github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

api: KEP-3857: Recursive Read-only (RRO) mounts

Browse Source 
This commit modifies the following files:

- pkg/apis/core/types.go
- staging/src/k8s.io/api/core/v1/types.go

Other changes were auto-generated by running `make update`.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
This commit is contained in:
Akihiro Suda
2024-03-09 09:48:12 +09:00
parent 0b1a507b00
commit d940886d0a
84 changed files with 3255 additions and 1117 deletions
Download Patch File Download Diff File Expand all files Collapse all files

77
api/openapi-spec/swagger.json generated
View File

@@ -6518,6 +6518,19 @@
"state": {
"$ref": "#/definitions/io.k8s.api.core.v1.ContainerState",
"description": "State holds details about the container's current condition."
},
"volumeMounts": {
"description": "Status of volume mounts.",
"items": {
"$ref": "#/definitions/io.k8s.api.core.v1.VolumeMountStatus"
},
"type": "array",
"x-kubernetes-list-map-keys": [
"mountPath"
],
"x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "mountPath",
"x-kubernetes-patch-strategy": "merge"
}
},
"required": [
@@ -8212,6 +8225,30 @@
}
]
},
"io.k8s.api.core.v1.NodeRuntimeClass": {
"description": "NodeRuntimeClass is a set of runtime class information.",
"properties": {
"features": {
"$ref": "#/definitions/io.k8s.api.core.v1.NodeRuntimeClassFeatures",
"description": "Supported features."
},
"name": {
"description": "Runtime class name. Empty for the default runtime class.",
"type": "string"
}
},
"type": "object"
},
"io.k8s.api.core.v1.NodeRuntimeClassFeatures": {
"description": "NodeRuntimeClassFeatures is a set of runtime features.",
"properties": {
"recursiveReadOnlyMounts": {
"description": "RecursiveReadOnlyMounts is set to true if the runtime class supports RecursiveReadOnlyMounts.",
"type": "boolean"
}
},
"type": "object"
},
"io.k8s.api.core.v1.NodeSelector": {
"description": "A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.",
"properties": {
@@ -8389,6 +8426,14 @@
"description": "NodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.",
"type": "string"
},
"runtimeClasses": {
"description": "The available runtime classes.",
"items": {
"$ref": "#/definitions/io.k8s.api.core.v1.NodeRuntimeClass"
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"volumesAttached": {
"description": "List of volumes that are attached to the node.",
"items": {
@@ -11689,7 +11734,7 @@
"type": "string"
},
"mountPropagation": {
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.",
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).",
"type": "string"
},
"name": {
@@ -11700,6 +11745,10 @@
"description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.",
"type": "boolean"
},
"recursiveReadOnly": {
"description": "RecursiveReadOnly specifies whether read-only mounts should be handled recursively.\n\nIf ReadOnly is false, this field has no meaning and must be unspecified.\n\nIf ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.\n\nIf this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).\n\nIf this field is not specified, it is treated as an equivalent of Disabled.",
"type": "string"
},
"subPath": {
"description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).",
"type": "string"
@@ -11715,6 +11764,32 @@
],
"type": "object"
},
"io.k8s.api.core.v1.VolumeMountStatus": {
"description": "VolumeMountStatus shows status of volume mounts.",
"properties": {
"mountPath": {
"description": "MountPath corresponds to the original VolumeMount.",
"type": "string"
},
"name": {
"description": "Name corresponds to the name of the original VolumeMount.",
"type": "string"
},
"readOnly": {
"description": "ReadOnly corresponds to the original VolumeMount.",
"type": "boolean"
},
"recursiveReadOnly": {
"description": "RecursiveReadOnly must be set to Disabled, Enabled, or unspecified (for non-readonly mounts). An IfPossible value in the original VolumeMount must be translated to Disabled or Enabled, depending on the mount result.",
"type": "string"
}
},
"required": [
"name",
"mountPath"
],
"type": "object"
},
"io.k8s.api.core.v1.VolumeNodeAffinity": {
"description": "VolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.",
"properties": {

94
api/openapi-spec/v3/api__v1_openapi.json
View File

@@ -1590,6 +1590,24 @@
],
"default": {},
"description": "State holds details about the container's current condition."
},
"volumeMounts": {
"description": "Status of volume mounts.",
"items": {
"allOf": [
{
"$ref": "#/components/schemas/io.k8s.api.core.v1.VolumeMountStatus"
}
],
"default": {}
},
"type": "array",
"x-kubernetes-list-map-keys": [
"mountPath"
],
"x-kubernetes-list-type": "map",
"x-kubernetes-patch-merge-key": "mountPath",
"x-kubernetes-patch-strategy": "merge"
}
},
"required": [
@@ -3709,6 +3727,35 @@
}
]
},
"io.k8s.api.core.v1.NodeRuntimeClass": {
"description": "NodeRuntimeClass is a set of runtime class information.",
"properties": {
"features": {
"allOf": [
{
"$ref": "#/components/schemas/io.k8s.api.core.v1.NodeRuntimeClassFeatures"
}
],
"description": "Supported features."
},
"name": {
"default": "",
"description": "Runtime class name. Empty for the default runtime class.",
"type": "string"
}
},
"type": "object"
},
"io.k8s.api.core.v1.NodeRuntimeClassFeatures": {
"description": "NodeRuntimeClassFeatures is a set of runtime features.",
"properties": {
"recursiveReadOnlyMounts": {
"description": "RecursiveReadOnlyMounts is set to true if the runtime class supports RecursiveReadOnlyMounts.",
"type": "boolean"
}
},
"type": "object"
},
"io.k8s.api.core.v1.NodeSelector": {
"description": "A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.",
"properties": {
@@ -3943,6 +3990,19 @@
"description": "NodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.",
"type": "string"
},
"runtimeClasses": {
"description": "The available runtime classes.",
"items": {
"allOf": [
{
"$ref": "#/components/schemas/io.k8s.api.core.v1.NodeRuntimeClass"
}
],
"default": {}
},
"type": "array",
"x-kubernetes-list-type": "atomic"
},
"volumesAttached": {
"description": "List of volumes that are attached to the node.",
"items": {
@@ -8106,7 +8166,7 @@
"type": "string"
},
"mountPropagation": {
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.",
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).",
"type": "string"
},
"name": {
@@ -8118,6 +8178,10 @@
"description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.",
"type": "boolean"
},
"recursiveReadOnly": {
"description": "RecursiveReadOnly specifies whether read-only mounts should be handled recursively.\n\nIf ReadOnly is false, this field has no meaning and must be unspecified.\n\nIf ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.\n\nIf this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).\n\nIf this field is not specified, it is treated as an equivalent of Disabled.",
"type": "string"
},
"subPath": {
"description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).",
"type": "string"
@@ -8133,6 +8197,34 @@
],
"type": "object"
},
"io.k8s.api.core.v1.VolumeMountStatus": {
"description": "VolumeMountStatus shows status of volume mounts.",
"properties": {
"mountPath": {
"default": "",
"description": "MountPath corresponds to the original VolumeMount.",
"type": "string"
},
"name": {
"default": "",
"description": "Name corresponds to the name of the original VolumeMount.",
"type": "string"
},
"readOnly": {
"description": "ReadOnly corresponds to the original VolumeMount.",
"type": "boolean"
},
"recursiveReadOnly": {
"description": "RecursiveReadOnly must be set to Disabled, Enabled, or unspecified (for non-readonly mounts). An IfPossible value in the original VolumeMount must be translated to Disabled or Enabled, depending on the mount result.",
"type": "string"
}
},
"required": [
"name",
"mountPath"
],
"type": "object"
},
"io.k8s.api.core.v1.VolumeNodeAffinity": {
"description": "VolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.",
"properties": {

6
api/openapi-spec/v3/apis__apps__v1_openapi.json
View File

@@ -5147,7 +5147,7 @@
"type": "string"
},
"mountPropagation": {
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.",
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).",
"type": "string"
},
"name": {
@@ -5159,6 +5159,10 @@
"description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.",
"type": "boolean"
},
"recursiveReadOnly": {
"description": "RecursiveReadOnly specifies whether read-only mounts should be handled recursively.\n\nIf ReadOnly is false, this field has no meaning and must be unspecified.\n\nIf ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.\n\nIf this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).\n\nIf this field is not specified, it is treated as an equivalent of Disabled.",
"type": "string"
},
"subPath": {
"description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).",
"type": "string"

6
api/openapi-spec/v3/apis__batch__v1_openapi.json
View File

@@ -4351,7 +4351,7 @@
"type": "string"
},
"mountPropagation": {
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.",
"description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).",
"type": "string"
},
"name": {
@@ -4363,6 +4363,10 @@
"description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.",
"type": "boolean"
},
"recursiveReadOnly": {
"description": "RecursiveReadOnly specifies whether read-only mounts should be handled recursively.\n\nIf ReadOnly is false, this field has no meaning and must be unspecified.\n\nIf ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.\n\nIf this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).\n\nIf this field is not specified, it is treated as an equivalent of Disabled.",
"type": "string"
},
"subPath": {
"description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).",
"type": "string"