Merge pull request #60049 from jboxman-rh/try-413

Refresh OpenShift 4.13 REST API resources

Author: kalexand-rh

rest_api/config_apis/infrastructure-config-openshift-io-v1.adoc

@@ -315,37 +315,10 @@ Type::
 |===
 | Property | Type | Description
 
-| `cloudControllerManager`
-| `object`
-| CloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI)
-
 | `platformName`
 | `string`
 | PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.
 
-|===
-=== .spec.platformSpec.external.cloudControllerManager
-Description::
-+
---
-CloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI)
---
-
-Type::
-  `object`
-
-
-
-
-[cols="1,1,1",options="header"]
-|===
-| Property | Type | Description
-
-| `state`
-| `string`
-| state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager 
- When set to "External", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to "None", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.
-
 |===
 === .spec.platformSpec.gcp
 Description::
@@ -1616,6 +1589,10 @@ Type::
 | `string`
 | region holds the default Power VS region for new Power VS resources created by the cluster.
 
+| `resourceGroup`
+| `string`
+| resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.
+
 | `serviceEndpoints`
 | `array`
 | serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.

rest_api/monitoring_apis/alertmanager-monitoring-coreos-com-v1.adoc

@@ -161,7 +161,7 @@ Type::
 
 | `initContainers`
 | `array`
-| InitContainers allows adding initContainers to the pod definition. Those can be used to e.g. fetch secrets for injection into the Alertmanager configuration from external sources. Any errors during the execution of an initContainer will lead to a restart of the Pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ Using initContainers for any use case other then secret fetching is entirely outside the scope of what the maintainers will support and by doing so, you accept that this behaviour may break at any time without notice.
+| InitContainers allows adding initContainers to the pod definition. Those can be used to e.g. fetch secrets for injection into the Alertmanager configuration from external sources. Any errors during the execution of an initContainer will lead to a restart of the Pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ InitContainers described here modify an operator generated init containers if they share the same name and modifications are done via a strategic merge patch. The current init container name is: `init-config-reloader`. Overriding init containers is entirely outside the scope of what the maintainers will support and by doing so, you accept that this behaviour may break at any time without notice.
 
 | `initContainers[]`
 | `object`
@@ -197,7 +197,7 @@ Type::
 
 | `portName`
 | `string`
-| Port name used for the pods and governing service. This defaults to web
+| Port name used for the pods and governing service. Defaults to `web`.
 
 | `priorityClassName`
 | `string`
@@ -4546,7 +4546,7 @@ Type::
 Description::
 +
 --
-InitContainers allows adding initContainers to the pod definition. Those can be used to e.g. fetch secrets for injection into the Alertmanager configuration from external sources. Any errors during the execution of an initContainer will lead to a restart of the Pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ Using initContainers for any use case other then secret fetching is entirely outside the scope of what the maintainers will support and by doing so, you accept that this behaviour may break at any time without notice.
+InitContainers allows adding initContainers to the pod definition. Those can be used to e.g. fetch secrets for injection into the Alertmanager configuration from external sources. Any errors during the execution of an initContainer will lead to a restart of the Pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ InitContainers described here modify an operator generated init containers if they share the same name and modifications are done via a strategic merge patch. The current init container name is: `init-config-reloader`. Overriding init containers is entirely outside the scope of what the maintainers will support and by doing so, you accept that this behaviour may break at any time without notice.
 --
 
 Type::

rest_api/monitoring_apis/prometheus-monitoring-coreos-com-v1.adoc

@@ -282,7 +282,7 @@ Type::
 
 | `portName`
 | `string`
-| Port name used for the pods and governing service. This defaults to web
+| Port name used for the pods and governing service. Defaults to `web`.
 
 | `priorityClassName`
 | `string`
@@ -417,8 +417,7 @@ Type::
 | `thanos`
 | `object`
 | Thanos configuration allows configuring various aspects of a Prometheus server in a Thanos environment. 
- This section is experimental, it may change significantly without deprecation notice in any release. 
- This is experimental and may change significantly without backward compatibility in any release.
+ This section is experimental, it may change significantly without deprecation notice in any release.
 
 | `tolerations`
 | `array`
@@ -10321,8 +10320,7 @@ Description::
 +
 --
 Thanos configuration allows configuring various aspects of a Prometheus server in a Thanos environment. 
- This section is experimental, it may change significantly without deprecation notice in any release. 
- This is experimental and may change significantly without backward compatibility in any release.
+ This section is experimental, it may change significantly without deprecation notice in any release.
 --
 
 Type::
@@ -10347,6 +10345,10 @@ Type::
 | `string`
 | Thanos base image if other than default. Deprecated: use 'image' instead
 
+| `blockSize`
+| `string`
+| BlockDuration controls the size of TSDB blocks produced by Prometheus. Default is 2h to match the upstream Prometheus defaults. WARNING: Changing the block duration can impact the performance and efficiency of the entire Prometheus/Thanos stack due to how it interacts with memory and Thanos compactors. It is recommended to keep this value set to a multiple of 120 times your longest scrape or rule interval. For example, 30s * 120 = 1h.
+
 | `grpcListenLocal`
 | `boolean`
 | If true, the Thanos sidecar listens on the loopback interface for the gRPC endpoints. It has no effect if `listenLocal` is true.

rest_api/monitoring_apis/thanosruler-monitoring-coreos-com-v1.adoc

@@ -207,7 +207,7 @@ Type::
 
 | `portName`
 | `string`
-| Port name used for the pods and governing service. This defaults to web
+| Port name used for the pods and governing service. Defaults to `web`.
 
 | `priorityClassName`
 | `string`

rest_api/network_apis/egressfirewall-k8s-ovn-org-v1.adoc

@@ -187,11 +187,91 @@ Type::
 
 | `cidrSelector`
 | `string`
-| cidrSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName must be unset.
+| cidrSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName and nodeSelector must be unset.
 
 | `dnsName`
 | `string`
-| dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector must be unset.
+| dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector and nodeSelector must be unset.
+
+| `nodeSelector`
+| `object`
+| nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset.
+
+|===
+=== .spec.egress[].to.nodeSelector
+Description::
++
+--
+nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset.
+--
+
+Type::
+  `object`
+
+
+
+
+[cols="1,1,1",options="header"]
+|===
+| Property | Type | Description
+
+| `matchExpressions`
+| `array`
+| matchExpressions is a list of label selector requirements. The requirements are ANDed.
+
+| `matchExpressions[]`
+| `object`
+| A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
+
+| `matchLabels`
+| `object (string)`
+| matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
+
+|===
+=== .spec.egress[].to.nodeSelector.matchExpressions
+Description::
++
+--
+matchExpressions is a list of label selector requirements. The requirements are ANDed.
+--
+
+Type::
+  `array`
+
+
+
+
+=== .spec.egress[].to.nodeSelector.matchExpressions[]
+Description::
++
+--
+A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
+--
+
+Type::
+  `object`
+
+Required::
+  - `key`
+  - `operator`
+
+
+
+[cols="1,1,1",options="header"]
+|===
+| Property | Type | Description
+
+| `key`
+| `string`
+| key is the label key that the selector applies to.
+
+| `operator`
+| `string`
+| operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+
+| `values`
+| `array (string)`
+| values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
 
 |===
 === .status

rest_api/objects/index.adoc

@@ -3310,7 +3310,7 @@ Type::
 
 This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
 
-This field is immutable.
+This field is immutable. It can only be set for containers.
 
 | `claims[]`
 | `object`
@@ -3333,7 +3333,7 @@ Claims lists the names of resources, defined in spec.resourceClaims, that are us
 
 This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
 
-This field is immutable.
+This field is immutable. It can only be set for containers.
 --
 
 Type::
@@ -3981,6 +3981,14 @@ Type::
 |===
 | Property | Type | Description
 
+| `claims`
+| xref:../objects/index.adoc#io.k8s.api.core.v1.ResourceClaim[`array (ResourceClaim)`]
+| Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
+
+This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
+
+This field is immutable.
+
 | `limits`
 | xref:../objects/index.adoc#io.k8s.apimachinery.pkg.api.resource.Quantity[`object (Quantity)`]
 | Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

rest_api/operator_apis/cloudcredential-operator-openshift-io-v1.adoc

@@ -68,7 +68,7 @@ Type::
 
 | `credentialsMode`
 | `string`
-| CredentialsMode allows informing CCO that it should not attempt to dynamically determine the root cloud credentials capabilities, and it should just run in the specified mode. It also allows putting the operator into "manual" mode if desired. Leaving the field in default mode runs CCO so that the cluster's cloud credentials will be dynamically probed for capabilities (on supported clouds/platforms). Supported modes:   AWS/Azure/GCP: "" (Default), "Mint", "Passthrough", "Manual"   Others: Do not set value as other platforms only support running in "Passthrough"
+| CredentialsMode allows informing CCO that it should not attempt to dynamically determine the root cloud credentials capabilities, and it should just run in the specified mode. It also allows putting the operator into "manual" mode if desired. Leaving the field in default mode runs CCO so that the cluster's cloud credentials will be dynamically probed for capabilities (on supported clouds/platforms). Supported modes: AWS/Azure/GCP: "" (Default), "Mint", "Passthrough", "Manual" Others: Do not set value as other platforms only support running in "Passthrough"
 
 | `logLevel`
 | `string`