mirror of
https://github.com/containers/podman.git
synced 2025-05-17 23:26:08 +08:00
bdf96e7df2
The kube generate command can now generate a yaml for the Job kind and the kube play command can create a pod and containers with podman when passed in a Job yaml. Add relevant tests and docs for this. Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
204 lines
12 KiB
Markdown
204 lines
12 KiB
Markdown
# Podman Kube Play Support
|
|
|
|
This document outlines the kube yaml fields that are currently supported by the **podman kube play** command.
|
|
|
|
Note: **N/A** means that the option cannot be supported in a single-node Podman environment.
|
|
|
|
## Pod Fields
|
|
|
|
| Field | Support |
|
|
|-----------------------------------------------------|---------|
|
|
| containers | ✅ |
|
|
| initContainers | ✅ |
|
|
| imagePullSecrets | no |
|
|
| enableServiceLinks | no |
|
|
| os\.name | no |
|
|
| volumes | ✅ |
|
|
| nodeSelector | N/A |
|
|
| nodeName | N/A |
|
|
| affinity\.nodeAffinity | N/A |
|
|
| affinity\.podAffinity | N/A |
|
|
| affinity\.podAntiAffinity | N/A |
|
|
| tolerations\.key | N/A |
|
|
| tolerations\.operator | N/A |
|
|
| tolerations\.effect | N/A |
|
|
| tolerations\.tolerationSeconds | N/A |
|
|
| schedulerName | N/A |
|
|
| runtimeClassName | no |
|
|
| priorityClassName | no |
|
|
| priority | no |
|
|
| topologySpreadConstraints\.maxSkew | N/A |
|
|
| topologySpreadConstraints\.topologyKey | N/A |
|
|
| topologySpreadConstraints\.whenUnsatisfiable | N/A |
|
|
| topologySpreadConstraints\.labelSelector | N/A |
|
|
| topologySpreadConstraints\.minDomains | N/A |
|
|
| restartPolicy | ✅ |
|
|
| terminationGracePeriodSeconds | ✅ |
|
|
| activeDeadlineSeconds | no |
|
|
| readinessGates\.conditionType | no |
|
|
| hostname | ✅ |
|
|
| setHostnameAsFQDN | no |
|
|
| subdomain | no |
|
|
| hostAliases\.hostnames | ✅ |
|
|
| hostAliases\.ip | ✅ |
|
|
| dnsConfig\.nameservers | ✅ |
|
|
| dnsConfig\.options\.name | ✅ |
|
|
| dnsConfig\.options\.value | ✅ |
|
|
| dnsConfig\.searches | ✅ |
|
|
| dnsPolicy | no |
|
|
| hostNetwork | ✅ |
|
|
| hostPID | ✅ |
|
|
| hostIPC | ✅ |
|
|
| shareProcessNamespace | ✅ |
|
|
| serviceAccountName | no |
|
|
| automountServiceAccountToken | no |
|
|
| securityContext\.runAsUser | ✅ |
|
|
| securityContext\.runAsNonRoot | no |
|
|
| securityContext\.runAsGroup | ✅ |
|
|
| securityContext\.supplementalGroups | ✅ |
|
|
| securityContext\.fsGroup | no |
|
|
| securityContext\.fsGroupChangePolicy | no |
|
|
| securityContext\.seccompProfile\.type | no |
|
|
| securityContext\.seccompProfile\.localhostProfile | no |
|
|
| securityContext\.seLinuxOptions\.level | ✅ |
|
|
| securityContext\.seLinuxOptions\.role | ✅ |
|
|
| securityContext\.seLinuxOptions\.type | ✅ |
|
|
| securityContext\.seLinuxOptions\.user | ✅ |
|
|
| securityContext\.sysctls\.name | ✅ |
|
|
| securityContext\.sysctls\.value | ✅ |
|
|
| securityContext\.windowsOptions\.gmsaCredentialSpec | no |
|
|
| securityContext\.windowsOptions\.hostProcess | no |
|
|
| securityContext\.windowsOptions\.runAsUserName | no |
|
|
|
|
## Container Fields
|
|
|
|
| Field | Support |
|
|
|-----------------------------------------------------|---------|
|
|
| name | ✅ |
|
|
| image | ✅ |
|
|
| imagePullPolicy | ✅ |
|
|
| command | ✅ |
|
|
| args | ✅ |
|
|
| workingDir | ✅ |
|
|
| ports\.containerPort | ✅ |
|
|
| ports\.hostIP | ✅ |
|
|
| ports\.hostPort | ✅ |
|
|
| ports\.name | ✅ |
|
|
| ports\.protocol | ✅ |
|
|
| env\.name | ✅ |
|
|
| env\.value | ✅ |
|
|
| env\.valueFrom\.configMapKeyRef\.key | ✅ |
|
|
| env\.valueFrom\.configMapKeyRef\.name | ✅ |
|
|
| env\.valueFrom\.configMapKeyRef\.optional | ✅ |
|
|
| env\.valueFrom\.fieldRef | ✅ |
|
|
| env\.valueFrom\.resourceFieldRef | ✅ |
|
|
| env\.valueFrom\.secretKeyRef\.key | ✅ |
|
|
| env\.valueFrom\.secretKeyRef\.name | ✅ |
|
|
| env\.valueFrom\.secretKeyRef\.optional | ✅ |
|
|
| envFrom\.configMapRef\.name | ✅ |
|
|
| envFrom\.configMapRef\.optional | ✅ |
|
|
| envFrom\.prefix | no |
|
|
| envFrom\.secretRef\.name | ✅ |
|
|
| envFrom\.secretRef\.optional | ✅ |
|
|
| volumeMounts\.mountPath | ✅ |
|
|
| volumeMounts\.name | ✅ |
|
|
| volumeMounts\.mountPropagation | no |
|
|
| volumeMounts\.readOnly | ✅ |
|
|
| volumeMounts\.subPath | ✅ |
|
|
| volumeMounts\.subPathExpr | no |
|
|
| volumeDevices\.devicePath | no |
|
|
| volumeDevices\.name | no |
|
|
| resources\.limits | ✅ |
|
|
| resources\.requests | ✅ |
|
|
| lifecycle\.postStart | no |
|
|
| lifecycle\.preStop | no |
|
|
| terminationMessagePath | no |
|
|
| terminationMessagePolicy | no |
|
|
| livenessProbe | ✅ |
|
|
| readinessProbe | no |
|
|
| startupProbe | no |
|
|
| securityContext\.runAsUser | ✅ |
|
|
| securityContext\.runAsNonRoot | no |
|
|
| securityContext\.runAsGroup | ✅ |
|
|
| securityContext\.readOnlyRootFilesystem | ✅ |
|
|
| securityContext\.procMount | ✅ |
|
|
| securityContext\.privileged | ✅ |
|
|
| securityContext\.allowPrivilegeEscalation | ✅ |
|
|
| securityContext\.capabilities\.add | ✅ |
|
|
| securityContext\.capabilities\.drop | ✅ |
|
|
| securityContext\.seccompProfile\.type | no |
|
|
| securityContext\.seccompProfile\.localhostProfile | no |
|
|
| securityContext\.seLinuxOptions\.level | ✅ |
|
|
| securityContext\.seLinuxOptions\.role | ✅ |
|
|
| securityContext\.seLinuxOptions\.type | ✅ |
|
|
| securityContext\.seLinuxOptions\.user | ✅ |
|
|
| securityContext\.windowsOptions\.gmsaCredentialSpec | no |
|
|
| securityContext\.windowsOptions\.hostProcess | no |
|
|
| securityContext\.windowsOptions\.runAsUserName | no |
|
|
| stdin | no |
|
|
| stdinOnce | no |
|
|
| tty | no |
|
|
|
|
## PersistentVolumeClaim Fields
|
|
|
|
| Field | Support |
|
|
|---------------------|---------|
|
|
| volumeName | no |
|
|
| storageClassName | ✅ |
|
|
| volumeMode | no |
|
|
| accessModes | ✅ |
|
|
| selector | no |
|
|
| resources\.limits | no |
|
|
| resources\.requests | ✅ |
|
|
|
|
## ConfigMap Fields
|
|
|
|
| Field | Support |
|
|
|------------|---------|
|
|
| binaryData | ✅ |
|
|
| data | ✅ |
|
|
| immutable | no |
|
|
|
|
## Deployment Fields
|
|
|
|
| Field | Support |
|
|
|-----------------------------------------|-------------------------------------------------------|
|
|
| replicas | ✅ (the actual replica count is ignored and set to 1) |
|
|
| selector | ✅ |
|
|
| template | ✅ |
|
|
| minReadySeconds | no |
|
|
| strategy\.type | no |
|
|
| strategy\.rollingUpdate\.maxSurge | no |
|
|
| strategy\.rollingUpdate\.maxUnavailable | no |
|
|
| revisionHistoryLimit | no |
|
|
| progressDeadlineSeconds | no |
|
|
| paused | no |
|
|
|
|
## DaemonSet Fields
|
|
|
|
| Field | Support |
|
|
|-----------------------------------------|---------|
|
|
| selector | ✅ |
|
|
| template | ✅ |
|
|
| minReadySeconds | no |
|
|
| strategy\.type | no |
|
|
| strategy\.rollingUpdate\.maxSurge | no |
|
|
| strategy\.rollingUpdate\.maxUnavailable | no |
|
|
| revisionHistoryLimit | no |
|
|
|
|
## Job Fields
|
|
|
|
| Field | Support |
|
|
|-------------------------|----------------------------------|
|
|
| activeDeadlineSeconds | no |
|
|
| selector | no (automatically set by k8s) |
|
|
| template | ✅ |
|
|
| backoffLimit | no |
|
|
| completionMode | no |
|
|
| completions | no (set to 1 with kube generate) |
|
|
| manualSelector | no |
|
|
| parallelism | no (set to 1 with kube generate) |
|
|
| podFailurePolicy | no |
|
|
| suspend | no |
|
|
| ttlSecondsAfterFinished | no |
|