123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111 |
- /*
- Copyright 2017 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- // This file should be consistent with pkg/api/v1/annotation_key_constants.go.
- package core
- const (
- // ImagePolicyFailedOpenKey is added to pods created by failing open when the image policy
- // webhook backend fails.
- ImagePolicyFailedOpenKey string = "alpha.image-policy.k8s.io/failed-open"
- // PodPresetOptOutAnnotationKey represents the annotation key for a pod to exempt itself from pod preset manipulation
- PodPresetOptOutAnnotationKey string = "podpreset.admission.kubernetes.io/exclude"
- // MirrorAnnotationKey represents the annotation key set by kubelets when creating mirror pods
- MirrorPodAnnotationKey string = "kubernetes.io/config.mirror"
- // TolerationsAnnotationKey represents the key of tolerations data (json serialized)
- // in the Annotations of a Pod.
- TolerationsAnnotationKey string = "scheduler.alpha.kubernetes.io/tolerations"
- // TaintsAnnotationKey represents the key of taints data (json serialized)
- // in the Annotations of a Node.
- TaintsAnnotationKey string = "scheduler.alpha.kubernetes.io/taints"
- // SeccompPodAnnotationKey represents the key of a seccomp profile applied
- // to all containers of a pod.
- SeccompPodAnnotationKey string = "seccomp.security.alpha.kubernetes.io/pod"
- // SeccompContainerAnnotationKeyPrefix represents the key of a seccomp profile applied
- // to one container of a pod.
- SeccompContainerAnnotationKeyPrefix string = "container.seccomp.security.alpha.kubernetes.io/"
- // SeccompProfileRuntimeDefault represents the default seccomp profile used by container runtime.
- SeccompProfileRuntimeDefault string = "runtime/default"
- // DeprecatedSeccompProfileDockerDefault represents the default seccomp profile used by docker.
- // This is now deprecated and should be replaced by SeccompProfileRuntimeDefault.
- DeprecatedSeccompProfileDockerDefault string = "docker/default"
- // PreferAvoidPodsAnnotationKey represents the key of preferAvoidPods data (json serialized)
- // in the Annotations of a Node.
- PreferAvoidPodsAnnotationKey string = "scheduler.alpha.kubernetes.io/preferAvoidPods"
- // ObjectTTLAnnotations represents a suggestion for kubelet for how long it can cache
- // an object (e.g. secret, config map) before fetching it again from apiserver.
- // This annotation can be attached to node.
- ObjectTTLAnnotationKey string = "node.alpha.kubernetes.io/ttl"
- // BootstrapCheckpointAnnotationKey represents a Resource (Pod) that should be checkpointed by
- // the kubelet prior to running
- BootstrapCheckpointAnnotationKey string = "node.kubernetes.io/bootstrap-checkpoint"
- // annotation key prefix used to identify non-convertible json paths.
- NonConvertibleAnnotationPrefix = "non-convertible.kubernetes.io"
- kubectlPrefix = "kubectl.kubernetes.io/"
- // LastAppliedConfigAnnotation is the annotation used to store the previous
- // configuration of a resource for use in a three way diff by UpdateApplyAnnotation.
- LastAppliedConfigAnnotation = kubectlPrefix + "last-applied-configuration"
- // AnnotationLoadBalancerSourceRangesKey is the key of the annotation on a service to set allowed ingress ranges on their LoadBalancers
- //
- // It should be a comma-separated list of CIDRs, e.g. `0.0.0.0/0` to
- // allow full access (the default) or `18.0.0.0/8,56.0.0.0/8` to allow
- // access only from the CIDRs currently allocated to MIT & the USPS.
- //
- // Not all cloud providers support this annotation, though AWS & GCE do.
- AnnotationLoadBalancerSourceRangesKey = "service.beta.kubernetes.io/load-balancer-source-ranges"
- // EndpointsLastChangeTriggerTime is the annotation key, set for endpoints objects, that
- // represents the timestamp (stored as RFC 3339 date-time string, e.g. '2018-10-22T19:32:52.1Z')
- // of the last change, of some Pod or Service object, that triggered the endpoints object change.
- // In other words, if a Pod / Service changed at time T0, that change was observed by endpoints
- // controller at T1, and the Endpoints object was changed at T2, the
- // EndpointsLastChangeTriggerTime would be set to T0.
- //
- // The "endpoints change trigger" here means any Pod or Service change that resulted in the
- // Endpoints object change.
- //
- // Given the definition of the "endpoints change trigger", please note that this annotation will
- // be set ONLY for endpoints object changes triggered by either Pod or Service change. If the
- // Endpoints object changes due to other reasons, this annotation won't be set (or updated if it's
- // already set).
- //
- // This annotation will be used to compute the in-cluster network programming latency SLI, see
- // https://github.com/kubernetes/community/blob/master/sig-scalability/slos/network_programming_latency.md
- EndpointsLastChangeTriggerTime = "endpoints.kubernetes.io/last-change-trigger-time"
- // MigratedPluginsAnnotationKey is the annotation key, set for CSINode objects, that is a comma-separated
- // list of in-tree plugins that will be serviced by the CSI backend on the Node represented by CSINode.
- // This annotation is used by the Attach Detach Controller to determine whether to use the in-tree or
- // CSI Backend for a volume plugin on a specific node.
- MigratedPluginsAnnotationKey = "storage.alpha.kubernetes.io/migrated-plugins"
- )
|