diff --git a/static/docs/reference/generated/kubernetes-api/v1.14/index.html b/static/docs/reference/generated/kubernetes-api/v1.14/index.html index 84288afc88..23bd9eafb4 100644 --- a/static/docs/reference/generated/kubernetes-api/v1.14/index.html +++ b/static/docs/reference/generated/kubernetes-api/v1.14/index.html @@ -377,35 +377,35 @@
| Code | Description |
|---|---|
| 200 CronJob | OK |
| 201 CronJob | Created |
| 202 CronJob | Accepted |
| 200 CronJob | OK |
| Code | Description |
|---|---|
| 200 CronJob | OK |
| 201 CronJob | Created |
| 200 CronJob | OK |
| Code | Description |
|---|---|
| 201 DaemonSet | Created |
| 200 DaemonSet | OK |
| 201 DaemonSet | Created |
| Code | Description |
|---|---|
| 201 DaemonSet | Created |
| 200 DaemonSet | OK |
| 201 DaemonSet | Created |
| Code | Description |
|---|---|
| 200 Deployment | OK |
| 201 Deployment | Created |
| 202 Deployment | Accepted |
| 200 Deployment | OK |
| Code | Description |
|---|---|
| 200 Scale | OK |
| 201 Scale | Created |
| 200 Scale | OK |
| Code | Description |
|---|---|
| 202 Job | Accepted |
| 200 Job | OK |
| 201 Job | Created |
| 202 Job | Accepted |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 202 Pod | Accepted |
| 200 Pod | OK |
| 201 Pod | Created |
| 202 Pod | Accepted |
| Code | Description |
|---|---|
| 200 ReplicaSet | OK |
| 201 ReplicaSet | Created |
| 200 ReplicaSet | OK |
| Code | Description |
|---|---|
| 202 ReplicationController | Accepted |
| 200 ReplicationController | OK |
| 201 ReplicationController | Created |
| 202 ReplicationController | Accepted |
| Code | Description |
|---|---|
| 201 StatefulSet | Created |
| 200 StatefulSet | OK |
| 201 StatefulSet | Created |
| Code | Description |
|---|---|
| 202 Endpoints | Accepted |
| 200 Endpoints | OK |
| 201 Endpoints | Created |
| 202 Endpoints | Accepted |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | Ingress |
networking.k8s.io | v1beta1 | Ingress |
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
specIngressSpec | Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status |
statusIngressStatus | Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
specIngressSpec | Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status |
statusIngressStatus | Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status |
| Field | Description |
|---|---|
backendIngressBackend | A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default. |
rulesIngressRule array | A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend. |
tlsIngressTLS array | TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI. |
backendIngressBackend | A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default. |
rulesIngressRule array | A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend. |
tlsIngressTLS array | TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI. |
loadBalancerLoadBalancerStatus | LoadBalancer contains the current status of the load-balancer. |
| Field | Description |
|---|---|
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
itemsIngress array | Items is the list of Ingress. |
itemsIngress array | Items is the list of Ingress. |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataListMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
metadataListMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
create an Ingress
POST /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
+POST /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyIngress | |
bodyIngress |
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 201 Ingress | Created |
| 202 Ingress | Accepted |
| 201 Ingress | Created |
| 202 Ingress | Accepted |
| 200 Ingress | OK |
partially update the specified Ingress
PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
+PATCH /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
replace the specified Ingress
PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
+PUT /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyIngress | |
bodyIngress |
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 201 Ingress | Created |
| 200 Ingress | OK |
| 201 Ingress | Created |
delete an Ingress
DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
+DELETE /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|---|
| 202 Status | Accepted |
delete collection of Ingress
DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
+DELETE /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|---|
| 200 Status | OK |
read the specified Ingress
GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
+GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
list or watch objects of kind Ingress
GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
+GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 IngressList | OK |
| 200 IngressList | OK |
list or watch objects of kind Ingress
GET /apis/extensions/v1beta1/ingresses
+GET /apis/networking.k8s.io/v1beta1/ingresses
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 IngressList | OK |
| 200 IngressList | OK |
watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses/{name}
+GET /apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.
GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses
+GET /apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.
GET /apis/extensions/v1beta1/watch/ingresses
+GET /apis/networking.k8s.io/v1beta1/watch/ingresses
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
partially update status of the specified Ingress
PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status
+PATCH /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
read status of the specified Ingress
GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status
+GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
replace status of the specified Ingress
PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status
+PUT /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyIngress | |
bodyIngress |
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 201 Ingress | Created |
| 200 Ingress | OK |
| 201 Ingress | Created |
| Code | Description |
|---|---|
| 200 Service | OK |
| 201 Service | Created |
| 200 Service | OK |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 200 Service | OK |
| 201 Service | Created |
| 200 Service | OK |
| Code | Description |
|---|---|
| 202 CSIDriver | Accepted |
| 200 CSIDriver | OK |
| 201 CSIDriver | Created |
| 202 CSIDriver | Accepted |
| Code | Description |
|---|---|
| 200 Secret | OK |
| 201 Secret | Created |
| 202 Secret | Accepted |
| 200 Secret | OK |
| Code | Description |
|---|---|
| 200 PersistentVolumeClaim | OK |
| 201 PersistentVolumeClaim | Created |
| 202 PersistentVolumeClaim | Accepted |
| 200 PersistentVolumeClaim | OK |
| Code | Description |
|---|---|
| 201 PersistentVolumeClaim | Created |
| 200 PersistentVolumeClaim | OK |
| 201 PersistentVolumeClaim | Created |
| Code | Description |
|---|---|
| 201 VolumeAttachment | Created |
| 200 VolumeAttachment | OK |
| 201 VolumeAttachment | Created |
| Code | Description |
|---|---|
| 202 ControllerRevision | Accepted |
| 200 ControllerRevision | OK |
| 201 ControllerRevision | Created |
| 202 ControllerRevision | Accepted |
| Code | Description |
|---|---|
| 202 CustomResourceDefinition | Accepted |
| 200 CustomResourceDefinition | OK |
| 201 CustomResourceDefinition | Created |
| 202 CustomResourceDefinition | Accepted |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 202 LimitRange | Accepted |
| 200 LimitRange | OK |
| 201 LimitRange | Created |
| 202 LimitRange | Accepted |
| Code | Description |
|---|---|
| 201 LimitRange | Created |
| 200 LimitRange | OK |
| 201 LimitRange | Created |
| Code | Description |
|---|---|
| 200 HorizontalPodAutoscaler | OK |
| 201 HorizontalPodAutoscaler | Created |
| 202 HorizontalPodAutoscaler | Accepted |
| 200 HorizontalPodAutoscaler | OK |
| Code | Description |
|---|---|
| 201 HorizontalPodAutoscaler | Created |
| 200 HorizontalPodAutoscaler | OK |
| 201 HorizontalPodAutoscaler | Created |
| Code | Description |
|---|---|
| 202 MutatingWebhookConfiguration | Accepted |
| 200 MutatingWebhookConfiguration | OK |
| 201 MutatingWebhookConfiguration | Created |
| 202 MutatingWebhookConfiguration | Accepted |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 202 ValidatingWebhookConfiguration | Accepted |
| 200 ValidatingWebhookConfiguration | OK |
| 201 ValidatingWebhookConfiguration | Created |
| 202 ValidatingWebhookConfiguration | Accepted |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 200 PodTemplate | OK |
| 201 PodTemplate | Created |
| 202 PodTemplate | Accepted |
| 200 PodTemplate | OK |
| Code | Description |
|---|---|
| 201 PodDisruptionBudget | Created |
| 200 PodDisruptionBudget | OK |
| 201 PodDisruptionBudget | Created |
| Code | Description |
|---|---|
| 200 PriorityClass | OK |
| 201 PriorityClass | Created |
| 200 PriorityClass | OK |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 200 PodPreset | OK |
| 201 PodPreset | Created |
| 202 PodPreset | Accepted |
| 200 PodPreset | OK |
| Code | Description |
|---|---|
| 201 PodPreset | Created |
| 200 PodPreset | OK |
| 201 PodPreset | Created |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | PodSecurityPolicy |
policy | v1beta1 | PodSecurityPolicy |
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
specPodSecurityPolicySpec | spec defines the policy enforced. |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
specPodSecurityPolicySpec | spec defines the policy enforced. |
| Field | Description |
|---|---|
allowPrivilegeEscalationboolean | allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. |
allowedCSIDriversAllowedCSIDriver array | AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value means no CSI drivers can run inline within a pod spec. |
allowedCSIDriversAllowedCSIDriver array | AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value means no CSI drivers can run inline within a pod spec. |
allowedCapabilitiesstring array | allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. |
allowedFlexVolumesAllowedFlexVolume array | allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. |
allowedHostPathsAllowedHostPath array | allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. |
allowedFlexVolumesAllowedFlexVolume array | allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. |
allowedHostPathsAllowedHostPath array | allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. |
allowedProcMountTypesstring array | AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. |
allowedUnsafeSysctlsstring array | allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. |
defaultAddCapabilitiesstring array | defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. |
defaultAllowPrivilegeEscalationboolean | defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. |
forbiddenSysctlsstring array | forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. |
fsGroupFSGroupStrategyOptions | fsGroup is the strategy that will dictate what fs group is used by the SecurityContext. |
fsGroupFSGroupStrategyOptions | fsGroup is the strategy that will dictate what fs group is used by the SecurityContext. |
hostIPCboolean | hostIPC determines if the policy allows the use of HostIPC in the pod spec. |
hostNetworkboolean | hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. |
hostPIDboolean | hostPID determines if the policy allows the use of HostPID in the pod spec. |
hostPortsHostPortRange array | hostPorts determines which host port ranges are allowed to be exposed. |
hostPortsHostPortRange array | hostPorts determines which host port ranges are allowed to be exposed. |
privilegedboolean | privileged determines if a pod can request to be run as privileged. |
readOnlyRootFilesystemboolean | readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. |
requiredDropCapabilitiesstring array | requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. |
runAsGroupRunAsGroupStrategyOptions | RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. |
runAsUserRunAsUserStrategyOptions | runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set. |
seLinuxSELinuxStrategyOptions | seLinux is the strategy that will dictate the allowable labels that may be set. |
supplementalGroupsSupplementalGroupsStrategyOptions | supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext. |
runAsGroupRunAsGroupStrategyOptions | RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. |
runAsUserRunAsUserStrategyOptions | runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set. |
seLinuxSELinuxStrategyOptions | seLinux is the strategy that will dictate the allowable labels that may be set. |
supplementalGroupsSupplementalGroupsStrategyOptions | supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext. |
volumesstring array | volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '\*'. |
| Field | Description |
|---|---|
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
itemsPodSecurityPolicy array | items is a list of schema objects. |
itemsPodSecurityPolicy array | items is a list of schema objects. |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataListMeta | Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
metadataListMeta | Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
create a PodSecurityPolicy
POST /apis/extensions/v1beta1/podsecuritypolicies
+POST /apis/policy/v1beta1/podsecuritypolicies
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyPodSecurityPolicy | |
bodyPodSecurityPolicy |
| Code | Description |
|---|---|
| 200 PodSecurityPolicy | OK |
| 201 PodSecurityPolicy | Created |
| 202 PodSecurityPolicy | Accepted |
| 200 PodSecurityPolicy | OK |
| 201 PodSecurityPolicy | Created |
| 202 PodSecurityPolicy | Accepted |
partially update the specified PodSecurityPolicy
PATCH /apis/extensions/v1beta1/podsecuritypolicies/{name}
+PATCH /apis/policy/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 PodSecurityPolicy | OK |
| 200 PodSecurityPolicy | OK |
replace the specified PodSecurityPolicy
PUT /apis/extensions/v1beta1/podsecuritypolicies/{name}
+PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyPodSecurityPolicy | |
bodyPodSecurityPolicy |
| Code | Description |
|---|---|
| 201 PodSecurityPolicy | Created |
| 200 PodSecurityPolicy | OK |
| 200 PodSecurityPolicy | OK |
| 201 PodSecurityPolicy | Created |
delete a PodSecurityPolicy
DELETE /apis/extensions/v1beta1/podsecuritypolicies/{name}
+DELETE /apis/policy/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|---|
| 202 Status | Accepted |
delete collection of PodSecurityPolicy
DELETE /apis/extensions/v1beta1/podsecuritypolicies
+DELETE /apis/policy/v1beta1/podsecuritypolicies
| Parameter | Description |
|---|---|
| 200 Status | OK |
read the specified PodSecurityPolicy
GET /apis/extensions/v1beta1/podsecuritypolicies/{name}
+GET /apis/policy/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 PodSecurityPolicy | OK |
| 200 PodSecurityPolicy | OK |
list or watch objects of kind PodSecurityPolicy
GET /apis/extensions/v1beta1/podsecuritypolicies
+GET /apis/policy/v1beta1/podsecuritypolicies
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 PodSecurityPolicyList | OK |
| 200 PodSecurityPolicyList | OK |
watch changes to an object of kind PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.
GET /apis/extensions/v1beta1/watch/podsecuritypolicies/{name}
+GET /apis/policy/v1beta1/watch/podsecuritypolicies/{name}
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
watch individual changes to a list of PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead.
GET /apis/extensions/v1beta1/watch/podsecuritypolicies
+GET /apis/policy/v1beta1/watch/podsecuritypolicies
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 CertificateSigningRequest | OK |
| 201 CertificateSigningRequest | Created |
| 202 CertificateSigningRequest | Accepted |
| 200 CertificateSigningRequest | OK |
| Code | Description |
|---|---|
| 201 CertificateSigningRequest | Created |
| 200 CertificateSigningRequest | OK |
| 201 CertificateSigningRequest | Created |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 202 ClusterRole | Accepted |
| 200 ClusterRole | OK |
| 201 ClusterRole | Created |
| 202 ClusterRole | Accepted |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 200 ClusterRoleBinding | OK |
| 201 ClusterRoleBinding | Created |
| 202 ClusterRoleBinding | Accepted |
| 200 ClusterRoleBinding | OK |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 202 Lease | Accepted |
| 200 Lease | OK |
| 201 Lease | Created |
| 202 Lease | Accepted |
| Code | Description |
|---|---|
| 201 Lease | Created |
| 200 Lease | OK |
| 201 Lease | Created |
| Code | Description |
|---|---|
| 201 LocalSubjectAccessReview | Created |
| 202 LocalSubjectAccessReview | Accepted |
| 200 LocalSubjectAccessReview | OK |
| 201 LocalSubjectAccessReview | Created |
| Code | Description |
|---|---|
| 200 Namespace | OK |
| 201 Namespace | Created |
| 202 Namespace | Accepted |
| 200 Namespace | OK |
| Code | Description |
|---|---|
| 202 Node | Accepted |
| 200 Node | OK |
| 201 Node | Created |
| 202 Node | Accepted |
| Code | Description |
|---|---|
| 201 Node | Created |
| 200 Node | OK |
| 201 Node | Created |
| Code | Description |
|---|---|
| 202 PersistentVolume | Accepted |
| 200 PersistentVolume | OK |
| 201 PersistentVolume | Created |
| 202 PersistentVolume | Accepted |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 200 RoleBinding | OK |
| 201 RoleBinding | Created |
| 200 RoleBinding | OK |
| Code | Description |
|---|---|
| 200 RuntimeClass | OK |
| 201 RuntimeClass | Created |
| 202 RuntimeClass | Accepted |
| 200 RuntimeClass | OK |
| Code | Description |
|---|---|
| 200 RuntimeClass | OK |
| 201 RuntimeClass | Created |
| 200 RuntimeClass | OK |
| Code | Description |
|---|---|
| 201 ServiceAccount | Created |
| 200 ServiceAccount | OK |
| 201 ServiceAccount | Created |
| Code | Description |
|---|---|
| 201 SubjectAccessReview | Created |
| 202 SubjectAccessReview | Accepted |
| 200 SubjectAccessReview | OK |
| 201 SubjectAccessReview | Created |
| Code | Description |
|---|---|
| 201 NetworkPolicy | Created |
| 200 NetworkPolicy | OK |
| 201 NetworkPolicy | Created |
clusterRoleSelectors| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | AllowedCSIDriver |
policy | v1beta1 | AllowedCSIDriver |
AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
namestring | Name is the registered name of the CSI driver |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | AllowedFlexVolume |
policy | v1beta1 | AllowedFlexVolume |
AllowedFlexVolume represents a single Flexvolume that is allowed to be used. Deprecated: use AllowedFlexVolume from policy API Group instead.
+AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
driverstring | driver is the name of the Flexvolume driver. |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | AllowedHostPath |
policy | v1beta1 | AllowedHostPath |
AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined. Deprecated: use AllowedHostPath from policy API Group instead.
+AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
wwidsstring array | Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously. |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | FSGroupStrategyOptions |
policy | v1beta1 | FSGroupStrategyOptions |
FSGroupStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use FSGroupStrategyOptions from policy API Group instead.
+FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate what FSGroup is used in the SecurityContext. |
value| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | HTTPIngressPath |
networking.k8s.io | v1beta1 | HTTPIngressPath |
HTTPIngressPath associates a path regex with a backend. Incoming urls matching the path are forwarded to the backend.
| Field | Description |
|---|---|
backendIngressBackend | Backend defines the referenced service endpoint to which the traffic will be forwarded to. |
backendIngressBackend | Backend defines the referenced service endpoint to which the traffic will be forwarded to. |
pathstring | Path is an extended POSIX regex as defined by IEEE Std 1003.1, (i.e this follows the egrep/unix syntax, not the perl syntax) matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. If unspecified, the path defaults to a catch all sending traffic to the backend. |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | HTTPIngressRuleValue |
networking.k8s.io | v1beta1 | HTTPIngressRuleValue |
HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://<host>/<path>?<searchpart> -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.
| Field | Description |
|---|---|
pathsHTTPIngressPath array | A collection of paths that map requests to backends. |
pathsHTTPIngressPath array | A collection of paths that map requests to backends. |
type| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | HostPortRange |
policy | v1beta1 | HostPortRange |
HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined. Deprecated: use HostPortRange from policy API Group instead.
+HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.
mininteger | min is the start of the range, inclusive. |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | IDRange |
policy | v1beta1 | IDRange |
IDRange provides a min/max of an allowed range of IDs. Deprecated: use IDRange from policy API Group instead.
+IDRange provides a min/max of an allowed range of IDs.
targetPortalstring | iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260). |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | IngressBackend |
networking.k8s.io | v1beta1 | IngressBackend |
IngressBackend describes all endpoints for a given service and port.
servicePort | Specifies the port of the referenced service. |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | IngressRule |
networking.k8s.io | v1beta1 | IngressRule |
IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.
| Field | Description |
|---|---|
hoststring | Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in the RFC: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to the IP in the Spec of the parent Ingress. 2. The `:` delimiter is not respected because ports are not allowed. Currently the port of an Ingress is implicitly :80 for http and :443 for https. Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue. |
httpHTTPIngressRuleValue | |
httpHTTPIngressRuleValue |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | IngressTLS |
networking.k8s.io | v1beta1 | IngressTLS |
IngressTLS describes the transport layer security associated with an Ingress.
scopestring | scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*". |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | RunAsGroupStrategyOptions |
policy | v1beta1 | RunAsGroupStrategyOptions |
RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsGroupStrategyOptions from policy API Group instead.
+RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate the allowable RunAsGroup values that may be set. |
| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | RunAsUserStrategyOptions |
policy | v1beta1 | RunAsUserStrategyOptions |
RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use RunAsUserStrategyOptions from policy API Group instead.
+RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate the allowable RunAsUser values that may be set. |
user| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | SELinuxStrategyOptions |
policy | v1beta1 | SELinuxStrategyOptions |
SELinuxStrategyOptions defines the strategy type and any options used to create the strategy. Deprecated: use SELinuxStrategyOptions from policy API Group instead.
+SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
seLinuxOptionsSELinuxOptions | seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ |
| Group | Version | Kind |
|---|---|---|
autoscaling | v1 | Scale |
apps | v1beta2 | Scale |
Scale represents a scaling request for a resource.
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataObjectMeta | Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata. |
specScaleSpec | defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status. |
statusScaleStatus | current status of the scale. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status. Read-only. |
metadataObjectMeta | Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. |
specScaleSpec | defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. |
statusScaleStatus | current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only. |
targetPort| Group | Version | Kind |
|---|---|---|
apiregistration.k8s.io | v1 | ServiceReference |
admissionregistration.k8s.io | v1beta1 | ServiceReference |
ServiceReference holds a reference to Service.legacy.k8s.io
| Field | Description |
|---|---|
namestring | Name is the name of the service |
namespacestring | Namespace is the namespace of the service |
namestring | `name` is the name of the service. Required |
namespacestring | `namespace` is the namespace of the service. Required |
pathstring | `path` is an optional URL path which will be sent in any request to this service. |
resourceRules| Group | Version | Kind |
|---|---|---|
extensions | v1beta1 | SupplementalGroupsStrategyOptions |
policy | v1beta1 | SupplementalGroupsStrategyOptions |
SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy. Deprecated: use SupplementalGroupsStrategyOptions from policy API Group instead.
+SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate what supplemental groups is used in the SecurityContext. |
clusterRoleSelectors| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | AllowedCSIDriver |
extensions | v1beta1 | AllowedCSIDriver |
namestring | Name is the registered name of the CSI driver |
| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | AllowedFlexVolume |
extensions | v1beta1 | AllowedFlexVolume |
driverstring | driver is the name of the Flexvolume driver. |
| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | AllowedHostPath |
extensions | v1beta1 | AllowedHostPath |
| Code | Description |
|---|---|
| 201 ClusterRole | Created |
| 200 ClusterRole | OK |
| 201 ClusterRole | Created |
| Code | Description |
|---|---|
| 200 ClusterRole | OK |
| 201 ClusterRole | Created |
| 202 ClusterRole | Accepted |
| 200 ClusterRole | OK |
| Code | Description |
|---|---|
| 201 ClusterRoleBinding | Created |
| 202 ClusterRoleBinding | Accepted |
| 200 ClusterRoleBinding | OK |
| 201 ClusterRoleBinding | Created |
| Code | Description |
|---|---|
| 200 ClusterRoleBinding | OK |
| 201 ClusterRoleBinding | Created |
| 202 ClusterRoleBinding | Accepted |
| 200 ClusterRoleBinding | OK |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 200 ControllerRevision | OK |
| 201 ControllerRevision | Created |
| 200 ControllerRevision | OK |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 202 CronJob | Accepted |
| 200 CronJob | OK |
| 201 CronJob | Created |
| 202 CronJob | Accepted |
| Code | Description |
|---|---|
| 201 CronJob | Created |
| 200 CronJob | OK |
| 201 CronJob | Created |
| Code | Description |
|---|---|
| 202 DaemonSet | Accepted |
| 200 DaemonSet | OK |
| 201 DaemonSet | Created |
| 202 DaemonSet | Accepted |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 200 DaemonSet | OK |
| 201 DaemonSet | Created |
| 202 DaemonSet | Accepted |
| 200 DaemonSet | OK |
| Code | Description |
|---|---|
| 200 DaemonSet | OK |
| 201 DaemonSet | Created |
| 200 DaemonSet | OK |
| Code | Description |
|---|---|
| 201 DaemonSet | Created |
| 200 DaemonSet | OK |
| 201 DaemonSet | Created |
| Code | Description |
|---|---|
| 200 Deployment | OK |
| 201 Deployment | Created |
| 200 Deployment | OK |
| Code | Description |
|---|---|
| 201 Scale | Created |
| 200 Scale | OK |
| 201 Scale | Created |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 201 Status | Created |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 201 Status | Created |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 200 Event | OK |
| 201 Event | Created |
| 202 Event | Accepted |
| 200 Event | OK |
metricSelector| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | FSGroupStrategyOptions |
extensions | v1beta1 | FSGroupStrategyOptions |
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate what FSGroup is used in the SecurityContext. |
| Group | Version | Kind |
|---|---|---|
networking.k8s.io | v1beta1 | HTTPIngressPath |
extensions | v1beta1 | HTTPIngressPath |
| Field | Description |
|---|---|
backendIngressBackend | Backend defines the referenced service endpoint to which the traffic will be forwarded to. |
backendIngressBackend | Backend defines the referenced service endpoint to which the traffic will be forwarded to. |
pathstring | Path is an extended POSIX regex as defined by IEEE Std 1003.1, (i.e this follows the egrep/unix syntax, not the perl syntax) matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. If unspecified, the path defaults to a catch all sending traffic to the backend. |
| Group | Version | Kind |
|---|---|---|
networking.k8s.io | v1beta1 | HTTPIngressRuleValue |
extensions | v1beta1 | HTTPIngressRuleValue |
| Field | Description |
|---|---|
pathsHTTPIngressPath array | A collection of paths that map requests to backends. |
pathsHTTPIngressPath array | A collection of paths that map requests to backends. |
| Code | Description |
|---|---|
| 200 HorizontalPodAutoscaler | OK |
| 201 HorizontalPodAutoscaler | Created |
| 202 HorizontalPodAutoscaler | Accepted |
| 200 HorizontalPodAutoscaler | OK |
| Code | Description |
|---|---|
| 200 HorizontalPodAutoscaler | OK |
| 201 HorizontalPodAutoscaler | Created |
| 200 HorizontalPodAutoscaler | OK |
| Code | Description |
|---|---|
| 200 HorizontalPodAutoscaler | OK |
| 201 HorizontalPodAutoscaler | Created |
| 200 HorizontalPodAutoscaler | OK |
type| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | HostPortRange |
extensions | v1beta1 | HostPortRange |
mininteger | min is the start of the range, inclusive. |
| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | IDRange |
extensions | v1beta1 | IDRange |
exceptstring array | Except is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" Except values will be rejected if they are outside the CIDR range |
| Group | Version | Kind |
|---|---|---|
networking.k8s.io | v1beta1 | Ingress |
extensions | v1beta1 | Ingress |
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
specIngressSpec | Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status |
statusIngressStatus | Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
specIngressSpec | Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status |
statusIngressStatus | Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status |
| Field | Description |
|---|---|
backendIngressBackend | A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default. |
rulesIngressRule array | A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend. |
tlsIngressTLS array | TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI. |
backendIngressBackend | A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default. |
rulesIngressRule array | A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend. |
tlsIngressTLS array | TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI. |
loadBalancerLoadBalancerStatus | LoadBalancer contains the current status of the load-balancer. |
| Field | Description |
|---|---|
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
itemsIngress array | Items is the list of Ingress. |
itemsIngress array | Items is the list of Ingress. |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataListMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
metadataListMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
create an Ingress
POST /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses
+POST /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyIngress | |
bodyIngress |
| Code | Description |
|---|---|
| 201 Ingress | Created |
| 202 Ingress | Accepted |
| 200 Ingress | OK |
| 200 Ingress | OK |
| 201 Ingress | Created |
| 202 Ingress | Accepted |
partially update the specified Ingress
PATCH /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
+PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
replace the specified Ingress
PUT /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
+PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyIngress | |
bodyIngress |
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 201 Ingress | Created |
| 200 Ingress | OK |
| 201 Ingress | Created |
delete an Ingress
DELETE /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
+DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|---|
| 202 Status | Accepted |
delete collection of Ingress
DELETE /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses
+DELETE /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|---|
| 200 Status | OK |
read the specified Ingress
GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}
+GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
list or watch objects of kind Ingress
GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses
+GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 IngressList | OK |
| 200 IngressList | OK |
list or watch objects of kind Ingress
GET /apis/networking.k8s.io/v1beta1/ingresses
+GET /apis/extensions/v1beta1/ingresses
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 IngressList | OK |
| 200 IngressList | OK |
watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.
GET /apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses/{name}
+GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses/{name}
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.
GET /apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses
+GET /apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.
GET /apis/networking.k8s.io/v1beta1/watch/ingresses
+GET /apis/extensions/v1beta1/watch/ingresses
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
partially update status of the specified Ingress
PATCH /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status
+PATCH /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
read status of the specified Ingress
GET /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status
+GET /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 200 Ingress | OK |
replace status of the specified Ingress
PUT /apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status
+PUT /apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyIngress | |
bodyIngress |
| Code | Description |
|---|---|
| 200 Ingress | OK |
| 201 Ingress | Created |
| 200 Ingress | OK |
| 201 Ingress | Created |
| Group | Version | Kind |
|---|---|---|
networking.k8s.io | v1beta1 | IngressBackend |
extensions | v1beta1 | IngressBackend |
servicePort | Specifies the port of the referenced service. |
| Group | Version | Kind |
|---|---|---|
networking.k8s.io | v1beta1 | IngressRule |
extensions | v1beta1 | IngressRule |
| Field | Description |
|---|---|
hoststring | Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in the RFC: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to the IP in the Spec of the parent Ingress. 2. The `:` delimiter is not respected because ports are not allowed. Currently the port of an Ingress is implicitly :80 for http and :443 for https. Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue. |
httpHTTPIngressRuleValue | |
httpHTTPIngressRuleValue |
| Group | Version | Kind |
|---|---|---|
networking.k8s.io | v1beta1 | IngressTLS |
extensions | v1beta1 | IngressTLS |
| Code | Description |
|---|---|
| 202 NetworkPolicy | Accepted |
| 200 NetworkPolicy | OK |
| 201 NetworkPolicy | Created |
| 202 NetworkPolicy | Accepted |
target| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | PodSecurityPolicy |
extensions | v1beta1 | PodSecurityPolicy |
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
specPodSecurityPolicySpec | spec defines the policy enforced. |
metadataObjectMeta | Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
specPodSecurityPolicySpec | spec defines the policy enforced. |
| Field | Description |
|---|---|
allowPrivilegeEscalationboolean | allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true. |
allowedCSIDriversAllowedCSIDriver array | AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value means no CSI drivers can run inline within a pod spec. |
allowedCSIDriversAllowedCSIDriver array | AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value means no CSI drivers can run inline within a pod spec. |
allowedCapabilitiesstring array | allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities. |
allowedFlexVolumesAllowedFlexVolume array | allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. |
allowedHostPathsAllowedHostPath array | allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. |
allowedFlexVolumesAllowedFlexVolume array | allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field. |
allowedHostPathsAllowedHostPath array | allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used. |
allowedProcMountTypesstring array | AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled. |
allowedUnsafeSysctlsstring array | allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection. Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc. |
defaultAddCapabilitiesstring array | defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list. |
defaultAllowPrivilegeEscalationboolean | defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process. |
forbiddenSysctlsstring array | forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc. |
fsGroupFSGroupStrategyOptions | fsGroup is the strategy that will dictate what fs group is used by the SecurityContext. |
fsGroupFSGroupStrategyOptions | fsGroup is the strategy that will dictate what fs group is used by the SecurityContext. |
hostIPCboolean | hostIPC determines if the policy allows the use of HostIPC in the pod spec. |
hostNetworkboolean | hostNetwork determines if the policy allows the use of HostNetwork in the pod spec. |
hostPIDboolean | hostPID determines if the policy allows the use of HostPID in the pod spec. |
hostPortsHostPortRange array | hostPorts determines which host port ranges are allowed to be exposed. |
hostPortsHostPortRange array | hostPorts determines which host port ranges are allowed to be exposed. |
privilegedboolean | privileged determines if a pod can request to be run as privileged. |
readOnlyRootFilesystemboolean | readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to. |
requiredDropCapabilitiesstring array | requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added. |
runAsGroupRunAsGroupStrategyOptions | RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. |
runAsUserRunAsUserStrategyOptions | runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set. |
seLinuxSELinuxStrategyOptions | seLinux is the strategy that will dictate the allowable labels that may be set. |
supplementalGroupsSupplementalGroupsStrategyOptions | supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext. |
runAsGroupRunAsGroupStrategyOptions | RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. |
runAsUserRunAsUserStrategyOptions | runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set. |
seLinuxSELinuxStrategyOptions | seLinux is the strategy that will dictate the allowable labels that may be set. |
supplementalGroupsSupplementalGroupsStrategyOptions | supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext. |
volumesstring array | volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '\*'. |
| Field | Description |
|---|---|
apiVersionstring | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources |
itemsPodSecurityPolicy array | items is a list of schema objects. |
itemsPodSecurityPolicy array | items is a list of schema objects. |
kindstring | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds |
metadataListMeta | Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata |
metadataListMeta | Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata |
create a PodSecurityPolicy
POST /apis/policy/v1beta1/podsecuritypolicies
+POST /apis/extensions/v1beta1/podsecuritypolicies
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyPodSecurityPolicy | |
bodyPodSecurityPolicy |
| Code | Description |
|---|---|
| 201 PodSecurityPolicy | Created |
| 202 PodSecurityPolicy | Accepted |
| 200 PodSecurityPolicy | OK |
| 202 PodSecurityPolicy | Accepted |
| 200 PodSecurityPolicy | OK |
| 201 PodSecurityPolicy | Created |
partially update the specified PodSecurityPolicy
PATCH /apis/policy/v1beta1/podsecuritypolicies/{name}
+PATCH /apis/extensions/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 PodSecurityPolicy | OK |
| 200 PodSecurityPolicy | OK |
replace the specified PodSecurityPolicy
PUT /apis/policy/v1beta1/podsecuritypolicies/{name}
+PUT /apis/extensions/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|
| Parameter | Description |
|---|---|
bodyPodSecurityPolicy | |
bodyPodSecurityPolicy |
| Code | Description |
|---|---|
| 200 PodSecurityPolicy | OK |
| 201 PodSecurityPolicy | Created |
| 200 PodSecurityPolicy | OK |
| 201 PodSecurityPolicy | Created |
delete a PodSecurityPolicy
DELETE /apis/policy/v1beta1/podsecuritypolicies/{name}
+DELETE /apis/extensions/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|---|
| 202 Status | Accepted |
delete collection of PodSecurityPolicy
DELETE /apis/policy/v1beta1/podsecuritypolicies
+DELETE /apis/extensions/v1beta1/podsecuritypolicies
| Parameter | Description |
|---|---|
| 200 Status | OK |
read the specified PodSecurityPolicy
GET /apis/policy/v1beta1/podsecuritypolicies/{name}
+GET /apis/extensions/v1beta1/podsecuritypolicies/{name}
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 PodSecurityPolicy | OK |
| 200 PodSecurityPolicy | OK |
list or watch objects of kind PodSecurityPolicy
GET /apis/policy/v1beta1/podsecuritypolicies
+GET /apis/extensions/v1beta1/podsecuritypolicies
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 200 PodSecurityPolicyList | OK |
| 200 PodSecurityPolicyList | OK |
watch changes to an object of kind PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.
GET /apis/policy/v1beta1/watch/podsecuritypolicies/{name}
+GET /apis/extensions/v1beta1/watch/podsecuritypolicies/{name}
| Parameter | Description |
|---|---|
| 200 WatchEvent | OK |
watch individual changes to a list of PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead.
GET /apis/policy/v1beta1/watch/podsecuritypolicies
+GET /apis/extensions/v1beta1/watch/podsecuritypolicies
| Parameter | Description |
|---|
| Code | Description |
|---|---|
| 202 PriorityClass | Accepted |
| 200 PriorityClass | OK |
| 201 PriorityClass | Created |
| 202 PriorityClass | Accepted |
| Code | Description |
|---|---|
| 201 ReplicaSet | Created |
| 200 ReplicaSet | OK |
| 201 ReplicaSet | Created |
| Code | Description |
|---|---|
| 201 Scale | Created |
| 200 Scale | OK |
| 201 Scale | Created |
| Code | Description |
|---|---|
| 201 Scale | Created |
| 200 Scale | OK |
| 201 Scale | Created |
| Code | Description |
|---|---|
| 202 Role | Accepted |
| 200 Role | OK |
| 201 Role | Created |
| 202 Role | Accepted |
| Code | Description |
|---|---|
| 200 RoleBinding | OK |
| 201 RoleBinding | Created |
| 202 RoleBinding | Accepted |
| 200 RoleBinding | OK |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
| Code | Description |
|---|---|
| 200 RoleBinding | OK |
| 201 RoleBinding | Created |
| 202 RoleBinding | Accepted |
| 200 RoleBinding | OK |
| Code | Description |
|---|---|
| 200 RoleBinding | OK |
| 201 RoleBinding | Created |
| 200 RoleBinding | OK |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |
partition| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | RunAsGroupStrategyOptions |
extensions | v1beta1 | RunAsGroupStrategyOptions |
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate the allowable RunAsGroup values that may be set. |
| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | RunAsUserStrategyOptions |
extensions | v1beta1 | RunAsUserStrategyOptions |
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate the allowable RunAsUser values that may be set. |
| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | SELinuxStrategyOptions |
extensions | v1beta1 | SELinuxStrategyOptions |
seLinuxOptionsSELinuxOptions | seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ |
| Group | Version | Kind |
|---|---|---|
apps | v1beta2 | Scale |
autoscaling | v1 | Scale |
apiVersionkindmetadataspecstatusmetadataspecstatusreplicasinteger | desired number of instances for the scaled object. |
| Field | Description |
|---|---|
replicasinteger | actual number of observed instances of the scaled object. |
selectorobject | label query over pods that should match the replicas count. More info: http://kubernetes.io/docs/user-guide/labels#label-selectors |
targetSelectorstring | label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors |
selectorstring | label query over pods that should match the replicas count. This is same as the label selector but in the string format to avoid introspection by clients. The string will be in the same format as the query-param syntax. More info about label selectors: http://kubernetes.io/docs/user-guide/labels#label-selectors |
| Field | Description |
|---|
| Field | Description |
|---|
| Code | Description |
|---|---|
| 200 SelfSubjectAccessReview | OK |
| 201 SelfSubjectAccessReview | Created |
| 202 SelfSubjectAccessReview | Accepted |
| 200 SelfSubjectAccessReview | OK |
| Code | Description |
|---|---|
| 202 SelfSubjectRulesReview | Accepted |
| 200 SelfSubjectRulesReview | OK |
| 201 SelfSubjectRulesReview | Created |
| 202 SelfSubjectRulesReview | Accepted |
| Group | Version | Kind |
|---|---|---|
admissionregistration.k8s.io | v1beta1 | ServiceReference |
apiregistration.k8s.io | v1 | ServiceReference |
| Field | Description |
|---|---|
namestring | `name` is the name of the service. Required |
namespacestring | `namespace` is the namespace of the service. Required |
pathstring | `path` is an optional URL path which will be sent in any request to this service. |
namestring | Name is the name of the service |
namespacestring | Namespace is the namespace of the service |
| Code | Description |
|---|---|
| 202 StatefulSet | Accepted |
| 200 StatefulSet | OK |
| 201 StatefulSet | Created |
| 202 StatefulSet | Accepted |
| Code | Description |
|---|---|
| 201 Scale | Created |
| 200 Scale | OK |
| 201 Scale | Created |
| Code | Description |
|---|---|
| 200 StatefulSet | OK |
| 201 StatefulSet | Created |
| 202 StatefulSet | Accepted |
| 200 StatefulSet | OK |
| Code | Description |
|---|---|
| 201 StatefulSet | Created |
| 200 StatefulSet | OK |
| 201 StatefulSet | Created |
| Code | Description |
|---|---|
| 200 Scale | OK |
| 201 Scale | Created |
| 200 Scale | OK |
| Code | Description |
|---|---|
| 202 Status | Accepted |
| 200 Status | OK |
| 202 Status | Accepted |
| Code | Description |
|---|---|
| 202 SubjectAccessReview | Accepted |
| 200 SubjectAccessReview | OK |
| 201 SubjectAccessReview | Created |
| 202 SubjectAccessReview | Accepted |
resourceRules| Group | Version | Kind |
|---|---|---|
policy | v1beta1 | SupplementalGroupsStrategyOptions |
extensions | v1beta1 | SupplementalGroupsStrategyOptions |
| Field | Description |
|---|---|
rangesIDRange array | ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs. |
rangesIDRange array | ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs. |
rulestring | rule is the strategy that will dictate what supplemental groups is used in the SecurityContext. |
| Code | Description |
|---|---|
| 200 VolumeAttachment | OK |
| 201 VolumeAttachment | Created |
| 202 VolumeAttachment | Accepted |
| 200 VolumeAttachment | OK |
| Code | Description |
|---|---|
| 202 VolumeAttachment | Accepted |
| 200 VolumeAttachment | OK |
| 201 VolumeAttachment | Created |
| 202 VolumeAttachment | Accepted |
| Code | Description |
|---|---|
| 200 Status | OK |
| 202 Status | Accepted |
| 200 Status | OK |