From d701e97451863899779fc21815da2c8a1b870298 Mon Sep 17 00:00:00 2001 From: Anna Date: Thu, 14 Jul 2022 03:44:34 -0400 Subject: [PATCH] Update kubeflow/pipelines manifests from 2.0.0-alpha.3 (#2250) * Update kubeflow/pipelines manifests from 2.0.0-alpha.3 Signed-off-by: Anna Jung (VMware) * Move pipeline manifest test commands to a separate script Signed-off-by: Anna Jung (VMware) * Change pipeline installation command back to apply crd only Signed-off-by: Anna Jung (VMware) --- .github/workflows/pipeline_kind_test.yaml | 6 +- README.md | 2 +- apps/pipeline/upstream/OWNERS | 1 - .../base/cache-deployer/kustomization.yaml | 2 +- .../upstream/base/cache/kustomization.yaml | 2 +- .../generic/pipeline-install-config.yaml | 2 +- .../pipelines-profile-controller/sync.py | 6 +- .../pipelines-profile-controller/test_sync.py | 6 +- .../base/metadata/base/kustomization.yaml | 2 +- .../upstream/base/pipeline/kustomization.yaml | 12 +- .../metadata-writer/kustomization.yaml | 2 +- .../ml-pipeline-apiserver-deployment.yaml | 15 + apps/pipeline/upstream/env/aws/README.md | 2 +- .../env/gcp/inverse-proxy/kustomization.yaml | 2 +- .../workflow-controller-configmap-patch.yaml | 6 +- .../workflow-controller-configmap-patch.yaml | 6 +- .../workflow-controller-configmap-patch.yaml | 6 +- .../workflow-controller-configmap-patch.yaml | 6 +- .../workflow-controller-deployment-patch.yaml | 4 +- .../argo/upstream/manifests/Kptfile | 6 +- .../argo-server/argo-server-deployment.yaml | 4 + .../argoproj.io_clusterworkflowtemplates.yaml | 1027 +++++- .../crds/full/argoproj.io_cronworkflows.yaml | 1029 +++++- .../argoproj.io_workfloweventbindings.yaml | 2 + .../base/crds/full/argoproj.io_workflows.yaml | 2921 ++++++++++++++--- .../full/argoproj.io_workflowtaskresults.yaml | 426 +++ .../full/argoproj.io_workflowtasksets.yaml | 219 +- .../full/argoproj.io_workflowtemplates.yaml | 1027 +++++- .../base/crds/full/kustomization.yaml | 1 + .../argoproj.io_workflowtaskresults.yaml | 425 +++ .../minimal/argoproj.io_workflowtasksets.yaml | 2 + .../base/crds/minimal/kustomization.yaml | 1 + .../workflow-controller/kustomization.yaml | 1 + .../workflow-controller-deployment.yaml | 1 + .../workflow-controller-metrics-service.yaml | 5 + .../workflow-controller-priorityclass.yaml | 5 + .../argo-server-clusterole.yaml | 3 + .../cluster-install/kustomization.yaml | 1 + .../workflow-controller-clusterrole.yaml | 10 + .../argo-server-rbac/argo-server-role.yaml | 3 + .../workflow-controller-role.yaml | 17 + .../base/agent-default-rolebinding.yaml | 11 + .../quick-start/base/agent-role.yaml | 24 + .../base/executor-default-rolebinding.yaml | 11 + .../base/executor/docker/executor-role.yaml | 17 + .../base/executor/emissary/executor-role.yaml | 15 + .../base/executor/k8sapi/executor-role.yaml | 36 + .../base/executor/kubelet/executor-role.yaml | 17 + .../kubelet-executor-clusterrole.yaml | 0 ...t-executor-default-clusterrolebinding.yaml | 0 .../base/executor/pns/executor-role.yaml | 27 + .../quick-start/base/kustomization.yaml | 12 +- .../base/memoizer-default-rolebinding.yaml | 11 + .../quick-start/base/memoizer-role.yaml | 16 + .../quick-start/base/minio/minio-deploy.yaml | 2 +- .../quick-start/base/minio/minio-pod.yaml | 34 - .../workflow-controller-configmap.yaml | 9 +- .../base/pod-manager-default-rolebinding.yaml | 11 + .../quick-start/base/pod-manager-role.yaml | 17 + .../base/workflow-default-rolebinding.yaml | 2 +- .../workflow-manager-default-rolebinding.yaml | 11 + .../base/workflow-manager-role.yaml | 16 + .../quick-start/base/workflow-role.yaml | 63 - .../quick-start/minimal/kustomization.yaml | 2 + .../workflow-controller-configmap.yaml | 9 + .../workflow-controller-configmap.yaml | 4 + .../workflow-controller-configmap.yaml | 4 + .../workflow-controller-configmap.yaml | 3 +- .../mysql/base/mysql-deployment.yaml | 2 +- tests/gh-actions/install_pipelines.sh | 10 + 70 files changed, 6779 insertions(+), 843 deletions(-) create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtaskresults.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtaskresults.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-priorityclass.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-default-rolebinding.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor-default-rolebinding.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/docker/executor-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/emissary/executor-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/k8sapi/executor-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/executor-role.yaml rename apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/{ => executor/kubelet}/kubelet-executor-clusterrole.yaml (100%) rename apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/{ => executor/kubelet}/kubelet-executor-default-clusterrolebinding.yaml (100%) create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/pns/executor-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-default-rolebinding.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-role.yaml delete mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-pod.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-default-rolebinding.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-default-rolebinding.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-role.yaml delete mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-role.yaml create mode 100644 apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/overlays/workflow-controller-configmap.yaml create mode 100755 tests/gh-actions/install_pipelines.sh diff --git a/.github/workflows/pipeline_kind_test.yaml b/.github/workflows/pipeline_kind_test.yaml index a23efba4fc..2790c71607 100644 --- a/.github/workflows/pipeline_kind_test.yaml +++ b/.github/workflows/pipeline_kind_test.yaml @@ -27,8 +27,4 @@ jobs: run: ./tests/gh-actions/install_cert_manager.sh - name: Build & Apply manifests - run: | - cd apps/pipeline/upstream - kubectl create ns kubeflow - kustomize build env/cert-manager/platform-agnostic-multi-user | kubectl apply -f - - kubectl wait --for=condition=Ready pods --all --all-namespaces --timeout 180s + run: ./tests/gh-actions/install_pipelines.sh diff --git a/README.md b/README.md index 8100396f0f..a3854ae3a4 100644 --- a/README.md +++ b/README.md @@ -53,7 +53,7 @@ This repo periodically syncs all official Kubeflow components from their respect | Katib | apps/katib/upstream | [v0.14.0-rc.0](/~https://github.com/kubeflow/katib/tree/v0.14.0-rc.0/manifests/v1beta1) | | KServe | contrib/kserve/kserve | [release-0.8](/~https://github.com/kserve/kserve/tree/8079f375cbcedc4d45a1b4aade2e2308ea6f9ae8/install/v0.8.0) | | KServe Models Web App | contrib/kserve/models-web-app | [v0.8.0](/~https://github.com/kserve/models-web-app/tree/v0.8.0/config) | -| Kubeflow Pipelines | apps/pipeline/upstream | [1.8.2](/~https://github.com/kubeflow/pipelines/tree/1.8.2/manifests/kustomize) | +| Kubeflow Pipelines | apps/pipeline/upstream | [2.0.0-alpha.3](/~https://github.com/kubeflow/pipelines/tree/2.0.0-alpha.3/manifests/kustomize) | | Kubeflow Tekton Pipelines | apps/kfp-tekton/upstream | [v1.2.1](/~https://github.com/kubeflow/kfp-tekton/tree/v1.2.1/manifests/kustomize) | The following is also a matrix with versions from common components that are diff --git a/apps/pipeline/upstream/OWNERS b/apps/pipeline/upstream/OWNERS index a990990686..97dddb13e2 100644 --- a/apps/pipeline/upstream/OWNERS +++ b/apps/pipeline/upstream/OWNERS @@ -1,5 +1,4 @@ approvers: - zijianjoy reviewers: - - Bobgy - zijianjoy diff --git a/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml b/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml index a2b0771c63..912d6c290d 100644 --- a/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml +++ b/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml @@ -8,4 +8,4 @@ commonLabels: app: cache-deployer images: - name: gcr.io/ml-pipeline/cache-deployer - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 diff --git a/apps/pipeline/upstream/base/cache/kustomization.yaml b/apps/pipeline/upstream/base/cache/kustomization.yaml index d3431863af..ed3f731ac9 100644 --- a/apps/pipeline/upstream/base/cache/kustomization.yaml +++ b/apps/pipeline/upstream/base/cache/kustomization.yaml @@ -10,4 +10,4 @@ commonLabels: app: cache-server images: - name: gcr.io/ml-pipeline/cache-server - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 diff --git a/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml b/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml index 593f3ced30..7f77cd404d 100644 --- a/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml +++ b/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml @@ -11,7 +11,7 @@ data: until the changes take effect. A quick way to restart all deployments in a namespace: `kubectl rollout restart deployment -n `. appName: pipeline - appVersion: 1.8.2 + appVersion: 2.0.0-alpha.3 dbHost: mysql dbPort: "3306" mlmdDb: metadb diff --git a/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/sync.py b/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/sync.py index 3ea1aaaea5..031a3fa268 100644 --- a/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/sync.py +++ b/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/sync.py @@ -93,7 +93,7 @@ def get_settings_from_env(controller_port=None, def server_factory(visualization_server_image, visualization_server_tag, frontend_image, frontend_tag, disable_istio_sidecar, minio_access_key, - minio_secret_key, kfp_default_pipeline_root=None, + minio_secret_key, kfp_default_pipeline_root=None, url="", controller_port=8080): """ Returns an HTTPServer populated with Handler with customized settings @@ -360,8 +360,8 @@ def sync(self, parent, children): } }, ] - print('Received request:\n', json.dumps(parent, indent=2, sort_keys=True)) - print('Desired resources except secrets:\n', json.dumps(desired_resources, indent=2, sort_keys=True)) + print('Received request:\n', json.dumps(parent, sort_keys=True)) + print('Desired resources except secrets:\n', json.dumps(desired_resources, sort_keys=True)) # Moved after the print argument because this is sensitive data. desired_resources.append({ "apiVersion": "v1", diff --git a/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/test_sync.py b/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/test_sync.py index 2f11ae59c8..50362d60fd 100644 --- a/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/test_sync.py +++ b/apps/pipeline/upstream/base/installs/multi-user/pipelines-profile-controller/test_sync.py @@ -202,7 +202,7 @@ def test_sync_server_with_pipeline_enabled(sync_server, data, expected_status, url = f"http://{server.server_address[0]}:{str(server.server_address[1])}" print("url: ", url) print("data") - print(json.dumps(data, indent=2)) + print(json.dumps(data)) x = requests.post(url, data=json.dumps(data)) results = json.loads(x.text) @@ -245,7 +245,7 @@ def test_sync_server_with_direct_passing_of_settings( url = f"http://{server.server_address[0]}:{str(server.server_address[1])}" print("url: ", url) print("data") - print(json.dumps(data, indent=2)) + print(json.dumps(data)) x = requests.post(url, data=json.dumps(data)) results = json.loads(x.text) @@ -271,7 +271,7 @@ def test_sync_server_without_pipeline_enabled(sync_server, data, expected_status """ Nearly end-to-end test of how Controller serves .sync as a POST - Tests case where metadata.labels.pipelines.kubeflow.org/enabled does not + Tests case where metadata.labels.pipelines.kubeflow.org/enabled does not exist and thus server returns an empty reply """ server, environ = sync_server diff --git a/apps/pipeline/upstream/base/metadata/base/kustomization.yaml b/apps/pipeline/upstream/base/metadata/base/kustomization.yaml index c1d4f8f99f..7f57134927 100644 --- a/apps/pipeline/upstream/base/metadata/base/kustomization.yaml +++ b/apps/pipeline/upstream/base/metadata/base/kustomization.yaml @@ -9,4 +9,4 @@ resources: - metadata-grpc-sa.yaml images: - name: gcr.io/ml-pipeline/metadata-envoy - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 diff --git a/apps/pipeline/upstream/base/pipeline/kustomization.yaml b/apps/pipeline/upstream/base/pipeline/kustomization.yaml index 3d9efd23e3..38a66d0114 100644 --- a/apps/pipeline/upstream/base/pipeline/kustomization.yaml +++ b/apps/pipeline/upstream/base/pipeline/kustomization.yaml @@ -37,14 +37,14 @@ resources: - kfp-launcher-configmap.yaml images: - name: gcr.io/ml-pipeline/api-server - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 - name: gcr.io/ml-pipeline/persistenceagent - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 - name: gcr.io/ml-pipeline/scheduledworkflow - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 - name: gcr.io/ml-pipeline/frontend - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 - name: gcr.io/ml-pipeline/viewer-crd-controller - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 - name: gcr.io/ml-pipeline/visualization-server - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 diff --git a/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml b/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml index b5b762683b..4bbe387cfd 100644 --- a/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml +++ b/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml @@ -7,4 +7,4 @@ resources: - metadata-writer-sa.yaml images: - name: gcr.io/ml-pipeline/metadata-writer - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 diff --git a/apps/pipeline/upstream/base/pipeline/ml-pipeline-apiserver-deployment.yaml b/apps/pipeline/upstream/base/pipeline/ml-pipeline-apiserver-deployment.yaml index a85b2a9d40..fea2381110 100644 --- a/apps/pipeline/upstream/base/pipeline/ml-pipeline-apiserver-deployment.yaml +++ b/apps/pipeline/upstream/base/pipeline/ml-pipeline-apiserver-deployment.yaml @@ -105,6 +105,21 @@ spec: initialDelaySeconds: 3 periodSeconds: 5 timeoutSeconds: 2 + # This startup probe provides up to a 60 second grace window before the + # liveness probe takes over to accomodate the occasional database + # migration. + startupProbe: + exec: + command: + - wget + - -q # quiet + - -S # show server response + - -O + - "-" # Redirect output to stdout + - http://localhost:8888/apis/v1beta1/healthz + failureThreshold: 12 + periodSeconds: 5 + timeoutSeconds: 2 resources: requests: cpu: 250m diff --git a/apps/pipeline/upstream/env/aws/README.md b/apps/pipeline/upstream/env/aws/README.md index fc0a643735..4502094802 100644 --- a/apps/pipeline/upstream/env/aws/README.md +++ b/apps/pipeline/upstream/env/aws/README.md @@ -30,7 +30,7 @@ aws s3 mb s3://$S3_BUCKET --region $AWS_REGION 3. Prepare RDS -Follow this [doc](https://www.kubeflow.org/docs/aws/rds/#deploy-amazon-rds-mysql-in-your-environment) to set up AWS RDS instance. +Follow this [doc](https://awslabs.github.io/kubeflow-manifests/docs/deployment/rds-s3/guide/) to set up AWS RDS instance. 4. Customize your values - Edit [params.env](params.env), [secret.env](secret.env) and [minio-artifact-secret-patch.env](minio-artifact-secret-patch.env) diff --git a/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml b/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml index 0f2dbd865c..32d425c474 100644 --- a/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml +++ b/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml @@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization images: - name: gcr.io/ml-pipeline/inverse-proxy-agent - newTag: 1.8.2 + newTag: 2.0.0-alpha.3 resources: - proxy-configmap.yaml - proxy-deployment.yaml diff --git a/apps/pipeline/upstream/env/platform-agnostic-multi-user-emissary/workflow-controller-configmap-patch.yaml b/apps/pipeline/upstream/env/platform-agnostic-multi-user-emissary/workflow-controller-configmap-patch.yaml index 64d4b40220..410a8f4c59 100644 --- a/apps/pipeline/upstream/env/platform-agnostic-multi-user-emissary/workflow-controller-configmap-patch.yaml +++ b/apps/pipeline/upstream/env/platform-agnostic-multi-user-emissary/workflow-controller-configmap-patch.yaml @@ -4,9 +4,9 @@ metadata: name: workflow-controller-configmap data: # References: - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/config/config.go - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.md - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.yaml + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/config/config.go + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.md + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.yaml # Emissary Executor: https://argoproj.github.io/argo-workflows/workflow-executors/#emissary-emissary containerRuntimeExecutor: emissary diff --git a/apps/pipeline/upstream/env/platform-agnostic-multi-user-pns/workflow-controller-configmap-patch.yaml b/apps/pipeline/upstream/env/platform-agnostic-multi-user-pns/workflow-controller-configmap-patch.yaml index e007c93fe4..e555b601d6 100644 --- a/apps/pipeline/upstream/env/platform-agnostic-multi-user-pns/workflow-controller-configmap-patch.yaml +++ b/apps/pipeline/upstream/env/platform-agnostic-multi-user-pns/workflow-controller-configmap-patch.yaml @@ -4,9 +4,9 @@ metadata: name: workflow-controller-configmap data: # References: - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/config/config.go - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.md - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.yaml + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/config/config.go + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.md + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.yaml # pns executor is a more portable default, see /~https://github.com/kubeflow/pipelines/issues/1654. containerRuntimeExecutor: pns diff --git a/apps/pipeline/upstream/env/platform-agnostic-pns/workflow-controller-configmap-patch.yaml b/apps/pipeline/upstream/env/platform-agnostic-pns/workflow-controller-configmap-patch.yaml index 41d25fa7b5..d851a450e1 100644 --- a/apps/pipeline/upstream/env/platform-agnostic-pns/workflow-controller-configmap-patch.yaml +++ b/apps/pipeline/upstream/env/platform-agnostic-pns/workflow-controller-configmap-patch.yaml @@ -4,9 +4,9 @@ metadata: name: workflow-controller-configmap data: # References: - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/config/config.go - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.md - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.yaml + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/config/config.go + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.md + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.yaml # pns executor is a more portable default, see /~https://github.com/kubeflow/pipelines/issues/1654. # However, it is flaky for containers that run really fast, see /~https://github.com/kubeflow/pipelines/issues/5285. diff --git a/apps/pipeline/upstream/third-party/argo/base/workflow-controller-configmap-patch.yaml b/apps/pipeline/upstream/third-party/argo/base/workflow-controller-configmap-patch.yaml index 654b98b713..96a6ccf995 100644 --- a/apps/pipeline/upstream/third-party/argo/base/workflow-controller-configmap-patch.yaml +++ b/apps/pipeline/upstream/third-party/argo/base/workflow-controller-configmap-patch.yaml @@ -4,9 +4,9 @@ metadata: name: workflow-controller-configmap data: # References: - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/config/config.go - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.md - # * /~https://github.com/argoproj/argo-workflows/blob/v3.2.3/docs/workflow-controller-configmap.yaml + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/config/config.go + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.md + # * /~https://github.com/argoproj/argo-workflows/blob/v3.3.8/docs/workflow-controller-configmap.yaml # emissary executor is a more portable default, see /~https://github.com/kubeflow/pipelines/issues/1654. containerRuntimeExecutor: emissary diff --git a/apps/pipeline/upstream/third-party/argo/base/workflow-controller-deployment-patch.yaml b/apps/pipeline/upstream/third-party/argo/base/workflow-controller-deployment-patch.yaml index 2efbeb1f8f..770b86a8a8 100644 --- a/apps/pipeline/upstream/third-party/argo/base/workflow-controller-deployment-patch.yaml +++ b/apps/pipeline/upstream/third-party/argo/base/workflow-controller-deployment-patch.yaml @@ -7,12 +7,12 @@ spec: spec: containers: - name: workflow-controller - image: gcr.io/ml-pipeline/workflow-controller:v3.2.3-license-compliance + image: gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance args: - --configmap - workflow-controller-configmap - --executor-image - - gcr.io/ml-pipeline/argoexec:v3.2.3-license-compliance + - gcr.io/ml-pipeline/argoexec:v3.3.8-license-compliance resources: requests: cpu: 100m diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/Kptfile b/apps/pipeline/upstream/third-party/argo/upstream/manifests/Kptfile index 9f7d43c895..3b21f24bbe 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/Kptfile +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/Kptfile @@ -7,12 +7,12 @@ upstream: git: repo: /~https://github.com/argoproj/argo-workflows directory: /manifests - ref: v3.2.3 + ref: v3.3.8 updateStrategy: resource-merge upstreamLock: type: git git: repo: /~https://github.com/argoproj/argo-workflows directory: /manifests - ref: v3.2.3 - commit: e5dc961b7846efe0fe36ab3a0964180eaedd2672 + ref: v3.3.8 + commit: 621b0d1a8e09634666ebe403ee7b8fc29db1dc4e diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/argo-server/argo-server-deployment.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/argo-server/argo-server-deployment.yaml index b1f16b8d5a..479de12103 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/argo-server/argo-server-deployment.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/argo-server/argo-server-deployment.yaml @@ -16,10 +16,14 @@ spec: - name: argo-server image: quay.io/argoproj/argocli:latest securityContext: + readOnlyRootFilesystem: true + runAsNonRoot: true + allowPrivilegeEscalation: false capabilities: drop: - ALL args: [server] + env: [] ports: - name: web containerPort: 2746 diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_clusterworkflowtemplates.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_clusterworkflowtemplates.yaml index 3e833bb1a2..149d63b6df 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_clusterworkflowtemplates.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_clusterworkflowtemplates.yaml @@ -726,88 +726,495 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string type: array - globalName: - type: string - name: - type: string - value: - type: string - valueFrom: - properties: - configMapKeyRef: - properties: - key: - type: string - name: + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + type: object + artifactRepositoryRef: + properties: + configMap: + type: string + key: + type: string + type: object + automountServiceAccountToken: + type: boolean + dnsConfig: + properties: + nameservers: + items: + type: string + type: array + options: + items: + properties: + name: + type: string + value: + type: string + type: object + type: array + searches: + items: + type: string + type: array + type: object + dnsPolicy: + type: string + entrypoint: + type: string + executor: + properties: + serviceAccountName: + type: string + type: object + hooks: + additionalProperties: + properties: + arguments: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: type: string - optional: - type: boolean - required: - - key - type: object - default: - type: string - event: - type: string - expression: - type: string - jqFilter: - type: string - jsonPath: - type: string - parameter: - type: string - path: - type: string - supplied: - type: object - type: object - required: - - name + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array type: object - type: array - type: object - artifactRepositoryRef: - properties: - configMap: - type: string - key: - type: string - type: object - automountServiceAccountToken: - type: boolean - dnsConfig: - properties: - nameservers: - items: + expression: type: string - type: array - options: - items: + template: + type: string + templateRef: properties: + clusterScope: + type: boolean name: type: string - value: + template: type: string type: object - type: array - searches: - items: - type: string - type: array - type: object - dnsPolicy: - type: string - entrypoint: - type: string - executor: - properties: - serviceAccountName: - type: string + type: object type: object hostAliases: items: @@ -1072,6 +1479,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -1974,6 +2383,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2068,6 +2487,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2198,6 +2627,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2214,6 +2645,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2534,6 +2975,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2628,6 +3079,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2758,6 +3219,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2774,6 +3237,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2878,6 +3351,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -3252,6 +3737,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3653,6 +4140,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3698,10 +4187,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -4151,8 +4649,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -4372,6 +4874,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4468,6 +4980,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4598,6 +5120,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -4614,6 +5138,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5058,6 +5592,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5549,6 +6085,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5599,6 +6137,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -5868,6 +6408,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5962,6 +6512,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6092,6 +6652,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6110,6 +6672,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6272,6 +6844,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6489,6 +7063,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6585,6 +7169,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6715,6 +7309,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6731,6 +7327,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -7091,6 +7697,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -8424,6 +9042,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8518,6 +9146,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8648,6 +9286,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -8664,6 +9304,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8984,6 +9634,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9078,6 +9738,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9208,6 +9878,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -9224,6 +9896,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9328,6 +10010,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -9702,6 +10396,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10103,6 +10799,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10148,10 +10846,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -10601,8 +11308,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -10822,6 +11533,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -10918,6 +11639,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11048,6 +11779,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -11064,6 +11797,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11508,6 +12251,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -11999,6 +12744,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -12049,6 +12796,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -12318,6 +13067,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12412,6 +13171,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12542,6 +13311,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12560,6 +13331,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12722,6 +13503,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12939,6 +13722,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13035,6 +13828,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13165,6 +13968,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -13181,6 +13986,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13541,6 +14356,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14064,6 +14891,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14119,6 +14958,14 @@ spec: items: type: string type: array + allocatedResources: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object capacity: additionalProperties: anyOf: @@ -14151,6 +14998,8 @@ spec: type: array phase: type: string + resizeStatus: + type: string type: object type: object type: array @@ -14361,6 +15210,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14823,6 +15684,24 @@ spec: type: object type: array workflowMetadata: + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + labelsFrom: + additionalProperties: + properties: + expression: + type: string + required: + - expression + type: object + type: object type: object workflowTemplateRef: properties: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_cronworkflows.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_cronworkflows.yaml index cf9c144d7e..a29cb602cc 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_cronworkflows.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_cronworkflows.yaml @@ -747,88 +747,495 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string type: array - globalName: - type: string - name: - type: string - value: - type: string - valueFrom: - properties: - configMapKeyRef: - properties: - key: - type: string - name: + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + type: object + artifactRepositoryRef: + properties: + configMap: + type: string + key: + type: string + type: object + automountServiceAccountToken: + type: boolean + dnsConfig: + properties: + nameservers: + items: + type: string + type: array + options: + items: + properties: + name: + type: string + value: + type: string + type: object + type: array + searches: + items: + type: string + type: array + type: object + dnsPolicy: + type: string + entrypoint: + type: string + executor: + properties: + serviceAccountName: + type: string + type: object + hooks: + additionalProperties: + properties: + arguments: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: type: string - optional: - type: boolean - required: - - key - type: object - default: - type: string - event: - type: string - expression: - type: string - jqFilter: - type: string - jsonPath: - type: string - parameter: - type: string - path: - type: string - supplied: - type: object - type: object - required: - - name + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array type: object - type: array - type: object - artifactRepositoryRef: - properties: - configMap: - type: string - key: - type: string - type: object - automountServiceAccountToken: - type: boolean - dnsConfig: - properties: - nameservers: - items: + expression: type: string - type: array - options: - items: + template: + type: string + templateRef: properties: + clusterScope: + type: boolean name: type: string - value: + template: type: string type: object - type: array - searches: - items: - type: string - type: array - type: object - dnsPolicy: - type: string - entrypoint: - type: string - executor: - properties: - serviceAccountName: - type: string + type: object type: object hostAliases: items: @@ -1093,6 +1500,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -1995,6 +2404,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2089,6 +2508,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2219,6 +2648,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2235,6 +2666,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2555,6 +2996,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2649,6 +3100,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2779,6 +3240,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2795,6 +3258,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2899,6 +3372,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -3273,6 +3758,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3674,6 +4161,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3719,10 +4208,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -4172,8 +4670,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -4393,6 +4895,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4489,6 +5001,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4619,6 +5141,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -4635,6 +5159,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5079,6 +5613,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5570,6 +6106,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5620,6 +6158,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -5889,6 +6429,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5983,6 +6533,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6113,6 +6673,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6131,6 +6693,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6293,6 +6865,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6510,6 +7084,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6606,6 +7190,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6736,6 +7330,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6752,6 +7348,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -7112,6 +7718,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -8445,6 +9063,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8539,6 +9167,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8669,6 +9307,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -8685,6 +9325,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9005,6 +9655,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9099,6 +9759,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9229,6 +9899,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -9245,6 +9917,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9349,6 +10031,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -9723,6 +10417,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10124,6 +10820,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10169,10 +10867,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -10622,8 +11329,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -10843,6 +11554,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -10939,6 +11660,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11069,6 +11800,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -11085,6 +11818,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11529,6 +12272,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -12020,6 +12765,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -12070,6 +12817,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -12339,6 +13088,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12433,6 +13192,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12563,6 +13332,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12581,6 +13352,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12743,6 +13524,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12960,6 +13743,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13056,6 +13849,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13186,6 +13989,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -13202,6 +14007,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13562,6 +14377,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14085,6 +14912,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14140,6 +14979,14 @@ spec: items: type: string type: array + allocatedResources: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object capacity: additionalProperties: anyOf: @@ -14172,6 +15019,8 @@ spec: type: array phase: type: string + resizeStatus: + type: string type: object type: object type: array @@ -14382,6 +15231,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14843,6 +15704,26 @@ spec: - name type: object type: array + workflowMetadata: + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + labelsFrom: + additionalProperties: + properties: + expression: + type: string + required: + - expression + type: object + type: object + type: object workflowTemplateRef: properties: clusterScope: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workfloweventbindings.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workfloweventbindings.yaml index 18ef078678..b94ed5b9a6 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workfloweventbindings.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workfloweventbindings.yaml @@ -375,6 +375,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflows.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflows.yaml index ff123591ef..ac4e73396c 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflows.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflows.yaml @@ -735,6 +735,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -818,6 +820,411 @@ spec: serviceAccountName: type: string type: object + hooks: + additionalProperties: + properties: + arguments: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: + type: string + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + type: object + expression: + type: string + template: + type: string + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object + type: object + type: object hostAliases: items: properties: @@ -1081,6 +1488,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -1983,6 +2392,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2077,6 +2496,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2207,6 +2636,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2223,6 +2654,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2543,6 +2984,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2637,6 +3088,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2767,6 +3228,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2783,6 +3246,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2887,6 +3360,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -3261,6 +3746,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3662,6 +4149,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3707,10 +4196,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -4160,8 +4658,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -4381,6 +4883,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4477,6 +4989,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4607,6 +5129,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -4623,6 +5147,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5067,6 +5601,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5558,6 +6094,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5608,6 +6146,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -5877,6 +6417,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5971,6 +6521,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6101,6 +6661,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6119,6 +6681,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6281,6 +6853,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6498,6 +7072,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6594,6 +7178,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6724,6 +7318,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6740,6 +7336,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -7100,6 +7706,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -8433,100 +9051,120 @@ spec: failureThreshold: format: int32 type: integer - httpGet: + grpc: properties: - host: - type: string - httpHeaders: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - path: - type: string port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - scheme: - type: string - required: - - port - type: object - initialDelaySeconds: - format: int32 - type: integer - periodSeconds: - format: int32 - type: integer - successThreshold: - format: int32 - type: integer - tcpSocket: - properties: - host: + format: int32 + type: integer + service: + type: string + required: + - port + type: object + httpGet: + properties: + host: + type: string + httpHeaders: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + path: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + scheme: + type: string + required: + - port + type: object + initialDelaySeconds: + format: int32 + type: integer + periodSeconds: + format: int32 + type: integer + successThreshold: + format: int32 + type: integer + tcpSocket: + properties: + host: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + format: int64 + type: integer + timeoutSeconds: + format: int32 + type: integer + type: object + name: + type: string + ports: + items: + properties: + containerPort: + format: int32 + type: integer + hostIP: + type: string + hostPort: + format: int32 + type: integer + name: + type: string + protocol: + default: TCP + type: string + required: + - containerPort + type: object + type: array + x-kubernetes-list-map-keys: + - containerPort + - protocol + x-kubernetes-list-type: map + readinessProbe: + properties: + exec: + properties: + command: + items: + type: string + type: array + type: object + failureThreshold: + format: int32 + type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true required: - port type: object - terminationGracePeriodSeconds: - format: int64 - type: integer - timeoutSeconds: - format: int32 - type: integer - type: object - name: - type: string - ports: - items: - properties: - containerPort: - format: int32 - type: integer - hostIP: - type: string - hostPort: - format: int32 - type: integer - name: - type: string - protocol: - default: TCP - type: string - required: - - containerPort - type: object - type: array - x-kubernetes-list-map-keys: - - containerPort - - protocol - x-kubernetes-list-type: map - readinessProbe: - properties: - exec: - properties: - command: - items: - type: string - type: array - type: object - failureThreshold: - format: int32 - type: integer httpGet: properties: host: @@ -8657,6 +9295,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -8673,6 +9313,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8993,6 +9643,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9087,152 +9747,174 @@ spec: failureThreshold: format: int32 type: integer - httpGet: + grpc: properties: - host: - type: string - httpHeaders: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - path: - type: string port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - scheme: - type: string - required: - - port - type: object - initialDelaySeconds: - format: int32 - type: integer - periodSeconds: - format: int32 - type: integer - successThreshold: - format: int32 - type: integer - tcpSocket: - properties: - host: + format: int32 + type: integer + service: + type: string + required: + - port + type: object + httpGet: + properties: + host: + type: string + httpHeaders: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + path: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + scheme: + type: string + required: + - port + type: object + initialDelaySeconds: + format: int32 + type: integer + periodSeconds: + format: int32 + type: integer + successThreshold: + format: int32 + type: integer + tcpSocket: + properties: + host: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + format: int64 + type: integer + timeoutSeconds: + format: int32 + type: integer + type: object + resources: + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object + type: object + securityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object + startupProbe: + properties: + exec: + properties: + command: + items: + type: string + type: array + type: object + failureThreshold: + format: int32 + type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true required: - port type: object - terminationGracePeriodSeconds: - format: int64 - type: integer - timeoutSeconds: - format: int32 - type: integer - type: object - resources: - properties: - limits: - additionalProperties: - anyOf: - - type: integer - - type: string - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - requests: - additionalProperties: - anyOf: - - type: integer - - type: string - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - type: object - securityContext: - properties: - allowPrivilegeEscalation: - type: boolean - capabilities: - properties: - add: - items: - type: string - type: array - drop: - items: - type: string - type: array - type: object - privileged: - type: boolean - procMount: - type: string - readOnlyRootFilesystem: - type: boolean - runAsGroup: - format: int64 - type: integer - runAsNonRoot: - type: boolean - runAsUser: - format: int64 - type: integer - seLinuxOptions: - properties: - level: - type: string - role: - type: string - type: - type: string - user: - type: string - type: object - seccompProfile: - properties: - localhostProfile: - type: string - type: - type: string - required: - - type - type: object - windowsOptions: - properties: - gmsaCredentialSpec: - type: string - gmsaCredentialSpecName: - type: string - runAsUserName: - type: string - type: object - type: object - startupProbe: - properties: - exec: - properties: - command: - items: - type: string - type: array - type: object - failureThreshold: - format: int32 - type: integer httpGet: properties: host: @@ -9337,6 +10019,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -9711,6 +10405,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10112,6 +10808,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10157,10 +10855,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -10610,8 +11317,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -10831,6 +11542,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -10927,6 +11648,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11057,6 +11788,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -11073,6 +11806,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11517,6 +12260,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -12008,6 +12753,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -12058,6 +12805,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -12327,6 +13076,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12421,6 +13180,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12551,6 +13320,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12569,6 +13340,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12731,6 +13512,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12948,6 +13731,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13044,6 +13837,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13174,6 +13977,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -13190,6 +13995,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13550,6 +14365,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14073,6 +14900,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14128,6 +14967,14 @@ spec: items: type: string type: array + allocatedResources: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object capacity: additionalProperties: anyOf: @@ -14160,6 +15007,8 @@ spec: type: array phase: type: string + resizeStatus: + type: string type: object type: object type: array @@ -14370,6 +15219,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14831,6 +15692,26 @@ spec: - name type: object type: array + workflowMetadata: + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + labelsFrom: + additionalProperties: + properties: + expression: + type: string + required: + - expression + type: object + type: object + type: object workflowTemplateRef: properties: clusterScope: @@ -15446,6 +16327,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -15854,6 +16737,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -16285,6 +17170,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -16539,6 +17426,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -17883,6 +18782,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -17977,6 +18886,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -18107,6 +19026,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -18123,6 +19044,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -18443,6 +19374,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -18537,6 +19478,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -18667,6 +19618,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -18683,6 +19636,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -18787,6 +19750,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -19161,6 +20136,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -19562,6 +20539,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -19607,10 +20586,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -20060,8 +21048,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -20281,6 +21273,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -20377,6 +21379,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -20507,6 +21519,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -20523,6 +21537,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -20967,6 +21991,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -21458,6 +22484,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -21508,6 +22536,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -21777,100 +22807,120 @@ spec: failureThreshold: format: int32 type: integer - httpGet: + grpc: properties: - host: - type: string - httpHeaders: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - path: - type: string port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - scheme: - type: string - required: - - port - type: object - initialDelaySeconds: - format: int32 - type: integer - periodSeconds: - format: int32 - type: integer - successThreshold: - format: int32 - type: integer - tcpSocket: - properties: - host: + format: int32 + type: integer + service: + type: string + required: + - port + type: object + httpGet: + properties: + host: + type: string + httpHeaders: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + path: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + scheme: + type: string + required: + - port + type: object + initialDelaySeconds: + format: int32 + type: integer + periodSeconds: + format: int32 + type: integer + successThreshold: + format: int32 + type: integer + tcpSocket: + properties: + host: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + format: int64 + type: integer + timeoutSeconds: + format: int32 + type: integer + type: object + name: + type: string + ports: + items: + properties: + containerPort: + format: int32 + type: integer + hostIP: + type: string + hostPort: + format: int32 + type: integer + name: + type: string + protocol: + default: TCP + type: string + required: + - containerPort + type: object + type: array + x-kubernetes-list-map-keys: + - containerPort + - protocol + x-kubernetes-list-type: map + readinessProbe: + properties: + exec: + properties: + command: + items: + type: string + type: array + type: object + failureThreshold: + format: int32 + type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true required: - port type: object - terminationGracePeriodSeconds: - format: int64 - type: integer - timeoutSeconds: - format: int32 - type: integer - type: object - name: - type: string - ports: - items: - properties: - containerPort: - format: int32 - type: integer - hostIP: - type: string - hostPort: - format: int32 - type: integer - name: - type: string - protocol: - default: TCP - type: string - required: - - containerPort - type: object - type: array - x-kubernetes-list-map-keys: - - containerPort - - protocol - x-kubernetes-list-type: map - readinessProbe: - properties: - exec: - properties: - command: - items: - type: string - type: array - type: object - failureThreshold: - format: int32 - type: integer httpGet: properties: host: @@ -22001,6 +23051,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -22019,6 +23071,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -22181,6 +23243,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -22398,6 +23462,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -22494,152 +23568,174 @@ spec: failureThreshold: format: int32 type: integer - httpGet: + grpc: properties: - host: - type: string - httpHeaders: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - path: - type: string port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - scheme: - type: string - required: - - port - type: object - initialDelaySeconds: - format: int32 - type: integer - periodSeconds: - format: int32 - type: integer - successThreshold: - format: int32 - type: integer - tcpSocket: - properties: - host: + format: int32 + type: integer + service: + type: string + required: + - port + type: object + httpGet: + properties: + host: + type: string + httpHeaders: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + path: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + scheme: + type: string + required: + - port + type: object + initialDelaySeconds: + format: int32 + type: integer + periodSeconds: + format: int32 + type: integer + successThreshold: + format: int32 + type: integer + tcpSocket: + properties: + host: + type: string + port: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + format: int64 + type: integer + timeoutSeconds: + format: int32 + type: integer + type: object + resources: + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object + type: object + securityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object + startupProbe: + properties: + exec: + properties: + command: + items: + type: string + type: array + type: object + failureThreshold: + format: int32 + type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true required: - port type: object - terminationGracePeriodSeconds: - format: int64 - type: integer - timeoutSeconds: - format: int32 - type: integer - type: object - resources: - properties: - limits: - additionalProperties: - anyOf: - - type: integer - - type: string - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - requests: - additionalProperties: - anyOf: - - type: integer - - type: string - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - type: object - securityContext: - properties: - allowPrivilegeEscalation: - type: boolean - capabilities: - properties: - add: - items: - type: string - type: array - drop: - items: - type: string - type: array - type: object - privileged: - type: boolean - procMount: - type: string - readOnlyRootFilesystem: - type: boolean - runAsGroup: - format: int64 - type: integer - runAsNonRoot: - type: boolean - runAsUser: - format: int64 - type: integer - seLinuxOptions: - properties: - level: - type: string - role: - type: string - type: - type: string - user: - type: string - type: object - seccompProfile: - properties: - localhostProfile: - type: string - type: - type: string - required: - - type - type: object - windowsOptions: - properties: - gmsaCredentialSpec: - type: string - gmsaCredentialSpecName: - type: string - runAsUserName: - type: string - type: object - type: object - startupProbe: - properties: - exec: - properties: - command: - items: - type: string - type: array - type: object - failureThreshold: - format: int32 - type: integer httpGet: properties: host: @@ -23000,6 +24096,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -24164,6 +25272,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -24247,6 +25357,411 @@ spec: serviceAccountName: type: string type: object + hooks: + additionalProperties: + properties: + arguments: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: + type: string + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + type: object + expression: + type: string + template: + type: string + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object + type: object + type: object hostAliases: items: properties: @@ -24510,6 +26025,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -25412,6 +26929,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -25506,6 +27033,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -25636,6 +27173,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -25652,6 +27191,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -25972,6 +27521,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -26066,6 +27625,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -26196,6 +27765,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -26212,6 +27783,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -26316,6 +27897,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -26690,6 +28283,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -27091,6 +28686,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -27136,10 +28733,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -27589,8 +29195,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -27810,6 +29420,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -27906,6 +29526,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -28036,6 +29666,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -28052,6 +29684,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -28496,6 +30138,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -28987,6 +30631,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -29037,6 +30683,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -29306,6 +30954,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -29400,6 +31058,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -29530,6 +31198,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -29548,6 +31218,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -29710,6 +31390,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -29927,6 +31609,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -30023,6 +31715,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -30153,6 +31855,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -30169,6 +31873,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -30529,6 +32243,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -31862,6 +33588,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -31956,6 +33692,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -32086,6 +33832,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -32102,6 +33850,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -32422,6 +34180,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -32516,6 +34284,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -32646,6 +34424,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -32662,6 +34442,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -32766,6 +34556,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -33140,6 +34942,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -33541,6 +35345,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -33586,10 +35392,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -34039,8 +35854,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -34260,6 +36079,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -34356,6 +36185,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -34486,6 +36325,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -34502,6 +36343,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -34946,6 +36797,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -35437,6 +37290,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -35487,6 +37342,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -35756,6 +37613,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -35850,6 +37717,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -35980,6 +37857,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -35998,6 +37877,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -36160,6 +38049,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -36377,6 +38268,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -36473,6 +38374,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -36603,6 +38514,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -36619,6 +38532,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -36979,6 +38902,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -37502,6 +39437,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -37557,6 +39504,14 @@ spec: items: type: string type: array + allocatedResources: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object capacity: additionalProperties: anyOf: @@ -37589,6 +39544,8 @@ spec: type: array phase: type: string + resizeStatus: + type: string type: object type: object type: array @@ -37799,6 +39756,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -38260,6 +40229,26 @@ spec: - name type: object type: array + workflowMetadata: + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + labelsFrom: + additionalProperties: + properties: + expression: + type: string + required: + - expression + type: object + type: object + type: object workflowTemplateRef: properties: clusterScope: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtaskresults.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtaskresults.yaml new file mode 100644 index 0000000000..8d7803e208 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtaskresults.yaml @@ -0,0 +1,426 @@ +# This is an auto-generated file. DO NOT EDIT +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: # kpt-merge: /workflowtaskresults.argoproj.io + name: workflowtaskresults.argoproj.io +spec: + group: argoproj.io + names: + kind: WorkflowTaskResult + listKind: WorkflowTaskResultList + plural: workflowtaskresults + singular: workflowtaskresult + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + properties: + apiVersion: + type: string + kind: + type: string + message: + type: string + metadata: + type: object + outputs: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + exitCode: + type: string + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: + type: string + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + result: + type: string + type: object + phase: + type: string + progress: + type: string + required: + - metadata + type: object + served: true + storage: true diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtasksets.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtasksets.yaml index 627eb7681d..de25052a2b 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtasksets.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtasksets.yaml @@ -897,6 +897,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -991,6 +1001,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -1121,6 +1141,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -1137,6 +1159,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -1457,6 +1489,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -1551,6 +1593,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -1681,6 +1733,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -1697,6 +1751,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -1801,6 +1865,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -2175,6 +2251,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -2576,6 +2654,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -2621,10 +2701,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -3074,8 +3163,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -3295,6 +3388,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -3391,6 +3494,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -3521,6 +3634,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -3537,6 +3652,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -3981,6 +4106,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -4472,6 +4599,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -4522,6 +4651,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -4791,6 +4922,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4885,6 +5026,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5015,6 +5166,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -5033,6 +5186,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5195,6 +5358,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -5412,6 +5577,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5508,6 +5683,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5638,6 +5823,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -5654,6 +5841,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6014,6 +6211,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -6827,6 +7036,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -6876,6 +7087,8 @@ spec: type: object phase: type: string + progress: + type: string type: object type: object type: object @@ -6885,3 +7098,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtemplates.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtemplates.yaml index 409389e0d3..5b713755aa 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtemplates.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/argoproj.io_workflowtemplates.yaml @@ -725,88 +725,495 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string type: array - globalName: - type: string - name: - type: string - value: - type: string - valueFrom: - properties: - configMapKeyRef: - properties: - key: - type: string - name: + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + type: object + artifactRepositoryRef: + properties: + configMap: + type: string + key: + type: string + type: object + automountServiceAccountToken: + type: boolean + dnsConfig: + properties: + nameservers: + items: + type: string + type: array + options: + items: + properties: + name: + type: string + value: + type: string + type: object + type: array + searches: + items: + type: string + type: array + type: object + dnsPolicy: + type: string + entrypoint: + type: string + executor: + properties: + serviceAccountName: + type: string + type: object + hooks: + additionalProperties: + properties: + arguments: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: type: string - optional: - type: boolean - required: - - key - type: object - default: - type: string - event: - type: string - expression: - type: string - jqFilter: - type: string - jsonPath: - type: string - parameter: - type: string - path: - type: string - supplied: - type: object - type: object - required: - - name + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array type: object - type: array - type: object - artifactRepositoryRef: - properties: - configMap: - type: string - key: - type: string - type: object - automountServiceAccountToken: - type: boolean - dnsConfig: - properties: - nameservers: - items: + expression: type: string - type: array - options: - items: + template: + type: string + templateRef: properties: + clusterScope: + type: boolean name: type: string - value: + template: type: string type: object - type: array - searches: - items: - type: string - type: array - type: object - dnsPolicy: - type: string - entrypoint: - type: string - executor: - properties: - serviceAccountName: - type: string + type: object type: object hostAliases: items: @@ -1071,6 +1478,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -1973,6 +2382,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2067,6 +2486,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2197,6 +2626,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2213,6 +2644,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2533,6 +2974,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2627,6 +3078,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2757,6 +3218,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -2773,6 +3236,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -2877,6 +3350,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -3251,6 +3736,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3652,6 +4139,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -3697,10 +4186,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -4150,8 +4648,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -4371,6 +4873,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4467,6 +4979,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -4597,6 +5119,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -4613,6 +5137,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5057,6 +5591,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5548,6 +6084,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -5598,6 +6136,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -5867,6 +6407,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -5961,6 +6511,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6091,6 +6651,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6109,6 +6671,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6271,6 +6843,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6488,6 +7062,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6584,6 +7168,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -6714,6 +7308,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -6730,6 +7326,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -7090,6 +7696,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -8423,6 +9041,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8517,6 +9145,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8647,6 +9285,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -8663,6 +9303,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -8983,6 +9633,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9077,6 +9737,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9207,6 +9877,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -9223,6 +9895,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -9327,6 +10009,18 @@ spec: - name type: object type: array + retryStrategy: + properties: + duration: + type: string + retries: + anyOf: + - type: integer + - type: string + x-kubernetes-int-or-string: true + required: + - retries + type: object volumeMounts: items: properties: @@ -9701,6 +10395,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10102,6 +10798,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -10147,10 +10845,19 @@ spec: type: object type: array type: object + expression: + type: string template: type: string - required: - - template + templateRef: + properties: + clusterScope: + type: boolean + name: + type: string + template: + type: string + type: object type: object type: object inline: {} @@ -10600,8 +11307,12 @@ spec: - name type: object type: array + insecureSkipVerify: + type: boolean method: type: string + successCondition: + type: string timeoutSeconds: format: int64 type: integer @@ -10821,6 +11532,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -10917,6 +11638,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11047,6 +11778,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -11063,6 +11796,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -11507,6 +12250,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -11998,6 +12743,8 @@ spec: properties: default: type: string + description: + type: string enum: items: type: string @@ -12048,6 +12795,8 @@ spec: parallelism: format: int64 type: integer + plugin: + type: object podSpecPatch: type: string priority: @@ -12317,6 +13066,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12411,6 +13170,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12541,6 +13310,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12559,6 +13330,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -12721,6 +13502,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -12938,6 +13721,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13034,6 +13827,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13164,6 +13967,8 @@ spec: type: string gmsaCredentialSpecName: type: string + hostProcess: + type: boolean runAsUserName: type: string type: object @@ -13180,6 +13985,16 @@ spec: failureThreshold: format: int32 type: integer + grpc: + properties: + port: + format: int32 + type: integer + service: + type: string + required: + - port + type: object httpGet: properties: host: @@ -13540,6 +14355,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14063,6 +14890,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14118,6 +14957,14 @@ spec: items: type: string type: array + allocatedResources: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + type: object capacity: additionalProperties: anyOf: @@ -14150,6 +14997,8 @@ spec: type: array phase: type: string + resizeStatus: + type: string type: object type: object type: array @@ -14360,6 +15209,18 @@ spec: - kind - name type: object + dataSourceRef: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + required: + - kind + - name + type: object resources: properties: limits: @@ -14822,6 +15683,24 @@ spec: type: object type: array workflowMetadata: + properties: + annotations: + additionalProperties: + type: string + type: object + labels: + additionalProperties: + type: string + type: object + labelsFrom: + additionalProperties: + properties: + expression: + type: string + required: + - expression + type: object + type: object type: object workflowTemplateRef: properties: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/kustomization.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/kustomization.yaml index 9204c2a296..62ba49061d 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/kustomization.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/full/kustomization.yaml @@ -7,3 +7,4 @@ resources: - argoproj.io_workflowtemplates.yaml - argoproj.io_workfloweventbindings.yaml - argoproj.io_workflowtasksets.yaml +- argoproj.io_workflowtaskresults.yaml diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtaskresults.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtaskresults.yaml new file mode 100644 index 0000000000..6ef09a57c2 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtaskresults.yaml @@ -0,0 +1,425 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: # kpt-merge: /workflowtaskresults.argoproj.io + name: workflowtaskresults.argoproj.io +spec: + group: argoproj.io + names: + kind: WorkflowTaskResult + listKind: WorkflowTaskResultList + plural: workflowtaskresults + singular: workflowtaskresult + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + properties: + apiVersion: + type: string + kind: + type: string + message: + type: string + metadata: + type: object + outputs: + properties: + artifacts: + items: + properties: + archive: + properties: + none: + type: object + tar: + properties: + compressionLevel: + format: int32 + type: integer + type: object + zip: + type: object + type: object + archiveLogs: + type: boolean + artifactory: + properties: + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + url: + type: string + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - url + type: object + from: + type: string + fromExpression: + type: string + gcs: + properties: + bucket: + type: string + key: + type: string + serviceAccountKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - key + type: object + git: + properties: + depth: + format: int64 + type: integer + disableSubmodules: + type: boolean + fetch: + items: + type: string + type: array + insecureIgnoreHostKey: + type: boolean + passwordSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + repo: + type: string + revision: + type: string + sshPrivateKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + usernameSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + required: + - repo + type: object + globalName: + type: string + hdfs: + properties: + addresses: + items: + type: string + type: array + force: + type: boolean + hdfsUser: + type: string + krbCCacheSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbConfigConfigMap: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbKeytabSecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + krbRealm: + type: string + krbServicePrincipalName: + type: string + krbUsername: + type: string + path: + type: string + required: + - path + type: object + http: + properties: + headers: + items: + properties: + name: + type: string + value: + type: string + required: + - name + - value + type: object + type: array + url: + type: string + required: + - url + type: object + mode: + format: int32 + type: integer + name: + type: string + optional: + type: boolean + oss: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + type: boolean + endpoint: + type: string + key: + type: string + lifecycleRule: + properties: + markDeletionAfterDays: + format: int32 + type: integer + markInfrequentAccessAfterDays: + format: int32 + type: integer + type: object + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + securityToken: + type: string + required: + - key + type: object + path: + type: string + raw: + properties: + data: + type: string + required: + - data + type: object + recurseMode: + type: boolean + s3: + properties: + accessKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + bucket: + type: string + createBucketIfNotPresent: + properties: + objectLocking: + type: boolean + type: object + encryptionOptions: + properties: + enableEncryption: + type: boolean + kmsEncryptionContext: + type: string + kmsKeyId: + type: string + serverSideCustomerKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + type: object + endpoint: + type: string + insecure: + type: boolean + key: + type: string + region: + type: string + roleARN: + type: string + secretKeySecret: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + useSDKCreds: + type: boolean + type: object + subPath: + type: string + required: + - name + type: object + type: array + exitCode: + type: string + parameters: + items: + properties: + default: + type: string + description: + type: string + enum: + items: + type: string + type: array + globalName: + type: string + name: + type: string + value: + type: string + valueFrom: + properties: + configMapKeyRef: + properties: + key: + type: string + name: + type: string + optional: + type: boolean + required: + - key + type: object + default: + type: string + event: + type: string + expression: + type: string + jqFilter: + type: string + jsonPath: + type: string + parameter: + type: string + path: + type: string + supplied: + type: object + type: object + required: + - name + type: object + type: array + result: + type: string + type: object + phase: + type: string + progress: + type: string + required: + - metadata + type: object + served: true + storage: true diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtasksets.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtasksets.yaml index 0cb8b6adcd..9620d8e72e 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtasksets.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/argoproj.io_workflowtasksets.yaml @@ -37,3 +37,5 @@ spec: type: object served: true storage: true + subresources: + status: {} diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/kustomization.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/kustomization.yaml index 9204c2a296..62ba49061d 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/kustomization.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/crds/minimal/kustomization.yaml @@ -7,3 +7,4 @@ resources: - argoproj.io_workflowtemplates.yaml - argoproj.io_workfloweventbindings.yaml - argoproj.io_workflowtasksets.yaml +- argoproj.io_workflowtaskresults.yaml diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/kustomization.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/kustomization.yaml index e3b2bf3b74..9b852afc6d 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/kustomization.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/kustomization.yaml @@ -5,3 +5,4 @@ resources: - workflow-controller-deployment.yaml - workflow-controller-sa.yaml - workflow-controller-metrics-service.yaml +- workflow-controller-priorityclass.yaml diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-deployment.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-deployment.yaml index 6d8315b5db..27ebd138dc 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-deployment.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-deployment.yaml @@ -11,6 +11,7 @@ spec: labels: app: workflow-controller spec: + priorityClassName: workflow-controller serviceAccountName: argo containers: - name: workflow-controller diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-metrics-service.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-metrics-service.yaml index c646a2482f..525f0a2092 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-metrics-service.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-metrics-service.yaml @@ -4,6 +4,11 @@ metadata: # kpt-merge: /workflow-controller-metrics name: workflow-controller-metrics labels: app: workflow-controller + annotations: + workflows.argoproj.io/description: | + This service is deprecated. It will be removed in v3.4. + + /~https://github.com/argoproj/argo-workflows/issues/8441 spec: selector: app: workflow-controller diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-priorityclass.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-priorityclass.yaml new file mode 100644 index 0000000000..37a7716a44 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/base/workflow-controller/workflow-controller-priorityclass.yaml @@ -0,0 +1,5 @@ +apiVersion: scheduling.k8s.io/v1 +kind: PriorityClass +metadata: # kpt-merge: /workflow-controller + name: workflow-controller +value: 1000000 diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/argo-server-rbac/argo-server-clusterole.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/argo-server-rbac/argo-server-clusterole.yaml index 506221526a..fa214417ce 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/argo-server-rbac/argo-server-clusterole.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/argo-server-rbac/argo-server-clusterole.yaml @@ -18,6 +18,8 @@ rules: verbs: - get - create + - list + - watch - apiGroups: - "" resources: @@ -44,6 +46,7 @@ rules: verbs: - get - list + - watch - apiGroups: - argoproj.io resources: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/kustomization.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/kustomization.yaml index 7f5d34ea7f..bfdc9ec83d 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/kustomization.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/kustomization.yaml @@ -4,3 +4,4 @@ resources: - ../base - ./workflow-controller-rbac - ./argo-server-rbac +namespace: argo diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/workflow-controller-rbac/workflow-controller-clusterrole.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/workflow-controller-rbac/workflow-controller-clusterrole.yaml index 043dda81d0..e14d00ba84 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/workflow-controller-rbac/workflow-controller-clusterrole.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/cluster-install/workflow-controller-rbac/workflow-controller-clusterrole.yaml @@ -28,8 +28,10 @@ rules: - "" resources: - persistentvolumeclaims + - persistentvolumeclaims/finalizers verbs: - create + - update - delete - get - apiGroups: @@ -58,6 +60,14 @@ rules: - get - list - watch +- apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - list + - watch + - deletecollection - apiGroups: - "" resources: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/argo-server-rbac/argo-server-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/argo-server-rbac/argo-server-role.yaml index ca14f4c34f..cff53deabb 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/argo-server-rbac/argo-server-role.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/argo-server-rbac/argo-server-role.yaml @@ -18,6 +18,8 @@ rules: verbs: - get - create + - list + - watch - apiGroups: - "" resources: @@ -44,6 +46,7 @@ rules: verbs: - get - list + - watch - apiGroups: - argoproj.io resources: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/workflow-controller-rbac/workflow-controller-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/workflow-controller-rbac/workflow-controller-role.yaml index 5aeb8791fc..22a7751bde 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/workflow-controller-rbac/workflow-controller-role.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/namespace-install/workflow-controller-rbac/workflow-controller-role.yaml @@ -36,8 +36,10 @@ rules: - "" resources: - persistentvolumeclaims + - persistentvolumeclaims/finalizers verbs: - create + - update - delete - get - apiGroups: @@ -71,6 +73,21 @@ rules: verbs: - get - list + - apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - list + - watch + - deletecollection + - apiGroups: + - "" + resources: + - serviceaccounts + verbs: + - get + - list - apiGroups: - "" resources: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-default-rolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-default-rolebinding.yaml new file mode 100644 index 0000000000..0c21120ca4 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-default-rolebinding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: # kpt-merge: /agent-default + name: agent-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: agent +subjects: + - kind: ServiceAccount + name: default diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-role.yaml new file mode 100644 index 0000000000..6bd90ea719 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/agent-role.yaml @@ -0,0 +1,24 @@ +# https://argoproj.github.io/argo-workflows/workflow-rbac/ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /agent + name: agent + annotations: + workflows.argoproj.io/description: | + This is the minimum recommended permissions needed if you want to use the agent, e.g. for HTTP or plugin templates. + + If <= v3.2 you must replace `workflowtasksets/status` with `patch workflowtasksets`. +rules: + - apiGroups: + - argoproj.io + resources: + - workflowtasksets + verbs: + - list + - watch + - apiGroups: + - argoproj.io + resources: + - workflowtasksets/status + verbs: + - patch diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor-default-rolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor-default-rolebinding.yaml new file mode 100644 index 0000000000..428373639a --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor-default-rolebinding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: # kpt-merge: /executor-default + name: executor-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: executor +subjects: + - kind: ServiceAccount + name: default diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/docker/executor-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/docker/executor-role.yaml new file mode 100644 index 0000000000..6cf15278da --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/docker/executor-role.yaml @@ -0,0 +1,17 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /executor + name: executor + annotations: + workflows.argoproj.io/description: | + Recommended minimum permissions for the `docker` executor. + + This executor is superseded by the `emmisary` executor, so we do not recommend you use it anymore. +rules: + - apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - create + - patch diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/emissary/executor-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/emissary/executor-role.yaml new file mode 100644 index 0000000000..89a3b410fc --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/emissary/executor-role.yaml @@ -0,0 +1,15 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /executor + name: executor + annotations: + workflows.argoproj.io/description: | + Recomended minimum permissions for the `emissary` executor. +rules: + - apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - create + - patch diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/k8sapi/executor-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/k8sapi/executor-role.yaml new file mode 100644 index 0000000000..02da8765e1 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/k8sapi/executor-role.yaml @@ -0,0 +1,36 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /executor + name: executor + annotations: + workflows.argoproj.io/description: | + Recommended minimum permissions for `k8siapi` executor. + + This executor is superseded by the `emmisary` executor, so we do not recommend you use it anymore. +rules: + - apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - watch + - apiGroups: + - "" + resources: + - pods/exec + verbs: + - create + - apiGroups: + - "" + resources: + - pods/log + verbs: + - get diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/executor-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/executor-role.yaml new file mode 100644 index 0000000000..22340524d4 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/executor-role.yaml @@ -0,0 +1,17 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /executor + name: executor + annotations: + workflows.argoproj.io/description: | + Recommended minimum permissions for `kubelet` executor. + + This executor is superseded by the `emmisary` executor, so we do not recommend you use it anymore. +rules: + - apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - create + - patch diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kubelet-executor-clusterrole.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/kubelet-executor-clusterrole.yaml similarity index 100% rename from apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kubelet-executor-clusterrole.yaml rename to apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/kubelet-executor-clusterrole.yaml diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kubelet-executor-default-clusterrolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/kubelet-executor-default-clusterrolebinding.yaml similarity index 100% rename from apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kubelet-executor-default-clusterrolebinding.yaml rename to apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/kubelet/kubelet-executor-default-clusterrolebinding.yaml diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/pns/executor-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/pns/executor-role.yaml new file mode 100644 index 0000000000..50fae28073 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/executor/pns/executor-role.yaml @@ -0,0 +1,27 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /executor + name: executor + annotations: + workflows.argoproj.io/description: | + Recomended minimum permissions for `pns` executor. +rules: + - apiGroups: + - argoproj.io + resources: + - workflowtaskresults + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - pods + verbs: + - watch + - apiGroups: + - "" + resources: + - pods/log + verbs: + - get diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kustomization.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kustomization.yaml index 8d9f7a8d40..ceef08adfb 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kustomization.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/kustomization.yaml @@ -5,10 +5,14 @@ resources: - minio - webhooks - argo-server-sso-secret.yaml - - workflow-role.yaml - - kubelet-executor-clusterrole.yaml - - kubelet-executor-default-clusterrolebinding.yaml - - workflow-default-rolebinding.yaml + - executor/emissary/executor-role.yaml + - executor-default-rolebinding.yaml + - pod-manager-role.yaml + - pod-manager-default-rolebinding.yaml + - workflow-manager-role.yaml + - workflow-manager-default-rolebinding.yaml + - agent-role.yaml + - agent-default-rolebinding.yaml - cluster-workflow-template-rbac.yaml - artifact-repositories-configmap.yaml patchesStrategicMerge: diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-default-rolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-default-rolebinding.yaml new file mode 100644 index 0000000000..926858e36d --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-default-rolebinding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: # kpt-merge: /memoizer-default + name: memoizer-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: memoizer +subjects: + - kind: ServiceAccount + name: default diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-role.yaml new file mode 100644 index 0000000000..84ddab79e4 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/memoizer-role.yaml @@ -0,0 +1,16 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /memoizer + name: memoizer + annotations: + workflows.argoproj.io/description: | + Only needed if you are using ConfigMap-based cache for memoization. +rules: + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - get + - update diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-deploy.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-deploy.yaml index 4a75c8316e..2ac1da545b 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-deploy.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-deploy.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: main - image: minio/minio:RELEASE.2019-12-17T23-16-33Z + image: minio/minio env: - name: MINIO_ACCESS_KEY value: admin diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-pod.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-pod.yaml deleted file mode 100644 index 8c617a68fa..0000000000 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/minio/minio-pod.yaml +++ /dev/null @@ -1,34 +0,0 @@ -apiVersion: v1 -kind: Pod -metadata: # kpt-merge: /minio - name: minio - labels: - app: minio -spec: - containers: - - name: main - image: minio/minio:RELEASE.2019-12-17T23-16-33Z - env: - - name: MINIO_ACCESS_KEY - value: admin - - name: MINIO_SECRET_KEY - value: password - ports: - - containerPort: 9000 - command: [minio, server, /data] - lifecycle: - postStart: - exec: - command: [mkdir, -p, /data/my-bucket] - readinessProbe: - httpGet: - path: /minio/health/ready - port: 9000 - initialDelaySeconds: 5 - periodSeconds: 10 - livenessProbe: - httpGet: - path: /minio/health/live - port: 9000 - initialDelaySeconds: 5 - periodSeconds: 10 diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/overlays/workflow-controller-configmap.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/overlays/workflow-controller-configmap.yaml index 4cc36b4c6f..89e4fbfa6e 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/overlays/workflow-controller-configmap.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/overlays/workflow-controller-configmap.yaml @@ -5,16 +5,15 @@ data: requests: cpu: 10m memory: 64Mi - containerRuntimeExecutor: docker containerRuntimeExecutors: | - - name: k8sapi - selector: - matchLabels: - workflows.argoproj.io/container-runtime-executor: k8sapi - name: emissary selector: matchLabels: workflows.argoproj.io/container-runtime-executor: emissary + - name: pns + selector: + matchLabels: + workflows.argoproj.io/container-runtime-executor: pns images: | argoproj/argosay:v1: command: [cowsay] diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-default-rolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-default-rolebinding.yaml new file mode 100644 index 0000000000..a2e1c35075 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-default-rolebinding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: # kpt-merge: /pod-manager-default + name: pod-manager-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: pod-manager +subjects: + - kind: ServiceAccount + name: default diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-role.yaml new file mode 100644 index 0000000000..e98f0df1c9 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/pod-manager-role.yaml @@ -0,0 +1,17 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /pod-manager + name: pod-manager + annotations: + workflows.argoproj.io/description: | + This is an example of the permissions you would need if you wanted to use a resource template to create and manage + other pods. The same pattern would be suitable for other resurces, e.g. a service +rules: + - apiGroups: + - "" + resources: + - pods + verbs: + - create + - get + - patch diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-default-rolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-default-rolebinding.yaml index 52ec46ba53..ebfc4c7dca 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-default-rolebinding.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-default-rolebinding.yaml @@ -5,7 +5,7 @@ metadata: # kpt-merge: /workflow-default-binding roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: workflow-role + name: workflow subjects: - kind: ServiceAccount name: default diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-default-rolebinding.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-default-rolebinding.yaml new file mode 100644 index 0000000000..5c4b9d2d5c --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-default-rolebinding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: # kpt-merge: /workflow-manager-default + name: workflow-manager-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: workflow-manager +subjects: + - kind: ServiceAccount + name: default diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-role.yaml new file mode 100644 index 0000000000..7cebf4b977 --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-manager-role.yaml @@ -0,0 +1,16 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: # kpt-merge: /workflow-manager + name: workflow-manager + annotations: + workflows.argoproj.io/description: | + This is an example of the permissions you would need if you wanted to use a resource template to create and manage + other workflows. The same pattern would be suitable for other resurces, e.g. a service +rules: + - apiGroups: + - argoproj.io + resources: + - workflows + verbs: + - create + - get diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-role.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-role.yaml deleted file mode 100644 index d46bb06677..0000000000 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/base/workflow-role.yaml +++ /dev/null @@ -1,63 +0,0 @@ -# https://argoproj.github.io/argo-workflows/workflow-rbac/ -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: # kpt-merge: /workflow-role - name: workflow-role -rules: - # pod get/watch is used to identify the container IDs of the current pod - - apiGroups: - - "" - resources: - - pods - verbs: - - get - - watch - # pod patch is used to annotate the step's outputs back to controller (e.g. artifact location) - # This is ONLY needed if the step/task has outputs that are used by another step or task. - - patch - # logs get/watch are used to get the pods logs for script outputs, and for log archival - - apiGroups: - - "" - resources: - - pods/log - verbs: - - get - - watch - # Only needed if you are running the `k8sapi` executor. - - apiGroups: - - "" - resources: - - pods/exec - verbs: - - create - # Only needed if you are using ConfigMap-based cache for memoization. - - apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - get - - update - # This allows one workflow to create another. - # This is only needed for resource templates. - - apiGroups: - - argoproj.io - resources: - - workflows - verbs: - - create - - get - # This allows agent pod to update the taskset. - # This is only needed for http templates. - - apiGroups: - - argoproj.io - resources: - - workflowtasksets - - workflowtasksets/finalizers - verbs: - - list - - watch - - get - - update - - patch diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/kustomization.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/kustomization.yaml index 27bb5cb0b4..b376c091eb 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/kustomization.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/kustomization.yaml @@ -2,3 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - ../base +patchesStrategicMerge: + - overlays/workflow-controller-configmap.yaml diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/overlays/workflow-controller-configmap.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/overlays/workflow-controller-configmap.yaml new file mode 100644 index 0000000000..870c83a3ab --- /dev/null +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/minimal/overlays/workflow-controller-configmap.yaml @@ -0,0 +1,9 @@ +apiVersion: v1 +data: + retentionPolicy: | + completed: 10 + failed: 3 + errored: 3 +kind: ConfigMap +metadata: # kpt-merge: /workflow-controller-configmap + name: workflow-controller-configmap diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/mysql/overlays/workflow-controller-configmap.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/mysql/overlays/workflow-controller-configmap.yaml index 31b15d50bd..146893289b 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/mysql/overlays/workflow-controller-configmap.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/mysql/overlays/workflow-controller-configmap.yaml @@ -19,6 +19,10 @@ data: passwordSecret: name: argo-mysql-config key: password + retentionPolicy: | + completed: 10 + failed: 3 + errored: 3 kind: ConfigMap metadata: # kpt-merge: /workflow-controller-configmap name: workflow-controller-configmap diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/postgres/overlays/workflow-controller-configmap.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/postgres/overlays/workflow-controller-configmap.yaml index 28daa5b87e..7c7eb92000 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/postgres/overlays/workflow-controller-configmap.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/postgres/overlays/workflow-controller-configmap.yaml @@ -19,6 +19,10 @@ data: passwordSecret: name: argo-postgres-config key: password + retentionPolicy: | + completed: 10 + failed: 3 + errored: 3 kind: ConfigMap metadata: # kpt-merge: /workflow-controller-configmap name: workflow-controller-configmap diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/overlays/workflow-controller-configmap.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/overlays/workflow-controller-configmap.yaml index a5dcef1dba..fb694c07ff 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/overlays/workflow-controller-configmap.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/overlays/workflow-controller-configmap.yaml @@ -2,7 +2,7 @@ apiVersion: v1 data: sso: | issuer: http://dex:5556/dex - issuerAlias: http://mydex:5556/dex + issuerAlias: http://dex:5556/dex clientId: name: argo-server-sso key: clientID @@ -13,6 +13,7 @@ data: scopes: - groups - email + - profile rbac: enabled: true kind: ConfigMap diff --git a/apps/pipeline/upstream/third-party/mysql/base/mysql-deployment.yaml b/apps/pipeline/upstream/third-party/mysql/base/mysql-deployment.yaml index c7174d44b4..c56ba13105 100644 --- a/apps/pipeline/upstream/third-party/mysql/base/mysql-deployment.yaml +++ b/apps/pipeline/upstream/third-party/mysql/base/mysql-deployment.yaml @@ -26,7 +26,7 @@ spec: env: - name: MYSQL_ALLOW_EMPTY_PASSWORD value: "true" - image: gcr.io/ml-pipeline/mysql:5.7 + image: gcr.io/ml-pipeline/mysql:5.7-debian name: mysql ports: - containerPort: 3306 diff --git a/tests/gh-actions/install_pipelines.sh b/tests/gh-actions/install_pipelines.sh new file mode 100755 index 0000000000..3ceaa65604 --- /dev/null +++ b/tests/gh-actions/install_pipelines.sh @@ -0,0 +1,10 @@ +#!/bin/bash +set -euo pipefail +echo "Installing Pipelines ..." +cd apps/pipeline/upstream +kubectl create ns kubeflow +kubectl apply -f third-party/metacontroller/base/crd.yaml +echo "Waiting for crd/compositecontrollers.metacontroller.k8s.io to be available ..." +kubectl wait --for condition=established --timeout=30s crd/compositecontrollers.metacontroller.k8s.io +kustomize build env/cert-manager/platform-agnostic-multi-user | kubectl apply -f - +kubectl wait --for=condition=Ready pods --all --all-namespaces --timeout 180s \ No newline at end of file