@@ -547,6 +547,32 @@ spec:
547
547
Note that this field cannot be set when spec.os.name is windows.
548
548
format : int64
549
549
type : integer
550
+ seLinuxChangePolicy :
551
+ description : |-
552
+ seLinuxChangePolicy defines how the container's SELinux label is applied to all volumes used by the Pod.
553
+ It has no effect on nodes that do not support SELinux or to volumes does not support SELinux.
554
+ Valid values are "MountOption" and "Recursive".
555
+
556
+ "Recursive" means relabeling of all files on all Pod volumes by the container runtime.
557
+ This may be slow for large volumes, but allows mixing privileged and unprivileged Pods sharing the same volume on the same node.
558
+
559
+ "MountOption" mounts all eligible Pod volumes with `-o context` mount option.
560
+ This requires all Pods that share the same volume to use the same SELinux label.
561
+ It is not possible to share the same volume among privileged and unprivileged Pods.
562
+ Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
563
+ whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
564
+ CSIDriver instance. Other volumes are always re-labelled recursively.
565
+ "MountOption" value is allowed only when SELinuxMount feature gate is enabled.
566
+
567
+ If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
568
+ If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
569
+ and "Recursive" for all other volumes.
570
+
571
+ This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.
572
+
573
+ All Pods that use the same volume should use the same seLinuxChangePolicy, otherwise some pods can get stuck in ContainerCreating state.
574
+ Note that this field cannot be set when spec.os.name is windows.
575
+ type : string
550
576
seLinuxOptions :
551
577
description : |-
552
578
The SELinux context to be applied to all containers.
@@ -839,7 +865,6 @@ spec:
839
865
pod labels will be ignored. The default value is empty.
840
866
The same key is forbidden to exist in both matchLabelKeys and labelSelector.
841
867
Also, matchLabelKeys cannot be set when labelSelector isn't set.
842
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
843
868
items :
844
869
type : string
845
870
type : array
@@ -854,7 +879,6 @@ spec:
854
879
pod labels will be ignored. The default value is empty.
855
880
The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
856
881
Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
857
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
858
882
items :
859
883
type : string
860
884
type : array
@@ -1019,7 +1043,6 @@ spec:
1019
1043
pod labels will be ignored. The default value is empty.
1020
1044
The same key is forbidden to exist in both matchLabelKeys and labelSelector.
1021
1045
Also, matchLabelKeys cannot be set when labelSelector isn't set.
1022
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
1023
1046
items :
1024
1047
type : string
1025
1048
type : array
@@ -1034,7 +1057,6 @@ spec:
1034
1057
pod labels will be ignored. The default value is empty.
1035
1058
The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
1036
1059
Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
1037
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
1038
1060
items :
1039
1061
type : string
1040
1062
type : array
@@ -1208,7 +1230,9 @@ spec:
1208
1230
policies :
1209
1231
description : |-
1210
1232
policies is a list of potential scaling polices which can be used during scaling.
1211
- At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
1233
+ If not set, use the default values:
1234
+ - For scale up: allow doubling the number of pods, or an absolute change of 4 pods in a 15s window.
1235
+ - For scale down: allow all pods to be removed in a 15s window.
1212
1236
items :
1213
1237
description : HPAScalingPolicy is a single policy
1214
1238
which must hold true for a specified past interval.
@@ -1251,6 +1275,24 @@ spec:
1251
1275
- For scale down: 300 (i.e. the stabilization window is 300 seconds long).
1252
1276
format : int32
1253
1277
type : integer
1278
+ tolerance :
1279
+ anyOf :
1280
+ - type : integer
1281
+ - type : string
1282
+ description : |-
1283
+ tolerance is the tolerance on the ratio between the current and desired
1284
+ metric value under which no updates are made to the desired number of
1285
+ replicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not
1286
+ set, the default cluster-wide tolerance is applied (by default 10%).
1287
+
1288
+ For example, if autoscaling is configured with a memory consumption target of 100Mi,
1289
+ and scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be
1290
+ triggered when the actual consumption falls below 95Mi or exceeds 101Mi.
1291
+
1292
+ This is an alpha field and requires enabling the HPAConfigurableTolerance
1293
+ feature gate.
1294
+ pattern : ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
1295
+ x-kubernetes-int-or-string : true
1254
1296
type : object
1255
1297
scaleUp :
1256
1298
description : |-
@@ -1263,7 +1305,9 @@ spec:
1263
1305
policies :
1264
1306
description : |-
1265
1307
policies is a list of potential scaling polices which can be used during scaling.
1266
- At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid
1308
+ If not set, use the default values:
1309
+ - For scale up: allow doubling the number of pods, or an absolute change of 4 pods in a 15s window.
1310
+ - For scale down: allow all pods to be removed in a 15s window.
1267
1311
items :
1268
1312
description : HPAScalingPolicy is a single policy
1269
1313
which must hold true for a specified past interval.
@@ -1306,6 +1350,24 @@ spec:
1306
1350
- For scale down: 300 (i.e. the stabilization window is 300 seconds long).
1307
1351
format : int32
1308
1352
type : integer
1353
+ tolerance :
1354
+ anyOf :
1355
+ - type : integer
1356
+ - type : string
1357
+ description : |-
1358
+ tolerance is the tolerance on the ratio between the current and desired
1359
+ metric value under which no updates are made to the desired number of
1360
+ replicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not
1361
+ set, the default cluster-wide tolerance is applied (by default 10%).
1362
+
1363
+ For example, if autoscaling is configured with a memory consumption target of 100Mi,
1364
+ and scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be
1365
+ triggered when the actual consumption falls below 95Mi or exceeds 101Mi.
1366
+
1367
+ This is an alpha field and requires enabling the HPAConfigurableTolerance
1368
+ feature gate.
1369
+ pattern : ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
1370
+ x-kubernetes-int-or-string : true
1309
1371
type : object
1310
1372
type : object
1311
1373
maxReplicas :
@@ -1324,7 +1386,6 @@ spec:
1324
1386
each pod of the current scale target (e.g. CPU or memory). Such metrics are
1325
1387
built in to Kubernetes, and have special scaling options on top of those
1326
1388
available to normal per-pod metrics using the "pods" source.
1327
- This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.
1328
1389
properties :
1329
1390
container :
1330
1391
description : container is the name of the container
@@ -1771,8 +1832,6 @@ spec:
1771
1832
description : |-
1772
1833
type is the type of metric source. It should be one of "ContainerResource", "External",
1773
1834
"Object", "Pods" or "Resource", each mapping to a matching field in the object.
1774
- Note: "ContainerResource" type is available on when the feature-gate
1775
- HPAContainerMetrics is enabled
1776
1835
type : string
1777
1836
required :
1778
1837
- type
@@ -2235,7 +2294,6 @@ spec:
2235
2294
pod labels will be ignored. The default value is empty.
2236
2295
The same key is forbidden to exist in both matchLabelKeys and labelSelector.
2237
2296
Also, matchLabelKeys cannot be set when labelSelector isn't set.
2238
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
2239
2297
items :
2240
2298
type : string
2241
2299
type : array
@@ -2250,7 +2308,6 @@ spec:
2250
2308
pod labels will be ignored. The default value is empty.
2251
2309
The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
2252
2310
Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
2253
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
2254
2311
items :
2255
2312
type : string
2256
2313
type : array
@@ -2416,7 +2473,6 @@ spec:
2416
2473
pod labels will be ignored. The default value is empty.
2417
2474
The same key is forbidden to exist in both matchLabelKeys and labelSelector.
2418
2475
Also, matchLabelKeys cannot be set when labelSelector isn't set.
2419
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
2420
2476
items :
2421
2477
type : string
2422
2478
type : array
@@ -2431,7 +2487,6 @@ spec:
2431
2487
pod labels will be ignored. The default value is empty.
2432
2488
The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
2433
2489
Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
2434
- This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
2435
2490
items :
2436
2491
type : string
2437
2492
type : array
0 commit comments