123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111311231133114311531163117311831193120312131223123312431253126312731283129313031313132313331343135313631373138313931403141314231433144314531463147314831493150315131523153315431553156315731583159316031613162316331643165316631673168316931703171317231733174317531763177317831793180318131823183318431853186318731883189319031913192319331943195319631973198319932003201320232033204320532063207320832093210321132123213321432153216321732183219322032213222322332243225322632273228322932303231323232333234323532363237323832393240324132423243324432453246324732483249325032513252325332543255325632573258325932603261326232633264326532663267326832693270327132723273327432753276327732783279328032813282328332843285328632873288328932903291329232933294329532963297329832993300330133023303330433053306330733083309331033113312331333143315331633173318331933203321332233233324332533263327332833293330333133323333333433353336333733383339334033413342334333443345334633473348334933503351335233533354335533563357335833593360336133623363336433653366336733683369337033713372337333743375337633773378337933803381338233833384338533863387338833893390339133923393339433953396339733983399340034013402340334043405340634073408340934103411341234133414341534163417341834193420342134223423342434253426342734283429343034313432343334343435343634373438343934403441344234433444344534463447344834493450345134523453345434553456345734583459346034613462346334643465346634673468346934703471347234733474347534763477347834793480348134823483348434853486348734883489349034913492349334943495349634973498349935003501350235033504350535063507350835093510351135123513351435153516351735183519352035213522352335243525352635273528352935303531353235333534353535363537353835393540354135423543354435453546354735483549355035513552355335543555355635573558355935603561356235633564356535663567356835693570357135723573357435753576357735783579358035813582358335843585358635873588358935903591359235933594359535963597359835993600360136023603360436053606360736083609361036113612361336143615361636173618361936203621362236233624362536263627362836293630363136323633363436353636363736383639364036413642364336443645364636473648364936503651365236533654365536563657365836593660366136623663366436653666366736683669367036713672367336743675367636773678367936803681368236833684368536863687368836893690369136923693369436953696369736983699370037013702370337043705370637073708370937103711371237133714371537163717371837193720372137223723372437253726372737283729373037313732373337343735373637373738373937403741374237433744374537463747374837493750375137523753375437553756375737583759376037613762376337643765376637673768376937703771377237733774377537763777377837793780378137823783378437853786378737883789379037913792379337943795379637973798379938003801380238033804380538063807380838093810381138123813381438153816381738183819382038213822382338243825382638273828382938303831383238333834383538363837383838393840384138423843384438453846384738483849385038513852385338543855385638573858385938603861386238633864386538663867386838693870387138723873387438753876387738783879388038813882388338843885388638873888388938903891389238933894389538963897389838993900390139023903390439053906390739083909391039113912391339143915391639173918391939203921392239233924392539263927392839293930393139323933393439353936393739383939394039413942394339443945394639473948394939503951395239533954395539563957395839593960396139623963396439653966396739683969397039713972397339743975397639773978397939803981398239833984398539863987398839893990399139923993399439953996399739983999400040014002400340044005400640074008400940104011401240134014401540164017401840194020402140224023402440254026402740284029403040314032403340344035403640374038403940404041404240434044404540464047404840494050405140524053405440554056405740584059406040614062406340644065406640674068406940704071407240734074407540764077407840794080408140824083408440854086408740884089409040914092409340944095409640974098409941004101410241034104410541064107410841094110411141124113411441154116411741184119412041214122412341244125412641274128412941304131413241334134413541364137413841394140414141424143414441454146414741484149415041514152415341544155415641574158415941604161416241634164416541664167416841694170417141724173417441754176417741784179418041814182418341844185418641874188418941904191419241934194419541964197419841994200420142024203420442054206420742084209421042114212421342144215421642174218421942204221422242234224422542264227422842294230423142324233423442354236423742384239424042414242424342444245424642474248424942504251425242534254425542564257425842594260426142624263426442654266426742684269427042714272427342744275427642774278427942804281428242834284428542864287428842894290429142924293429442954296429742984299430043014302430343044305430643074308430943104311431243134314431543164317431843194320432143224323432443254326432743284329433043314332433343344335433643374338433943404341434243434344434543464347434843494350435143524353435443554356435743584359436043614362436343644365436643674368436943704371437243734374437543764377437843794380438143824383438443854386438743884389439043914392439343944395439643974398439944004401440244034404440544064407440844094410441144124413441444154416441744184419442044214422442344244425442644274428442944304431443244334434443544364437443844394440444144424443444444454446444744484449445044514452445344544455445644574458445944604461446244634464446544664467446844694470447144724473447444754476447744784479448044814482448344844485448644874488448944904491449244934494449544964497449844994500450145024503450445054506450745084509451045114512451345144515451645174518451945204521452245234524452545264527452845294530453145324533453445354536453745384539454045414542454345444545454645474548454945504551455245534554455545564557455845594560456145624563456445654566456745684569457045714572457345744575457645774578457945804581458245834584458545864587458845894590459145924593459445954596459745984599460046014602460346044605460646074608460946104611461246134614461546164617461846194620462146224623462446254626462746284629463046314632463346344635463646374638463946404641464246434644464546464647464846494650465146524653465446554656465746584659466046614662466346644665466646674668466946704671467246734674467546764677467846794680468146824683468446854686468746884689469046914692469346944695469646974698469947004701470247034704470547064707470847094710471147124713471447154716471747184719472047214722472347244725472647274728472947304731473247334734473547364737473847394740474147424743474447454746474747484749475047514752475347544755475647574758475947604761476247634764476547664767476847694770477147724773477447754776477747784779478047814782478347844785478647874788478947904791479247934794479547964797479847994800480148024803480448054806480748084809481048114812481348144815481648174818481948204821482248234824482548264827482848294830483148324833483448354836483748384839484048414842484348444845484648474848484948504851485248534854485548564857485848594860486148624863486448654866486748684869487048714872487348744875487648774878487948804881488248834884488548864887488848894890489148924893489448954896489748984899490049014902490349044905490649074908490949104911491249134914491549164917491849194920492149224923492449254926492749284929493049314932493349344935493649374938493949404941494249434944494549464947494849494950495149524953495449554956495749584959496049614962496349644965496649674968496949704971497249734974497549764977497849794980498149824983498449854986498749884989499049914992499349944995499649974998499950005001500250035004500550065007500850095010501150125013501450155016501750185019502050215022502350245025502650275028502950305031503250335034503550365037503850395040504150425043504450455046504750485049505050515052505350545055505650575058505950605061506250635064506550665067506850695070507150725073507450755076507750785079508050815082508350845085508650875088508950905091509250935094509550965097509850995100510151025103510451055106510751085109511051115112511351145115511651175118511951205121512251235124512551265127512851295130513151325133513451355136513751385139514051415142514351445145514651475148514951505151515251535154515551565157515851595160516151625163516451655166516751685169517051715172517351745175517651775178517951805181518251835184518551865187518851895190519151925193519451955196519751985199520052015202520352045205520652075208520952105211521252135214521552165217521852195220522152225223522452255226522752285229523052315232523352345235523652375238523952405241524252435244524552465247524852495250525152525253525452555256525752585259526052615262526352645265526652675268526952705271527252735274527552765277527852795280528152825283528452855286528752885289529052915292529352945295529652975298529953005301530253035304530553065307530853095310531153125313531453155316531753185319532053215322532353245325532653275328532953305331533253335334533553365337533853395340534153425343534453455346534753485349535053515352535353545355535653575358535953605361536253635364536553665367536853695370537153725373537453755376537753785379538053815382538353845385538653875388538953905391539253935394539553965397539853995400540154025403540454055406540754085409541054115412541354145415541654175418541954205421542254235424542554265427542854295430543154325433543454355436543754385439544054415442544354445445544654475448544954505451545254535454545554565457545854595460546154625463546454655466546754685469547054715472547354745475547654775478547954805481548254835484548554865487548854895490549154925493549454955496549754985499550055015502550355045505550655075508550955105511551255135514551555165517551855195520552155225523552455255526552755285529553055315532553355345535553655375538553955405541554255435544554555465547554855495550555155525553555455555556555755585559556055615562556355645565556655675568556955705571557255735574557555765577557855795580558155825583558455855586558755885589559055915592559355945595559655975598559956005601560256035604560556065607560856095610561156125613561456155616561756185619562056215622562356245625562656275628562956305631563256335634563556365637563856395640564156425643564456455646564756485649565056515652565356545655565656575658565956605661566256635664566556665667566856695670567156725673567456755676567756785679568056815682568356845685568656875688568956905691569256935694569556965697569856995700570157025703570457055706570757085709571057115712571357145715571657175718571957205721572257235724572557265727572857295730573157325733573457355736573757385739574057415742574357445745574657475748574957505751575257535754575557565757575857595760576157625763576457655766576757685769577057715772577357745775577657775778577957805781578257835784578557865787578857895790579157925793579457955796579757985799580058015802580358045805580658075808580958105811581258135814581558165817581858195820582158225823582458255826582758285829583058315832583358345835583658375838583958405841584258435844584558465847584858495850585158525853585458555856585758585859586058615862586358645865586658675868586958705871587258735874587558765877587858795880588158825883588458855886588758885889589058915892589358945895589658975898589959005901590259035904590559065907590859095910591159125913591459155916591759185919592059215922592359245925592659275928592959305931593259335934593559365937593859395940594159425943594459455946594759485949595059515952595359545955595659575958595959605961596259635964596559665967596859695970597159725973597459755976597759785979598059815982598359845985598659875988598959905991599259935994599559965997599859996000600160026003600460056006600760086009601060116012601360146015601660176018601960206021602260236024602560266027602860296030603160326033603460356036603760386039604060416042604360446045604660476048604960506051605260536054605560566057605860596060606160626063606460656066606760686069607060716072607360746075607660776078607960806081608260836084608560866087608860896090609160926093609460956096609760986099610061016102610361046105610661076108610961106111611261136114611561166117611861196120612161226123612461256126612761286129613061316132613361346135613661376138613961406141614261436144614561466147614861496150615161526153615461556156615761586159616061616162616361646165616661676168616961706171617261736174617561766177617861796180618161826183618461856186618761886189619061916192619361946195619661976198619962006201620262036204620562066207620862096210621162126213621462156216621762186219622062216222622362246225622662276228622962306231623262336234623562366237623862396240624162426243624462456246624762486249625062516252625362546255625662576258625962606261626262636264626562666267626862696270627162726273627462756276627762786279628062816282628362846285628662876288628962906291629262936294629562966297629862996300630163026303630463056306630763086309631063116312631363146315631663176318631963206321632263236324632563266327632863296330633163326333633463356336633763386339634063416342634363446345634663476348634963506351635263536354635563566357635863596360636163626363636463656366636763686369637063716372637363746375637663776378637963806381638263836384638563866387638863896390639163926393639463956396639763986399640064016402640364046405640664076408640964106411641264136414641564166417641864196420642164226423642464256426642764286429643064316432643364346435643664376438643964406441644264436444644564466447644864496450645164526453645464556456645764586459646064616462646364646465646664676468646964706471647264736474647564766477647864796480648164826483648464856486648764886489649064916492649364946495649664976498649965006501650265036504650565066507650865096510651165126513651465156516651765186519652065216522652365246525652665276528652965306531653265336534653565366537653865396540654165426543654465456546654765486549655065516552655365546555655665576558655965606561656265636564656565666567656865696570657165726573657465756576657765786579658065816582658365846585658665876588658965906591659265936594659565966597659865996600660166026603660466056606660766086609661066116612661366146615661666176618661966206621662266236624662566266627662866296630663166326633663466356636663766386639664066416642664366446645664666476648664966506651665266536654665566566657665866596660666166626663666466656666666766686669667066716672667366746675667666776678667966806681668266836684668566866687668866896690669166926693669466956696669766986699670067016702670367046705670667076708670967106711671267136714671567166717671867196720672167226723672467256726672767286729673067316732673367346735673667376738673967406741674267436744674567466747674867496750675167526753675467556756675767586759676067616762676367646765676667676768676967706771677267736774677567766777677867796780678167826783678467856786678767886789679067916792679367946795679667976798679968006801680268036804680568066807680868096810681168126813681468156816681768186819682068216822682368246825682668276828682968306831683268336834683568366837683868396840684168426843684468456846684768486849685068516852685368546855685668576858685968606861686268636864686568666867686868696870687168726873687468756876687768786879688068816882688368846885688668876888688968906891689268936894689568966897689868996900690169026903690469056906690769086909691069116912691369146915691669176918691969206921692269236924692569266927692869296930693169326933693469356936693769386939694069416942694369446945694669476948694969506951695269536954695569566957695869596960696169626963696469656966696769686969697069716972697369746975697669776978697969806981698269836984698569866987698869896990699169926993699469956996699769986999700070017002700370047005700670077008700970107011701270137014701570167017701870197020702170227023702470257026702770287029703070317032703370347035703670377038703970407041704270437044704570467047704870497050705170527053705470557056705770587059706070617062706370647065706670677068706970707071707270737074707570767077707870797080708170827083708470857086708770887089709070917092709370947095709670977098709971007101710271037104710571067107710871097110711171127113711471157116711771187119712071217122712371247125712671277128712971307131713271337134713571367137713871397140714171427143714471457146714771487149715071517152715371547155715671577158715971607161716271637164716571667167716871697170717171727173717471757176717771787179718071817182718371847185718671877188718971907191719271937194719571967197719871997200720172027203720472057206720772087209721072117212721372147215721672177218721972207221722272237224722572267227722872297230723172327233723472357236723772387239724072417242724372447245724672477248724972507251725272537254725572567257725872597260726172627263726472657266726772687269727072717272727372747275727672777278727972807281728272837284728572867287728872897290729172927293729472957296729772987299730073017302730373047305730673077308730973107311731273137314731573167317731873197320732173227323732473257326732773287329733073317332733373347335733673377338733973407341734273437344734573467347734873497350735173527353735473557356735773587359736073617362736373647365736673677368736973707371737273737374737573767377737873797380738173827383738473857386738773887389739073917392739373947395739673977398739974007401740274037404740574067407740874097410741174127413741474157416741774187419742074217422742374247425742674277428742974307431743274337434743574367437743874397440744174427443744474457446744774487449745074517452745374547455745674577458745974607461746274637464746574667467746874697470747174727473747474757476747774787479748074817482748374847485748674877488748974907491749274937494749574967497749874997500750175027503750475057506750775087509 |
- ---
- apiVersion: v1
- kind: Namespace
- metadata:
- labels:
- kubevirt.io: ""
- pod-security.kubernetes.io/enforce: "privileged"
- name: kubevirt
- ---
- apiVersion: apiextensions.k8s.io/v1
- kind: CustomResourceDefinition
- metadata:
- labels:
- operator.kubevirt.io: ""
- name: kubevirts.kubevirt.io
- spec:
- group: kubevirt.io
- names:
- categories:
- - all
- kind: KubeVirt
- plural: kubevirts
- shortNames:
- - kv
- - kvs
- singular: kubevirt
- scope: Namespaced
- versions:
- - additionalPrinterColumns:
- - jsonPath: .metadata.creationTimestamp
- name: Age
- type: date
- - jsonPath: .status.phase
- name: Phase
- type: string
- name: v1
- schema:
- openAPIV3Schema:
- description: KubeVirt represents the object deploying all KubeVirt resources
- properties:
- apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- spec:
- properties:
- certificateRotateStrategy:
- properties:
- selfSigned:
- properties:
- ca:
- description: CA configuration CA certs are kept in the CA
- bundle as long as they are valid
- properties:
- duration:
- description: The requested 'duration' (i.e. lifetime)
- of the Certificate.
- type: string
- renewBefore:
- description: The amount of time before the currently issued
- certificate's "notAfter" time that we will begin to
- attempt to renew the certificate.
- type: string
- type: object
- caOverlapInterval:
- description: Deprecated. Use CA.Duration and CA.RenewBefore
- instead
- type: string
- caRotateInterval:
- description: Deprecated. Use CA.Duration instead
- type: string
- certRotateInterval:
- description: Deprecated. Use Server.Duration instead
- type: string
- server:
- description: Server configuration Certs are rotated and discarded
- properties:
- duration:
- description: The requested 'duration' (i.e. lifetime)
- of the Certificate.
- type: string
- renewBefore:
- description: The amount of time before the currently issued
- certificate's "notAfter" time that we will begin to
- attempt to renew the certificate.
- type: string
- type: object
- type: object
- type: object
- configuration:
- description: holds kubevirt configurations. same as the virt-configMap
- properties:
- additionalGuestMemoryOverheadRatio:
- description: AdditionalGuestMemoryOverheadRatio can be used to
- increase the virtualization infrastructure overhead. This is
- useful, since the calculation of this overhead is not accurate
- and cannot be entirely known in advance. The ratio that is being
- set determines by which factor to increase the overhead calculated
- by Kubevirt. A higher ratio means that the VMs would be less
- compromised by node pressures, but would mean that fewer VMs
- could be scheduled to a node. If not set, the default is 1.
- type: string
- apiConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- architectureConfiguration:
- properties:
- amd64:
- properties:
- emulatedMachines:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- machineType:
- type: string
- ovmfPath:
- type: string
- type: object
- arm64:
- properties:
- emulatedMachines:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- machineType:
- type: string
- ovmfPath:
- type: string
- type: object
- defaultArchitecture:
- type: string
- ppc64le:
- properties:
- emulatedMachines:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- machineType:
- type: string
- ovmfPath:
- type: string
- type: object
- type: object
- autoCPULimitNamespaceLabelSelector:
- description: When set, AutoCPULimitNamespaceLabelSelector will
- set a CPU limit on virt-launcher for VMIs running inside namespaces
- that match the label selector. The CPU limit will equal the
- number of requested vCPUs. This setting does not apply to VMIs
- with dedicated CPUs.
- properties:
- matchExpressions:
- description: matchExpressions is a list of label selector
- requirements. The requirements are ANDed.
- items:
- description: A label selector requirement is a selector
- that contains values, a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key that the selector
- applies to.
- type: string
- operator:
- description: operator represents a key's relationship
- to a set of values. Valid operators are In, NotIn,
- Exists and DoesNotExist.
- type: string
- values:
- description: values is an array of string values. If
- the operator is In or NotIn, the values array must
- be non-empty. If the operator is Exists or DoesNotExist,
- the values array must be empty. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value} pairs. A
- single {key,value} in the matchLabels map is equivalent
- to an element of matchExpressions, whose key field is "key",
- the operator is "In", and the values array contains only
- "value". The requirements are ANDed.
- type: object
- type: object
- controllerConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- cpuModel:
- type: string
- cpuRequest:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- defaultRuntimeClass:
- type: string
- developerConfiguration:
- description: DeveloperConfiguration holds developer options
- properties:
- cpuAllocationRatio:
- description: 'For each requested virtual CPU, CPUAllocationRatio
- defines how much physical CPU to request per VMI from the
- hosting node. The value is in fraction of a CPU thread (or
- core on non-hyperthreaded nodes). For example, a value of
- 1 means 1 physical CPU thread per VMI CPU thread. A value
- of 100 would be 1% of a physical thread allocated for each
- requested VMI thread. This option has no effect on VMIs
- that request dedicated CPUs. More information at: https://kubevirt.io/user-guide/operations/node_overcommit/#node-cpu-allocation-ratio
- Defaults to 10'
- type: integer
- diskVerification:
- description: DiskVerification holds container disks verification
- limits
- properties:
- memoryLimit:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- required:
- - memoryLimit
- type: object
- featureGates:
- description: FeatureGates is the list of experimental features
- to enable. Defaults to none
- items:
- type: string
- type: array
- logVerbosity:
- description: LogVerbosity sets log verbosity level of various
- components
- properties:
- nodeVerbosity:
- additionalProperties:
- type: integer
- description: NodeVerbosity represents a map of nodes with
- a specific verbosity level
- type: object
- virtAPI:
- type: integer
- virtController:
- type: integer
- virtHandler:
- type: integer
- virtLauncher:
- type: integer
- virtOperator:
- type: integer
- type: object
- memoryOvercommit:
- description: MemoryOvercommit is the percentage of memory
- we want to give VMIs compared to the amount given to its
- parent pod (virt-launcher). For example, a value of 102
- means the VMI will "see" 2% more memory than its parent
- pod. Values under 100 are effectively "undercommits". Overcommits
- can lead to memory exhaustion, which in turn can lead to
- crashes. Use carefully. Defaults to 100
- type: integer
- minimumClusterTSCFrequency:
- description: Allow overriding the automatically determined
- minimum TSC frequency of the cluster and fixate the minimum
- to this frequency.
- format: int64
- type: integer
- minimumReservePVCBytes:
- description: MinimumReservePVCBytes is the amount of space,
- in bytes, to leave unused on disks. Defaults to 131072 (128KiB)
- format: int64
- type: integer
- nodeSelectors:
- additionalProperties:
- type: string
- description: NodeSelectors allows restricting VMI creation
- to nodes that match a set of labels. Defaults to none
- type: object
- pvcTolerateLessSpaceUpToPercent:
- description: LessPVCSpaceToleration determines how much smaller,
- in percentage, disk PVCs are allowed to be compared to the
- requested size (to account for various overheads). Defaults
- to 10
- type: integer
- useEmulation:
- description: UseEmulation can be set to true to allow fallback
- to software emulation in case hardware-assisted emulation
- is not available. Defaults to false
- type: boolean
- type: object
- emulatedMachines:
- items:
- type: string
- type: array
- evictionStrategy:
- description: EvictionStrategy defines at the cluster level if
- the VirtualMachineInstance should be migrated instead of shut-off
- in case of a node drain. If the VirtualMachineInstance specific
- field is set it overrides the cluster level one.
- type: string
- handlerConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- imagePullPolicy:
- description: PullPolicy describes a policy for if/when to pull
- a container image
- type: string
- ksmConfiguration:
- description: KSMConfiguration holds the information regarding
- the enabling the KSM in the nodes (if available).
- properties:
- nodeLabelSelector:
- description: NodeLabelSelector is a selector that filters
- in which nodes the KSM will be enabled. Empty NodeLabelSelector
- will enable ksm for every node.
- properties:
- matchExpressions:
- description: matchExpressions is a list of label selector
- requirements. The requirements are ANDed.
- items:
- description: A label selector requirement is a selector
- that contains values, a key, and an operator that
- relates the key and values.
- properties:
- key:
- description: key is the label key that the selector
- applies to.
- type: string
- operator:
- description: operator represents a key's relationship
- to a set of values. Valid operators are In, NotIn,
- Exists and DoesNotExist.
- type: string
- values:
- description: values is an array of string values.
- If the operator is In or NotIn, the values array
- must be non-empty. If the operator is Exists or
- DoesNotExist, the values array must be empty.
- This array is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value} pairs.
- A single {key,value} in the matchLabels map is equivalent
- to an element of matchExpressions, whose key field is
- "key", the operator is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- type: object
- liveUpdateConfiguration:
- description: LiveUpdateConfiguration holds defaults for live update
- features
- properties:
- maxCpuSockets:
- description: MaxCpuSockets holds the maximum amount of sockets
- that can be hotplugged
- format: int32
- type: integer
- maxGuest:
- anyOf:
- - type: integer
- - type: string
- description: MaxGuest defines the maximum amount memory that
- can be allocated to the guest using hotplug.
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- maxHotplugRatio:
- description: 'MaxHotplugRatio is the ratio used to define
- the max amount of a hotplug resource that can be made available
- to a VM when the specific Max* setting is not defined (MaxCpuSockets,
- MaxGuest) Example: VM is configured with 512Mi of guest
- memory, if MaxGuest is not defined and MaxHotplugRatio is
- 2 then MaxGuest = 1Gi defaults to 4'
- format: int32
- type: integer
- type: object
- machineType:
- description: Deprecated. Use architectureConfiguration instead.
- type: string
- mediatedDevicesConfiguration:
- description: MediatedDevicesConfiguration holds information about
- MDEV types to be defined, if available
- properties:
- mediatedDeviceTypes:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- mediatedDevicesTypes:
- description: Deprecated. Use mediatedDeviceTypes instead.
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- nodeMediatedDeviceTypes:
- items:
- description: NodeMediatedDeviceTypesConfig holds information
- about MDEV types to be defined in a specific node that
- matches the NodeSelector field.
- properties:
- mediatedDeviceTypes:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- mediatedDevicesTypes:
- description: Deprecated. Use mediatedDeviceTypes instead.
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- nodeSelector:
- additionalProperties:
- type: string
- description: 'NodeSelector is a selector which must
- be true for the vmi to fit on a node. Selector which
- must match a node''s labels for the vmi to be scheduled
- on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
- type: object
- required:
- - nodeSelector
- type: object
- type: array
- x-kubernetes-list-type: atomic
- type: object
- memBalloonStatsPeriod:
- format: int32
- type: integer
- migrations:
- description: MigrationConfiguration holds migration options. Can
- be overridden for specific groups of VMs though migration policies.
- Visit https://kubevirt.io/user-guide/operations/migration_policies/
- for more information.
- properties:
- allowAutoConverge:
- description: AllowAutoConverge allows the platform to compromise
- performance/availability of VMIs to guarantee successful
- VMI live migrations. Defaults to false
- type: boolean
- allowPostCopy:
- description: AllowPostCopy enables post-copy live migrations.
- Such migrations allow even the busiest VMIs to successfully
- live-migrate. However, events like a network failure can
- cause a VMI crash. If set to true, migrations will still
- start in pre-copy, but switch to post-copy when CompletionTimeoutPerGiB
- triggers. Defaults to false
- type: boolean
- bandwidthPerMigration:
- anyOf:
- - type: integer
- - type: string
- description: BandwidthPerMigration limits the amount of network
- bandwidth live migrations are allowed to use. The value
- is in quantity per second. Defaults to 0 (no limit)
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- completionTimeoutPerGiB:
- description: CompletionTimeoutPerGiB is the maximum number
- of seconds per GiB a migration is allowed to take. If a
- live-migration takes longer to migrate than this value multiplied
- by the size of the VMI, the migration will be cancelled,
- unless AllowPostCopy is true. Defaults to 800
- format: int64
- type: integer
- disableTLS:
- description: When set to true, DisableTLS will disable the
- additional layer of live migration encryption provided by
- KubeVirt. This is usually a bad idea. Defaults to false
- type: boolean
- matchSELinuxLevelOnMigration:
- description: By default, the SELinux level of target virt-launcher
- pods is forced to the level of the source virt-launcher.
- When set to true, MatchSELinuxLevelOnMigration lets the
- CRI auto-assign a random level to the target. That will
- ensure the target virt-launcher doesn't share categories
- with another pod on the node. However, migrations will fail
- when using RWX volumes that don't automatically deal with
- SELinux levels.
- type: boolean
- network:
- description: Network is the name of the CNI network to use
- for live migrations. By default, migrations go through the
- pod network.
- type: string
- nodeDrainTaintKey:
- description: 'NodeDrainTaintKey defines the taint key that
- indicates a node should be drained. Note: this option relies
- on the deprecated node taint feature. Default: kubevirt.io/drain'
- type: string
- parallelMigrationsPerCluster:
- description: ParallelMigrationsPerCluster is the total number
- of concurrent live migrations allowed cluster-wide. Defaults
- to 5
- format: int32
- type: integer
- parallelOutboundMigrationsPerNode:
- description: ParallelOutboundMigrationsPerNode is the maximum
- number of concurrent outgoing live migrations allowed per
- node. Defaults to 2
- format: int32
- type: integer
- progressTimeout:
- description: ProgressTimeout is the maximum number of seconds
- a live migration is allowed to make no progress. Hitting
- this timeout means a migration transferred 0 data for that
- many seconds. The migration is then considered stuck and
- therefore cancelled. Defaults to 150
- format: int64
- type: integer
- unsafeMigrationOverride:
- description: UnsafeMigrationOverride allows live migrations
- to occur even if the compatibility check indicates the migration
- will be unsafe to the guest. Defaults to false
- type: boolean
- type: object
- minCPUModel:
- type: string
- network:
- description: NetworkConfiguration holds network options
- properties:
- binding:
- additionalProperties:
- properties:
- networkAttachmentDefinition:
- description: 'NetworkAttachmentDefinition references
- to a NetworkAttachmentDefinition CR object. Format:
- <name>, <namespace>/<name>. If namespace is not specified,
- VMI namespace is assumed. version: 1alphav1'
- type: string
- sidecarImage:
- description: 'SidecarImage references a container image
- that runs in the virt-launcher pod. The sidecar handles
- (libvirt) domain configuration and optional services.
- version: 1alphav1'
- type: string
- type: object
- type: object
- defaultNetworkInterface:
- type: string
- permitBridgeInterfaceOnPodNetwork:
- type: boolean
- permitSlirpInterface:
- type: boolean
- type: object
- obsoleteCPUModels:
- additionalProperties:
- type: boolean
- type: object
- ovmfPath:
- type: string
- permittedHostDevices:
- description: PermittedHostDevices holds information about devices
- allowed for passthrough
- properties:
- mediatedDevices:
- items:
- description: MediatedHostDevice represents a host mediated
- device allowed for passthrough
- properties:
- externalResourceProvider:
- type: boolean
- mdevNameSelector:
- type: string
- resourceName:
- type: string
- required:
- - mdevNameSelector
- - resourceName
- type: object
- type: array
- x-kubernetes-list-type: atomic
- pciHostDevices:
- items:
- description: PciHostDevice represents a host PCI device
- allowed for passthrough
- properties:
- externalResourceProvider:
- description: If true, KubeVirt will leave the allocation
- and monitoring to an external device plugin
- type: boolean
- pciVendorSelector:
- description: The vendor_id:product_id tuple of the PCI
- device
- type: string
- resourceName:
- description: The name of the resource that is representing
- the device. Exposed by a device plugin and requested
- by VMs. Typically of the form vendor.com/product_name
- type: string
- required:
- - pciVendorSelector
- - resourceName
- type: object
- type: array
- x-kubernetes-list-type: atomic
- usb:
- items:
- properties:
- externalResourceProvider:
- description: If true, KubeVirt will leave the allocation
- and monitoring to an external device plugin
- type: boolean
- resourceName:
- description: 'Identifies the list of USB host devices.
- e.g: kubevirt.io/storage, kubevirt.io/bootable-usb,
- etc'
- type: string
- selectors:
- items:
- properties:
- product:
- type: string
- vendor:
- type: string
- required:
- - product
- - vendor
- type: object
- type: array
- x-kubernetes-list-type: atomic
- required:
- - resourceName
- type: object
- type: array
- x-kubernetes-list-type: atomic
- type: object
- seccompConfiguration:
- description: SeccompConfiguration holds Seccomp configuration
- for Kubevirt components
- properties:
- virtualMachineInstanceProfile:
- description: VirtualMachineInstanceProfile defines what profile
- should be used with virt-launcher. Defaults to none
- properties:
- customProfile:
- description: CustomProfile allows to request arbitrary
- profile for virt-launcher
- properties:
- localhostProfile:
- type: string
- runtimeDefaultProfile:
- type: boolean
- type: object
- type: object
- type: object
- selinuxLauncherType:
- type: string
- smbios:
- properties:
- family:
- type: string
- manufacturer:
- type: string
- product:
- type: string
- sku:
- type: string
- version:
- type: string
- type: object
- supportContainerResources:
- description: SupportContainerResources specifies the resource
- requirements for various types of supporting containers such
- as container disks/virtiofs/sidecars and hotplug attachment
- pods. If omitted a sensible default will be supplied.
- items:
- description: SupportContainerResources are used to specify the
- cpu/memory request and limits for the containers that support
- various features of Virtual Machines. These containers are
- usually idle and don't require a lot of memory or cpu.
- properties:
- resources:
- description: ResourceRequirements describes the compute
- resource requirements.
- properties:
- claims:
- description: "Claims lists the names of resources, defined
- in spec.resourceClaims, that are used by this container.
- \n This is an alpha field and requires enabling the
- DynamicResourceAllocation feature gate. \n This field
- is immutable. It can only be set for containers."
- items:
- description: ResourceClaim references one entry in
- PodSpec.ResourceClaims.
- properties:
- name:
- description: Name must match the name of one entry
- in pod.spec.resourceClaims of the Pod where
- this field is used. It makes that resource available
- inside a container.
- type: string
- required:
- - name
- type: object
- type: array
- x-kubernetes-list-map-keys:
- - name
- x-kubernetes-list-type: map
- limits:
- additionalProperties:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- description: 'Limits describes the maximum amount of
- compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
- type: object
- requests:
- additionalProperties:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount
- of compute resources required. If Requests is omitted
- for a container, it defaults to Limits if that is
- explicitly specified, otherwise to an implementation-defined
- value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
- type: object
- type: object
- type:
- type: string
- required:
- - resources
- - type
- type: object
- type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
- supportedGuestAgentVersions:
- description: deprecated
- items:
- type: string
- type: array
- tlsConfiguration:
- description: TLSConfiguration holds TLS options
- properties:
- ciphers:
- items:
- type: string
- type: array
- x-kubernetes-list-type: set
- minTLSVersion:
- description: "MinTLSVersion is a way to specify the minimum
- protocol version that is acceptable for TLS connections.
- Protocol versions are based on the following most common
- TLS configurations: \n https://ssl-config.mozilla.org/
- \n Note that SSLv3.0 is not a supported protocol version
- due to well known vulnerabilities such as POODLE: https://en.wikipedia.org/wiki/POODLE"
- enum:
- - VersionTLS10
- - VersionTLS11
- - VersionTLS12
- - VersionTLS13
- type: string
- type: object
- virtualMachineInstancesPerNode:
- type: integer
- virtualMachineOptions:
- description: VirtualMachineOptions holds the cluster level information
- regarding the virtual machine.
- properties:
- disableFreePageReporting:
- description: DisableFreePageReporting disable the free page
- reporting of memory balloon device https://libvirt.org/formatdomain.html#memory-balloon-device.
- This will have effect only if AutoattachMemBalloon is not
- false and the vmi is not requesting any high performance
- feature (dedicatedCPU/realtime/hugePages), in which free
- page reporting is always disabled.
- type: object
- disableSerialConsoleLog:
- description: DisableSerialConsoleLog disables logging the
- auto-attached default serial console. If not set, serial
- console logs will be written to a file and then streamed
- from a container named 'guest-console-log'. The value can
- be individually overridden for each VM, not relevant if
- AutoattachSerialConsole is disabled.
- type: object
- type: object
- vmStateStorageClass:
- description: VMStateStorageClass is the name of the storage class
- to use for the PVCs created to preserve VM state, like TPM.
- The storage class must support RWX in filesystem mode.
- type: string
- webhookConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- type: object
- customizeComponents:
- properties:
- flags:
- description: Configure the value used for deployment and daemonset
- resources
- properties:
- api:
- additionalProperties:
- type: string
- type: object
- controller:
- additionalProperties:
- type: string
- type: object
- handler:
- additionalProperties:
- type: string
- type: object
- type: object
- patches:
- items:
- properties:
- patch:
- type: string
- resourceName:
- minLength: 1
- type: string
- resourceType:
- minLength: 1
- type: string
- type:
- type: string
- required:
- - patch
- - resourceName
- - resourceType
- - type
- type: object
- type: array
- x-kubernetes-list-type: atomic
- type: object
- imagePullPolicy:
- description: The ImagePullPolicy to use.
- type: string
- imagePullSecrets:
- description: The imagePullSecrets to pull the container images from
- Defaults to none
- items:
- description: LocalObjectReference contains enough information to
- let you locate the referenced object inside the same namespace.
- properties:
- name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
- TODO: Add other useful fields. apiVersion, kind, uid?'
- type: string
- type: object
- type: array
- x-kubernetes-list-type: atomic
- imageRegistry:
- description: The image registry to pull the container images from
- Defaults to the same registry the operator's container image is
- pulled from.
- type: string
- imageTag:
- description: The image tag to use for the continer images installed.
- Defaults to the same tag as the operator's container image.
- type: string
- infra:
- description: selectors and tolerations that should apply to KubeVirt
- infrastructure components
- properties:
- nodePlacement:
- description: nodePlacement describes scheduling configuration
- for specific KubeVirt components
- properties:
- affinity:
- description: affinity enables pod affinity/anti-affinity placement
- expanding the types of constraints that can be expressed
- with nodeSelector. affinity is going to be applied to the
- relevant kind of pods in parallel with nodeSelector See
- https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
- properties:
- nodeAffinity:
- description: Describes node affinity scheduling rules
- for the pod.
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node matches the corresponding matchExpressions;
- the node(s) with the highest sum are the most preferred.
- items:
- description: An empty preferred scheduling term
- matches all objects with implicit weight 0 (i.e.
- it's a no-op). A null preferred scheduling term
- matches no objects (i.e. is also a no-op).
- properties:
- preference:
- description: A node selector term, associated
- with the corresponding weight.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- weight:
- description: Weight associated with matching
- the corresponding nodeSelectorTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - preference
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to an update), the system may or may not try
- to eventually evict the pod from its node.
- properties:
- nodeSelectorTerms:
- description: Required. A list of node selector
- terms. The terms are ORed.
- items:
- description: A null or empty node selector term
- matches no objects. The requirements of them
- are ANDed. The TopologySelectorTerm type implements
- a subset of the NodeSelectorTerm.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- type: array
- required:
- - nodeSelectorTerms
- type: object
- type: object
- podAffinity:
- description: Describes pod affinity scheduling rules (e.g.
- co-locate this pod in the same node, zone, etc. as some
- other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to a pod label update), the system may or may
- not try to eventually evict the pod from its node.
- When there are multiple elements, the lists of nodes
- corresponding to each podAffinityTerm are intersected,
- i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- podAntiAffinity:
- description: Describes pod anti-affinity scheduling rules
- (e.g. avoid putting this pod in the same node, zone,
- etc. as some other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the anti-affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling anti-affinity
- expressions, etc.), compute a sum by iterating through
- the elements of this field and adding "weight" to
- the sum if the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the anti-affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- anti-affinity requirements specified by this field
- cease to be met at some point during pod execution
- (e.g. due to a pod label update), the system may
- or may not try to eventually evict the pod from
- its node. When there are multiple elements, the
- lists of nodes corresponding to each podAffinityTerm
- are intersected, i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- type: object
- nodeSelector:
- additionalProperties:
- type: string
- description: 'nodeSelector is the node selector applied to
- the relevant kind of pods It specifies a map of key-value
- pairs: for the pod to be eligible to run on a node, the
- node must have each of the indicated key-value pairs as
- labels (it can have additional labels as well). See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector'
- type: object
- tolerations:
- description: tolerations is a list of tolerations applied
- to the relevant kind of pods See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
- for more info. These are additional tolerations other than
- default ones.
- items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
- properties:
- effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified,
- allowed values are NoSchedule, PreferNoSchedule and
- NoExecute.
- type: string
- key:
- description: Key is the taint key that the toleration
- applies to. Empty means match all taint keys. If the
- key is empty, operator must be Exists; this combination
- means to match all values and all keys.
- type: string
- operator:
- description: Operator represents a key's relationship
- to the value. Valid operators are Exists and Equal.
- Defaults to Equal. Exists is equivalent to wildcard
- for value, so that a pod can tolerate all taints of
- a particular category.
- type: string
- tolerationSeconds:
- description: TolerationSeconds represents the period
- of time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the
- taint forever (do not evict). Zero and negative values
- will be treated as 0 (evict immediately) by the system.
- format: int64
- type: integer
- value:
- description: Value is the taint value the toleration
- matches to. If the operator is Exists, the value should
- be empty, otherwise just a regular string.
- type: string
- type: object
- type: array
- type: object
- replicas:
- description: 'replicas indicates how many replicas should be created
- for each KubeVirt infrastructure component (like virt-api or
- virt-controller). Defaults to 2. WARNING: this is an advanced
- feature that prevents auto-scaling for core kubevirt components.
- Please use with caution!'
- type: integer
- type: object
- monitorAccount:
- description: The name of the Prometheus service account that needs
- read-access to KubeVirt endpoints Defaults to prometheus-k8s
- type: string
- monitorNamespace:
- description: The namespace Prometheus is deployed in Defaults to openshift-monitor
- type: string
- productComponent:
- description: Designate the apps.kubevirt.io/component label for KubeVirt
- components. Useful if KubeVirt is included as part of a product.
- If ProductComponent is not specified, the component label default
- value is kubevirt.
- type: string
- productName:
- description: Designate the apps.kubevirt.io/part-of label for KubeVirt
- components. Useful if KubeVirt is included as part of a product.
- If ProductName is not specified, the part-of label will be omitted.
- type: string
- productVersion:
- description: Designate the apps.kubevirt.io/version label for KubeVirt
- components. Useful if KubeVirt is included as part of a product.
- If ProductVersion is not specified, KubeVirt's version will be used.
- type: string
- serviceMonitorNamespace:
- description: The namespace the service monitor will be deployed When
- ServiceMonitorNamespace is set, then we'll install the service monitor
- object in that namespace otherwise we will use the monitoring namespace.
- type: string
- uninstallStrategy:
- description: Specifies if kubevirt can be deleted if workloads are
- still present. This is mainly a precaution to avoid accidental data
- loss
- type: string
- workloadUpdateStrategy:
- description: WorkloadUpdateStrategy defines at the cluster level how
- to handle automated workload updates
- properties:
- batchEvictionInterval:
- description: "BatchEvictionInterval Represents the interval to
- wait before issuing the next batch of shutdowns \n Defaults
- to 1 minute"
- type: string
- batchEvictionSize:
- description: "BatchEvictionSize Represents the number of VMIs
- that can be forced updated per the BatchShutdownInteral interval
- \n Defaults to 10"
- type: integer
- workloadUpdateMethods:
- description: "WorkloadUpdateMethods defines the methods that can
- be used to disrupt workloads during automated workload updates.
- When multiple methods are present, the least disruptive method
- takes precedence over more disruptive methods. For example if
- both LiveMigrate and Shutdown methods are listed, only VMs which
- are not live migratable will be restarted/shutdown \n An empty
- list defaults to no automated workload updating"
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- type: object
- workloads:
- description: selectors and tolerations that should apply to KubeVirt
- workloads
- properties:
- nodePlacement:
- description: nodePlacement describes scheduling configuration
- for specific KubeVirt components
- properties:
- affinity:
- description: affinity enables pod affinity/anti-affinity placement
- expanding the types of constraints that can be expressed
- with nodeSelector. affinity is going to be applied to the
- relevant kind of pods in parallel with nodeSelector See
- https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
- properties:
- nodeAffinity:
- description: Describes node affinity scheduling rules
- for the pod.
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node matches the corresponding matchExpressions;
- the node(s) with the highest sum are the most preferred.
- items:
- description: An empty preferred scheduling term
- matches all objects with implicit weight 0 (i.e.
- it's a no-op). A null preferred scheduling term
- matches no objects (i.e. is also a no-op).
- properties:
- preference:
- description: A node selector term, associated
- with the corresponding weight.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- weight:
- description: Weight associated with matching
- the corresponding nodeSelectorTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - preference
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to an update), the system may or may not try
- to eventually evict the pod from its node.
- properties:
- nodeSelectorTerms:
- description: Required. A list of node selector
- terms. The terms are ORed.
- items:
- description: A null or empty node selector term
- matches no objects. The requirements of them
- are ANDed. The TopologySelectorTerm type implements
- a subset of the NodeSelectorTerm.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- type: array
- required:
- - nodeSelectorTerms
- type: object
- type: object
- podAffinity:
- description: Describes pod affinity scheduling rules (e.g.
- co-locate this pod in the same node, zone, etc. as some
- other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to a pod label update), the system may or may
- not try to eventually evict the pod from its node.
- When there are multiple elements, the lists of nodes
- corresponding to each podAffinityTerm are intersected,
- i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- podAntiAffinity:
- description: Describes pod anti-affinity scheduling rules
- (e.g. avoid putting this pod in the same node, zone,
- etc. as some other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the anti-affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling anti-affinity
- expressions, etc.), compute a sum by iterating through
- the elements of this field and adding "weight" to
- the sum if the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the anti-affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- anti-affinity requirements specified by this field
- cease to be met at some point during pod execution
- (e.g. due to a pod label update), the system may
- or may not try to eventually evict the pod from
- its node. When there are multiple elements, the
- lists of nodes corresponding to each podAffinityTerm
- are intersected, i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- type: object
- nodeSelector:
- additionalProperties:
- type: string
- description: 'nodeSelector is the node selector applied to
- the relevant kind of pods It specifies a map of key-value
- pairs: for the pod to be eligible to run on a node, the
- node must have each of the indicated key-value pairs as
- labels (it can have additional labels as well). See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector'
- type: object
- tolerations:
- description: tolerations is a list of tolerations applied
- to the relevant kind of pods See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
- for more info. These are additional tolerations other than
- default ones.
- items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
- properties:
- effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified,
- allowed values are NoSchedule, PreferNoSchedule and
- NoExecute.
- type: string
- key:
- description: Key is the taint key that the toleration
- applies to. Empty means match all taint keys. If the
- key is empty, operator must be Exists; this combination
- means to match all values and all keys.
- type: string
- operator:
- description: Operator represents a key's relationship
- to the value. Valid operators are Exists and Equal.
- Defaults to Equal. Exists is equivalent to wildcard
- for value, so that a pod can tolerate all taints of
- a particular category.
- type: string
- tolerationSeconds:
- description: TolerationSeconds represents the period
- of time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the
- taint forever (do not evict). Zero and negative values
- will be treated as 0 (evict immediately) by the system.
- format: int64
- type: integer
- value:
- description: Value is the taint value the toleration
- matches to. If the operator is Exists, the value should
- be empty, otherwise just a regular string.
- type: string
- type: object
- type: array
- type: object
- replicas:
- description: 'replicas indicates how many replicas should be created
- for each KubeVirt infrastructure component (like virt-api or
- virt-controller). Defaults to 2. WARNING: this is an advanced
- feature that prevents auto-scaling for core kubevirt components.
- Please use with caution!'
- type: integer
- type: object
- type: object
- status:
- description: KubeVirtStatus represents information pertaining to a KubeVirt
- deployment.
- properties:
- conditions:
- items:
- description: KubeVirtCondition represents a condition of a KubeVirt
- deployment
- properties:
- lastProbeTime:
- format: date-time
- nullable: true
- type: string
- lastTransitionTime:
- format: date-time
- nullable: true
- type: string
- message:
- type: string
- reason:
- type: string
- status:
- type: string
- type:
- type: string
- required:
- - status
- - type
- type: object
- type: array
- defaultArchitecture:
- type: string
- generations:
- items:
- description: GenerationStatus keeps track of the generation for
- a given resource so that decisions about forced updates can be
- made.
- properties:
- group:
- description: group is the group of the thing you're tracking
- type: string
- hash:
- description: hash is an optional field set for resources without
- generation that are content sensitive like secrets and configmaps
- type: string
- lastGeneration:
- description: lastGeneration is the last generation of the workload
- controller involved
- format: int64
- type: integer
- name:
- description: name is the name of the thing you're tracking
- type: string
- namespace:
- description: namespace is where the thing you're tracking is
- type: string
- resource:
- description: resource is the resource type of the thing you're
- tracking
- type: string
- required:
- - group
- - lastGeneration
- - name
- - resource
- type: object
- type: array
- x-kubernetes-list-type: atomic
- observedDeploymentConfig:
- type: string
- observedDeploymentID:
- type: string
- observedGeneration:
- format: int64
- type: integer
- observedKubeVirtRegistry:
- type: string
- observedKubeVirtVersion:
- type: string
- operatorVersion:
- type: string
- outdatedVirtualMachineInstanceWorkloads:
- type: integer
- phase:
- description: KubeVirtPhase is a label for the phase of a KubeVirt
- deployment at the current time.
- type: string
- targetDeploymentConfig:
- type: string
- targetDeploymentID:
- type: string
- targetKubeVirtRegistry:
- type: string
- targetKubeVirtVersion:
- type: string
- type: object
- required:
- - spec
- type: object
- served: true
- storage: true
- subresources:
- status: {}
- - additionalPrinterColumns:
- - jsonPath: .metadata.creationTimestamp
- name: Age
- type: date
- - jsonPath: .status.phase
- name: Phase
- type: string
- deprecated: true
- deprecationWarning: kubevirt.io/v1alpha3 is now deprecated and will be removed
- in a future release.
- name: v1alpha3
- schema:
- openAPIV3Schema:
- description: KubeVirt represents the object deploying all KubeVirt resources
- properties:
- apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- spec:
- properties:
- certificateRotateStrategy:
- properties:
- selfSigned:
- properties:
- ca:
- description: CA configuration CA certs are kept in the CA
- bundle as long as they are valid
- properties:
- duration:
- description: The requested 'duration' (i.e. lifetime)
- of the Certificate.
- type: string
- renewBefore:
- description: The amount of time before the currently issued
- certificate's "notAfter" time that we will begin to
- attempt to renew the certificate.
- type: string
- type: object
- caOverlapInterval:
- description: Deprecated. Use CA.Duration and CA.RenewBefore
- instead
- type: string
- caRotateInterval:
- description: Deprecated. Use CA.Duration instead
- type: string
- certRotateInterval:
- description: Deprecated. Use Server.Duration instead
- type: string
- server:
- description: Server configuration Certs are rotated and discarded
- properties:
- duration:
- description: The requested 'duration' (i.e. lifetime)
- of the Certificate.
- type: string
- renewBefore:
- description: The amount of time before the currently issued
- certificate's "notAfter" time that we will begin to
- attempt to renew the certificate.
- type: string
- type: object
- type: object
- type: object
- configuration:
- description: holds kubevirt configurations. same as the virt-configMap
- properties:
- additionalGuestMemoryOverheadRatio:
- description: AdditionalGuestMemoryOverheadRatio can be used to
- increase the virtualization infrastructure overhead. This is
- useful, since the calculation of this overhead is not accurate
- and cannot be entirely known in advance. The ratio that is being
- set determines by which factor to increase the overhead calculated
- by Kubevirt. A higher ratio means that the VMs would be less
- compromised by node pressures, but would mean that fewer VMs
- could be scheduled to a node. If not set, the default is 1.
- type: string
- apiConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- architectureConfiguration:
- properties:
- amd64:
- properties:
- emulatedMachines:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- machineType:
- type: string
- ovmfPath:
- type: string
- type: object
- arm64:
- properties:
- emulatedMachines:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- machineType:
- type: string
- ovmfPath:
- type: string
- type: object
- defaultArchitecture:
- type: string
- ppc64le:
- properties:
- emulatedMachines:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- machineType:
- type: string
- ovmfPath:
- type: string
- type: object
- type: object
- autoCPULimitNamespaceLabelSelector:
- description: When set, AutoCPULimitNamespaceLabelSelector will
- set a CPU limit on virt-launcher for VMIs running inside namespaces
- that match the label selector. The CPU limit will equal the
- number of requested vCPUs. This setting does not apply to VMIs
- with dedicated CPUs.
- properties:
- matchExpressions:
- description: matchExpressions is a list of label selector
- requirements. The requirements are ANDed.
- items:
- description: A label selector requirement is a selector
- that contains values, a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key that the selector
- applies to.
- type: string
- operator:
- description: operator represents a key's relationship
- to a set of values. Valid operators are In, NotIn,
- Exists and DoesNotExist.
- type: string
- values:
- description: values is an array of string values. If
- the operator is In or NotIn, the values array must
- be non-empty. If the operator is Exists or DoesNotExist,
- the values array must be empty. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value} pairs. A
- single {key,value} in the matchLabels map is equivalent
- to an element of matchExpressions, whose key field is "key",
- the operator is "In", and the values array contains only
- "value". The requirements are ANDed.
- type: object
- type: object
- controllerConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- cpuModel:
- type: string
- cpuRequest:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- defaultRuntimeClass:
- type: string
- developerConfiguration:
- description: DeveloperConfiguration holds developer options
- properties:
- cpuAllocationRatio:
- description: 'For each requested virtual CPU, CPUAllocationRatio
- defines how much physical CPU to request per VMI from the
- hosting node. The value is in fraction of a CPU thread (or
- core on non-hyperthreaded nodes). For example, a value of
- 1 means 1 physical CPU thread per VMI CPU thread. A value
- of 100 would be 1% of a physical thread allocated for each
- requested VMI thread. This option has no effect on VMIs
- that request dedicated CPUs. More information at: https://kubevirt.io/user-guide/operations/node_overcommit/#node-cpu-allocation-ratio
- Defaults to 10'
- type: integer
- diskVerification:
- description: DiskVerification holds container disks verification
- limits
- properties:
- memoryLimit:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- required:
- - memoryLimit
- type: object
- featureGates:
- description: FeatureGates is the list of experimental features
- to enable. Defaults to none
- items:
- type: string
- type: array
- logVerbosity:
- description: LogVerbosity sets log verbosity level of various
- components
- properties:
- nodeVerbosity:
- additionalProperties:
- type: integer
- description: NodeVerbosity represents a map of nodes with
- a specific verbosity level
- type: object
- virtAPI:
- type: integer
- virtController:
- type: integer
- virtHandler:
- type: integer
- virtLauncher:
- type: integer
- virtOperator:
- type: integer
- type: object
- memoryOvercommit:
- description: MemoryOvercommit is the percentage of memory
- we want to give VMIs compared to the amount given to its
- parent pod (virt-launcher). For example, a value of 102
- means the VMI will "see" 2% more memory than its parent
- pod. Values under 100 are effectively "undercommits". Overcommits
- can lead to memory exhaustion, which in turn can lead to
- crashes. Use carefully. Defaults to 100
- type: integer
- minimumClusterTSCFrequency:
- description: Allow overriding the automatically determined
- minimum TSC frequency of the cluster and fixate the minimum
- to this frequency.
- format: int64
- type: integer
- minimumReservePVCBytes:
- description: MinimumReservePVCBytes is the amount of space,
- in bytes, to leave unused on disks. Defaults to 131072 (128KiB)
- format: int64
- type: integer
- nodeSelectors:
- additionalProperties:
- type: string
- description: NodeSelectors allows restricting VMI creation
- to nodes that match a set of labels. Defaults to none
- type: object
- pvcTolerateLessSpaceUpToPercent:
- description: LessPVCSpaceToleration determines how much smaller,
- in percentage, disk PVCs are allowed to be compared to the
- requested size (to account for various overheads). Defaults
- to 10
- type: integer
- useEmulation:
- description: UseEmulation can be set to true to allow fallback
- to software emulation in case hardware-assisted emulation
- is not available. Defaults to false
- type: boolean
- type: object
- emulatedMachines:
- items:
- type: string
- type: array
- evictionStrategy:
- description: EvictionStrategy defines at the cluster level if
- the VirtualMachineInstance should be migrated instead of shut-off
- in case of a node drain. If the VirtualMachineInstance specific
- field is set it overrides the cluster level one.
- type: string
- handlerConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- imagePullPolicy:
- description: PullPolicy describes a policy for if/when to pull
- a container image
- type: string
- ksmConfiguration:
- description: KSMConfiguration holds the information regarding
- the enabling the KSM in the nodes (if available).
- properties:
- nodeLabelSelector:
- description: NodeLabelSelector is a selector that filters
- in which nodes the KSM will be enabled. Empty NodeLabelSelector
- will enable ksm for every node.
- properties:
- matchExpressions:
- description: matchExpressions is a list of label selector
- requirements. The requirements are ANDed.
- items:
- description: A label selector requirement is a selector
- that contains values, a key, and an operator that
- relates the key and values.
- properties:
- key:
- description: key is the label key that the selector
- applies to.
- type: string
- operator:
- description: operator represents a key's relationship
- to a set of values. Valid operators are In, NotIn,
- Exists and DoesNotExist.
- type: string
- values:
- description: values is an array of string values.
- If the operator is In or NotIn, the values array
- must be non-empty. If the operator is Exists or
- DoesNotExist, the values array must be empty.
- This array is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value} pairs.
- A single {key,value} in the matchLabels map is equivalent
- to an element of matchExpressions, whose key field is
- "key", the operator is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- type: object
- liveUpdateConfiguration:
- description: LiveUpdateConfiguration holds defaults for live update
- features
- properties:
- maxCpuSockets:
- description: MaxCpuSockets holds the maximum amount of sockets
- that can be hotplugged
- format: int32
- type: integer
- maxGuest:
- anyOf:
- - type: integer
- - type: string
- description: MaxGuest defines the maximum amount memory that
- can be allocated to the guest using hotplug.
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- maxHotplugRatio:
- description: 'MaxHotplugRatio is the ratio used to define
- the max amount of a hotplug resource that can be made available
- to a VM when the specific Max* setting is not defined (MaxCpuSockets,
- MaxGuest) Example: VM is configured with 512Mi of guest
- memory, if MaxGuest is not defined and MaxHotplugRatio is
- 2 then MaxGuest = 1Gi defaults to 4'
- format: int32
- type: integer
- type: object
- machineType:
- description: Deprecated. Use architectureConfiguration instead.
- type: string
- mediatedDevicesConfiguration:
- description: MediatedDevicesConfiguration holds information about
- MDEV types to be defined, if available
- properties:
- mediatedDeviceTypes:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- mediatedDevicesTypes:
- description: Deprecated. Use mediatedDeviceTypes instead.
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- nodeMediatedDeviceTypes:
- items:
- description: NodeMediatedDeviceTypesConfig holds information
- about MDEV types to be defined in a specific node that
- matches the NodeSelector field.
- properties:
- mediatedDeviceTypes:
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- mediatedDevicesTypes:
- description: Deprecated. Use mediatedDeviceTypes instead.
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- nodeSelector:
- additionalProperties:
- type: string
- description: 'NodeSelector is a selector which must
- be true for the vmi to fit on a node. Selector which
- must match a node''s labels for the vmi to be scheduled
- on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
- type: object
- required:
- - nodeSelector
- type: object
- type: array
- x-kubernetes-list-type: atomic
- type: object
- memBalloonStatsPeriod:
- format: int32
- type: integer
- migrations:
- description: MigrationConfiguration holds migration options. Can
- be overridden for specific groups of VMs though migration policies.
- Visit https://kubevirt.io/user-guide/operations/migration_policies/
- for more information.
- properties:
- allowAutoConverge:
- description: AllowAutoConverge allows the platform to compromise
- performance/availability of VMIs to guarantee successful
- VMI live migrations. Defaults to false
- type: boolean
- allowPostCopy:
- description: AllowPostCopy enables post-copy live migrations.
- Such migrations allow even the busiest VMIs to successfully
- live-migrate. However, events like a network failure can
- cause a VMI crash. If set to true, migrations will still
- start in pre-copy, but switch to post-copy when CompletionTimeoutPerGiB
- triggers. Defaults to false
- type: boolean
- bandwidthPerMigration:
- anyOf:
- - type: integer
- - type: string
- description: BandwidthPerMigration limits the amount of network
- bandwidth live migrations are allowed to use. The value
- is in quantity per second. Defaults to 0 (no limit)
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- completionTimeoutPerGiB:
- description: CompletionTimeoutPerGiB is the maximum number
- of seconds per GiB a migration is allowed to take. If a
- live-migration takes longer to migrate than this value multiplied
- by the size of the VMI, the migration will be cancelled,
- unless AllowPostCopy is true. Defaults to 800
- format: int64
- type: integer
- disableTLS:
- description: When set to true, DisableTLS will disable the
- additional layer of live migration encryption provided by
- KubeVirt. This is usually a bad idea. Defaults to false
- type: boolean
- matchSELinuxLevelOnMigration:
- description: By default, the SELinux level of target virt-launcher
- pods is forced to the level of the source virt-launcher.
- When set to true, MatchSELinuxLevelOnMigration lets the
- CRI auto-assign a random level to the target. That will
- ensure the target virt-launcher doesn't share categories
- with another pod on the node. However, migrations will fail
- when using RWX volumes that don't automatically deal with
- SELinux levels.
- type: boolean
- network:
- description: Network is the name of the CNI network to use
- for live migrations. By default, migrations go through the
- pod network.
- type: string
- nodeDrainTaintKey:
- description: 'NodeDrainTaintKey defines the taint key that
- indicates a node should be drained. Note: this option relies
- on the deprecated node taint feature. Default: kubevirt.io/drain'
- type: string
- parallelMigrationsPerCluster:
- description: ParallelMigrationsPerCluster is the total number
- of concurrent live migrations allowed cluster-wide. Defaults
- to 5
- format: int32
- type: integer
- parallelOutboundMigrationsPerNode:
- description: ParallelOutboundMigrationsPerNode is the maximum
- number of concurrent outgoing live migrations allowed per
- node. Defaults to 2
- format: int32
- type: integer
- progressTimeout:
- description: ProgressTimeout is the maximum number of seconds
- a live migration is allowed to make no progress. Hitting
- this timeout means a migration transferred 0 data for that
- many seconds. The migration is then considered stuck and
- therefore cancelled. Defaults to 150
- format: int64
- type: integer
- unsafeMigrationOverride:
- description: UnsafeMigrationOverride allows live migrations
- to occur even if the compatibility check indicates the migration
- will be unsafe to the guest. Defaults to false
- type: boolean
- type: object
- minCPUModel:
- type: string
- network:
- description: NetworkConfiguration holds network options
- properties:
- binding:
- additionalProperties:
- properties:
- networkAttachmentDefinition:
- description: 'NetworkAttachmentDefinition references
- to a NetworkAttachmentDefinition CR object. Format:
- <name>, <namespace>/<name>. If namespace is not specified,
- VMI namespace is assumed. version: 1alphav1'
- type: string
- sidecarImage:
- description: 'SidecarImage references a container image
- that runs in the virt-launcher pod. The sidecar handles
- (libvirt) domain configuration and optional services.
- version: 1alphav1'
- type: string
- type: object
- type: object
- defaultNetworkInterface:
- type: string
- permitBridgeInterfaceOnPodNetwork:
- type: boolean
- permitSlirpInterface:
- type: boolean
- type: object
- obsoleteCPUModels:
- additionalProperties:
- type: boolean
- type: object
- ovmfPath:
- type: string
- permittedHostDevices:
- description: PermittedHostDevices holds information about devices
- allowed for passthrough
- properties:
- mediatedDevices:
- items:
- description: MediatedHostDevice represents a host mediated
- device allowed for passthrough
- properties:
- externalResourceProvider:
- type: boolean
- mdevNameSelector:
- type: string
- resourceName:
- type: string
- required:
- - mdevNameSelector
- - resourceName
- type: object
- type: array
- x-kubernetes-list-type: atomic
- pciHostDevices:
- items:
- description: PciHostDevice represents a host PCI device
- allowed for passthrough
- properties:
- externalResourceProvider:
- description: If true, KubeVirt will leave the allocation
- and monitoring to an external device plugin
- type: boolean
- pciVendorSelector:
- description: The vendor_id:product_id tuple of the PCI
- device
- type: string
- resourceName:
- description: The name of the resource that is representing
- the device. Exposed by a device plugin and requested
- by VMs. Typically of the form vendor.com/product_name
- type: string
- required:
- - pciVendorSelector
- - resourceName
- type: object
- type: array
- x-kubernetes-list-type: atomic
- usb:
- items:
- properties:
- externalResourceProvider:
- description: If true, KubeVirt will leave the allocation
- and monitoring to an external device plugin
- type: boolean
- resourceName:
- description: 'Identifies the list of USB host devices.
- e.g: kubevirt.io/storage, kubevirt.io/bootable-usb,
- etc'
- type: string
- selectors:
- items:
- properties:
- product:
- type: string
- vendor:
- type: string
- required:
- - product
- - vendor
- type: object
- type: array
- x-kubernetes-list-type: atomic
- required:
- - resourceName
- type: object
- type: array
- x-kubernetes-list-type: atomic
- type: object
- seccompConfiguration:
- description: SeccompConfiguration holds Seccomp configuration
- for Kubevirt components
- properties:
- virtualMachineInstanceProfile:
- description: VirtualMachineInstanceProfile defines what profile
- should be used with virt-launcher. Defaults to none
- properties:
- customProfile:
- description: CustomProfile allows to request arbitrary
- profile for virt-launcher
- properties:
- localhostProfile:
- type: string
- runtimeDefaultProfile:
- type: boolean
- type: object
- type: object
- type: object
- selinuxLauncherType:
- type: string
- smbios:
- properties:
- family:
- type: string
- manufacturer:
- type: string
- product:
- type: string
- sku:
- type: string
- version:
- type: string
- type: object
- supportContainerResources:
- description: SupportContainerResources specifies the resource
- requirements for various types of supporting containers such
- as container disks/virtiofs/sidecars and hotplug attachment
- pods. If omitted a sensible default will be supplied.
- items:
- description: SupportContainerResources are used to specify the
- cpu/memory request and limits for the containers that support
- various features of Virtual Machines. These containers are
- usually idle and don't require a lot of memory or cpu.
- properties:
- resources:
- description: ResourceRequirements describes the compute
- resource requirements.
- properties:
- claims:
- description: "Claims lists the names of resources, defined
- in spec.resourceClaims, that are used by this container.
- \n This is an alpha field and requires enabling the
- DynamicResourceAllocation feature gate. \n This field
- is immutable. It can only be set for containers."
- items:
- description: ResourceClaim references one entry in
- PodSpec.ResourceClaims.
- properties:
- name:
- description: Name must match the name of one entry
- in pod.spec.resourceClaims of the Pod where
- this field is used. It makes that resource available
- inside a container.
- type: string
- required:
- - name
- type: object
- type: array
- x-kubernetes-list-map-keys:
- - name
- x-kubernetes-list-type: map
- limits:
- additionalProperties:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- description: 'Limits describes the maximum amount of
- compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
- type: object
- requests:
- additionalProperties:
- anyOf:
- - type: integer
- - type: string
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount
- of compute resources required. If Requests is omitted
- for a container, it defaults to Limits if that is
- explicitly specified, otherwise to an implementation-defined
- value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
- type: object
- type: object
- type:
- type: string
- required:
- - resources
- - type
- type: object
- type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
- supportedGuestAgentVersions:
- description: deprecated
- items:
- type: string
- type: array
- tlsConfiguration:
- description: TLSConfiguration holds TLS options
- properties:
- ciphers:
- items:
- type: string
- type: array
- x-kubernetes-list-type: set
- minTLSVersion:
- description: "MinTLSVersion is a way to specify the minimum
- protocol version that is acceptable for TLS connections.
- Protocol versions are based on the following most common
- TLS configurations: \n https://ssl-config.mozilla.org/
- \n Note that SSLv3.0 is not a supported protocol version
- due to well known vulnerabilities such as POODLE: https://en.wikipedia.org/wiki/POODLE"
- enum:
- - VersionTLS10
- - VersionTLS11
- - VersionTLS12
- - VersionTLS13
- type: string
- type: object
- virtualMachineInstancesPerNode:
- type: integer
- virtualMachineOptions:
- description: VirtualMachineOptions holds the cluster level information
- regarding the virtual machine.
- properties:
- disableFreePageReporting:
- description: DisableFreePageReporting disable the free page
- reporting of memory balloon device https://libvirt.org/formatdomain.html#memory-balloon-device.
- This will have effect only if AutoattachMemBalloon is not
- false and the vmi is not requesting any high performance
- feature (dedicatedCPU/realtime/hugePages), in which free
- page reporting is always disabled.
- type: object
- disableSerialConsoleLog:
- description: DisableSerialConsoleLog disables logging the
- auto-attached default serial console. If not set, serial
- console logs will be written to a file and then streamed
- from a container named 'guest-console-log'. The value can
- be individually overridden for each VM, not relevant if
- AutoattachSerialConsole is disabled.
- type: object
- type: object
- vmStateStorageClass:
- description: VMStateStorageClass is the name of the storage class
- to use for the PVCs created to preserve VM state, like TPM.
- The storage class must support RWX in filesystem mode.
- type: string
- webhookConfiguration:
- description: ReloadableComponentConfiguration holds all generic
- k8s configuration options which can be reloaded by components
- without requiring a restart.
- properties:
- restClient:
- description: RestClient can be used to tune certain aspects
- of the k8s client in use.
- properties:
- rateLimiter:
- description: RateLimiter allows selecting and configuring
- different rate limiters for the k8s client.
- properties:
- tokenBucketRateLimiter:
- properties:
- burst:
- description: Maximum burst for throttle. If it's
- zero, the component default will be used
- type: integer
- qps:
- description: QPS indicates the maximum QPS to
- the apiserver from this client. If it's zero,
- the component default will be used
- type: number
- required:
- - burst
- - qps
- type: object
- type: object
- type: object
- type: object
- type: object
- customizeComponents:
- properties:
- flags:
- description: Configure the value used for deployment and daemonset
- resources
- properties:
- api:
- additionalProperties:
- type: string
- type: object
- controller:
- additionalProperties:
- type: string
- type: object
- handler:
- additionalProperties:
- type: string
- type: object
- type: object
- patches:
- items:
- properties:
- patch:
- type: string
- resourceName:
- minLength: 1
- type: string
- resourceType:
- minLength: 1
- type: string
- type:
- type: string
- required:
- - patch
- - resourceName
- - resourceType
- - type
- type: object
- type: array
- x-kubernetes-list-type: atomic
- type: object
- imagePullPolicy:
- description: The ImagePullPolicy to use.
- type: string
- imagePullSecrets:
- description: The imagePullSecrets to pull the container images from
- Defaults to none
- items:
- description: LocalObjectReference contains enough information to
- let you locate the referenced object inside the same namespace.
- properties:
- name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
- TODO: Add other useful fields. apiVersion, kind, uid?'
- type: string
- type: object
- type: array
- x-kubernetes-list-type: atomic
- imageRegistry:
- description: The image registry to pull the container images from
- Defaults to the same registry the operator's container image is
- pulled from.
- type: string
- imageTag:
- description: The image tag to use for the continer images installed.
- Defaults to the same tag as the operator's container image.
- type: string
- infra:
- description: selectors and tolerations that should apply to KubeVirt
- infrastructure components
- properties:
- nodePlacement:
- description: nodePlacement describes scheduling configuration
- for specific KubeVirt components
- properties:
- affinity:
- description: affinity enables pod affinity/anti-affinity placement
- expanding the types of constraints that can be expressed
- with nodeSelector. affinity is going to be applied to the
- relevant kind of pods in parallel with nodeSelector See
- https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
- properties:
- nodeAffinity:
- description: Describes node affinity scheduling rules
- for the pod.
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node matches the corresponding matchExpressions;
- the node(s) with the highest sum are the most preferred.
- items:
- description: An empty preferred scheduling term
- matches all objects with implicit weight 0 (i.e.
- it's a no-op). A null preferred scheduling term
- matches no objects (i.e. is also a no-op).
- properties:
- preference:
- description: A node selector term, associated
- with the corresponding weight.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- weight:
- description: Weight associated with matching
- the corresponding nodeSelectorTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - preference
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to an update), the system may or may not try
- to eventually evict the pod from its node.
- properties:
- nodeSelectorTerms:
- description: Required. A list of node selector
- terms. The terms are ORed.
- items:
- description: A null or empty node selector term
- matches no objects. The requirements of them
- are ANDed. The TopologySelectorTerm type implements
- a subset of the NodeSelectorTerm.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- type: array
- required:
- - nodeSelectorTerms
- type: object
- type: object
- podAffinity:
- description: Describes pod affinity scheduling rules (e.g.
- co-locate this pod in the same node, zone, etc. as some
- other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to a pod label update), the system may or may
- not try to eventually evict the pod from its node.
- When there are multiple elements, the lists of nodes
- corresponding to each podAffinityTerm are intersected,
- i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- podAntiAffinity:
- description: Describes pod anti-affinity scheduling rules
- (e.g. avoid putting this pod in the same node, zone,
- etc. as some other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the anti-affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling anti-affinity
- expressions, etc.), compute a sum by iterating through
- the elements of this field and adding "weight" to
- the sum if the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the anti-affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- anti-affinity requirements specified by this field
- cease to be met at some point during pod execution
- (e.g. due to a pod label update), the system may
- or may not try to eventually evict the pod from
- its node. When there are multiple elements, the
- lists of nodes corresponding to each podAffinityTerm
- are intersected, i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- type: object
- nodeSelector:
- additionalProperties:
- type: string
- description: 'nodeSelector is the node selector applied to
- the relevant kind of pods It specifies a map of key-value
- pairs: for the pod to be eligible to run on a node, the
- node must have each of the indicated key-value pairs as
- labels (it can have additional labels as well). See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector'
- type: object
- tolerations:
- description: tolerations is a list of tolerations applied
- to the relevant kind of pods See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
- for more info. These are additional tolerations other than
- default ones.
- items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
- properties:
- effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified,
- allowed values are NoSchedule, PreferNoSchedule and
- NoExecute.
- type: string
- key:
- description: Key is the taint key that the toleration
- applies to. Empty means match all taint keys. If the
- key is empty, operator must be Exists; this combination
- means to match all values and all keys.
- type: string
- operator:
- description: Operator represents a key's relationship
- to the value. Valid operators are Exists and Equal.
- Defaults to Equal. Exists is equivalent to wildcard
- for value, so that a pod can tolerate all taints of
- a particular category.
- type: string
- tolerationSeconds:
- description: TolerationSeconds represents the period
- of time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the
- taint forever (do not evict). Zero and negative values
- will be treated as 0 (evict immediately) by the system.
- format: int64
- type: integer
- value:
- description: Value is the taint value the toleration
- matches to. If the operator is Exists, the value should
- be empty, otherwise just a regular string.
- type: string
- type: object
- type: array
- type: object
- replicas:
- description: 'replicas indicates how many replicas should be created
- for each KubeVirt infrastructure component (like virt-api or
- virt-controller). Defaults to 2. WARNING: this is an advanced
- feature that prevents auto-scaling for core kubevirt components.
- Please use with caution!'
- type: integer
- type: object
- monitorAccount:
- description: The name of the Prometheus service account that needs
- read-access to KubeVirt endpoints Defaults to prometheus-k8s
- type: string
- monitorNamespace:
- description: The namespace Prometheus is deployed in Defaults to openshift-monitor
- type: string
- productComponent:
- description: Designate the apps.kubevirt.io/component label for KubeVirt
- components. Useful if KubeVirt is included as part of a product.
- If ProductComponent is not specified, the component label default
- value is kubevirt.
- type: string
- productName:
- description: Designate the apps.kubevirt.io/part-of label for KubeVirt
- components. Useful if KubeVirt is included as part of a product.
- If ProductName is not specified, the part-of label will be omitted.
- type: string
- productVersion:
- description: Designate the apps.kubevirt.io/version label for KubeVirt
- components. Useful if KubeVirt is included as part of a product.
- If ProductVersion is not specified, KubeVirt's version will be used.
- type: string
- serviceMonitorNamespace:
- description: The namespace the service monitor will be deployed When
- ServiceMonitorNamespace is set, then we'll install the service monitor
- object in that namespace otherwise we will use the monitoring namespace.
- type: string
- uninstallStrategy:
- description: Specifies if kubevirt can be deleted if workloads are
- still present. This is mainly a precaution to avoid accidental data
- loss
- type: string
- workloadUpdateStrategy:
- description: WorkloadUpdateStrategy defines at the cluster level how
- to handle automated workload updates
- properties:
- batchEvictionInterval:
- description: "BatchEvictionInterval Represents the interval to
- wait before issuing the next batch of shutdowns \n Defaults
- to 1 minute"
- type: string
- batchEvictionSize:
- description: "BatchEvictionSize Represents the number of VMIs
- that can be forced updated per the BatchShutdownInteral interval
- \n Defaults to 10"
- type: integer
- workloadUpdateMethods:
- description: "WorkloadUpdateMethods defines the methods that can
- be used to disrupt workloads during automated workload updates.
- When multiple methods are present, the least disruptive method
- takes precedence over more disruptive methods. For example if
- both LiveMigrate and Shutdown methods are listed, only VMs which
- are not live migratable will be restarted/shutdown \n An empty
- list defaults to no automated workload updating"
- items:
- type: string
- type: array
- x-kubernetes-list-type: atomic
- type: object
- workloads:
- description: selectors and tolerations that should apply to KubeVirt
- workloads
- properties:
- nodePlacement:
- description: nodePlacement describes scheduling configuration
- for specific KubeVirt components
- properties:
- affinity:
- description: affinity enables pod affinity/anti-affinity placement
- expanding the types of constraints that can be expressed
- with nodeSelector. affinity is going to be applied to the
- relevant kind of pods in parallel with nodeSelector See
- https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
- properties:
- nodeAffinity:
- description: Describes node affinity scheduling rules
- for the pod.
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node matches the corresponding matchExpressions;
- the node(s) with the highest sum are the most preferred.
- items:
- description: An empty preferred scheduling term
- matches all objects with implicit weight 0 (i.e.
- it's a no-op). A null preferred scheduling term
- matches no objects (i.e. is also a no-op).
- properties:
- preference:
- description: A node selector term, associated
- with the corresponding weight.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- weight:
- description: Weight associated with matching
- the corresponding nodeSelectorTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - preference
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to an update), the system may or may not try
- to eventually evict the pod from its node.
- properties:
- nodeSelectorTerms:
- description: Required. A list of node selector
- terms. The terms are ORed.
- items:
- description: A null or empty node selector term
- matches no objects. The requirements of them
- are ANDed. The TopologySelectorTerm type implements
- a subset of the NodeSelectorTerm.
- properties:
- matchExpressions:
- description: A list of node selector requirements
- by node's labels.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchFields:
- description: A list of node selector requirements
- by node's fields.
- items:
- description: A node selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: The label key that the
- selector applies to.
- type: string
- operator:
- description: Represents a key's relationship
- to a set of values. Valid operators
- are In, NotIn, Exists, DoesNotExist.
- Gt, and Lt.
- type: string
- values:
- description: An array of string values.
- If the operator is In or NotIn,
- the values array must be non-empty.
- If the operator is Exists or DoesNotExist,
- the values array must be empty.
- If the operator is Gt or Lt, the
- values array must have a single
- element, which will be interpreted
- as an integer. This array is replaced
- during a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- type: object
- type: array
- required:
- - nodeSelectorTerms
- type: object
- type: object
- podAffinity:
- description: Describes pod affinity scheduling rules (e.g.
- co-locate this pod in the same node, zone, etc. as some
- other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling affinity expressions,
- etc.), compute a sum by iterating through the elements
- of this field and adding "weight" to the sum if
- the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- affinity requirements specified by this field cease
- to be met at some point during pod execution (e.g.
- due to a pod label update), the system may or may
- not try to eventually evict the pod from its node.
- When there are multiple elements, the lists of nodes
- corresponding to each podAffinityTerm are intersected,
- i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- podAntiAffinity:
- description: Describes pod anti-affinity scheduling rules
- (e.g. avoid putting this pod in the same node, zone,
- etc. as some other pod(s)).
- properties:
- preferredDuringSchedulingIgnoredDuringExecution:
- description: The scheduler will prefer to schedule
- pods to nodes that satisfy the anti-affinity expressions
- specified by this field, but it may choose a node
- that violates one or more of the expressions. The
- node that is most preferred is the one with the
- greatest sum of weights, i.e. for each node that
- meets all of the scheduling requirements (resource
- request, requiredDuringScheduling anti-affinity
- expressions, etc.), compute a sum by iterating through
- the elements of this field and adding "weight" to
- the sum if the node has pods which matches the corresponding
- podAffinityTerm; the node(s) with the highest sum
- are the most preferred.
- items:
- description: The weights of all of the matched WeightedPodAffinityTerm
- fields are added per-node to find the most preferred
- node(s)
- properties:
- podAffinityTerm:
- description: Required. A pod affinity term,
- associated with the corresponding weight.
- properties:
- labelSelector:
- description: A label query over a set of
- resources, in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set
- of namespaces that the term applies to.
- The term is applied to the union of the
- namespaces selected by this field and
- the ones listed in the namespaces field.
- null selector and null or empty namespaces
- list means "this pod's namespace". An
- empty selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The
- requirements are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label
- key that the selector applies
- to.
- type: string
- operator:
- description: operator represents
- a key's relationship to a set
- of values. Valid operators are
- In, NotIn, Exists and DoesNotExist.
- type: string
- values:
- description: values is an array
- of string values. If the operator
- is In or NotIn, the values array
- must be non-empty. If the operator
- is Exists or DoesNotExist, the
- values array must be empty.
- This array is replaced during
- a strategic merge patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of
- {key,value} pairs. A single {key,value}
- in the matchLabels map is equivalent
- to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are
- ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static
- list of namespace names that the term
- applies to. The term is applied to the
- union of the namespaces listed in this
- field and the ones selected by namespaceSelector.
- null or empty namespaces list and null
- namespaceSelector means "this pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located
- (affinity) or not co-located (anti-affinity)
- with the pods matching the labelSelector
- in the specified namespaces, where co-located
- is defined as running on a node whose
- value of the label with key topologyKey
- matches that of any node on which any
- of the selected pods is running. Empty
- topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- weight:
- description: weight associated with matching
- the corresponding podAffinityTerm, in the
- range 1-100.
- format: int32
- type: integer
- required:
- - podAffinityTerm
- - weight
- type: object
- type: array
- requiredDuringSchedulingIgnoredDuringExecution:
- description: If the anti-affinity requirements specified
- by this field are not met at scheduling time, the
- pod will not be scheduled onto the node. If the
- anti-affinity requirements specified by this field
- cease to be met at some point during pod execution
- (e.g. due to a pod label update), the system may
- or may not try to eventually evict the pod from
- its node. When there are multiple elements, the
- lists of nodes corresponding to each podAffinityTerm
- are intersected, i.e. all terms must be satisfied.
- items:
- description: Defines a set of pods (namely those
- matching the labelSelector relative to the given
- namespace(s)) that this pod should be co-located
- (affinity) or not co-located (anti-affinity) with,
- where co-located is defined as running on a node
- whose value of the label with key <topologyKey>
- matches that of any node on which a pod of the
- set of pods is running
- properties:
- labelSelector:
- description: A label query over a set of resources,
- in this case pods.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaceSelector:
- description: A label query over the set of namespaces
- that the term applies to. The term is applied
- to the union of the namespaces selected by
- this field and the ones listed in the namespaces
- field. null selector and null or empty namespaces
- list means "this pod's namespace". An empty
- selector ({}) matches all namespaces.
- properties:
- matchExpressions:
- description: matchExpressions is a list
- of label selector requirements. The requirements
- are ANDed.
- items:
- description: A label selector requirement
- is a selector that contains values,
- a key, and an operator that relates
- the key and values.
- properties:
- key:
- description: key is the label key
- that the selector applies to.
- type: string
- operator:
- description: operator represents a
- key's relationship to a set of values.
- Valid operators are In, NotIn, Exists
- and DoesNotExist.
- type: string
- values:
- description: values is an array of
- string values. If the operator is
- In or NotIn, the values array must
- be non-empty. If the operator is
- Exists or DoesNotExist, the values
- array must be empty. This array
- is replaced during a strategic merge
- patch.
- items:
- type: string
- type: array
- required:
- - key
- - operator
- type: object
- type: array
- matchLabels:
- additionalProperties:
- type: string
- description: matchLabels is a map of {key,value}
- pairs. A single {key,value} in the matchLabels
- map is equivalent to an element of matchExpressions,
- whose key field is "key", the operator
- is "In", and the values array contains
- only "value". The requirements are ANDed.
- type: object
- type: object
- namespaces:
- description: namespaces specifies a static list
- of namespace names that the term applies to.
- The term is applied to the union of the namespaces
- listed in this field and the ones selected
- by namespaceSelector. null or empty namespaces
- list and null namespaceSelector means "this
- pod's namespace".
- items:
- type: string
- type: array
- topologyKey:
- description: This pod should be co-located (affinity)
- or not co-located (anti-affinity) with the
- pods matching the labelSelector in the specified
- namespaces, where co-located is defined as
- running on a node whose value of the label
- with key topologyKey matches that of any node
- on which any of the selected pods is running.
- Empty topologyKey is not allowed.
- type: string
- required:
- - topologyKey
- type: object
- type: array
- type: object
- type: object
- nodeSelector:
- additionalProperties:
- type: string
- description: 'nodeSelector is the node selector applied to
- the relevant kind of pods It specifies a map of key-value
- pairs: for the pod to be eligible to run on a node, the
- node must have each of the indicated key-value pairs as
- labels (it can have additional labels as well). See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector'
- type: object
- tolerations:
- description: tolerations is a list of tolerations applied
- to the relevant kind of pods See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
- for more info. These are additional tolerations other than
- default ones.
- items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
- properties:
- effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified,
- allowed values are NoSchedule, PreferNoSchedule and
- NoExecute.
- type: string
- key:
- description: Key is the taint key that the toleration
- applies to. Empty means match all taint keys. If the
- key is empty, operator must be Exists; this combination
- means to match all values and all keys.
- type: string
- operator:
- description: Operator represents a key's relationship
- to the value. Valid operators are Exists and Equal.
- Defaults to Equal. Exists is equivalent to wildcard
- for value, so that a pod can tolerate all taints of
- a particular category.
- type: string
- tolerationSeconds:
- description: TolerationSeconds represents the period
- of time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the
- taint forever (do not evict). Zero and negative values
- will be treated as 0 (evict immediately) by the system.
- format: int64
- type: integer
- value:
- description: Value is the taint value the toleration
- matches to. If the operator is Exists, the value should
- be empty, otherwise just a regular string.
- type: string
- type: object
- type: array
- type: object
- replicas:
- description: 'replicas indicates how many replicas should be created
- for each KubeVirt infrastructure component (like virt-api or
- virt-controller). Defaults to 2. WARNING: this is an advanced
- feature that prevents auto-scaling for core kubevirt components.
- Please use with caution!'
- type: integer
- type: object
- type: object
- status:
- description: KubeVirtStatus represents information pertaining to a KubeVirt
- deployment.
- properties:
- conditions:
- items:
- description: KubeVirtCondition represents a condition of a KubeVirt
- deployment
- properties:
- lastProbeTime:
- format: date-time
- nullable: true
- type: string
- lastTransitionTime:
- format: date-time
- nullable: true
- type: string
- message:
- type: string
- reason:
- type: string
- status:
- type: string
- type:
- type: string
- required:
- - status
- - type
- type: object
- type: array
- defaultArchitecture:
- type: string
- generations:
- items:
- description: GenerationStatus keeps track of the generation for
- a given resource so that decisions about forced updates can be
- made.
- properties:
- group:
- description: group is the group of the thing you're tracking
- type: string
- hash:
- description: hash is an optional field set for resources without
- generation that are content sensitive like secrets and configmaps
- type: string
- lastGeneration:
- description: lastGeneration is the last generation of the workload
- controller involved
- format: int64
- type: integer
- name:
- description: name is the name of the thing you're tracking
- type: string
- namespace:
- description: namespace is where the thing you're tracking is
- type: string
- resource:
- description: resource is the resource type of the thing you're
- tracking
- type: string
- required:
- - group
- - lastGeneration
- - name
- - resource
- type: object
- type: array
- x-kubernetes-list-type: atomic
- observedDeploymentConfig:
- type: string
- observedDeploymentID:
- type: string
- observedGeneration:
- format: int64
- type: integer
- observedKubeVirtRegistry:
- type: string
- observedKubeVirtVersion:
- type: string
- operatorVersion:
- type: string
- outdatedVirtualMachineInstanceWorkloads:
- type: integer
- phase:
- description: KubeVirtPhase is a label for the phase of a KubeVirt
- deployment at the current time.
- type: string
- targetDeploymentConfig:
- type: string
- targetDeploymentID:
- type: string
- targetKubeVirtRegistry:
- type: string
- targetKubeVirtVersion:
- type: string
- type: object
- required:
- - spec
- type: object
- served: true
- storage: false
- subresources:
- status: {}
- ---
- apiVersion: scheduling.k8s.io/v1
- kind: PriorityClass
- metadata:
- name: kubevirt-cluster-critical
- value: 1000000000
- globalDefault: false
- description: "This priority class should be used for core kubevirt components only."
- ---
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRole
- metadata:
- name: kubevirt.io:operator
- labels:
- operator.kubevirt.io: ""
- rbac.authorization.k8s.io/aggregate-to-admin: "true"
- rules:
- - apiGroups:
- - kubevirt.io
- resources:
- - kubevirts
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- ---
- apiVersion: v1
- kind: ServiceAccount
- metadata:
- labels:
- kubevirt.io: ""
- name: kubevirt-operator
- namespace: kubevirt
- ---
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
- labels:
- kubevirt.io: ""
- name: kubevirt-operator
- namespace: kubevirt
- rules:
- - apiGroups:
- - ""
- resourceNames:
- - kubevirt-ca
- - kubevirt-export-ca
- - kubevirt-virt-handler-certs
- - kubevirt-virt-handler-server-certs
- - kubevirt-operator-certs
- - kubevirt-virt-api-certs
- - kubevirt-controller-certs
- - kubevirt-exportproxy-certs
- resources:
- - secrets
- verbs:
- - create
- - get
- - list
- - watch
- - patch
- - delete
- - apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - create
- - get
- - list
- - watch
- - patch
- - delete
- - apiGroups:
- - route.openshift.io
- resources:
- - routes
- verbs:
- - create
- - get
- - list
- - watch
- - patch
- - delete
- - apiGroups:
- - route.openshift.io
- resources:
- - routes/custom-host
- verbs:
- - create
- - apiGroups:
- - coordination.k8s.io
- resources:
- - leases
- verbs:
- - get
- - list
- - watch
- - delete
- - update
- - create
- - patch
- ---
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
- labels:
- kubevirt.io: ""
- name: kubevirt-operator-rolebinding
- namespace: kubevirt
- roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: kubevirt-operator
- subjects:
- - kind: ServiceAccount
- name: kubevirt-operator
- namespace: kubevirt
- ---
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRole
- metadata:
- labels:
- kubevirt.io: ""
- name: kubevirt-operator
- rules:
- - apiGroups:
- - kubevirt.io
- resources:
- - kubevirts
- verbs:
- - get
- - list
- - watch
- - patch
- - update
- - patch
- - apiGroups:
- - ""
- resources:
- - serviceaccounts
- - services
- - endpoints
- - pods/exec
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - delete
- - patch
- - apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - patch
- - delete
- - apiGroups:
- - batch
- resources:
- - jobs
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - patch
- - apiGroups:
- - apps
- resources:
- - controllerrevisions
- verbs:
- - watch
- - list
- - create
- - delete
- - patch
- - apiGroups:
- - apps
- resources:
- - deployments
- - daemonsets
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - patch
- - apiGroups:
- - rbac.authorization.k8s.io
- resources:
- - clusterroles
- - clusterrolebindings
- - roles
- - rolebindings
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - patch
- - update
- - apiGroups:
- - apiextensions.k8s.io
- resources:
- - customresourcedefinitions
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - patch
- - apiGroups:
- - security.openshift.io
- resources:
- - securitycontextconstraints
- verbs:
- - create
- - get
- - list
- - watch
- - apiGroups:
- - security.openshift.io
- resourceNames:
- - privileged
- resources:
- - securitycontextconstraints
- verbs:
- - get
- - patch
- - update
- - apiGroups:
- - security.openshift.io
- resourceNames:
- - kubevirt-handler
- - kubevirt-controller
- resources:
- - securitycontextconstraints
- verbs:
- - get
- - list
- - watch
- - update
- - delete
- - apiGroups:
- - admissionregistration.k8s.io
- resources:
- - validatingwebhookconfigurations
- - mutatingwebhookconfigurations
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - update
- - patch
- - apiGroups:
- - apiregistration.k8s.io
- resources:
- - apiservices
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - update
- - patch
- - apiGroups:
- - monitoring.coreos.com
- resources:
- - servicemonitors
- - prometheusrules
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - update
- - patch
- - apiGroups:
- - ""
- resources:
- - namespaces
- verbs:
- - get
- - list
- - watch
- - patch
- - apiGroups:
- - ""
- resources:
- - pods
- verbs:
- - get
- - list
- - delete
- - patch
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachines
- - virtualmachineinstances
- verbs:
- - get
- - list
- - watch
- - patch
- - update
- - apiGroups:
- - ""
- resources:
- - persistentvolumeclaims
- verbs:
- - get
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachines/status
- verbs:
- - patch
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachineinstancemigrations
- verbs:
- - create
- - get
- - list
- - watch
- - patch
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachineinstancepresets
- verbs:
- - watch
- - list
- - apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - limitranges
- verbs:
- - watch
- - list
- - apiGroups:
- - apiextensions.k8s.io
- resources:
- - customresourcedefinitions
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - kubevirt.io
- resources:
- - kubevirts
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - snapshot.kubevirt.io
- resources:
- - virtualmachinesnapshots
- - virtualmachinerestores
- - virtualmachinesnapshotcontents
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - cdi.kubevirt.io
- resources:
- - datasources
- - datavolumes
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - namespaces
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - instancetype.kubevirt.io
- resources:
- - virtualmachineinstancetypes
- - virtualmachineclusterinstancetypes
- - virtualmachinepreferences
- - virtualmachineclusterpreferences
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - migrations.kubevirt.io
- resources:
- - migrationpolicies
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - apps
- resources:
- - controllerrevisions
- verbs:
- - create
- - list
- - get
- - apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - namespaces
- verbs:
- - get
- - list
- - watch
- - patch
- - apiGroups:
- - policy
- resources:
- - poddisruptionbudgets
- verbs:
- - get
- - list
- - watch
- - delete
- - create
- - patch
- - apiGroups:
- - ""
- resources:
- - pods
- - configmaps
- - endpoints
- - services
- verbs:
- - get
- - list
- - watch
- - delete
- - update
- - create
- - patch
- - apiGroups:
- - ""
- resources:
- - events
- verbs:
- - update
- - create
- - patch
- - apiGroups:
- - ""
- resources:
- - secrets
- verbs:
- - create
- - apiGroups:
- - ""
- resources:
- - pods/finalizers
- verbs:
- - update
- - apiGroups:
- - ""
- resources:
- - pods/eviction
- verbs:
- - create
- - apiGroups:
- - ""
- resources:
- - pods/status
- verbs:
- - patch
- - apiGroups:
- - ""
- resources:
- - nodes
- verbs:
- - get
- - list
- - watch
- - update
- - patch
- - apiGroups:
- - apps
- resources:
- - daemonsets
- verbs:
- - list
- - apiGroups:
- - apps
- resources:
- - controllerrevisions
- verbs:
- - watch
- - list
- - create
- - delete
- - get
- - update
- - apiGroups:
- - ""
- resources:
- - persistentvolumeclaims
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - delete
- - patch
- - apiGroups:
- - snapshot.kubevirt.io
- resources:
- - '*'
- verbs:
- - '*'
- - apiGroups:
- - export.kubevirt.io
- resources:
- - '*'
- verbs:
- - '*'
- - apiGroups:
- - pool.kubevirt.io
- resources:
- - virtualmachinepools
- - virtualmachinepools/finalizers
- - virtualmachinepools/status
- - virtualmachinepools/scale
- verbs:
- - watch
- - list
- - create
- - delete
- - update
- - patch
- - get
- - apiGroups:
- - kubevirt.io
- resources:
- - '*'
- verbs:
- - '*'
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachineinstances/addvolume
- - virtualmachineinstances/removevolume
- - virtualmachineinstances/freeze
- - virtualmachineinstances/unfreeze
- - virtualmachineinstances/softreboot
- - virtualmachineinstances/sev/setupsession
- - virtualmachineinstances/sev/injectlaunchsecret
- verbs:
- - update
- - apiGroups:
- - cdi.kubevirt.io
- resources:
- - '*'
- verbs:
- - '*'
- - apiGroups:
- - k8s.cni.cncf.io
- resources:
- - network-attachment-definitions
- verbs:
- - get
- - apiGroups:
- - apiextensions.k8s.io
- resources:
- - customresourcedefinitions
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - authorization.k8s.io
- resources:
- - subjectaccessreviews
- verbs:
- - create
- - apiGroups:
- - snapshot.storage.k8s.io
- resources:
- - volumesnapshotclasses
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - snapshot.storage.k8s.io
- resources:
- - volumesnapshots
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - delete
- - apiGroups:
- - storage.k8s.io
- resources:
- - storageclasses
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - instancetype.kubevirt.io
- resources:
- - virtualmachineinstancetypes
- - virtualmachineclusterinstancetypes
- - virtualmachinepreferences
- - virtualmachineclusterpreferences
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - migrations.kubevirt.io
- resources:
- - migrationpolicies
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - clone.kubevirt.io
- resources:
- - virtualmachineclones
- - virtualmachineclones/status
- - virtualmachineclones/finalizers
- verbs:
- - get
- - list
- - watch
- - update
- - patch
- - delete
- - apiGroups:
- - ""
- resources:
- - namespaces
- verbs:
- - get
- - apiGroups:
- - ""
- resources:
- - resourcequotas
- verbs:
- - list
- - watch
- - apiGroups:
- - route.openshift.io
- resources:
- - routes
- verbs:
- - list
- - get
- - watch
- - apiGroups:
- - ""
- resources:
- - secrets
- verbs:
- - list
- - get
- - watch
- - apiGroups:
- - networking.k8s.io
- resources:
- - ingresses
- verbs:
- - list
- - get
- - watch
- - apiGroups:
- - coordination.k8s.io
- resources:
- - leases
- verbs:
- - get
- - list
- - watch
- - delete
- - update
- - create
- - patch
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachineinstances
- verbs:
- - update
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - nodes
- verbs:
- - patch
- - list
- - watch
- - get
- - apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - events
- verbs:
- - create
- - patch
- - apiGroups:
- - apiextensions.k8s.io
- resources:
- - customresourcedefinitions
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - kubevirt.io
- resources:
- - kubevirts
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - migrations.kubevirt.io
- resources:
- - migrationpolicies
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - export.kubevirt.io
- resources:
- - virtualmachineexports
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - kubevirt.io
- resources:
- - kubevirts
- verbs:
- - list
- - watch
- - apiGroups:
- - ""
- resourceNames:
- - kubevirt-export-ca
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - version
- - guestfs
- verbs:
- - get
- - list
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachineinstances/console
- - virtualmachineinstances/vnc
- - virtualmachineinstances/vnc/screenshot
- - virtualmachineinstances/portforward
- - virtualmachineinstances/guestosinfo
- - virtualmachineinstances/filesystemlist
- - virtualmachineinstances/userlist
- - virtualmachineinstances/sev/fetchcertchain
- - virtualmachineinstances/sev/querylaunchmeasurement
- verbs:
- - get
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachineinstances/pause
- - virtualmachineinstances/unpause
- - virtualmachineinstances/addvolume
- - virtualmachineinstances/removevolume
- - virtualmachineinstances/freeze
- - virtualmachineinstances/unfreeze
- - virtualmachineinstances/softreboot
- - virtualmachineinstances/sev/setupsession
- - virtualmachineinstances/sev/injectlaunchsecret
- verbs:
- - update
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachines/expand-spec
- - virtualmachines/portforward
- verbs:
- - get
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachines/start
- - virtualmachines/stop
- - virtualmachines/restart
- - virtualmachines/addvolume
- - virtualmachines/removevolume
- - virtualmachines/migrate
- - virtualmachines/memorydump
- verbs:
- - update
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - expand-vm-spec
- verbs:
- - update
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachines
- - virtualmachineinstances
- - virtualmachineinstancepresets
- - virtualmachineinstancereplicasets
- - virtualmachineinstancemigrations
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- - apiGroups:
- - snapshot.kubevirt.io
- resources:
- - virtualmachinesnapshots
- - virtualmachinesnapshotcontents
- - virtualmachinerestores
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- - apiGroups:
- - export.kubevirt.io
- resources:
- - virtualmachineexports
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- - apiGroups:
- - clone.kubevirt.io
- resources:
- - virtualmachineclones
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- - apiGroups:
- - instancetype.kubevirt.io
- resources:
- - virtualmachineinstancetypes
- - virtualmachineclusterinstancetypes
- - virtualmachinepreferences
- - virtualmachineclusterpreferences
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- - apiGroups:
- - pool.kubevirt.io
- resources:
- - virtualmachinepools
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - deletecollection
- - apiGroups:
- - migrations.kubevirt.io
- resources:
- - migrationpolicies
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachineinstances/console
- - virtualmachineinstances/vnc
- - virtualmachineinstances/vnc/screenshot
- - virtualmachineinstances/portforward
- - virtualmachineinstances/guestosinfo
- - virtualmachineinstances/filesystemlist
- - virtualmachineinstances/userlist
- - virtualmachineinstances/sev/fetchcertchain
- - virtualmachineinstances/sev/querylaunchmeasurement
- verbs:
- - get
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachineinstances/pause
- - virtualmachineinstances/unpause
- - virtualmachineinstances/addvolume
- - virtualmachineinstances/removevolume
- - virtualmachineinstances/freeze
- - virtualmachineinstances/unfreeze
- - virtualmachineinstances/softreboot
- - virtualmachineinstances/sev/setupsession
- - virtualmachineinstances/sev/injectlaunchsecret
- verbs:
- - update
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachines/expand-spec
- - virtualmachines/portforward
- verbs:
- - get
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachines/start
- - virtualmachines/stop
- - virtualmachines/restart
- - virtualmachines/addvolume
- - virtualmachines/removevolume
- - virtualmachines/migrate
- - virtualmachines/memorydump
- verbs:
- - update
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - expand-vm-spec
- verbs:
- - update
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachines
- - virtualmachineinstances
- - virtualmachineinstancepresets
- - virtualmachineinstancereplicasets
- - virtualmachineinstancemigrations
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - apiGroups:
- - snapshot.kubevirt.io
- resources:
- - virtualmachinesnapshots
- - virtualmachinesnapshotcontents
- - virtualmachinerestores
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - apiGroups:
- - export.kubevirt.io
- resources:
- - virtualmachineexports
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - apiGroups:
- - clone.kubevirt.io
- resources:
- - virtualmachineclones
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - apiGroups:
- - instancetype.kubevirt.io
- resources:
- - virtualmachineinstancetypes
- - virtualmachineclusterinstancetypes
- - virtualmachinepreferences
- - virtualmachineclusterpreferences
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - apiGroups:
- - pool.kubevirt.io
- resources:
- - virtualmachinepools
- verbs:
- - get
- - delete
- - create
- - update
- - patch
- - list
- - watch
- - apiGroups:
- - kubevirt.io
- resources:
- - kubevirts
- verbs:
- - get
- - list
- - apiGroups:
- - migrations.kubevirt.io
- resources:
- - migrationpolicies
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - virtualmachines/expand-spec
- - virtualmachineinstances/guestosinfo
- - virtualmachineinstances/filesystemlist
- - virtualmachineinstances/userlist
- - virtualmachineinstances/sev/fetchcertchain
- - virtualmachineinstances/sev/querylaunchmeasurement
- verbs:
- - get
- - apiGroups:
- - subresources.kubevirt.io
- resources:
- - expand-vm-spec
- verbs:
- - update
- - apiGroups:
- - kubevirt.io
- resources:
- - virtualmachines
- - virtualmachineinstances
- - virtualmachineinstancepresets
- - virtualmachineinstancereplicasets
- - virtualmachineinstancemigrations
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - snapshot.kubevirt.io
- resources:
- - virtualmachinesnapshots
- - virtualmachinesnapshotcontents
- - virtualmachinerestores
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - export.kubevirt.io
- resources:
- - virtualmachineexports
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - clone.kubevirt.io
- resources:
- - virtualmachineclones
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - instancetype.kubevirt.io
- resources:
- - virtualmachineinstancetypes
- - virtualmachineclusterinstancetypes
- - virtualmachinepreferences
- - virtualmachineclusterpreferences
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - pool.kubevirt.io
- resources:
- - virtualmachinepools
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - migrations.kubevirt.io
- resources:
- - migrationpolicies
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - instancetype.kubevirt.io
- resources:
- - virtualmachineclusterinstancetypes
- - virtualmachineclusterpreferences
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - authentication.k8s.io
- resources:
- - tokenreviews
- verbs:
- - create
- - apiGroups:
- - authorization.k8s.io
- resources:
- - subjectaccessreviews
- verbs:
- - create
- ---
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRoleBinding
- metadata:
- labels:
- kubevirt.io: ""
- name: kubevirt-operator
- roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: kubevirt-operator
- subjects:
- - kind: ServiceAccount
- name: kubevirt-operator
- namespace: kubevirt
- ---
- apiVersion: apps/v1
- kind: Deployment
- metadata:
- labels:
- kubevirt.io: virt-operator
- name: virt-operator
- namespace: kubevirt
- spec:
- replicas: 2
- selector:
- matchLabels:
- kubevirt.io: virt-operator
- strategy:
- type: RollingUpdate
- template:
- metadata:
- labels:
- kubevirt.io: virt-operator
- name: virt-operator
- prometheus.kubevirt.io: "true"
- name: virt-operator
- spec:
- affinity:
- podAntiAffinity:
- preferredDuringSchedulingIgnoredDuringExecution:
- - podAffinityTerm:
- labelSelector:
- matchExpressions:
- - key: kubevirt.io
- operator: In
- values:
- - virt-operator
- topologyKey: kubernetes.io/hostname
- weight: 1
- containers:
- - args:
- - --port
- - "8443"
- - -v
- - "2"
- command:
- - virt-operator
- env:
- - name: VIRT_OPERATOR_IMAGE
- value: quay.io/kubevirt/virt-operator:v1.1.0
- - name: WATCH_NAMESPACE
- valueFrom:
- fieldRef:
- fieldPath: metadata.annotations['olm.targetNamespaces']
- - name: KUBEVIRT_VERSION
- value: v1.1.0
- image: quay.io/kubevirt/virt-operator:v1.1.0
- imagePullPolicy: IfNotPresent
- name: virt-operator
- ports:
- - containerPort: 8443
- name: metrics
- protocol: TCP
- - containerPort: 8444
- name: webhooks
- protocol: TCP
- readinessProbe:
- httpGet:
- path: /metrics
- port: 8443
- scheme: HTTPS
- initialDelaySeconds: 5
- timeoutSeconds: 10
- resources:
- requests:
- cpu: 10m
- memory: 450Mi
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - ALL
- seccompProfile:
- type: RuntimeDefault
- volumeMounts:
- - mountPath: /etc/virt-operator/certificates
- name: kubevirt-operator-certs
- readOnly: true
- - mountPath: /profile-data
- name: profile-data
- nodeSelector:
- kubernetes.io/os: linux
- priorityClassName: kubevirt-cluster-critical
- securityContext:
- runAsNonRoot: true
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: kubevirt-operator
- tolerations:
- - key: CriticalAddonsOnly
- operator: Exists
- volumes:
- - name: kubevirt-operator-certs
- secret:
- optional: true
- secretName: kubevirt-operator-certs
- - emptyDir: {}
- name: profile-data
|