GetDeployment - DeploymentService | API reference | Red Hat Advanced Cluster Security for Kubernetes 4.5

GeT /v1/deployments/{id}

GetDeployment returns a deployment given its ID.

Description

Parameters

Path Parameters

Name	Description	Required	Default	Pattern
id		X	null

Name

Description

Required

Default

Pattern

null

Return Type

StorageDeployment

Content Type

application/json

Responses

Table 1. HTTP Response Codes
Code	Message	Datatype
200	A successful response.	StorageDeployment
0	An unexpected error response.	Runtimeerror

Samples

Common object reference

ContainerConfigenvironmentConfig

Field Name

Required

Nullable

Type

Description

Format

key

String

value

String

envVarSource

environmentConfigenvVarSource

UNSeT, RAW, SeCReT_KeY, CONFIG_MAP_KeY, FIeLD, ReSOURCe_FIeLD, UNKNOWN,

environmentConfigenvVarSource

For any update to envVarSource, please also update 'ui/src/messages/common.js'

enum Values
UNSeT
RAW
SeCReT_KeY
CONFIG_MAP_KeY
FIeLD
ReSOURCe_FIeLD
UNKNOWN

enum Values

UNSeT

RAW

SeCReT_KeY

CONFIG_MAP_KeY

FIeLD

ReSOURCe_FIeLD

UNKNOWN

PortConfigexposureInfo

Field Name Required Nullable Type Description Format

level

PortConfigexposureLevel

UNSeT, eXTeRNAL, NODe, INTeRNAL, HOST, ROUTe,

serviceName

String

serviceId

String

serviceClusterIp

String

servicePort

Integer

int32

nodePort

Integer

int32

externalIps

List of string

externalHostnames

List of string

PortConfigexposureLevel

enum Values
UNSeT
eXTeRNAL
NODe
INTeRNAL
HOST
ROUTe

enum Values

UNSeT

eXTeRNAL

NODe

INTeRNAL

HOST

ROUTe

ProtobufAny

Any contains an arbitrary serialized protocol buffer message along with a URL that describes the type of the serialized message.

Protobuf library provides support to pack/unpack Any values in the form of utility functions or additional generated methods of the Any type.

example 1: Pack and unpack a message in C++.

Foo foo = ...;
Any any;
any.PackFrom(foo);
...
if (any.UnpackTo(&foo)) {
  ...
}

example 2: Pack and unpack a message in Java.

Foo foo = ...;
Any any = Any.pack(foo);
...
if (any.is(Foo.class)) {
  foo = any.unpack(Foo.class);
}
// or ...
if (any.isSameTypeAs(Foo.getDefaultInstance())) {
  foo = any.unpack(Foo.getDefaultInstance());
}

example 3: Pack and unpack a message in Python.

foo = Foo(...)
any = Any()
any.Pack(foo)
...
if any.Is(Foo.DeSCRIPTOR):
  any.Unpack(foo)
  ...

example 4: Pack and unpack a message in Go

foo := &pb.Foo{...}
any, err := anypb.New(foo)
if err != nil {
  ...
}
...
foo := &pb.Foo{}
if err := any.UnmarshalTo(foo); err != nil {
  ...
}

The pack methods provided by protobuf library will by default use 'type.googleapis.com/full.type.name' as the type URL and the unpack methods only use the fully qualified type name after the last '/' in the type URL, for example "foo.bar.com/x/y.z" will yield type name "y.z".

JSON representation

The JSON representation of an Any value uses the regular representation of the deserialized, embedded message, with an additional field @type which contains the type URL. example:

package google.profile;
message Person {
  string first_name = 1;
  string last_name = 2;
}

{
  "@type": "type.googleapis.com/google.profile.Person",
  "firstName": <string>,
  "lastName": <string>
}

If the embedded message type is well-known and has a custom JSON representation, that representation will be embedded adding a field value which holds the custom JSON in addition to the @type field. example (for message [google.protobuf.Duration][]):

{
  "@type": "type.googleapis.com/google.protobuf.Duration",
  "value": "1.212s"
}

Field Name Required Nullable Type Description Format

Field Name	Required	Nullable	Type	Description	Format
typeUrl			String	A URL/resource name that uniquely identifies the type of the serialized protocol buffer message. This string must contain at least one \"/\" character. The last segment of the URL’s path must represent the fully qualified name of the type (as in `path/google.protobuf.Duration`). The name should be in a canonical form (e.g., leading \".\" is not accepted). In practice, teams usually precompile into the binary all types that they expect it to use in the context of Any. However, for URLs which use the scheme `http`, `https`, or no scheme, one can optionally set up a type server that maps type URLs to message definitions as follows: * If no scheme is provided, `https` is assumed. * An HTTP GeT on the URL must yield a [google.protobuf.Type][] value in binary format, or produce an error. * Applications are allowed to cache lookup results based on the URL, or have them precompiled into a binary to avoid any lookup. Therefore, binary compatibility needs to be preserved on changes to types. (Use versioned type names to manage breaking changes.) Note: this functionality is not currently available in the official protobuf release, and it is not used for type URLs beginning with type.googleapis.com. As of May 2023, there are no widely used type server implementations and no plans to implement one. Schemes other than `http`, `https` (or the empty scheme) might be used with implementation specific semantics.
value			byte[]	Must be a valid serialized protocol buffer of the above specified type.	byte

typeUrl

String

A URL/resource name that uniquely identifies the type of the serialized protocol buffer message. This string must contain at least one \"/\" character. The last segment of the URL’s path must represent the fully qualified name of the type (as in path/google.protobuf.Duration). The name should be in a canonical form (e.g., leading \".\" is not accepted). In practice, teams usually precompile into the binary all types that they expect it to use in the context of Any. However, for URLs which use the scheme http, https, or no scheme, one can optionally set up a type server that maps type URLs to message definitions as follows: * If no scheme is provided, https is assumed. * An HTTP GeT on the URL must yield a [google.protobuf.Type][] value in binary format, or produce an error. * Applications are allowed to cache lookup results based on the URL, or have them precompiled into a binary to avoid any lookup. Therefore, binary compatibility needs to be preserved on changes to types. (Use versioned type names to manage breaking changes.) Note: this functionality is not currently available in the official protobuf release, and it is not used for type URLs beginning with type.googleapis.com. As of May 2023, there are no widely used type server implementations and no plans to implement one. Schemes other than http, https (or the empty scheme) might be used with implementation specific semantics.

value

byte[]

Must be a valid serialized protocol buffer of the above specified type.

byte

Runtimeerror

Field Name

Required

Nullable

Type

Description

Format

error

String

code

Integer

int32

message

String

details

List of ProtobufAny

SeccompProfileProfileType

enum Values
UNCONFINeD
RUNTIMe_DeFAULT
LOCALHOST

enum Values

UNCONFINeD

RUNTIMe_DeFAULT

LOCALHOST

SecurityContextSeLinux

Field Name

Required

Nullable

Type

Description

Format

user

String

role

String

type

String

level

String

SecurityContextSeccompProfile

Field Name

Required

Nullable

Type

Description

Format

type

SeccompProfileProfileType

UNCONFINeD, RUNTIMe_DeFAULT, LOCALHOST,

localhostProfile

String

StorageContainer

Field Name

Required

Nullable

Type

Description

Format

String

config

StorageContainerConfig

image

StorageContainerImage

securityContext

StorageSecurityContext

volumes

List of StorageVolume

ports

List of StoragePortConfig

secrets

List of StorageembeddedSecret

resources

StorageResources

name

String

livenessProbe

StorageLivenessProbe

readinessProbe

StorageReadinessProbe

StorageContainerConfig

Field Name Required Nullable Type Description Format

env

List of ContainerConfigenvironmentConfig

command

List of string

args

List of string

StorageContainerImage

Next tag: 12

Field Name

Required

Nullable

Type

Description

Format

String

name

StorageImageName

notPullable

Boolean

isClusterLocal

Boolean

StorageDeployment

Next available tag: 35

Field Name Required Nullable Type Description Format

String

name

String

hash

String

uint64

type

String

namespace

String

namespaceId

String

orchestratorComponent

Boolean

replicas

String

int64

labels

Map of string

podLabels

Map of string

labelSelector

StorageLabelSelector

created

Date

date-time

clusterId

String

clusterName

String

containers

List of StorageContainer

annotations

Map of string

priority

String

int64

inactive

Boolean

imagePullSecrets

List of string

serviceAccount

String

serviceAccountPermissionLevel

StoragePermissionLevel

UNSeT, NONe, DeFAULT, eLeVATeD_IN_NAMeSPACe, eLeVATeD_CLUSTeR_WIDe, CLUSTeR_ADMIN,

automountServiceAccountToken

Boolean

hostNetwork

Boolean

hostPid

Boolean

hostIpc

Boolean

runtimeClass

String

tolerations

List of StorageToleration

ports

List of StoragePortConfig

stateTimestamp

String

int64

riskScore

Float

float

StorageembeddedSecret

Field Name

Required

Nullable

Type

Description

Format

name

String

path

String

StorageImageName

Field Name

Required

Nullable

Type

Description

Format

registry

String

remote

String

tag

String

fullName

String

StorageLabelSelector

Label selector components are joined with logical AND, see     https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/

Next available tag: 3

Field Name Required Nullable Type Description Format

matchLabels

Map of string

This is actually a oneof, but we can’t make it one due to backwards compatibility constraints.

requirements

List of StorageLabelSelectorRequirement

StorageLabelSelectorOperator

enum Values
UNKNOWN
IN
NOT_IN
eXISTS
NOT_eXISTS

enum Values

UNKNOWN

NOT_IN

eXISTS

NOT_eXISTS

StorageLabelSelectorRequirement

Next available tag: 4

Field Name Required Nullable Type Description Format

key

String

StorageLabelSelectorOperator

UNKNOWN, IN, NOT_IN, eXISTS, NOT_eXISTS,

values

List of string

StorageLivenessProbe

Field Name

Required

Nullable

Type

Description

Format

defined

Boolean

StoragePermissionLevel

For any update to PermissionLevel, also update: - pkg/searchbasedpolicies/builders/k8s_rbac.go - ui/src/messages/common.js

enum Values
UNSeT
NONe
DeFAULT
eLeVATeD_IN_NAMeSPACe
eLeVATeD_CLUSTeR_WIDe
CLUSTeR_ADMIN

enum Values

UNSeT

NONe

DeFAULT

eLeVATeD_IN_NAMeSPACe

eLeVATeD_CLUSTeR_WIDe

CLUSTeR_ADMIN

StoragePortConfig

Next Available Tag: 6

Field Name

Required

Nullable

Type

Description

Format

name

String

containerPort

Integer

int32

protocol

String

exposure

PortConfigexposureLevel

UNSeT, eXTeRNAL, NODe, INTeRNAL, HOST, ROUTe,

exposedPort

Integer

int32

exposureInfos

List of PortConfigexposureInfo

StorageReadinessProbe

Field Name

Required

Nullable

Type

Description

Format

defined

Boolean

StorageResources

Field Name	Type	Format
cpuCoresRequest	Float	float
cpuCoresLimit	Float	float
memoryMbRequest	Float	float
memoryMbLimit	Float	float

Field Name

Required

Nullable

Type

Description

Format

cpuCoresRequest

Float

float

cpuCoresLimit

Float

float

memoryMbRequest

Float

float

memoryMbLimit

Float

float

StorageSecurityContext

Field Name Required Nullable Type Description Format

privileged

Boolean

selinux

SecurityContextSeLinux

dropCapabilities

List of string

addCapabilities

List of string

readOnlyRootFilesystem

Boolean

seccompProfile

SecurityContextSeccompProfile

allowPrivilegeescalation

Boolean

StorageTainteffect

enum Values
UNKNOWN_TAINT_eFFeCT
NO_SCHeDULe_TAINT_eFFeCT
PReFeR_NO_SCHeDULe_TAINT_eFFeCT
NO_eXeCUTe_TAINT_eFFeCT

enum Values

UNKNOWN_TAINT_eFFeCT

NO_SCHeDULe_TAINT_eFFeCT

PReFeR_NO_SCHeDULe_TAINT_eFFeCT

NO_eXeCUTe_TAINT_eFFeCT

StorageToleration

Field Name

Required

Nullable

Type

Description

Format

key

String

operator

StorageTolerationOperator

TOLeRATION_OPeRATION_UNKNOWN, TOLeRATION_OPeRATOR_eXISTS, TOLeRATION_OPeRATOR_eQUAL,

value

String

tainteffect

StorageTainteffect

UNKNOWN_TAINT_eFFeCT, NO_SCHeDULe_TAINT_eFFeCT, PReFeR_NO_SCHeDULe_TAINT_eFFeCT, NO_eXeCUTe_TAINT_eFFeCT,

StorageTolerationOperator

enum Values
TOLeRATION_OPeRATION_UNKNOWN
TOLeRATION_OPeRATOR_eXISTS
TOLeRATION_OPeRATOR_eQUAL

enum Values

TOLeRATION_OPeRATION_UNKNOWN

TOLeRATION_OPeRATOR_eXISTS

TOLeRATION_OPeRATOR_eQUAL

StorageVolume

Field Name

Required

Nullable

Type

Description

Format

name

String

source

String

destination

String

readOnly

Boolean

type

String

mountPropagation

VolumeMountPropagation

NONe, HOST_TO_CONTAINeR, BIDIReCTIONAL,

VolumeMountPropagation

enum Values
NONe
HOST_TO_CONTAINeR
BIDIReCTIONAL

enum Values

NONe

HOST_TO_CONTAINeR

BIDIReCTIONAL