diff --git a/docs/content/en/reference/crd/cass-operator-crds-latest/_index.md b/docs/content/en/reference/crd/cass-operator-crds-latest/_index.md
index 61e3d7da3..3a226d51c 100644
--- a/docs/content/en/reference/crd/cass-operator-crds-latest/_index.md
+++ b/docs/content/en/reference/crd/cass-operator-crds-latest/_index.md
@@ -623,15 +623,13 @@ More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-
volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.
If specified, the CSI driver will create or update the volume with the attributes defined
in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,
-it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass
-will be applied to the claim but it's not allowed to reset this field to empty string once it is set.
-If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass
-will be set by the persistentvolume controller if it exists.
+it can be changed after the claim is created. An empty string or nil value indicates that no
+VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state,
+this field can be reset to its previous value (including nil) to cancel the modification.
If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be
set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource
exists.
-More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
+More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
false |
@@ -1073,8 +1071,7 @@ into the Pod's container.
object |
glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.
-Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-More info: https://examples.k8s.io/volumes/glusterfs/README.md
+Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
|
false |
@@ -1114,7 +1111,7 @@ The field spec.securityContext.fsGroupChangePolicy has no effect on this volume
iscsi represents an ISCSI Disk resource that is attached to a
kubelet's host machine and then exposed to the pod.
-More info: https://examples.k8s.io/volumes/iscsi/README.md
+More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
|
false |
@@ -1172,8 +1169,7 @@ Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supp
| object |
rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.
-Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
-More info: https://examples.k8s.io/volumes/rbd/README.md
+Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
|
false |
@@ -2255,15 +2251,13 @@ More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-
volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.
If specified, the CSI driver will create or update the volume with the attributes defined
in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,
-it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass
-will be applied to the claim but it's not allowed to reset this field to empty string once it is set.
-If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass
-will be set by the persistentvolume controller if it exists.
+it can be changed after the claim is created. An empty string or nil value indicates that no
+VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state,
+this field can be reset to its previous value (including nil) to cancel the modification.
If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be
set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource
exists.
-More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
+More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
false |
@@ -2906,7 +2900,6 @@ the subdirectory with the given name.
glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.
Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-More info: https://examples.k8s.io/volumes/glusterfs/README.md
@@ -2921,8 +2914,7 @@ More info: https://examples.k8s.io/volumes/glusterfs/README.md
| endpoints |
string |
- endpoints is the endpoint name that details Glusterfs topology.
-More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+ endpoints is the endpoint name that details Glusterfs topology.
|
true |
@@ -3051,7 +3043,7 @@ container images in workload controllers like Deployments and StatefulSets.
iscsi represents an ISCSI Disk resource that is attached to a
kubelet's host machine and then exposed to the pod.
-More info: https://examples.k8s.io/volumes/iscsi/README.md
+More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
@@ -3449,6 +3441,46 @@ may change the order over time.
downwardAPI information about the downwardAPI data to project
false |
+
+ | podCertificate |
+ object |
+
+ Projects an auto-rotating credential bundle (private key and certificate
+chain) that the pod can use either as a TLS client or server.
+
+Kubelet generates a private key and uses it to send a
+PodCertificateRequest to the named signer. Once the signer approves the
+request and issues a certificate chain, Kubelet writes the key and
+certificate chain to the pod filesystem. The pod does not start until
+certificates have been issued for each podCertificate projected volume
+source in its spec.
+
+Kubelet will begin trying to rotate the certificate at the time indicated
+by the signer using the PodCertificateRequest.Status.BeginRefreshAt
+timestamp.
+
+Kubelet can write a single file, indicated by the credentialBundlePath
+field, or separate files, indicated by the keyPath and
+certificateChainPath fields.
+
+The credential bundle is a single file in PEM format. The first PEM
+entry is the private key (in PKCS#8 format), and the remaining PEM
+entries are the certificate chain issued by the signer (typically,
+signers will return their certificate chain in leaf-to-root order).
+
+Prefer using the credential bundle format, since your application code
+can read it atomically. If you use keyPath and certificateChainPath,
+your application must make two separate file reads. If these coincide
+with a certificate rotation, it is possible that the private key and leaf
+certificate you read may not correspond to each other. Your application
+will need to check for this condition, and re-read until they are
+consistent.
+
+The named signer controls chooses the format of the certificate it
+issues; consult the signer implementation's documentation to learn how to
+use the certificates it issues.
+ |
+ false |
| secret |
object |
@@ -3892,6 +3924,142 @@ Selects a resource of the container: only resources limits and requests
+#### CassandraDatacenter.spec.storageConfig.additionalVolumes[index].volumeSource.projected.sources[index].podCertificate
+[↩ Parent](#cassandradatacenterspecstorageconfigadditionalvolumesindexvolumesourceprojectedsourcesindex)
+
+
+
+Projects an auto-rotating credential bundle (private key and certificate
+chain) that the pod can use either as a TLS client or server.
+
+Kubelet generates a private key and uses it to send a
+PodCertificateRequest to the named signer. Once the signer approves the
+request and issues a certificate chain, Kubelet writes the key and
+certificate chain to the pod filesystem. The pod does not start until
+certificates have been issued for each podCertificate projected volume
+source in its spec.
+
+Kubelet will begin trying to rotate the certificate at the time indicated
+by the signer using the PodCertificateRequest.Status.BeginRefreshAt
+timestamp.
+
+Kubelet can write a single file, indicated by the credentialBundlePath
+field, or separate files, indicated by the keyPath and
+certificateChainPath fields.
+
+The credential bundle is a single file in PEM format. The first PEM
+entry is the private key (in PKCS#8 format), and the remaining PEM
+entries are the certificate chain issued by the signer (typically,
+signers will return their certificate chain in leaf-to-root order).
+
+Prefer using the credential bundle format, since your application code
+can read it atomically. If you use keyPath and certificateChainPath,
+your application must make two separate file reads. If these coincide
+with a certificate rotation, it is possible that the private key and leaf
+certificate you read may not correspond to each other. Your application
+will need to check for this condition, and re-read until they are
+consistent.
+
+The named signer controls chooses the format of the certificate it
+issues; consult the signer implementation's documentation to learn how to
+use the certificates it issues.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | keyType |
+ string |
+
+ The type of keypair Kubelet will generate for the pod.
+
+Valid values are "RSA3072", "RSA4096", "ECDSAP256", "ECDSAP384",
+"ECDSAP521", and "ED25519".
+ |
+ true |
+
+ | signerName |
+ string |
+
+ Kubelet's generated CSRs will be addressed to this signer.
+ |
+ true |
+
+ | certificateChainPath |
+ string |
+
+ Write the certificate chain at this path in the projected volume.
+
+Most applications should use credentialBundlePath. When using keyPath
+and certificateChainPath, your application needs to check that the key
+and leaf certificate are consistent, because it is possible to read the
+files mid-rotation.
+ |
+ false |
+
+ | credentialBundlePath |
+ string |
+
+ Write the credential bundle at this path in the projected volume.
+
+The credential bundle is a single file that contains multiple PEM blocks.
+The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private
+key.
+
+The remaining blocks are CERTIFICATE blocks, containing the issued
+certificate chain from the signer (leaf and any intermediates).
+
+Using credentialBundlePath lets your Pod's application code make a single
+atomic read that retrieves a consistent key and certificate chain. If you
+project them to separate files, your application code will need to
+additionally check that the leaf certificate was issued to the key.
+ |
+ false |
+
+ | keyPath |
+ string |
+
+ Write the key at this path in the projected volume.
+
+Most applications should use credentialBundlePath. When using keyPath
+and certificateChainPath, your application needs to check that the key
+and leaf certificate are consistent, because it is possible to read the
+files mid-rotation.
+ |
+ false |
+
+ | maxExpirationSeconds |
+ integer |
+
+ maxExpirationSeconds is the maximum lifetime permitted for the
+certificate.
+
+Kubelet copies this value verbatim into the PodCertificateRequests it
+generates for this projection.
+
+If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver
+will reject values shorter than 3600 (1 hour). The maximum allowable
+value is 7862400 (91 days).
+
+The signer implementation is then free to issue a certificate with any
+lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600
+seconds (1 hour). This constraint is enforced by kube-apiserver.
+`kubernetes.io` signers will never issue certificates with a lifetime
+longer than 24 hours.
+
+ Format: int32
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.storageConfig.additionalVolumes[index].volumeSource.projected.sources[index].secret
[↩ Parent](#cassandradatacenterspecstorageconfigadditionalvolumesindexvolumesourceprojectedsourcesindex)
@@ -4124,7 +4292,6 @@ Defaults to serivceaccount user
rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.
Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
-More info: https://examples.k8s.io/volumes/rbd/README.md
@@ -4757,15 +4924,13 @@ More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-
volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.
If specified, the CSI driver will create or update the volume with the attributes defined
in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,
-it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass
-will be applied to the claim but it's not allowed to reset this field to empty string once it is set.
-If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass
-will be set by the persistentvolume controller if it exists.
+it can be changed after the claim is created. An empty string or nil value indicates that no
+VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state,
+this field can be reset to its previous value (including nil) to cancel the modification.
If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be
set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource
exists.
-More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
+More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
false |
@@ -5458,7 +5623,7 @@ Kubernetes resource requests and limits per server config initialization contain
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
@@ -5927,7 +6092,9 @@ Optional: Default to false.
boolean |
Host networking requested for this pod. Use the host's network namespace.
-If this option is set, the ports that will be used must be specified.
+When using HostNetwork you should specify ports so the scheduler is aware.
+When `hostNetwork` is true, specified `hostPort` fields in port definitions must match `containerPort`,
+and unspecified `hostPort` fields in port definitions are defaulted to match `containerPort`.
Default to false.
|
false |
@@ -5962,6 +6129,22 @@ This field is alpha-level and is only honored by servers that enable the UserNam
If not specified, the pod's hostname will be set to a system-defined value.
false |
+
+ | hostnameOverride |
+ string |
+
+ HostnameOverride specifies an explicit override for the pod's hostname as perceived by the pod.
+This field only specifies the pod's hostname and does not affect its DNS records.
+When this field is set to a non-empty string:
+- It takes precedence over the values set in `hostname` and `subdomain`.
+- The Pod's hostname will be set to this value.
+- `setHostnameAsFQDN` must be nil or set to false.
+- `hostNetwork` must be set to false.
+
+This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters.
+Requires the HostnameOverride feature gate to be enabled.
+ |
+ false |
| imagePullSecrets |
[]object |
@@ -6024,6 +6207,7 @@ If the OS field is set to windows, following fields must be unset:
- spec.hostPID
- spec.hostIPC
- spec.hostUsers
+- spec.resources
- spec.securityContext.appArmorProfile
- spec.securityContext.seLinuxOptions
- spec.securityContext.seccompProfile
@@ -6125,7 +6309,7 @@ This field is immutable.
Resources is the total amount of CPU and Memory resources required by all
containers in the pod. It supports specifying Requests and Limits for
-"cpu" and "memory" resource names only. ResourceClaims are not supported.
+"cpu", "memory" and "hugepages-" resource names only. ResourceClaims are not supported.
This field enables fine-grained control over resource allocation for the
entire pod, allowing resource sharing among containers in a pod.
@@ -6338,8 +6522,8 @@ Cannot be updated.
| []object |
List of sources to populate environment variables in the container.
-The keys defined within a source must be a C_IDENTIFIER. All invalid keys
-will be reported as an event when the container is starting. When a key exists in multiple
+The keys defined within a source may consist of any printable ASCII characters except '='.
+When a key exists in multiple
sources, the value associated with the last source will take precedence.
Values defined by an Env with a duplicate key will take precedence.
Cannot be updated.
@@ -6428,10 +6612,10 @@ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-co
| string |
RestartPolicy defines the restart behavior of individual containers in a pod.
-This field may only be set for init containers, and the only allowed value is "Always".
-For non-init containers or when this field is not specified,
+This overrides the pod-level restart policy. When this field is not specified,
the restart behavior is defined by the Pod's restart policy and the container type.
-Setting the RestartPolicy as "Always" for the init container will have the following effect:
+Additionally, setting the RestartPolicy as "Always" for the init container will
+have the following effect:
this init container will be continually restarted on
exit until all regular containers have terminated. Once all regular
containers have completed, all init containers with restartPolicy "Always"
@@ -6444,6 +6628,23 @@ init container is started, or after any startupProbe has successfully
completed.
|
false |
+
+ | restartPolicyRules |
+ []object |
+
+ Represents a list of rules to be checked to determine if the
+container should be restarted on exit. The rules are evaluated in
+order. Once a rule matches a container exit condition, the remaining
+rules are ignored. If no rule matches the container exit condition,
+the Container-level restart policy determines the whether the container
+is restarted or not. Constraints on the rules:
+- At most 20 rules are allowed.
+- Rules can have the same action.
+- Identical rules are not forbidden in validations.
+When rules are specified, container MUST set RestartPolicy explicitly
+even it if matches the Pod's RestartPolicy.
+ |
+ false |
| securityContext |
object |
@@ -6571,7 +6772,8 @@ EnvVar represents an environment variable present in a Container.
name |
string |
- Name of the environment variable. Must be a C_IDENTIFIER.
+ Name of the environment variable.
+May consist of any printable ASCII characters except '='.
|
true |
@@ -6631,6 +6833,14 @@ Source for the environment variable's value. Cannot be used if value is not empt
spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
false |
+
+ | fileKeyRef |
+ object |
+
+ FileKeyRef selects a key of the env file.
+Requires the EnvFiles feature gate to be enabled.
+ |
+ false |
| resourceFieldRef |
object |
@@ -6732,6 +6942,66 @@ spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podI
+#### CassandraDatacenter.spec.podTemplateSpec.spec.containers[index].env[index].valueFrom.fileKeyRef
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspeccontainersindexenvindexvaluefrom)
+
+
+
+FileKeyRef selects a key of the env file.
+Requires the EnvFiles feature gate to be enabled.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | key |
+ string |
+
+ The key within the env file. An invalid key will prevent the pod from starting.
+The keys defined within a source may consist of any printable ASCII characters except '='.
+During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
+ |
+ true |
+
+ | path |
+ string |
+
+ The path within the volume from which to select the file.
+Must be relative and may not contain the '..' path or start with '..'.
+ |
+ true |
+
+ | volumeName |
+ string |
+
+ The name of the volume mount containing the env file.
+ |
+ true |
+
+ | optional |
+ boolean |
+
+ Specify whether the file or its key must be defined. If the file or key
+does not exist, then the env var is not published.
+If optional is set to true and the specified key does not exist,
+the environment variable will not be set in the Pod's containers.
+
+If optional is set to false and the specified key does not exist,
+an error will be returned during Pod creation.
+
+ Default: false
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.containers[index].env[index].valueFrom.resourceFieldRef
[↩ Parent](#cassandradatacenterspecpodtemplatespecspeccontainersindexenvindexvaluefrom)
@@ -6848,7 +7118,8 @@ EnvFromSource represents the source of a set of ConfigMaps or Secrets
prefix |
string |
- Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
+ Optional text to prepend to the name of each environment variable.
+May consist of any printable ASCII characters except '='.
|
false |
@@ -8265,7 +8536,7 @@ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-co
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
@@ -8331,6 +8602,82 @@ only the result of this request.
+#### CassandraDatacenter.spec.podTemplateSpec.spec.containers[index].restartPolicyRules[index]
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspeccontainersindex)
+
+
+
+ContainerRestartRule describes how a container exit is handled.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | action |
+ string |
+
+ Specifies the action taken on a container exit if the requirements
+are satisfied. The only possible value is "Restart" to restart the
+container.
+ |
+ true |
+
+ | exitCodes |
+ object |
+
+ Represents the exit codes to check on container exits.
+ |
+ false |
+
+
+
+
+#### CassandraDatacenter.spec.podTemplateSpec.spec.containers[index].restartPolicyRules[index].exitCodes
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspeccontainersindexrestartpolicyrulesindex)
+
+
+
+Represents the exit codes to check on container exits.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | operator |
+ string |
+
+ Represents the relationship between the container exit code(s) and the
+specified values. Possible values are:
+- In: the requirement is satisfied if the container exit code is in the
+ set of specified values.
+- NotIn: the requirement is satisfied if the container exit code is
+ not in the set of specified values.
+ |
+ true |
+
+ | values |
+ []integer |
+
+ Specifies the set of values to check for container exit codes.
+At most 255 elements are allowed.
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.containers[index].securityContext
[↩ Parent](#cassandradatacenterspecpodtemplatespecspeccontainersindex)
@@ -10215,8 +10562,8 @@ a node that violates one or more of the expressions. The node that is
most preferred is the one with the greatest sum of weights, i.e.
for each node that meets all of the scheduling requirements (resource
request, requiredDuringScheduling anti-affinity expressions, etc.),
-compute a sum by iterating through the elements of this field and adding
-"weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
+compute a sum by iterating through the elements of this field and subtracting
+"weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the
node(s) with the highest sum are the most preferred.
false |
@@ -10950,8 +11297,8 @@ Cannot be updated.
[]object |
List of sources to populate environment variables in the container.
-The keys defined within a source must be a C_IDENTIFIER. All invalid keys
-will be reported as an event when the container is starting. When a key exists in multiple
+The keys defined within a source may consist of any printable ASCII characters except '='.
+When a key exists in multiple
sources, the value associated with the last source will take precedence.
Values defined by an Env with a duplicate key will take precedence.
Cannot be updated.
@@ -11025,7 +11372,15 @@ already allocated to the pod.
|
Restart policy for the container to manage the restart behavior of each
container within a pod.
-This may only be set for init containers. You cannot set this field on
+You cannot set this field on ephemeral containers.
+ |
+ false |
+
+ | restartPolicyRules |
+ []object |
+
+ Represents a list of rules to be checked to determine if the
+container should be restarted on exit. You cannot set this field on
ephemeral containers.
|
false |
@@ -11161,7 +11516,8 @@ EnvVar represents an environment variable present in a Container.
name |
string |
- Name of the environment variable. Must be a C_IDENTIFIER.
+ Name of the environment variable.
+May consist of any printable ASCII characters except '='.
|
true |
@@ -11221,6 +11577,14 @@ Source for the environment variable's value. Cannot be used if value is not empt
spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
false |
+
+ | fileKeyRef |
+ object |
+
+ FileKeyRef selects a key of the env file.
+Requires the EnvFiles feature gate to be enabled.
+ |
+ false |
| resourceFieldRef |
object |
@@ -11322,6 +11686,66 @@ spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podI
+#### CassandraDatacenter.spec.podTemplateSpec.spec.ephemeralContainers[index].env[index].valueFrom.fileKeyRef
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecephemeralcontainersindexenvindexvaluefrom)
+
+
+
+FileKeyRef selects a key of the env file.
+Requires the EnvFiles feature gate to be enabled.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | key |
+ string |
+
+ The key within the env file. An invalid key will prevent the pod from starting.
+The keys defined within a source may consist of any printable ASCII characters except '='.
+During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
+ |
+ true |
+
+ | path |
+ string |
+
+ The path within the volume from which to select the file.
+Must be relative and may not contain the '..' path or start with '..'.
+ |
+ true |
+
+ | volumeName |
+ string |
+
+ The name of the volume mount containing the env file.
+ |
+ true |
+
+ | optional |
+ boolean |
+
+ Specify whether the file or its key must be defined. If the file or key
+does not exist, then the env var is not published.
+If optional is set to true and the specified key does not exist,
+the environment variable will not be set in the Pod's containers.
+
+If optional is set to false and the specified key does not exist,
+an error will be returned during Pod creation.
+
+ Default: false
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.ephemeralContainers[index].env[index].valueFrom.resourceFieldRef
[↩ Parent](#cassandradatacenterspecpodtemplatespecspecephemeralcontainersindexenvindexvaluefrom)
@@ -11438,7 +11862,8 @@ EnvFromSource represents the source of a set of ConfigMaps or Secrets
prefix |
string |
- Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
+ Optional text to prepend to the name of each environment variable.
+May consist of any printable ASCII characters except '='.
|
false |
@@ -12847,7 +13272,7 @@ already allocated to the pod.
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
@@ -12913,6 +13338,82 @@ only the result of this request.
+#### CassandraDatacenter.spec.podTemplateSpec.spec.ephemeralContainers[index].restartPolicyRules[index]
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecephemeralcontainersindex)
+
+
+
+ContainerRestartRule describes how a container exit is handled.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | action |
+ string |
+
+ Specifies the action taken on a container exit if the requirements
+are satisfied. The only possible value is "Restart" to restart the
+container.
+ |
+ true |
+
+ | exitCodes |
+ object |
+
+ Represents the exit codes to check on container exits.
+ |
+ false |
+
+
+
+
+#### CassandraDatacenter.spec.podTemplateSpec.spec.ephemeralContainers[index].restartPolicyRules[index].exitCodes
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecephemeralcontainersindexrestartpolicyrulesindex)
+
+
+
+Represents the exit codes to check on container exits.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | operator |
+ string |
+
+ Represents the relationship between the container exit code(s) and the
+specified values. Possible values are:
+- In: the requirement is satisfied if the container exit code is in the
+ set of specified values.
+- NotIn: the requirement is satisfied if the container exit code is
+ not in the set of specified values.
+ |
+ true |
+
+ | values |
+ []integer |
+
+ Specifies the set of values to check for container exit codes.
+At most 255 elements are allowed.
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.ephemeralContainers[index].securityContext
[↩ Parent](#cassandradatacenterspecpodtemplatespecspecephemeralcontainersindex)
@@ -13882,8 +14383,8 @@ Cannot be updated.
[]object |
List of sources to populate environment variables in the container.
-The keys defined within a source must be a C_IDENTIFIER. All invalid keys
-will be reported as an event when the container is starting. When a key exists in multiple
+The keys defined within a source may consist of any printable ASCII characters except '='.
+When a key exists in multiple
sources, the value associated with the last source will take precedence.
Values defined by an Env with a duplicate key will take precedence.
Cannot be updated.
@@ -13972,10 +14473,10 @@ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-co
| string |
RestartPolicy defines the restart behavior of individual containers in a pod.
-This field may only be set for init containers, and the only allowed value is "Always".
-For non-init containers or when this field is not specified,
+This overrides the pod-level restart policy. When this field is not specified,
the restart behavior is defined by the Pod's restart policy and the container type.
-Setting the RestartPolicy as "Always" for the init container will have the following effect:
+Additionally, setting the RestartPolicy as "Always" for the init container will
+have the following effect:
this init container will be continually restarted on
exit until all regular containers have terminated. Once all regular
containers have completed, all init containers with restartPolicy "Always"
@@ -13988,6 +14489,23 @@ init container is started, or after any startupProbe has successfully
completed.
|
false |
+
+ | restartPolicyRules |
+ []object |
+
+ Represents a list of rules to be checked to determine if the
+container should be restarted on exit. The rules are evaluated in
+order. Once a rule matches a container exit condition, the remaining
+rules are ignored. If no rule matches the container exit condition,
+the Container-level restart policy determines the whether the container
+is restarted or not. Constraints on the rules:
+- At most 20 rules are allowed.
+- Rules can have the same action.
+- Identical rules are not forbidden in validations.
+When rules are specified, container MUST set RestartPolicy explicitly
+even it if matches the Pod's RestartPolicy.
+ |
+ false |
| securityContext |
object |
@@ -14115,7 +14633,8 @@ EnvVar represents an environment variable present in a Container.
name |
string |
- Name of the environment variable. Must be a C_IDENTIFIER.
+ Name of the environment variable.
+May consist of any printable ASCII characters except '='.
|
true |
@@ -14175,6 +14694,14 @@ Source for the environment variable's value. Cannot be used if value is not empt
spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
false |
+
+ | fileKeyRef |
+ object |
+
+ FileKeyRef selects a key of the env file.
+Requires the EnvFiles feature gate to be enabled.
+ |
+ false |
| resourceFieldRef |
object |
@@ -14276,6 +14803,66 @@ spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podI
+#### CassandraDatacenter.spec.podTemplateSpec.spec.initContainers[index].env[index].valueFrom.fileKeyRef
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecinitcontainersindexenvindexvaluefrom)
+
+
+
+FileKeyRef selects a key of the env file.
+Requires the EnvFiles feature gate to be enabled.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | key |
+ string |
+
+ The key within the env file. An invalid key will prevent the pod from starting.
+The keys defined within a source may consist of any printable ASCII characters except '='.
+During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters.
+ |
+ true |
+
+ | path |
+ string |
+
+ The path within the volume from which to select the file.
+Must be relative and may not contain the '..' path or start with '..'.
+ |
+ true |
+
+ | volumeName |
+ string |
+
+ The name of the volume mount containing the env file.
+ |
+ true |
+
+ | optional |
+ boolean |
+
+ Specify whether the file or its key must be defined. If the file or key
+does not exist, then the env var is not published.
+If optional is set to true and the specified key does not exist,
+the environment variable will not be set in the Pod's containers.
+
+If optional is set to false and the specified key does not exist,
+an error will be returned during Pod creation.
+
+ Default: false
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.initContainers[index].env[index].valueFrom.resourceFieldRef
[↩ Parent](#cassandradatacenterspecpodtemplatespecspecinitcontainersindexenvindexvaluefrom)
@@ -14392,7 +14979,8 @@ EnvFromSource represents the source of a set of ConfigMaps or Secrets
prefix |
string |
- Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
+ Optional text to prepend to the name of each environment variable.
+May consist of any printable ASCII characters except '='.
|
false |
@@ -15809,7 +16397,7 @@ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-co
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
@@ -15875,6 +16463,82 @@ only the result of this request.
+#### CassandraDatacenter.spec.podTemplateSpec.spec.initContainers[index].restartPolicyRules[index]
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecinitcontainersindex)
+
+
+
+ContainerRestartRule describes how a container exit is handled.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | action |
+ string |
+
+ Specifies the action taken on a container exit if the requirements
+are satisfied. The only possible value is "Restart" to restart the
+container.
+ |
+ true |
+
+ | exitCodes |
+ object |
+
+ Represents the exit codes to check on container exits.
+ |
+ false |
+
+
+
+
+#### CassandraDatacenter.spec.podTemplateSpec.spec.initContainers[index].restartPolicyRules[index].exitCodes
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecinitcontainersindexrestartpolicyrulesindex)
+
+
+
+Represents the exit codes to check on container exits.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | operator |
+ string |
+
+ Represents the relationship between the container exit code(s) and the
+specified values. Possible values are:
+- In: the requirement is satisfied if the container exit code is in the
+ set of specified values.
+- NotIn: the requirement is satisfied if the container exit code is
+ not in the set of specified values.
+ |
+ true |
+
+ | values |
+ []integer |
+
+ Specifies the set of values to check for container exit codes.
+At most 255 elements are allowed.
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.initContainers[index].securityContext
[↩ Parent](#cassandradatacenterspecpodtemplatespecspecinitcontainersindex)
@@ -16731,6 +17395,7 @@ If the OS field is set to windows, following fields must be unset:
- spec.hostPID
- spec.hostIPC
- spec.hostUsers
+- spec.resources
- spec.securityContext.appArmorProfile
- spec.securityContext.seLinuxOptions
- spec.securityContext.seccompProfile
@@ -16875,7 +17540,7 @@ be set.
Resources is the total amount of CPU and Memory resources required by all
containers in the pod. It supports specifying Requests and Limits for
-"cpu" and "memory" resource names only. ResourceClaims are not supported.
+"cpu", "memory" and "hugepages-" resource names only. ResourceClaims are not supported.
This field enables fine-grained control over resource allocation for the
entire pod, allowing resource sharing among containers in a pod.
@@ -16899,7 +17564,7 @@ gate.
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
@@ -17912,8 +18577,7 @@ into the Pod's container.
object |
glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.
-Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-More info: https://examples.k8s.io/volumes/glusterfs/README.md
+Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
|
false |
@@ -17953,7 +18617,7 @@ The field spec.securityContext.fsGroupChangePolicy has no effect on this volume
iscsi represents an ISCSI Disk resource that is attached to a
kubelet's host machine and then exposed to the pod.
-More info: https://examples.k8s.io/volumes/iscsi/README.md
+More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
|
false |
@@ -18011,8 +18675,7 @@ Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supp
| object |
rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.
-Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
-More info: https://examples.k8s.io/volumes/rbd/README.md
+Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
|
false |
@@ -19094,15 +19757,13 @@ More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-
volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.
If specified, the CSI driver will create or update the volume with the attributes defined
in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,
-it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass
-will be applied to the claim but it's not allowed to reset this field to empty string once it is set.
-If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass
-will be set by the persistentvolume controller if it exists.
+it can be changed after the claim is created. An empty string or nil value indicates that no
+VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state,
+this field can be reset to its previous value (including nil) to cancel the modification.
If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be
set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource
exists.
-More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
-(Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
+More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
false |
@@ -19745,7 +20406,6 @@ the subdirectory with the given name.
glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.
Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
-More info: https://examples.k8s.io/volumes/glusterfs/README.md
@@ -19760,8 +20420,7 @@ More info: https://examples.k8s.io/volumes/glusterfs/README.md
| endpoints |
string |
- endpoints is the endpoint name that details Glusterfs topology.
-More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
+ endpoints is the endpoint name that details Glusterfs topology.
|
true |
@@ -19890,7 +20549,7 @@ container images in workload controllers like Deployments and StatefulSets.
iscsi represents an ISCSI Disk resource that is attached to a
kubelet's host machine and then exposed to the pod.
-More info: https://examples.k8s.io/volumes/iscsi/README.md
+More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi
@@ -20288,6 +20947,46 @@ may change the order over time.
downwardAPI information about the downwardAPI data to project
false |
+
+ | podCertificate |
+ object |
+
+ Projects an auto-rotating credential bundle (private key and certificate
+chain) that the pod can use either as a TLS client or server.
+
+Kubelet generates a private key and uses it to send a
+PodCertificateRequest to the named signer. Once the signer approves the
+request and issues a certificate chain, Kubelet writes the key and
+certificate chain to the pod filesystem. The pod does not start until
+certificates have been issued for each podCertificate projected volume
+source in its spec.
+
+Kubelet will begin trying to rotate the certificate at the time indicated
+by the signer using the PodCertificateRequest.Status.BeginRefreshAt
+timestamp.
+
+Kubelet can write a single file, indicated by the credentialBundlePath
+field, or separate files, indicated by the keyPath and
+certificateChainPath fields.
+
+The credential bundle is a single file in PEM format. The first PEM
+entry is the private key (in PKCS#8 format), and the remaining PEM
+entries are the certificate chain issued by the signer (typically,
+signers will return their certificate chain in leaf-to-root order).
+
+Prefer using the credential bundle format, since your application code
+can read it atomically. If you use keyPath and certificateChainPath,
+your application must make two separate file reads. If these coincide
+with a certificate rotation, it is possible that the private key and leaf
+certificate you read may not correspond to each other. Your application
+will need to check for this condition, and re-read until they are
+consistent.
+
+The named signer controls chooses the format of the certificate it
+issues; consult the signer implementation's documentation to learn how to
+use the certificates it issues.
+ |
+ false |
| secret |
object |
@@ -20731,6 +21430,142 @@ Selects a resource of the container: only resources limits and requests
+#### CassandraDatacenter.spec.podTemplateSpec.spec.volumes[index].projected.sources[index].podCertificate
+[↩ Parent](#cassandradatacenterspecpodtemplatespecspecvolumesindexprojectedsourcesindex)
+
+
+
+Projects an auto-rotating credential bundle (private key and certificate
+chain) that the pod can use either as a TLS client or server.
+
+Kubelet generates a private key and uses it to send a
+PodCertificateRequest to the named signer. Once the signer approves the
+request and issues a certificate chain, Kubelet writes the key and
+certificate chain to the pod filesystem. The pod does not start until
+certificates have been issued for each podCertificate projected volume
+source in its spec.
+
+Kubelet will begin trying to rotate the certificate at the time indicated
+by the signer using the PodCertificateRequest.Status.BeginRefreshAt
+timestamp.
+
+Kubelet can write a single file, indicated by the credentialBundlePath
+field, or separate files, indicated by the keyPath and
+certificateChainPath fields.
+
+The credential bundle is a single file in PEM format. The first PEM
+entry is the private key (in PKCS#8 format), and the remaining PEM
+entries are the certificate chain issued by the signer (typically,
+signers will return their certificate chain in leaf-to-root order).
+
+Prefer using the credential bundle format, since your application code
+can read it atomically. If you use keyPath and certificateChainPath,
+your application must make two separate file reads. If these coincide
+with a certificate rotation, it is possible that the private key and leaf
+certificate you read may not correspond to each other. Your application
+will need to check for this condition, and re-read until they are
+consistent.
+
+The named signer controls chooses the format of the certificate it
+issues; consult the signer implementation's documentation to learn how to
+use the certificates it issues.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | keyType |
+ string |
+
+ The type of keypair Kubelet will generate for the pod.
+
+Valid values are "RSA3072", "RSA4096", "ECDSAP256", "ECDSAP384",
+"ECDSAP521", and "ED25519".
+ |
+ true |
+
+ | signerName |
+ string |
+
+ Kubelet's generated CSRs will be addressed to this signer.
+ |
+ true |
+
+ | certificateChainPath |
+ string |
+
+ Write the certificate chain at this path in the projected volume.
+
+Most applications should use credentialBundlePath. When using keyPath
+and certificateChainPath, your application needs to check that the key
+and leaf certificate are consistent, because it is possible to read the
+files mid-rotation.
+ |
+ false |
+
+ | credentialBundlePath |
+ string |
+
+ Write the credential bundle at this path in the projected volume.
+
+The credential bundle is a single file that contains multiple PEM blocks.
+The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private
+key.
+
+The remaining blocks are CERTIFICATE blocks, containing the issued
+certificate chain from the signer (leaf and any intermediates).
+
+Using credentialBundlePath lets your Pod's application code make a single
+atomic read that retrieves a consistent key and certificate chain. If you
+project them to separate files, your application code will need to
+additionally check that the leaf certificate was issued to the key.
+ |
+ false |
+
+ | keyPath |
+ string |
+
+ Write the key at this path in the projected volume.
+
+Most applications should use credentialBundlePath. When using keyPath
+and certificateChainPath, your application needs to check that the key
+and leaf certificate are consistent, because it is possible to read the
+files mid-rotation.
+ |
+ false |
+
+ | maxExpirationSeconds |
+ integer |
+
+ maxExpirationSeconds is the maximum lifetime permitted for the
+certificate.
+
+Kubelet copies this value verbatim into the PodCertificateRequests it
+generates for this projection.
+
+If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver
+will reject values shorter than 3600 (1 hour). The maximum allowable
+value is 7862400 (91 days).
+
+The signer implementation is then free to issue a certificate with any
+lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600
+seconds (1 hour). This constraint is enforced by kube-apiserver.
+`kubernetes.io` signers will never issue certificates with a lifetime
+longer than 24 hours.
+
+ Format: int32
+ |
+ false |
+
+
+
+
#### CassandraDatacenter.spec.podTemplateSpec.spec.volumes[index].projected.sources[index].secret
[↩ Parent](#cassandradatacenterspecpodtemplatespecspecvolumesindexprojectedsourcesindex)
@@ -20963,7 +21798,6 @@ Defaults to serivceaccount user
rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.
Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
-More info: https://examples.k8s.io/volumes/rbd/README.md
@@ -22588,8 +23422,8 @@ a node that violates one or more of the expressions. The node that is
most preferred is the one with the greatest sum of weights, i.e.
for each node that meets all of the scheduling requirements (resource
request, requiredDuringScheduling anti-affinity expressions, etc.),
-compute a sum by iterating through the elements of this field and adding
-"weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
+compute a sum by iterating through the elements of this field and subtracting
+"weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the
node(s) with the highest sum are the most preferred.
false |
@@ -23189,7 +24023,7 @@ Kubernetes resource requests and limits, per pod
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
@@ -23278,7 +24112,7 @@ Kubernetes resource requests and limits per system logger container.
Claims lists the names of resources, defined in spec.resourceClaims,
that are used by this container.
-This is an alpha field and requires enabling the
+This field depends on the
DynamicResourceAllocation feature gate.
This field is immutable. It can only be set for containers.
diff --git a/docs/content/en/reference/crd/k8ssandra-operator-crds-latest/_index.md b/docs/content/en/reference/crd/k8ssandra-operator-crds-latest/_index.md
index db8ed6693..10a1cc7a2 100644
--- a/docs/content/en/reference/crd/k8ssandra-operator-crds-latest/_index.md
+++ b/docs/content/en/reference/crd/k8ssandra-operator-crds-latest/_index.md
@@ -28559,7 +28559,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -28644,6 +28644,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### K8ssandraCluster.spec.cassandra.datacenters[index].stargate.racks[index].telemetry.cassandra.endpoint.tls
+[↩ Parent](#k8ssandraclusterspeccassandradatacentersindexstargateracksindextelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -28730,7 +28778,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -28746,7 +28794,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -28845,8 +28893,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -29640,7 +29687,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -29725,6 +29772,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### K8ssandraCluster.spec.cassandra.datacenters[index].stargate.telemetry.cassandra.endpoint.tls
+[↩ Parent](#k8ssandraclusterspeccassandradatacentersindexstargatetelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -29811,7 +29906,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -29827,7 +29922,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -29926,8 +30021,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -34853,7 +34947,7 @@ a user-provided monitoring solution (at present, only support for Prometheus is
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -34938,6 +35032,54 @@ a user-provided monitoring solution (at present, only support for Prometheus is
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### K8ssandraCluster.spec.cassandra.datacenters[index].telemetry.cassandra.endpoint.tls
+[↩ Parent](#k8ssandraclusterspeccassandradatacentersindextelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -35024,7 +35166,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -35040,7 +35182,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -35139,8 +35281,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -53899,7 +54040,7 @@ a user-provided monitoring solution (at present, only support for Prometheus is
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -53984,6 +54125,54 @@ a user-provided monitoring solution (at present, only support for Prometheus is
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### K8ssandraCluster.spec.cassandra.telemetry.cassandra.endpoint.tls
+[↩ Parent](#k8ssandraclusterspeccassandratelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -54070,7 +54259,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -54086,7 +54275,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -54185,8 +54374,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -56367,6 +56555,13 @@ Provides all service related properties for Medusa.
+ | encryption |
+ object |
+
+ gRPC allows modifying the gRPC server settings in Medusa. Settings these values enables mTLS in the gRPC server.
+ |
+ false |
+
| grpcPort |
integer |
@@ -56378,6 +56573,40 @@ Included grpc in the field name to avoid misunderstanding with storage.port
|
+#### K8ssandraCluster.spec.medusa.serviceProperties.encryption
+[↩ Parent](#k8ssandraclusterspecmedusaserviceproperties)
+
+
+
+gRPC allows modifying the gRPC server settings in Medusa. Settings these values enables mTLS in the gRPC server.
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | clientSecretName |
+ string |
+
+
+ |
+ true |
+
+ | serverSecretName |
+ string |
+
+
+ |
+ true |
+
+
+
+
#### K8ssandraCluster.spec.medusa.storageProperties
[↩ Parent](#k8ssandraclusterspecmedusa)
@@ -61874,7 +62103,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Rea
mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -61959,6 +62188,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Rea
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### K8ssandraCluster.spec.reaper.telemetry.cassandra.endpoint.tls
+[↩ Parent](#k8ssandraclusterspecreapertelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -62045,7 +62322,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -62061,7 +62338,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -62160,8 +62437,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -65425,7 +65701,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -65510,6 +65786,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### K8ssandraCluster.spec.stargate.telemetry.cassandra.endpoint.tls
+[↩ Parent](#k8ssandraclusterspecstargatetelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -65596,7 +65920,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -65612,7 +65936,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -65711,8 +66035,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -92548,7 +92871,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Rea
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -92633,6 +92956,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Rea
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### Reaper.spec.telemetry.cassandra.endpoint.tls
+[↩ Parent](#reaperspectelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -92719,7 +93090,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -92735,7 +93106,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -92834,8 +93205,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -99531,7 +99901,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -99616,6 +99986,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### Stargate.spec.racks[index].telemetry.cassandra.endpoint.tls
+[↩ Parent](#stargatespecracksindextelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -99702,7 +100120,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -99718,7 +100136,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -99817,8 +100235,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |
@@ -100612,7 +101029,7 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
| mcac |
object |
-
+ DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
|
false |
@@ -100697,6 +101114,54 @@ Telemetry defines the desired telemetry integrations to deploy targeting the Sta
false |
+
+ | tls |
+ object |
+
+
+ |
+ false |
+
+
+
+
+#### Stargate.spec.telemetry.cassandra.endpoint.tls
+[↩ Parent](#stargatespectelemetrycassandraendpoint)
+
+
+
+
+
+
+
+
+ | Name |
+ Type |
+ Description |
+ Required |
+
+
+
+ | ca.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.crt |
+ string |
+
+
+ |
+ false |
+
+ | tls.key |
+ string |
+
+
+ |
+ false |
@@ -100783,7 +101248,7 @@ It is mandatory for replace actions. Regex capture groups are available.
-
+DEPRECATED MCAC has been deprecated in favor of the new metrics endpoint
@@ -100799,7 +101264,7 @@ It is mandatory for replace actions. Regex capture groups are available.
boolean |
enabled sets whether MCAC (legacy metrics endpoint) is enabled.
-This is considered true by default.
+This is considered false by default.
|
false |
@@ -100898,8 +101363,7 @@ Enabling the vector agent will inject a sidecar container into the pod.
image |
string |
- Image is the name of the Vector image to use. If not set, the default image will be used.
-kube:default="timberio/vector:0.26.0-alpine"
+ Image is the name of the Vector image to use. If not set, the default image will be used.
|
false |