Merge pull request #34100 from jboxman/apis-48

Add APIs for 4.8

Author: jboxman

_topic_map.yml

@@ -2173,6 +2173,8 @@ Topics:
     File: consolelink-console-openshift-io-v1
   - Name: 'ConsoleNotification [console.openshift.io/v1]'
     File: consolenotification-console-openshift-io-v1
+  - Name: 'ConsolePlugin [console.openshift.io/v1alpha1]'
+    File: consoleplugin-console-openshift-io-v1alpha1
   - Name: 'ConsoleQuickStart [console.openshift.io/v1]'
     File: consolequickstart-console-openshift-io-v1
   - Name: 'ConsoleYAMLSample [console.openshift.io/v1]'
@@ -2237,6 +2239,8 @@ Topics:
   Topics:
   - Name: About Metadata APIs
     File: metadata-apis-index
+  - Name: 'APIRequestCount [apiserver.openshift.io/v1]'
+    File: apirequestcount-apiserver-openshift-io-v1
   - Name: 'Binding [core/v1]'
     File: binding-core-v1
   - Name: 'ComponentStatus [core/v1]'
@@ -2283,10 +2287,12 @@ Topics:
     File: clusternetwork-network-openshift-io-v1
   - Name: 'Endpoints [core/v1]'
     File: endpoints-core-v1
-  - Name: 'EndpointSlice [discovery.k8s.io/v1beta1]'
-    File: endpointslice-discovery-k8s-io-v1beta1
+  - Name: 'EndpointSlice [discovery.k8s.io/v1]'
+    File: endpointslice-discovery-k8s-io-v1
   - Name: 'EgressNetworkPolicy [network.openshift.io/v1]'
     File: egressnetworkpolicy-network-openshift-io-v1
+  - Name: 'EgressRouter [network.operator.openshift.io/v1]'
+    File: egressrouter-network-operator-openshift-io-v1
   - Name: 'HostSubnet [network.openshift.io/v1]'
     File: hostsubnet-network-openshift-io-v1
   - Name: 'Ingress [networking.k8s.io/v1]'
@@ -2414,8 +2420,8 @@ Topics:
   Topics:
   - Name: About Policy APIs
     File: policy-apis-index
-  - Name: 'PodDisruptionBudget [policy/v1beta1]'
-    File: poddisruptionbudget-policy-v1beta1
+  - Name: 'PodDisruptionBudget [policy/v1]'
+    File: poddisruptionbudget-policy-v1
 - Name: Project APIs
   Dir: project_apis
   Topics:
@@ -2471,14 +2477,14 @@ Topics:
     File: appliedclusterresourcequota-quota-openshift-io-v1
   - Name: 'ClusterResourceQuota [quota.openshift.io/v1]'
     File: clusterresourcequota-quota-openshift-io-v1
-  - Name: 'FlowSchema [flowcontrol.apiserver.k8s.io/v1alpha1]'
-    File: flowschema-flowcontrol-apiserver-k8s-io-v1alpha1
+  - Name: 'FlowSchema [flowcontrol.apiserver.k8s.io/v1beta1]'
+    File: flowschema-flowcontrol-apiserver-k8s-io-v1beta1
   - Name: 'LimitRange [core/v1]'
     File: limitrange-core-v1
   - Name: 'PriorityClass [scheduling.k8s.io/v1]'
     File: priorityclass-scheduling-k8s-io-v1
-  - Name: 'PriorityLevelConfiguration [flowcontrol.apiserver.k8s.io/v1alpha1]'
-    File: prioritylevelconfiguration-flowcontrol-apiserver-k8s-io-v1alpha1
+  - Name: 'PriorityLevelConfiguration [flowcontrol.apiserver.k8s.io/v1beta1]'
+    File: prioritylevelconfiguration-flowcontrol-apiserver-k8s-io-v1beta1
   - Name: 'ResourceQuota [core/v1]'
     File: resourcequota-core-v1
 - Name: Security APIs
@@ -2513,6 +2519,8 @@ Topics:
     File: csidriver-storage-k8s-io-v1
   - Name: 'CSINode [storage.k8s.io/v1]'
     File: csinode-storage-k8s-io-v1
+  - Name: 'CSIStorageCapacity [storage.k8s.io/v1beta1]'
+    File: csistoragecapacity-storage-k8s-io-v1beta1
   - Name: 'PersistentVolumeClaim [core/v1]'
     File: persistentvolumeclaim-core-v1
   - Name: 'StorageClass [storage.k8s.io/v1]'
@@ -2564,8 +2572,8 @@ Topics:
     File: buildconfig-build-openshift-io-v1
   - Name: 'Build [build.openshift.io/v1]'
     File: build-build-openshift-io-v1
-  - Name: 'CronJob [batch/v1beta1]'
-    File: cronjob-batch-v1beta1
+  - Name: 'CronJob [batch/v1]'
+    File: cronjob-batch-v1
   - Name: 'DaemonSet [apps/v1]'
     File: daemonset-apps-v1
   - Name: 'Deployment [apps/v1]'

api-config.yaml

@@ -36,7 +36,74 @@ apiSupportLevels:
   supportLevels:
   - apiVersion: v\d+alpha\d+
     level: 4
-packageMap: {} # replace regex
+packageMap:
+  com.coreos.monitoring: monitoring.coreos.com
+  com.coreos.operators: operators.coreos.com
+  com.github.openshift.api.apps: apps.openshift.io
+  com.github.openshift.api.authorization: authorization.openshift.io
+  com.github.openshift.api.build: build.openshift.io
+  com.github.openshift.api.image: image.openshift.io
+  com.github.openshift.api.oauth: oauth.openshift.io
+  com.github.openshift.api.project: project.openshift.io
+  com.github.openshift.api.quota: quota.openshift.io
+  com.github.openshift.api.route: route.openshift.io
+  com.github.openshift.api.security: security.openshift.io
+  com.github.openshift.api.template: template.openshift.io
+  com.github.openshift.api.user: user.openshift.io
+  com.github.operator-framework.api.pkg.lib: packages.operators.coreos.com
+  com.github.operator-framework.api.pkg.operators: packages.operators.coreos.com
+  com.github.operator-framework.operator-lifecycle-manager.pkg.package-server.apis.operators: packages.operators.coreos.com
+  io.cncf.cni.k8s: k8s.cni.cncf.io
+  io.cncf.cni.whereabouts: whereabouts.cni.cncf.io
+  io.k8s.metrics.pkg.apis.metrics: metrics.k8s.io
+  io.k8s.api.admissionregistration: admissionregistration.k8s.io
+  io.k8s.api.apps: apps
+  io.k8s.api.authentication: authentication.k8s.io
+  io.k8s.api.authorization: authorization.k8s.io
+  io.k8s.api.autoscaling: autoscaling
+  io.k8s.api.batch: batch
+  io.k8s.api.certificates: certificates.k8s.io
+  io.k8s.api.coordination: coordination.k8s.io
+  io.k8s.api.core: core
+  io.k8s.api.discovery: discovery.k8s.io
+  io.k8s.api.events: events.k8s.io
+  io.k8s.api.extensions: extensions
+  io.k8s.api.flowcontrol: flowcontrol.apiserver.k8s.io
+  io.k8s.api.networking: networking.k8s.io
+  io.k8s.api.node: node.k8s.io
+  io.k8s.api.policy: policy
+  io.k8s.api.rbac: rbac.authorization.k8s.io
+  io.k8s.api.scheduling: scheduling.k8s.io
+  io.k8s.api.storage: storage.k8s.io
+  io.k8s.apiextensions-apiserver.pkg.apis.apiextensions: apiextensions.k8s.io
+  io.k8s.apimachinery.pkg.api: api
+  io.k8s.apimachinery.pkg.apis.meta: meta
+  io.k8s.apimachinery.pkg.util: util
+  io.k8s.apimachinery.pkg: pkg
+  io.k8s.kube-aggregator.pkg.apis.apiregistration: apiregistration.k8s.io
+  io.k8s.migration: migration.k8s.io
+  io.k8s.storage.snapshot: snapshot.storage.k8s.io
+  io.metal3: metal3.io
+  io.openshift.apiserver: apiserver.openshift.io
+  io.openshift.authorization: authorization.openshift.io
+  io.openshift.autoscaling: autoscaling.openshift.io
+  io.openshift.cloudcredential: cloudcredential.openshift.io
+  io.openshift.config: config.openshift.io
+  io.openshift.console: console.openshift.io
+  io.openshift.helm: helm.openshift.io
+  io.openshift.internal.security: security.internal.openshift.io
+  io.openshift.machine: machine.openshift.io
+  io.openshift.machineconfiguration: machineconfiguration.openshift.io
+  io.openshift.network: network.openshift.io
+  io.openshift.operator.controlplane: controlplane.operator.openshift.io
+  io.openshift.operator.imageregistry: imageregistry.operator.openshift.io
+  io.openshift.operator.ingress: ingress.operator.openshift.io
+  io.openshift.operator.network: network.operator.openshift.io
+  io.openshift.operator.samples: samples.operator.openshift.io
+  io.openshift.operator: operator.openshift.io
+  io.openshift.quota: quota.openshift.io
+  io.openshift.security: security.openshift.io
+  io.openshift.tuned: tuned.openshift.io
 apiMap:
 - name: Authorization APIs
   resources:
@@ -226,6 +293,11 @@ apiMap:
     version: v1
     plural: consolenotifications
     namespaced: false
+  - kind: ConsolePlugin
+    group: console.openshift.io
+    version: v1alpha1
+    plural: consoleplugins
+    namespaced: false
   - kind: ConsoleQuickStart
     group: console.openshift.io
     version: v1
@@ -344,6 +416,11 @@ apiMap:
     namespaced: true
 - name: Metadata APIs
   resources:
+  - kind: APIRequestCount
+    group: apiserver.openshift.io
+    version: v1
+    plural: apirequestcounts
+    namespaced: false
   - kind: Binding
     group: core
     version: v1
@@ -440,14 +517,19 @@ apiMap:
     namespaced: true
   - kind: EndpointSlice
     group: discovery.k8s.io
-    version: v1beta1
+    version: v1
     plural: endpointslices
     namespaced: true
   - kind: EgressNetworkPolicy
     group: network.openshift.io
     version: v1
     plural: egressnetworkpolicies
     namespaced: true
+  - kind: EgressRouter
+    group: network.operator.openshift.io
+    version: v1
+    plural: egressrouters
+    namespaced: true
   - kind: HostSubnet
     group: network.openshift.io
     version: v1
@@ -542,6 +624,12 @@ apiMap:
     version: v1
     plural: oauthclients
     namespaced: false
+# Not in OpenAPI spec JSON
+#  - kind: TokenReview
+#    group: oauth.openshift.io
+#    version: v1
+#    plural: tokenreviews
+#    namespaced: false
   - kind: UserOAuthAccessToken
     group: oauth.openshift.io
     version: v1
@@ -715,7 +803,7 @@ apiMap:
   resources:
   - kind: PodDisruptionBudget
     group: policy
-    version: v1beta1
+    version: v1
     plural: poddisruptionbudgets
     namespaced: true
 # https://bugzilla.redhat.com/show_bug.cgi?id=1875493
@@ -811,7 +899,7 @@ apiMap:
     namespaced: false
   - kind: FlowSchema
     group: flowcontrol.apiserver.k8s.io
-    version: v1alpha1
+    version: v1beta1
     plural: flowschemas
     namespaced: false
   - kind: LimitRange
@@ -826,7 +914,7 @@ apiMap:
     namespaced: false
   - kind: PriorityLevelConfiguration
     group: flowcontrol.apiserver.k8s.io
-    version: v1alpha1
+    version: v1beta1
     plural: prioritylevelconfigurations
     namespaced: false
   - kind: ResourceQuota
@@ -899,6 +987,11 @@ apiMap:
     version: v1
     plural: csinodes
     namespaced: false
+  - kind: CSIStorageCapacity
+    group: storage.k8s.io
+    version: v1beta1
+    plural: csistoragecapacities
+    namespaced: true
   - kind: PersistentVolumeClaim
     group: core
     version: v1

rest_api/authorization_apis/authorization-apis-index.adoc

@@ -9,87 +9,120 @@ toc::[]
 == LocalResourceAccessReview [authorization.openshift.io/v1]
 
 Description::
-  LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace
++
+--
+LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace
+--
 
 Type::
   `object`
 
 == LocalSubjectAccessReview [authorization.openshift.io/v1]
 
 Description::
-  LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace
++
+--
+LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace
+--
 
 Type::
   `object`
 
 == ResourceAccessReview [authorization.openshift.io/v1]
 
 Description::
-  ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec
++
+--
+ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec
+--
 
 Type::
   `object`
 
 == SelfSubjectRulesReview [authorization.openshift.io/v1]
 
 Description::
-  SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace
++
+--
+SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace
+--
 
 Type::
   `object`
 
 == SubjectAccessReview [authorization.openshift.io/v1]
 
 Description::
-  SubjectAccessReview is an object for requesting information about whether a user or group can perform an action
++
+--
+SubjectAccessReview is an object for requesting information about whether a user or group can perform an action
+--
 
 Type::
   `object`
 
 == SubjectRulesReview [authorization.openshift.io/v1]
 
 Description::
-  SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace
++
+--
+SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace
+--
 
 Type::
   `object`
 
 == TokenReview [authentication.k8s.io/v1]
 
 Description::
-  TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.
++
+--
+TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.
+--
 
 Type::
   `object`
 
 == LocalSubjectAccessReview [authorization.k8s.io/v1]
 
 Description::
-  LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
++
+--
+LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
+--
 
 Type::
   `object`
 
 == SelfSubjectAccessReview [authorization.k8s.io/v1]
 
 Description::
-  SelfSubjectAccessReview checks whether or the current user can perform an action.  Not filling in a spec.namespace means "in all namespaces".  Self is a special case, because users should always be able to check whether they can perform an action
++
+--
+SelfSubjectAccessReview checks whether or the current user can perform an action.  Not filling in a spec.namespace means "in all namespaces".  Self is a special case, because users should always be able to check whether they can perform an action
+--
 
 Type::
   `object`
 
 == SelfSubjectRulesReview [authorization.k8s.io/v1]
 
 Description::
-  SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.
++
+--
+SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.
+--
 
 Type::
   `object`
 
 == SubjectAccessReview [authorization.k8s.io/v1]
 
 Description::
-  SubjectAccessReview checks whether or not a user or group can perform an action.
++
+--
+SubjectAccessReview checks whether or not a user or group can perform an action.
+--
 
 Type::
   `object`