# API Reference ## Constructs ### AbstractPod - *Implements:* [`org.cdk8s.plus21.IPodSelector`](#org.cdk8s.plus21.IPodSelector) #### Initializers ```java import org.cdk8s.plus21.AbstractPod; AbstractPod.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- #### Methods ##### `addContainer` ```java public addContainer(ContainerProps cont) ``` ###### `cont`Required - *Type:* [`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps) --- ##### `addHostAlias` ```java public addHostAlias(HostAlias hostAlias) ``` ###### `hostAlias`Required - *Type:* [`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias) --- ##### `addInitContainer` ```java public addInitContainer(ContainerProps cont) ``` ###### `cont`Required - *Type:* [`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps) --- ##### `addVolume` ```java public addVolume(Volume vol) ``` ###### `vol`Required - *Type:* [`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume) --- ##### `toPodSelectorConfig` ```java public toPodSelectorConfig() ``` #### Properties ##### `automountServiceAccountToken`Required ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` --- ##### `containers`Required ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Container`](#org.cdk8s.plus21.Container)> --- ##### `dns`Required ```java public PodDns getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDns`](#org.cdk8s.plus21.PodDns) --- ##### `hostAliases`Required ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> --- ##### `initContainers`Required ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Container`](#org.cdk8s.plus21.Container)> --- ##### `podMetadata`Required ```java public ApiObjectMetadataDefinition getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadataDefinition`](#org.cdk8s.ApiObjectMetadataDefinition) --- ##### `securityContext`Required ```java public PodSecurityContext getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContext`](#org.cdk8s.plus21.PodSecurityContext) --- ##### `volumes`Required ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) --- ### AwsElasticBlockStorePersistentVolume Represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore #### Initializers ```java import org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume; AwsElasticBlockStorePersistentVolume.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .volumeId(java.lang.String) // .fsType(java.lang.String) // .partition(java.lang.Number) // .readOnly(java.lang.Boolean) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ##### `volumeId`Required - *Type:* `java.lang.String` Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `fsType`Optional - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `partition`Optional - *Type:* `java.lang.Number` - *Default:* No partition. The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). --- ##### `readOnly`Optional - *Type:* `java.lang.Boolean` - *Default:* false Specify "true" to force and set the ReadOnly property in VolumeMounts to "true". > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- #### Properties ##### `fsType`Required ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` File system type of this volume. --- ##### `readOnly`Required ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` Whether or not it is mounted as a read-only volume. --- ##### `volumeId`Required ```java public java.lang.String getVolumeId(); ``` - *Type:* `java.lang.String` Volume id of this volume. --- ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` Partition of this volume. --- ### AzureDiskPersistentVolume AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. #### Initializers ```java import org.cdk8s.plus21.AzureDiskPersistentVolume; AzureDiskPersistentVolume.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .diskName(java.lang.String) .diskUri(java.lang.String) // .cachingMode(AzureDiskPersistentVolumeCachingMode) // .fsType(java.lang.String) // .kind(AzureDiskPersistentVolumeKind) // .readOnly(java.lang.Boolean) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ##### `diskName`Required - *Type:* `java.lang.String` The Name of the data disk in the blob storage. --- ##### `diskUri`Required - *Type:* `java.lang.String` The URI the data disk in the blob storage. --- ##### `cachingMode`Optional - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode`](#org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode) - *Default:* AzureDiskPersistentVolumeCachingMode.NONE. Host Caching mode. --- ##### `fsType`Optional - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type to mount. Must be a filesystem type supported by the host operating system. --- ##### `kind`Optional - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeKind`](#org.cdk8s.plus21.AzureDiskPersistentVolumeKind) - *Default:* AzureDiskPersistentVolumeKind.SHARED Kind of disk. --- ##### `readOnly`Optional - *Type:* `java.lang.Boolean` - *Default:* false Force the ReadOnly setting in VolumeMounts. --- #### Properties ##### `azureKind`Required ```java public AzureDiskPersistentVolumeKind getAzureKind(); ``` - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeKind`](#org.cdk8s.plus21.AzureDiskPersistentVolumeKind) Azure kind of this volume. --- ##### `cachingMode`Required ```java public AzureDiskPersistentVolumeCachingMode getCachingMode(); ``` - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode`](#org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode) Caching mode of this volume. --- ##### `diskName`Required ```java public java.lang.String getDiskName(); ``` - *Type:* `java.lang.String` Disk name of this volume. --- ##### `diskUri`Required ```java public java.lang.String getDiskUri(); ``` - *Type:* `java.lang.String` Disk URI of this volume. --- ##### `fsType`Required ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` File system type of this volume. --- ##### `readOnly`Required ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` Whether or not it is mounted as a read-only volume. --- ### BasicAuthSecret Create a secret for basic authentication. > https://kubernetes.io/docs/concepts/configuration/secret/#basic-authentication-secret #### Initializers ```java import org.cdk8s.plus21.BasicAuthSecret; BasicAuthSecret.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .password(java.lang.String) .username(java.lang.String) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `password`Required - *Type:* `java.lang.String` The password or token for authentication. --- ##### `username`Required - *Type:* `java.lang.String` The user name for authentication. --- ### ClusterRole - *Implements:* [`org.cdk8s.plus21.IClusterRole`](#org.cdk8s.plus21.IClusterRole), [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole) ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. #### Initializers ```java import org.cdk8s.plus21.ClusterRole; ClusterRole.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .aggregationLabels(java.util.Map) // .rules(java.util.List) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `aggregationLabels`Optional - *Type:* java.util.Map Specify labels that should be used to locate ClusterRoles, whose rules will be automatically filled into this ClusterRole's rules. --- ##### `rules`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ClusterRolePolicyRule`](#org.cdk8s.plus21.ClusterRolePolicyRule)> - *Default:* [] A list of rules the role should allow. --- #### Methods ##### `aggregate` ```java public aggregate(java.lang.String key, java.lang.String value) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `value`Required - *Type:* `java.lang.String` --- ##### `allow` ```java public allow(java.util.List verbs, IApiEndpoint endpoints) ``` ###### `verbs`Required - *Type:* java.util.List<`java.lang.String`> --- ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The endpoints(s) to apply to. --- ##### `allowCreate` ```java public allowCreate(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowDelete` ```java public allowDelete(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowDeleteCollection` ```java public allowDeleteCollection(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowGet` ```java public allowGet(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowList` ```java public allowList(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowPatch` ```java public allowPatch(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowRead` ```java public allowRead(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowReadWrite` ```java public allowReadWrite(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowUpdate` ```java public allowUpdate(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `allowWatch` ```java public allowWatch(IApiEndpoint endpoints) ``` ###### `endpoints`Required - *Type:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) The resource(s) to apply to. --- ##### `bind` ```java public bind(ISubject subjects) ``` ###### `subjects`Required - *Type:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) a list of subjects to bind to. --- ##### `bindInNamespace` ```java public bindInNamespace(java.lang.String namespace, ISubject subjects) ``` ###### `namespace`Required - *Type:* `java.lang.String` the namespace to limit permissions to. --- ###### `subjects`Required - *Type:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) a list of subjects to bind to. --- ##### `combine` ```java public combine(ClusterRole rol) ``` ###### `rol`Required - *Type:* [`org.cdk8s.plus21.ClusterRole`](#org.cdk8s.plus21.ClusterRole) --- #### Static Functions ##### `fromClusterRoleName` ```java import org.cdk8s.plus21.ClusterRole; ClusterRole.fromClusterRoleName(java.lang.String name) ``` ###### `name`Required - *Type:* `java.lang.String` The name of the role resource. --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `rules`Required ```java public java.util.List getRules(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ClusterRolePolicyRule`](#org.cdk8s.plus21.ClusterRolePolicyRule)> Rules associaated with this Role. Returns a copy, use `allow` to add rules. --- ### ClusterRoleBinding A ClusterRoleBinding grants permissions cluster-wide to a user or set of users. #### Initializers ```java import org.cdk8s.plus21.ClusterRoleBinding; ClusterRoleBinding.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) .role(IClusterRole) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `role`Required - *Type:* [`org.cdk8s.plus21.IClusterRole`](#org.cdk8s.plus21.IClusterRole) The role to bind to. --- #### Methods ##### `addSubjects` ```java public addSubjects(ISubject subjects) ``` ###### `subjects`Required - *Type:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) The subjects to add. --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `role`Required ```java public IClusterRole getRole(); ``` - *Type:* [`org.cdk8s.plus21.IClusterRole`](#org.cdk8s.plus21.IClusterRole) --- ##### `subjects`Required ```java public java.util.List getSubjects(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject)> --- ### ConfigMap - *Implements:* [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap) ConfigMap holds configuration data for pods to consume. #### Initializers ```java import org.cdk8s.plus21.ConfigMap; ConfigMap.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .binaryData(java.util.Map) // .data(java.util.Map) // .immutable(java.lang.Boolean) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `binaryData`Optional - *Type:* java.util.Map BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. You can also add binary data using `configMap.addBinaryData()`. --- ##### `data`Optional - *Type:* java.util.Map Data contains the configuration data. Each key must consist of alphanumeric characters, '-', '_' or '.'. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process. You can also add data using `configMap.addData()`. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- #### Methods ##### `addBinaryData` ```java public addBinaryData(java.lang.String key, java.lang.String value) ``` ###### `key`Required - *Type:* `java.lang.String` The key. --- ###### `value`Required - *Type:* `java.lang.String` The value. --- ##### `addData` ```java public addData(java.lang.String key, java.lang.String value) ``` ###### `key`Required - *Type:* `java.lang.String` The key. --- ###### `value`Required - *Type:* `java.lang.String` The value. --- ##### `addDirectory` ```java public addDirectory(java.lang.String localDir) public addDirectory(java.lang.String localDir, AddDirectoryOptions options) ``` ###### `localDir`Required - *Type:* `java.lang.String` A path to a local directory. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.AddDirectoryOptions`](#org.cdk8s.plus21.AddDirectoryOptions) Options. --- ##### `addFile` ```java public addFile(java.lang.String localFile) public addFile(java.lang.String localFile, java.lang.String key) ``` ###### `localFile`Required - *Type:* `java.lang.String` The path to the local file. --- ###### `key`Optional - *Type:* `java.lang.String` The ConfigMap key (default to the file name). --- #### Static Functions ##### `fromConfigMapName` ```java import org.cdk8s.plus21.ConfigMap; ConfigMap.fromConfigMapName(java.lang.String name) ``` ###### `name`Required - *Type:* `java.lang.String` The name of the config map to import. --- #### Properties ##### `binaryData`Required ```java public java.util.Map getBinaryData(); ``` - *Type:* java.util.Map The binary data associated with this config map. Returns a copy. To add data records, use `addBinaryData()` or `addData()`. --- ##### `data`Required ```java public java.util.Map getData(); ``` - *Type:* java.util.Map The data associated with this config map. Returns an copy. To add data records, use `addData()` or `addBinaryData()`. --- ##### `immutable`Required ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` Whether or not this config map is immutable. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ### DaemonSet A DaemonSet ensures that all (or some) Nodes run a copy of a Pod. As nodes are added to the cluster, Pods are added to them. As nodes are removed from the cluster, those Pods are garbage collected. Deleting a DaemonSet will clean up the Pods it created. Some typical uses of a DaemonSet are: * running a cluster storage daemon on every node * running a logs collection daemon on every node * running a node monitoring daemon on every node In a simple case, one DaemonSet, covering all nodes, would be used for each type of daemon. A more complex setup might use multiple DaemonSets for a single type of daemon, but with different flags and/or different memory and cpu requests for different hardware types. #### Initializers ```java import org.cdk8s.plus21.DaemonSet; DaemonSet.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) // .minReadySeconds(java.lang.Number) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `minReadySeconds`Optional - *Type:* `java.lang.Number` - *Default:* 0 Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. --- #### Properties ##### `minReadySeconds`Required ```java public java.lang.Number getMinReadySeconds(); ``` - *Type:* `java.lang.Number` --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ### Deployment A Deployment provides declarative updates for Pods and ReplicaSets. You describe a desired state in a Deployment, and the Deployment Controller changes the actual state to the desired state at a controlled rate. You can define Deployments to create new ReplicaSets, or to remove existing Deployments and adopt all their resources with new Deployments. > Note: Do not manage ReplicaSets owned by a Deployment. Consider opening an issue in the main Kubernetes repository if your use case is not covered below. ## Use Case The following are typical use cases for Deployments: * Create a Deployment to rollout a ReplicaSet. The ReplicaSet creates Pods in the background. Check the status of the rollout to see if it succeeds or not. * Declare the new state of the Pods by updating the PodTemplateSpec of the Deployment. A new ReplicaSet is created and the Deployment manages moving the Pods from the old ReplicaSet to the new one at a controlled rate. Each new ReplicaSet updates the revision of the Deployment. * Rollback to an earlier Deployment revision if the current state of the Deployment is not stable. Each rollback updates the revision of the Deployment. * Scale up the Deployment to facilitate more load. * Pause the Deployment to apply multiple fixes to its PodTemplateSpec and then resume it to start a new rollout. * Use the status of the Deployment as an indicator that a rollout has stuck. * Clean up older ReplicaSets that you don't need anymore. #### Initializers ```java import org.cdk8s.plus21.Deployment; Deployment.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) // .minReady(Duration) // .progressDeadline(Duration) // .replicas(java.lang.Number) // .strategy(DeploymentStrategy) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `minReady`Optional - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(0) Minimum duration for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Zero means the pod will be considered available as soon as it is ready. > https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#min-ready-seconds --- ##### `progressDeadline`Optional - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(600) The maximum duration for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. > https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#progress-deadline-seconds --- ##### `replicas`Optional - *Type:* `java.lang.Number` - *Default:* 1 Number of desired pods. --- ##### `strategy`Optional - *Type:* [`org.cdk8s.plus21.DeploymentStrategy`](#org.cdk8s.plus21.DeploymentStrategy) - *Default:* RollingUpdate with maxSurge and maxUnavailable set to 25%. Specifies the strategy used to replace old Pods by new ones. --- #### Methods ##### `exposeViaIngress` ```java public exposeViaIngress(java.lang.String path) public exposeViaIngress(java.lang.String path, ExposeDeploymentViaIngressOptions options) ``` ###### `path`Required - *Type:* `java.lang.String` The ingress path to register under. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.ExposeDeploymentViaIngressOptions`](#org.cdk8s.plus21.ExposeDeploymentViaIngressOptions) Additional options. --- ##### `exposeViaService` ```java public exposeViaService() public exposeViaService(ExposeDeploymentViaServiceOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.ExposeDeploymentViaServiceOptions`](#org.cdk8s.plus21.ExposeDeploymentViaServiceOptions) Options to determine details of the service and port exposed. --- #### Properties ##### `minReady`Required ```java public Duration getMinReady(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) Minimum duration for which a newly created pod should be ready without any of its container crashing, for it to be considered available. --- ##### `progressDeadline`Required ```java public Duration getProgressDeadline(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) The maximum duration for a deployment to make progress before it is considered to be failed. --- ##### `replicas`Required ```java public java.lang.Number getReplicas(); ``` - *Type:* `java.lang.Number` Number of desired pods. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `strategy`Required ```java public DeploymentStrategy getStrategy(); ``` - *Type:* [`org.cdk8s.plus21.DeploymentStrategy`](#org.cdk8s.plus21.DeploymentStrategy) --- ### DockerConfigSecret Create a secret for storing credentials for accessing a container image registry. > https://kubernetes.io/docs/concepts/configuration/secret/#docker-config-secrets #### Initializers ```java import org.cdk8s.plus21.DockerConfigSecret; DockerConfigSecret.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .data(java.util.Map) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `data`Required - *Type:* java.util.Map JSON content to provide for the `~/.docker/config.json` file. This will be stringified and inserted as stringData. > https://docs.docker.com/engine/reference/commandline/cli/#sample-configuration-file --- ### GCEPersistentDiskPersistentVolume GCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. > https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk #### Initializers ```java import org.cdk8s.plus21.GCEPersistentDiskPersistentVolume; GCEPersistentDiskPersistentVolume.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .pdName(java.lang.String) // .fsType(java.lang.String) // .partition(java.lang.Number) // .readOnly(java.lang.Boolean) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ##### `pdName`Required - *Type:* `java.lang.String` Unique name of the PD resource in GCE. Used to identify the disk in GCE. > https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk --- ##### `fsType`Optional - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `partition`Optional - *Type:* `java.lang.Number` - *Default:* No partition. The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). --- ##### `readOnly`Optional - *Type:* `java.lang.Boolean` - *Default:* false Specify "true" to force and set the ReadOnly property in VolumeMounts to "true". > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- #### Properties ##### `fsType`Required ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` File system type of this volume. --- ##### `pdName`Required ```java public java.lang.String getPdName(); ``` - *Type:* `java.lang.String` PD resource in GCE of this volume. --- ##### `readOnly`Required ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` Whether or not it is mounted as a read-only volume. --- ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` Partition of this volume. --- ### IngressV1Beta1 Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc. #### Initializers ```java import org.cdk8s.plus21.IngressV1Beta1; IngressV1Beta1.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .defaultBackend(IngressV1Beta1Backend) // .rules(java.util.List) // .tls(java.util.List) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `defaultBackend`Optional - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) The default backend services requests that do not match any rule. Using this option or the `addDefaultBackend()` method is equivalent to adding a rule with both `path` and `host` undefined. --- ##### `rules`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.IngressV1Beta1Rule`](#org.cdk8s.plus21.IngressV1Beta1Rule)> Routing rules for this ingress. Each rule must define an `IngressBackend` that will receive the requests that match this rule. If both `host` and `path` are not specifiec, this backend will be used as the default backend of the ingress. You can also add rules later using `addRule()`, `addHostRule()`, `addDefaultBackend()` and `addHostDefaultBackend()`. --- ##### `tls`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.IngressV1Beta1Tls`](#org.cdk8s.plus21.IngressV1Beta1Tls)> TLS settings for this ingress. Using this option tells the ingress controller to expose a TLS endpoint. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI. --- #### Methods ##### `addDefaultBackend` ```java public addDefaultBackend(IngressV1Beta1Backend backend) ``` ###### `backend`Required - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) The backend to use for requests that do not match any rule. --- ##### `addHostDefaultBackend` ```java public addHostDefaultBackend(java.lang.String host, IngressV1Beta1Backend backend) ``` ###### `host`Required - *Type:* `java.lang.String` The host name to match. --- ###### `backend`Required - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) The backend to route to. --- ##### `addHostRule` ```java public addHostRule(java.lang.String host, java.lang.String path, IngressV1Beta1Backend backend) ``` ###### `host`Required - *Type:* `java.lang.String` The host name. --- ###### `path`Required - *Type:* `java.lang.String` The HTTP path. --- ###### `backend`Required - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) The backend to route requests to. --- ##### `addRule` ```java public addRule(java.lang.String path, IngressV1Beta1Backend backend) ``` ###### `path`Required - *Type:* `java.lang.String` The HTTP path. --- ###### `backend`Required - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) The backend to route requests to. --- ##### `addRules` ```java public addRules(IngressV1Beta1Rule rules) ``` ###### `rules`Required - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Rule`](#org.cdk8s.plus21.IngressV1Beta1Rule) The rules to add. --- ##### `addTls` ```java public addTls(java.util.List tls) ``` ###### `tls`Required - *Type:* java.util.List<[`org.cdk8s.plus21.IngressV1Beta1Tls`](#org.cdk8s.plus21.IngressV1Beta1Tls)> --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ### Job A Job creates one or more Pods and ensures that a specified number of them successfully terminate. As pods successfully complete, the Job tracks the successful completions. When a specified number of successful completions is reached, the task (ie, Job) is complete. Deleting a Job will clean up the Pods it created. A simple case is to create one Job object in order to reliably run one Pod to completion. The Job object will start a new Pod if the first Pod fails or is deleted (for example due to a node hardware failure or a node reboot). You can also use a Job to run multiple Pods in parallel. #### Initializers ```java import org.cdk8s.plus21.Job; Job.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) // .activeDeadline(Duration) // .backoffLimit(java.lang.Number) // .ttlAfterFinished(Duration) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `activeDeadline`Optional - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* If unset, then there is no deadline. Specifies the duration the job may be active before the system tries to terminate it. --- ##### `backoffLimit`Optional - *Type:* `java.lang.Number` - *Default:* If not set, system defaults to 6. Specifies the number of retries before marking this job failed. --- ##### `ttlAfterFinished`Optional - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* If this field is unset, the Job won't be automatically deleted. Limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the `TTLAfterFinished` feature. --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `activeDeadline`Optional ```java public Duration getActiveDeadline(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) Duration before job is terminated. If undefined, there is no deadline. --- ##### `backoffLimit`Optional ```java public java.lang.Number getBackoffLimit(); ``` - *Type:* `java.lang.Number` Number of retries before marking failed. --- ##### `ttlAfterFinished`Optional ```java public Duration getTtlAfterFinished(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) TTL before the job is deleted after it is finished. --- ### Namespace - *Implements:* [`org.cdk8s.plus21.INamespaceSelector`](#org.cdk8s.plus21.INamespaceSelector) In Kubernetes, namespaces provides a mechanism for isolating groups of resources within a single cluster. Names of resources need to be unique within a namespace, but not across namespaces. Namespace-based scoping is applicable only for namespaced objects (e.g. Deployments, Services, etc) and not for cluster-wide objects (e.g. StorageClass, Nodes, PersistentVolumes, etc). #### Initializers ```java import org.cdk8s.plus21.Namespace; Namespace.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- #### Methods ##### `toNamespaceSelectorConfig` ```java public toNamespaceSelectorConfig() ``` #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- #### Constants ##### `NAME_LABEL` - *Type:* `java.lang.String` > https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/#automatic-labelling --- ### PersistentVolume - *Implements:* [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume), [`org.cdk8s.plus21.IStorage`](#org.cdk8s.plus21.IStorage) A PersistentVolume (PV) is a piece of storage in the cluster that has been provisioned by an administrator or dynamically provisioned using Storage Classes. It is a resource in the cluster just like a node is a cluster resource. PVs are volume plugins like Volumes, but have a lifecycle independent of any individual Pod that uses the PV. This API object captures the details of the implementation of the storage, be that NFS, iSCSI, or a cloud-provider-specific storage system. #### Initializers ```java import org.cdk8s.plus21.PersistentVolume; PersistentVolume.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- #### Methods ##### `asVolume` ```java public asVolume() ``` ##### `bind` ```java public bind(IPersistentVolumeClaim claim) ``` ###### `claim`Required - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) The PVC to bind to. --- ##### `reserve` ```java public reserve() ``` #### Static Functions ##### `fromPersistentVolumeName` ```java import org.cdk8s.plus21.PersistentVolume; PersistentVolume.fromPersistentVolumeName(java.lang.String volumeName) ``` ###### `volumeName`Required - *Type:* `java.lang.String` The name of the pv to reference. --- #### Properties ##### `mode`Required ```java public PersistentVolumeMode getMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) Volume mode of this volume. --- ##### `reclaimPolicy`Required ```java public PersistentVolumeReclaimPolicy getReclaimPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) Reclaim policy of this volume. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> Access modes requirement of this claim. --- ##### `claim`Optional ```java public IPersistentVolumeClaim getClaim(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) PVC this volume is bound to. Undefined means this volume is not yet claimed by any PVC. --- ##### `mountOptions`Optional ```java public java.util.List getMountOptions(); ``` - *Type:* java.util.List<`java.lang.String`> Mount options of this volume. --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) Storage size of this volume. --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` Storage class this volume belongs to. --- ### PersistentVolumeClaim - *Implements:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) A PersistentVolumeClaim (PVC) is a request for storage by a user. It is similar to a Pod. Pods consume node resources and PVCs consume PV resources. Pods can request specific levels of resources (CPU and Memory). Claims can request specific size and access modes #### Initializers ```java import org.cdk8s.plus21.PersistentVolumeClaim; PersistentVolumeClaim.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .storage(Size) // .storageClassName(java.lang.String) // .volume(IPersistentVolume) // .volumeMode(PersistentVolumeMode) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes requirement. Contains the access modes the volume should support. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1 --- ##### `storage`Optional - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No storage requirement. Minimum storage size the volume should have. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional - *Type:* `java.lang.String` - *Default:* Not set. Name of the StorageClass required by the claim. When this property is not set, the behavior is as follows:. * If the admission plugin is turned on, the storage class marked as default will be used. * If the admission plugin is turned off, the pvc can only be bound to volumes without a storage class. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 --- ##### `volume`Optional - *Type:* [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume) - *Default:* No specific volume binding. The PersistentVolume backing this claim. The control plane still checks that storage class, access modes, and requested storage size on the volume are valid. Note that in order to guarantee a proper binding, the volume should also define a `claimRef` referring to this claim. Otherwise, the volume may be claimed be other pvc's before it gets a chance to bind to this one. If the volume is managed (i.e not imported), you can use `pv.claim()` to easily create a bi-directional bounded claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#binding. --- ##### `volumeMode`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- #### Methods ##### `bind` ```java public bind(IPersistentVolume vol) ``` ###### `vol`Required - *Type:* [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume) The PV to bind to. --- #### Static Functions ##### `fromClaimName` ```java import org.cdk8s.plus21.PersistentVolumeClaim; PersistentVolumeClaim.fromClaimName(java.lang.String claimName) ``` ###### `claimName`Required - *Type:* `java.lang.String` The name of the pvc to reference. --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `volumeMode`Required ```java public PersistentVolumeMode getVolumeMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) Volume mode requirement of this claim. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> Access modes requirement of this claim. --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) Storage requirement of this claim. --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` Storage class requirment of this claim. --- ##### `volume`Optional ```java public IPersistentVolume getVolume(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume) PV this claim is bound to. Undefined means the claim is not bound to any specific volume. --- ### Pod Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts. #### Initializers ```java import org.cdk8s.plus21.Pod; Pod.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- #### Properties ##### `podMetadata`Required ```java public ApiObjectMetadataDefinition getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadataDefinition`](#org.cdk8s.ApiObjectMetadataDefinition) --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `scheduling`Required ```java public PodScheduling getScheduling(); ``` - *Type:* [`org.cdk8s.plus21.PodScheduling`](#org.cdk8s.plus21.PodScheduling) --- #### Constants ##### `ADDRESS_LABEL` - *Type:* `java.lang.String` This label is autoamtically added by cdk8s to any pod. It provides a unique and stable identifier for the pod. --- ### Resource - *Implements:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource), [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource), [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) Base class for all Kubernetes objects in stdk8s. Represents a single resource. #### Initializers ```java import org.cdk8s.plus21.Resource; new Resource(Construct scope, java.lang.String id); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) The scope in which to define this construct. --- ##### `id`Required - *Type:* `java.lang.String` The scoped construct ID. Must be unique amongst siblings. If the ID includes a path separator (`/`), then it will be replaced by double dash `--`. --- #### Methods ##### `asApiResource` ```java public asApiResource() ``` ##### `asNonApiResource` ```java public asNonApiResource() ``` #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `metadata`Required ```java public ApiObjectMetadataDefinition getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadataDefinition`](#org.cdk8s.ApiObjectMetadataDefinition) --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of this API object. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `resourceName`Optional ```java public java.lang.String getResourceName(); ``` - *Type:* `java.lang.String` The unique, namespace-global, name of an object inside the Kubernetes cluster. If this is omitted, the ApiResource should represent all objects of the given type. --- ### Role - *Implements:* [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole) Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. #### Initializers ```java import org.cdk8s.plus21.Role; Role.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .rules(java.util.List) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `rules`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.RolePolicyRule`](#org.cdk8s.plus21.RolePolicyRule)> - *Default:* [] A list of rules the role should allow. --- #### Methods ##### `allow` ```java public allow(java.util.List verbs, IApiResource resources) ``` ###### `verbs`Required - *Type:* java.util.List<`java.lang.String`> --- ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowCreate` ```java public allowCreate(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowDelete` ```java public allowDelete(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowDeleteCollection` ```java public allowDeleteCollection(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowGet` ```java public allowGet(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowList` ```java public allowList(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowPatch` ```java public allowPatch(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowRead` ```java public allowRead(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowReadWrite` ```java public allowReadWrite(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowUpdate` ```java public allowUpdate(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `allowWatch` ```java public allowWatch(IApiResource resources) ``` ###### `resources`Required - *Type:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) The resource(s) to apply to. --- ##### `bind` ```java public bind(ISubject subjects) ``` ###### `subjects`Required - *Type:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) a list of subjects to bind to. --- #### Static Functions ##### `fromRoleName` ```java import org.cdk8s.plus21.Role; Role.fromRoleName(java.lang.String name) ``` ###### `name`Required - *Type:* `java.lang.String` The name of the role resource. --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `rules`Required ```java public java.util.List getRules(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.RolePolicyRule`](#org.cdk8s.plus21.RolePolicyRule)> Rules associaated with this Role. Returns a copy, use `allow` to add rules. --- ### RoleBinding A RoleBinding grants permissions within a specific namespace to a user or set of users. #### Initializers ```java import org.cdk8s.plus21.RoleBinding; RoleBinding.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) .role(IRole) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `role`Required - *Type:* [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole) The role to bind to. A RoleBinding can reference a Role or a ClusterRole. --- #### Methods ##### `addSubjects` ```java public addSubjects(ISubject subjects) ``` ###### `subjects`Required - *Type:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) The subjects to add. --- #### Properties ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `role`Required ```java public IRole getRole(); ``` - *Type:* [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole) --- ##### `subjects`Required ```java public java.util.List getSubjects(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject)> --- ### Secret - *Implements:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) Kubernetes Secrets let you store and manage sensitive information, such as passwords, OAuth tokens, and ssh keys. Storing confidential information in a Secret is safer and more flexible than putting it verbatim in a Pod definition or in a container image. > https://kubernetes.io/docs/concepts/configuration/secret #### Initializers ```java import org.cdk8s.plus21.Secret; Secret.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) // .stringData(java.util.Map) // .type(java.lang.String) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `stringData`Optional - *Type:* java.util.Map stringData allows specifying non-binary secret data in string form. It is provided as a write-only convenience method. All keys and values are merged into the data field on write, overwriting any existing values. It is never output when reading from the API. --- ##### `type`Optional - *Type:* `java.lang.String` - *Default:* undefined - Don't set a type. Optional type associated with the secret. Used to facilitate programmatic handling of secret data by various controllers. --- #### Methods ##### `addStringData` ```java public addStringData(java.lang.String key, java.lang.String value) ``` ###### `key`Required - *Type:* `java.lang.String` Key. --- ###### `value`Required - *Type:* `java.lang.String` Value. --- ##### `getStringData` ```java public getStringData(java.lang.String key) ``` ###### `key`Required - *Type:* `java.lang.String` Key. --- #### Static Functions ##### `fromSecretName` ```java import org.cdk8s.plus21.Secret; Secret.fromSecretName(java.lang.String name) ``` ###### `name`Required - *Type:* `java.lang.String` The name of the secret to reference. --- #### Properties ##### `immutable`Required ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` Whether or not the secret is immutable. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ### Service An abstract way to expose an application running on a set of Pods as a network service. With Kubernetes you don't need to modify your application to use an unfamiliar service discovery mechanism. Kubernetes gives Pods their own IP addresses and a single DNS name for a set of Pods, and can load-balance across them. For example, consider a stateless image-processing backend which is running with 3 replicas. Those replicas are fungible—frontends do not care which backend they use. While the actual Pods that compose the backend set may change, the frontend clients should not need to be aware of that, nor should they need to keep track of the set of backends themselves. The Service abstraction enables this decoupling. If you're able to use Kubernetes APIs for service discovery in your application, you can query the API server for Endpoints, that get updated whenever the set of Pods in a Service changes. For non-native applications, Kubernetes offers ways to place a network port or load balancer in between your application and the backend Pods. #### Initializers ```java import org.cdk8s.plus21.Service; Service.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .clusterIP(java.lang.String) // .externalIPs(java.util.List) // .externalName(java.lang.String) // .loadBalancerSourceRanges(java.util.List) // .ports(java.util.List) // .type(ServiceType) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `clusterIP`Optional - *Type:* `java.lang.String` - *Default:* Automatically assigned. The IP address of the service and is usually assigned randomly by the master. If an address is specified manually and is not in use by others, it will be allocated to the service; otherwise, creation of the service will fail. This field can not be changed through updates. Valid values are "None", empty string (""), or a valid IP address. "None" can be specified for headless services when proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. > https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies --- ##### `externalIPs`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* No external IPs. A list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system. --- ##### `externalName`Optional - *Type:* `java.lang.String` - *Default:* No external name. The externalName to be used when ServiceType.EXTERNAL_NAME is set. --- ##### `loadBalancerSourceRanges`Optional - *Type:* java.util.List<`java.lang.String`> A list of CIDR IP addresses, if specified and supported by the platform, will restrict traffic through the cloud-provider load-balancer to the specified client IPs. More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/ --- ##### `ports`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ServicePort`](#org.cdk8s.plus21.ServicePort)> The port exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies --- ##### `type`Optional - *Type:* [`org.cdk8s.plus21.ServiceType`](#org.cdk8s.plus21.ServiceType) - *Default:* ServiceType.ClusterIP Determines how the Service is exposed. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types --- #### Methods ##### `addDeployment` ```java public addDeployment(Deployment depl) public addDeployment(Deployment depl, AddDeploymentOptions options) ``` ###### `depl`Required - *Type:* [`org.cdk8s.plus21.Deployment`](#org.cdk8s.plus21.Deployment) The deployment to expose. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.AddDeploymentOptions`](#org.cdk8s.plus21.AddDeploymentOptions) Optional settings for the port. --- ##### `addSelector` ```java public addSelector(java.lang.String label, java.lang.String value) ``` ###### `label`Required - *Type:* `java.lang.String` The label key. --- ###### `value`Required - *Type:* `java.lang.String` The label value. --- ##### `exposeViaIngress` ```java public exposeViaIngress(java.lang.String path) public exposeViaIngress(java.lang.String path, ExposeServiceViaIngressOptions options) ``` ###### `path`Required - *Type:* `java.lang.String` The path to expose the service under. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.ExposeServiceViaIngressOptions`](#org.cdk8s.plus21.ExposeServiceViaIngressOptions) Additional options. --- ##### `serve` ```java public serve(java.lang.Number port) public serve(java.lang.Number port, ServicePortOptions options) ``` ###### `port`Required - *Type:* `java.lang.Number` The port definition. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.ServicePortOptions`](#org.cdk8s.plus21.ServicePortOptions) --- #### Properties ##### `ports`Required ```java public java.util.List getPorts(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ServicePort`](#org.cdk8s.plus21.ServicePort)> Ports for this service. Use `serve()` to expose additional service ports. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `selector`Required ```java public java.util.Map getSelector(); ``` - *Type:* java.util.Map Returns the labels which are used to select pods for this service. --- ##### `type`Required ```java public ServiceType getType(); ``` - *Type:* [`org.cdk8s.plus21.ServiceType`](#org.cdk8s.plus21.ServiceType) Determines how the Service is exposed. --- ##### `clusterIP`Optional ```java public java.lang.String getClusterIP(); ``` - *Type:* `java.lang.String` The IP address of the service and is usually assigned randomly by the master. --- ##### `externalName`Optional ```java public java.lang.String getExternalName(); ``` - *Type:* `java.lang.String` The externalName to be used for EXTERNAL_NAME types. --- ### ServiceAccount - *Implements:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount), [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account #### Initializers ```java import org.cdk8s.plus21.ServiceAccount; ServiceAccount.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountToken(java.lang.Boolean) // .secrets(java.util.List) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `secrets`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret)> List of secrets allowed to be used by pods running using this ServiceAccount. > https://kubernetes.io/docs/concepts/configuration/secret --- #### Methods ##### `addSecret` ```java public addSecret(ISecret secr) ``` ###### `secr`Required - *Type:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) The secret. --- #### Static Functions ##### `fromServiceAccountName` ```java import org.cdk8s.plus21.ServiceAccount; ServiceAccount.fromServiceAccountName(java.lang.String name) ``` ###### `name`Required - *Type:* `java.lang.String` The name of the service account resource. --- #### Properties ##### `automountToken`Required ```java public java.lang.Boolean getAutomountToken(); ``` - *Type:* `java.lang.Boolean` Whether or not a token is automatically mounted for this service account. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `secrets`Required ```java public java.util.List getSecrets(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret)> List of secrets allowed to be used by pods running using this service account. Returns a copy. To add a secret, use `addSecret()`. --- ### ServiceAccountTokenSecret Create a secret for a service account token. > https://kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secrets #### Initializers ```java import org.cdk8s.plus21.ServiceAccountTokenSecret; ServiceAccountTokenSecret.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .serviceAccount(IServiceAccount) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `serviceAccount`Required - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) The service account to store a secret for. --- ### SshAuthSecret Create a secret for ssh authentication. > https://kubernetes.io/docs/concepts/configuration/secret/#ssh-authentication-secrets #### Initializers ```java import org.cdk8s.plus21.SshAuthSecret; SshAuthSecret.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .sshPrivateKey(java.lang.String) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `sshPrivateKey`Required - *Type:* `java.lang.String` The SSH private key to use. --- ### StatefulSet StatefulSet is the workload API object used to manage stateful applications. Manages the deployment and scaling of a set of Pods, and provides guarantees about the ordering and uniqueness of these Pods. Like a Deployment, a StatefulSet manages Pods that are based on an identical container spec. Unlike a Deployment, a StatefulSet maintains a sticky identity for each of their Pods. These pods are created from the same spec, but are not interchangeable: each has a persistent identifier that it maintains across any rescheduling. If you want to use storage volumes to provide persistence for your workload, you can use a StatefulSet as part of the solution. Although individual Pods in a StatefulSet are susceptible to failure, the persistent Pod identifiers make it easier to match existing volumes to the new Pods that replace any that have failed. ## Using StatefulSets StatefulSets are valuable for applications that require one or more of the following. * Stable, unique network identifiers. * Stable, persistent storage. * Ordered, graceful deployment and scaling. * Ordered, automated rolling updates. #### Initializers ```java import org.cdk8s.plus21.StatefulSet; StatefulSet.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) .service(Service) // .podManagementPolicy(PodManagementPolicy) // .replicas(java.lang.Number) // .strategy(StatefulSetUpdateStrategy) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `service`Required - *Type:* [`org.cdk8s.plus21.Service`](#org.cdk8s.plus21.Service) Service to associate with the statefulset. --- ##### `podManagementPolicy`Optional - *Type:* [`org.cdk8s.plus21.PodManagementPolicy`](#org.cdk8s.plus21.PodManagementPolicy) - *Default:* PodManagementPolicy.ORDERED_READY Pod management policy to use for this statefulset. --- ##### `replicas`Optional - *Type:* `java.lang.Number` - *Default:* 1 Number of desired pods. --- ##### `strategy`Optional - *Type:* [`org.cdk8s.plus21.StatefulSetUpdateStrategy`](#org.cdk8s.plus21.StatefulSetUpdateStrategy) - *Default:* RollingUpdate with partition set to 0 Indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template. --- #### Properties ##### `podManagementPolicy`Required ```java public PodManagementPolicy getPodManagementPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PodManagementPolicy`](#org.cdk8s.plus21.PodManagementPolicy) Management policy to use for the set. --- ##### `replicas`Required ```java public java.lang.Number getReplicas(); ``` - *Type:* `java.lang.Number` Number of desired pods. --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. --- ##### `strategy`Required ```java public StatefulSetUpdateStrategy getStrategy(); ``` - *Type:* [`org.cdk8s.plus21.StatefulSetUpdateStrategy`](#org.cdk8s.plus21.StatefulSetUpdateStrategy) The update startegy of this stateful set. --- ### TlsSecret Create a secret for storing a TLS certificate and its associated key. > https://kubernetes.io/docs/concepts/configuration/secret/#tls-secrets #### Initializers ```java import org.cdk8s.plus21.TlsSecret; TlsSecret.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .tlsCert(java.lang.String) .tlsKey(java.lang.String) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `tlsCert`Required - *Type:* `java.lang.String` The TLS cert. --- ##### `tlsKey`Required - *Type:* `java.lang.String` The TLS key. --- ### Workload A workload is an application running on Kubernetes. Whether your workload is a single component or several that work together, on Kubernetes you run it inside a set of pods. In Kubernetes, a Pod represents a set of running containers on your cluster. #### Initializers ```java import org.cdk8s.plus21.Workload; Workload.Builder.create(Construct scope, java.lang.String id) // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) .build(); ``` ##### `scope`Required - *Type:* [`software.constructs.Construct`](#software.constructs.Construct) --- ##### `id`Required - *Type:* `java.lang.String` --- ##### `metadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- #### Methods ##### `select` ```java public select(LabelSelector selectors) ``` ###### `selectors`Required - *Type:* [`org.cdk8s.plus21.LabelSelector`](#org.cdk8s.plus21.LabelSelector) --- #### Properties ##### `matchExpressions`Required ```java public java.util.List getMatchExpressions(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.LabelSelectorRequirement`](#org.cdk8s.plus21.LabelSelectorRequirement)> The expression matchers this workload will use in order to select pods. Returns a a copy. Use `select()` to add expression matchers. --- ##### `matchLabels`Required ```java public java.util.Map getMatchLabels(); ``` - *Type:* java.util.Map The label matchers this workload will use in order to select pods. Returns a a copy. Use `select()` to add label matchers. --- ##### `podMetadata`Required ```java public ApiObjectMetadataDefinition getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadataDefinition`](#org.cdk8s.ApiObjectMetadataDefinition) The metadata of pods in this workload. --- ##### `scheduling`Required ```java public WorkloadScheduling getScheduling(); ``` - *Type:* [`org.cdk8s.plus21.WorkloadScheduling`](#org.cdk8s.plus21.WorkloadScheduling) --- ## Structs ### AbstractPodProps Properties for `AbstractPod`. #### Initializer ```java import org.cdk8s.plus21.AbstractPodProps; AbstractPodProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ### AddDeploymentOptions Options to add a deployment to a service. #### Initializer ```java import org.cdk8s.plus21.AddDeploymentOptions; AddDeploymentOptions.builder() // .name(java.lang.String) // .nodePort(java.lang.Number) // .protocol(Protocol) // .targetPort(java.lang.Number) // .port(java.lang.Number) .build(); ``` ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. This maps to the 'Name' field in EndpointPort objects. Optional if only one ServicePort is defined on this service. --- ##### `nodePort`Optional ```java public java.lang.Number getNodePort(); ``` - *Type:* `java.lang.Number` - *Default:* auto-allocate a port if the ServiceType of this Service requires one. The port on each node on which this service is exposed when type=NodePort or LoadBalancer. Usually assigned by the system. If specified, it will be allocated to the service if unused or else creation of the service will fail. Default is to auto-allocate a port if the ServiceType of this Service requires one. > https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport --- ##### `protocol`Optional ```java public Protocol getProtocol(); ``` - *Type:* [`org.cdk8s.plus21.Protocol`](#org.cdk8s.plus21.Protocol) - *Default:* Protocol.TCP The IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP. --- ##### `targetPort`Optional ```java public java.lang.Number getTargetPort(); ``` - *Type:* `java.lang.Number` - *Default:* The value of `port` will be used. The port number the service will redirect to. --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* Copied from the first container of the deployment. The port number the service will bind to. --- ### AddDirectoryOptions Options for `configmap.addDirectory()`. #### Initializer ```java import org.cdk8s.plus21.AddDirectoryOptions; AddDirectoryOptions.builder() // .exclude(java.util.List) // .keyPrefix(java.lang.String) .build(); ``` ##### `exclude`Optional ```java public java.util.List getExclude(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* include all files Glob patterns to exclude when adding files. --- ##### `keyPrefix`Optional ```java public java.lang.String getKeyPrefix(); ``` - *Type:* `java.lang.String` - *Default:* "" A prefix to add to all keys in the config map. --- ### ApiResourceOptions Options for `ApiResource`. #### Initializer ```java import org.cdk8s.plus21.ApiResourceOptions; ApiResourceOptions.builder() .apiGroup(java.lang.String) .resourceType(java.lang.String) .build(); ``` ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. `authorization.k8s.io`). --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of the resource type as it appears in the relevant API endpoint. > https://kubernetes.io/docs/reference/access-authn-authz/rbac/#referring-to-resources --- ### AwsElasticBlockStorePersistentVolumeProps Properties for `AwsElasticBlockStorePersistentVolume`. #### Initializer ```java import org.cdk8s.plus21.AwsElasticBlockStorePersistentVolumeProps; AwsElasticBlockStorePersistentVolumeProps.builder() // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .volumeId(java.lang.String) // .fsType(java.lang.String) // .partition(java.lang.Number) // .readOnly(java.lang.Boolean) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional ```java public IPersistentVolumeClaim getClaim(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional ```java public java.util.List getMountOptions(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional ```java public PersistentVolumeReclaimPolicy getReclaimPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional ```java public PersistentVolumeMode getVolumeMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ##### `volumeId`Required ```java public java.lang.String getVolumeId(); ``` - *Type:* `java.lang.String` Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `fsType`Optional ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` - *Default:* No partition. The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify "true" to force and set the ReadOnly property in VolumeMounts to "true". > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ### AwsElasticBlockStoreVolumeOptions Options of `Volume.fromAwsElasticBlockStore`. #### Initializer ```java import org.cdk8s.plus21.AwsElasticBlockStoreVolumeOptions; AwsElasticBlockStoreVolumeOptions.builder() // .fsType(java.lang.String) // .name(java.lang.String) // .partition(java.lang.Number) // .readOnly(java.lang.Boolean) .build(); ``` ##### `fsType`Optional ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* auto-generated The volume name. --- ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` - *Default:* No partition. The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify "true" to force and set the ReadOnly property in VolumeMounts to "true". > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ### AzureDiskPersistentVolumeProps Properties for `AzureDiskPersistentVolume`. #### Initializer ```java import org.cdk8s.plus21.AzureDiskPersistentVolumeProps; AzureDiskPersistentVolumeProps.builder() // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .diskName(java.lang.String) .diskUri(java.lang.String) // .cachingMode(AzureDiskPersistentVolumeCachingMode) // .fsType(java.lang.String) // .kind(AzureDiskPersistentVolumeKind) // .readOnly(java.lang.Boolean) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional ```java public IPersistentVolumeClaim getClaim(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional ```java public java.util.List getMountOptions(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional ```java public PersistentVolumeReclaimPolicy getReclaimPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional ```java public PersistentVolumeMode getVolumeMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ##### `diskName`Required ```java public java.lang.String getDiskName(); ``` - *Type:* `java.lang.String` The Name of the data disk in the blob storage. --- ##### `diskUri`Required ```java public java.lang.String getDiskUri(); ``` - *Type:* `java.lang.String` The URI the data disk in the blob storage. --- ##### `cachingMode`Optional ```java public AzureDiskPersistentVolumeCachingMode getCachingMode(); ``` - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode`](#org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode) - *Default:* AzureDiskPersistentVolumeCachingMode.NONE. Host Caching mode. --- ##### `fsType`Optional ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type to mount. Must be a filesystem type supported by the host operating system. --- ##### `kind`Optional ```java public AzureDiskPersistentVolumeKind getKind(); ``` - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeKind`](#org.cdk8s.plus21.AzureDiskPersistentVolumeKind) - *Default:* AzureDiskPersistentVolumeKind.SHARED Kind of disk. --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Force the ReadOnly setting in VolumeMounts. --- ### AzureDiskVolumeOptions Options of `Volume.fromAzureDisk`. #### Initializer ```java import org.cdk8s.plus21.AzureDiskVolumeOptions; AzureDiskVolumeOptions.builder() // .cachingMode(AzureDiskPersistentVolumeCachingMode) // .fsType(java.lang.String) // .kind(AzureDiskPersistentVolumeKind) // .name(java.lang.String) // .readOnly(java.lang.Boolean) .build(); ``` ##### `cachingMode`Optional ```java public AzureDiskPersistentVolumeCachingMode getCachingMode(); ``` - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode`](#org.cdk8s.plus21.AzureDiskPersistentVolumeCachingMode) - *Default:* AzureDiskPersistentVolumeCachingMode.NONE. Host Caching mode. --- ##### `fsType`Optional ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type to mount. Must be a filesystem type supported by the host operating system. --- ##### `kind`Optional ```java public AzureDiskPersistentVolumeKind getKind(); ``` - *Type:* [`org.cdk8s.plus21.AzureDiskPersistentVolumeKind`](#org.cdk8s.plus21.AzureDiskPersistentVolumeKind) - *Default:* AzureDiskPersistentVolumeKind.SHARED Kind of disk. --- ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* auto-generated The volume name. --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Force the ReadOnly setting in VolumeMounts. --- ### BasicAuthSecretProps Options for `BasicAuthSecret`. #### Initializer ```java import org.cdk8s.plus21.BasicAuthSecretProps; BasicAuthSecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .password(java.lang.String) .username(java.lang.String) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `password`Required ```java public java.lang.String getPassword(); ``` - *Type:* `java.lang.String` The password or token for authentication. --- ##### `username`Required ```java public java.lang.String getUsername(); ``` - *Type:* `java.lang.String` The user name for authentication. --- ### ClusterRoleBindingProps Properties for `ClusterRoleBinding`. #### Initializer ```java import org.cdk8s.plus21.ClusterRoleBindingProps; ClusterRoleBindingProps.builder() // .metadata(ApiObjectMetadata) .role(IClusterRole) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `role`Required ```java public IClusterRole getRole(); ``` - *Type:* [`org.cdk8s.plus21.IClusterRole`](#org.cdk8s.plus21.IClusterRole) The role to bind to. --- ### ClusterRolePolicyRule Policy rule of a `ClusterRole. #### Initializer ```java import org.cdk8s.plus21.ClusterRolePolicyRule; ClusterRolePolicyRule.builder() .endpoints(java.util.List) .verbs(java.util.List) .build(); ``` ##### `endpoints`Required ```java public java.util.List getEndpoints(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint)> Endpoints this rule applies to. Can be either api resources or non api resources. --- ##### `verbs`Required ```java public java.util.List getVerbs(); ``` - *Type:* java.util.List<`java.lang.String`> Verbs to allow. (e.g ['get', 'watch']) --- ### ClusterRoleProps Properties for `ClusterRole`. #### Initializer ```java import org.cdk8s.plus21.ClusterRoleProps; ClusterRoleProps.builder() // .metadata(ApiObjectMetadata) // .aggregationLabels(java.util.Map) // .rules(java.util.List) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `aggregationLabels`Optional ```java public java.util.Map getAggregationLabels(); ``` - *Type:* java.util.Map Specify labels that should be used to locate ClusterRoles, whose rules will be automatically filled into this ClusterRole's rules. --- ##### `rules`Optional ```java public java.util.List getRules(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ClusterRolePolicyRule`](#org.cdk8s.plus21.ClusterRolePolicyRule)> - *Default:* [] A list of rules the role should allow. --- ### CommandProbeOptions Options for `Probe.fromCommand()`. #### Initializer ```java import org.cdk8s.plus21.CommandProbeOptions; CommandProbeOptions.builder() // .failureThreshold(java.lang.Number) // .initialDelaySeconds(Duration) // .periodSeconds(Duration) // .successThreshold(java.lang.Number) // .timeoutSeconds(Duration) .build(); ``` ##### `failureThreshold`Optional ```java public java.lang.Number getFailureThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 3 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. --- ##### `initialDelaySeconds`Optional ```java public Duration getInitialDelaySeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* immediate Number of seconds after the container has started before liveness probes are initiated. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ##### `periodSeconds`Optional ```java public Duration getPeriodSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(10) Minimum value is 1. How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. --- ##### `successThreshold`Optional ```java public java.lang.Number getSuccessThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 1 Must be 1 for liveness and startup. Minimum value is 1. Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. --- ##### `timeoutSeconds`Optional ```java public Duration getTimeoutSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(1) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ### CommonSecretProps Common properties for `Secret`. #### Initializer ```java import org.cdk8s.plus21.CommonSecretProps; CommonSecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ### ConfigMapProps Properties for initialization of `ConfigMap`. #### Initializer ```java import org.cdk8s.plus21.ConfigMapProps; ConfigMapProps.builder() // .metadata(ApiObjectMetadata) // .binaryData(java.util.Map) // .data(java.util.Map) // .immutable(java.lang.Boolean) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `binaryData`Optional ```java public java.util.Map getBinaryData(); ``` - *Type:* java.util.Map BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. You can also add binary data using `configMap.addBinaryData()`. --- ##### `data`Optional ```java public java.util.Map getData(); ``` - *Type:* java.util.Map Data contains the configuration data. Each key must consist of alphanumeric characters, '-', '_' or '.'. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process. You can also add data using `configMap.addData()`. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ### ConfigMapVolumeOptions Options for the ConfigMap-based volume. #### Initializer ```java import org.cdk8s.plus21.ConfigMapVolumeOptions; ConfigMapVolumeOptions.builder() // .defaultMode(java.lang.Number) // .items(java.util.Map) // .name(java.lang.String) // .optional(java.lang.Boolean) .build(); ``` ##### `defaultMode`Optional ```java public java.lang.Number getDefaultMode(); ``` - *Type:* `java.lang.Number` - *Default:* 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set. Mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set. --- ##### `items`Optional ```java public java.util.Map getItems(); ``` - *Type:* java.util.Map - *Default:* no mapping If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. --- ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* auto-generated The volume name. --- ##### `optional`Optional ```java public java.lang.Boolean getOptional(); ``` - *Type:* `java.lang.Boolean` - *Default:* undocumented Specify whether the ConfigMap or its keys must be defined. --- ### ContainerLifecycle Container lifecycle properties. #### Initializer ```java import org.cdk8s.plus21.ContainerLifecycle; ContainerLifecycle.builder() // .postStart(Handler) // .preStop(Handler) .build(); ``` ##### `postStart`Optional ```java public Handler getPostStart(); ``` - *Type:* [`org.cdk8s.plus21.Handler`](#org.cdk8s.plus21.Handler) - *Default:* No post start handler. This hook is executed immediately after a container is created. However, there is no guarantee that the hook will execute before the container ENTRYPOINT. --- ##### `preStop`Optional ```java public Handler getPreStop(); ``` - *Type:* [`org.cdk8s.plus21.Handler`](#org.cdk8s.plus21.Handler) - *Default:* No pre stop handler. This hook is called immediately before a container is terminated due to an API request or management event such as a liveness/startup probe failure, preemption, resource contention and others. A call to the PreStop hook fails if the container is already in a terminated or completed state and the hook must complete before the TERM signal to stop the container can be sent. The Pod's termination grace period countdown begins before the PreStop hook is executed, so regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. No parameters are passed to the handler. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination --- ### ContainerProps Properties for creating a container. #### Initializer ```java import org.cdk8s.plus21.ContainerProps; ContainerProps.builder() .image(java.lang.String) // .args(java.util.List) // .command(java.util.List) // .envFrom(java.util.List) // .envVariables(java.util.Map) // .imagePullPolicy(ImagePullPolicy) // .lifecycle(ContainerLifecycle) // .liveness(Probe) // .name(java.lang.String) // .port(java.lang.Number) // .readiness(Probe) // .resources(ContainerResources) // .securityContext(ContainerSecurityContextProps) // .startup(Probe) // .volumeMounts(java.util.List) // .workingDir(java.lang.String) .build(); ``` ##### `image`Required ```java public java.lang.String getImage(); ``` - *Type:* `java.lang.String` Docker image name. --- ##### `args`Optional ```java public java.util.List getArgs(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* [] Arguments to the entrypoint. The docker image's CMD is used if `command` is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. > https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell --- ##### `command`Optional ```java public java.util.List getCommand(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* The docker image's ENTRYPOINT. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell --- ##### `envFrom`Optional ```java public java.util.List getEnvFrom(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.EnvFrom`](#org.cdk8s.plus21.EnvFrom)> - *Default:* No sources. List of sources to populate environment variables in the container. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by the `envVariables` property with a duplicate key will take precedence. --- ##### `envVariables`Optional ```java public java.util.Map getEnvVariables(); ``` - *Type:* java.util.Map - *Default:* No environment variables. Environment variables to set in the container. --- ##### `imagePullPolicy`Optional ```java public ImagePullPolicy getImagePullPolicy(); ``` - *Type:* [`org.cdk8s.plus21.ImagePullPolicy`](#org.cdk8s.plus21.ImagePullPolicy) - *Default:* ImagePullPolicy.ALWAYS Image pull policy for this container. --- ##### `lifecycle`Optional ```java public ContainerLifecycle getLifecycle(); ``` - *Type:* [`org.cdk8s.plus21.ContainerLifecycle`](#org.cdk8s.plus21.ContainerLifecycle) Describes actions that the management system should take in response to container lifecycle events. --- ##### `liveness`Optional ```java public Probe getLiveness(); ``` - *Type:* [`org.cdk8s.plus21.Probe`](#org.cdk8s.plus21.Probe) - *Default:* no liveness probe is defined Periodic probe of container liveness. Container will be restarted if the probe fails. --- ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* 'main' Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated. --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* No port is exposed. Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536. --- ##### `readiness`Optional ```java public Probe getReadiness(); ``` - *Type:* [`org.cdk8s.plus21.Probe`](#org.cdk8s.plus21.Probe) - *Default:* no readiness probe is defined Determines when the container is ready to serve traffic. --- ##### `resources`Optional ```java public ContainerResources getResources(); ``` - *Type:* [`org.cdk8s.plus21.ContainerResources`](#org.cdk8s.plus21.ContainerResources) Compute resources (CPU and memory requests and limits) required by the container. > https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ --- ##### `securityContext`Optional ```java public ContainerSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.ContainerSecurityContextProps`](#org.cdk8s.plus21.ContainerSecurityContextProps) - *Default:* ensureNonRoot: false privileged: false readOnlyRootFilesystem: false SecurityContext defines the security options the container should be run with. If set, the fields override equivalent fields of the pod's security context. > https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ --- ##### `startup`Optional ```java public Probe getStartup(); ``` - *Type:* [`org.cdk8s.plus21.Probe`](#org.cdk8s.plus21.Probe) - *Default:* no startup probe is defined. StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully --- ##### `volumeMounts`Optional ```java public java.util.List getVolumeMounts(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.VolumeMount`](#org.cdk8s.plus21.VolumeMount)> Pod volumes to mount into the container's filesystem. Cannot be updated. --- ##### `workingDir`Optional ```java public java.lang.String getWorkingDir(); ``` - *Type:* `java.lang.String` - *Default:* The container runtime's default. Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated. --- ### ContainerResources CPU and memory compute resources. #### Initializer ```java import org.cdk8s.plus21.ContainerResources; ContainerResources.builder() .cpu(CpuResources) .memory(MemoryResources) .build(); ``` ##### `cpu`Required ```java public CpuResources getCpu(); ``` - *Type:* [`org.cdk8s.plus21.CpuResources`](#org.cdk8s.plus21.CpuResources) --- ##### `memory`Required ```java public MemoryResources getMemory(); ``` - *Type:* [`org.cdk8s.plus21.MemoryResources`](#org.cdk8s.plus21.MemoryResources) --- ### ContainerSecurityContextProps Properties for `ContainerSecurityContext`. #### Initializer ```java import org.cdk8s.plus21.ContainerSecurityContextProps; ContainerSecurityContextProps.builder() // .ensureNonRoot(java.lang.Boolean) // .group(java.lang.Number) // .privileged(java.lang.Boolean) // .readOnlyRootFilesystem(java.lang.Boolean) // .user(java.lang.Number) .build(); ``` ##### `ensureNonRoot`Optional ```java public java.lang.Boolean getEnsureNonRoot(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. --- ##### `group`Optional ```java public java.lang.Number getGroup(); ``` - *Type:* `java.lang.Number` - *Default:* Group configured by container runtime The GID to run the entrypoint of the container process. --- ##### `privileged`Optional ```java public java.lang.Boolean getPrivileged(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. --- ##### `readOnlyRootFilesystem`Optional ```java public java.lang.Boolean getReadOnlyRootFilesystem(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Whether this container has a read-only root filesystem. --- ##### `user`Optional ```java public java.lang.Number getUser(); ``` - *Type:* `java.lang.Number` - *Default:* User specified in image metadata The UID to run the entrypoint of the container process. --- ### CpuResources CPU request and limit. #### Initializer ```java import org.cdk8s.plus21.CpuResources; CpuResources.builder() .limit(Cpu) .request(Cpu) .build(); ``` ##### `limit`Required ```java public Cpu getLimit(); ``` - *Type:* [`org.cdk8s.plus21.Cpu`](#org.cdk8s.plus21.Cpu) --- ##### `request`Required ```java public Cpu getRequest(); ``` - *Type:* [`org.cdk8s.plus21.Cpu`](#org.cdk8s.plus21.Cpu) --- ### DaemonSetProps Properties for `DaemonSet`. #### Initializer ```java import org.cdk8s.plus21.DaemonSetProps; DaemonSetProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) // .minReadySeconds(java.lang.Number) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional ```java public ApiObjectMetadata getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional ```java public java.lang.Boolean getSelect(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `minReadySeconds`Optional ```java public java.lang.Number getMinReadySeconds(); ``` - *Type:* `java.lang.Number` - *Default:* 0 Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. --- ### DeploymentProps Properties for `Deployment`. #### Initializer ```java import org.cdk8s.plus21.DeploymentProps; DeploymentProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) // .minReady(Duration) // .progressDeadline(Duration) // .replicas(java.lang.Number) // .strategy(DeploymentStrategy) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional ```java public ApiObjectMetadata getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional ```java public java.lang.Boolean getSelect(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `minReady`Optional ```java public Duration getMinReady(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(0) Minimum duration for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Zero means the pod will be considered available as soon as it is ready. > https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#min-ready-seconds --- ##### `progressDeadline`Optional ```java public Duration getProgressDeadline(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(600) The maximum duration for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. > https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#progress-deadline-seconds --- ##### `replicas`Optional ```java public java.lang.Number getReplicas(); ``` - *Type:* `java.lang.Number` - *Default:* 1 Number of desired pods. --- ##### `strategy`Optional ```java public DeploymentStrategy getStrategy(); ``` - *Type:* [`org.cdk8s.plus21.DeploymentStrategy`](#org.cdk8s.plus21.DeploymentStrategy) - *Default:* RollingUpdate with maxSurge and maxUnavailable set to 25%. Specifies the strategy used to replace old Pods by new ones. --- ### DeploymentStrategyRollingUpdateOptions Options for `DeploymentStrategy.rollingUpdate`. #### Initializer ```java import org.cdk8s.plus21.DeploymentStrategyRollingUpdateOptions; DeploymentStrategyRollingUpdateOptions.builder() // .maxSurge(PercentOrAbsolute) // .maxUnavailable(PercentOrAbsolute) .build(); ``` ##### `maxSurge`Optional ```java public PercentOrAbsolute getMaxSurge(); ``` - *Type:* [`org.cdk8s.plus21.PercentOrAbsolute`](#org.cdk8s.plus21.PercentOrAbsolute) - *Default:* '25%' The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. This can not be 0 if `maxUnavailable` is 0. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods. --- ##### `maxUnavailable`Optional ```java public PercentOrAbsolute getMaxUnavailable(); ``` - *Type:* [`org.cdk8s.plus21.PercentOrAbsolute`](#org.cdk8s.plus21.PercentOrAbsolute) - *Default:* '25%' The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if `maxSurge` is 0. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods. --- ### DnsOption Custom DNS option. #### Initializer ```java import org.cdk8s.plus21.DnsOption; DnsOption.builder() .name(java.lang.String) // .value(java.lang.String) .build(); ``` ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` Option name. --- ##### `value`Optional ```java public java.lang.String getValue(); ``` - *Type:* `java.lang.String` - *Default:* No value. Option value. --- ### DockerConfigSecretProps Options for `DockerConfigSecret`. #### Initializer ```java import org.cdk8s.plus21.DockerConfigSecretProps; DockerConfigSecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .data(java.util.Map) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `data`Required ```java public java.util.Map getData(); ``` - *Type:* java.util.Map JSON content to provide for the `~/.docker/config.json` file. This will be stringified and inserted as stringData. > https://docs.docker.com/engine/reference/commandline/cli/#sample-configuration-file --- ### EmptyDirVolumeOptions Options for volumes populated with an empty directory. #### Initializer ```java import org.cdk8s.plus21.EmptyDirVolumeOptions; EmptyDirVolumeOptions.builder() // .medium(EmptyDirMedium) // .sizeLimit(Size) .build(); ``` ##### `medium`Optional ```java public EmptyDirMedium getMedium(); ``` - *Type:* [`org.cdk8s.plus21.EmptyDirMedium`](#org.cdk8s.plus21.EmptyDirMedium) - *Default:* EmptyDirMedium.DEFAULT By default, emptyDir volumes are stored on whatever medium is backing the node - that might be disk or SSD or network storage, depending on your environment. However, you can set the emptyDir.medium field to `EmptyDirMedium.MEMORY` to tell Kubernetes to mount a tmpfs (RAM-backed filesystem) for you instead. While tmpfs is very fast, be aware that unlike disks, tmpfs is cleared on node reboot and any files you write will count against your Container's memory limit. --- ##### `sizeLimit`Optional ```java public Size getSizeLimit(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* limit is undefined Total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. --- ### EnvValueFromConfigMapOptions Options to specify an envionment variable value from a ConfigMap key. #### Initializer ```java import org.cdk8s.plus21.EnvValueFromConfigMapOptions; EnvValueFromConfigMapOptions.builder() // .optional(java.lang.Boolean) .build(); ``` ##### `optional`Optional ```java public java.lang.Boolean getOptional(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify whether the ConfigMap or its key must be defined. --- ### EnvValueFromFieldRefOptions Options to specify an environment variable value from a field reference. #### Initializer ```java import org.cdk8s.plus21.EnvValueFromFieldRefOptions; EnvValueFromFieldRefOptions.builder() // .apiVersion(java.lang.String) // .key(java.lang.String) .build(); ``` ##### `apiVersion`Optional ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` Version of the schema the FieldPath is written in terms of. --- ##### `key`Optional ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` The key to select the pod label or annotation. --- ### EnvValueFromProcessOptions Options to specify an environment variable value from the process environment. #### Initializer ```java import org.cdk8s.plus21.EnvValueFromProcessOptions; EnvValueFromProcessOptions.builder() // .required(java.lang.Boolean) .build(); ``` ##### `required`Optional ```java public java.lang.Boolean getRequired(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify whether the key must exist in the environment. If this is set to true, and the key does not exist, an error will thrown. --- ### EnvValueFromResourceOptions Options to specify an environment variable value from a resource. #### Initializer ```java import org.cdk8s.plus21.EnvValueFromResourceOptions; EnvValueFromResourceOptions.builder() // .container(Container) // .divisor(java.lang.String) .build(); ``` ##### `container`Optional ```java public Container getContainer(); ``` - *Type:* [`org.cdk8s.plus21.Container`](#org.cdk8s.plus21.Container) The container to select the value from. --- ##### `divisor`Optional ```java public java.lang.String getDivisor(); ``` - *Type:* `java.lang.String` The output format of the exposed resource. --- ### EnvValueFromSecretOptions Options to specify an environment variable value from a Secret. #### Initializer ```java import org.cdk8s.plus21.EnvValueFromSecretOptions; EnvValueFromSecretOptions.builder() // .optional(java.lang.Boolean) .build(); ``` ##### `optional`Optional ```java public java.lang.Boolean getOptional(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify whether the Secret or its key must be defined. --- ### ExposeDeploymentViaIngressOptions Options for exposing a deployment via an ingress. #### Initializer ```java import org.cdk8s.plus21.ExposeDeploymentViaIngressOptions; ExposeDeploymentViaIngressOptions.builder() // .name(java.lang.String) // .port(java.lang.Number) // .protocol(Protocol) // .serviceType(ServiceType) // .targetPort(java.lang.Number) // .ingress(IngressV1Beta1) .build(); ``` ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* undefined Uses the system generated name. The name of the service to expose. This will be set on the Service.metadata and must be a DNS_LABEL --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* Copied from the container of the deployment. If a port could not be determined, throws an error. The port that the service should serve on. --- ##### `protocol`Optional ```java public Protocol getProtocol(); ``` - *Type:* [`org.cdk8s.plus21.Protocol`](#org.cdk8s.plus21.Protocol) - *Default:* Protocol.TCP The IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP. --- ##### `serviceType`Optional ```java public ServiceType getServiceType(); ``` - *Type:* [`org.cdk8s.plus21.ServiceType`](#org.cdk8s.plus21.ServiceType) - *Default:* ClusterIP. The type of the exposed service. --- ##### `targetPort`Optional ```java public java.lang.Number getTargetPort(); ``` - *Type:* `java.lang.Number` - *Default:* The port of the first container in the deployment (ie. containers[0].port) The port number the service will redirect to. --- ##### `ingress`Optional ```java public IngressV1Beta1 getIngress(); ``` - *Type:* [`org.cdk8s.plus21.IngressV1Beta1`](#org.cdk8s.plus21.IngressV1Beta1) - *Default:* An ingress will be automatically created. The ingress to add rules to. --- ### ExposeDeploymentViaServiceOptions Options for exposing a deployment via a service. #### Initializer ```java import org.cdk8s.plus21.ExposeDeploymentViaServiceOptions; ExposeDeploymentViaServiceOptions.builder() // .name(java.lang.String) // .port(java.lang.Number) // .protocol(Protocol) // .serviceType(ServiceType) // .targetPort(java.lang.Number) .build(); ``` ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* undefined Uses the system generated name. The name of the service to expose. This will be set on the Service.metadata and must be a DNS_LABEL --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* Copied from the container of the deployment. If a port could not be determined, throws an error. The port that the service should serve on. --- ##### `protocol`Optional ```java public Protocol getProtocol(); ``` - *Type:* [`org.cdk8s.plus21.Protocol`](#org.cdk8s.plus21.Protocol) - *Default:* Protocol.TCP The IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP. --- ##### `serviceType`Optional ```java public ServiceType getServiceType(); ``` - *Type:* [`org.cdk8s.plus21.ServiceType`](#org.cdk8s.plus21.ServiceType) - *Default:* ClusterIP. The type of the exposed service. --- ##### `targetPort`Optional ```java public java.lang.Number getTargetPort(); ``` - *Type:* `java.lang.Number` - *Default:* The port of the first container in the deployment (ie. containers[0].port) The port number the service will redirect to. --- ### ExposeServiceViaIngressOptions Options for exposing a service using an ingress. #### Initializer ```java import org.cdk8s.plus21.ExposeServiceViaIngressOptions; ExposeServiceViaIngressOptions.builder() // .ingress(IngressV1Beta1) .build(); ``` ##### `ingress`Optional ```java public IngressV1Beta1 getIngress(); ``` - *Type:* [`org.cdk8s.plus21.IngressV1Beta1`](#org.cdk8s.plus21.IngressV1Beta1) - *Default:* An ingress will be automatically created. The ingress to add rules to. --- ### GCEPersistentDiskPersistentVolumeProps Properties for `GCEPersistentDiskPersistentVolume`. #### Initializer ```java import org.cdk8s.plus21.GCEPersistentDiskPersistentVolumeProps; GCEPersistentDiskPersistentVolumeProps.builder() // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .pdName(java.lang.String) // .fsType(java.lang.String) // .partition(java.lang.Number) // .readOnly(java.lang.Boolean) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional ```java public IPersistentVolumeClaim getClaim(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional ```java public java.util.List getMountOptions(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional ```java public PersistentVolumeReclaimPolicy getReclaimPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional ```java public PersistentVolumeMode getVolumeMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ##### `pdName`Required ```java public java.lang.String getPdName(); ``` - *Type:* `java.lang.String` Unique name of the PD resource in GCE. Used to identify the disk in GCE. > https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk --- ##### `fsType`Optional ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` - *Default:* No partition. The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify "true" to force and set the ReadOnly property in VolumeMounts to "true". > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ### GCEPersistentDiskVolumeOptions Options of `Volume.fromGcePersistentDisk`. #### Initializer ```java import org.cdk8s.plus21.GCEPersistentDiskVolumeOptions; GCEPersistentDiskVolumeOptions.builder() // .fsType(java.lang.String) // .name(java.lang.String) // .partition(java.lang.Number) // .readOnly(java.lang.Boolean) .build(); ``` ##### `fsType`Optional ```java public java.lang.String getFsType(); ``` - *Type:* `java.lang.String` - *Default:* 'ext4' Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* auto-generated The volume name. --- ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` - *Default:* No partition. The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Specify "true" to force and set the ReadOnly property in VolumeMounts to "true". > https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore --- ### GroupProps Properties for `Group`. #### Initializer ```java import org.cdk8s.plus21.GroupProps; GroupProps.builder() .name(java.lang.String) .build(); ``` ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of the group. --- ### HandlerFromHttpGetOptions Options for `Handler.fromHttpGet`. #### Initializer ```java import org.cdk8s.plus21.HandlerFromHttpGetOptions; HandlerFromHttpGetOptions.builder() // .port(java.lang.Number) .build(); ``` ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* defaults to `container.port`. The TCP port to use when sending the GET request. --- ### HandlerFromTcpSocketOptions Options for `Handler.fromTcpSocket`. #### Initializer ```java import org.cdk8s.plus21.HandlerFromTcpSocketOptions; HandlerFromTcpSocketOptions.builder() // .host(java.lang.String) // .port(java.lang.Number) .build(); ``` ##### `host`Optional ```java public java.lang.String getHost(); ``` - *Type:* `java.lang.String` - *Default:* defaults to the pod IP The host name to connect to on the container. --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* defaults to `container.port`. The TCP port to connect to on the container. --- ### HostAlias HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's /etc/hosts file. #### Initializer ```java import org.cdk8s.plus21.HostAlias; HostAlias.builder() .hostnames(java.util.List) .ip(java.lang.String) .build(); ``` ##### `hostnames`Required ```java public java.util.List getHostnames(); ``` - *Type:* java.util.List<`java.lang.String`> Hostnames for the chosen IP address. --- ##### `ip`Required ```java public java.lang.String getIp(); ``` - *Type:* `java.lang.String` IP address of the host file entry. --- ### HttpGetProbeOptions Options for `Probe.fromHttpGet()`. #### Initializer ```java import org.cdk8s.plus21.HttpGetProbeOptions; HttpGetProbeOptions.builder() // .failureThreshold(java.lang.Number) // .initialDelaySeconds(Duration) // .periodSeconds(Duration) // .successThreshold(java.lang.Number) // .timeoutSeconds(Duration) // .port(java.lang.Number) .build(); ``` ##### `failureThreshold`Optional ```java public java.lang.Number getFailureThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 3 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. --- ##### `initialDelaySeconds`Optional ```java public Duration getInitialDelaySeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* immediate Number of seconds after the container has started before liveness probes are initiated. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ##### `periodSeconds`Optional ```java public Duration getPeriodSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(10) Minimum value is 1. How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. --- ##### `successThreshold`Optional ```java public java.lang.Number getSuccessThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 1 Must be 1 for liveness and startup. Minimum value is 1. Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. --- ##### `timeoutSeconds`Optional ```java public Duration getTimeoutSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(1) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* defaults to `container.port`. The TCP port to use when sending the GET request. --- ### IngressV1Beta1Props Properties for `Ingress`. #### Initializer ```java import org.cdk8s.plus21.IngressV1Beta1Props; IngressV1Beta1Props.builder() // .metadata(ApiObjectMetadata) // .defaultBackend(IngressV1Beta1Backend) // .rules(java.util.List) // .tls(java.util.List) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `defaultBackend`Optional ```java public IngressV1Beta1Backend getDefaultBackend(); ``` - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) The default backend services requests that do not match any rule. Using this option or the `addDefaultBackend()` method is equivalent to adding a rule with both `path` and `host` undefined. --- ##### `rules`Optional ```java public java.util.List getRules(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.IngressV1Beta1Rule`](#org.cdk8s.plus21.IngressV1Beta1Rule)> Routing rules for this ingress. Each rule must define an `IngressBackend` that will receive the requests that match this rule. If both `host` and `path` are not specifiec, this backend will be used as the default backend of the ingress. You can also add rules later using `addRule()`, `addHostRule()`, `addDefaultBackend()` and `addHostDefaultBackend()`. --- ##### `tls`Optional ```java public java.util.List getTls(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.IngressV1Beta1Tls`](#org.cdk8s.plus21.IngressV1Beta1Tls)> TLS settings for this ingress. Using this option tells the ingress controller to expose a TLS endpoint. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI. --- ### IngressV1Beta1Rule Represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching path. #### Initializer ```java import org.cdk8s.plus21.IngressV1Beta1Rule; IngressV1Beta1Rule.builder() .backend(IngressV1Beta1Backend) // .host(java.lang.String) // .path(java.lang.String) .build(); ``` ##### `backend`Required ```java public IngressV1Beta1Backend getBackend(); ``` - *Type:* [`org.cdk8s.plus21.IngressV1Beta1Backend`](#org.cdk8s.plus21.IngressV1Beta1Backend) Backend defines the referenced service endpoint to which the traffic will be forwarded to. --- ##### `host`Optional ```java public java.lang.String getHost(); ``` - *Type:* `java.lang.String` - *Default:* If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue. Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in the RFC: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to the IP in the Spec of the parent Ingress. 2. The `:` delimiter is not respected because ports are not allowed. Currently the port of an Ingress is implicitly :80 for http and :443 for https. Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. --- ##### `path`Optional ```java public java.lang.String getPath(); ``` - *Type:* `java.lang.String` - *Default:* If unspecified, the path defaults to a catch all sending traffic to the backend. Path is an extended POSIX regex as defined by IEEE Std 1003.1, (i.e this follows the egrep/unix syntax, not the perl syntax) matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. --- ### IngressV1Beta1Tls Represents the TLS configuration mapping that is passed to the ingress controller for SSL termination. #### Initializer ```java import org.cdk8s.plus21.IngressV1Beta1Tls; IngressV1Beta1Tls.builder() // .hosts(java.util.List) // .secret(ISecret) .build(); ``` ##### `hosts`Optional ```java public java.util.List getHosts(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* If unspecified, it defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress. Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the TLS Secret. --- ##### `secret`Optional ```java public ISecret getSecret(); ``` - *Type:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) - *Default:* If unspecified, it allows SSL routing based on SNI hostname. Secret is the secret that contains the certificate and key used to terminate SSL traffic on 443. If the SNI host in a listener conflicts with the "Host" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing. --- ### JobProps Properties for `Job`. #### Initializer ```java import org.cdk8s.plus21.JobProps; JobProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) // .activeDeadline(Duration) // .backoffLimit(java.lang.Number) // .ttlAfterFinished(Duration) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional ```java public ApiObjectMetadata getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional ```java public java.lang.Boolean getSelect(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `activeDeadline`Optional ```java public Duration getActiveDeadline(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* If unset, then there is no deadline. Specifies the duration the job may be active before the system tries to terminate it. --- ##### `backoffLimit`Optional ```java public java.lang.Number getBackoffLimit(); ``` - *Type:* `java.lang.Number` - *Default:* If not set, system defaults to 6. Specifies the number of retries before marking this job failed. --- ##### `ttlAfterFinished`Optional ```java public Duration getTtlAfterFinished(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* If this field is unset, the Job won't be automatically deleted. Limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the `TTLAfterFinished` feature. --- ### LabelSelectorRequirement A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. #### Initializer ```java import org.cdk8s.plus21.LabelSelectorRequirement; LabelSelectorRequirement.builder() .key(java.lang.String) .operator(java.lang.String) // .values(java.util.List) .build(); ``` ##### `key`Required ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` The label key that the selector applies to. --- ##### `operator`Required ```java public java.lang.String getOperator(); ``` - *Type:* `java.lang.String` Represents a key's relationship to a set of values. --- ##### `values`Optional ```java public java.util.List getValues(); ``` - *Type:* java.util.List<`java.lang.String`> An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. --- ### MemoryResources Memory request and limit. #### Initializer ```java import org.cdk8s.plus21.MemoryResources; MemoryResources.builder() .limit(Size) .request(Size) .build(); ``` ##### `limit`Required ```java public Size getLimit(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) --- ##### `request`Required ```java public Size getRequest(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) --- ### MountOptions Options for mounts. #### Initializer ```java import org.cdk8s.plus21.MountOptions; MountOptions.builder() // .propagation(MountPropagation) // .readOnly(java.lang.Boolean) // .subPath(java.lang.String) // .subPathExpr(java.lang.String) .build(); ``` ##### `propagation`Optional ```java public MountPropagation getPropagation(); ``` - *Type:* [`org.cdk8s.plus21.MountPropagation`](#org.cdk8s.plus21.MountPropagation) - *Default:* MountPropagation.NONE Determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. Mount propagation allows for sharing volumes mounted by a Container to other Containers in the same Pod, or even to other Pods on the same node. --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false. --- ##### `subPath`Optional ```java public java.lang.String getSubPath(); ``` - *Type:* `java.lang.String` - *Default:* "" the volume's root Path within the volume from which the container's volume should be mounted.). --- ##### `subPathExpr`Optional ```java public java.lang.String getSubPathExpr(); ``` - *Type:* `java.lang.String` - *Default:* "" volume's root. Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). `subPathExpr` and `subPath` are mutually exclusive. --- ### NamespaceProps Properties for `Namespace`. #### Initializer ```java import org.cdk8s.plus21.NamespaceProps; NamespaceProps.builder() // .metadata(ApiObjectMetadata) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ### NamespaceSelectorConfig Configuration for selecting namespaces. #### Initializer ```java import org.cdk8s.plus21.NamespaceSelectorConfig; NamespaceSelectorConfig.builder() // .labelSelector(LabelSelector) // .names(java.util.List) .build(); ``` ##### `labelSelector`Optional ```java public LabelSelector getLabelSelector(); ``` - *Type:* [`org.cdk8s.plus21.LabelSelector`](#org.cdk8s.plus21.LabelSelector) A selector to select namespaces by labels. --- ##### `names`Optional ```java public java.util.List getNames(); ``` - *Type:* java.util.List<`java.lang.String`> A list of names to select namespaces by names. --- ### NamespacesSelectOptions Options for `Namespaces.select`. #### Initializer ```java import org.cdk8s.plus21.NamespacesSelectOptions; NamespacesSelectOptions.builder() // .expressions(java.util.List) // .labels(java.util.Map) // .names(java.util.List) .build(); ``` ##### `expressions`Optional ```java public java.util.List getExpressions(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.LabelExpression`](#org.cdk8s.plus21.LabelExpression)> - *Default:* no selector requirements. Namespaces must satisfy these selectors. The selectors query labels, just like the `labels` property, but they provide a more advanced matching mechanism. --- ##### `labels`Optional ```java public java.util.Map getLabels(); ``` - *Type:* java.util.Map - *Default:* no strict labels requirements. Labels the namespaces must have. This is equivalent to using an 'Is' selector. --- ##### `names`Optional ```java public java.util.List getNames(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* no name requirements. Namespaces names must be one of these. --- ### NodeTaintQueryOptions Options for `NodeTaintQuery`. #### Initializer ```java import org.cdk8s.plus21.NodeTaintQueryOptions; NodeTaintQueryOptions.builder() // .effect(TaintEffect) // .evictAfter(Duration) .build(); ``` ##### `effect`Optional ```java public TaintEffect getEffect(); ``` - *Type:* [`org.cdk8s.plus21.TaintEffect`](#org.cdk8s.plus21.TaintEffect) - *Default:* all effects are matched. The taint effect to match. --- ##### `evictAfter`Optional ```java public Duration getEvictAfter(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* bound forever. How much time should a pod that tolerates the `NO_EXECUTE` effect be bound to the node. Only applies for the `NO_EXECUTE` effect. --- ### PathMapping Maps a string key to a path within a volume. #### Initializer ```java import org.cdk8s.plus21.PathMapping; PathMapping.builder() .path(java.lang.String) // .mode(java.lang.Number) .build(); ``` ##### `path`Required ```java public java.lang.String getPath(); ``` - *Type:* `java.lang.String` The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'. --- ##### `mode`Optional ```java public java.lang.Number getMode(); ``` - *Type:* `java.lang.Number` Optional: mode bits to use on this file, must be a value between 0 and 0777. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set. --- ### PersistentVolumeClaimProps Properties for `PersistentVolumeClaim`. #### Initializer ```java import org.cdk8s.plus21.PersistentVolumeClaimProps; PersistentVolumeClaimProps.builder() // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .storage(Size) // .storageClassName(java.lang.String) // .volume(IPersistentVolume) // .volumeMode(PersistentVolumeMode) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes requirement. Contains the access modes the volume should support. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1 --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No storage requirement. Minimum storage size the volume should have. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` - *Default:* Not set. Name of the StorageClass required by the claim. When this property is not set, the behavior is as follows:. * If the admission plugin is turned on, the storage class marked as default will be used. * If the admission plugin is turned off, the pvc can only be bound to volumes without a storage class. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 --- ##### `volume`Optional ```java public IPersistentVolume getVolume(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume) - *Default:* No specific volume binding. The PersistentVolume backing this claim. The control plane still checks that storage class, access modes, and requested storage size on the volume are valid. Note that in order to guarantee a proper binding, the volume should also define a `claimRef` referring to this claim. Otherwise, the volume may be claimed be other pvc's before it gets a chance to bind to this one. If the volume is managed (i.e not imported), you can use `pv.claim()` to easily create a bi-directional bounded claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#binding. --- ##### `volumeMode`Optional ```java public PersistentVolumeMode getVolumeMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ### PersistentVolumeClaimVolumeOptions Options for a PersistentVolumeClaim-based volume. #### Initializer ```java import org.cdk8s.plus21.PersistentVolumeClaimVolumeOptions; PersistentVolumeClaimVolumeOptions.builder() // .name(java.lang.String) // .readOnly(java.lang.Boolean) .build(); ``` ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* Derived from the PVC name. The volume name. --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Will force the ReadOnly setting in VolumeMounts. --- ### PersistentVolumeProps Properties for `PersistentVolume`. #### Initializer ```java import org.cdk8s.plus21.PersistentVolumeProps; PersistentVolumeProps.builder() // .metadata(ApiObjectMetadata) // .accessModes(java.util.List) // .claim(IPersistentVolumeClaim) // .mountOptions(java.util.List) // .reclaimPolicy(PersistentVolumeReclaimPolicy) // .storage(Size) // .storageClassName(java.lang.String) // .volumeMode(PersistentVolumeMode) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `accessModes`Optional ```java public java.util.List getAccessModes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.PersistentVolumeAccessMode`](#org.cdk8s.plus21.PersistentVolumeAccessMode)> - *Default:* No access modes. Contains all ways the volume can be mounted. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes --- ##### `claim`Optional ```java public IPersistentVolumeClaim getClaim(); ``` - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) - *Default:* Not bound to a specific claim. Part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding --- ##### `mountOptions`Optional ```java public java.util.List getMountOptions(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* No options. A list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. > https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options --- ##### `reclaimPolicy`Optional ```java public PersistentVolumeReclaimPolicy getReclaimPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeReclaimPolicy`](#org.cdk8s.plus21.PersistentVolumeReclaimPolicy) - *Default:* PersistentVolumeReclaimPolicy.RETAIN When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy tells the cluster what to do with the volume after it has been released of its claim. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming --- ##### `storage`Optional ```java public Size getStorage(); ``` - *Type:* [`org.cdk8s.Size`](#org.cdk8s.Size) - *Default:* No specified. What is the storage capacity of this volume. > https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources --- ##### `storageClassName`Optional ```java public java.lang.String getStorageClassName(); ``` - *Type:* `java.lang.String` - *Default:* Volume does not belong to any storage class. Name of StorageClass to which this persistent volume belongs. --- ##### `volumeMode`Optional ```java public PersistentVolumeMode getVolumeMode(); ``` - *Type:* [`org.cdk8s.plus21.PersistentVolumeMode`](#org.cdk8s.plus21.PersistentVolumeMode) - *Default:* VolumeMode.FILE_SYSTEM Defines what type of volume is required by the claim. --- ### PodDnsProps Properties for `PodDns`. #### Initializer ```java import org.cdk8s.plus21.PodDnsProps; PodDnsProps.builder() // .hostname(java.lang.String) // .hostnameAsFQDN(java.lang.Boolean) // .nameservers(java.util.List) // .options(java.util.List) // .policy(DnsPolicy) // .searches(java.util.List) // .subdomain(java.lang.String) .build(); ``` ##### `hostname`Optional ```java public java.lang.String getHostname(); ``` - *Type:* `java.lang.String` - *Default:* Set to a system-defined value. Specifies the hostname of the Pod. --- ##### `hostnameAsFQDN`Optional ```java public java.lang.Boolean getHostnameAsFQDN(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. --- ##### `nameservers`Optional ```java public java.util.List getNameservers(); ``` - *Type:* java.util.List<`java.lang.String`> A list of IP addresses that will be used as DNS servers for the Pod. There can be at most 3 IP addresses specified. When the policy is set to "NONE", the list must contain at least one IP address, otherwise this property is optional. The servers listed will be combined to the base nameservers generated from the specified DNS policy with duplicate addresses removed. --- ##### `options`Optional ```java public java.util.List getOptions(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.DnsOption`](#org.cdk8s.plus21.DnsOption)> List of objects where each object may have a name property (required) and a value property (optional). The contents in this property will be merged to the options generated from the specified DNS policy. Duplicate entries are removed. --- ##### `policy`Optional ```java public DnsPolicy getPolicy(); ``` - *Type:* [`org.cdk8s.plus21.DnsPolicy`](#org.cdk8s.plus21.DnsPolicy) - *Default:* DnsPolicy.CLUSTER_FIRST Set DNS policy for the pod. If policy is set to `None`, other configuration must be supplied. --- ##### `searches`Optional ```java public java.util.List getSearches(); ``` - *Type:* java.util.List<`java.lang.String`> A list of DNS search domains for hostname lookup in the Pod. When specified, the provided list will be merged into the base search domain names generated from the chosen DNS policy. Duplicate domain names are removed. Kubernetes allows for at most 6 search domains. --- ##### `subdomain`Optional ```java public java.lang.String getSubdomain(); ``` - *Type:* `java.lang.String` - *Default:* No subdomain. If specified, the fully qualified Pod hostname will be "...svc.". --- ### PodProps Properties for `Pod`. #### Initializer ```java import org.cdk8s.plus21.PodProps; PodProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ### PodSchedulingAttractOptions Options for `PodScheduling.attract`. #### Initializer ```java import org.cdk8s.plus21.PodSchedulingAttractOptions; PodSchedulingAttractOptions.builder() // .weight(java.lang.Number) .build(); ``` ##### `weight`Optional ```java public java.lang.Number getWeight(); ``` - *Type:* `java.lang.Number` - *Default:* no weight. assignment is assumed to be required (hard). Indicates the attraction is optional (soft), with this weight score. --- ### PodSchedulingColocateOptions Options for `PodScheduling.colocate`. #### Initializer ```java import org.cdk8s.plus21.PodSchedulingColocateOptions; PodSchedulingColocateOptions.builder() // .topology(Topology) // .weight(java.lang.Number) .build(); ``` ##### `topology`Optional ```java public Topology getTopology(); ``` - *Type:* [`org.cdk8s.plus21.Topology`](#org.cdk8s.plus21.Topology) - *Default:* Topology.HOSTNAME Which topology to coloate on. --- ##### `weight`Optional ```java public java.lang.Number getWeight(); ``` - *Type:* `java.lang.Number` - *Default:* no weight. co-location is assumed to be required (hard). Indicates the co-location is optional (soft), with this weight score. --- ### PodSchedulingSeparateOptions Options for `PodScheduling.separate`. #### Initializer ```java import org.cdk8s.plus21.PodSchedulingSeparateOptions; PodSchedulingSeparateOptions.builder() // .topology(Topology) // .weight(java.lang.Number) .build(); ``` ##### `topology`Optional ```java public Topology getTopology(); ``` - *Type:* [`org.cdk8s.plus21.Topology`](#org.cdk8s.plus21.Topology) - *Default:* Topology.HOSTNAME Which topology to separate on. --- ##### `weight`Optional ```java public java.lang.Number getWeight(); ``` - *Type:* `java.lang.Number` - *Default:* no weight. separation is assumed to be required (hard). Indicates the separation is optional (soft), with this weight score. --- ### PodSecurityContextProps Properties for `PodSecurityContext`. #### Initializer ```java import org.cdk8s.plus21.PodSecurityContextProps; PodSecurityContextProps.builder() // .ensureNonRoot(java.lang.Boolean) // .fsGroup(java.lang.Number) // .fsGroupChangePolicy(FsGroupChangePolicy) // .group(java.lang.Number) // .sysctls(java.util.List) // .user(java.lang.Number) .build(); ``` ##### `ensureNonRoot`Optional ```java public java.lang.Boolean getEnsureNonRoot(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. --- ##### `fsGroup`Optional ```java public java.lang.Number getFsGroup(); ``` - *Type:* `java.lang.Number` - *Default:* Volume ownership is not changed. Modify the ownership and permissions of pod volumes to this GID. --- ##### `fsGroupChangePolicy`Optional ```java public FsGroupChangePolicy getFsGroupChangePolicy(); ``` - *Type:* [`org.cdk8s.plus21.FsGroupChangePolicy`](#org.cdk8s.plus21.FsGroupChangePolicy) - *Default:* FsGroupChangePolicy.ALWAYS Defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. --- ##### `group`Optional ```java public java.lang.Number getGroup(); ``` - *Type:* `java.lang.Number` - *Default:* Group configured by container runtime The GID to run the entrypoint of the container process. --- ##### `sysctls`Optional ```java public java.util.List getSysctls(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Sysctl`](#org.cdk8s.plus21.Sysctl)> - *Default:* No sysctls Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. --- ##### `user`Optional ```java public java.lang.Number getUser(); ``` - *Type:* `java.lang.Number` - *Default:* User specified in image metadata The UID to run the entrypoint of the container process. --- ### PodSelectOptions Options for `Pods.select`. #### Initializer ```java import org.cdk8s.plus21.PodSelectOptions; PodSelectOptions.builder() // .expressions(java.util.List) // .labels(java.util.Map) // .namespaces(Namespaces) .build(); ``` ##### `expressions`Optional ```java public java.util.List getExpressions(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.LabelExpression`](#org.cdk8s.plus21.LabelExpression)> - *Default:* no expressions requirements. Expressions the pods must satisify. --- ##### `labels`Optional ```java public java.util.Map getLabels(); ``` - *Type:* java.util.Map - *Default:* no strict labels requirements. Labels the pods must have. --- ##### `namespaces`Optional ```java public Namespaces getNamespaces(); ``` - *Type:* [`org.cdk8s.plus21.Namespaces`](#org.cdk8s.plus21.Namespaces) - *Default:* unset, implies the namespace of the resource this selection is used in. Namespaces the pods are allowed to be in. Use `Namespaces.all()` to allow all namespaces. --- ### PodSelectorConfig Configuration for selecting pods, optionally in particular namespaces. #### Initializer ```java import org.cdk8s.plus21.PodSelectorConfig; PodSelectorConfig.builder() .labelSelector(LabelSelector) // .namespaces(NamespaceSelectorConfig) .build(); ``` ##### `labelSelector`Required ```java public LabelSelector getLabelSelector(); ``` - *Type:* [`org.cdk8s.plus21.LabelSelector`](#org.cdk8s.plus21.LabelSelector) A selector to select pods by labels. --- ##### `namespaces`Optional ```java public NamespaceSelectorConfig getNamespaces(); ``` - *Type:* [`org.cdk8s.plus21.NamespaceSelectorConfig`](#org.cdk8s.plus21.NamespaceSelectorConfig) Configuration for selecting which namepsaces are the pods allowed to be in. --- ### ProbeOptions Probe options. #### Initializer ```java import org.cdk8s.plus21.ProbeOptions; ProbeOptions.builder() // .failureThreshold(java.lang.Number) // .initialDelaySeconds(Duration) // .periodSeconds(Duration) // .successThreshold(java.lang.Number) // .timeoutSeconds(Duration) .build(); ``` ##### `failureThreshold`Optional ```java public java.lang.Number getFailureThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 3 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. --- ##### `initialDelaySeconds`Optional ```java public Duration getInitialDelaySeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* immediate Number of seconds after the container has started before liveness probes are initiated. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ##### `periodSeconds`Optional ```java public Duration getPeriodSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(10) Minimum value is 1. How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. --- ##### `successThreshold`Optional ```java public java.lang.Number getSuccessThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 1 Must be 1 for liveness and startup. Minimum value is 1. Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. --- ##### `timeoutSeconds`Optional ```java public Duration getTimeoutSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(1) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ### ResourceProps Initialization properties for resources. #### Initializer ```java import org.cdk8s.plus21.ResourceProps; ResourceProps.builder() // .metadata(ApiObjectMetadata) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ### RoleBindingProps Properties for `RoleBinding`. #### Initializer ```java import org.cdk8s.plus21.RoleBindingProps; RoleBindingProps.builder() // .metadata(ApiObjectMetadata) .role(IRole) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `role`Required ```java public IRole getRole(); ``` - *Type:* [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole) The role to bind to. A RoleBinding can reference a Role or a ClusterRole. --- ### RolePolicyRule Policy rule of a `Role. #### Initializer ```java import org.cdk8s.plus21.RolePolicyRule; RolePolicyRule.builder() .resources(java.util.List) .verbs(java.util.List) .build(); ``` ##### `resources`Required ```java public java.util.List getResources(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource)> Resources this rule applies to. --- ##### `verbs`Required ```java public java.util.List getVerbs(); ``` - *Type:* java.util.List<`java.lang.String`> Verbs to allow. (e.g ['get', 'watch']) --- ### RoleProps Properties for `Role`. #### Initializer ```java import org.cdk8s.plus21.RoleProps; RoleProps.builder() // .metadata(ApiObjectMetadata) // .rules(java.util.List) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `rules`Optional ```java public java.util.List getRules(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.RolePolicyRule`](#org.cdk8s.plus21.RolePolicyRule)> - *Default:* [] A list of rules the role should allow. --- ### SecretProps Options for `Secret`. #### Initializer ```java import org.cdk8s.plus21.SecretProps; SecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) // .stringData(java.util.Map) // .type(java.lang.String) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `stringData`Optional ```java public java.util.Map getStringData(); ``` - *Type:* java.util.Map stringData allows specifying non-binary secret data in string form. It is provided as a write-only convenience method. All keys and values are merged into the data field on write, overwriting any existing values. It is never output when reading from the API. --- ##### `type`Optional ```java public java.lang.String getType(); ``` - *Type:* `java.lang.String` - *Default:* undefined - Don't set a type. Optional type associated with the secret. Used to facilitate programmatic handling of secret data by various controllers. --- ### SecretValue Represents a specific value in JSON secret. #### Initializer ```java import org.cdk8s.plus21.SecretValue; SecretValue.builder() .key(java.lang.String) .secret(ISecret) .build(); ``` ##### `key`Required ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` The JSON key. --- ##### `secret`Required ```java public ISecret getSecret(); ``` - *Type:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) The secret. --- ### SecretVolumeOptions Options for the Secret-based volume. #### Initializer ```java import org.cdk8s.plus21.SecretVolumeOptions; SecretVolumeOptions.builder() // .defaultMode(java.lang.Number) // .items(java.util.Map) // .name(java.lang.String) // .optional(java.lang.Boolean) .build(); ``` ##### `defaultMode`Optional ```java public java.lang.Number getDefaultMode(); ``` - *Type:* `java.lang.Number` - *Default:* 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set. Mode bits to use on created files by default. Must be a value between 0 and 0777. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set. --- ##### `items`Optional ```java public java.util.Map getItems(); ``` - *Type:* java.util.Map - *Default:* no mapping If unspecified, each key-value pair in the Data field of the referenced secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'. --- ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` - *Default:* auto-generated The volume name. --- ##### `optional`Optional ```java public java.lang.Boolean getOptional(); ``` - *Type:* `java.lang.Boolean` - *Default:* undocumented Specify whether the secret or its keys must be defined. --- ### ServiceAccountProps Properties for initialization of `ServiceAccount`. #### Initializer ```java import org.cdk8s.plus21.ServiceAccountProps; ServiceAccountProps.builder() // .metadata(ApiObjectMetadata) // .automountToken(java.lang.Boolean) // .secrets(java.util.List) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountToken`Optional ```java public java.lang.Boolean getAutomountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `secrets`Optional ```java public java.util.List getSecrets(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret)> List of secrets allowed to be used by pods running using this ServiceAccount. > https://kubernetes.io/docs/concepts/configuration/secret --- ### ServiceAccountTokenSecretProps Options for `ServiceAccountTokenSecret`. #### Initializer ```java import org.cdk8s.plus21.ServiceAccountTokenSecretProps; ServiceAccountTokenSecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .serviceAccount(IServiceAccount) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `serviceAccount`Required ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) The service account to store a secret for. --- ### ServiceIngressV1BetaBackendOptions Options for setting up backends for ingress rules. #### Initializer ```java import org.cdk8s.plus21.ServiceIngressV1BetaBackendOptions; ServiceIngressV1BetaBackendOptions.builder() // .port(java.lang.Number) .build(); ``` ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* if the service exposes a single port, this port will be used. The port to use to access the service. * This option will fail if the service does not expose any ports. * If the service exposes multiple ports, this option must be specified. * If the service exposes a single port, this option is optional and if specified, it must be the same port exposed by the service. --- ### ServicePort Definition of a service port. #### Initializer ```java import org.cdk8s.plus21.ServicePort; ServicePort.builder() // .name(java.lang.String) // .nodePort(java.lang.Number) // .protocol(Protocol) // .targetPort(java.lang.Number) .port(java.lang.Number) .build(); ``` ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. This maps to the 'Name' field in EndpointPort objects. Optional if only one ServicePort is defined on this service. --- ##### `nodePort`Optional ```java public java.lang.Number getNodePort(); ``` - *Type:* `java.lang.Number` - *Default:* auto-allocate a port if the ServiceType of this Service requires one. The port on each node on which this service is exposed when type=NodePort or LoadBalancer. Usually assigned by the system. If specified, it will be allocated to the service if unused or else creation of the service will fail. Default is to auto-allocate a port if the ServiceType of this Service requires one. > https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport --- ##### `protocol`Optional ```java public Protocol getProtocol(); ``` - *Type:* [`org.cdk8s.plus21.Protocol`](#org.cdk8s.plus21.Protocol) - *Default:* Protocol.TCP The IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP. --- ##### `targetPort`Optional ```java public java.lang.Number getTargetPort(); ``` - *Type:* `java.lang.Number` - *Default:* The value of `port` will be used. The port number the service will redirect to. --- ##### `port`Required ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` The port number the service will bind to. --- ### ServicePortOptions #### Initializer ```java import org.cdk8s.plus21.ServicePortOptions; ServicePortOptions.builder() // .name(java.lang.String) // .nodePort(java.lang.Number) // .protocol(Protocol) // .targetPort(java.lang.Number) .build(); ``` ##### `name`Optional ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. This maps to the 'Name' field in EndpointPort objects. Optional if only one ServicePort is defined on this service. --- ##### `nodePort`Optional ```java public java.lang.Number getNodePort(); ``` - *Type:* `java.lang.Number` - *Default:* auto-allocate a port if the ServiceType of this Service requires one. The port on each node on which this service is exposed when type=NodePort or LoadBalancer. Usually assigned by the system. If specified, it will be allocated to the service if unused or else creation of the service will fail. Default is to auto-allocate a port if the ServiceType of this Service requires one. > https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport --- ##### `protocol`Optional ```java public Protocol getProtocol(); ``` - *Type:* [`org.cdk8s.plus21.Protocol`](#org.cdk8s.plus21.Protocol) - *Default:* Protocol.TCP The IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP. --- ##### `targetPort`Optional ```java public java.lang.Number getTargetPort(); ``` - *Type:* `java.lang.Number` - *Default:* The value of `port` will be used. The port number the service will redirect to. --- ### ServiceProps Properties for initialization of `Service`. #### Initializer ```java import org.cdk8s.plus21.ServiceProps; ServiceProps.builder() // .metadata(ApiObjectMetadata) // .clusterIP(java.lang.String) // .externalIPs(java.util.List) // .externalName(java.lang.String) // .loadBalancerSourceRanges(java.util.List) // .ports(java.util.List) // .type(ServiceType) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `clusterIP`Optional ```java public java.lang.String getClusterIP(); ``` - *Type:* `java.lang.String` - *Default:* Automatically assigned. The IP address of the service and is usually assigned randomly by the master. If an address is specified manually and is not in use by others, it will be allocated to the service; otherwise, creation of the service will fail. This field can not be changed through updates. Valid values are "None", empty string (""), or a valid IP address. "None" can be specified for headless services when proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. > https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies --- ##### `externalIPs`Optional ```java public java.util.List getExternalIPs(); ``` - *Type:* java.util.List<`java.lang.String`> - *Default:* No external IPs. A list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system. --- ##### `externalName`Optional ```java public java.lang.String getExternalName(); ``` - *Type:* `java.lang.String` - *Default:* No external name. The externalName to be used when ServiceType.EXTERNAL_NAME is set. --- ##### `loadBalancerSourceRanges`Optional ```java public java.util.List getLoadBalancerSourceRanges(); ``` - *Type:* java.util.List<`java.lang.String`> A list of CIDR IP addresses, if specified and supported by the platform, will restrict traffic through the cloud-provider load-balancer to the specified client IPs. More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/ --- ##### `ports`Optional ```java public java.util.List getPorts(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ServicePort`](#org.cdk8s.plus21.ServicePort)> The port exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies --- ##### `type`Optional ```java public ServiceType getType(); ``` - *Type:* [`org.cdk8s.plus21.ServiceType`](#org.cdk8s.plus21.ServiceType) - *Default:* ServiceType.ClusterIP Determines how the Service is exposed. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types --- ### SshAuthSecretProps Options for `SshAuthSecret`. #### Initializer ```java import org.cdk8s.plus21.SshAuthSecretProps; SshAuthSecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .sshPrivateKey(java.lang.String) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `sshPrivateKey`Required ```java public java.lang.String getSshPrivateKey(); ``` - *Type:* `java.lang.String` The SSH private key to use. --- ### StatefulSetProps Properties for initialization of `StatefulSet`. #### Initializer ```java import org.cdk8s.plus21.StatefulSetProps; StatefulSetProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) .service(Service) // .podManagementPolicy(PodManagementPolicy) // .replicas(java.lang.Number) // .strategy(StatefulSetUpdateStrategy) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional ```java public ApiObjectMetadata getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional ```java public java.lang.Boolean getSelect(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ##### `service`Required ```java public Service getService(); ``` - *Type:* [`org.cdk8s.plus21.Service`](#org.cdk8s.plus21.Service) Service to associate with the statefulset. --- ##### `podManagementPolicy`Optional ```java public PodManagementPolicy getPodManagementPolicy(); ``` - *Type:* [`org.cdk8s.plus21.PodManagementPolicy`](#org.cdk8s.plus21.PodManagementPolicy) - *Default:* PodManagementPolicy.ORDERED_READY Pod management policy to use for this statefulset. --- ##### `replicas`Optional ```java public java.lang.Number getReplicas(); ``` - *Type:* `java.lang.Number` - *Default:* 1 Number of desired pods. --- ##### `strategy`Optional ```java public StatefulSetUpdateStrategy getStrategy(); ``` - *Type:* [`org.cdk8s.plus21.StatefulSetUpdateStrategy`](#org.cdk8s.plus21.StatefulSetUpdateStrategy) - *Default:* RollingUpdate with partition set to 0 Indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template. --- ### StatefulSetUpdateStrategyRollingUpdateOptions Options for `StatefulSetUpdateStrategy.rollingUpdate`. #### Initializer ```java import org.cdk8s.plus21.StatefulSetUpdateStrategyRollingUpdateOptions; StatefulSetUpdateStrategyRollingUpdateOptions.builder() // .partition(java.lang.Number) .build(); ``` ##### `partition`Optional ```java public java.lang.Number getPartition(); ``` - *Type:* `java.lang.Number` - *Default:* 0 If specified, all Pods with an ordinal that is greater than or equal to the partition will be updated when the StatefulSet's .spec.template is updated. All Pods with an ordinal that is less than the partition will not be updated, and, even if they are deleted, they will be recreated at the previous version. If the partition is greater than replicas, updates to the pod template will not be propagated to Pods. In most cases you will not need to use a partition, but they are useful if you want to stage an update, roll out a canary, or perform a phased roll out. > https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#partitions --- ### Sysctl Sysctl defines a kernel parameter to be set. #### Initializer ```java import org.cdk8s.plus21.Sysctl; Sysctl.builder() .name(java.lang.String) .value(java.lang.String) .build(); ``` ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` Name of a property to set. --- ##### `value`Required ```java public java.lang.String getValue(); ``` - *Type:* `java.lang.String` Value of a property to set. --- ### TcpSocketProbeOptions Options for `Probe.fromTcpSocket()`. #### Initializer ```java import org.cdk8s.plus21.TcpSocketProbeOptions; TcpSocketProbeOptions.builder() // .failureThreshold(java.lang.Number) // .initialDelaySeconds(Duration) // .periodSeconds(Duration) // .successThreshold(java.lang.Number) // .timeoutSeconds(Duration) // .host(java.lang.String) // .port(java.lang.Number) .build(); ``` ##### `failureThreshold`Optional ```java public java.lang.Number getFailureThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 3 Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. --- ##### `initialDelaySeconds`Optional ```java public Duration getInitialDelaySeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* immediate Number of seconds after the container has started before liveness probes are initiated. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ##### `periodSeconds`Optional ```java public Duration getPeriodSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(10) Minimum value is 1. How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. --- ##### `successThreshold`Optional ```java public java.lang.Number getSuccessThreshold(); ``` - *Type:* `java.lang.Number` - *Default:* 1 Must be 1 for liveness and startup. Minimum value is 1. Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. --- ##### `timeoutSeconds`Optional ```java public Duration getTimeoutSeconds(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) - *Default:* Duration.seconds(1) Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes --- ##### `host`Optional ```java public java.lang.String getHost(); ``` - *Type:* `java.lang.String` - *Default:* defaults to the pod IP The host name to connect to on the container. --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` - *Default:* defaults to `container.port`. The TCP port to connect to on the container. --- ### TlsSecretProps Options for `TlsSecret`. #### Initializer ```java import org.cdk8s.plus21.TlsSecretProps; TlsSecretProps.builder() // .metadata(ApiObjectMetadata) // .immutable(java.lang.Boolean) .tlsCert(java.lang.String) .tlsKey(java.lang.String) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `immutable`Optional ```java public java.lang.Boolean getImmutable(); ``` - *Type:* `java.lang.Boolean` - *Default:* false If set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. --- ##### `tlsCert`Required ```java public java.lang.String getTlsCert(); ``` - *Type:* `java.lang.String` The TLS cert. --- ##### `tlsKey`Required ```java public java.lang.String getTlsKey(); ``` - *Type:* `java.lang.String` The TLS key. --- ### UserProps Properties for `User`. #### Initializer ```java import org.cdk8s.plus21.UserProps; UserProps.builder() .name(java.lang.String) .build(); ``` ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of the user. --- ### VolumeMount Mount a volume from the pod to the container. #### Initializer ```java import org.cdk8s.plus21.VolumeMount; VolumeMount.builder() // .propagation(MountPropagation) // .readOnly(java.lang.Boolean) // .subPath(java.lang.String) // .subPathExpr(java.lang.String) .path(java.lang.String) .volume(Volume) .build(); ``` ##### `propagation`Optional ```java public MountPropagation getPropagation(); ``` - *Type:* [`org.cdk8s.plus21.MountPropagation`](#org.cdk8s.plus21.MountPropagation) - *Default:* MountPropagation.NONE Determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. Mount propagation allows for sharing volumes mounted by a Container to other Containers in the same Pod, or even to other Pods on the same node. --- ##### `readOnly`Optional ```java public java.lang.Boolean getReadOnly(); ``` - *Type:* `java.lang.Boolean` - *Default:* false Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false. --- ##### `subPath`Optional ```java public java.lang.String getSubPath(); ``` - *Type:* `java.lang.String` - *Default:* "" the volume's root Path within the volume from which the container's volume should be mounted.). --- ##### `subPathExpr`Optional ```java public java.lang.String getSubPathExpr(); ``` - *Type:* `java.lang.String` - *Default:* "" volume's root. Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). `subPathExpr` and `subPath` are mutually exclusive. --- ##### `path`Required ```java public java.lang.String getPath(); ``` - *Type:* `java.lang.String` Path within the container at which the volume should be mounted. Must not contain ':'. --- ##### `volume`Required ```java public Volume getVolume(); ``` - *Type:* [`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume) The volume to mount. --- ### WorkloadProps Properties for `Workload`. #### Initializer ```java import org.cdk8s.plus21.WorkloadProps; WorkloadProps.builder() // .metadata(ApiObjectMetadata) // .automountServiceAccountToken(java.lang.Boolean) // .containers(java.util.List) // .dns(PodDnsProps) // .dockerRegistryAuth(DockerConfigSecret) // .hostAliases(java.util.List) // .initContainers(java.util.List) // .restartPolicy(RestartPolicy) // .securityContext(PodSecurityContextProps) // .serviceAccount(IServiceAccount) // .volumes(java.util.List) // .podMetadata(ApiObjectMetadata) // .select(java.lang.Boolean) .build(); ``` ##### `metadata`Optional ```java public ApiObjectMetadata getMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) Metadata that all persisted resources must have, which includes all objects users must create. --- ##### `automountServiceAccountToken`Optional ```java public java.lang.Boolean getAutomountServiceAccountToken(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Indicates whether a service account token should be automatically mounted. > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server --- ##### `containers`Optional ```java public java.util.List getContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No containers. Note that a pod spec must include at least one container. List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. You can add additionnal containers using `podSpec.addContainer()` --- ##### `dns`Optional ```java public PodDnsProps getDns(); ``` - *Type:* [`org.cdk8s.plus21.PodDnsProps`](#org.cdk8s.plus21.PodDnsProps) - *Default:* policy: DnsPolicy.CLUSTER_FIRST hostnameAsFQDN: false DNS settings for the pod. > https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ --- ##### `dockerRegistryAuth`Optional ```java public DockerConfigSecret getDockerRegistryAuth(); ``` - *Type:* [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret) - *Default:* No auth. Images are assumed to be publicly available. A secret containing docker credentials for authenticating to a registry. --- ##### `hostAliases`Optional ```java public java.util.List getHostAliases(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.HostAlias`](#org.cdk8s.plus21.HostAlias)> HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file. --- ##### `initContainers`Optional ```java public java.util.List getInitContainers(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.ContainerProps`](#org.cdk8s.plus21.ContainerProps)> - *Default:* No init containers. List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added ,removed or updated. > https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ --- ##### `restartPolicy`Optional ```java public RestartPolicy getRestartPolicy(); ``` - *Type:* [`org.cdk8s.plus21.RestartPolicy`](#org.cdk8s.plus21.RestartPolicy) - *Default:* RestartPolicy.ALWAYS Restart policy for all containers within the pod. > https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy --- ##### `securityContext`Optional ```java public PodSecurityContextProps getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.PodSecurityContextProps`](#org.cdk8s.plus21.PodSecurityContextProps) - *Default:* fsGroupChangePolicy: FsGroupChangePolicy.FsGroupChangePolicy.ALWAYS ensureNonRoot: false SecurityContext holds pod-level security attributes and common container settings. --- ##### `serviceAccount`Optional ```java public IServiceAccount getServiceAccount(); ``` - *Type:* [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) - *Default:* No service account. A service account provides an identity for processes that run in a Pod. When you (a human) access the cluster (for example, using kubectl), you are authenticated by the apiserver as a particular User Account (currently this is usually admin, unless your cluster administrator has customized your cluster). Processes in containers inside pods can also contact the apiserver. When they do, they are authenticated as a particular Service Account (for example, default). > https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ --- ##### `volumes`Optional ```java public java.util.List getVolumes(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume)> - *Default:* No volumes. List of volumes that can be mounted by containers belonging to the pod. You can also add volumes later using `podSpec.addVolume()` > https://kubernetes.io/docs/concepts/storage/volumes --- ##### `podMetadata`Optional ```java public ApiObjectMetadata getPodMetadata(); ``` - *Type:* [`org.cdk8s.ApiObjectMetadata`](#org.cdk8s.ApiObjectMetadata) The pod metadata of this workload. --- ##### `select`Optional ```java public java.lang.Boolean getSelect(); ``` - *Type:* `java.lang.Boolean` - *Default:* true Automatically allocates a pod label selector for this workload and add it to the pod metadata. This ensures this workload manages pods created by its pod template. --- ### WorkloadSchedulingSpreadOptions Options for `WorkloadScheduling.spread`. #### Initializer ```java import org.cdk8s.plus21.WorkloadSchedulingSpreadOptions; WorkloadSchedulingSpreadOptions.builder() // .topology(Topology) // .weight(java.lang.Number) .build(); ``` ##### `topology`Optional ```java public Topology getTopology(); ``` - *Type:* [`org.cdk8s.plus21.Topology`](#org.cdk8s.plus21.Topology) - *Default:* Topology.HOSTNAME Which topology to spread on. --- ##### `weight`Optional ```java public java.lang.Number getWeight(); ``` - *Type:* `java.lang.Number` - *Default:* no weight. spread is assumed to be required. Indicates the spread is optional, with this weight score. --- ## Classes ### ApiResource - *Implements:* [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource), [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) Represents information about an API resource type. #### Methods ##### `asApiResource` ```java public asApiResource() ``` ##### `asNonApiResource` ```java public asNonApiResource() ``` #### Static Functions ##### `custom` ```java import org.cdk8s.plus21.ApiResource; ApiResource.custom(ApiResourceOptions options) ``` ###### `options`Required - *Type:* [`org.cdk8s.plus21.ApiResourceOptions`](#org.cdk8s.plus21.ApiResourceOptions) --- #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. `authorization.k8s.io`). --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of the resource type as it appears in the relevant API endpoint. > https://kubernetes.io/docs/reference/access-authn-authz/rbac/#referring-to-resources --- #### Constants ##### `API_SERVICES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for APIService. --- ##### `BINDINGS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Binding. --- ##### `CERTIFICATE_SIGNING_REQUESTS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for CertificateSigningRequest. --- ##### `CLUSTER_ROLE_BINDINGS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ClusterRoleBinding. --- ##### `CLUSTER_ROLES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ClusterRole. --- ##### `COMPONENT_STATUSES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ComponentStatus. --- ##### `CONFIG_MAPS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ConfigMap. --- ##### `CONTROLLER_REVISIONS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ControllerRevision. --- ##### `CRON_JOBS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for CronJob. --- ##### `CSI_DRIVERS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for CSIDriver. --- ##### `CSI_NODES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for CSINode. --- ##### `CSI_STORAGE_CAPACITIES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for CSIStorageCapacity. --- ##### `CUSTOM_RESOURCE_DEFINITIONS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for CustomResourceDefinition. --- ##### `DAEMON_SETS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for DaemonSet. --- ##### `DEPLOYMENTS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Deployment. --- ##### `ENDPOINT_SLICES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for EndpointSlice. --- ##### `ENDPOINTS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Endpoints. --- ##### `EVENTS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Event. --- ##### `FLOW_SCHEMAS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for FlowSchema. --- ##### `HORIZONTAL_POD_AUTOSCALERS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for HorizontalPodAutoscaler. --- ##### `INGRESS_CLASSES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for IngressClass. --- ##### `INGRESSES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Ingress. --- ##### `JOBS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Job. --- ##### `LEASES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Lease. --- ##### `LIMIT_RANGES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for LimitRange. --- ##### `LOCAL_SUBJECT_ACCESS_REVIEWS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for LocalSubjectAccessReview. --- ##### `MUTATING_WEBHOOK_CONFIGURATIONS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for MutatingWebhookConfiguration. --- ##### `NAMESPACES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Namespace. --- ##### `NETWORK_POLICIES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for NetworkPolicy. --- ##### `NODES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Node. --- ##### `PERSISTENT_VOLUME_CLAIMS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PersistentVolumeClaim. --- ##### `PERSISTENT_VOLUMES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PersistentVolume. --- ##### `POD_DISRUPTION_BUDGETS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PodDisruptionBudget. --- ##### `POD_SECURITY_POLICIES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PodSecurityPolicy. --- ##### `POD_TEMPLATES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PodTemplate. --- ##### `PODS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Pod. --- ##### `PRIORITY_CLASSES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PriorityClass. --- ##### `PRIORITY_LEVEL_CONFIGURATIONS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for PriorityLevelConfiguration. --- ##### `REPLICA_SETS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ReplicaSet. --- ##### `REPLICATION_CONTROLLERS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ReplicationController. --- ##### `RESOURCE_QUOTAS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ResourceQuota. --- ##### `ROLE_BINDINGS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for RoleBinding. --- ##### `ROLES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Role. --- ##### `RUNTIME_CLASSES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for RuntimeClass. --- ##### `SECRETS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Secret. --- ##### `SELF_SUBJECT_ACCESS_REVIEWS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for SelfSubjectAccessReview. --- ##### `SELF_SUBJECT_RULES_REVIEWS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for SelfSubjectRulesReview. --- ##### `SERVICE_ACCOUNTS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ServiceAccount. --- ##### `SERVICES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for Service. --- ##### `STATEFUL_SETS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for StatefulSet. --- ##### `STORAGE_CLASSES` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for StorageClass. --- ##### `SUBJECT_ACCESS_REVIEWS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for SubjectAccessReview. --- ##### `TOKEN_REVIEWS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for TokenReview. --- ##### `VALIDATING_WEBHOOK_CONFIGURATIONS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for ValidatingWebhookConfiguration. --- ##### `VOLUME_ATTACHMENTS` - *Type:* [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource) API resource information for VolumeAttachment. --- ### Container A single application container that you want to run within a pod. #### Initializers ```java import org.cdk8s.plus21.Container; Container.Builder.create() .image(java.lang.String) // .args(java.util.List) // .command(java.util.List) // .envFrom(java.util.List) // .envVariables(java.util.Map) // .imagePullPolicy(ImagePullPolicy) // .lifecycle(ContainerLifecycle) // .liveness(Probe) // .name(java.lang.String) // .port(java.lang.Number) // .readiness(Probe) // .resources(ContainerResources) // .securityContext(ContainerSecurityContextProps) // .startup(Probe) // .volumeMounts(java.util.List) // .workingDir(java.lang.String) .build(); ``` ##### `image`Required - *Type:* `java.lang.String` Docker image name. --- ##### `args`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* [] Arguments to the entrypoint. The docker image's CMD is used if `command` is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. > https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell --- ##### `command`Optional - *Type:* java.util.List<`java.lang.String`> - *Default:* The docker image's ENTRYPOINT. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell --- ##### `envFrom`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.EnvFrom`](#org.cdk8s.plus21.EnvFrom)> - *Default:* No sources. List of sources to populate environment variables in the container. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by the `envVariables` property with a duplicate key will take precedence. --- ##### `envVariables`Optional - *Type:* java.util.Map - *Default:* No environment variables. Environment variables to set in the container. --- ##### `imagePullPolicy`Optional - *Type:* [`org.cdk8s.plus21.ImagePullPolicy`](#org.cdk8s.plus21.ImagePullPolicy) - *Default:* ImagePullPolicy.ALWAYS Image pull policy for this container. --- ##### `lifecycle`Optional - *Type:* [`org.cdk8s.plus21.ContainerLifecycle`](#org.cdk8s.plus21.ContainerLifecycle) Describes actions that the management system should take in response to container lifecycle events. --- ##### `liveness`Optional - *Type:* [`org.cdk8s.plus21.Probe`](#org.cdk8s.plus21.Probe) - *Default:* no liveness probe is defined Periodic probe of container liveness. Container will be restarted if the probe fails. --- ##### `name`Optional - *Type:* `java.lang.String` - *Default:* 'main' Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated. --- ##### `port`Optional - *Type:* `java.lang.Number` - *Default:* No port is exposed. Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536. --- ##### `readiness`Optional - *Type:* [`org.cdk8s.plus21.Probe`](#org.cdk8s.plus21.Probe) - *Default:* no readiness probe is defined Determines when the container is ready to serve traffic. --- ##### `resources`Optional - *Type:* [`org.cdk8s.plus21.ContainerResources`](#org.cdk8s.plus21.ContainerResources) Compute resources (CPU and memory requests and limits) required by the container. > https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ --- ##### `securityContext`Optional - *Type:* [`org.cdk8s.plus21.ContainerSecurityContextProps`](#org.cdk8s.plus21.ContainerSecurityContextProps) - *Default:* ensureNonRoot: false privileged: false readOnlyRootFilesystem: false SecurityContext defines the security options the container should be run with. If set, the fields override equivalent fields of the pod's security context. > https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ --- ##### `startup`Optional - *Type:* [`org.cdk8s.plus21.Probe`](#org.cdk8s.plus21.Probe) - *Default:* no startup probe is defined. StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully --- ##### `volumeMounts`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.VolumeMount`](#org.cdk8s.plus21.VolumeMount)> Pod volumes to mount into the container's filesystem. Cannot be updated. --- ##### `workingDir`Optional - *Type:* `java.lang.String` - *Default:* The container runtime's default. Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated. --- #### Methods ##### `mount` ```java public mount(java.lang.String path, IStorage storage) public mount(java.lang.String path, IStorage storage, MountOptions options) ``` ###### `path`Required - *Type:* `java.lang.String` The desired path in the container. --- ###### `storage`Required - *Type:* [`org.cdk8s.plus21.IStorage`](#org.cdk8s.plus21.IStorage) The storage to mount. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.MountOptions`](#org.cdk8s.plus21.MountOptions) --- #### Properties ##### `env`Required ```java public Env getEnv(); ``` - *Type:* [`org.cdk8s.plus21.Env`](#org.cdk8s.plus21.Env) The environment of the container. --- ##### `image`Required ```java public java.lang.String getImage(); ``` - *Type:* `java.lang.String` The container image. --- ##### `imagePullPolicy`Required ```java public ImagePullPolicy getImagePullPolicy(); ``` - *Type:* [`org.cdk8s.plus21.ImagePullPolicy`](#org.cdk8s.plus21.ImagePullPolicy) Image pull policy for this container. --- ##### `mounts`Required ```java public java.util.List getMounts(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.VolumeMount`](#org.cdk8s.plus21.VolumeMount)> Volume mounts configured for this container. --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The name of the container. --- ##### `securityContext`Required ```java public ContainerSecurityContext getSecurityContext(); ``` - *Type:* [`org.cdk8s.plus21.ContainerSecurityContext`](#org.cdk8s.plus21.ContainerSecurityContext) The security context of the container. --- ##### `args`Optional ```java public java.util.List getArgs(); ``` - *Type:* java.util.List<`java.lang.String`> Arguments to the entrypoint. --- ##### `command`Optional ```java public java.util.List getCommand(); ``` - *Type:* java.util.List<`java.lang.String`> Entrypoint array (the command to execute when the container starts). --- ##### `port`Optional ```java public java.lang.Number getPort(); ``` - *Type:* `java.lang.Number` The port this container exposes. --- ##### `resources`Optional ```java public ContainerResources getResources(); ``` - *Type:* [`org.cdk8s.plus21.ContainerResources`](#org.cdk8s.plus21.ContainerResources) Compute resources (CPU and memory requests and limits) required by the container. > https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ --- ##### `workingDir`Optional ```java public java.lang.String getWorkingDir(); ``` - *Type:* `java.lang.String` The working directory inside the container. --- ### ContainerSecurityContext Container security attributes and settings. #### Initializers ```java import org.cdk8s.plus21.ContainerSecurityContext; ContainerSecurityContext.Builder.create() // .ensureNonRoot(java.lang.Boolean) // .group(java.lang.Number) // .privileged(java.lang.Boolean) // .readOnlyRootFilesystem(java.lang.Boolean) // .user(java.lang.Number) .build(); ``` ##### `ensureNonRoot`Optional - *Type:* `java.lang.Boolean` - *Default:* false Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. --- ##### `group`Optional - *Type:* `java.lang.Number` - *Default:* Group configured by container runtime The GID to run the entrypoint of the container process. --- ##### `privileged`Optional - *Type:* `java.lang.Boolean` - *Default:* false Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. --- ##### `readOnlyRootFilesystem`Optional - *Type:* `java.lang.Boolean` - *Default:* false Whether this container has a read-only root filesystem. --- ##### `user`Optional - *Type:* `java.lang.Number` - *Default:* User specified in image metadata The UID to run the entrypoint of the container process. --- #### Properties ##### `ensureNonRoot`Required ```java public java.lang.Boolean getEnsureNonRoot(); ``` - *Type:* `java.lang.Boolean` --- ##### `privileged`Required ```java public java.lang.Boolean getPrivileged(); ``` - *Type:* `java.lang.Boolean` --- ##### `readOnlyRootFilesystem`Required ```java public java.lang.Boolean getReadOnlyRootFilesystem(); ``` - *Type:* `java.lang.Boolean` --- ##### `group`Optional ```java public java.lang.Number getGroup(); ``` - *Type:* `java.lang.Number` --- ##### `user`Optional ```java public java.lang.Number getUser(); ``` - *Type:* `java.lang.Number` --- ### Cpu Represents the amount of CPU. The amount can be passed as millis or units. #### Static Functions ##### `millis` ```java import org.cdk8s.plus21.Cpu; Cpu.millis(java.lang.Number amount) ``` ###### `amount`Required - *Type:* `java.lang.Number` --- ##### `units` ```java import org.cdk8s.plus21.Cpu; Cpu.units(java.lang.Number amount) ``` ###### `amount`Required - *Type:* `java.lang.Number` --- #### Properties ##### `amount`Required ```java public java.lang.String getAmount(); ``` - *Type:* `java.lang.String` --- ### DeploymentStrategy Deployment strategies. #### Static Functions ##### `recreate` ```java import org.cdk8s.plus21.DeploymentStrategy; DeploymentStrategy.recreate() ``` ##### `rollingUpdate` ```java import org.cdk8s.plus21.DeploymentStrategy; DeploymentStrategy.rollingUpdate() DeploymentStrategy.rollingUpdate(DeploymentStrategyRollingUpdateOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.DeploymentStrategyRollingUpdateOptions`](#org.cdk8s.plus21.DeploymentStrategyRollingUpdateOptions) --- ### Env Container environment variables. #### Initializers ```java import org.cdk8s.plus21.Env; new Env(java.util.List sources, java.util.Map variables); ``` ##### `sources`Required - *Type:* java.util.List<[`org.cdk8s.plus21.EnvFrom`](#org.cdk8s.plus21.EnvFrom)> --- ##### `variables`Required - *Type:* java.util.Map --- #### Methods ##### `addVariable` ```java public addVariable(java.lang.String name, EnvValue value) ``` ###### `name`Required - *Type:* `java.lang.String` --- ###### `value`Required - *Type:* [`org.cdk8s.plus21.EnvValue`](#org.cdk8s.plus21.EnvValue) --- ##### `copyFrom` ```java public copyFrom(EnvFrom from) ``` ###### `from`Required - *Type:* [`org.cdk8s.plus21.EnvFrom`](#org.cdk8s.plus21.EnvFrom) --- #### Static Functions ##### `fromConfigMap` ```java import org.cdk8s.plus21.Env; Env.fromConfigMap(IConfigMap configMap) Env.fromConfigMap(IConfigMap configMap, java.lang.String prefix) ``` ###### `configMap`Required - *Type:* [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap) --- ###### `prefix`Optional - *Type:* `java.lang.String` --- ##### `fromSecret` ```java import org.cdk8s.plus21.Env; Env.fromSecret(ISecret secr) ``` ###### `secr`Required - *Type:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) --- #### Properties ##### `sources`Required ```java public java.util.List getSources(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.EnvFrom`](#org.cdk8s.plus21.EnvFrom)> The list of sources used to populate the container environment, in addition to the `variables`. Returns a copy. To add a source use `container.env.copyFrom()`. --- ##### `variables`Required ```java public java.util.Map getVariables(); ``` - *Type:* java.util.Map The environment variables for this container. Returns a copy. To add environment variables use `container.env.addVariable()`. --- ### EnvFrom A collection of env variables defined in other resources. #### Initializers ```java import org.cdk8s.plus21.EnvFrom; new EnvFrom(); new EnvFrom(IConfigMap configMap); new EnvFrom(IConfigMap configMap, java.lang.String prefix); new EnvFrom(IConfigMap configMap, java.lang.String prefix, ISecret sec); ``` ##### `configMap`Optional - *Type:* [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap) --- ##### `prefix`Optional - *Type:* `java.lang.String` --- ##### `sec`Optional - *Type:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) --- ### EnvValue Utility class for creating reading env values from various sources. #### Static Functions ##### `fromConfigMap` ```java import org.cdk8s.plus21.EnvValue; EnvValue.fromConfigMap(IConfigMap configMap, java.lang.String key) EnvValue.fromConfigMap(IConfigMap configMap, java.lang.String key, EnvValueFromConfigMapOptions options) ``` ###### `configMap`Required - *Type:* [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap) The config map. --- ###### `key`Required - *Type:* `java.lang.String` The key to extract the value from. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.EnvValueFromConfigMapOptions`](#org.cdk8s.plus21.EnvValueFromConfigMapOptions) Additional options. --- ##### `fromFieldRef` ```java import org.cdk8s.plus21.EnvValue; EnvValue.fromFieldRef(EnvFieldPaths fieldPath) EnvValue.fromFieldRef(EnvFieldPaths fieldPath, EnvValueFromFieldRefOptions options) ``` ###### `fieldPath`Required - *Type:* [`org.cdk8s.plus21.EnvFieldPaths`](#org.cdk8s.plus21.EnvFieldPaths) : The field reference. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.EnvValueFromFieldRefOptions`](#org.cdk8s.plus21.EnvValueFromFieldRefOptions) : Additional options. --- ##### `fromProcess` ```java import org.cdk8s.plus21.EnvValue; EnvValue.fromProcess(java.lang.String key) EnvValue.fromProcess(java.lang.String key, EnvValueFromProcessOptions options) ``` ###### `key`Required - *Type:* `java.lang.String` The key to read. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.EnvValueFromProcessOptions`](#org.cdk8s.plus21.EnvValueFromProcessOptions) Additional options. --- ##### `fromResource` ```java import org.cdk8s.plus21.EnvValue; EnvValue.fromResource(ResourceFieldPaths resource) EnvValue.fromResource(ResourceFieldPaths resource, EnvValueFromResourceOptions options) ``` ###### `resource`Required - *Type:* [`org.cdk8s.plus21.ResourceFieldPaths`](#org.cdk8s.plus21.ResourceFieldPaths) : Resource to select the value from. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.EnvValueFromResourceOptions`](#org.cdk8s.plus21.EnvValueFromResourceOptions) : Additional options. --- ##### `fromSecretValue` ```java import org.cdk8s.plus21.EnvValue; EnvValue.fromSecretValue(SecretValue secretValue) EnvValue.fromSecretValue(SecretValue secretValue, EnvValueFromSecretOptions options) ``` ###### `secretValue`Required - *Type:* [`org.cdk8s.plus21.SecretValue`](#org.cdk8s.plus21.SecretValue) The secret value (secrent + key). --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.EnvValueFromSecretOptions`](#org.cdk8s.plus21.EnvValueFromSecretOptions) Additional options. --- ##### `fromValue` ```java import org.cdk8s.plus21.EnvValue; EnvValue.fromValue(java.lang.String value) ``` ###### `value`Required - *Type:* `java.lang.String` The value. --- #### Properties ##### `value`Optional ```java public java.lang.Object getValue(); ``` - *Type:* `java.lang.Object` --- ##### `valueFrom`Optional ```java public java.lang.Object getValueFrom(); ``` - *Type:* `java.lang.Object` --- ### Group - *Implements:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) Represents a group. #### Initializers ```java import org.cdk8s.plus21.Group; Group.Builder.create() .name(java.lang.String) .build(); ``` ##### `name`Required - *Type:* `java.lang.String` The name of the group. --- #### Properties ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error. --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` Name of the object being referenced. --- ##### `apiGroup`Optional ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects. --- ### Handler Defines a specific action that should be taken. #### Static Functions ##### `fromCommand` ```java import org.cdk8s.plus21.Handler; Handler.fromCommand(java.util.List command) ``` ###### `command`Required - *Type:* java.util.List<`java.lang.String`> The command to execute. --- ##### `fromHttpGet` ```java import org.cdk8s.plus21.Handler; Handler.fromHttpGet(java.lang.String path) Handler.fromHttpGet(java.lang.String path, HandlerFromHttpGetOptions options) ``` ###### `path`Required - *Type:* `java.lang.String` The URL path to hit. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.HandlerFromHttpGetOptions`](#org.cdk8s.plus21.HandlerFromHttpGetOptions) Options. --- ##### `fromTcpSocket` ```java import org.cdk8s.plus21.Handler; Handler.fromTcpSocket() Handler.fromTcpSocket(HandlerFromTcpSocketOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.HandlerFromTcpSocketOptions`](#org.cdk8s.plus21.HandlerFromTcpSocketOptions) Options. --- ### IngressV1Beta1Backend The backend for an ingress path. #### Static Functions ##### `fromResource` ```java import org.cdk8s.plus21.IngressV1Beta1Backend; IngressV1Beta1Backend.fromResource(IResource resource) ``` ###### `resource`Required - *Type:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) --- ##### `fromService` ```java import org.cdk8s.plus21.IngressV1Beta1Backend; IngressV1Beta1Backend.fromService(Service serv) IngressV1Beta1Backend.fromService(Service serv, ServiceIngressV1BetaBackendOptions options) ``` ###### `serv`Required - *Type:* [`org.cdk8s.plus21.Service`](#org.cdk8s.plus21.Service) The service object. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.ServiceIngressV1BetaBackendOptions`](#org.cdk8s.plus21.ServiceIngressV1BetaBackendOptions) --- ### LabeledNode A node that is matched by label selectors. #### Initializers ```java import org.cdk8s.plus21.LabeledNode; new LabeledNode(java.util.List labelSelector); ``` ##### `labelSelector`Required - *Type:* java.util.List<[`org.cdk8s.plus21.NodeLabelQuery`](#org.cdk8s.plus21.NodeLabelQuery)> --- #### Properties ##### `labelSelector`Required ```java public java.util.List getLabelSelector(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.NodeLabelQuery`](#org.cdk8s.plus21.NodeLabelQuery)> --- ### LabelExpression Represents a query that can be performed against resources with labels. #### Static Functions ##### `doesNotExist` ```java import org.cdk8s.plus21.LabelExpression; LabelExpression.doesNotExist(java.lang.String key) ``` ###### `key`Required - *Type:* `java.lang.String` --- ##### `exists` ```java import org.cdk8s.plus21.LabelExpression; LabelExpression.exists(java.lang.String key) ``` ###### `key`Required - *Type:* `java.lang.String` --- ##### `in` ```java import org.cdk8s.plus21.LabelExpression; LabelExpression.in(java.lang.String key, java.util.List values) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `values`Required - *Type:* java.util.List<`java.lang.String`> --- ##### `notIn` ```java import org.cdk8s.plus21.LabelExpression; LabelExpression.notIn(java.lang.String key, java.util.List values) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `values`Required - *Type:* java.util.List<`java.lang.String`> --- #### Properties ##### `key`Required ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` --- ##### `operator`Required ```java public java.lang.String getOperator(); ``` - *Type:* `java.lang.String` --- ##### `values`Optional ```java public java.util.List getValues(); ``` - *Type:* java.util.List<`java.lang.String`> --- ### LabelSelector Match a resource by labels. #### Static Functions ##### `of` ```java import org.cdk8s.plus21.LabelSelector; LabelSelector.of() LabelSelector.of(LabelSelectorOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.LabelSelectorOptions`](#org.cdk8s.plus21.LabelSelectorOptions) --- ### LabelSelectorOptions Options for `LabelSelector.of`. #### Initializers ```java import org.cdk8s.plus21.LabelSelectorOptions; new LabelSelectorOptions(); ``` #### Properties ##### `expressions`Optional ```java public java.util.List getExpressions(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.LabelExpression`](#org.cdk8s.plus21.LabelExpression)> Expression based label matchers. --- ##### `labels`Optional ```java public java.util.Map getLabels(); ``` - *Type:* java.util.Map Strict label matchers. --- ### NamedNode A node that is matched by its name. #### Initializers ```java import org.cdk8s.plus21.NamedNode; new NamedNode(java.lang.String name); ``` ##### `name`Required - *Type:* `java.lang.String` --- #### Properties ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` --- ### Namespaces - *Implements:* [`org.cdk8s.plus21.INamespaceSelector`](#org.cdk8s.plus21.INamespaceSelector) Represents a group of namespaces. #### Initializers ```java import org.cdk8s.plus21.Namespaces; new Namespaces(); new Namespaces(java.util.List expressions); new Namespaces(java.util.List expressions, java.util.List names); new Namespaces(java.util.List expressions, java.util.List names, java.util.Map labels); ``` ##### `expressions`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.LabelExpression`](#org.cdk8s.plus21.LabelExpression)> --- ##### `names`Optional - *Type:* java.util.List<`java.lang.String`> --- ##### `labels`Optional - *Type:* java.util.Map --- #### Methods ##### `toNamespaceSelectorConfig` ```java public toNamespaceSelectorConfig() ``` #### Static Functions ##### `all` ```java import org.cdk8s.plus21.Namespaces; Namespaces.all() ``` ##### `select` ```java import org.cdk8s.plus21.Namespaces; Namespaces.select(NamespacesSelectOptions options) ``` ###### `options`Required - *Type:* [`org.cdk8s.plus21.NamespacesSelectOptions`](#org.cdk8s.plus21.NamespacesSelectOptions) --- ### Node Represents a node in the cluster. #### Initializers ```java import org.cdk8s.plus21.Node; new Node(); ``` #### Static Functions ##### `labeled` ```java import org.cdk8s.plus21.Node; Node.labeled(NodeLabelQuery labelSelector) ``` ###### `labelSelector`Required - *Type:* [`org.cdk8s.plus21.NodeLabelQuery`](#org.cdk8s.plus21.NodeLabelQuery) --- ##### `named` ```java import org.cdk8s.plus21.Node; Node.named(java.lang.String nodeName) ``` ###### `nodeName`Required - *Type:* `java.lang.String` --- ##### `tainted` ```java import org.cdk8s.plus21.Node; Node.tainted(NodeTaintQuery taintSelector) ``` ###### `taintSelector`Required - *Type:* [`org.cdk8s.plus21.NodeTaintQuery`](#org.cdk8s.plus21.NodeTaintQuery) --- ### NodeLabelQuery Represents a query that can be performed against nodes with labels. #### Static Functions ##### `doesNotExist` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.doesNotExist(java.lang.String key) ``` ###### `key`Required - *Type:* `java.lang.String` --- ##### `exists` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.exists(java.lang.String key) ``` ###### `key`Required - *Type:* `java.lang.String` --- ##### `gt` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.gt(java.lang.String key, java.util.List values) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `values`Required - *Type:* java.util.List<`java.lang.String`> --- ##### `in` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.in(java.lang.String key, java.util.List values) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `values`Required - *Type:* java.util.List<`java.lang.String`> --- ##### `is` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.is(java.lang.String key, java.lang.String value) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `value`Required - *Type:* `java.lang.String` --- ##### `lt` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.lt(java.lang.String key, java.util.List values) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `values`Required - *Type:* java.util.List<`java.lang.String`> --- ##### `notIn` ```java import org.cdk8s.plus21.NodeLabelQuery; NodeLabelQuery.notIn(java.lang.String key, java.util.List values) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `values`Required - *Type:* java.util.List<`java.lang.String`> --- #### Properties ##### `key`Required ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` --- ##### `operator`Required ```java public java.lang.String getOperator(); ``` - *Type:* `java.lang.String` --- ##### `values`Optional ```java public java.util.List getValues(); ``` - *Type:* java.util.List<`java.lang.String`> --- ### NodeTaintQuery Taint queries that can be perfomed against nodes. #### Static Functions ##### `any` ```java import org.cdk8s.plus21.NodeTaintQuery; NodeTaintQuery.any() ``` ##### `exists` ```java import org.cdk8s.plus21.NodeTaintQuery; NodeTaintQuery.exists(java.lang.String key) NodeTaintQuery.exists(java.lang.String key, NodeTaintQueryOptions options) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.NodeTaintQueryOptions`](#org.cdk8s.plus21.NodeTaintQueryOptions) --- ##### `is` ```java import org.cdk8s.plus21.NodeTaintQuery; NodeTaintQuery.is(java.lang.String key, java.lang.String value) NodeTaintQuery.is(java.lang.String key, java.lang.String value, NodeTaintQueryOptions options) ``` ###### `key`Required - *Type:* `java.lang.String` --- ###### `value`Required - *Type:* `java.lang.String` --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.NodeTaintQueryOptions`](#org.cdk8s.plus21.NodeTaintQueryOptions) --- #### Properties ##### `operator`Required ```java public java.lang.String getOperator(); ``` - *Type:* `java.lang.String` --- ##### `effect`Optional ```java public java.lang.String getEffect(); ``` - *Type:* `java.lang.String` --- ##### `evictAfter`Optional ```java public Duration getEvictAfter(); ``` - *Type:* [`org.cdk8s.Duration`](#org.cdk8s.Duration) --- ##### `key`Optional ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` --- ##### `value`Optional ```java public java.lang.String getValue(); ``` - *Type:* `java.lang.String` --- ### NonApiResource - *Implements:* [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) Factory for creating non api resources. #### Methods ##### `asApiResource` ```java public asApiResource() ``` ##### `asNonApiResource` ```java public asNonApiResource() ``` #### Static Functions ##### `of` ```java import org.cdk8s.plus21.NonApiResource; NonApiResource.of(java.lang.String url) ``` ###### `url`Required - *Type:* `java.lang.String` --- ### PercentOrAbsolute Union like class repsenting either a ration in percents or an absolute number. #### Methods ##### `isZero` ```java public isZero() ``` #### Static Functions ##### `absolute` ```java import org.cdk8s.plus21.PercentOrAbsolute; PercentOrAbsolute.absolute(java.lang.Number num) ``` ###### `num`Required - *Type:* `java.lang.Number` --- ##### `percent` ```java import org.cdk8s.plus21.PercentOrAbsolute; PercentOrAbsolute.percent(java.lang.Number percent) ``` ###### `percent`Required - *Type:* `java.lang.Number` --- #### Properties ##### `value`Required ```java public java.lang.Object getValue(); ``` - *Type:* `java.lang.Object` --- ### PodDns Holds dns settings of the pod. #### Initializers ```java import org.cdk8s.plus21.PodDns; PodDns.Builder.create() // .hostname(java.lang.String) // .hostnameAsFQDN(java.lang.Boolean) // .nameservers(java.util.List) // .options(java.util.List) // .policy(DnsPolicy) // .searches(java.util.List) // .subdomain(java.lang.String) .build(); ``` ##### `hostname`Optional - *Type:* `java.lang.String` - *Default:* Set to a system-defined value. Specifies the hostname of the Pod. --- ##### `hostnameAsFQDN`Optional - *Type:* `java.lang.Boolean` - *Default:* false If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. --- ##### `nameservers`Optional - *Type:* java.util.List<`java.lang.String`> A list of IP addresses that will be used as DNS servers for the Pod. There can be at most 3 IP addresses specified. When the policy is set to "NONE", the list must contain at least one IP address, otherwise this property is optional. The servers listed will be combined to the base nameservers generated from the specified DNS policy with duplicate addresses removed. --- ##### `options`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.DnsOption`](#org.cdk8s.plus21.DnsOption)> List of objects where each object may have a name property (required) and a value property (optional). The contents in this property will be merged to the options generated from the specified DNS policy. Duplicate entries are removed. --- ##### `policy`Optional - *Type:* [`org.cdk8s.plus21.DnsPolicy`](#org.cdk8s.plus21.DnsPolicy) - *Default:* DnsPolicy.CLUSTER_FIRST Set DNS policy for the pod. If policy is set to `None`, other configuration must be supplied. --- ##### `searches`Optional - *Type:* java.util.List<`java.lang.String`> A list of DNS search domains for hostname lookup in the Pod. When specified, the provided list will be merged into the base search domain names generated from the chosen DNS policy. Duplicate domain names are removed. Kubernetes allows for at most 6 search domains. --- ##### `subdomain`Optional - *Type:* `java.lang.String` - *Default:* No subdomain. If specified, the fully qualified Pod hostname will be "...svc.". --- #### Methods ##### `addNameserver` ```java public addNameserver(java.lang.String nameservers) ``` ###### `nameservers`Required - *Type:* `java.lang.String` --- ##### `addOption` ```java public addOption(DnsOption options) ``` ###### `options`Required - *Type:* [`org.cdk8s.plus21.DnsOption`](#org.cdk8s.plus21.DnsOption) --- ##### `addSearch` ```java public addSearch(java.lang.String searches) ``` ###### `searches`Required - *Type:* `java.lang.String` --- #### Properties ##### `hostnameAsFQDN`Required ```java public java.lang.Boolean getHostnameAsFQDN(); ``` - *Type:* `java.lang.Boolean` Whether or not the pods hostname is set to its FQDN. --- ##### `nameservers`Required ```java public java.util.List getNameservers(); ``` - *Type:* java.util.List<`java.lang.String`> Nameservers defined for this pod. --- ##### `options`Required ```java public java.util.List getOptions(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.DnsOption`](#org.cdk8s.plus21.DnsOption)> Custom dns options defined for this pod. --- ##### `policy`Required ```java public DnsPolicy getPolicy(); ``` - *Type:* [`org.cdk8s.plus21.DnsPolicy`](#org.cdk8s.plus21.DnsPolicy) The DNS policy of this pod. --- ##### `searches`Required ```java public java.util.List getSearches(); ``` - *Type:* java.util.List<`java.lang.String`> Search domains defined for this pod. --- ##### `hostname`Optional ```java public java.lang.String getHostname(); ``` - *Type:* `java.lang.String` The configured hostname of the pod. Undefined means its set to a system-defined value. --- ##### `subdomain`Optional ```java public java.lang.String getSubdomain(); ``` - *Type:* `java.lang.String` The configured subdomain of the pod. --- ### Pods - *Implements:* [`org.cdk8s.plus21.IPodSelector`](#org.cdk8s.plus21.IPodSelector) Represents a group of pods. #### Initializers ```java import org.cdk8s.plus21.Pods; new Pods(); new Pods(java.util.List expressions); new Pods(java.util.List expressions, java.util.Map labels); new Pods(java.util.List expressions, java.util.Map labels, INamespaceSelector namespaces); ``` ##### `expressions`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.LabelExpression`](#org.cdk8s.plus21.LabelExpression)> --- ##### `labels`Optional - *Type:* java.util.Map --- ##### `namespaces`Optional - *Type:* [`org.cdk8s.plus21.INamespaceSelector`](#org.cdk8s.plus21.INamespaceSelector) --- #### Methods ##### `toPodSelectorConfig` ```java public toPodSelectorConfig() ``` #### Static Functions ##### `select` ```java import org.cdk8s.plus21.Pods; Pods.select(PodSelectOptions options) ``` ###### `options`Required - *Type:* [`org.cdk8s.plus21.PodSelectOptions`](#org.cdk8s.plus21.PodSelectOptions) --- ### PodScheduling Controls the pod scheduling strategy. #### Initializers ```java import org.cdk8s.plus21.PodScheduling; new PodScheduling(AbstractPod instance); ``` ##### `instance`Required - *Type:* [`org.cdk8s.plus21.AbstractPod`](#org.cdk8s.plus21.AbstractPod) --- #### Methods ##### `assign` ```java public assign(NamedNode node) ``` ###### `node`Required - *Type:* [`org.cdk8s.plus21.NamedNode`](#org.cdk8s.plus21.NamedNode) --- ##### `attract` ```java public attract(LabeledNode node) public attract(LabeledNode node, PodSchedulingAttractOptions options) ``` ###### `node`Required - *Type:* [`org.cdk8s.plus21.LabeledNode`](#org.cdk8s.plus21.LabeledNode) --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.PodSchedulingAttractOptions`](#org.cdk8s.plus21.PodSchedulingAttractOptions) --- ##### `colocate` ```java public colocate(IPodSelector selector) public colocate(IPodSelector selector, PodSchedulingColocateOptions options) ``` ###### `selector`Required - *Type:* [`org.cdk8s.plus21.IPodSelector`](#org.cdk8s.plus21.IPodSelector) --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.PodSchedulingColocateOptions`](#org.cdk8s.plus21.PodSchedulingColocateOptions) --- ##### `separate` ```java public separate(IPodSelector selector) public separate(IPodSelector selector, PodSchedulingSeparateOptions options) ``` ###### `selector`Required - *Type:* [`org.cdk8s.plus21.IPodSelector`](#org.cdk8s.plus21.IPodSelector) --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.PodSchedulingSeparateOptions`](#org.cdk8s.plus21.PodSchedulingSeparateOptions) --- ##### `tolerate` ```java public tolerate(TaintedNode node) ``` ###### `node`Required - *Type:* [`org.cdk8s.plus21.TaintedNode`](#org.cdk8s.plus21.TaintedNode) --- ### PodSecurityContext Holds pod-level security attributes and common container settings. #### Initializers ```java import org.cdk8s.plus21.PodSecurityContext; PodSecurityContext.Builder.create() // .ensureNonRoot(java.lang.Boolean) // .fsGroup(java.lang.Number) // .fsGroupChangePolicy(FsGroupChangePolicy) // .group(java.lang.Number) // .sysctls(java.util.List) // .user(java.lang.Number) .build(); ``` ##### `ensureNonRoot`Optional - *Type:* `java.lang.Boolean` - *Default:* false Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. --- ##### `fsGroup`Optional - *Type:* `java.lang.Number` - *Default:* Volume ownership is not changed. Modify the ownership and permissions of pod volumes to this GID. --- ##### `fsGroupChangePolicy`Optional - *Type:* [`org.cdk8s.plus21.FsGroupChangePolicy`](#org.cdk8s.plus21.FsGroupChangePolicy) - *Default:* FsGroupChangePolicy.ALWAYS Defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. --- ##### `group`Optional - *Type:* `java.lang.Number` - *Default:* Group configured by container runtime The GID to run the entrypoint of the container process. --- ##### `sysctls`Optional - *Type:* java.util.List<[`org.cdk8s.plus21.Sysctl`](#org.cdk8s.plus21.Sysctl)> - *Default:* No sysctls Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. --- ##### `user`Optional - *Type:* `java.lang.Number` - *Default:* User specified in image metadata The UID to run the entrypoint of the container process. --- #### Properties ##### `ensureNonRoot`Required ```java public java.lang.Boolean getEnsureNonRoot(); ``` - *Type:* `java.lang.Boolean` --- ##### `fsGroupChangePolicy`Required ```java public FsGroupChangePolicy getFsGroupChangePolicy(); ``` - *Type:* [`org.cdk8s.plus21.FsGroupChangePolicy`](#org.cdk8s.plus21.FsGroupChangePolicy) --- ##### `sysctls`Required ```java public java.util.List getSysctls(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.Sysctl`](#org.cdk8s.plus21.Sysctl)> --- ##### `fsGroup`Optional ```java public java.lang.Number getFsGroup(); ``` - *Type:* `java.lang.Number` --- ##### `group`Optional ```java public java.lang.Number getGroup(); ``` - *Type:* `java.lang.Number` --- ##### `user`Optional ```java public java.lang.Number getUser(); ``` - *Type:* `java.lang.Number` --- ### Probe Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic. #### Static Functions ##### `fromCommand` ```java import org.cdk8s.plus21.Probe; Probe.fromCommand(java.util.List command) Probe.fromCommand(java.util.List command, CommandProbeOptions options) ``` ###### `command`Required - *Type:* java.util.List<`java.lang.String`> The command to execute. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.CommandProbeOptions`](#org.cdk8s.plus21.CommandProbeOptions) Options. --- ##### `fromHttpGet` ```java import org.cdk8s.plus21.Probe; Probe.fromHttpGet(java.lang.String path) Probe.fromHttpGet(java.lang.String path, HttpGetProbeOptions options) ``` ###### `path`Required - *Type:* `java.lang.String` The URL path to hit. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.HttpGetProbeOptions`](#org.cdk8s.plus21.HttpGetProbeOptions) Options. --- ##### `fromTcpSocket` ```java import org.cdk8s.plus21.Probe; Probe.fromTcpSocket() Probe.fromTcpSocket(TcpSocketProbeOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.TcpSocketProbeOptions`](#org.cdk8s.plus21.TcpSocketProbeOptions) Options. --- ### StatefulSetUpdateStrategy StatefulSet update strategies. #### Static Functions ##### `onDelete` ```java import org.cdk8s.plus21.StatefulSetUpdateStrategy; StatefulSetUpdateStrategy.onDelete() ``` ##### `rollingUpdate` ```java import org.cdk8s.plus21.StatefulSetUpdateStrategy; StatefulSetUpdateStrategy.rollingUpdate() StatefulSetUpdateStrategy.rollingUpdate(StatefulSetUpdateStrategyRollingUpdateOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.StatefulSetUpdateStrategyRollingUpdateOptions`](#org.cdk8s.plus21.StatefulSetUpdateStrategyRollingUpdateOptions) --- ### TaintedNode A node that is matched by taint selectors. #### Initializers ```java import org.cdk8s.plus21.TaintedNode; new TaintedNode(java.util.List taintSelector); ``` ##### `taintSelector`Required - *Type:* java.util.List<[`org.cdk8s.plus21.NodeTaintQuery`](#org.cdk8s.plus21.NodeTaintQuery)> --- #### Properties ##### `taintSelector`Required ```java public java.util.List getTaintSelector(); ``` - *Type:* java.util.List<[`org.cdk8s.plus21.NodeTaintQuery`](#org.cdk8s.plus21.NodeTaintQuery)> --- ### Topology Available topology domains. #### Static Functions ##### `custom` ```java import org.cdk8s.plus21.Topology; Topology.custom(java.lang.String key) ``` ###### `key`Required - *Type:* `java.lang.String` --- #### Properties ##### `key`Required ```java public java.lang.String getKey(); ``` - *Type:* `java.lang.String` --- #### Constants ##### `HOSTNAME` - *Type:* [`org.cdk8s.plus21.Topology`](#org.cdk8s.plus21.Topology) A hostname represents a single node in the cluster. > https://kubernetes.io/docs/reference/labels-annotations-taints/#kubernetesiohostname --- ##### `REGION` - *Type:* [`org.cdk8s.plus21.Topology`](#org.cdk8s.plus21.Topology) A region represents a larger domain, made up of one or more zones. It is uncommon for Kubernetes clusters to span multiple regions. While the exact definition of a zone or region is left to infrastructure implementations, common properties of a region include higher network latency between them than within them, non-zero cost for network traffic between them, and failure independence from other zones or regions. For example, nodes within a region might share power infrastructure (e.g. a UPS or generator), but nodes in different regions typically would not. > https://kubernetes.io/docs/reference/labels-annotations-taints/#topologykubernetesioregion --- ##### `ZONE` - *Type:* [`org.cdk8s.plus21.Topology`](#org.cdk8s.plus21.Topology) A zone represents a logical failure domain. It is common for Kubernetes clusters to span multiple zones for increased availability. While the exact definition of a zone is left to infrastructure implementations, common properties of a zone include very low network latency within a zone, no-cost network traffic within a zone, and failure independence from other zones. For example, nodes within a zone might share a network switch, but nodes in different zones should not. > https://kubernetes.io/docs/reference/labels-annotations-taints/#topologykubernetesiozone --- ### User - *Implements:* [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) Represents a user. #### Initializers ```java import org.cdk8s.plus21.User; User.Builder.create() .name(java.lang.String) .build(); ``` ##### `name`Required - *Type:* `java.lang.String` The name of the user. --- #### Properties ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error. --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` Name of the object being referenced. --- ##### `apiGroup`Optional ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects. --- ### Volume - *Implements:* [`org.cdk8s.plus21.IStorage`](#org.cdk8s.plus21.IStorage) Volume represents a named volume in a pod that may be accessed by any container in the pod. Docker also has a concept of volumes, though it is somewhat looser and less managed. In Docker, a volume is simply a directory on disk or in another Container. Lifetimes are not managed and until very recently there were only local-disk-backed volumes. Docker now provides volume drivers, but the functionality is very limited for now (e.g. as of Docker 1.7 only one volume driver is allowed per Container and there is no way to pass parameters to volumes). A Kubernetes volume, on the other hand, has an explicit lifetime - the same as the Pod that encloses it. Consequently, a volume outlives any Containers that run within the Pod, and data is preserved across Container restarts. Of course, when a Pod ceases to exist, the volume will cease to exist, too. Perhaps more importantly than this, Kubernetes supports many types of volumes, and a Pod can use any number of them simultaneously. At its core, a volume is just a directory, possibly with some data in it, which is accessible to the Containers in a Pod. How that directory comes to be, the medium that backs it, and the contents of it are determined by the particular volume type used. To use a volume, a Pod specifies what volumes to provide for the Pod (the .spec.volumes field) and where to mount those into Containers (the .spec.containers[*].volumeMounts field). A process in a container sees a filesystem view composed from their Docker image and volumes. The Docker image is at the root of the filesystem hierarchy, and any volumes are mounted at the specified paths within the image. Volumes can not mount onto other volumes #### Methods ##### `asVolume` ```java public asVolume() ``` #### Static Functions ##### `fromAwsElasticBlockStore` ```java import org.cdk8s.plus21.Volume; Volume.fromAwsElasticBlockStore(java.lang.String volumeId) Volume.fromAwsElasticBlockStore(java.lang.String volumeId, AwsElasticBlockStoreVolumeOptions options) ``` ###### `volumeId`Required - *Type:* `java.lang.String` --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.AwsElasticBlockStoreVolumeOptions`](#org.cdk8s.plus21.AwsElasticBlockStoreVolumeOptions) --- ##### `fromAzureDisk` ```java import org.cdk8s.plus21.Volume; Volume.fromAzureDisk(java.lang.String diskName, java.lang.String diskUri) Volume.fromAzureDisk(java.lang.String diskName, java.lang.String diskUri, AzureDiskVolumeOptions options) ``` ###### `diskName`Required - *Type:* `java.lang.String` --- ###### `diskUri`Required - *Type:* `java.lang.String` --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.AzureDiskVolumeOptions`](#org.cdk8s.plus21.AzureDiskVolumeOptions) --- ##### `fromConfigMap` ```java import org.cdk8s.plus21.Volume; Volume.fromConfigMap(IConfigMap configMap) Volume.fromConfigMap(IConfigMap configMap, ConfigMapVolumeOptions options) ``` ###### `configMap`Required - *Type:* [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap) The config map to use to populate the volume. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.ConfigMapVolumeOptions`](#org.cdk8s.plus21.ConfigMapVolumeOptions) Options. --- ##### `fromEmptyDir` ```java import org.cdk8s.plus21.Volume; Volume.fromEmptyDir(java.lang.String name) Volume.fromEmptyDir(java.lang.String name, EmptyDirVolumeOptions options) ``` ###### `name`Required - *Type:* `java.lang.String` --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.EmptyDirVolumeOptions`](#org.cdk8s.plus21.EmptyDirVolumeOptions) Additional options. --- ##### `fromGcePersistentDisk` ```java import org.cdk8s.plus21.Volume; Volume.fromGcePersistentDisk(java.lang.String pdName) Volume.fromGcePersistentDisk(java.lang.String pdName, GCEPersistentDiskVolumeOptions options) ``` ###### `pdName`Required - *Type:* `java.lang.String` --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.GCEPersistentDiskVolumeOptions`](#org.cdk8s.plus21.GCEPersistentDiskVolumeOptions) --- ##### `fromPersistentVolumeClaim` ```java import org.cdk8s.plus21.Volume; Volume.fromPersistentVolumeClaim(IPersistentVolumeClaim claim) Volume.fromPersistentVolumeClaim(IPersistentVolumeClaim claim, PersistentVolumeClaimVolumeOptions options) ``` ###### `claim`Required - *Type:* [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.PersistentVolumeClaimVolumeOptions`](#org.cdk8s.plus21.PersistentVolumeClaimVolumeOptions) --- ##### `fromSecret` ```java import org.cdk8s.plus21.Volume; Volume.fromSecret(ISecret secr) Volume.fromSecret(ISecret secr, SecretVolumeOptions options) ``` ###### `secr`Required - *Type:* [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) The secret to use to populate the volume. --- ###### `options`Optional - *Type:* [`org.cdk8s.plus21.SecretVolumeOptions`](#org.cdk8s.plus21.SecretVolumeOptions) Options. --- #### Properties ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` --- ### WorkloadScheduling Controls the pod scheduling strategy of this workload. It offers some additional API's on top of the core pod scheduling. #### Initializers ```java import org.cdk8s.plus21.WorkloadScheduling; new WorkloadScheduling(AbstractPod instance); ``` ##### `instance`Required - *Type:* [`org.cdk8s.plus21.AbstractPod`](#org.cdk8s.plus21.AbstractPod) --- #### Methods ##### `spread` ```java public spread() public spread(WorkloadSchedulingSpreadOptions options) ``` ###### `options`Optional - *Type:* [`org.cdk8s.plus21.WorkloadSchedulingSpreadOptions`](#org.cdk8s.plus21.WorkloadSchedulingSpreadOptions) --- ## Protocols ### IApiEndpoint - *Implemented By:* [`org.cdk8s.plus21.AbstractPod`](#org.cdk8s.plus21.AbstractPod), [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource), [`org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume`](#org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume), [`org.cdk8s.plus21.AzureDiskPersistentVolume`](#org.cdk8s.plus21.AzureDiskPersistentVolume), [`org.cdk8s.plus21.BasicAuthSecret`](#org.cdk8s.plus21.BasicAuthSecret), [`org.cdk8s.plus21.ClusterRole`](#org.cdk8s.plus21.ClusterRole), [`org.cdk8s.plus21.ClusterRoleBinding`](#org.cdk8s.plus21.ClusterRoleBinding), [`org.cdk8s.plus21.ConfigMap`](#org.cdk8s.plus21.ConfigMap), [`org.cdk8s.plus21.DaemonSet`](#org.cdk8s.plus21.DaemonSet), [`org.cdk8s.plus21.Deployment`](#org.cdk8s.plus21.Deployment), [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret), [`org.cdk8s.plus21.GCEPersistentDiskPersistentVolume`](#org.cdk8s.plus21.GCEPersistentDiskPersistentVolume), [`org.cdk8s.plus21.IngressV1Beta1`](#org.cdk8s.plus21.IngressV1Beta1), [`org.cdk8s.plus21.Job`](#org.cdk8s.plus21.Job), [`org.cdk8s.plus21.Namespace`](#org.cdk8s.plus21.Namespace), [`org.cdk8s.plus21.NonApiResource`](#org.cdk8s.plus21.NonApiResource), [`org.cdk8s.plus21.PersistentVolume`](#org.cdk8s.plus21.PersistentVolume), [`org.cdk8s.plus21.PersistentVolumeClaim`](#org.cdk8s.plus21.PersistentVolumeClaim), [`org.cdk8s.plus21.Pod`](#org.cdk8s.plus21.Pod), [`org.cdk8s.plus21.Resource`](#org.cdk8s.plus21.Resource), [`org.cdk8s.plus21.Role`](#org.cdk8s.plus21.Role), [`org.cdk8s.plus21.RoleBinding`](#org.cdk8s.plus21.RoleBinding), [`org.cdk8s.plus21.Secret`](#org.cdk8s.plus21.Secret), [`org.cdk8s.plus21.Service`](#org.cdk8s.plus21.Service), [`org.cdk8s.plus21.ServiceAccount`](#org.cdk8s.plus21.ServiceAccount), [`org.cdk8s.plus21.ServiceAccountTokenSecret`](#org.cdk8s.plus21.ServiceAccountTokenSecret), [`org.cdk8s.plus21.SshAuthSecret`](#org.cdk8s.plus21.SshAuthSecret), [`org.cdk8s.plus21.StatefulSet`](#org.cdk8s.plus21.StatefulSet), [`org.cdk8s.plus21.TlsSecret`](#org.cdk8s.plus21.TlsSecret), [`org.cdk8s.plus21.Workload`](#org.cdk8s.plus21.Workload), [`org.cdk8s.plus21.IApiEndpoint`](#org.cdk8s.plus21.IApiEndpoint) An API Endpoint can either be a resource descriptor (e.g /pods) or a non resource url (e.g /healthz). It must be one or the other, and not both. #### Methods ##### `asApiResource` ```java public asApiResource() ``` ##### `asNonApiResource` ```java public asNonApiResource() ``` ### IApiResource - *Implemented By:* [`org.cdk8s.plus21.AbstractPod`](#org.cdk8s.plus21.AbstractPod), [`org.cdk8s.plus21.ApiResource`](#org.cdk8s.plus21.ApiResource), [`org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume`](#org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume), [`org.cdk8s.plus21.AzureDiskPersistentVolume`](#org.cdk8s.plus21.AzureDiskPersistentVolume), [`org.cdk8s.plus21.BasicAuthSecret`](#org.cdk8s.plus21.BasicAuthSecret), [`org.cdk8s.plus21.ClusterRole`](#org.cdk8s.plus21.ClusterRole), [`org.cdk8s.plus21.ClusterRoleBinding`](#org.cdk8s.plus21.ClusterRoleBinding), [`org.cdk8s.plus21.ConfigMap`](#org.cdk8s.plus21.ConfigMap), [`org.cdk8s.plus21.DaemonSet`](#org.cdk8s.plus21.DaemonSet), [`org.cdk8s.plus21.Deployment`](#org.cdk8s.plus21.Deployment), [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret), [`org.cdk8s.plus21.GCEPersistentDiskPersistentVolume`](#org.cdk8s.plus21.GCEPersistentDiskPersistentVolume), [`org.cdk8s.plus21.IngressV1Beta1`](#org.cdk8s.plus21.IngressV1Beta1), [`org.cdk8s.plus21.Job`](#org.cdk8s.plus21.Job), [`org.cdk8s.plus21.Namespace`](#org.cdk8s.plus21.Namespace), [`org.cdk8s.plus21.PersistentVolume`](#org.cdk8s.plus21.PersistentVolume), [`org.cdk8s.plus21.PersistentVolumeClaim`](#org.cdk8s.plus21.PersistentVolumeClaim), [`org.cdk8s.plus21.Pod`](#org.cdk8s.plus21.Pod), [`org.cdk8s.plus21.Resource`](#org.cdk8s.plus21.Resource), [`org.cdk8s.plus21.Role`](#org.cdk8s.plus21.Role), [`org.cdk8s.plus21.RoleBinding`](#org.cdk8s.plus21.RoleBinding), [`org.cdk8s.plus21.Secret`](#org.cdk8s.plus21.Secret), [`org.cdk8s.plus21.Service`](#org.cdk8s.plus21.Service), [`org.cdk8s.plus21.ServiceAccount`](#org.cdk8s.plus21.ServiceAccount), [`org.cdk8s.plus21.ServiceAccountTokenSecret`](#org.cdk8s.plus21.ServiceAccountTokenSecret), [`org.cdk8s.plus21.SshAuthSecret`](#org.cdk8s.plus21.SshAuthSecret), [`org.cdk8s.plus21.StatefulSet`](#org.cdk8s.plus21.StatefulSet), [`org.cdk8s.plus21.TlsSecret`](#org.cdk8s.plus21.TlsSecret), [`org.cdk8s.plus21.Workload`](#org.cdk8s.plus21.Workload), [`org.cdk8s.plus21.IApiResource`](#org.cdk8s.plus21.IApiResource) Represents a resource or collection of resources. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. `authorization.k8s.io`). --- ##### `resourceType`Required ```java public java.lang.String getResourceType(); ``` - *Type:* `java.lang.String` The name of a resource type as it appears in the relevant API endpoint. > https://kubernetes.io/docs/reference/access-authn-authz/rbac/#referring-to-resources --- ##### `resourceName`Optional ```java public java.lang.String getResourceName(); ``` - *Type:* `java.lang.String` The unique, namespace-global, name of an object inside the Kubernetes cluster. If this is omitted, the ApiResource should represent all objects of the given type. --- ### IClusterRole - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.ClusterRole`](#org.cdk8s.plus21.ClusterRole), [`org.cdk8s.plus21.IClusterRole`](#org.cdk8s.plus21.IClusterRole) Represents a cluster-level role. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### IConfigMap - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.ConfigMap`](#org.cdk8s.plus21.ConfigMap), [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap) Represents a config map. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### INamespaceSelector - *Implemented By:* [`org.cdk8s.plus21.Namespace`](#org.cdk8s.plus21.Namespace), [`org.cdk8s.plus21.Namespaces`](#org.cdk8s.plus21.Namespaces), [`org.cdk8s.plus21.INamespaceSelector`](#org.cdk8s.plus21.INamespaceSelector) Represents an object that can select namespaces. #### Methods ##### `toNamespaceSelectorConfig` ```java public toNamespaceSelectorConfig() ``` ### IPersistentVolume - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume`](#org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume), [`org.cdk8s.plus21.AzureDiskPersistentVolume`](#org.cdk8s.plus21.AzureDiskPersistentVolume), [`org.cdk8s.plus21.GCEPersistentDiskPersistentVolume`](#org.cdk8s.plus21.GCEPersistentDiskPersistentVolume), [`org.cdk8s.plus21.PersistentVolume`](#org.cdk8s.plus21.PersistentVolume), [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume) Contract of a `PersistentVolumeClaim`. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### IPersistentVolumeClaim - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.PersistentVolumeClaim`](#org.cdk8s.plus21.PersistentVolumeClaim), [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim) Contract of a `PersistentVolumeClaim`. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### IPodSelector - *Implemented By:* [`org.cdk8s.plus21.AbstractPod`](#org.cdk8s.plus21.AbstractPod), [`org.cdk8s.plus21.DaemonSet`](#org.cdk8s.plus21.DaemonSet), [`org.cdk8s.plus21.Deployment`](#org.cdk8s.plus21.Deployment), [`org.cdk8s.plus21.Job`](#org.cdk8s.plus21.Job), [`org.cdk8s.plus21.Pod`](#org.cdk8s.plus21.Pod), [`org.cdk8s.plus21.Pods`](#org.cdk8s.plus21.Pods), [`org.cdk8s.plus21.StatefulSet`](#org.cdk8s.plus21.StatefulSet), [`org.cdk8s.plus21.Workload`](#org.cdk8s.plus21.Workload), [`org.cdk8s.plus21.IPodSelector`](#org.cdk8s.plus21.IPodSelector) Represents an object that can select pods. #### Methods ##### `toPodSelectorConfig` ```java public toPodSelectorConfig() ``` ### IResource - *Implemented By:* [`org.cdk8s.plus21.AbstractPod`](#org.cdk8s.plus21.AbstractPod), [`org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume`](#org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume), [`org.cdk8s.plus21.AzureDiskPersistentVolume`](#org.cdk8s.plus21.AzureDiskPersistentVolume), [`org.cdk8s.plus21.BasicAuthSecret`](#org.cdk8s.plus21.BasicAuthSecret), [`org.cdk8s.plus21.ClusterRole`](#org.cdk8s.plus21.ClusterRole), [`org.cdk8s.plus21.ClusterRoleBinding`](#org.cdk8s.plus21.ClusterRoleBinding), [`org.cdk8s.plus21.ConfigMap`](#org.cdk8s.plus21.ConfigMap), [`org.cdk8s.plus21.DaemonSet`](#org.cdk8s.plus21.DaemonSet), [`org.cdk8s.plus21.Deployment`](#org.cdk8s.plus21.Deployment), [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret), [`org.cdk8s.plus21.GCEPersistentDiskPersistentVolume`](#org.cdk8s.plus21.GCEPersistentDiskPersistentVolume), [`org.cdk8s.plus21.IngressV1Beta1`](#org.cdk8s.plus21.IngressV1Beta1), [`org.cdk8s.plus21.Job`](#org.cdk8s.plus21.Job), [`org.cdk8s.plus21.Namespace`](#org.cdk8s.plus21.Namespace), [`org.cdk8s.plus21.PersistentVolume`](#org.cdk8s.plus21.PersistentVolume), [`org.cdk8s.plus21.PersistentVolumeClaim`](#org.cdk8s.plus21.PersistentVolumeClaim), [`org.cdk8s.plus21.Pod`](#org.cdk8s.plus21.Pod), [`org.cdk8s.plus21.Resource`](#org.cdk8s.plus21.Resource), [`org.cdk8s.plus21.Role`](#org.cdk8s.plus21.Role), [`org.cdk8s.plus21.RoleBinding`](#org.cdk8s.plus21.RoleBinding), [`org.cdk8s.plus21.Secret`](#org.cdk8s.plus21.Secret), [`org.cdk8s.plus21.Service`](#org.cdk8s.plus21.Service), [`org.cdk8s.plus21.ServiceAccount`](#org.cdk8s.plus21.ServiceAccount), [`org.cdk8s.plus21.ServiceAccountTokenSecret`](#org.cdk8s.plus21.ServiceAccountTokenSecret), [`org.cdk8s.plus21.SshAuthSecret`](#org.cdk8s.plus21.SshAuthSecret), [`org.cdk8s.plus21.StatefulSet`](#org.cdk8s.plus21.StatefulSet), [`org.cdk8s.plus21.TlsSecret`](#org.cdk8s.plus21.TlsSecret), [`org.cdk8s.plus21.Workload`](#org.cdk8s.plus21.Workload), [`org.cdk8s.plus21.IClusterRole`](#org.cdk8s.plus21.IClusterRole), [`org.cdk8s.plus21.IConfigMap`](#org.cdk8s.plus21.IConfigMap), [`org.cdk8s.plus21.IPersistentVolume`](#org.cdk8s.plus21.IPersistentVolume), [`org.cdk8s.plus21.IPersistentVolumeClaim`](#org.cdk8s.plus21.IPersistentVolumeClaim), [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource), [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole), [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret), [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) Represents a resource. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### IRole - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.ClusterRole`](#org.cdk8s.plus21.ClusterRole), [`org.cdk8s.plus21.Role`](#org.cdk8s.plus21.Role), [`org.cdk8s.plus21.IRole`](#org.cdk8s.plus21.IRole) A reference to any Role or ClusterRole. #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### ISecret - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.BasicAuthSecret`](#org.cdk8s.plus21.BasicAuthSecret), [`org.cdk8s.plus21.DockerConfigSecret`](#org.cdk8s.plus21.DockerConfigSecret), [`org.cdk8s.plus21.Secret`](#org.cdk8s.plus21.Secret), [`org.cdk8s.plus21.ServiceAccountTokenSecret`](#org.cdk8s.plus21.ServiceAccountTokenSecret), [`org.cdk8s.plus21.SshAuthSecret`](#org.cdk8s.plus21.SshAuthSecret), [`org.cdk8s.plus21.TlsSecret`](#org.cdk8s.plus21.TlsSecret), [`org.cdk8s.plus21.ISecret`](#org.cdk8s.plus21.ISecret) #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### IServiceAccount - *Extends:* [`org.cdk8s.plus21.IResource`](#org.cdk8s.plus21.IResource) - *Implemented By:* [`org.cdk8s.plus21.ServiceAccount`](#org.cdk8s.plus21.ServiceAccount), [`org.cdk8s.plus21.IServiceAccount`](#org.cdk8s.plus21.IServiceAccount) #### Properties ##### `apiGroup`Required ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` The group portion of the API version (e.g. "authorization.k8s.io"). --- ##### `apiVersion`Required ```java public java.lang.String getApiVersion(); ``` - *Type:* `java.lang.String` The object's API version (e.g. "authorization.k8s.io/v1"). --- ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` The object kind (e.g. "Deployment"). --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` The Kubernetes name of this resource. --- ### IStorage - *Implemented By:* [`org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume`](#org.cdk8s.plus21.AwsElasticBlockStorePersistentVolume), [`org.cdk8s.plus21.AzureDiskPersistentVolume`](#org.cdk8s.plus21.AzureDiskPersistentVolume), [`org.cdk8s.plus21.GCEPersistentDiskPersistentVolume`](#org.cdk8s.plus21.GCEPersistentDiskPersistentVolume), [`org.cdk8s.plus21.PersistentVolume`](#org.cdk8s.plus21.PersistentVolume), [`org.cdk8s.plus21.Volume`](#org.cdk8s.plus21.Volume), [`org.cdk8s.plus21.IStorage`](#org.cdk8s.plus21.IStorage) Represents a piece of storage in the cluster. #### Methods ##### `asVolume` ```java public asVolume() ``` ### ISubject - *Implemented By:* [`org.cdk8s.plus21.Group`](#org.cdk8s.plus21.Group), [`org.cdk8s.plus21.ServiceAccount`](#org.cdk8s.plus21.ServiceAccount), [`org.cdk8s.plus21.User`](#org.cdk8s.plus21.User), [`org.cdk8s.plus21.ISubject`](#org.cdk8s.plus21.ISubject) Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names. #### Properties ##### `kind`Required ```java public java.lang.String getKind(); ``` - *Type:* `java.lang.String` Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error. --- ##### `name`Required ```java public java.lang.String getName(); ``` - *Type:* `java.lang.String` Name of the object being referenced. --- ##### `apiGroup`Optional ```java public java.lang.String getApiGroup(); ``` - *Type:* `java.lang.String` APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects. --- ##### `namespace`Optional ```java public java.lang.String getNamespace(); ``` - *Type:* `java.lang.String` Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error. --- ## Enums ### AzureDiskPersistentVolumeCachingMode Azure disk caching modes. #### `NONE` None. --- #### `READ_ONLY` ReadOnly. --- #### `READ_WRITE` ReadWrite. --- ### AzureDiskPersistentVolumeKind Azure Disk kinds. #### `SHARED` Multiple blob disks per storage account. --- #### `DEDICATED` Single blob disk per storage account. --- #### `MANAGED` Azure managed data disk. --- ### DnsPolicy Pod DNS policies. #### `CLUSTER_FIRST` Any DNS query that does not match the configured cluster domain suffix, such as "www.kubernetes.io", is forwarded to the upstream nameserver inherited from the node. Cluster administrators may have extra stub-domain and upstream DNS servers configured. --- #### `CLUSTER_FIRST_WITH_HOST_NET` For Pods running with hostNetwork, you should explicitly set its DNS policy "ClusterFirstWithHostNet". --- #### `DEFAULT` The Pod inherits the name resolution configuration from the node that the pods run on. --- #### `NONE` It allows a Pod to ignore DNS settings from the Kubernetes environment. All DNS settings are supposed to be provided using the dnsConfig field in the Pod Spec. --- ### EmptyDirMedium The medium on which to store the volume. #### `DEFAULT` The default volume of the backing node. --- #### `MEMORY` Mount a tmpfs (RAM-backed filesystem) for you instead. While tmpfs is very fast, be aware that unlike disks, tmpfs is cleared on node reboot and any files you write will count against your Container's memory limit. --- ### EnvFieldPaths #### `POD_NAME` The name of the pod. --- #### `POD_NAMESPACE` The namespace of the pod. --- #### `POD_UID` The uid of the pod. --- #### `POD_LABEL` The labels of the pod. --- #### `POD_ANNOTATION` The annotations of the pod. --- #### `POD_IP` The ipAddress of the pod. --- #### `SERVICE_ACCOUNT_NAME` The service account name of the pod. --- #### `NODE_NAME` The name of the node. --- #### `NODE_IP` The ipAddress of the node. --- #### `POD_IPS` The ipAddresess of the pod. --- ### FsGroupChangePolicy #### `ON_ROOT_MISMATCH` Only change permissions and ownership if permission and ownership of root directory does not match with expected permissions of the volume. This could help shorten the time it takes to change ownership and permission of a volume --- #### `ALWAYS` Always change permission and ownership of the volume when volume is mounted. --- ### ImagePullPolicy #### `ALWAYS` Every time the kubelet launches a container, the kubelet queries the container image registry to resolve the name to an image digest. If the kubelet has a container image with that exact digest cached locally, the kubelet uses its cached image; otherwise, the kubelet downloads (pulls) the image with the resolved digest, and uses that image to launch the container. Default is Always if ImagePullPolicy is omitted and either the image tag is :latest or the image tag is omitted. --- #### `IF_NOT_PRESENT` The image is pulled only if it is not already present locally. Default is IfNotPresent if ImagePullPolicy is omitted and the image tag is present but not :latest --- #### `NEVER` The image is assumed to exist locally. No attempt is made to pull the image. --- ### MountPropagation #### `NONE` This volume mount will not receive any subsequent mounts that are mounted to this volume or any of its subdirectories by the host. In similar fashion, no mounts created by the Container will be visible on the host. This is the default mode. This mode is equal to `private` mount propagation as described in the Linux kernel documentation --- #### `HOST_TO_CONTAINER` This volume mount will receive all subsequent mounts that are mounted to this volume or any of its subdirectories. In other words, if the host mounts anything inside the volume mount, the Container will see it mounted there. Similarly, if any Pod with Bidirectional mount propagation to the same volume mounts anything there, the Container with HostToContainer mount propagation will see it. This mode is equal to `rslave` mount propagation as described in the Linux kernel documentation --- #### `BIDIRECTIONAL` This volume mount behaves the same the HostToContainer mount. In addition, all volume mounts created by the Container will be propagated back to the host and to all Containers of all Pods that use the same volume A typical use case for this mode is a Pod with a FlexVolume or CSI driver or a Pod that needs to mount something on the host using a hostPath volume. This mode is equal to `rshared` mount propagation as described in the Linux kernel documentation Caution: Bidirectional mount propagation can be dangerous. It can damage the host operating system and therefore it is allowed only in privileged Containers. Familiarity with Linux kernel behavior is strongly recommended. In addition, any volume mounts created by Containers in Pods must be destroyed (unmounted) by the Containers on termination. --- ### PersistentVolumeAccessMode Access Modes. #### `READ_WRITE_ONCE` The volume can be mounted as read-write by a single node. ReadWriteOnce access mode still can allow multiple pods to access the volume when the pods are running on the same node. --- #### `READ_ONLY_MANY` The volume can be mounted as read-only by many nodes. --- #### `READ_WRITE_MANY` The volume can be mounted as read-write by many nodes. --- #### `READ_WRITE_ONCE_POD` The volume can be mounted as read-write by a single Pod. Use ReadWriteOncePod access mode if you want to ensure that only one pod across whole cluster can read that PVC or write to it. This is only supported for CSI volumes and Kubernetes version 1.22+. --- ### PersistentVolumeMode Volume Modes. #### `FILE_SYSTEM` Volume is ounted into Pods into a directory. If the volume is backed by a block device and the device is empty, Kubernetes creates a filesystem on the device before mounting it for the first time. --- #### `BLOCK` Use a volume as a raw block device. Such volume is presented into a Pod as a block device, without any filesystem on it. This mode is useful to provide a Pod the fastest possible way to access a volume, without any filesystem layer between the Pod and the volume. On the other hand, the application running in the Pod must know how to handle a raw block device --- ### PersistentVolumeReclaimPolicy Reclaim Policies. #### `RETAIN` The Retain reclaim policy allows for manual reclamation of the resource. When the PersistentVolumeClaim is deleted, the PersistentVolume still exists and the volume is considered "released". But it is not yet available for another claim because the previous claimant's data remains on the volume. An administrator can manually reclaim the volume with the following steps: 1. Delete the PersistentVolume. The associated storage asset in external infrastructure (such as an AWS EBS, GCE PD, Azure Disk, or Cinder volume) still exists after the PV is deleted. 2. Manually clean up the data on the associated storage asset accordingly. 3. Manually delete the associated storage asset. If you want to reuse the same storage asset, create a new PersistentVolume with the same storage asset definition. --- #### `DELETE` For volume plugins that support the Delete reclaim policy, deletion removes both the PersistentVolume object from Kubernetes, as well as the associated storage asset in the external infrastructure, such as an AWS EBS, GCE PD, Azure Disk, or Cinder volume. Volumes that were dynamically provisioned inherit the reclaim policy of their StorageClass, which defaults to Delete. The administrator should configure the StorageClass according to users' expectations; otherwise, the PV must be edited or patched after it is created --- ### PodManagementPolicy Controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once. #### `ORDERED_READY` --- #### `PARALLEL` --- ### Protocol #### `TCP` --- #### `UDP` --- #### `SCTP` --- ### ResourceFieldPaths #### `CPU_LIMIT` CPU limit of the container. --- #### `MEMORY_LIMIT` Memory limit of the container. --- #### `CPU_REQUEST` CPU request of the container. --- #### `MEMORY_REQUEST` Memory request of the container. --- #### `STORAGE_LIMIT` Ephemeral storage limit of the container. --- #### `STORAGE_REQUEST` Ephemeral storage request of the container. --- ### RestartPolicy Restart policy for all containers within the pod. #### `ALWAYS` Always restart the pod after it exits. --- #### `ON_FAILURE` Only restart if the pod exits with a non-zero exit code. --- #### `NEVER` Never restart the pod. --- ### ServiceType For some parts of your application (for example, frontends) you may want to expose a Service onto an external IP address, that's outside of your cluster. Kubernetes ServiceTypes allow you to specify what kind of Service you want. The default is ClusterIP. #### `CLUSTER_IP` Exposes the Service on a cluster-internal IP. Choosing this value makes the Service only reachable from within the cluster. This is the default ServiceType --- #### `NODE_PORT` Exposes the Service on each Node's IP at a static port (the NodePort). A ClusterIP Service, to which the NodePort Service routes, is automatically created. You'll be able to contact the NodePort Service, from outside the cluster, by requesting :. --- #### `LOAD_BALANCER` Exposes the Service externally using a cloud provider's load balancer. NodePort and ClusterIP Services, to which the external load balancer routes, are automatically created. --- #### `EXTERNAL_NAME` Maps the Service to the contents of the externalName field (e.g. foo.bar.example.com), by returning a CNAME record with its value. No proxying of any kind is set up. > Note: You need either kube-dns version 1.7 or CoreDNS version 0.0.8 or higher to use the ExternalName type. --- ### TaintEffect Taint effects. #### `NO_SCHEDULE` This means that no pod will be able to schedule onto the node unless it has a matching toleration. --- #### `PREFER_NO_SCHEDULE` This is a "preference" or "soft" version of `NO_SCHEDULE` -- the system will try to avoid placing a pod that does not tolerate the taint on the node, but it is not required. --- #### `NO_EXECUTE` This affects pods that are already running on the node as follows:. * Pods that do not tolerate the taint are evicted immediately. * Pods that tolerate the taint without specifying `duration` remain bound forever. * Pods that tolerate the taint with a specified `duration` remain bound for the specified amount of time. ---