> This page is for Self-Hosted, version v3.0 (default). > For other versions, use one of these documentation indexes: > - v3.0 (default): https://docs.nvidia.com/run-ai/self-hosted/v3.0/llms.txt > - v2.26: https://docs.nvidia.com/run-ai/self-hosted/v2.26/llms.txt > - v2.25: https://docs.nvidia.com/run-ai/self-hosted/v2.25/llms.txt > - v2.24: https://docs.nvidia.com/run-ai/self-hosted/v2.24/llms.txt > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.nvidia.com/run-ai/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.nvidia.com/run-ai/_mcp/server. # Update an inference policy. PATCH http://localhost:8080/api/v2/policy/inferences Content-Type: application/json Use to apply changes to an inference policy for a given organizational unit. Reference: https://docs.nvidia.com/run-ai/self-hosted/reference/rest-api/endpoints/policies/policy/update-inference-policy-v-2 ## Authentication - `Authorization` header (bearer token, required) — Bearer authentication ## Request ### Query parameters - `validateOnly` (boolean, optional) — Validate the given policy payload without applying it - `approveClusterDeletion` (boolean, optional) — Required when modifying or deleting a policy if the tenant includes one or more clusters running version 2.20 or earlier. In such cases, the platform must delete the policy from the affected clusters. This flag indicates that the administrator approves this deletion. ### Body (application/json) This endpoint expects an InferencePolicyChangeRequestV2. - `meta` (PolicyCreationFields, optional) - `policy` (InferencePolicyDefaultsAndRulesV2, optional) - `reset` (list of string, optional) — set of fields in jsonpath format that is requested to clear their policy (default and rules) ## Response ### 200 Policy applied. - `meta` (PolicyMeta, optional) - `policy` (InferencePolicyDefaultsAndRulesV2, optional) - `effective` (InferencePolicyDefaultsAndRulesV2, optional) - `effectiveUpdatedAt` (datetime, optional) — The time at which an event occurred. e.g. the time an effective policy has been updated ## Errors ### 400 Bad Request Error Bad request. - `code` (integer, required) - `message` (string, required) - `details` (string, optional) ### 401 Unauthorized Error Unauthorized - `code` (integer, required) - `message` (string, required) - `details` (string, optional) ### 403 Forbidden Error Forbidden - `code` (integer, required) - `message` (string, required) - `details` (string, optional) ### 503 Service Unavailable Error unexpected error - `code` (integer, required) - `message` (string, required) - `details` (string, optional) ## Types ### PolicyCreationFields - `scope` (enum, required) - Allowed values: `system`, `tenant`, `cluster`, `department`, `project` - `name` (string, required) — A chosen name for the policy. - `projectId` (integer, optional) — The id of the project. - `departmentId` (string, optional) — The id of the department. - `clusterId` (string, optional) — The id of the cluster. ### InferencePolicyDefaultsAndRulesV2 - `defaults` (InferencePolicyDefaultsV2, optional, nullable) - `rules` (InferencePolicyRulesV2, optional, nullable) - `imposedAssets` (list of string, optional) — a list of datasource assets to import into the policy. these datasources will be included in any workload that will be created in the scope of the policy. - `status` (PolicyValidationStatus, optional) ### PolicyMeta - `id` (string, required) — The unique id of the policy. - `createdBy` (string, required) — The user who created the policy. - `createdAt` (datetime, required) — The time at which the policy wes created - `updatedBy` (string, required) — The user who updated the policy. - `updatedAt` (datetime, required) — The time at which the policy has been updated - `scope` (enum, required) - Allowed values: `system`, `tenant`, `cluster`, `department`, `project` - `name` (string, required) — A chosen name for the policy. - `tenantId` (integer, optional) — The id of the tenant. - `clusterId` (string, optional) — The id of the cluster. - `projectId` (integer, optional) — The id of the project. - `departmentId` (string, optional) — The id of the department. ### InferencePolicyDefaultsV2 - `annotations` (AnnotationsDefaults, optional) - `args` (string, optional) — Arguments to the command that the container running the workload executes. - `category` (string, optional) — Specify the workload category assigned to the workload. Categories are used to classify and monitor different types of workloads within the NVIDIA Run:ai platform. - `command` (string, optional) — A command to the server as the entry point of the container running the workload. - `compute` (SupersetDefaultsAllOfCompute, optional) - `createHomeDir` (boolean, optional) — When set to `true`, creates a home directory for the container. - `environmentVariables` (EnvironmentVariablesDefaults, optional) - `exposedUrls` (ExposedUrlsDefaults, optional) - `image` (string, optional) — Docker image name. For more information, see [Images](https://kubernetes.io/docs/concepts/containers/images). The image name is mandatory for creating a workload. - `imagePullPolicy` (enum, optional) — Image pull policy. Defaults to `Always` if `:latest` tag is specified, otherwise it is `IfNotPresent`. - Allowed values: `Always`, `Never`, `IfNotPresent` - `imagePullSecrets` (ImagePullSecretsDefaults, optional) - `labels` (LabelsDefaults, optional) - `nodeAffinityRequired` (NodeAffinityRequired, optional) — If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. - `nodePools` (list of string, optional) — A prioritized list of node pools for the scheduler to run the workload on. The scheduler will always try to use the first node pool before moving to the next one if the first is not available. - `nodeType` (string, optional) — Deprecated: use a workload policy node selector to target node types instead. Nodes (machines), or a group of nodes on which the workload will run. To use this feature, your Administrator will need to label nodes. For more information, see [Group Nodes](https://docs.run.ai/latest/admin/researcher-setup/limit-to-node-group). When using this flag with with Project-based affinity, it refines the list of allowable node groups set in the Project. For more information, see [Projects](https://docshub.run.ai/guides/platform-management/aiinitiatives/organization/projects). - `podAffinity` (PodAffinity, optional) — Pod affinity scheduling rules (e.g. co-locate this workload in the same node, zone, etc. as some other workloads). - `ports` (PortsDefaults, optional) - `preemptibility` (enum, optional) — Specifies whether the workload can be preempted by higher-priority workloads. Valid values are preemptible, semi-preemptible and non-preemptible. If explicitly set, this value takes precedence. If not set, the system derives the preemptibility from the priorityClassName field, ensuring backward compatibility. Each workload type has a default preemptibility. To view the default preemptibility for each workload type, use the GET /workload-types endpoint. - Allowed values: `preemptible`, `semi-preemptible`, `non-preemptible` - `priorityClass` (string, optional) — Specifies the priority class for the workload, which determines its scheduling behavior. Valid values are: very-low, low, medium-low, medium, medium-high, high, and very-high. Each workload type has a default priority. To view the default priority for each workload type, use the GET /workload-types endpoint. Once you change the priority from the default value defined for that workload type, the preemptibility field is not automatically updated. Make sure to set the desired preemptibility value. - `probes` (Probes, optional) — Probes are used to determine if the container is healthy and ready to accept traffic. - `relatedUrls` (RelatedUrlsDefaults, optional) - `security` (InferencePolicyDefaultsV2Security, optional, nullable) - `servingPort` (ServingPort, optional) — A port for accessing the inference service - `storage` (InferencePolicyDefaultsV2Storage, optional, nullable) - `tolerations` (TolerationsDefaults, optional) - `workingDir` (string, optional) — Container's working directory. If not specified, the container runtime default will be used. This may be configured in the container image. - `autoscaling` (AutoScaling, optional) - `servingConfiguration` (ServingConfiguration, optional) — The inference workload serving configuration. ### InferencePolicyRulesV2 - `annotations` (InstancesRules, optional) - `args` (StringRules, optional) - `category` (StringRules, optional) - `command` (StringRules, optional) - `compute` (SupersetRulesAllOfCompute, optional) - `createHomeDir` (BooleanRules, optional) - `environmentVariables` (InstancesRules, optional) - `exposedUrls` (ExposedUrlsRules, optional) - `image` (StringRules, optional) - `imagePullPolicy` (ImagePullPolicyRules, optional) - `imagePullSecrets` (ImagePullSecretsRules, optional) - `labels` (InstancesRules, optional) - `nodeAffinityRequired` (ArbitraryRules, optional) - `nodePools` (ArrayRules, optional) - `nodeType` (StringRules, optional) - `podAffinity` (PodAffinityRules, optional) - `ports` (PortsRules, optional) - `preemptibility` (PreemptibilityRules, optional) - `priorityClass` (StringRules, optional) - `probes` (ProbesRules, optional) - `relatedUrls` (RelatedUrlsRules, optional) - `security` (InferencePolicyRulesV2Security, optional, nullable) - `servingPort` (ServingPortRules, optional) - `storage` (InferencePolicyRulesV2Storage, optional, nullable) - `tolerations` (TolerationsRules, optional) - `workingDir` (StringRules, optional) - `autoscaling` (AutoScalingRules, optional) - `servingConfiguration` (ServingConfigurationRules, optional) ### PolicyValidationStatus - `validation` (PolicyValidationStatusValidation, optional, nullable) ### AnnotationsDefaults - `instances` (list of Annotation, optional) — Set of annotations to populate into the container running the workload. ### SupersetDefaultsAllOfCompute - `cpuCoreLimit` (double, optional) — Limitations on the number of CPUs consumed by the workload (0.5, 1, .etc). The system guarantees that this workload will not be able to consume more than this amount of CPUs. - `cpuCoreRequest` (double, optional) — CPU units to allocate for the created workload (0.5, 1, .etc). The workload will receive at least this amount of CPU. Note that the workload will not be scheduled unless the system can guarantee this amount of CPUs to the workload. - `cpuMemoryLimit` (string, optional) — Limitations on the CPU memory to allocate for this workload (1G, 20M, .etc). The system guarantees that this workload will not be able to consume more than this amount of memory. The workload will receive an error when trying to allocate more memory than this limit. - `cpuMemoryRequest` (string, optional) — The amount of CPU memory to allocate for this workload (1G, 20M, .etc). The workload will receive at least this amount of memory. Note that the workload will not be scheduled unless the system can guarantee this amount of memory to the workload - `extendedResources` (ExtendedResourcesDefaults, optional) - `gpuDevicesRequest` (integer, optional) — Requested number of GPU devices. Currently if more than one device is requested, it is not possible to provide values for gpuMemory or gpuPortion. - `gpuMemoryLimit` (string, optional) — Limitation on the memory consumed by the workload, per GPU device. The system guarantees The gpuMemoryLimit must be no less than gpuMemoryRequest. - `gpuMemoryRequest` (string, optional) — Required if and only if gpuRequestType is memory. States the GPU memory to allocate for the created workload, per GPU device. Note that the workload will not be scheduled unless the system can guarantee this amount of GPU memory to the workload. - `gpuPortionLimit` (double, optional) — Limitations on the portion consumed by the workload, per GPU device. The system guarantees The gpuPotionLimit must be no less than the gpuPortionRequest. - `gpuPortionRequest` (double, optional) — Required if and only if gpuRequestType is portion. States the portion of the GPU to allocate for the created workload, per GPU device, between 0 and 1. The default is no allocated GPUs. - `gpuRequestType` (enum, optional) — Sets the unit type for GPU resources requests. Stated in terms of portion or memory. Sets the unit type for other GPU request fields. If `gpuDevicesRequest > 1`, only `portion` is supported. If `gpuDeviceRequest = 1`, the request type can be stated as `portion` or `memory`. - Allowed values: `portion`, `memory` - `largeShmRequest` (boolean, optional) — A large /dev/shm device to mount into a container running the created workload. An shm is a shared file system mounted on RAM. ### EnvironmentVariablesDefaults - `instances` (list of EnvironmentVariable, optional) — Set of environment variables to populate into the container running the workload. ### ExposedUrlsDefaults - `attributes` (ExposedUrl, optional) — A URL for accessing the workload. - `instances` (list of ExposedUrl, optional) — Set of container ports that the workload exposes via URLs. ### ImagePullSecretsDefaults - `instances` (list of ImagePullSecret, optional) — A list of references to Kubernetes secrets in the same namespace used for pulling container images. ### LabelsDefaults - `instances` (list of Label, optional) — Set of labels to populate into the container running the workload. ### NodeAffinityRequired If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. - `nodeSelectorTerms` (list of NodeSelectorTerm, optional) — A list of node selector terms. The terms are ORed. ### PodAffinity Pod affinity scheduling rules (e.g. co-locate this workload in the same node, zone, etc. as some other workloads). - `type` (enum, optional) — The affinity type, required or preferred. (mandatory) - Allowed values: `Required`, `Preferred` - `key` (string, optional, nullable) — The label key to use. (mandatory) ### PortsDefaults - `attributes` (Port, optional) — A port for accessing the workload. - `instances` (list of Port, optional) — Set of container ports that the workload exposes. ### Probes Probes are used to determine if the container is healthy and ready to accept traffic. - `readiness` (Probe, optional) ### RelatedUrlsDefaults - `attributes` (RelatedUrl, optional) — A URL that is related to the workload. For example, a URL to an external server providing statistics or logging about the workload. - `instances` (list of RelatedUrl, optional) — Set of URLs that are related to the workload. ### InferencePolicyDefaultsV2Security - `capabilities` (list of enum, optional) — Add POSIX capabilities to running containers. Defaults to the default set of capabilities granted by the container runtime. - Allowed values: `AUDIT_CONTROL`, `AUDIT_READ`, `AUDIT_WRITE`, `BLOCK_SUSPEND`, `CHOWN`, `DAC_OVERRIDE`, `DAC_READ_SEARCH`, `FOWNER`, `FSETID`, `IPC_LOCK`, `IPC_OWNER`, `KILL`, `LEASE`, `LINUX_IMMUTABLE`, `MAC_ADMIN`, `MAC_OVERRIDE`, `MKNOD`, `NET_ADMIN`, `NET_BIND_SERVICE`, `NET_BROADCAST`, `NET_RAW`, `SETGID`, `SETFCAP`, `SETPCAP`, `SETUID`, `SYS_ADMIN`, `SYS_BOOT`, `SYS_CHROOT`, `SYS_MODULE`, `SYS_NICE`, `SYS_PACCT`, `SYS_PTRACE`, `SYS_RAWIO`, `SYS_RESOURCE`, `SYS_TIME`, `SYS_TTY_CONFIG`, `SYSLOG`, `WAKE_ALARM` - `hostIpc` (boolean, optional) — Whether to enable host IPC. Defaults to false. - `hostNetwork` (boolean, optional) — Whether to enable host networking. Default to false. - `readOnlyRootFilesystem` (boolean, optional) — If true, mounts the container's root filesystem as read-only. - `runAsGid` (long, optional) — The group id to run the entrypoint of the container which executes the workspace. Default to the value specified in the environment asset `runAsGid` field (optional). Use only when the source uid/gid of the environment asset is not `fromTheImage`, and `overrideUidGidInWorkspace` is enabled. - `runAsNonRoot` (boolean, optional) — Force the container to run as a non-root user. - `runAsUid` (long, optional) — The user id to run the entrypoint of the container which executes the workspace. Default to the value specified in the environment asset `runAsUid` field (optional). Use only when the source uid/gid of the environment asset is not `fromTheImage`, and `overrideUidGidInWorkspace` is enabled. - `seccompProfileType` (enum, optional) — Indicates which kind of seccomp profile will be applied to the container. The options are a. `RuntimeDefault` - the container runtime default profile should be used. b. `Unconfined` - no profile should be applied. c. `Localhost` is not yet supported by Run:ai. - Allowed values: `RuntimeDefault`, `Unconfined`, `Localhost` - `supplementalGroups` (string, optional) — Comma separated list of groups that the user running the container belongs to, in addition to the group indicated by runAsGid. Use only when the source uid/gid of the environment asset is not `fromTheImage`, and `overrideUidGidInWorkspace` is enabled. Using an empty string implies reverting the supplementary groups of the image. - `uidGidSource` (enum, optional) — Indicate the way to determine the user and group ids of the container. The options are a. `fromTheImage` - user and group ids are determined by the docker image that the container runs. this is the default option. b. `custom` - user and group ids can be specified in the environment asset and/or the workload creation request. c. `idpToken` - user and group IDs are automatically taken from the identity provider (IdP) token (available only in SSO-enabled installations). For more information, see [User Identity](/run-ai/self-hosted/documentation/installation-and-configuration/configuration/security/user-identity-in-containers). - Allowed values: `fromTheImage`, `fromIdpToken`, `custom` ### ServingPort A port for accessing the inference service - `authorizationType` (enum, optional) — Specifies who can send inference requests to the serving endpoint: Possible values: - `public`: No authorization is required. (Default) - `authenticatedUsers`: Any NVIDIA Run:ai authenticated user and service account can send requests. - `authorizedUsers`: Only users listed in the authorizedUsers field can send requests. - `authorizedGroups`: Only members of user groups listed in the authorizedGroups field can send requests. - `authorizedUsersOrGroups`: Requires either authorizedUsers or authorizedGroups to be provided; if neither is set, or if both are set, a mutual exclusion error is reported. Supported from cluster version 2.19. - Allowed values: `public`, `authenticatedUsers`, `authorizedUsers`, `authorizedGroups`, `authorizedUsersOrGroups` - `authorizedGroups` (list of string, optional) — List of groups that are allowed to access the URL. Note that authorizedUsers and authorizedGroups are mutually exclusive. - `authorizedUsers` (list of string, optional) — List of users or service accounts that are allowed to access the URL. Note that authorizedUsers and authorizedGroups are mutually exclusive. - `clusterLocalAccessOnly` (boolean, optional, nullable) — Configure the serving port URL to be available only on the cluster-local network, and not externally. Defaults to false - `container` (integer, optional, nullable) — The port that the container running the inference service exposes (mandatory). - `protocol` (enum, optional) — The protocol used by the port, defaults to http - Allowed values: `http`, `grpc` ### InferencePolicyDefaultsV2Storage - `configMapVolume` (ConfigMapsDefaults, optional) - `dataVolume` (DataVolumesDefaults, optional) - `emptyDirVolume` (EmptyDirsDefaults, optional) - `git` (GitsDefaults, optional) - `hostPath` (HostPathsDefaults, optional) - `nfs` (NfssDefaults, optional) - `pvc` (PvcsDefaults, optional) - `secretVolume` (SecretsDefaults, optional) ### TolerationsDefaults - `attributes` (Toleration, optional) — Toleration details. - `instances` (list of Toleration, optional) — Set of tolerations to apply to the workload. ### AutoScaling - `activationReplicas` (integer, optional, nullable) — The number of replicas to run when scaling-up from zero. Defaults to minReplicas, or to 1 if minReplicas is set to 0 - `concurrencyHardLimit` (integer, optional, nullable) — The maximum number of requests allowed to flow to a single replica at any time. 0 means no limit - `initialReplicas` (integer, optional, nullable) — The number of replicas to run when initializing the workload for the first time. Defaults to minReplicas, or to 1 if minReplicas is set to 0 - `maxReplicas` (integer, optional, nullable) — The maximum number of replicas for autoscaling. Defaults to minReplicas, or to 1 if minReplicas is set to 0 - `metric` (string, optional) — The metric to use for autoscaling. Mandatory if minReplicas \< maxReplicas, except for the special case where minReplicas is set to 0 and maxReplicas is set to 1, as in this case autoscaling decisions are made according to network activity rather than metrics. Use one of the built-in metrics of 'throughput', 'concurrency' or 'latency', or any other available custom metric. Only the 'throughput' and 'concurrency' metrics support scale-to-zero - `metricThreshold` (integer, optional, nullable) — The threshold to use with the specified metric for autoscaling. Mandatory if metric is specified - `metricThresholdPercentage` (float, optional, nullable) — The percentage of metric threshold value to use for autoscaling. Defaults to 70. Applicable only with the 'throughput' and 'concurrency' metrics - `minReplicas` (integer, optional, nullable) — The minimum number of replicas for autoscaling. Defaults to 1. Use 0 to allow scale-to-zero - `scaleDownDelaySeconds` (integer, optional, nullable) — The minimum amount of time (in seconds) that a replica will remain active after a scale-down decision - `scaleToZeroRetentionSeconds` (integer, optional, nullable) — The minimum amount of time (in seconds) that the last replica will remain active after a scale-to-zero decision. Defaults to 0. Available only if minReplicas is set to 0 - `initializationTimeoutSeconds` (integer, optional, nullable, deprecated) — Use `servingConfiguration.initializationTimeoutSeconds` instead. If this field is set, it will be ignored and the value under `servingConfiguration` will be used. The maximum amount of time (in seconds) to wait for the container to become ready. ### ServingConfiguration The inference workload serving configuration. - `initializationTimeoutSeconds` (integer, optional, nullable) — The maximum time (in seconds) allowed for a workload to initialize and become ready. If the workload does not start within this time, it will be moved to failed state. - `requestTimeoutSeconds` (integer, optional, nullable) — The maximum time (in seconds) allowed to process an end-user request. If no response is returned within this time, the request will be ignored.Supported from Cluster version 2.22 ### InstancesRules - `instances` (ItemRules, optional) ### StringRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of StringOption, optional, nullable) — Set of options that the value of the field must be chosen from. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### SupersetRulesAllOfCompute - `cpuCoreLimit` (NumberRules, optional) - `cpuCoreRequest` (NumberRules, optional) - `cpuMemoryLimit` (QuantityRules, optional) - `cpuMemoryRequest` (QuantityRules, optional) - `extendedResources` (ExtendedResourcesRules, optional) - `gpuDevicesRequest` (IntegerRules, optional) - `gpuMemoryLimit` (QuantityRules, optional) - `gpuMemoryRequest` (QuantityRules, optional) - `gpuPortionLimit` (NumberRules, optional) - `gpuPortionRequest` (NumberRules, optional) - `gpuRequestType` (GpuRequestRules, optional) - `largeShmRequest` (BooleanRules, optional) ### BooleanRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `required` (boolean, optional, nullable) — Whether the field is mandatory. default to false. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable. default to true ### ExposedUrlsRules - `attributes` (ExposedUrlRules, optional) — Rules for the attributed of exposedUrls - `instances` (ItemRules, optional) ### ImagePullPolicyRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of ImagePullPolicyOptionsOptionsItems, optional, nullable) — Limit the permitted values for imagePullPolicy to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ImagePullSecretsRules - `attributes` (ImagePullSecretsRulesAttributes, optional) — Rules for the attributes of imagePullSecrets - `instances` (ItemRules, optional) ### ArbitraryRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `required` (boolean, optional, nullable) — Whether this arbitrary object is mandatory. default to false. - `canEdit` (boolean, optional, nullable) — Whether the value of the field, as a whole, is editable. default to false. ### ArrayRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `required` (boolean, optional, nullable) — Whether this array is mandatory. Mandatory array must include at least one item. default to false. - `options` (list of StringOption, optional) — Set of options that the value of each item of the array must be chosen from. - `canEdit` (boolean, optional, nullable) — Whether the value of the array, as a whole, is editable. default to false. ### PodAffinityRules - `type` (PodAffinityTypeRules, optional) - `key` (StringRules, optional) ### PortsRules - `attributes` (PortRules, optional) — Rules for port attributes - `instances` (ItemRules, optional) ### PreemptibilityRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of PreemptibilityOptionsOptionsItems, optional, nullable) — Limit the permitted values for preemptibility to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ProbesRules - `readiness` (ProbeRules, optional) ### RelatedUrlsRules - `attributes` (RelatedUrlRules, optional) — Rules for the attributes of relatedUrls - `instances` (ItemRules, optional) ### InferencePolicyRulesV2Security - `capabilities` (ArrayRules, optional) - `hostIpc` (BooleanRules, optional) - `hostNetwork` (BooleanRules, optional) - `readOnlyRootFilesystem` (BooleanRules, optional) - `runAsGid` (IntegerRulesOptional, optional) - `runAsNonRoot` (BooleanRules, optional) - `runAsUid` (IntegerRulesOptional, optional) - `seccompProfileType` (SeccompProfileTypeRules, optional) - `supplementalGroups` (StringRules, optional) - `uidGidSource` (UidGidSourceRules, optional) ### ServingPortRules - `container` (IntegerRules, optional) - `protocol` (ServingPortProtocolRules, optional) - `authorizationType` (ServingPortAuthorizationTypeRules, optional) - `authorizedUsers` (ArrayRules, optional) - `authorizedGroups` (ArrayRules, optional) - `clusterLocalAccessOnly` (BooleanRules, optional) ### InferencePolicyRulesV2Storage - `configMapVolume` (ConfigMapsRules, optional) - `dataVolume` (DataVolumesRules, optional) - `emptyDirVolume` (EmptyDirsRules, optional) - `git` (GitsRules, optional) - `hostPath` (HostPathsRules, optional) - `nfs` (NfssRules, optional) - `pvc` (PvcsRules, optional) - `secretVolume` (SecretsRules, optional) ### TolerationsRules - `attributes` (TolerationRules, optional) — Toleration details. - `instances` (ItemRules, optional) ### AutoScalingRules - `metricThresholdPercentage` (NumberRules, optional) - `minReplicas` (IntegerRules, optional) - `maxReplicas` (IntegerRules, optional) - `initialReplicas` (IntegerRules, optional) - `activationReplicas` (IntegerRules, optional) - `metric` (AutoScalingMetricRules, optional) - `metricThreshold` (IntegerRules, optional) - `concurrencyHardLimit` (IntegerRules, optional) - `scaleToZeroRetentionSeconds` (IntegerRules, optional) - `scaleDownDelaySeconds` (IntegerRules, optional) - `initializationTimeoutSeconds` (IntegerRules, optional) ### ServingConfigurationRules - `initializationTimeoutSeconds` (IntegerRules, optional) - `requestTimeoutSeconds` (IntegerRules, optional) ### PolicyValidationStatusValidation - `errorMessage` (string, optional) — In case validation failed, holds the error message explaining the issue ### Annotation Annotation details to be populated into the container. - `name` (string, optional, nullable) — The name of the annotation (mandatory) - `value` (string, optional, nullable) — The value of the annotation. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the annotation is defined in defaults of the policy, and you wish to exclude it from the workload. ### ExtendedResourcesDefaults - `attributes` (ExtendedResource, optional) — Quantity of an extended resource. - `instances` (list of ExtendedResource, optional) — Extended resources and their quantity. ### EnvironmentVariable Details of an environment variable which is populated into the container. - `name` (string, optional, nullable) — The name of the environment variable. (mandatory) - `value` (string, optional, nullable) — The value of the environment variable. (mutually exclusive with secret, userCredential, configMap and podFieldRef) - `secret` (EnvironmentVariableSecret, optional) — Details of the secret and key use to populate the environment variable - `configMap` (EnvironmentVariableConfigMap, optional) — Details of the configMap and key use to populate the environment variable - `podFieldRef` (EnvironmentVariablePodFieldReference, optional) — Details of the field-reference and key use to populate the environment variable - `userCredential` (EnvironmentVariableUserCredential, optional) — Defines a reference to a user-created credential and a specific key within that credential whose value will populate the environment variable. User credentials can only be accessed by the user who created them. - `exclude` (boolean, optional, nullable) — Use 'true' in case the environment variable is defined in defaults of the policy, and you wish to exclude it from the workload. - `description` (string, optional, nullable) — Description of the environment variable. ### ExposedUrl A URL for accessing the workload. - `container` (integer, optional, nullable) — The port that the container running the workload exposes. (mandatory) - `url` (string, optional) — The URL for connecting to the container port. If not specified, the URL will be auto-generated by the system. - `authorizationType` (enum, optional) — Specifies who can access the connection URL: - `authenticatedUsers`: Any authenticated user or service account can access the URL; the authorizedUsers and authorizedGroups fields are ignored. - `authorizedUsers`: Only users listed in the authorizedUsers field are allowed to access the URL; the authorizedGroups field is ignored. - `authorizedGroups`: Only members of user groups listed in the authorizedGroups field are allowed to access the URL; the authorizedUsers field is ignored. If not specified, authorization is determined by whether authorizedUsers or authorizedGroups is present. If both fields are set, this results in an error. If neither is set, any authenticatedUser can access. - Allowed values: `authenticatedUsers`, `authorizedUsers`, `authorizedGroups` - `authorizedUsers` (list of string, optional) — List of users or service accounts that are allowed to access the URL. Note that authorizedUsers and authorizedGroups are mutually exclusive. - `authorizedGroups` (list of string, optional) — List of groups that are allowed to access the URL. Note that authorizedUsers and authorizedGroups are mutually exclusive. - `toolType` (string, optional, nullable) — The tool type that runs on this container port. - `toolName` (string, optional, nullable) — A name describing the tool that runs on this url. - `name` (string, optional, nullable) — Unique name to identify the instance. primarily used for policy locked rules. - `exclude` (boolean, optional, nullable) — Use 'true' in case the instance is defined in defaults of the policy, and you wish to exclude it from the workload. ### ImagePullSecret A reference to a secret in the same namespace used to pull container images. - `name` (string, optional) — The name of the Kubernetes secret containing the image pull credentials. - `userCredential` (boolean, optional, nullable) — Indicates whether the secret is a user credential. Set to true if the secret was created by the user and is only accessible by them. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the secret is defined in defaults of the policy, and you wish to exclude it from the workload. ### Label Label details to be populated into the container. - `name` (string, optional, nullable) — The name of the label (mandatory) - `value` (string, optional, nullable) — The value of the label. - `exclude` (boolean, optional, nullable) — Use 'true' in case the label is defined in defaults of the policy, and you wish to exclude it from the workload. ### NodeSelectorTerm A null or empty node selector term matches no objects. The requirements of them are ANDed. - `matchExpressions` (list of MatchExpression, optional) — A list of node selector requirements by node's labels. ### Port A port for accessing the workload. - `container` (integer, optional, nullable) — The port that the container running the workload exposes. (mandatory) - `serviceType` (enum, optional) — The service type of the port (mandatory). - Allowed values: `LoadBalancer`, `NodePort`, `ClusterIP` - `external` (integer, optional, nullable) — The external port which allows a connection to the container port. If not specified, the port will be auto-generated by the system.. - `toolType` (string, optional, nullable) — The tool type that runs on this port. - `toolName` (string, optional, nullable) — A name describing the tool that runs on this port. - `name` (string, optional, nullable) — Unique name to identify the instance. primarily used for policy locked rules. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. ### Probe - `initialDelaySeconds` (integer, optional, nullable) — Number of seconds after the container has started before liveness or readiness probes are initiated. - `periodSeconds` (integer, optional, nullable) — How often (in seconds) to perform the probe. - `timeoutSeconds` (integer, optional, nullable) — Number of seconds after which the probe times out. - `successThreshold` (integer, optional, nullable) — Minimum consecutive successes for the probe to be considered successful after having failed. - `failureThreshold` (integer, optional, nullable) — When a probe fails, the number of times to try before giving up. - `handler` (ProbeHandler, optional) — The action taken to determine the health of the container. (mandatory) ### RelatedUrl A URL that is related to the workload. For example, a URL to an external server providing statistics or logging about the workload. - `url` (string, optional, nullable) — The URL for connecting an external service related to the workload. (mandatory) - `type` (string, optional, nullable) — The type of service that the url provides. For example, wandb (Weights & Biases). (mandatory) - `name` (string, optional, nullable) — Unique name to identify the instance. primarily used for policy locked rules. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. ### ConfigMapsDefaults - `attributes` (ConfigMapInstance, optional) - `instances` (list of ConfigMapInstance, optional) — Set of config map volumes to use in the workload ### DataVolumesDefaults - `attributes` (DataVolumeInstance, optional) - `instances` (list of DataVolumeInstance, optional) — Set of data volumes to use in the workload. ### EmptyDirsDefaults - `attributes` (EmptyDirInstance, optional) - `instances` (list of EmptyDirInstance, optional) — A list of emptyDir volumes to mount in the workload. ### GitsDefaults - `attributes` (GitInstance, optional) - `instances` (list of GitInstance, optional) — Set of git repositories to use in the workload. ### HostPathsDefaults - `attributes` (HostPathInstance, optional) - `instances` (list of HostPathInstance, optional) — Set of host paths to use in the workload. ### NfssDefaults - `attributes` (NfsInstance, optional) - `instances` (list of NfsInstance, optional) — Set of nfs volumes to use in the workload. ### PvcsDefaults - `attributes` (PvcInstance, optional) - `instances` (list of PvcInstance, optional) — Set of pvc persistent volume claims to use in the workload. ### SecretsDefaults - `attributes` (SecretInstance, optional) - `instances` (list of SecretInstance, optional) — Set of secret volumes to use in the workload ### Toleration Toleration details. - `name` (string, optional, nullable) — The name of the toleration. - `operator` (enum, optional) — A key's relationship to the value. Equal uses key and value. Exists is equivalent to wildcard for value, so that a workload can tolerate all taints of a particular category. (mandatory) - Allowed values: `Equal`, `Exists` - `key` (string, optional, nullable) — The taint key that the toleration applies to. (mandatory) - `value` (string, optional, nullable) — The taint value the toleration matches to. Mandatory if operator is Exists, forbidden otherwise. - `effect` (enum, optional) — The taint effect to match. (mandatory) - Allowed values: `NoSchedule`, `NoExecute`, `PreferNoSchedule`, `Any` - `seconds` (integer, optional, nullable) — The period of time the toleration tolerates the taint. Valid only if effect is NoExecute. taint. - `exclude` (boolean, optional, nullable) — Use 'true' in case the label is defined in defaults of the policy, and you wish to exclude it from the workload. ### ItemRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `canAdd` (boolean, optional, nullable) — Whether it is permitted to add items. Default to true. - `locked` (list of string, optional) — Set of keys for items that are "locked", i.e. cannot be removed or deleted. ### StringOption One of the values that the field can be assigned to, when options police is applied on the field. - `value` (string, required) — The value that the field should hold - `displayed` (string, optional, nullable) — Textual description of the value. to be used by user interface applications. ### SourceOfRule This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `scope` (enum, required) - Allowed values: `system`, `tenant`, `cluster`, `department`, `project` - `projectId` (integer, optional) — The id of the project. - `departmentId` (string, optional) — The id of the department. - `clusterId` (string, optional) — The id of the cluster. - `isFallback` (boolean, optional) — source of this rule is the fallback policy ### NumberRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `required` (boolean, optional, nullable) — Whether the field is mandatory. default to false. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable. default to true - `min` (double, optional, nullable) — The minimum value that the field can be assigned to. - `max` (double, optional, nullable) — The maximum value that the field can be assigned to. - `step` (double, optional, nullable) — The minimal difference between two values the field can be assigned to. For example, min=2, max=3, step=0.25 implies that the values the field can hold are 2, 2.25, 2.5 and 3. - `defaultFrom` (DefaultFromRule, optional) ### QuantityRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `min` (string, optional, nullable) — The minimum value that the field can be assigned to. - `max` (string, optional, nullable) — The maximum value that the field can be assigned to. - `defaultFrom` (DefaultFromRule, optional) ### ExtendedResourcesRules - `attributes` (ExtendedResourceRules, optional) — Rules for the attributes of extendedResources - `instances` (ItemRules, optional) ### IntegerRules - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `required` (boolean, optional, nullable) — Whether the field is mandatory. default to false. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable. default to true - `min` (integer, optional, nullable) — The minimum value that the field can be assigned to. - `max` (integer, optional, nullable) — The maximum value that the field can be assigned to. - `step` (integer, optional, nullable) — The minimal difference between two values the field can be assigned to. For example, min=2, max=10, step=2 implies that the values the field can hold are 2, 4, 6, 8 and 10. - `defaultFrom` (DefaultFromRule, optional) ### GpuRequestRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of GpuRequestOptionsOptionsItems, optional, nullable) — Limit the permitted values for gpuRequest to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ExposedUrlRules Rules for the attributed of exposedUrls - `container` (IntegerRules, optional) - `customUrl` (BooleanRules, optional) - `url` (StringRules, optional) - `authorizedUsers` (ArrayRules, optional) - `authorizedGroups` (ArrayRules, optional) - `toolType` (StringRules, optional) - `toolName` (StringRules, optional) ### ImagePullPolicyOptionsOptionsItems - `value` (enum, required) — Image pull policy. Defaults to `Always` if `:latest` tag is specified, otherwise it is `IfNotPresent`. - Allowed values: `Always`, `Never`, `IfNotPresent` - `displayed` (string, optional, nullable) — Textual description of the value ### ImagePullSecretsRulesAttributes Rules for the attributes of imagePullSecrets - `name` (StringRules, optional) - `userCredentials` (BooleanRules, optional) ### PodAffinityTypeRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of PodAffinityTypeOptionsOptionsItems, optional, nullable) - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### PortRules Rules for port attributes - `container` (IntegerRules, optional) - `serviceType` (PortServiceTypeRules, optional) - `customExternalPort` (BooleanRules, optional) - `external` (IntegerRules, optional) - `toolType` (StringRules, optional) - `toolName` (StringRules, optional) ### PreemptibilityOptionsOptionsItems - `value` (enum, required) — Specifies whether the workload can be preempted by higher-priority workloads. Valid values are preemptible, semi-preemptible and non-preemptible. If explicitly set, this value takes precedence. If not set, the system derives the preemptibility from the priorityClassName field, ensuring backward compatibility. Each workload type has a default preemptibility. To view the default preemptibility for each workload type, use the GET /workload-types endpoint. - Allowed values: `preemptible`, `semi-preemptible`, `non-preemptible` - `displayed` (string, optional, nullable) — Textual description of the value ### ProbeRules - `initialDelaySeconds` (IntegerRules, optional) - `periodSeconds` (IntegerRules, optional) - `timeoutSeconds` (IntegerRules, optional) - `successThreshold` (IntegerRules, optional) - `failureThreshold` (IntegerRules, optional) - `handler` (ProbeHandlerRules, optional) ### RelatedUrlRules Rules for the attributes of relatedUrls - `url` (StringRules, optional) - `type` (StringRules, optional) - `name` (StringRules, optional) ### IntegerRulesOptional - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable. default to true - `min` (integer, optional, nullable) — The minimum value that the field can be assigned to. - `max` (integer, optional, nullable) — The maximum value that the field can be assigned to. - `step` (integer, optional, nullable) — The minimal difference between two values the field can be assigned to. For example, min=2, max=10, step=2 implies that the values the field can hold are 2, 4, 6, 8 and 10. - `defaultFrom` (DefaultFromRule, optional) ### SeccompProfileTypeRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of SeccompProfileTypeOptionsOptionsItems, optional, nullable) — Limit the permitted values for secompProfileType to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### UidGidSourceRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of UidGidSourceOptionsOptionsItems, optional, nullable) — Limit the permitted values for uidGidSource to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ServingPortProtocolRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of ServingPortProtocolOptionsOptionsItems, optional, nullable) - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ServingPortAuthorizationTypeRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of ServingPortAuthorizationTypeOptionsOptionsItems, optional, nullable) - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ConfigMapsRules - `attributes` (ConfigMapRules, optional) - `instances` (ItemRules, optional) ### DataVolumesRules - `attributes` (DataVolumeRules, optional) - `instances` (ItemRules, optional) ### EmptyDirsRules - `attributes` (EmptyDirRules, optional) - `instances` (ItemRules, optional) ### GitsRules - `attributes` (GitRules, optional) - `instances` (ItemRules, optional) ### HostPathsRules - `attributes` (HostPathRules, optional) - `instances` (ItemRules, optional) ### NfssRules - `attributes` (NfsRules, optional) - `instances` (ItemRules, optional) ### PvcsRules - `attributes` (PvcRules, optional) - `instances` (ItemRules, optional) ### SecretsRules - `attributes` (SecretRules, optional) - `instances` (ItemRules, optional) ### TolerationRules Toleration details. - `operator` (TolerationOperatorRules, optional) - `key` (StringRules, optional) - `value` (StringRules, optional) - `effect` (TolerationEffectRules, optional) - `seconds` (IntegerRules, optional) - `exclude` (BooleanRules, optional) ### AutoScalingMetricRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of AutoScalingMetricOptionsOptionsItems, optional, nullable) - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ExtendedResource Quantity of an extended resource. - `resource` (string, optional, nullable) — The name of the extended resource (mandatory) - `quantity` (string, optional, nullable) — The requested quantity for the resource. - `exclude` (boolean, optional, nullable) — Use 'true' in case the extended resource is defined in defaults of the policy, and you wish to exclude it from the workload. ### EnvironmentVariableSecret Details of the secret and key use to populate the environment variable - `name` (string, optional, nullable) — The name of the secret resource. (mandatory) - `key` (string, optional, nullable) — The key in the secret resource. (mandatory) ### EnvironmentVariableConfigMap Details of the configMap and key use to populate the environment variable - `name` (string, optional, nullable) — The name of the config-map resource. (mandatory) - `key` (string, optional, nullable) — The key in the config-map resource. (mandatory) ### EnvironmentVariablePodFieldReference Details of the field-reference and key use to populate the environment variable - `path` (string, optional, nullable) — The field path resource. (mandatory) ### EnvironmentVariableUserCredential Defines a reference to a user-created credential and a specific key within that credential whose value will populate the environment variable. User credentials can only be accessed by the user who created them. - `name` (string, optional, nullable) — The name of the user credential. (mandatory) - `key` (string, optional, nullable) — The key in the user credential resource. (mandatory) ### MatchExpression A selector that contains values, a key, and an operator that relates the key and values. - `key` (string, required) — The label key that the selector applies to (mandatory). - `operator` (enum, required) — Represents a key's relationship to a set of values (mandatory). - Allowed values: `In`, `NotIn`, `Exists`, `DoesNotExist`, `Gt`, `Lt` - `values` (list of string, optional) — An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. ### ProbeHandler The action taken to determine the health of the container. (mandatory) - `httpGet` (ProbeHandlerHttpGet, optional) — An action based on HTTP Get requests. ### ConfigMapInstance - `configMap` (string, optional, nullable) — The name of the ConfigMap resource. (mandatory) - `defaultMode` (string, optional) — File permission mode in octal string format. This value must be a 4-digit octal number, representing the default file mode when mounting a Secret or ConfigMap as a volume. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `mountPath` (string, optional, nullable) — Local path within the workload to which the ConfigMap will be mapped to. (mandatory) - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `subPath` (string, optional, nullable) — Path within the volume from which the container's volume should be mounted. ### DataVolumeInstance - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `id` (string, optional, nullable) — The unique identifier of the data volume. (mandatory) - `mountPath` (string, optional, nullable) — The path where the data volume will be mounted. (mandatory) ### EmptyDirInstance - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `medium` (string, optional, nullable) — The type of storage medium for the volume. Use "Memory" for memory-backed storage, or leave empty for disk-backed storage. - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `path` (string, optional, nullable) — Local path within the workload to which the EmptyDir volume will be mapped. (mandatory) - `sizeLimit` (string, optional, nullable) — The total amount of local storage or memory required for the emptyDir volume. Specify using Kubernetes quantity format (e.g., 1G, 500Mi). ### GitInstance - `branch` (string, optional, nullable) — Specific branch to synchronize the repository from. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `passwordSecret` (string, optional, nullable) — Secret containing the credentials of the repository (needed for non public repository which requires authentication). (deprecated) - `path` (string, optional, nullable) — Local path within the workload to which the Git repository will be mapped (mandatory). - `repository` (string, optional, nullable) — URL to a remote Git repository. The content of this repository will be mapped to the container running the workload. (mandatory) - `revision` (string, optional, nullable) — Specific revision to synchronize the repository from. - `secretKeyOfPassword` (string, optional, nullable) — The key to use for loading the password from the secret. The default is `Password`. (deprecated) - `secretKeyOfUser` (string, optional, nullable) — The key to use for loading the user name from the secret. The default is `User`. (deprecated) - `secretRef` (GitSecretRef, optional) ### HostPathInstance - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `mountPath` (string, optional, nullable) — The path that the host volume will be mounted to when in use. (mandatory) - `mountPropagation` (enum, optional) — Share this volumes mount with other containers. If set to HostToContainer, this volume mount will receive all subsequent mounts that are mounted to this volume or any of its subdirectories. In case of multiple hostPath entries, this field should have the same value for all of them. - Allowed values: `None`, `HostToContainer` - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `path` (string, optional, nullable) — Local path within the controller to which the host volume will be mapped. (mandatory) - `readOnly` (boolean, optional, nullable, default: true) — Force the volume to be mounted with read-only permissions. Defaults to false. ### NfsInstance - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `mountPath` (string, optional, nullable) — The path that the NFS volume will be mounted to when in use. (mandatory) - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `path` (string, optional, nullable) — Path that is exported by the NFS server (mandatory). For more information, see [NFS](https://kubernetes.io/docs/concepts/storage/volumes#nfs). - `readOnly` (boolean, optional, nullable, default: true) — Force the NFS export to be mounted with read-only permissions. - `server` (string, optional, nullable) — The hostname or IP address of the NFS server. (mandatory) ### PvcInstance - `claimInfo` (ClaimInfo, optional) — Claim information for the newly created PVC. The information should not be provided when attempting to use existing PVC. - `claimName` (string, optional, nullable) — Name for the PVC. Allow referencing it across workloads. If not provided, a name based on the workload name and scope will be auto-generated. - `dataSharing` (boolean, optional, nullable, default: false) — Use `true` to share the PVC data to all projects under the selected scope. Cannot be set to `true` when `existingPvc` is `true`. - `ephemeral` (boolean, optional, nullable, default: false) — Use `true` to set PVC to ephemeral. If set to `true`, the PVC will be deleted when the workload is stopped. Not supported for inference workloads. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `existingPvc` (boolean, optional, nullable, default: false) — Verify existing PVC. PVC is assumed to exist when set to `true`. If set to `false`, the PVC will be created, if it does not exist. Cannot be set to `true` when `dataSharing` is `true`. - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `path` (string, optional, nullable) — Local path within the workload to which the PVC bucket will be mapped. (mandatory) - `readOnly` (boolean, optional, nullable, default: false) — Permit only read access to PVC. ### SecretInstance - `defaultMode` (string, optional) — File permission mode in octal string format. This value must be a 4-digit octal number, representing the default file mode when mounting a Secret or ConfigMap as a volume. - `exclude` (boolean, optional, nullable, default: false) — Use 'true' in case the item is defined in defaults of the policy, and you wish to exclude it from the workload. - `mountPath` (string, optional, nullable) — Local path within the workload to which the Secret will be mapped to. (mandatory) - `name` (string, optional, nullable) — unique name to identify the instance. primarily used for policy locked rules. - `secret` (string, optional, nullable) — The name of the Secret resource. (mandatory) ### DefaultFromRule - `field` (string, optional, nullable) — The default of this field is taken from another field, with optional factor. The specified field must belong to the same workload section (compute, security, etc). For itemized field, the value of the field will be taken from the same instance. - `factor` (double, optional, nullable, default: 1) — Multiple the value of the fromField by this factor to get the value for this field For example, if factor is 2 and defaultFrom field has value of 8, the calculated default will be determined to be 16. ### ExtendedResourceRules Rules for the attributes of extendedResources - `quantity` (StringRules, optional) ### GpuRequestOptionsOptionsItems - `value` (enum, required) — Sets the unit type for GPU resources requests. Stated in terms of portion or memory. Sets the unit type for other GPU request fields. If `gpuDevicesRequest > 1`, only `portion` is supported. If `gpuDeviceRequest = 1`, the request type can be stated as `portion` or `memory`. - Allowed values: `portion`, `memory` - `displayed` (string, optional, nullable) — Textual description of the value ### PodAffinityTypeOptionsOptionsItems - `value` (enum, required) — The affinity type, required or preferred. (mandatory) - Allowed values: `Required`, `Preferred` - `displayed` (string, optional, nullable) — Textual description of the value ### PortServiceTypeRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of PortServiceTypeOptionsOptionsItems, optional, nullable) - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ProbeHandlerRules - `httpGet` (ProbeHandlerRulesHttpGet, optional) ### SeccompProfileTypeOptionsOptionsItems - `value` (enum, required) — Indicates which kind of seccomp profile will be applied to the container. The options are a. `RuntimeDefault` - the container runtime default profile should be used. b. `Unconfined` - no profile should be applied. c. `Localhost` is not yet supported by Run:ai. - Allowed values: `RuntimeDefault`, `Unconfined`, `Localhost` - `displayed` (string, optional, nullable) — Textual description of the value ### UidGidSourceOptionsOptionsItems - `value` (enum, required) — Indicate the way to determine the user and group ids of the container. The options are a. `fromTheImage` - user and group ids are determined by the docker image that the container runs. this is the default option. b. `custom` - user and group ids can be specified in the environment asset and/or the workload creation request. c. `idpToken` - user and group IDs are automatically taken from the identity provider (IdP) token (available only in SSO-enabled installations). For more information, see [User Identity](/run-ai/self-hosted/documentation/installation-and-configuration/configuration/security/user-identity-in-containers). - Allowed values: `fromTheImage`, `fromIdpToken`, `custom` - `displayed` (string, optional, nullable) — Textual description of the value ### ServingPortProtocolOptionsOptionsItems - `value` (enum, required) — The protocol used by the port, defaults to http - Allowed values: `http`, `grpc` - `displayed` (string, optional, nullable) — Textual description of the value ### ServingPortAuthorizationTypeOptionsOptionsItems - `value` (enum, required) — Specifies who can send inference requests to the serving endpoint: Possible values: - `public`: No authorization is required. (Default) - `authenticatedUsers`: Any NVIDIA Run:ai authenticated user and service account can send requests. - `authorizedUsers`: Only users listed in the authorizedUsers field can send requests. - `authorizedGroups`: Only members of user groups listed in the authorizedGroups field can send requests. - `authorizedUsersOrGroups`: Requires either authorizedUsers or authorizedGroups to be provided; if neither is set, or if both are set, a mutual exclusion error is reported. Supported from cluster version 2.19. - Allowed values: `public`, `authenticatedUsers`, `authorizedUsers`, `authorizedGroups`, `authorizedUsersOrGroups` - `displayed` (string, optional, nullable) — Textual description of the value ### ConfigMapRules - `configMap` (StringRules, optional) - `mountPath` (StringRules, optional) - `subPath` (StringRules, optional) - `defaultMode` (StringRules, optional) ### DataVolumeRules - `id` (StringRules, optional) - `mountPath` (StringRules, optional) ### EmptyDirRules - `path` (StringRules, optional) - `medium` (StringRules, optional) - `sizeLimit` (StringRules, optional) ### GitRules - `repository` (StringRules, optional) - `branch` (StringRules, optional) - `revision` (StringRules, optional) - `path` (StringRules, optional) ### HostPathRules - `path` (StringRules, optional) - `readOnly` (BooleanRules, optional) - `mountPath` (StringRules, optional) - `mountPropagation` (HostPathMountPropagationRules, optional) ### NfsRules - `path` (StringRules, optional) - `readOnly` (BooleanRules, optional) - `server` (StringRules, optional) - `mountPath` (StringRules, optional) ### PvcRules - `claimName` (StringRules, optional) - `path` (StringRules, optional) - `readOnly` (BooleanRules, optional) - `claimInfo` (ClaimInfoRules, optional) ### SecretRules - `secret` (StringRules, optional) - `mountPath` (StringRules, optional) - `defaultMode` (StringRules, optional) ### TolerationOperatorRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of TolerationOperatorOptionsOptionsItems, optional, nullable) — Limit the permitted values for imagePullPolicy to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### TolerationEffectRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of TolerationEffectOptionsOptionsItems, optional, nullable) — Limit the permitted values for imagePullPolicy to a given set of values. - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### AutoScalingMetricOptionsOptionsItems - `value` (string, required) — The metric to use for autoscaling. Mandatory if minReplicas \< maxReplicas, except for the special case where minReplicas is set to 0 and maxReplicas is set to 1, as in this case autoscaling decisions are made according to network activity rather than metrics. Use one of the built-in metrics of 'throughput', 'concurrency' or 'latency', or any other available custom metric. Only the 'throughput' and 'concurrency' metrics support scale-to-zero - `displayed` (string, optional, nullable) — Textual description of the value ### ProbeHandlerHttpGet An action based on HTTP Get requests. - `path` (string, optional, nullable) — Path to access on the HTTP server, defaults to /. - `port` (integer, optional, nullable) — Number of the port to access on the container. - `host` (string, optional, nullable) — Host name to connect to, defaults to the pod IP. - `scheme` (enum, optional) — Scheme to use for connecting to the host, defaults to HTTP. - Allowed values: `HTTP`, `HTTPS` ### GitSecretRef - `name` (string, optional) — Name of the Secret containing the credentials of the repository. - `authenticationMethod` (enum, optional) — Specifies the authentication method to use when accessing the Git repository. This is required for private repositories - `password` - Authenticate using a username and password. - `ssh-key` - Authenticate using an SSH private key. - Allowed values: `password`, `ssh-key` - `secretKeyOfUser` (string, optional, nullable) — The key in the Secret that contains the Git username (used for `password` authentication). - `secretKeyOfPassword` (string, optional, nullable) — The key in the Secret that contains the Git password (used for `password` authentication). ### ClaimInfo Claim information for the newly created PVC. The information should not be provided when attempting to use existing PVC. - `size` (string, optional) — Requested size for the PVC. Mandatory when existingPvc is false. Recommended sizes: TB/GB/MB/TIB/GIB/MIB - `storageClass` (string, optional, nullable) — Storage class name to associate with the PVC. This parameter may be omitted if there is a single storage class in the system, or you are using the default storage class. For more information, see [Storage class](https://kubernetes.io/docs/concepts/storage/storage-classes). - `accessModes` (PvcAccessModes, optional) — Default access mode(s) applied to newly created PVCs unless explicitly overridden. - `volumeMode` (enum, optional) — Default volume mode for the PVC. Choose between Filesystem (default) or Block. - Allowed values: `Filesystem`, `Block` - `addedAttrValues` (list of PvcAddedAttrValue, optional) — an optional array of key-values pairs that are written as annotations on the created PVC. the allowed attributes are determined according to the storage class configuration (see k8s-objects-tracker for further info). ### PortServiceTypeOptionsOptionsItems - `value` (enum, required) — The service type of the port (mandatory). - Allowed values: `LoadBalancer`, `NodePort`, `ClusterIP` - `displayed` (string, optional, nullable) — Textual description of the value ### ProbeHandlerRulesHttpGet - `path` (StringRules, optional) - `port` (IntegerRules, optional) - `host` (StringRules, optional) - `scheme` (StringRules, optional) ### HostPathMountPropagationRules - `blocked` (boolean, optional, nullable) — Blocks the field to prevent workloads from specifying any value for it. - `canEdit` (boolean, optional, nullable) — Whether the value of the field is editable, default to true - `options` (list of HostPathMountPropagationOptionsOptionsItems, optional, nullable) - `required` (boolean, optional, nullable) — Whether the field is mandatory, default to false. - `sourceOfRule` (SourceOfRule, optional) — This field is used by the system along with effective rules, in order to specify the org unit from which this effective rule has been derived. It should be left empty when sending apply policy requests. ### ClaimInfoRules - `size` (StringRules, optional) - `storageClass` (StringRules, optional) - `accessModes` (PvcAccessModesRules, optional) — Rules for access mode(s) for a newly created PVC. ### TolerationOperatorOptionsOptionsItems - `value` (enum, required) — A key's relationship to the value. Equal uses key and value. Exists is equivalent to wildcard for value, so that a workload can tolerate all taints of a particular category. (mandatory) - Allowed values: `Equal`, `Exists` - `displayed` (string, optional, nullable) — Textual description of the value ### TolerationEffectOptionsOptionsItems - `value` (enum, required) — The taint effect to match. (mandatory) - Allowed values: `NoSchedule`, `NoExecute`, `PreferNoSchedule`, `Any` - `displayed` (string, optional, nullable) — Textual description of the value ### PvcAccessModes Default access mode(s) applied to newly created PVCs unless explicitly overridden. - `readWriteOnce` (boolean, optional, nullable, default: true) — Mount the volume as read/write by a single node. - `readOnlyMany` (boolean, optional, nullable, default: false) — Mount the volume as read-only by many nodes. - `readWriteMany` (boolean, optional, nullable, default: false) — Mount the volume as read/write by many nodes. ### PvcAddedAttrValue - `key` (string, required) - `value` (string, optional) ### HostPathMountPropagationOptionsOptionsItems - `value` (enum, required) — Share this volumes mount with other containers. If set to HostToContainer, this volume mount will receive all subsequent mounts that are mounted to this volume or any of its subdirectories. In case of multiple hostPath entries, this field should have the same value for all of them. - Allowed values: `None`, `HostToContainer` - `displayed` (string, optional, nullable) — Textual description of the value ### PvcAccessModesRules Rules for access mode(s) for a newly created PVC. - `readWriteOnce` (BooleanRules, optional) - `readOnlyMany` (BooleanRules, optional) - `readWriteMany` (BooleanRules, optional) ## Examples **Request** ```json {} ``` **Response** ```json { "meta": { "id": "string", "createdBy": "string", "createdAt": "2024-01-15T09:30:00Z", "updatedBy": "string", "updatedAt": "2024-01-15T09:30:00Z", "scope": "system", "name": "my-policy", "tenantId": 1001, "clusterId": "71f69d83-ba66-4822-adf5-55ce55efd210", "projectId": 1, "departmentId": "2" }, "policy": { "defaults": { "annotations": { "instances": [ { "name": "billing", "value": "my-billing-unit", "exclude": false } ] }, "args": "-x my-script.py", "category": "string", "command": "python", "compute": { "cpuCoreLimit": 2, "cpuCoreRequest": 0.5, "cpuMemoryLimit": "30M", "cpuMemoryRequest": "20M", "extendedResources": { "attributes": { "resource": "hardware-vendor.example/foo", "quantity": "2", "exclude": false }, "instances": [ { "resource": "hardware-vendor.example/foo", "quantity": "2", "exclude": false } ] }, "gpuDevicesRequest": 1, "gpuMemoryLimit": "10M", "gpuMemoryRequest": "10M", "gpuPortionLimit": 0.5, "gpuPortionRequest": 0.5, "gpuRequestType": "portion", "largeShmRequest": false }, "createHomeDir": true, "environmentVariables": { "instances": [ { "name": "HOME", "value": "/home/my-folder", "secret": { "name": "postgress_secret", "key": "POSTGRES_PASSWORD" }, "configMap": { "name": "my-config-map", "key": "MY_POSTGRES_SCHEMA" }, "podFieldRef": { "path": "metadata.name" }, "userCredential": { "name": "my_postgres_user_and_password", "key": "POSTGRES_PASSWORD" }, "exclude": false, "description": "Home directory of the user." } ] }, "exposedUrls": { "attributes": { "container": 8080, "url": "https://my-url.com", "authorizationType": "authenticatedUsers", "authorizedUsers": [ "user-a", "user-b" ], "authorizedGroups": [ "group-a", "group-b" ], "toolType": "jupyter", "toolName": "my-pytorch", "name": "url-instance-a", "exclude": false }, "instances": [ { "container": 8080, "url": "https://my-url.com", "authorizationType": "authenticatedUsers", "authorizedUsers": [ "user-a", "user-b" ], "authorizedGroups": [ "group-a", "group-b" ], "toolType": "jupyter", "toolName": "my-pytorch", "name": "url-instance-a", "exclude": false } ] }, "image": "python:3.8", "imagePullPolicy": "Always", "imagePullSecrets": { "instances": [ { "name": "string", "userCredential": true, "exclude": false } ] }, "labels": { "instances": [ { "name": "stage", "value": "initial-research", "exclude": false } ] }, "nodeAffinityRequired": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "string", "operator": "In", "values": [ "string" ] } ] } ] }, "nodePools": [ "my-node-pool-a", "my-node-pool-b" ], "nodeType": "my-node-type", "podAffinity": { "type": "Required", "key": "string" }, "ports": { "attributes": { "container": 8080, "serviceType": "LoadBalancer", "external": 30080, "toolType": "pytorch", "toolName": "my-pytorch", "name": "port-instance-a", "exclude": false }, "instances": [ { "container": 8080, "serviceType": "LoadBalancer", "external": 30080, "toolType": "pytorch", "toolName": "my-pytorch", "name": "port-instance-a", "exclude": false } ] }, "preemptibility": "preemptible", "priorityClass": "string", "probes": { "readiness": { "initialDelaySeconds": 1, "periodSeconds": 1, "timeoutSeconds": 1, "successThreshold": 1, "failureThreshold": 1, "handler": { "httpGet": { "path": "/", "port": 1, "host": "example.com", "scheme": "HTTP" } } } }, "relatedUrls": { "attributes": { "url": "https://my-url.com", "type": "wandb", "name": "url-instance-a", "exclude": false }, "instances": [ { "url": "https://my-url.com", "type": "wandb", "name": "url-instance-a", "exclude": false } ] }, "security": { "capabilities": [ "CHOWN", "KILL" ], "hostIpc": false, "hostNetwork": false, "readOnlyRootFilesystem": false, "runAsGid": 30, "runAsNonRoot": true, "runAsUid": 500, "seccompProfileType": "RuntimeDefault", "supplementalGroups": "2,3,5,8", "uidGidSource": "fromTheImage" }, "servingPort": { "authorizationType": "public", "authorizedGroups": [ "group-a", "group-b" ], "authorizedUsers": [ "user-a", "user-b" ], "clusterLocalAccessOnly": true, "container": 8080, "protocol": "http" }, "storage": { "configMapVolume": { "attributes": { "configMap": "string", "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "subPath": "string" }, "instances": [ { "configMap": "string", "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "subPath": "string" } ] }, "dataVolume": { "attributes": { "exclude": false, "id": "123e4567-e89b-12d3-a456-426614174000", "mountPath": "/mnt/data" }, "instances": [ { "exclude": false, "id": "123e4567-e89b-12d3-a456-426614174000", "mountPath": "/mnt/data" } ] }, "emptyDirVolume": { "attributes": { "exclude": false, "medium": "string", "name": "storage-instance-a", "path": "/mnt/emptydir", "sizeLimit": "1G" }, "instances": [ { "exclude": false, "medium": "string", "name": "storage-instance-a", "path": "/mnt/emptydir", "sizeLimit": "1G" } ] }, "git": { "attributes": { "branch": "main", "exclude": false, "name": "storage-instance-a", "passwordSecret": "my-password-secret", "path": "/container/my-repository", "repository": "https://github.com/my-git/my-repo", "revision": "string", "secretKeyOfPassword": "Password", "secretKeyOfUser": "User", "secretRef": { "name": "my-password-secret", "authenticationMethod": "password", "secretKeyOfUser": "User", "secretKeyOfPassword": "Password" } }, "instances": [ { "branch": "main", "exclude": false, "name": "storage-instance-a", "passwordSecret": "my-password-secret", "path": "/container/my-repository", "repository": "https://github.com/my-git/my-repo", "revision": "string", "secretKeyOfPassword": "Password", "secretKeyOfUser": "User", "secretRef": { "name": "my-password-secret", "authenticationMethod": "password", "secretKeyOfUser": "User", "secretKeyOfPassword": "Password" } } ] }, "hostPath": { "attributes": { "exclude": false, "mountPath": "/local/directory", "mountPropagation": "None", "name": "storage-instance-a", "path": "/container/directory", "readOnly": true }, "instances": [ { "exclude": false, "mountPath": "/local/directory", "mountPropagation": "None", "name": "storage-instance-a", "path": "/container/directory", "readOnly": true } ] }, "nfs": { "attributes": { "exclude": false, "mountPath": "/local/nfs", "name": "storage-instance-a", "path": "/container/nfs", "readOnly": true, "server": "my.nfs.com" }, "instances": [ { "exclude": false, "mountPath": "/local/nfs", "name": "storage-instance-a", "path": "/container/nfs", "readOnly": true, "server": "my.nfs.com" } ] }, "pvc": { "attributes": { "claimInfo": { "size": "1G", "storageClass": "my-storage-class", "accessModes": { "readWriteOnce": true, "readOnlyMany": false, "readWriteMany": false }, "volumeMode": "Filesystem", "addedAttrValues": [ { "key": "dnsname", "value": "my.dns.com" } ] }, "claimName": "my-claim", "dataSharing": false, "ephemeral": false, "exclude": false, "existingPvc": false, "name": "storage-instance-a", "path": "/container/my-claim", "readOnly": false }, "instances": [ { "claimInfo": { "size": "1G", "storageClass": "my-storage-class", "accessModes": { "readWriteOnce": true, "readOnlyMany": false, "readWriteMany": false }, "volumeMode": "Filesystem", "addedAttrValues": [ { "key": "dnsname", "value": "my.dns.com" } ] }, "claimName": "my-claim", "dataSharing": false, "ephemeral": false, "exclude": false, "existingPvc": false, "name": "storage-instance-a", "path": "/container/my-claim", "readOnly": false } ] }, "secretVolume": { "attributes": { "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "secret": "string" }, "instances": [ { "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "secret": "string" } ] } }, "tolerations": { "attributes": { "name": "string", "operator": "Equal", "key": "string", "value": "string", "effect": "NoSchedule", "seconds": 1, "exclude": false }, "instances": [ { "name": "string", "operator": "Equal", "key": "string", "value": "string", "effect": "NoSchedule", "seconds": 1, "exclude": false } ] }, "workingDir": "/home/myfolder", "autoscaling": { "activationReplicas": 1, "concurrencyHardLimit": 1, "initialReplicas": 1, "maxReplicas": 1, "metric": "http_requests_total", "metricThreshold": 1, "metricThresholdPercentage": 1.1, "minReplicas": 1, "scaleDownDelaySeconds": 1, "scaleToZeroRetentionSeconds": 1, "initializationTimeoutSeconds": 1 }, "servingConfiguration": { "initializationTimeoutSeconds": 1, "requestTimeoutSeconds": 1 } }, "rules": { "annotations": { "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "args": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "category": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "command": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "compute": { "cpuCoreLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "cpuCoreRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "cpuMemoryLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "cpuMemoryRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "extendedResources": { "attributes": { "quantity": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "gpuDevicesRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "gpuMemoryLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "gpuMemoryRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "gpuPortionLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "gpuPortionRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "gpuRequestType": { "blocked": true, "canEdit": true, "options": [ { "value": "portion", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "largeShmRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "createHomeDir": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "environmentVariables": { "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "exposedUrls": { "attributes": { "container": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "customUrl": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "url": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "authorizedUsers": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "authorizedGroups": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "toolType": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "toolName": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "image": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "imagePullPolicy": { "blocked": true, "canEdit": true, "options": [ { "value": "Always", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "imagePullSecrets": { "attributes": { "name": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "userCredentials": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "labels": { "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "nodeAffinityRequired": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "nodePools": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "nodeType": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "podAffinity": { "type": { "blocked": true, "canEdit": true, "options": [ { "value": "Required", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "key": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "ports": { "attributes": { "container": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "serviceType": { "blocked": true, "canEdit": true, "options": [ { "value": "LoadBalancer", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "customExternalPort": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "external": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "toolType": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "toolName": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "preemptibility": { "blocked": true, "canEdit": true, "options": [ { "value": "preemptible", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "priorityClass": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "probes": { "readiness": { "initialDelaySeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "periodSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "timeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "successThreshold": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "failureThreshold": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "handler": { "httpGet": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "port": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "host": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "scheme": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } } } } }, "relatedUrls": { "attributes": { "url": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "type": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "name": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "security": { "capabilities": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "hostIpc": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "hostNetwork": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "readOnlyRootFilesystem": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "runAsGid": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "runAsNonRoot": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "runAsUid": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "seccompProfileType": { "blocked": true, "canEdit": true, "options": [ { "value": "RuntimeDefault", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "supplementalGroups": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "uidGidSource": { "blocked": true, "canEdit": true, "options": [ { "value": "fromTheImage", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "servingPort": { "container": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "protocol": { "blocked": true, "canEdit": true, "options": [ { "value": "http", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "authorizationType": { "blocked": true, "canEdit": true, "options": [ { "value": "public", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "authorizedUsers": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "authorizedGroups": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "clusterLocalAccessOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "storage": { "configMapVolume": { "attributes": { "configMap": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "subPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "defaultMode": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "dataVolume": { "attributes": { "id": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "emptyDirVolume": { "attributes": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "medium": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "sizeLimit": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "git": { "attributes": { "repository": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "branch": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "revision": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "hostPath": { "attributes": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "readOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPropagation": { "blocked": true, "canEdit": true, "options": [ { "value": "None", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "nfs": { "attributes": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "readOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "server": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "pvc": { "attributes": { "claimName": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "readOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "claimInfo": { "size": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "storageClass": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "accessModes": { "readWriteOnce": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "readOnlyMany": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "readWriteMany": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "secretVolume": { "attributes": { "secret": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "defaultMode": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } } }, "tolerations": { "attributes": { "operator": { "blocked": true, "canEdit": true, "options": [ { "value": "Equal", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "key": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "value": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "effect": { "blocked": true, "canEdit": true, "options": [ { "value": "NoSchedule", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "seconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "exclude": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "workingDir": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "autoscaling": { "metricThresholdPercentage": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "minReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "maxReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "initialReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "activationReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "metric": { "blocked": true, "canEdit": true, "options": [ { "value": "http_requests_total", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "metricThreshold": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "concurrencyHardLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "scaleToZeroRetentionSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "scaleDownDelaySeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "initializationTimeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } } }, "servingConfiguration": { "initializationTimeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "requestTimeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } } } }, "imposedAssets": [ "string" ], "status": { "validation": { "errorMessage": "string" } } }, "effective": { "defaults": { "annotations": { "instances": [ { "name": "billing", "value": "my-billing-unit", "exclude": false } ] }, "args": "-x my-script.py", "category": "string", "command": "python", "compute": { "cpuCoreLimit": 2, "cpuCoreRequest": 0.5, "cpuMemoryLimit": "30M", "cpuMemoryRequest": "20M", "extendedResources": { "attributes": { "resource": "hardware-vendor.example/foo", "quantity": "2", "exclude": false }, "instances": [ { "resource": "hardware-vendor.example/foo", "quantity": "2", "exclude": false } ] }, "gpuDevicesRequest": 1, "gpuMemoryLimit": "10M", "gpuMemoryRequest": "10M", "gpuPortionLimit": 0.5, "gpuPortionRequest": 0.5, "gpuRequestType": "portion", "largeShmRequest": false }, "createHomeDir": true, "environmentVariables": { "instances": [ { "name": "HOME", "value": "/home/my-folder", "secret": { "name": "postgress_secret", "key": "POSTGRES_PASSWORD" }, "configMap": { "name": "my-config-map", "key": "MY_POSTGRES_SCHEMA" }, "podFieldRef": { "path": "metadata.name" }, "userCredential": { "name": "my_postgres_user_and_password", "key": "POSTGRES_PASSWORD" }, "exclude": false, "description": "Home directory of the user." } ] }, "exposedUrls": { "attributes": { "container": 8080, "url": "https://my-url.com", "authorizationType": "authenticatedUsers", "authorizedUsers": [ "user-a", "user-b" ], "authorizedGroups": [ "group-a", "group-b" ], "toolType": "jupyter", "toolName": "my-pytorch", "name": "url-instance-a", "exclude": false }, "instances": [ { "container": 8080, "url": "https://my-url.com", "authorizationType": "authenticatedUsers", "authorizedUsers": [ "user-a", "user-b" ], "authorizedGroups": [ "group-a", "group-b" ], "toolType": "jupyter", "toolName": "my-pytorch", "name": "url-instance-a", "exclude": false } ] }, "image": "python:3.8", "imagePullPolicy": "Always", "imagePullSecrets": { "instances": [ { "name": "string", "userCredential": true, "exclude": false } ] }, "labels": { "instances": [ { "name": "stage", "value": "initial-research", "exclude": false } ] }, "nodeAffinityRequired": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "string", "operator": "In", "values": [ "string" ] } ] } ] }, "nodePools": [ "my-node-pool-a", "my-node-pool-b" ], "nodeType": "my-node-type", "podAffinity": { "type": "Required", "key": "string" }, "ports": { "attributes": { "container": 8080, "serviceType": "LoadBalancer", "external": 30080, "toolType": "pytorch", "toolName": "my-pytorch", "name": "port-instance-a", "exclude": false }, "instances": [ { "container": 8080, "serviceType": "LoadBalancer", "external": 30080, "toolType": "pytorch", "toolName": "my-pytorch", "name": "port-instance-a", "exclude": false } ] }, "preemptibility": "preemptible", "priorityClass": "string", "probes": { "readiness": { "initialDelaySeconds": 1, "periodSeconds": 1, "timeoutSeconds": 1, "successThreshold": 1, "failureThreshold": 1, "handler": { "httpGet": { "path": "/", "port": 1, "host": "example.com", "scheme": "HTTP" } } } }, "relatedUrls": { "attributes": { "url": "https://my-url.com", "type": "wandb", "name": "url-instance-a", "exclude": false }, "instances": [ { "url": "https://my-url.com", "type": "wandb", "name": "url-instance-a", "exclude": false } ] }, "security": { "capabilities": [ "CHOWN", "KILL" ], "hostIpc": false, "hostNetwork": false, "readOnlyRootFilesystem": false, "runAsGid": 30, "runAsNonRoot": true, "runAsUid": 500, "seccompProfileType": "RuntimeDefault", "supplementalGroups": "2,3,5,8", "uidGidSource": "fromTheImage" }, "servingPort": { "authorizationType": "public", "authorizedGroups": [ "group-a", "group-b" ], "authorizedUsers": [ "user-a", "user-b" ], "clusterLocalAccessOnly": true, "container": 8080, "protocol": "http" }, "storage": { "configMapVolume": { "attributes": { "configMap": "string", "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "subPath": "string" }, "instances": [ { "configMap": "string", "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "subPath": "string" } ] }, "dataVolume": { "attributes": { "exclude": false, "id": "123e4567-e89b-12d3-a456-426614174000", "mountPath": "/mnt/data" }, "instances": [ { "exclude": false, "id": "123e4567-e89b-12d3-a456-426614174000", "mountPath": "/mnt/data" } ] }, "emptyDirVolume": { "attributes": { "exclude": false, "medium": "string", "name": "storage-instance-a", "path": "/mnt/emptydir", "sizeLimit": "1G" }, "instances": [ { "exclude": false, "medium": "string", "name": "storage-instance-a", "path": "/mnt/emptydir", "sizeLimit": "1G" } ] }, "git": { "attributes": { "branch": "main", "exclude": false, "name": "storage-instance-a", "passwordSecret": "my-password-secret", "path": "/container/my-repository", "repository": "https://github.com/my-git/my-repo", "revision": "string", "secretKeyOfPassword": "Password", "secretKeyOfUser": "User", "secretRef": { "name": "my-password-secret", "authenticationMethod": "password", "secretKeyOfUser": "User", "secretKeyOfPassword": "Password" } }, "instances": [ { "branch": "main", "exclude": false, "name": "storage-instance-a", "passwordSecret": "my-password-secret", "path": "/container/my-repository", "repository": "https://github.com/my-git/my-repo", "revision": "string", "secretKeyOfPassword": "Password", "secretKeyOfUser": "User", "secretRef": { "name": "my-password-secret", "authenticationMethod": "password", "secretKeyOfUser": "User", "secretKeyOfPassword": "Password" } } ] }, "hostPath": { "attributes": { "exclude": false, "mountPath": "/local/directory", "mountPropagation": "None", "name": "storage-instance-a", "path": "/container/directory", "readOnly": true }, "instances": [ { "exclude": false, "mountPath": "/local/directory", "mountPropagation": "None", "name": "storage-instance-a", "path": "/container/directory", "readOnly": true } ] }, "nfs": { "attributes": { "exclude": false, "mountPath": "/local/nfs", "name": "storage-instance-a", "path": "/container/nfs", "readOnly": true, "server": "my.nfs.com" }, "instances": [ { "exclude": false, "mountPath": "/local/nfs", "name": "storage-instance-a", "path": "/container/nfs", "readOnly": true, "server": "my.nfs.com" } ] }, "pvc": { "attributes": { "claimInfo": { "size": "1G", "storageClass": "my-storage-class", "accessModes": { "readWriteOnce": true, "readOnlyMany": false, "readWriteMany": false }, "volumeMode": "Filesystem", "addedAttrValues": [ { "key": "dnsname", "value": "my.dns.com" } ] }, "claimName": "my-claim", "dataSharing": false, "ephemeral": false, "exclude": false, "existingPvc": false, "name": "storage-instance-a", "path": "/container/my-claim", "readOnly": false }, "instances": [ { "claimInfo": { "size": "1G", "storageClass": "my-storage-class", "accessModes": { "readWriteOnce": true, "readOnlyMany": false, "readWriteMany": false }, "volumeMode": "Filesystem", "addedAttrValues": [ { "key": "dnsname", "value": "my.dns.com" } ] }, "claimName": "my-claim", "dataSharing": false, "ephemeral": false, "exclude": false, "existingPvc": false, "name": "storage-instance-a", "path": "/container/my-claim", "readOnly": false } ] }, "secretVolume": { "attributes": { "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "secret": "string" }, "instances": [ { "defaultMode": "0644", "exclude": false, "mountPath": "string", "name": "storage-instance-a", "secret": "string" } ] } }, "tolerations": { "attributes": { "name": "string", "operator": "Equal", "key": "string", "value": "string", "effect": "NoSchedule", "seconds": 1, "exclude": false }, "instances": [ { "name": "string", "operator": "Equal", "key": "string", "value": "string", "effect": "NoSchedule", "seconds": 1, "exclude": false } ] }, "workingDir": "/home/myfolder", "autoscaling": { "activationReplicas": 1, "concurrencyHardLimit": 1, "initialReplicas": 1, "maxReplicas": 1, "metric": "http_requests_total", "metricThreshold": 1, "metricThresholdPercentage": 1.1, "minReplicas": 1, "scaleDownDelaySeconds": 1, "scaleToZeroRetentionSeconds": 1, "initializationTimeoutSeconds": 1 }, "servingConfiguration": { "initializationTimeoutSeconds": 1, "requestTimeoutSeconds": 1 } }, "rules": { "annotations": { "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "args": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "category": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "command": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "compute": { "cpuCoreLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "cpuCoreRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "cpuMemoryLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "cpuMemoryRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "extendedResources": { "attributes": { "quantity": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "gpuDevicesRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "gpuMemoryLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "gpuMemoryRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": "string", "max": "string", "defaultFrom": { "field": "string", "factor": 1 } }, "gpuPortionLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "gpuPortionRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "gpuRequestType": { "blocked": true, "canEdit": true, "options": [ { "value": "portion", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "largeShmRequest": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "createHomeDir": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "environmentVariables": { "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "exposedUrls": { "attributes": { "container": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "customUrl": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "url": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "authorizedUsers": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "authorizedGroups": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "toolType": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "toolName": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "image": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "imagePullPolicy": { "blocked": true, "canEdit": true, "options": [ { "value": "Always", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "imagePullSecrets": { "attributes": { "name": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "userCredentials": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "labels": { "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "nodeAffinityRequired": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "nodePools": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "nodeType": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "podAffinity": { "type": { "blocked": true, "canEdit": true, "options": [ { "value": "Required", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "key": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "ports": { "attributes": { "container": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "serviceType": { "blocked": true, "canEdit": true, "options": [ { "value": "LoadBalancer", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "customExternalPort": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "external": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "toolType": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "toolName": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "preemptibility": { "blocked": true, "canEdit": true, "options": [ { "value": "preemptible", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "priorityClass": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "probes": { "readiness": { "initialDelaySeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "periodSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "timeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "successThreshold": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "failureThreshold": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "handler": { "httpGet": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "port": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "host": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "scheme": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } } } } }, "relatedUrls": { "attributes": { "url": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "type": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "name": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "security": { "capabilities": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "hostIpc": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "hostNetwork": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "readOnlyRootFilesystem": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "runAsGid": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "runAsNonRoot": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "runAsUid": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "seccompProfileType": { "blocked": true, "canEdit": true, "options": [ { "value": "RuntimeDefault", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "supplementalGroups": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "uidGidSource": { "blocked": true, "canEdit": true, "options": [ { "value": "fromTheImage", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "servingPort": { "container": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "protocol": { "blocked": true, "canEdit": true, "options": [ { "value": "http", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "authorizationType": { "blocked": true, "canEdit": true, "options": [ { "value": "public", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "authorizedUsers": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "authorizedGroups": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "options": [ { "value": "string", "displayed": "string" } ], "canEdit": true }, "clusterLocalAccessOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "storage": { "configMapVolume": { "attributes": { "configMap": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "subPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "defaultMode": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "dataVolume": { "attributes": { "id": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "emptyDirVolume": { "attributes": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "medium": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "sizeLimit": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "git": { "attributes": { "repository": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "branch": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "revision": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "hostPath": { "attributes": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "readOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPropagation": { "blocked": true, "canEdit": true, "options": [ { "value": "None", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "nfs": { "attributes": { "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "readOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "server": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "pvc": { "attributes": { "claimName": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "path": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "readOnly": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "claimInfo": { "size": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "storageClass": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "accessModes": { "readWriteOnce": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "readOnlyMany": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true }, "readWriteMany": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "secretVolume": { "attributes": { "secret": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "mountPath": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "defaultMode": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } } }, "tolerations": { "attributes": { "operator": { "blocked": true, "canEdit": true, "options": [ { "value": "Equal", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "key": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "value": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "effect": { "blocked": true, "canEdit": true, "options": [ { "value": "NoSchedule", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "seconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "exclude": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true } }, "instances": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "canAdd": true, "locked": [ "HOME", "USER" ] } }, "workingDir": { "blocked": true, "canEdit": true, "options": [ { "value": "string", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "autoscaling": { "metricThresholdPercentage": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1.1, "max": 1.1, "step": 1.1, "defaultFrom": { "field": "string", "factor": 1 } }, "minReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "maxReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "initialReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "activationReplicas": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "metric": { "blocked": true, "canEdit": true, "options": [ { "value": "http_requests_total", "displayed": "string" } ], "required": true, "sourceOfRule": { "scope": "project", "projectId": 3 } }, "metricThreshold": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "concurrencyHardLimit": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "scaleToZeroRetentionSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "scaleDownDelaySeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "initializationTimeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } } }, "servingConfiguration": { "initializationTimeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } }, "requestTimeoutSeconds": { "sourceOfRule": { "scope": "project", "projectId": 3 }, "required": true, "canEdit": true, "min": 1, "max": 1, "step": 1, "defaultFrom": { "field": "string", "factor": 1 } } } }, "imposedAssets": [ "string" ], "status": { "validation": { "errorMessage": "string" } } }, "effectiveUpdatedAt": "2024-01-15T09:30:00Z" } ``` **SDK Code** ```python import requests url = "http://localhost:8080/api/v2/policy/inferences" payload = {} headers = { "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.patch(url, json=payload, headers=headers) print(response.json()) ``` ```javascript const url = 'http://localhost:8080/api/v2/policy/inferences'; const options = { method: 'PATCH', headers: {Authorization: 'Bearer ', 'Content-Type': 'application/json'}, body: '{}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "http://localhost:8080/api/v2/policy/inferences" payload := strings.NewReader("{}") req, _ := http.NewRequest("PATCH", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("http://localhost:8080/api/v2/policy/inferences") http = Net::HTTP.new(url.host, url.port) request = Net::HTTP::Patch.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{}" response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.patch("http://localhost:8080/api/v2/policy/inferences") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{}") .asString(); ``` ```php request('PATCH', 'http://localhost:8080/api/v2/policy/inferences', [ 'body' => '{}', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("http://localhost:8080/api/v2/policy/inferences"); var request = new RestRequest(Method.PATCH); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = [] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "http://localhost:8080/api/v2/policy/inferences")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "PATCH" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```