summaryrefslogtreecommitdiff
path: root/docs/play_kube_support.md
blob: cf983bc04203a64253c832706828f08978ad853d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
# Podman Play Kube Support

This document outlines the kube yaml fields that are currently supported by the **podman play kube** command.

Note: **N/A** means that the option cannot be supported in a single-node Podman environment.

## Pod Fields

| Field                                             | Support |
|---------------------------------------------------|---------|
| containers                                        | ✅      |
| initContainers                                    | ✅      |
| imagePullSecrets                                  |         |
| enableServiceLinks                                |         |
| os<nolink>.name                                   |         |
| volumes                                           |         |
| nodeSelector                                      | N/A     |
| nodeName                                          | N/A     |
| affinity.nodeAffinity                             | N/A     |
| affinity.podAffinity                              | N/A     |
| affinity.podAntiAffinity                          | N/A     |
| tolerations.key                                   | N/A     |
| tolerations.operator                              | N/A     |
| tolerations.effect                                | N/A     |
| tolerations.tolerationSeconds                     | N/A     |
| schedulerName                                     | N/A     |
| runtimeClassName                                  |         |
| priorityClassName                                 |         |
| priority                                          |         |
| topologySpreadConstraints.maxSkew                 | N/A     |
| topologySpreadConstraints.topologyKey             | N/A     |
| topologySpreadConstraints.whenUnsatisfiable       | N/A     |
| topologySpreadConstraints.labelSelector           | N/A     |
| topologySpreadConstraints.minDomains              | N/A     |
| restartPolicy                                     | ✅      |
| terminationGracePeriod                            |         |
| activeDeadlineSeconds                             |         |
| readinessGates.conditionType                      |         |
| hostname                                          | ✅      |
| setHostnameAsFQDN                                 |         |
| subdomain                                         |         |
| hostAliases.hostnames                             | ✅      |
| hostAliases.ip                                    | ✅      |
| dnsConfig.nameservers                             | ✅      |
| dnsConfig<nolink>.options.name                    | ✅      |
| dnsConfig.options.value                           | ✅      |
| dnsConfig.searches                                | ✅      |
| dnsPolicy                                         |         |
| hostNetwork                                       | ✅      |
| hostPID                                           |         |
| hostIPC                                           |         |
| shareProcessNamespace                             | ✅      |
| serviceAccountName                                |         |
| automountServiceAccountToken                      |         |
| securityContext.runAsUser                         |         |
| securityContext.runAsNonRoot                      |         |
| securityContext.runAsGroup                        |         |
| securityContext.supplementalGroups                |         |
| securityContext.fsGroup                           |         |
| securityContext.fsGroupChangePolicy               |         |
| securityContext.seccompProfile.type               |         |
| securityContext.seccompProfile.localhostProfile   |         |
| securityContext.seLinuxOptions.level              |         |
| securityContext.seLinuxOptions.role               |         |
| securityContext.seLinuxOptions.type               |         |
| securityContext.seLinuxOptions.user               |         |
| securityContext<nolink>.sysctls.name              |         |
| securityContext.sysctls.value                     |         |
| securityContext.windowsOptions.gmsaCredentialSpec |         |
| securityContext.windowsOptions.hostProcess        |         |
| securityContext.windowsOptions.runAsUserName      |         |

## Container Fields

| Field                                             | Support |
|---------------------------------------------------|---------|
| name                                              | ✅      |
| image                                             | ✅      |
| imagePullPolicy                                   | ✅      |
| command                                           | ✅      |
| args                                              | ✅      |
| workingDir                                        | ✅      |
| ports.containerPort                               | ✅      |
| ports.hostIP                                      | ✅      |
| ports.hostPort                                    | ✅      |
| ports<nolink>.name                                | ✅      |
| ports.protocol                                    | ✅      |
| env<nolink>.name                                  | ✅      |
| env.value                                         | ✅      |
| env.valueFrom.configMapKeyRef.key                 | ✅      |
| env<nolink>.valueFrom.configMapKeyRef.name        | ✅      |
| env.valueFrom.configMapKeyRef.optional            | ✅      |
| env.valueFrom.fieldRef                            | ✅      |
| env.valueFrom.resourceFieldRef                    | ✅      |
| env.valueFrom.secretKeyRef.key                    | ✅      |
| env<nolink>.valueFrom.secretKeyRef.name           | ✅      |
| env.valueFrom.secretKeyRef.optional               | ✅      |
| envFrom<nolink>.configMapRef.name                 | ✅      |
| envFrom.configMapRef.optional                     | ✅      |
| envFrom.prefix                                    |         |
| envFrom<nolink>.secretRef.name                    | ✅      |
| envFrom.secretRef.optional                        | ✅      |
| volumeMounts.mountPath                            | ✅      |
| volumeMounts<nolink>.name                         | ✅      |
| volumeMounts.mountPropagation                     |         |
| volumeMounts.readOnly                             | ✅      |
| volumeMounts.subPath                              |         |
| volumeMounts.subPathExpr                          |         |
| volumeDevices.devicePath                          |         |
| volumeDevices<nolink>.name                        |         |
| resources.limits                                  | ✅      |
| resources.requests                                | ✅      |
| lifecycle.postStart                               |         |
| lifecycle.preStop                                 |         |
| terminationMessagePath                            |         |
| terminationMessagePolicy                          |         |
| livenessProbe                                     | ✅      |
| readinessProbe                                    |         |
| startupProbe                                      |         |
| securityContext.runAsUser                         | ✅      |
| securityContext.runAsNonRoot                      |         |
| securityContext.runAsGroup                        | ✅      |
| securityContext.readOnlyRootFilesystem            | ✅      |
| securityContext.procMount                         |         |
| securityContext.privileged                        | ✅      |
| securityContext.allowPrivilegeEscalation          | ✅      |
| securityContext.capabilities.add                  | ✅      |
| securityContext.capabilities.drop                 | ✅      |
| securityContext.seccompProfile.type               |         |
| securityContext.seccompProfile.localhostProfile   |         |
| securityContext.seLinuxOptions.level              | ✅      |
| securityContext.seLinuxOptions.role               | ✅      |
| securityContext.seLinuxOptions.type               | ✅      |
| securityContext.seLinuxOptions.user               | ✅      |
| securityContext.windowsOptions.gmsaCredentialSpec |         |
| securityContext.windowsOptions.hostProcess        |         |
| securityContext.windowsOptions.runAsUserName      |         |
| stdin                                             |         |
| stdinOnce                                         |         |
| tty                                               |         |

## PersistentVolumeClaim Fields

| Field              | Support |
|--------------------|---------|
| volumeName         |         |
| storageClassName   | ✅      |
| volumeMode         |         |
| accessModes        | ✅      |
| selector           |         |
| resources.limits   |         |
| resources.requests | ✅      |