diff --git a/pages/api-reference/kubernetes/agent-api-reference.md b/pages/api-reference/kubernetes/agent-api-reference.md index 25161a0d..bae41945 100644 --- a/pages/api-reference/kubernetes/agent-api-reference.md +++ b/pages/api-reference/kubernetes/agent-api-reference.md @@ -79,6 +79,7 @@ _Appears in:_ | `clusterPingInterval` _string_ | ClusterPingInterval specifies the interval at which the agent pings the cluster.
Set to "0s" to disable cluster pings. | | | | `compatibilityUploadInterval` _string_ | CompatibilityUploadInterval determines how frequently the agent uploads compatibility data.
Set to "0s" to disable compatibility uploads. | | | | `stackPollInterval` _string_ | StackPollInterval sets how often the agent polls for stack updates or changes.
Set to "0s" to disable stack polling. | | | +| `sentinelPollInterval` _string_ | SentinelPollInterval sets how often the agent polls for sentinel run jobs.
Set to "0s" to disable sentinel run job polling. | | | | `pipelineGateInterval` _string_ | PipelineGateInterval specifies how frequently the agent checks pipeline gates.
Set to "0s" to disable pipeline gate checks. | | | | `maxConcurrentReconciles` _integer_ | MaxConcurrentReconciles controls the maximum number of concurrent reconcile loops.
Higher values can increase throughput at the cost of resource usage. | | | | `vulnerabilityReportUploadInterval` _string_ | VulnerabilityReportUploadInterval sets how often vulnerability reports are uploaded.
Set to "0s" to disable vulnerability report uploads. | | | @@ -165,6 +166,7 @@ _Appears in:_ | `runtimeRef` _[AgentRuntimeReference](#agentruntimereference)_ | | | Required: \{\}
| | `prompt` _string_ | Prompt is the task/prompt given to the agent | | Required: \{\}
| | `repository` _string_ | Repository is the git repository the agent will work with | | Required: \{\}
| +| `branch` _string_ | Branch is the repository branch the agent should operate on. If omitted, the repository default branch is used. | | Optional: \{\}
| | `mode` _[AgentRunMode](#agentrunmode)_ | Mode defines how the agent should run (ANALYZE, WRITE) | | Required: \{\}
| | `flowId` _string_ | FlowID is the flow this agent run is associated with (optional) | | Optional: \{\}
| | `language` _[AgentRunLanguage](#agentrunlanguage)_ | Language is the programming language used in the agent run.
Deprecated: No longer used for image selection. Enable dind on the AgentRuntime instead. | | Optional: \{\}
| @@ -265,12 +267,15 @@ _Appears in:_ | `template` _[PodTemplateSpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#podtemplatespec-v1-core)_ | Template defines the pod template for this agent runtime. | | | | `config` _[AgentRuntimeConfig](#agentruntimeconfig)_ | Config contains typed configuration depending on the chosen runtime type. | | Optional: \{\}
| | `aiProxy` _boolean_ | AiProxy routes LLM requests through the Console AI proxy (/ext/ai) using the deploy token,
so provider API keys in spec.config are optional.
Set the model on the runtime-specific config block (for example spec.config.codex.model).
The proxy expects models in provider/name format (for example openai/gpt-5.4,
anthropic/claude-sonnet-4-5, vertex/gemini-2.5-pro). Values that already include a "/"
are passed through unchanged.
When only a bare model id is given, the harness may prefix it by runtime type:
- CLAUDE: anthropic/\{model\} (for example claude-sonnet-4-5 -> anthropic/claude-sonnet-4-5)
- CODEX, OPENCODE: openai/\{model\} (for example gpt-5.4 -> openai/gpt-5.4)
- GEMINI: vertex/\{model\}
- CUSTOM: no automatic prefix; use provider/name explicitly | | | +| `streamingProxy` _boolean_ | StreamingProxy routes OpenAI-compatible LLM requests through the in-pod mcpserver
sse conversion proxy before they reach the Console AI proxy (/ext/ai). Only valid when aiProxy
is enabled. Applies to CODEX and OPENCODE runtimes. | | Optional: \{\}
| | `dind` _boolean_ | Dind enables Docker-in-Docker for this agent runtime.
When true, the runtime will be configured to run with DinD support. | | Optional: \{\}
| +| `memory` _boolean_ | Memory enables team-shared codebase-memory persistence for this agent runtime.
When true, agents may create and commit .codebase-memory/ graph artifacts
by default so future runs can bootstrap from the persisted index. When false
or unset, codebase-memory indexes stay in the pod-local cache and generated
.codebase-memory/ artifacts are excluded from commits. | | Optional: \{\}
| | `allowedRepositories` _string array_ | AllowedRepositories the git repositories allowed to be used with this runtime. | | Optional: \{\}
| | `browser` _[BrowserConfig](#browserconfig)_ | Browser configuration augments agent runtime with a headless browser.
When provided, the runtime will be configured to run with a headless browser available
for the agent to use. | | Optional: \{\}
| | `bootstrapScript` _string_ | BootstrapScript is a bash script that will be executed inside the cloned repository
directory before the coding agent starts. It can be used to install dependencies,
configure tooling, or perform any other setup required by the agent. | | Optional: \{\}
| | `git` _[GitSpec](#gitspec)_ | Git configure commit signing on agent run. When provided, the runtime will be configured to sign git commits using the provided key reference. | | | | `babysitInterval` _[Duration](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#duration-v1-meta)_ | BabysitInterval configures the interval for the operator to check on the health of the agent runtime and perform necessary babysitting actions (e.g. restarting unhealthy runtimes). When not provided, a default interval of 1 minute will be used. | | | +| `agentTTL` _[Duration](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#duration-v1-meta)_ | AgentTTL configures the maximum lifetime for agent run pods on this runtime. When not provided, a default TTL of 12 hours will be used. | | Optional: \{\}
| | `scmConnection` _string_ | ScmConnection is the name of an ScmConnection in Console to use for git operations on agent runs using this runtime.
This should match the name of an existing ScmConnection resource or connection created in the Plural UI. | | Optional: \{\}
| | `exaConnection` _[ExaConnection](#exaconnection)_ | ExaConnection enables Exa web search and content retrieval tools on the Plural MCP server. | | | @@ -528,6 +533,23 @@ _Appears in:_ +#### CostProvider + +_Underlying type:_ _string_ + +CostProvider identifies which cost allocation backend to query. + + + +_Appears in:_ +- [KubecostExtractorSpec](#kubecostextractorspec) + +| Field | Description | +| --- | --- | +| `Kubecost` | | +| `OpenCost` | | + + #### CustomHealth @@ -560,6 +582,9 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | | `script` _string_ | | | | +| `group` _string_ | | | Optional: \{\}
| +| `version` _string_ | | | Optional: \{\}
| +| `kind` _string_ | | | Optional: \{\}
| @@ -814,8 +839,9 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | +| `provider` _[CostProvider](#costprovider)_ | Provider selects which cost backend to query. Defaults to Kubecost. | Kubecost | Enum: [Kubecost OpenCost]
Optional: \{\}
| | `interval` _string_ | | 1h | Optional: \{\}
| -| `kubecostServiceRef` _[ObjectReference](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#objectreference-v1-core)_ | | | | +| `kubecostServiceRef` _[ObjectReference](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#objectreference-v1-core)_ | KubecostServiceRef points at the cost analyzer Service. When omitted, defaults
are chosen from provider: kubecost-cost-analyzer/kubecost or opencost/opencost. | | Optional: \{\}
| | `kubecostPort` _integer_ | | | Optional: \{\}
| | `recommendationThreshold` _string_ | RecommendationThreshold float value for example: `1.2 or 0.001` | | | | `recommendationsSettings` _[RecommendationsSettings](#recommendationssettings)_ | | | Optional: \{\}
| diff --git a/pages/api-reference/kubernetes/management-api-reference.md b/pages/api-reference/kubernetes/management-api-reference.md index 5a0165e3..30f3ae25 100644 --- a/pages/api-reference/kubernetes/management-api-reference.md +++ b/pages/api-reference/kubernetes/management-api-reference.md @@ -97,12 +97,14 @@ _Appears in:_ | `enabled` _boolean_ | Enabled defines whether to enable the AI integration or not. | false | Optional: \{\}
| | `analysisRates` _[AnalysisRates](#analysisrates)_ | Configure the pace at which AI insight analysis should run. Useful if you want to minimize impacts on inference costs. | | Optional: \{\}
| | `tools` _[Tools](#tools)_ | Tools holds the configuration for the tools that can be used with the AI integration. | | Optional: \{\}
| -| `provider` _[AiProvider](#aiprovider)_ | Provider defines which of the supported LLM providers should be used. | OPENAI | Enum: [OPENAI OPENAI_COMPATIBLE ANTHROPIC OLLAMA AZURE BEDROCK VERTEX]
Optional: \{\}
| -| `toolProvider` _[AiProvider](#aiprovider)_ | ToolProvider to use for tool calling, in case you want to use a different LLM more optimized to those tasks | | Enum: [OPENAI OPENAI_COMPATIBLE ANTHROPIC OLLAMA AZURE BEDROCK VERTEX]
Optional: \{\}
| +| `provider` _[AiProvider](#aiprovider)_ | Provider defines which of the supported LLM providers should be used. | OPENAI | Enum: [OPENAI OPENAI_COMPATIBLE XAI ANTHROPIC OLLAMA AZURE BEDROCK VERTEX]
Optional: \{\}
| +| `toolProvider` _[AiProvider](#aiprovider)_ | ToolProvider to use for tool calling, in case you want to use a different LLM more optimized to those tasks | | Enum: [OPENAI OPENAI_COMPATIBLE XAI ANTHROPIC OLLAMA AZURE BEDROCK VERTEX]
Optional: \{\}
| +| `streaming` _boolean_ | Streaming defines whether to stream responses from LLM providers. | true | Optional: \{\}
| | `embeddingProvider` _[AiProvider](#aiprovider)_ | EmbeddingProvider to use for generating embeddings. Oftentimes foundational
model providers do not have embeddings models, and it's better to simply use OpenAI. | | Enum: [OPENAI OPENAI_COMPATIBLE ANTHROPIC OLLAMA AZURE BEDROCK VERTEX]
Optional: \{\}
| | `logAnalysis` _boolean_ | LogAnalysis defines whether to enable log analysis in AI insights (turn off to save on log query costs) | | Optional: \{\}
| | `openAI` _[OpenAISettings](#openaisettings)_ | OpenAI holds the OpenAI provider configuration. | | Optional: \{\}
| | `openAICompatible` _[OpenAISettings](#openaisettings)_ | OpenAICompatible holds the OpenAI-compatible provider configuration. | | Optional: \{\}
| +| `xai` _[OpenAISettings](#openaisettings)_ | XAI holds the xAI provider configuration. This is OpenAI compatible, so uses an equivalent typing. | | Optional: \{\}
| | `anthropic` _[AIProviderSettings](#aiprovidersettings)_ | Anthropic holds the Anthropic provider configuration. | | Optional: \{\}
| | `ollama` _[OllamaSettings](#ollamasettings)_ | Ollama holds configuration for a self-hosted Ollama deployment,
more details available at https://github.com/ollama/ollama | | Optional: \{\}
| | `azure` _[AzureOpenAISettings](#azureopenaisettings)_ | Azure holds configuration for using AzureOpenAI to generate LLM insights | | Optional: \{\}
| @@ -582,6 +584,7 @@ _Appears in:_ | `aws` _[AWSCloudConnection](#awscloudconnection)_ | | | | | `gcp` _[GCPCloudConnection](#gcpcloudconnection)_ | | | | | `azure` _[AzureCloudConnection](#azurecloudconnection)_ | | | | +| `vsphere` _[VsphereCloudConnection](#vspherecloudconnection)_ | | | | @@ -600,7 +603,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | | `name` _string_ | Name of this CloudConnection. If not provided CloudConnection's own name
from CloudConnection.ObjectMeta will be used. | | Optional: \{\}
| -| `provider` _[CloudProvider](#cloudprovider)_ | Provider is the name of the cloud service for the Provider.
One of (CloudProvider): [gcp, aws, azure] | | Enum: [gcp aws azure]
Required: \{\}
Type: string
| +| `provider` _[CloudProvider](#cloudprovider)_ | Provider is the name of the cloud service for the Provider.
One of (CloudProvider): [gcp, aws, azure, vsphere] | | Enum: [gcp aws azure vsphere]
Required: \{\}
Type: string
| | `configuration` _[CloudConnectionConfiguration](#cloudconnectionconfiguration)_ | Configuration contains the cloud connection configuration. | | Required: \{\}
| | `readBindings` _[Binding](#binding) array_ | ReadBindings is a list of bindings that defines
who can use this CloudConnection. | | Optional: \{\}
| | `reconciliation` _[Reconciliation](#reconciliation)_ | Reconciliation settings for this resource.
Controls drift detection and reconciliation intervals. | | Optional: \{\}
| @@ -622,6 +625,7 @@ _Appears in:_ | `aws` | AWS represents Amazon Web Services as a cloud provider
| | `azure` | Azure represents Microsoft Azure as a cloud provider
| | `gcp` | GCP represents Google Cloud Platform as a cloud provider
| +| `vsphere` | Vsphere represents VMware vSphere as a cloud provider
| #### Cluster @@ -1004,6 +1008,7 @@ _Appears in:_ | `cmd` _string_ | Cmd is the command to execute | | Required: \{\}
| | `args` _string array_ | Args are the arguments to pass to the command. | | Optional: \{\}
| | `dir` _string_ | Dir is the working directory for the command. | | Optional: \{\}
| +| `approve` _boolean_ | Approve determines whether this command should run in the approval-gated stage. | | Optional: \{\}
| #### CompatibilityMatrixSummary @@ -1394,6 +1399,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | | `agentHelmValues` _[RawExtension](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#rawextension-runtime-pkg)_ | AgentHelmValues custom helm values to apply
to all agents (useful for things like adding
customary annotations/labels) | | Optional: \{\}
| +| `agentHelmValuesTemplateable` _boolean_ | AgentHelmValuesTemplateable indicates whether to render
agent helm values as a template. | | Optional: \{\}
| | `managementRepo` _string_ | ManagementRepo is the root repo for setting up
your infrastructure with Plural. Usually this
will be your `plural up repo` | | Optional: \{\}
| | `stacks` _[StackSettings](#stacksettings)_ | Stacks global configuration for stack execution. | | Optional: \{\}
| | `bindings` _[DeploymentSettingsBindings](#deploymentsettingsbindings)_ | Bindings global configuration for access control. | | Optional: \{\}
| @@ -1897,6 +1903,23 @@ _Appears in:_ | `passwordSecretRef` _[SecretKeySelector](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#secretkeyselector-v1-core)_ | PasswordSecretRef is a reference to a secret containing the password to connect with basic auth. | | Optional: \{\}
| +#### HTTPHeader + + + + + + + +_Appears in:_ +- [OpenAISettings](#openaisettings) + +| Field | Description | Default | Validation | +| --- | --- | --- | --- | +| `name` _string_ | Name is the HTTP header name. | | Required: \{\}
| +| `value` _string_ | Value is the HTTP header value. | | Required: \{\}
| + + #### HelmMinimal @@ -1956,6 +1979,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | +| `proxy` _[HttpProxyConfiguration](#httpproxyconfiguration)_ | Proxy configures an HTTP proxy for requests to this Helm repository or OCI registry. | | Optional: \{\}
| | `basic` _[HelmRepositoryAuthBasic](#helmrepositoryauthbasic)_ | Basic specifies username/password authentication for repositories that support HTTP Basic Auth.
Commonly used with private Helm repositories, Harbor registries, and other traditional
repository managers that implement standard HTTP authentication. | | Optional: \{\}
| | `bearer` _[HelmRepositoryAuthBearer](#helmrepositoryauthbearer)_ | Bearer specifies token-based authentication for repositories that support Bearer tokens.
Used with modern container registries and repositories that implement OAuth2 or similar
token-based authentication schemes. | | Optional: \{\}
| | `aws` _[HelmRepositoryAuthAWS](#helmrepositoryauthaws)_ | Aws specifies AWS-specific authentication for Amazon ECR and other AWS-hosted repositories.
Supports both static credentials and IAM role-based authentication for secure access
to private repositories hosted in Amazon Web Services. | | Optional: \{\}
| @@ -2092,6 +2116,7 @@ _Appears in:_ _Appears in:_ +- [HelmRepositoryAuth](#helmrepositoryauth) - [PrAutomationSpec](#prautomationspec) - [ScmConnectionSpec](#scmconnectionspec) @@ -2136,7 +2161,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | | `name` _string_ | Name of this stack.
If not provided, the name from InfrastructureStack.ObjectMeta will be used. | | Optional: \{\}
| -| `type` _[StackType](#stacktype)_ | Type specifies the IaC tool to use for executing the stack.
One of TERRAFORM, TERRAGRUNT, ANSIBLE, CUSTOM. | | Enum: [TERRAFORM TERRAGRUNT ANSIBLE CUSTOM]
Required: \{\}
| +| `type` _[StackType](#stacktype)_ | Type specifies the IaC tool to use for executing the stack.
One of TERRAFORM, TERRAGRUNT, PULUMI, ANSIBLE, CUSTOM. | | Enum: [TERRAFORM TERRAGRUNT PULUMI ANSIBLE CUSTOM]
Required: \{\}
| | `interval` _string_ | Interval specifies the interval at which the stack will be reconciled, default is 5m | | Optional: \{\}
| | `repositoryRef` _[ObjectReference](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#objectreference-v1-core)_ | RepositoryRef references the GitRepository containing the IaC source code. Leave empty to use git:url instead. | | Optional: \{\}
| | `clusterRef` _[ObjectReference](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#objectreference-v1-core)_ | ClusterRef references the target Cluster where this stack will be executed. | | Optional: \{\}
| @@ -2604,6 +2629,7 @@ _Appears in:_ - [AWSCloudConnection](#awscloudconnection) - [AzureCloudConnection](#azurecloudconnection) - [GCPCloudConnection](#gcpcloudconnection) +- [VsphereCloudConnection](#vspherecloudconnection) | Field | Description | Default | Validation | | --- | --- | --- | --- | @@ -2943,6 +2969,22 @@ _Appears in:_ | `prompt` _string_ | The prompt to use to guide the AI code change for this PR. | | Required: \{\}
| +#### ObserverRenovate + + + +ObserverRenovate defines Renovate regex versioning options for observer target ordering. + + + +_Appears in:_ +- [ObserverTarget](#observertarget) + +| Field | Description | Default | Validation | +| --- | --- | --- | --- | +| `ignoreUnstable` _boolean_ | IgnoreUnstable skips prerelease values captured by the target format regex. | | Optional: \{\}
| + + #### ObserverSpec @@ -2984,7 +3026,8 @@ _Appears in:_ | --- | --- | --- | --- | | `type` _[ObserverTargetType](#observertargettype)_ | Type specifies the kind of external source to monitor.
Each type has different configuration requirements and polling mechanisms.
Supported types include Helm charts, OCI images, Git tags, and Kubernetes add-ons. | | Enum: [OCI HELM GIT ADDON EKS_ADDON]
Required: \{\}
Type: string
| | `format` _string_ | Format is a regex pattern with a capture group for extracting version information.
Useful when version strings are embedded in larger release names or tags.
The first capture group is used as the version value.
Example: "app-v([0-9]+.[0-9]+.[0-9]+)" extracts "1.2.3" from "app-v1.2.3". | | Optional: \{\}
| -| `order` _[ObserverTargetOrder](#observertargetorder)_ | Order determines how discovered versions are sorted and which one is selected.
SEMVER sorts by semantic version rules, while LATEST uses chronological ordering.
SEMVER is recommended for most use cases as it provides predictable version ordering. | | Enum: [SEMVER LATEST]
Required: \{\}
Type: string
| +| `order` _[ObserverTargetOrder](#observertargetorder)_ | Order determines how discovered versions are sorted and which one is selected.
SEMVER sorts by semantic version rules, LATEST uses chronological ordering,
and RENOVATE uses regex capture groups with Renovate-style version comparison. | | Enum: [SEMVER LATEST RENOVATE]
Required: \{\}
Type: string
| +| `renovate` _[ObserverRenovate](#observerrenovate)_ | Renovate contains options for RENOVATE target ordering.
Used when Order is RENOVATE to control prerelease filtering and related behavior. | | Optional: \{\}
| | `helm` _[ObserverHelm](#observerhelm)_ | Helm contains configuration for monitoring Helm chart repositories.
Used when Type is HELM to specify the repository URL, chart name, and authentication. | | Optional: \{\}
| | `oci` _[ObserverOci](#observeroci)_ | OCI contains configuration for monitoring OCI (container) registries.
Used when Type is OCI to specify the registry URL and authentication credentials. | | Optional: \{\}
| | `git` _[ObserverGit](#observergit)_ | Git contains configuration for monitoring Git repository tags.
Used when Type is GIT to specify which Git repository to monitor for new tags. | | Optional: \{\}
| @@ -3030,6 +3073,7 @@ _Appears in:_ | `proxyModels` _string array_ | ProxyModels are additional models to support within our integrated ai proxy. | | Optional: \{\}
| | `baseUrl` _string_ | BaseUrl is a custom base url to use, for reimplementations of the same API scheme (for instance Together.ai uses the OpenAI API spec). Should be similar to https://api.openai.com/v1 | | Optional: \{\}
| | `tokenExchange` _[OAuth2TokenExchange](#oauth2tokenexchange)_ | TokenExchange configures OAuth2 client credentials against a token endpoint to obtain access tokens for OpenAI-compatible APIs. | | Optional: \{\}
| +| `headers` _[HTTPHeader](#httpheader) array_ | Headers are custom HTTP headers to include in OpenAI-compatible API requests. | | Optional: \{\}
| | `method` _[OpenAiMethod](#openaimethod)_ | Method to use for openai api calls (defaults to auto, but can be used to restrict to only responses or chart completions apis, useful for configuring against common AI proxies) | | Enum: [CHAT RESPONSES AUTO]
Optional: \{\}
| | `tokenSecretRef` _[SecretKeySelector](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#secretkeyselector-v1-core)_ | TokenSecretRef is a reference to the local secret holding the token to access
the configured AI provider. | | Required: \{\}
| @@ -3134,6 +3178,7 @@ _Appears in:_ | `all` _boolean_ | All enables the complete UI interface for this persona when set to true.
This overrides individual feature settings and provides full access to all Console features.
Useful for administrative personas that need unrestricted access to all functionality. | | Optional: \{\}
| | `home` _[PersonaHome](#personahome)_ | Home configures the homepage layout and content for this persona.
Different personas can have customized homepages that highlight the most relevant
information and workflows for their specific role and responsibilities. | | Optional: \{\}
| | `deployments` _[PersonaDeployment](#personadeployment)_ | Deployments controls access to deployment-related features and sections.
This includes clusters, services, pipelines, and other deployment management tools.
Useful for controlling which teams can view or manage different aspects of deployments. | | Optional: \{\}
| +| `flows` _[PersonaFlows](#personaflows)_ | Flows controls access to flow-related features and sections.
This includes workbenches, pipelines, and preview environments grouped under flows. | | Optional: \{\}
| | `sidebar` _[PersonaSidebar](#personasidebar)_ | Sidebar configures which navigation items and sections are visible in the main sidebar.
This allows personas to have streamlined navigation focused on their primary workflows
while hiding irrelevant or restricted functionality. | | Optional: \{\}
| | `services` _[PersonaServices](#personaservices)_ | Services controls access to service-specific features and configuration options.
This includes service configuration, secrets management, and other service-level operations. | | Optional: \{\}
| | `ai` _[PersonaAI](#personaai)_ | AI configures access to AI-powered features and capabilities within the Console.
This includes AI-assisted operations, automated suggestions, and other intelligent features. | | Optional: \{\}
| @@ -3163,6 +3208,28 @@ _Appears in:_ | `addOns` _boolean_ | AddOns enables access to Kubernetes add-on management features when set to true.
This includes installing, configuring, and managing cluster add-ons. | | Optional: \{\}
| +#### PersonaFlows + + + +PersonaFlows defines access controls for flow-related features and views. +These settings determine which flow management capabilities are visible and +accessible to users assigned to this persona. + + + +_Appears in:_ +- [PersonaConfiguration](#personaconfiguration) + +| Field | Description | Default | Validation | +| --- | --- | --- | --- | +| `permissions` _boolean_ | Permissions enables the permissions action in the flow header when set to true.
This allows personas to manage flow permissions from the flow detail page. | | Optional: \{\}
| +| `startWorkbenchJob` _boolean_ | StartWorkbenchJob enables the "Start workbench job" action in the flow header when set to true.
This allows personas to launch workbench jobs directly from the flow detail page. | | Optional: \{\}
| +| `workbenches` _boolean_ | Workbenches enables access to flow workbench features when set to true.
This includes viewing and using workbenches associated with flows. | | Optional: \{\}
| +| `pipelines` _boolean_ | Pipelines enables access to flow pipeline features when set to true.
This includes viewing and managing pipelines associated with flows. | | Optional: \{\}
| +| `previews` _boolean_ | Previews enables access to flow preview environment features when set to true.
This includes viewing and managing preview environments associated with flows. | | Optional: \{\}
| + + #### PersonaHome @@ -3219,6 +3286,8 @@ _Appears in:_ | `audits` _boolean_ | Audits enables access to audit logs and compliance reporting features when set to true.
This includes viewing system audit trails, user activity logs, and compliance reports.
Typically enabled for security teams and compliance officers. | | Optional: \{\}
| | `kubernetes` _boolean_ | Kubernetes enables access to direct Kubernetes management features when set to true.
This includes raw Kubernetes resource management, kubectl-like operations,
and low-level cluster administration tasks. | | Optional: \{\}
| | `pullRequests` _boolean_ | PullRequests enables access to pull request management features when set to true.
This includes viewing and managing pull requests and Git-based deployment automation features. | | Optional: \{\}
| +| `flows` _boolean_ | Flows enables access to the flows navigation item when set to true.
This includes viewing and managing flow resources from the main sidebar. | | Optional: \{\}
| +| `workbenches` _boolean_ | Workbenches enables access to the workbenches navigation item when set to true.
This includes viewing and managing workbenches from the main sidebar. | | Optional: \{\}
| | `settings` _boolean_ | Settings enables access to system configuration and administrative settings when set to true.
This includes user management, system configuration, integration settings,
and other administrative functions. Typically restricted to administrators. | | Optional: \{\}
| | `backups` _boolean_ | Backups enables access to backup and restore management features when set to true.
This includes configuring backup policies, managing backup storage,
and performing restore operations for disaster recovery. | | Optional: \{\}
| | `stacks` _boolean_ | Stacks enables access to Infrastructure as Code (IaC) stack management when set to true.
This includes managing Terraform stacks and other IaC
automation tools for infrastructure provisioning and management. | | Optional: \{\}
| @@ -4067,6 +4136,27 @@ _Appears in:_ | `reconciliation` _[Reconciliation](#reconciliation)_ | Reconciliation settings for this resource.
Controls drift detection and reconciliation intervals. | | Optional: \{\}
| +#### PulumiConfiguration + + + + + + + +_Appears in:_ +- [StackConfiguration](#stackconfiguration) +- [StackOverrides](#stackoverrides) + +| Field | Description | Default | Validation | +| --- | --- | --- | --- | +| `parallel` _integer_ | Parallel is the number of resource operations to run concurrently,
equivalent to the --parallel flag in pulumi preview, up, and destroy. | | Optional: \{\}
| +| `refresh` _boolean_ | Refresh is whether to refresh the state of the stack,
equivalent to the --refresh flag in pulumi preview, up, and destroy. | | Optional: \{\}
| +| `approveEmpty` _boolean_ | ApproveEmpty is whether to auto-approve a plan if there are no changes, preventing a stack from being blocked. | | Optional: \{\}
| +| `stack` _string_ | Stack is the pulumi stack name to operate on,
equivalent to the --stack flag in pulumi preview, up, and destroy. | | Optional: \{\}
| +| `backendUrl` _string_ | BackendUrl is an opaque URL passed to pulumi login for the state backend. When omitted, Pulumi Cloud is used.
It supports self-hosted Pulumi Cloud, S3, GCS, Azure Blob, and other Pulumi-supported login URLs. | | Optional: \{\}
| + + #### Reconciliation @@ -4987,6 +5077,7 @@ _Appears in:_ | `hooks` _[StackHook](#stackhook) array_ | Hooks to run at various stages of the stack run. | | Optional: \{\}
| | `terraform` _[TerraformConfiguration](#terraformconfiguration)_ | Terraform configuration for this stack. | | Optional: \{\}
| | `terragrunt` _[TerragruntConfiguration](#terragruntconfiguration)_ | Terragrunt configuration for this stack. | | Optional: \{\}
| +| `pulumi` _[PulumiConfiguration](#pulumiconfiguration)_ | Pulumi configuration for this stack. | | Optional: \{\}
| | `ansible` _[AnsibleConfiguration](#ansibleconfiguration)_ | Ansible configuration for this stack. | | Optional: \{\}
| | `aiApproval` _[AiApprovalConfiguration](#aiapprovalconfiguration)_ | AiApproval configuration for this stack to be auto-approved by AI according to rules sourced from Git. | | Optional: \{\}
| @@ -5121,6 +5212,7 @@ _Appears in:_ | --- | --- | --- | --- | | `terraform` _[TerraformConfiguration](#terraformconfiguration)_ | Terraform is the terraform configuration for this stack | | Optional: \{\}
| | `terragrunt` _[TerragruntConfiguration](#terragruntconfiguration)_ | Terragrunt is the terragrunt configuration for this stack | | Optional: \{\}
| +| `pulumi` _[PulumiConfiguration](#pulumiconfiguration)_ | Pulumi is the pulumi configuration for this stack | | Optional: \{\}
| #### StackSettings @@ -5369,6 +5461,26 @@ _Appears in:_ | `serviceAccountJsonSecretRef` _[SecretKeySelector](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#secretkeyselector-v1-core)_ | ServiceAccountJsonSecretRef is a Service Account json file stored w/in a kubernetes secret to use for authentication to GCP | | Optional: \{\}
| +#### VsphereCloudConnection + + + +VsphereCloudConnection contains VMware vSphere authentication configuration. +Provides credentials for discovering and querying vSphere resources. + + + +_Appears in:_ +- [CloudConnectionConfiguration](#cloudconnectionconfiguration) + +| Field | Description | Default | Validation | +| --- | --- | --- | --- | +| `server` _string_ | The vCenter SDK endpoint, for example https://vcenter.example.com/sdk | | | +| `user` _string_ | The vCenter user | | | +| `password` _[ObjectKeyReference](#objectkeyreference)_ | The vCenter password | | | +| `allowUnverifiedSsl` _boolean_ | Whether to allow unverified vCenter TLS certificates | | Optional: \{\}
| + + #### Workbench