Composite
                                        type: string
                                      composite:
                                        description: |-
                                          Composite command that allows executing several sub-commands
                                          either sequentially or concurrently
                                        properties:
                                          commands:
                                            description: The commands that comprise
                                              this composite command
                                            items:
                                              type: string
                                            type: array
                                          group:
                                            description: Defines the group this command
                                              is part of
                                            properties:
                                              isDefault:
                                                description: Identifies the default
                                                  command for a given group kind
                                                type: boolean
                                              kind:
                                                description: Kind of group the command
                                                  is part of
                                                enum:
                                                - build
                                                - run
                                                - test
                                                - debug
                                                - deploy
                                                type: string
                                            type: object
                                          label:
                                            description: |-
                                              Optional label that provides a label for this command
                                              to be used in Editor UI menus for example
                                            type: string
                                          parallel:
                                            description: Indicates if the sub-commands
                                              should be executed concurrently
                                            type: boolean
                                        type: object
                                      exec:
                                        description: CLI Command executed in an existing
                                          component container
                                        properties:
                                          commandLine:
                                            description: |-
                                              The actual command-line string


                                              Special variables that can be used:


                                               - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.


                                               - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                            type: string
                                          component:
                                            description: Describes component to which
                                              given action relates
                                            type: string
                                          env:
                                            description: |-
                                              Optional list of environment variables that have to be set
                                              before running the command
                                            items:
                                              properties:
                                                name:
                                                  type: string
                                                value:
                                                  type: string
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          group:
                                            description: Defines the group this command
                                              is part of
                                            properties:
                                              isDefault:
                                                description: Identifies the default
                                                  command for a given group kind
                                                type: boolean
                                              kind:
                                                description: Kind of group the command
                                                  is part of
                                                enum:
                                                - build
                                                - run
                                                - test
                                                - debug
                                                - deploy
                                                type: string
                                            type: object
                                          hotReloadCapable:
                                            description: |-
                                              Specify whether the command is restarted or not when the source code changes.
                                              If set to `true` the command won't be restarted.
                                              A *hotReloadCapable* `run` or `debug` command is expected to handle file changes on its own and won't be restarted.
                                              A *hotReloadCapable* `build` command is expected to be executed only once and won't be executed again.
                                              This field is taken into account only for commands `build`, `run` and `debug` with `isDefault` set to `true`.


                                              Default value is `false`
                                            type: boolean
                                          label:
                                            description: |-
                                              Optional label that provides a label for this command
                                              to be used in Editor UI menus for example
                                            type: string
                                          workingDir:
                                            description: |-
                                              Working directory where the command should be executed


                                              Special variables that can be used:


                                               - `$PROJECTS_ROOT`: A path where projects sources are mounted as defined by container component's sourceMapping.


                                               - `$PROJECT_SOURCE`: A path to a project source ($PROJECTS_ROOT/<project-name>). If there are multiple projects, this will point to the directory of the first one.
                                            type: string
                                        type: object
                                      id:
                                        description: |-
                                          Mandatory identifier that allows referencing
                                          this command in composite commands, from
                                          a parent, or in events.
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                    required:
                                    - id
                                    type: object
                                  type: array
                                components:
                                  description: |-
                                    Overrides of components encapsulated in a parent devfile or a plugin.
                                    Overriding is done according to K8S strategic merge patch standard rules.
                                  items:
                                    properties:
                                      attributes:
                                        description: Map of implementation-dependant
                                          free-form YAML attributes.
                                        type: object
                                        x-kubernetes-preserve-unknown-fields: true
                                      componentType:
                                        description: Type of component
                                        enum:
                                        - Container
                                        - Kubernetes
                                        - Openshift
                                        - Volume
                                        - Image
                                        type: string
                                      container:
                                        description: Allows adding and configuring
                                          devworkspace-related containers
                                        properties:
                                          annotation:
                                            description: Annotations that should be
                                              added to specific resources for this
                                              container
                                            properties:
                                              deployment:
                                                additionalProperties:
                                                  type: string
                                                description: Annotations to be added
                                                  to deployment
                                                type: object
                                              service:
                                                additionalProperties:
                                                  type: string
                                                description: Annotations to be added
                                                  to service
                                                type: object
                                            type: object
                                          args:
                                            description: |-
                                              The arguments to supply to the command running the dockerimage component. The arguments are supplied either to the default command provided in the image or to the overridden command.


                                              Defaults to an empty array, meaning use whatever is defined in the image.
                                            items:
                                              type: string
                                            type: array
                                          command:
                                            description: |-
                                              The command to run in the dockerimage component instead of the default one provided in the image.


                                              Defaults to an empty array, meaning use whatever is defined in the image.
                                            items:
                                              type: string
                                            type: array
                                          cpuLimit:
                                            type: string
                                          cpuRequest:
                                            type: string
                                          dedicatedPod:
                                            description: |-
                                              Specify if a container should run in its own separated pod,
                                              instead of running as part of the main development environment pod.


                                              Default value is `false`
                                            type: boolean
                                          endpoints:
                                            items:
                                              properties:
                                                annotation:
                                                  additionalProperties:
                                                    type: string
                                                  description: Annotations to be added
                                                    to Kubernetes Ingress or Openshift
                                                    Route
                                                  type: object
                                                attributes:
                                                  description: |-
                                                    Map of implementation-dependant string-based free-form attributes.


                                                    Examples of Che-specific attributes:


                                                    - cookiesAuthEnabled: "true" / "false",


                                                    - type: "terminal" / "ide" / "ide-dev",
                                                  type: object
                                                  x-kubernetes-preserve-unknown-fields: true
                                                exposure:
                                                  description: |-
                                                    Describes how the endpoint should be exposed on the network.


                                                    - `public` means that the endpoint will be exposed on the public network, typically through
                                                    a K8S ingress or an OpenShift route.


                                                    - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                                    typically by K8S services, to be consumed by other elements running
                                                    on the same cloud internal network.


                                                    - `none` means that the endpoint will not be exposed and will only be accessible
                                                    inside the main devworkspace POD, on a local address.


                                                    Default value is `public`
                                                  enum:
                                                  - public
                                                  - internal
                                                  - none
                                                  type: string
                                                name:
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: Path of the endpoint
                                                    URL
                                                  type: string
                                                protocol:
                                                  description: |-
                                                    Describes the application and transport protocols of the traffic that will go through this endpoint.


                                                    - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `https` when the `secure` field is set to `true`.


                                                    - `https`: Endpoint will have `https` traffic, typically on a TCP connection.


                                                    - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.


                                                    - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.


                                                    - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.


                                                    - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.


                                                    Default value is `http`
                                                  enum:
                                                  - http
                                                  - https
                                                  - ws
                                                  - wss
                                                  - tcp
                                                  - udp
                                                  type: string
                                                secure:
                                                  description: |-
                                                    Describes whether the endpoint should be secured and protected by some
                                                    authentication process. This requires a protocol of `https` or `wss`.
                                                  type: boolean
                                                targetPort:
                                                  description: |-
                                                    Port number to be used within the container component. The same port cannot
                                                    be used by two different container components.
                                                  type: integer
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          env:
                                            description: |-
                                              Environment variables used in this container.


                                              The following variables are reserved and cannot be overridden via env:


                                               - `$PROJECTS_ROOT`


                                               - `$PROJECT_SOURCE`
                                            items:
                                              properties:
                                                name:
                                                  type: string
                                                value:
                                                  type: string
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          image:
                                            type: string
                                          memoryLimit:
                                            type: string
                                          memoryRequest:
                                            type: string
                                          mountSources:
                                            description: |-
                                              Toggles whether or not the project source code should
                                              be mounted in the component.


                                              Defaults to true for all component types except plugins and components that set `dedicatedPod` to true.
                                            type: boolean
                                          sourceMapping:
                                            description: |-
                                              Optional specification of the path in the container where
                                              project sources should be transferred/mounted when `mountSources` is `true`.
                                              When omitted, the default value of /projects is used.
                                            type: string
                                          volumeMounts:
                                            description: List of volumes mounts that
                                              should be mounted is this container.
                                            items:
                                              description: Volume that should be mounted
                                                to a component container
                                              properties:
                                                name:
                                                  description: |-
                                                    The volume mount name is the name of an existing `Volume` component.
                                                    If several containers mount the same volume name
                                                    then they will reuse the same volume and will be able to access to the same files.
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: |-
                                                    The path in the component container where the volume should be mounted.
                                                    If not path is mentioned, default path is the is `/<name>`.
                                                  type: string
                                              required:
                                              - name
                                              type: object
                                            type: array
                                        type: object
                                      image:
                                        description: Allows specifying the definition
                                          of an image for outer loop builds
                                        properties:
                                          autoBuild:
                                            description: |-
                                              Defines if the image should be built during startup.


                                              Default value is `false`
                                            type: boolean
                                          dockerfile:
                                            description: Allows specifying dockerfile
                                              type build
                                            properties:
                                              args:
                                                description: The arguments to supply
                                                  to the dockerfile build.
                                                items:
                                                  type: string
                                                type: array
                                              buildContext:
                                                description: Path of source directory
                                                  to establish build context. Defaults
                                                  to ${PROJECT_SOURCE} in the container
                                                type: string
                                              devfileRegistry:
                                                description: Dockerfile's Devfile
                                                  Registry source
                                                properties:
                                                  id:
                                                    description: |-
                                                      Id in a devfile registry that contains a Dockerfile. The src in the OCI registry
                                                      required for the Dockerfile build will be downloaded for building the image.
                                                    type: string
                                                  registryUrl:
                                                    description: |-
                                                      Devfile Registry URL to pull the Dockerfile from when using the Devfile Registry as Dockerfile src.
                                                      To ensure the Dockerfile gets resolved consistently in different environments,
                                                      it is recommended to always specify the `devfileRegistryUrl` when `Id` is used.
                                                    type: string
                                                type: object
                                              git:
                                                description: Dockerfile's Git source
                                                properties:
                                                  checkoutFrom:
                                                    description: Defines from what
                                                      the project should be checked
                                                      out. Required if there are more
                                                      than one remote configured
                                                    properties:
                                                      remote:
                                                        description: The remote name
                                                          should be used as init.
                                                          Required if there are more
                                                          than one remote configured
                                                        type: string
                                                      revision:
                                                        description: |-
                                                          The revision to checkout from. Should be branch name, tag or commit id.
                                                          Default branch is used if missing or specified revision is not found.
                                                        type: string
                                                    type: object
                                                  fileLocation:
                                                    description: |-
                                                      Location of the Dockerfile in the Git repository when using git as Dockerfile src.
                                                      Defaults to Dockerfile.
                                                    type: string
                                                  remotes:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      The remotes map which should be initialized in the git project.
                                                      Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                                    type: object
                                                type: object
                                              rootRequired:
                                                description: |-
                                                  Specify if a privileged builder pod is required.


                                                  Default value is `false`
                                                type: boolean
                                              srcType:
                                                description: Type of Dockerfile src
                                                enum:
                                                - Uri
                                                - DevfileRegistry
                                                - Git
                                                type: string
                                              uri:
                                                description: |-
                                                  URI Reference of a Dockerfile.
                                                  It can be a full URL or a relative URI from the current devfile as the base URI.
                                                type: string
                                            type: object
                                          imageName:
                                            description: Name of the image for the
                                              resulting outerloop build
                                            type: string
                                          imageType:
                                            description: Type of image
                                            enum:
                                            - Dockerfile
                                            - AutoBuild
                                            type: string
                                        type: object
                                      kubernetes:
                                        description: |-
                                          Allows importing into the devworkspace the Kubernetes resources
                                          defined in a given manifest. For example this allows reusing the Kubernetes
                                          definitions used to deploy some runtime components in production.
                                        properties:
                                          deployByDefault:
                                            description: |-
                                              Defines if the component should be deployed during startup.


                                              Default value is `false`
                                            type: boolean
                                          endpoints:
                                            items:
                                              properties:
                                                annotation:
                                                  additionalProperties:
                                                    type: string
                                                  description: Annotations to be added
                                                    to Kubernetes Ingress or Openshift
                                                    Route
                                                  type: object
                                                attributes:
                                                  description: |-
                                                    Map of implementation-dependant string-based free-form attributes.


                                                    Examples of Che-specific attributes:


                                                    - cookiesAuthEnabled: "true" / "false",


                                                    - type: "terminal" / "ide" / "ide-dev",
                                                  type: object
                                                  x-kubernetes-preserve-unknown-fields: true
                                                exposure:
                                                  description: |-
                                                    Describes how the endpoint should be exposed on the network.


                                                    - `public` means that the endpoint will be exposed on the public network, typically through
                                                    a K8S ingress or an OpenShift route.


                                                    - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                                    typically by K8S services, to be consumed by other elements running
                                                    on the same cloud internal network.


                                                    - `none` means that the endpoint will not be exposed and will only be accessible
                                                    inside the main devworkspace POD, on a local address.


                                                    Default value is `public`
                                                  enum:
                                                  - public
                                                  - internal
                                                  - none
                                                  type: string
                                                name:
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: Path of the endpoint
                                                    URL
                                                  type: string
                                                protocol:
                                                  description: |-
                                                    Describes the application and transport protocols of the traffic that will go through this endpoint.


                                                    - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `https` when the `secure` field is set to `true`.


                                                    - `https`: Endpoint will have `https` traffic, typically on a TCP connection.


                                                    - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.


                                                    - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.


                                                    - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.


                                                    - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.


                                                    Default value is `http`
                                                  enum:
                                                  - http
                                                  - https
                                                  - ws
                                                  - wss
                                                  - tcp
                                                  - udp
                                                  type: string
                                                secure:
                                                  description: |-
                                                    Describes whether the endpoint should be secured and protected by some
                                                    authentication process. This requires a protocol of `https` or `wss`.
                                                  type: boolean
                                                targetPort:
                                                  description: |-
                                                    Port number to be used within the container component. The same port cannot
                                                    be used by two different container components.
                                                  type: integer
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          inlined:
                                            description: Inlined manifest
                                            type: string
                                          locationType:
                                            description: Type of Kubernetes-like location
                                            enum:
                                            - Uri
                                            - Inlined
                                            type: string
                                          uri:
                                            description: Location in a file fetched
                                              from a uri.
                                            type: string
                                        type: object
                                      name:
                                        description: |-
                                          Mandatory name that allows referencing the component
                                          from other elements (such as commands) or from an external
                                          devfile that may reference this component through a parent or a plugin.
                                        maxLength: 63
                                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                        type: string
                                      openshift:
                                        description: |-
                                          Allows importing into the devworkspace the OpenShift resources
                                          defined in a given manifest. For example this allows reusing the OpenShift
                                          definitions used to deploy some runtime components in production.
                                        properties:
                                          deployByDefault:
                                            description: |-
                                              Defines if the component should be deployed during startup.


                                              Default value is `false`
                                            type: boolean
                                          endpoints:
                                            items:
                                              properties:
                                                annotation:
                                                  additionalProperties:
                                                    type: string
                                                  description: Annotations to be added
                                                    to Kubernetes Ingress or Openshift
                                                    Route
                                                  type: object
                                                attributes:
                                                  description: |-
                                                    Map of implementation-dependant string-based free-form attributes.


                                                    Examples of Che-specific attributes:


                                                    - cookiesAuthEnabled: "true" / "false",


                                                    - type: "terminal" / "ide" / "ide-dev",
                                                  type: object
                                                  x-kubernetes-preserve-unknown-fields: true
                                                exposure:
                                                  description: |-
                                                    Describes how the endpoint should be exposed on the network.


                                                    - `public` means that the endpoint will be exposed on the public network, typically through
                                                    a K8S ingress or an OpenShift route.


                                                    - `internal` means that the endpoint will be exposed internally outside of the main devworkspace POD,
                                                    typically by K8S services, to be consumed by other elements running
                                                    on the same cloud internal network.


                                                    - `none` means that the endpoint will not be exposed and will only be accessible
                                                    inside the main devworkspace POD, on a local address.


                                                    Default value is `public`
                                                  enum:
                                                  - public
                                                  - internal
                                                  - none
                                                  type: string
                                                name:
                                                  maxLength: 63
                                                  pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                                                  type: string
                                                path:
                                                  description: Path of the endpoint
                                                    URL
                                                  type: string
                                                protocol:
                                                  description: |-
                                                    Describes the application and transport protocols of the traffic that will go through this endpoint.


                                                    - `http`: Endpoint will have `http` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `https` when the `secure` field is set to `true`.


                                                    - `https`: Endpoint will have `https` traffic, typically on a TCP connection.


                                                    - `ws`: Endpoint will have `ws` traffic, typically on a TCP connection.
                                                    It will be automaticaly promoted to `wss` when the `secure` field is set to `true`.


                                                    - `wss`: Endpoint will have `wss` traffic, typically on a TCP connection.


                                                    - `tcp`: Endpoint will have traffic on a TCP connection, without specifying an application protocol.


                                                    - `udp`: Endpoint will have traffic on an UDP connection, without specifying an application protocol.


                                                    Default value is `http`
                                                  enum:
                                                  - http
                                                  - https
                                                  - ws
                                                  - wss
                                                  - tcp
                                                  - udp
                                                  type: string
                                                secure:
                                                  description: |-
                                                    Describes whether the endpoint should be secured and protected by some
                                                    authentication process. This requires a protocol of `https` or `wss`.
                                                  type: boolean
                                                targetPort:
                                                  description: |-
                                                    Port number to be used within the container component. The same port cannot
                                                    be used by two different container components.
                                                  type: integer
                                              required:
                                              - name
                                              type: object
                                            type: array
                                          inlined:
                                            description: Inlined manifest
                                            type: string
                                          locationType:
                                            description: Type of Kubernetes-like location
                                            enum:
                                            - Uri
                                            - Inlined
                                            type: string
                                          uri:
                                            description: Location in a file fetched
                                              from a uri.
                                            type: string
                                        type: object
                                      volume:
                                        description: |-
                                          Allows specifying the definition of a volume
                                          shared by several other components
                                        properties:
                                          ephemeral:
                                            description: |-
                                              Ephemeral volumes are not stored persistently across restarts. Defaults
                                              to false
                                            type: boolean
                                          size:
                                            description: Size of the volume
                                            type: string
                                        type: object
                                    required:
                                    - name
                                    type: object
                                  type: array
                                id:
                                  description: Id in a registry that contains a Devfile
                                    yaml file
                                  type: string
                                importReferenceType:
                                  description: type of location from where the referenced
                                    template structure should be retrieved
                                  enum:
                                  - Uri
                                  - Id
                                  - Kubernetes
                                  type: string
                                kubernetes:
                                  description: Reference to a Kubernetes CRD of type
                                    DevWorkspaceTemplate
                                  properties:
                                    name:
                                      type: string
                                    namespace:
                                      type: string
                                  required:
                                  - name
                                  type: object
                                registryUrl:
                                  description: |-
                                    Registry URL to pull the parent devfile from when using id in the parent reference.
                                    To ensure the parent devfile gets resolved consistently in different environments,
                                    it is recommended to always specify the `registryUrl` when `id` is used.
                                  type: string
                                uri:
                                  description: |-
                                    URI Reference of a parent devfile YAML file.
                                    It can be a full URL or a relative URI with the current devfile as the base URI.
                                  type: string
                                version:
                                  description: |-
                                    Specific stack/sample version to pull the parent devfile from, when using id in the parent reference.
                                    To specify `version`, `id` must be defined and used as the import reference source.
                                    `version` can be either a specific stack version, or `latest`.
                                    If no `version` specified, default version will be used.
                                  pattern: ^(latest)|(([1-9])\.([0-9]+)\.([0-9]+)(\-[0-9a-z-]+(\.[0-9a-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?)$
                                  type: string
                              type: object
                            volume:
                              description: |-
                                Allows specifying the definition of a volume
                                shared by several other components
                              properties:
                                ephemeral:
                                  description: |-
                                    Ephemeral volumes are not stored persistently across restarts. Defaults
                                    to false
                                  type: boolean
                                size:
                                  description: Size of the volume
                                  type: string
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      dependentProjects:
                        description: Additional projects related to the main project
                          in the devfile, contianing names and sources locations
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            clonePath:
                              description: Path relative to the root of the projects
                                to which this project should be cloned into. This
                                is a unix-style relative path (i.e. uses forward slashes).
                                The path is invalid if it is absolute or tries to
                                escape the project root through the usage of '..'.
                                If not specified, defaults to the project name.
                              type: string
                            custom:
                              description: Project's Custom source
                              properties:
                                embeddedResource:
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                projectSourceClass:
                                  type: string
                              required:
                              - embeddedResource
                              - projectSourceClass
                              type: object
                            git:
                              description: Project's Git source
                              properties:
                                checkoutFrom:
                                  description: Defines from what the project should
                                    be checked out. Required if there are more than
                                    one remote configured
                                  properties:
                                    remote:
                                      description: The remote name should be used
                                        as init. Required if there are more than one
                                        remote configured
                                      type: string
                                    revision:
                                      description: |-
                                        The revision to checkout from. Should be branch name, tag or commit id.
                                        Default branch is used if missing or specified revision is not found.
                                      type: string
                                  type: object
                                remotes:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    The remotes map which should be initialized in the git project.
                                    Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                  type: object
                              required:
                              - remotes
                              type: object
                            name:
                              description: Project name
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            sourceType:
                              description: Type of project source
                              enum:
                              - Git
                              - Zip
                              - Custom
                              type: string
                            zip:
                              description: Project's Zip source
                              properties:
                                location:
                                  description: Zip project's source location address.
                                    Should be file path of the archive, e.g. file://$FILE_PATH
                                  type: string
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      events:
                        description: |-
                          Bindings of commands to events.
                          Each command is referred-to by its name.
                        properties:
                          postStart:
                            description: |-
                              IDs of commands that should be executed after the devworkspace is completely started.
                              In the case of Che-Theia, these commands should be executed after all plugins and extensions have started, including project cloning.
                              This means that those commands are not triggered until the user opens the IDE in his browser.
                            items:
                              type: string
                            type: array
                          postStop:
                            description: IDs of commands that should be executed after
                              stopping the devworkspace.
                            items:
                              type: string
                            type: array
                          preStart:
                            description: |-
                              IDs of commands that should be executed before the devworkspace start.
                              Kubernetes-wise, these commands would typically be executed in init containers of the devworkspace POD.
                            items:
                              type: string
                            type: array
                          preStop:
                            description: IDs of commands that should be executed before
                              stopping the devworkspace.
                            items:
                              type: string
                            type: array
                        type: object
                      projects:
                        description: Projects worked on in the devworkspace, containing
                          names and sources locations
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            clonePath:
                              description: Path relative to the root of the projects
                                to which this project should be cloned into. This
                                is a unix-style relative path (i.e. uses forward slashes).
                                The path is invalid if it is absolute or tries to
                                escape the project root through the usage of '..'.
                                If not specified, defaults to the project name.
                              type: string
                            custom:
                              description: Project's Custom source
                              properties:
                                embeddedResource:
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                projectSourceClass:
                                  type: string
                              required:
                              - embeddedResource
                              - projectSourceClass
                              type: object
                            git:
                              description: Project's Git source
                              properties:
                                checkoutFrom:
                                  description: Defines from what the project should
                                    be checked out. Required if there are more than
                                    one remote configured
                                  properties:
                                    remote:
                                      description: The remote name should be used
                                        as init. Required if there are more than one
                                        remote configured
                                      type: string
                                    revision:
                                      description: |-
                                        The revision to checkout from. Should be branch name, tag or commit id.
                                        Default branch is used if missing or specified revision is not found.
                                      type: string
                                  type: object
                                remotes:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    The remotes map which should be initialized in the git project.
                                    Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                  type: object
                              required:
                              - remotes
                              type: object
                            name:
                              description: Project name
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            sourceType:
                              description: Type of project source
                              enum:
                              - Git
                              - Zip
                              - Custom
                              type: string
                            zip:
                              description: Project's Zip source
                              properties:
                                location:
                                  description: Zip project's source location address.
                                    Should be file path of the archive, e.g. file://$FILE_PATH
                                  type: string
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      starterProjects:
                        description: StarterProjects is a project that can be used
                          as a starting point when bootstrapping new projects
                        items:
                          properties:
                            attributes:
                              description: Map of implementation-dependant free-form
                                YAML attributes.
                              type: object
                              x-kubernetes-preserve-unknown-fields: true
                            custom:
                              description: Project's Custom source
                              properties:
                                embeddedResource:
                                  type: object
                                  x-kubernetes-embedded-resource: true
                                  x-kubernetes-preserve-unknown-fields: true
                                projectSourceClass:
                                  type: string
                              required:
                              - embeddedResource
                              - projectSourceClass
                              type: object
                            description:
                              description: Description of a starter project
                              type: string
                            git:
                              description: Project's Git source
                              properties:
                                checkoutFrom:
                                  description: Defines from what the project should
                                    be checked out. Required if there are more than
                                    one remote configured
                                  properties:
                                    remote:
                                      description: The remote name should be used
                                        as init. Required if there are more than one
                                        remote configured
                                      type: string
                                    revision:
                                      description: |-
                                        The revision to checkout from. Should be branch name, tag or commit id.
                                        Default branch is used if missing or specified revision is not found.
                                      type: string
                                  type: object
                                remotes:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    The remotes map which should be initialized in the git project.
                                    Projects must have at least one remote configured while StarterProjects & Image Component's Git source can only have at most one remote configured.
                                  type: object
                              required:
                              - remotes
                              type: object
                            name:
                              description: Project name
                              maxLength: 63
                              pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                              type: string
                            sourceType:
                              description: Type of project source
                              enum:
                              - Git
                              - Zip
                              - Custom
                              type: string
                            subDir:
                              description: Sub-directory from a starter project to
                                be used as root for starter project.
                              type: string
                            zip:
                              description: Project's Zip source
                              properties:
                                location:
                                  description: Zip project's source location address.
                                    Should be file path of the archive, e.g. file://$FILE_PATH
                                  type: string
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      variables:
                        additionalProperties:
                          type: string
                        description: |-
                          Map of key-value variables used for string replacement in the devfile. Values can be referenced via {{variable-key}}
                          to replace the corresponding value in string fields in the devfile. Replacement cannot be used for


                           - schemaVersion, metadata, parent source


                           - element identifiers, e.g. command id, component name, endpoint name, project name


                           - references to identifiers, e.g. in events, a command's component, container's volume mount name


                           - string enums, e.g. command group kind, endpoint exposure
                        type: object
                    type: object
                  deploymentStrategy:
                    description: |-
                      DeploymentStrategy defines the deployment strategy to use to replace existing DevWorkspace pods
                      with new ones. The available deployment stragies are "Recreate" and "RollingUpdate".
                      With the "Recreate" deployment strategy, the existing workspace pod is killed before the new one is created.
                      With the "RollingUpdate" deployment strategy, a new workspace pod is created and the existing workspace pod is deleted
                      only when the new workspace pod is in a ready state.
                      If not specified, the default "Recreate" deployment strategy is used.
                    enum:
                    - Recreate
                    - RollingUpdate
                    type: string
                  idleTimeout:
                    description: |-
                      IdleTimeout determines how long a workspace should sit idle before being
                      automatically scaled down. Proper functionality of this configuration property
                      requires support in the workspace being started. If not specified, the default
                      value of "15m" is used.
                    type: string
                  ignoredUnrecoverableEvents:
                    description: |-
                      IgnoredUnrecoverableEvents defines a list of Kubernetes event names that should
                      be ignored when deciding to fail a DevWorkspace startup. This option should be used
                      if a transient cluster issue is triggering false-positives (for example, if
                      the cluster occasionally encounters FailedScheduling events). Events listed
                      here will not trigger DevWorkspace failures.
                    items:
                      type: string
                    type: array
                  imagePullPolicy:
                    description: |-
                      ImagePullPolicy defines the imagePullPolicy used for containers in a DevWorkspace
                      For additional information, see Kubernetes documentation for imagePullPolicy. If
                      not specified, the default value of "Always" is used.
                    enum:
                    - IfNotPresent
                    - Always
                    - Never
                    type: string
                  persistUserHome:
                    description: |-
                      PersistUserHome defines configuration options for persisting the `/home/user/`
                      directory in workspaces.
                    properties:
                      disableInitContainer:
                        description: |-
                          Determines whether the init container that initializes the persistent home directory should be disabled.
                          When the `/home/user` directory is persisted, the init container is used to initialize the directory before
                          the workspace starts. If set to true, the init container will not be created.
                          This field is not used if the `workspace.persistUserHome.enabled` field is set to false.
                          Enabled by default.
                        type: boolean
                      enabled:
                        description: |-
                          Determines whether the `/home/user/` directory in workspaces should persist between
                          workspace shutdown and startup.
                          Must be used with the 'per-user'/'common' or 'per-workspace' storage class in order to take effect.
                          Disabled by default.
                        type: boolean
                    type: object
                  podAnnotations:
                    additionalProperties:
                      type: string
                    description: PodAnnotations defines the metadata.annotations for
                      DevWorkspace pods created by the DevWorkspace Operator.
                    type: object
                  podSecurityContext:
                    description: |-
                      PodSecurityContext overrides the default PodSecurityContext used for all workspace-related
                      pods created by the DevWorkspace Operator. If set, defined values are merged into the default
                      configuration
                    properties:
                      fsGroup:
                        description: |-
                          A special supplemental group that applies to all containers in a pod.
                          Some volume types allow the Kubelet to change the ownership of that volume
                          to be owned by the pod:


                          1. The owning GID will be the FSGroup
                          2. The setgid bit is set (new files created in the volume will be owned by FSGroup)
                          3. The permission bits are OR'd with rw-rw----


                          If unset, the Kubelet will not modify the ownership and permissions of any volume.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      fsGroupChangePolicy:
                        description: |-
                          fsGroupChangePolicy defines behavior of changing ownership and permission of the volume
                          before being exposed inside Pod. This field will only apply to
                          volume types which support fsGroup based ownership(and permissions).
                          It will have no effect on ephemeral volume types such as: secret, configmaps
                          and emptydir.
                          Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
                          Note that this field cannot be set when spec.os.name is windows.
                        type: string
                      runAsGroup:
                        description: |-
                          The GID to run the entrypoint of the container process.
                          Uses runtime default if unset.
                          May also be set in SecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence
                          for that container.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      runAsNonRoot:
                        description: |-
                          Indicates that the container must run as a non-root user.
                          If true, the Kubelet will validate the image at runtime to ensure that it
                          does not run as UID 0 (root) and fail to start the container if it does.
                          If unset or false, no such validation will be performed.
                          May also be set in SecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence.
                        type: boolean
                      runAsUser:
                        description: |-
                          The UID to run the entrypoint of the container process.
                          Defaults to user specified in image metadata if unspecified.
                          May also be set in SecurityContext.  If set in both SecurityContext and
                          PodSecurityContext, the value specified in SecurityContext takes precedence
                          for that container.
                          Note that this field cannot be set when spec.os.name is windows.
                        format: int64
                        type: integer
                      seLinuxOptions:
                        description: |-
                          The SELinux context to be applied to all containers.
                          If unspecified, the container runtime will allocate a random SELinux context for each
                          container.  May also be set in SecurityContext.  If set in
                          both SecurityContext and PodSecurityContext, the value specified in SecurityContext
                          takes precedence for that container.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          level:
                            description: Level is SELinux level label that applies
                              to the container.
                            type: string
                          role:
                            description: Role is a SELinux role label that applies
                              to the container.
                            type: string
                          type:
                            description: Type is a SELinux type label that applies
                              to the container.
                            type: string
                          user:
                            description: User is a SELinux user label that applies
                              to the container.
                            type: string
                        type: object
                      seccompProfile:
                        description: |-
                          The seccomp options to use by the containers in this pod.
                          Note that this field cannot be set when spec.os.name is windows.
                        properties:
                          localhostProfile:
                            description: |-
                              localhostProfile indicates a profile defined in a file on the node should be used.
                              The profile must be preconfigured on the node to work.
                              Must be a descending path, relative to the kubelet's configured seccomp profile location.
                              Must only be set if type is "Localhost".
                            type: string
                          type:
                            description: |-
                              type indicates which kind of seccomp profile will be applied.
                              Valid options are:


                              Localhost - a profile defined in a file on the node should be used.
                              RuntimeDefault - the container runtime default profile should be used.
                              Unconfined - no profile should be applied.
                            type: string
                        required:
                        - type
                        type: object
                      supplementalGroups:
                        description: |-
                          A list of groups applied to the first process run in each container, in addition
                          to the container's primary GID, the fsGroup (if specified), and group memberships
                          defined in the container image for the uid of the container process. If unspecified,
                          no additional groups are added to any container. Note that group memberships
                          defined in the container image for the uid of the container process are still effective,
                          even if they are not included in this list.
                          Note that this field cannot be set when spec.os.name is windows.
                        items:
                          format: int64
                          type: integer
                        type: array
                      sysctls:
                        description: |-
                          Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported
                          sysctls (by the container runtime) might fail to launch.
                          Note that this field cannot be set when spec.os.name is windows.
                        items:
                          description: Sysctl defines a kernel parameter to be set
                          properties:
                            name:
                              description: Name of a property to set
                              type: string
                            value:
                              description: Value of a property to set
                              type: string
                          required:
                          - name
                          - value
                          type: object
                        type: array
                      windowsOptions:
                        description: |-
                          The Windows specific settings applied to all containers.
                          If unspecified, the options within a container's SecurityContext will be used.
                          If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                          Note that this field cannot be set when spec.os.name is linux.
                        properties:
                          gmsaCredentialSpec:
                            description: |-
                              GMSACredentialSpec is where the GMSA admission webhook
                              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                              GMSA credential spec named by the GMSACredentialSpecName field.
                            type: string
                          gmsaCredentialSpecName:
                            description: GMSACredentialSpecName is the name of the
                              GMSA credential spec to use.
                            type: string
                          hostProcess:
                            description: |-
                              HostProcess determines if a container should be run as a 'Host Process' container.
                              This field is alpha-level and will only be honored by components that enable the
                              WindowsHostProcessContainers feature flag. Setting this field without the feature
                              flag will result in errors when validating the Pod. All of a Pod's containers must
                              have the same effective HostProcess value (it is not allowed to have a mix of HostProcess
                              containers and non-HostProcess containers).  In addition, if HostProcess is true
                              then HostNetwork must also be set to true.
                            type: boolean
                          runAsUserName:
                            description: |-
                              The UserName in Windows to run the entrypoint of the container process.
                              Defaults to the user specified in image metadata if unspecified.
                              May also be set in PodSecurityContext. If set in both SecurityContext and
                              PodSecurityContext, the value specified in SecurityContext takes precedence.
                            type: string
                        type: object
                    type: object
                  progressTimeout:
                    description: |-
                      ProgressTimeout determines the maximum duration a DevWorkspace can be in
                      a "Starting" or "Failing" phase without progressing before it is automatically failed.
                      Duration should be specified in a format parseable by Go's time package, e.g.
                      "15m", "20s", "1h30m", etc. If not specified, the default value of "5m" is used.
                    type: string
                  projectClone:
                    description: |-
                      ProjectCloneConfig defines configuration related to the project clone init container
                      that is used to clone git projects into the DevWorkspace.
                    properties:
                      env:
                        description: Env allows defining additional environment variables
                          for the project clone container.
                        items:
                          description: EnvVar represents an environment variable present
                            in a Container.
                          properties:
                            name:
                              description: Name of the environment variable. Must
                                be a C_IDENTIFIER.
                              type: string
                            value:
                              description: |-
                                Variable references $(VAR_NAME) are expanded
                                using the previously defined environment variables in the container and
                                any service environment variables. If a variable cannot be resolved,
                                the reference in the input string will be unchanged. Double $$ are reduced
                                to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                Escaped references will never be expanded, regardless of whether the variable
                                exists or not.
                                Defaults to "".
                              type: string
                            valueFrom:
                              description: Source for the environment variable's value.
                                Cannot be used if value is not empty.
                              properties:
                                configMapKeyRef:
                                  description: Selects a key of a ConfigMap.
                                  properties:
                                    key:
                                      description: The key to select.
                                      type: string
                                    name:
                                      description: |-
                                        Name of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                        TODO: Add other useful fields. apiVersion, kind, uid?
                                      type: string
                                    optional:
                                      description: Specify whether the ConfigMap or
                                        its key must be defined
                                      type: boolean
                                  required:
                                  - key
                                  type: object
                                  x-kubernetes-map-type: atomic
                                fieldRef:
                                  description: |-
                                    Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                    spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                                  properties:
                                    apiVersion:
                                      description: Version of the schema the FieldPath
                                        is written in terms of, defaults to "v1".
                                      type: string
                                    fieldPath:
                                      description: Path of the field to select in
                                        the specified API version.
                                      type: string
                                  required:
                                  - fieldPath
                                  type: object
                                  x-kubernetes-map-type: atomic
                                resourceFieldRef:
                                  description: |-
                                    Selects a resource of the container: only resources limits and requests
                                    (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
                                  properties:
                                    containerName:
                                      description: 'Container name: required for volumes,
                                        optional for env vars'
                                      type: string
                                    divisor:
                                      anyOf:
                                      - type: integer
                                      - type: string
                                      description: Specifies the output format of
                                        the exposed resources, defaults to "1"
                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                      x-kubernetes-int-or-string: true
                                    resource:
                                      description: 'Required: resource to select'
                                      type: string
                                  required:
                                  - resource
                                  type: object
                                  x-kubernetes-map-type: atomic
                                secretKeyRef:
                                  description: Selects a key of a secret in the pod's
                                    namespace
                                  properties:
                                    key:
                                      description: The key of the secret to select
                                        from.  Must be a valid secret key.
                                      type: string
                                    name:
                                      description: |-
                                        Name of the referent.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                                        TODO: Add other useful fields. apiVersion, kind, uid?
                                      type: string
                                    optional:
                                      description: Specify whether the Secret or its
                                        key must be defined
                                      type: boolean
                                  required:
                                  - key
                                  type: object
                                  x-kubernetes-map-type: atomic
                              type: object
                          required:
                          - name
                          type: object
                        type: array
                      image:
                        description: Image is the container image to use for cloning
                          projects
                        type: string
                      imagePullPolicy:
                        description: |-
                          ImagePullPolicy configures the imagePullPolicy for the project clone container.
                          If undefined, the general setting .config.workspace.imagePullPolicy is used instead.
                        type: string
                      resources:
                        description: |-
                          Resources defines the resource (cpu, memory) limits and requests for the project
                          clone container. To explicitly not specify a limit or request, define the resource
                          quantity as zero ('0')
                        properties:
                          claims:
                            description: |-
                              Claims lists the names of resources, defined in spec.resourceClaims,
                              that are used by this container.


                              This is an alpha field and requires enabling the
                              DynamicResourceAllocation feature gate.


                              This field is immutable.
                            items:
                              description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                              properties:
                                name:
                                  description: |-
                                    Name must match the name of one entry in pod.spec.resourceClaims of
                                    the Pod where this field is used. It makes that resource available
                                    inside a container.
                                  type: string
                              required:
                              - name
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                            - name
                            x-kubernetes-list-type: map
                          limits:
                            additionalProperties:
                              anyOf:
                              - type: integer
                              - type: string
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            description: |-
                              Limits describes the maximum amount of compute resources allowed.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                            type: object
                          requests:
                            additionalProperties:
                              anyOf:
                              - type: integer
                              - type: string
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
                            description: |-
                              Requests describes the minimum amount of compute resources required.
                              If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                              otherwise to an implementation-defined value.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                            type: object
                        type: object
                    type: object
                  pvcName:
                    description: |-
                      PVCName defines the name used for the persistent volume claim created
                      to support workspace storage when the 'common' storage class is used.
                      If not specified, the default value of `claim-devworkspace` is used.
                      Note that changing this configuration value after workspaces have been
                      created will disconnect all existing workspaces from the previously-used
                      persistent volume claim, and will require manual removal of the old PVCs
                      in the cluster.
                    maxLength: 63
                    pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                    type: string
                  runtimeClassName:
                    description: RuntimeClassName defines the spec.runtimeClassName
                      for DevWorkspace pods created by the DevWorkspace Operator.
                    type: string
                  schedulerName:
                    description: |-
                      SchedulerName is the name of the pod scheduler for DevWorkspace pods.
                      If not specified, the pod scheduler is set to the default scheduler on the cluster.
                    type: string
                  serviceAccount:
                    description: |-
                      ServiceAccount defines configuration options for the ServiceAccount used for
                      DevWorkspaces.
                    properties:
                      disableCreation:
                        description: |-
                          Disable creation of DevWorkspace ServiceAccounts by the DevWorkspace Operator. If set to true, the serviceAccountName
                          field must also be set. If ServiceAccount creation is disabled, it is assumed that the specified ServiceAccount already
                          exists in any namespace where a workspace is created. If a suitable ServiceAccount does not exist, starting DevWorkspaces
                          will fail.
                        type: boolean
                      serviceAccountName:
                        description: |-
                          ServiceAccountName defines a fixed name to be used for all DevWorkspaces. If set, the DevWorkspace
                          Operator will not generate a separate ServiceAccount for each DevWorkspace, and will instead create
                          a ServiceAccount with the specified name in each namespace where DevWorkspaces are created. If specified,
                          the created ServiceAccount will not be removed when DevWorkspaces are deleted and must be cleaned up manually.
                        maxLength: 63
                        pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
                        type: string
                      serviceAccountTokens:
                        description: List of ServiceAccount tokens that will be mounted
                          into workspace pods as projected volumes.
                        items:
                          properties:
                            audience:
                              description: |-
                                Audience is the intended audience of the token. A recipient of a token
                                must identify itself with an identifier specified in the audience of the
                                token, and otherwise should reject the token. The audience defaults to the
                                identifier of the apiserver.
                              type: string
                            expirationSeconds:
                              default: 3600
                              description: |-
                                ExpirationSeconds is the requested duration of validity of the service
                                account token. As the token approaches expiration, the kubelet volume
                                plugin will proactively rotate the service account token. The kubelet will
                                start trying to rotate the token if the token is older than 80 percent of
                                its time to live or if the token is older than 24 hours. Defaults to 1 hour
                                and must be at least 10 minutes.
                              format: int64
                              minimum: 600
                              type: integer
                            mountPath:
                              description: |-
                                Path within the workspace container at which the token should be mounted.  Must
                                not contain ':'.
                              type: string
                            name:
                              description: |-
                                Identifiable name of the ServiceAccount token.
                                If multiple ServiceAccount tokens use the same mount path, a generic name will be used
                                for the projected volume instead.
                              type: string
                            path:
                              description: |-
                                Path is the path relative to the mount point of the file to project the
                                token into.
                              type: string
                          required:
                          - mountPath
                          - name
                          - path
                          type: object
                        type: array
                    type: object
                  storageAccessMode:
                    description: |-
                      StorageAccessMode are the desired access modes the volume should have. It defaults
                      to ReadWriteOnce if not specified
                    items:
                      type: string
                    type: array
                  storageClassName:
                    description: |-
                      StorageClassName defines an optional storageClass to use for persistent
                      volume claims created to support DevWorkspaces
                    type: string
                type: object
            type: object
          kind:
            description: |-
              Kind is a string value representing the REST resource this object represents.
              Servers may infer this from the endpoint the client submits requests to.
              Cannot be updated.
              In CamelCase.
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            type: string
          metadata:
            type: object
        type: object
    served: true
    storage: true