|
4260 | 4260 | "smithy.api#documentation": "<p>When this parameter is <code>true</code>, the container is given elevated permissions on the\n host container instance. The level of permissions are similar to the <code>root</code> user\n permissions. The default value is <code>false</code>. This parameter maps to\n <code>privileged</code> policy in the <a href=\"https://kubernetes.io/docs/concepts/security/pod-security-policy/#privileged\">Privileged\n pod security policies</a> in the <i>Kubernetes documentation</i>.</p>"
|
4261 | 4261 | }
|
4262 | 4262 | },
|
| 4263 | + "allowPrivilegeEscalation": { |
| 4264 | + "target": "com.amazonaws.batch#Boolean", |
| 4265 | + "traits": { |
| 4266 | + "smithy.api#documentation": "<p>Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is <code>false</code>.</p>" |
| 4267 | + } |
| 4268 | + }, |
4263 | 4269 | "readOnlyRootFilesystem": {
|
4264 | 4270 | "target": "com.amazonaws.batch#Boolean",
|
4265 | 4271 | "traits": {
|
|
4402 | 4408 | "smithy.api#documentation": "<p>The DNS policy for the pod. The default value is <code>ClusterFirst</code>. If the\n <code>hostNetwork</code> parameter is not specified, the default is\n <code>ClusterFirstWithHostNet</code>. <code>ClusterFirst</code> indicates that any DNS query\n that does not match the configured cluster domain suffix is forwarded to the upstream nameserver\n inherited from the node. For more information, see <a href=\"https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy\">Pod's DNS policy</a> in the <i>Kubernetes documentation</i>.</p>\n <p>Valid values: <code>Default</code> | <code>ClusterFirst</code> |\n <code>ClusterFirstWithHostNet</code>\n </p>"
|
4403 | 4409 | }
|
4404 | 4410 | },
|
| 4411 | + "imagePullSecrets": { |
| 4412 | + "target": "com.amazonaws.batch#ImagePullSecrets", |
| 4413 | + "traits": { |
| 4414 | + "smithy.api#documentation": "<p>References a Kubernetes secret resource. This object must start and end with an alphanumeric character, is required to be lowercase, can include periods (.) and hyphens (-), and can't contain more than 253 characters.</p>\n <p>\n <code>ImagePullSecret$name</code> is required when this object is used.</p>" |
| 4415 | + } |
| 4416 | + }, |
4405 | 4417 | "containers": {
|
4406 | 4418 | "target": "com.amazonaws.batch#EksContainers",
|
4407 | 4419 | "traits": {
|
|
4458 | 4470 | "smithy.api#documentation": "<p>The DNS policy for the pod. The default value is <code>ClusterFirst</code>. If the\n <code>hostNetwork</code> parameter is not specified, the default is\n <code>ClusterFirstWithHostNet</code>. <code>ClusterFirst</code> indicates that any DNS query\n that does not match the configured cluster domain suffix is forwarded to the upstream nameserver\n inherited from the node. If no value was specified for <code>dnsPolicy</code> in the <a href=\"https://docs.aws.amazon.com/batch/latest/APIReference/API_RegisterJobDefinition.html\">RegisterJobDefinition</a> API operation, then no value will be returned for\n <code>dnsPolicy</code> by either of <a href=\"https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobDefinitions.html\">DescribeJobDefinitions</a>\n or <a href=\"https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobs.html\">DescribeJobs</a> API operations. The pod spec setting will contain either\n <code>ClusterFirst</code> or <code>ClusterFirstWithHostNet</code>, depending on the value of the\n <code>hostNetwork</code> parameter. For more information, see <a href=\"https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy\">Pod's DNS policy</a> in the <i>Kubernetes documentation</i>.</p>\n <p>Valid values: <code>Default</code> | <code>ClusterFirst</code> |\n <code>ClusterFirstWithHostNet</code>\n </p>"
|
4459 | 4471 | }
|
4460 | 4472 | },
|
| 4473 | + "imagePullSecrets": { |
| 4474 | + "target": "com.amazonaws.batch#ImagePullSecrets", |
| 4475 | + "traits": { |
| 4476 | + "smithy.api#documentation": "<p>Displays the reference pointer to the Kubernetes secret resource.</p>" |
| 4477 | + } |
| 4478 | + }, |
4461 | 4479 | "containers": {
|
4462 | 4480 | "target": "com.amazonaws.batch#EksContainerDetails",
|
4463 | 4481 | "traits": {
|
|
4772 | 4790 | }
|
4773 | 4791 | }
|
4774 | 4792 | },
|
| 4793 | + "com.amazonaws.batch#ImagePullSecret": { |
| 4794 | + "type": "structure", |
| 4795 | + "members": { |
| 4796 | + "name": { |
| 4797 | + "target": "com.amazonaws.batch#String", |
| 4798 | + "traits": { |
| 4799 | + "smithy.api#clientOptional": {}, |
| 4800 | + "smithy.api#documentation": "<p>Provides a unique identifier for the <code>ImagePullSecret</code>. This object is required when <code>EksPodProperties$imagePullSecrets</code> is used.</p>", |
| 4801 | + "smithy.api#required": {} |
| 4802 | + } |
| 4803 | + } |
| 4804 | + }, |
| 4805 | + "traits": { |
| 4806 | + "smithy.api#documentation": "<p>References a Kubernetes configuration resource that holds a list of secrets. These secrets help to gain access to pull an image from a private registry.</p>" |
| 4807 | + } |
| 4808 | + }, |
| 4809 | + "com.amazonaws.batch#ImagePullSecrets": { |
| 4810 | + "type": "list", |
| 4811 | + "member": { |
| 4812 | + "target": "com.amazonaws.batch#ImagePullSecret" |
| 4813 | + } |
| 4814 | + }, |
4775 | 4815 | "com.amazonaws.batch#ImageType": {
|
4776 | 4816 | "type": "string",
|
4777 | 4817 | "traits": {
|
|
0 commit comments