flows.netobserv.io_flowcollectors.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.16.2
  name: flowcollectors.flows.netobserv.io
spec:
  group: flows.netobserv.io
  names:
    kind: FlowCollector
    listKind: FlowCollectorList
    plural: flowcollectors
    singular: flowcollector
  scope: Cluster
  versions:
    - additionalPrinterColumns:
        - jsonPath: .spec.agent.type
          name: Agent
          type: string
        - jsonPath: .spec.agent.ebpf.sampling
          name: Sampling (EBPF)
          type: string
        - jsonPath: .spec.deploymentModel
          name: Deployment Model
          type: string
        - jsonPath: .status.conditions[?(@.type=="Ready")].reason
          name: Status
          type: string
      deprecated: true
      name: v1beta1
      schema:
        openAPIV3Schema:
          description: '`FlowCollector` is the schema for the network flows collection API, which pilots and configures the underlying deployments.'
          properties:
            apiVersion:
              description: |-
                APIVersion defines the versioned schema of this representation of an object.
                Servers should convert recognized schemas to the latest internal value, and
                may reject unrecognized values.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
              type: string
            kind:
              description: |-
                Kind is a string value representing the REST resource this object represents.
                Servers may infer this from the endpoint the client submits requests to.
                Cannot be updated.
                In CamelCase.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
              type: string
            metadata:
              type: object
            spec:
              description: |-
                Defines the desired state of the FlowCollector resource.
                <br><br>
                *: the mention of "unsupported", or "deprecated" for a feature throughout this document means that this feature
                is not officially supported by Red Hat. It might have been, for example, contributed by the community
                and accepted without a formal agreement for maintenance. The product maintainers might provide some support
                for these features as a best effort only.
              properties:
                agent:
                  description: Agent configuration for flows extraction.
                  properties:
                    ebpf:
                      description: |-
                        `ebpf` describes the settings related to the eBPF-based flow reporter when `spec.agent.type`
                        is set to `EBPF`.
                      properties:
                        cacheActiveTimeout:
                          default: 5s
                          description: |-
                            `cacheActiveTimeout` is the max period during which the reporter aggregates flows before sending.
                            Increasing `cacheMaxFlows` and `cacheActiveTimeout` can decrease the network traffic overhead and the CPU load,
                            however you can expect higher memory consumption and an increased latency in the flow collection.
                          pattern: ^\d+(ns|ms|s|m)?$
                          type: string
                        cacheMaxFlows:
                          default: 100000
                          description: |-
                            `cacheMaxFlows` is the max number of flows in an aggregate; when reached, the reporter sends the flows.
                            Increasing `cacheMaxFlows` and `cacheActiveTimeout` can decrease the network traffic overhead and the CPU load,
                            however you can expect higher memory consumption and an increased latency in the flow collection.
                          format: int32
                          minimum: 1
                          type: integer
                        debug:
                          description: |-
                            `debug` allows setting some aspects of the internal configuration of the eBPF agent.
                            This section is aimed exclusively for debugging and fine-grained performance optimizations,
                            such as `GOGC` and `GOMAXPROCS` env vars. Set these values at your own risk.
                          properties:
                            env:
                              additionalProperties:
                                type: string
                              description: |-
                                `env` allows passing custom environment variables to underlying components. Useful for passing
                                some very concrete performance-tuning options, such as `GOGC` and `GOMAXPROCS`, that should not be
                                publicly exposed as part of the FlowCollector descriptor, as they are only useful
                                in edge debug or support scenarios.
                              type: object
                          type: object
                        excludeInterfaces:
                          default:
                            - lo
                          description: |-
                            `excludeInterfaces` contains the interface names that are excluded from flow tracing.
                            An entry enclosed by slashes, such as `/br-/`, is matched as a regular expression.
                            Otherwise it is matched as a case-sensitive string.
                          items:
                            type: string
                          type: array
                        features:
                          description: |-
                            List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:<br>
                            - `PacketDrop`: enable the packets drop flows logging feature. This feature requires mounting
                            the kernel debug filesystem, so the eBPF pod has to run as privileged.
                            If the `spec.agent.ebpf.privileged` parameter is not set, an error is reported.<br>
                            - `DNSTracking`: enable the DNS tracking feature.<br>
                            - `FlowRTT`: enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.<br>
                            - `NetworkEvents`: enable the Network events monitoring feature. This feature requires mounting
                            the kernel debug filesystem, so the eBPF pod has to run as privileged.
                            - `PacketTranslation`: enable enriching flows with packet's translation information. <br>
                            - `EbpfManager`: allow using eBPF manager to manage netobserv ebpf programs. <br>
                            - `UDNMapping`, to enable interfaces mappind to udn. <br>
                          items:
                            description: |-
                              Agent feature, can be one of:<br>
                              - `PacketDrop`, to track packet drops.<br>
                              - `DNSTracking`, to track specific information on DNS traffic.<br>
                              - `FlowRTT`, to track TCP latency [Unsupported (*)].<br>
                              - `NetworkEvents`, to track Network events.<br>
                              - `PacketTranslation`, to enrich flows with packets translation information. <br>
                              - `EbpfManager`, to enable using EBPF Manager to manage netobserv ebpf programs [Developer Preview].<br>
                              - `UDNMapping`, to enable interfaces mappind to udn [Developer Preview]. <br>
                            enum:
                              - PacketDrop
                              - DNSTracking
                              - FlowRTT
                              - NetworkEvents
                              - PacketTranslation
                              - EbpfManager
                              - UDNMapping
                            type: string
                          type: array
                        flowFilter:
                          description: '`flowFilter` defines the eBPF agent configuration regarding flow filtering'
                          properties:
                            action:
                              description: '`action` defines the action to perform on the flows that match the filter. The available options are `Accept`, which is the default, and `Reject`.'
                              enum:
                                - Accept
                                - Reject
                              type: string
                            cidr:
                              description: |-
                                `cidr` defines the IP CIDR to filter flows by.
                                Examples: `10.10.10.0/24` or `100:100:100:100::/64`
                              type: string
                            destPorts:
                              anyOf:
                                - type: integer
                                - type: string
                              description: |-
                                `destPorts` optionally defines the destination ports to filter flows by.
                                To filter a single port, set a single port as an integer value. For example, `destPorts: 80`.
                                To filter a range of ports, use a "start-end" range in string format. For example, `destPorts: "80-100"`.
                                To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                              x-kubernetes-int-or-string: true
                            direction:
                              description: '`direction` optionally defines a direction to filter flows by. The available options are `Ingress` and `Egress`.'
                              enum:
                                - Ingress
                                - Egress
                              type: string
                            enable:
                              description: Set `enable` to `true` to enable the eBPF flow filtering feature.
                              type: boolean
                            icmpCode:
                              description: '`icmpCode`, for Internet Control Message Protocol (ICMP) traffic, optionally defines the ICMP code to filter flows by.'
                              type: integer
                            icmpType:
                              description: '`icmpType`, for ICMP traffic, optionally defines the ICMP type to filter flows by.'
                              type: integer
                            peerIP:
                              description: |-
                                `peerIP` optionally defines the remote IP address to filter flows by.
                                Example: `10.10.10.10`.
                              type: string
                            pktDrops:
                              description: '`pktDrops` optionally filters only flows containing packet drops.'
                              type: boolean
                            ports:
                              anyOf:
                                - type: integer
                                - type: string
                              description: |-
                                `ports` optionally defines the ports to filter flows by. It is used both for source and destination ports.
                                To filter a single port, set a single port as an integer value. For example, `ports: 80`.
                                To filter a range of ports, use a "start-end" range in string format. For example, `ports: "80-100"`.
                                To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                              x-kubernetes-int-or-string: true
                            protocol:
                              description: '`protocol` optionally defines a protocol to filter flows by. The available options are `TCP`, `UDP`, `ICMP`, `ICMPv6`, and `SCTP`.'
                              enum:
                                - TCP
                                - UDP
                                - ICMP
                                - ICMPv6
                                - SCTP
                              type: string
                            rules:
                              description: '`flowFilterRules` defines a list of ebpf agent flow filtering rules'
                              items:
                                description: '`EBPFFlowFilterRule` defines the desired eBPF agent configuration regarding flow filtering rule.'
                                properties:
                                  action:
                                    description: '`action` defines the action to perform on the flows that match the filter. The available options are `Accept`, which is the default, and `Reject`.'
                                    enum:
                                      - Accept
                                      - Reject
                                    type: string
                                  cidr:
                                    description: |-
                                      `cidr` defines the IP CIDR to filter flows by.
                                      Examples: `10.10.10.0/24` or `100:100:100:100::/64`
                                    type: string
                                  destPorts:
                                    anyOf:
                                      - type: integer
                                      - type: string
                                    description: |-
                                      `destPorts` optionally defines the destination ports to filter flows by.
                                      To filter a single port, set a single port as an integer value. For example, `destPorts: 80`.
                                      To filter a range of ports, use a "start-end" range in string format. For example, `destPorts: "80-100"`.
                                      To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                                    x-kubernetes-int-or-string: true
                                  direction:
                                    description: '`direction` optionally defines a direction to filter flows by. The available options are `Ingress` and `Egress`.'
                                    enum:
                                      - Ingress
                                      - Egress
                                    type: string
                                  icmpCode:
                                    description: '`icmpCode`, for Internet Control Message Protocol (ICMP) traffic, optionally defines the ICMP code to filter flows by.'
                                    type: integer
                                  icmpType:
                                    description: '`icmpType`, for ICMP traffic, optionally defines the ICMP type to filter flows by.'
                                    type: integer
                                  peerIP:
                                    description: |-
                                      `peerIP` optionally defines the remote IP address to filter flows by.
                                      Example: `10.10.10.10`.
                                    type: string
                                  pktDrops:
                                    description: '`pktDrops` optionally filters only flows containing packet drops.'
                                    type: boolean
                                  ports:
                                    anyOf:
                                      - type: integer
                                      - type: string
                                    description: |-
                                      `ports` optionally defines the ports to filter flows by. It is used both for source and destination ports.
                                      To filter a single port, set a single port as an integer value. For example, `ports: 80`.
                                      To filter a range of ports, use a "start-end" range in string format. For example, `ports: "80-100"`.
                                      To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                                    x-kubernetes-int-or-string: true
                                  protocol:
                                    description: '`protocol` optionally defines a protocol to filter flows by. The available options are `TCP`, `UDP`, `ICMP`, `ICMPv6`, and `SCTP`.'
                                    enum:
                                      - TCP
                                      - UDP
                                      - ICMP
                                      - ICMPv6
                                      - SCTP
                                    type: string
                                  sampling:
                                    description: '`sampling` sampling rate for the matched flow'
                                    format: int32
                                    type: integer
                                  sourcePorts:
                                    anyOf:
                                      - type: integer
                                      - type: string
                                    description: |-
                                      `sourcePorts` optionally defines the source ports to filter flows by.
                                      To filter a single port, set a single port as an integer value. For example, `sourcePorts: 80`.
                                      To filter a range of ports, use a "start-end" range in string format. For example, `sourcePorts: "80-100"`.
                                      To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                                    x-kubernetes-int-or-string: true
                                  tcpFlags:
                                    description: |-
                                      `tcpFlags` optionally defines TCP flags to filter flows by.
                                      In addition to the standard flags (RFC-9293), you can also filter by one of the three following combinations: `SYN-ACK`, `FIN-ACK`, and `RST-ACK`.
                                    enum:
                                      - SYN
                                      - SYN-ACK
                                      - ACK
                                      - FIN
                                      - RST
                                      - URG
                                      - ECE
                                      - CWR
                                      - FIN-ACK
                                      - RST-ACK
                                    type: string
                                type: object
                              maxItems: 16
                              minItems: 1
                              type: array
                            sampling:
                              description: '`sampling` sampling rate for the matched flow'
                              format: int32
                              type: integer
                            sourcePorts:
                              anyOf:
                                - type: integer
                                - type: string
                              description: |-
                                `sourcePorts` optionally defines the source ports to filter flows by.
                                To filter a single port, set a single port as an integer value. For example, `sourcePorts: 80`.
                                To filter a range of ports, use a "start-end" range in string format. For example, `sourcePorts: "80-100"`.
                                To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                              x-kubernetes-int-or-string: true
                            tcpFlags:
                              description: |-
                                `tcpFlags` optionally defines TCP flags to filter flows by.
                                In addition to the standard flags (RFC-9293), you can also filter by one of the three following combinations: `SYN-ACK`, `FIN-ACK`, and `RST-ACK`.
                              enum:
                                - SYN
                                - SYN-ACK
                                - ACK
                                - FIN
                                - RST
                                - URG
                                - ECE
                                - CWR
                                - FIN-ACK
                                - RST-ACK
                              type: string
                          type: object
                        imagePullPolicy:
                          default: IfNotPresent
                          description: '`imagePullPolicy` is the Kubernetes pull policy for the image defined above'
                          enum:
                            - IfNotPresent
                            - Always
                            - Never
                          type: string
                        interfaces:
                          description: |-
                            `interfaces` contains the interface names from where flows are collected. If empty, the agent
                            fetches all the interfaces in the system, excepting the ones listed in ExcludeInterfaces.
                            An entry enclosed by slashes, such as `/br-/`, is matched as a regular expression.
                            Otherwise it is matched as a case-sensitive string.
                          items:
                            type: string
                          type: array
                        kafkaBatchSize:
                          default: 1048576
                          description: '`kafkaBatchSize` limits the maximum size of a request in bytes before being sent to a partition. Ignored when not using Kafka. Default: 1MB.'
                          type: integer
                        logLevel:
                          default: info
                          description: '`logLevel` defines the log level for the NetObserv eBPF Agent'
                          enum:
                            - trace
                            - debug
                            - info
                            - warn
                            - error
                            - fatal
                            - panic
                          type: string
                        metrics:
                          description: '`metrics` defines the eBPF agent configuration regarding metrics'
                          properties:
                            disableAlerts:
                              description: |-
                                `disableAlerts` is a list of alerts that should be disabled.
                                Possible values are:<br>
                                `NetObservDroppedFlows`, which is triggered when the eBPF agent is missing packets or flows, such as when the BPF hashmap is busy or full, or the capacity limiter being triggered.<br>
                              items:
                                description: |-
                                  Name of an eBPF agent alert.
                                  Possible values are:<br>
                                  `NetObservDroppedFlows`, which is triggered when the eBPF agent is missing packets or flows, such as when the BPF hashmap is busy or full, or the capacity limiter being triggered.<br>
                                enum:
                                  - NetObservDroppedFlows
                                type: string
                              type: array
                            enable:
                              description: Set `enable` to `false` to disable eBPF agent metrics collection, by default it's `true`.
                              type: boolean
                            server:
                              description: Metrics server endpoint configuration for Prometheus scraper
                              properties:
                                port:
                                  description: The prometheus HTTP port
                                  format: int32
                                  maximum: 65535
                                  minimum: 1
                                  type: integer
                                tls:
                                  description: TLS configuration.
                                  properties:
                                    insecureSkipVerify:
                                      default: false
                                      description: |-
                                        `insecureSkipVerify` allows skipping client-side verification of the provided certificate.
                                        If set to `true`, the `providedCaFile` field is ignored.
                                      type: boolean
                                    provided:
                                      description: TLS configuration when `type` is set to `PROVIDED`.
                                      properties:
                                        certFile:
                                          description: '`certFile` defines the path to the certificate file name within the config map or secret'
                                          type: string
                                        certKey:
                                          description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                          type: string
                                        name:
                                          description: Name of the config map or secret containing certificates
                                          type: string
                                        namespace:
                                          default: ""
                                          description: |-
                                            Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                            If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                          type: string
                                        type:
                                          description: 'Type for the certificate reference: `configmap` or `secret`'
                                          enum:
                                            - configmap
                                            - secret
                                          type: string
                                      type: object
                                    providedCaFile:
                                      description: Reference to the CA file when `type` is set to `PROVIDED`.
                                      properties:
                                        file:
                                          description: File name within the config map or secret
                                          type: string
                                        name:
                                          description: Name of the config map or secret containing the file
                                          type: string
                                        namespace:
                                          default: ""
                                          description: |-
                                            Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                            If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                          type: string
                                        type:
                                          description: 'Type for the file reference: "configmap" or "secret"'
                                          enum:
                                            - configmap
                                            - secret
                                          type: string
                                      type: object
                                    type:
                                      default: DISABLED
                                      description: |-
                                        Select the type of TLS configuration:<br>
                                        - `DISABLED` (default) to not configure TLS for the endpoint.
                                        - `PROVIDED` to manually provide cert file and a key file. [Unsupported (*)].
                                        - `AUTO` to use OpenShift auto generated certificate using annotations.
                                      enum:
                                        - DISABLED
                                        - PROVIDED
                                        - AUTO
                                      type: string
                                  required:
                                    - type
                                  type: object
                              type: object
                          type: object
                        privileged:
                          description: |-
                            Privileged mode for the eBPF Agent container. When ignored or set to `false`, the operator sets
                            granular capabilities (BPF, PERFMON, NET_ADMIN, SYS_RESOURCE) to the container.
                            If for some reason these capabilities cannot be set, such as if an old kernel version not knowing CAP_BPF
                            is in use, then you can turn on this mode for more global privileges.
                            Some agent features require the privileged mode, such as packet drops tracking (see `features`) and SR-IOV support.
                          type: boolean
                        resources:
                          default:
                            limits:
                              memory: 800Mi
                            requests:
                              cpu: 100m
                              memory: 50Mi
                          description: |-
                            `resources` are the compute resources required by this container.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          properties:
                            claims:
                              description: |-
                                Claims lists the names of resources, defined in spec.resourceClaims,
                                that are used by this container.

                                This is an alpha field and requires enabling the
                                DynamicResourceAllocation feature gate.

                                This field is immutable. It can only be set for containers.
                              items:
                                description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                                properties:
                                  name:
                                    description: |-
                                      Name must match the name of one entry in pod.spec.resourceClaims of
                                      the Pod where this field is used. It makes that resource available
                                      inside a container.
                                    type: string
                                  request:
                                    description: |-
                                      Request is the name chosen for a request in the referenced claim.
                                      If empty, everything from the claim is made available, otherwise
                                      only the result of this request.
                                    type: string
                                required:
                                  - name
                                type: object
                              type: array
                              x-kubernetes-list-map-keys:
                                - name
                              x-kubernetes-list-type: map
                            limits:
                              additionalProperties:
                                anyOf:
                                  - type: integer
                                  - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              description: |-
                                Limits describes the maximum amount of compute resources allowed.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                              type: object
                            requests:
                              additionalProperties:
                                anyOf:
                                  - type: integer
                                  - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              description: |-
                                Requests describes the minimum amount of compute resources required.
                                If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                              type: object
                          type: object
                        sampling:
                          default: 50
                          description: Sampling rate of the flow reporter. 100 means one flow on 100 is sent. 0 or 1 means all flows are sampled.
                          format: int32
                          minimum: 0
                          type: integer
                      type: object
                    ipfix:
                      description: |-
                        `ipfix` [deprecated (*)] - describes the settings related to the IPFIX-based flow reporter when `spec.agent.type`
                        is set to `IPFIX`.
                      properties:
                        cacheActiveTimeout:
                          default: 20s
                          description: '`cacheActiveTimeout` is the max period during which the reporter aggregates flows before sending.'
                          pattern: ^\d+(ns|ms|s|m)?$
                          type: string
                        cacheMaxFlows:
                          default: 400
                          description: '`cacheMaxFlows` is the max number of flows in an aggregate; when reached, the reporter sends the flows.'
                          format: int32
                          minimum: 0
                          type: integer
                        clusterNetworkOperator:
                          description: '`clusterNetworkOperator` defines the settings related to the OpenShift Cluster Network Operator, when available.'
                          properties:
                            namespace:
                              default: openshift-network-operator
                              description: Namespace  where the config map is going to be deployed.
                              type: string
                          type: object
                        forceSampleAll:
                          default: false
                          description: |-
                            `forceSampleAll` allows disabling sampling in the IPFIX-based flow reporter.
                            It is not recommended to sample all the traffic with IPFIX, as it might generate cluster instability.
                            If you REALLY want to do that, set this flag to `true`. Use at your own risk.
                            When it is set to `true`, the value of `sampling` is ignored.
                          type: boolean
                        ovnKubernetes:
                          description: '`ovnKubernetes` defines the settings of the OVN-Kubernetes CNI, when available. This configuration is used when using OVN''s IPFIX exports, without OpenShift. When using OpenShift, refer to the `clusterNetworkOperator` property instead.'
                          properties:
                            containerName:
                              default: ovnkube-node
                              description: '`containerName` defines the name of the container to configure for IPFIX.'
                              type: string
                            daemonSetName:
                              default: ovnkube-node
                              description: '`daemonSetName` defines the name of the DaemonSet controlling the OVN-Kubernetes pods.'
                              type: string
                            namespace:
                              default: ovn-kubernetes
                              description: Namespace where OVN-Kubernetes pods are deployed.
                              type: string
                          type: object
                        sampling:
                          default: 400
                          description: |-
                            `sampling` is the sampling rate on the reporter. 100 means one flow on 100 is sent.
                            To ensure cluster stability, it is not possible to set a value below 2.
                            If you really want to sample every packet, which might impact the cluster stability,
                            refer to `forceSampleAll`. Alternatively, you can use the eBPF Agent instead of IPFIX.
                          format: int32
                          minimum: 2
                          type: integer
                      type: object
                    type:
                      default: EBPF
                      description: |-
                        `type` [deprecated (*)] selects the flows tracing agent. The only possible value is `EBPF` (default), to use NetObserv eBPF agent.<br>
                        Previously, using an IPFIX collector was allowed, but was deprecated and it is now removed.<br>
                        Setting `IPFIX` is ignored and still use the eBPF Agent.
                        Since there is only a single option here, this field will be remove in a future API version.
                      enum:
                        - EBPF
                        - IPFIX
                      type: string
                  type: object
                consolePlugin:
                  description: '`consolePlugin` defines the settings related to the OpenShift Console plugin, when available.'
                  properties:
                    autoscaler:
                      description: '`autoscaler` spec of a horizontal pod autoscaler to set up for the plugin Deployment.'
                      properties:
                        maxReplicas:
                          default: 3
                          description: '`maxReplicas` is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.'
                          format: int32
                          type: integer
                        metrics:
                          description: Metrics used by the pod autoscaler. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/
                          items:
                            properties:
                              containerResource:
                                properties:
                                  container:
                                    type: string
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - container
                                  - name
                                  - target
                                type: object
                              external:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              object:
                                properties:
                                  describedObject:
                                    properties:
                                      apiVersion:
                                        type: string
                                      kind:
                                        type: string
                                      name:
                                        type: string
                                    required:
                                      - kind
                                      - name
                                    type: object
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - describedObject
                                  - metric
                                  - target
                                type: object
                              pods:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              resource:
                                properties:
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - name
                                  - target
                                type: object
                              type:
                                type: string
                            required:
                              - type
                            type: object
                          type: array
                        minReplicas:
                          description: |-
                            `minReplicas` is the lower limit for the number of replicas to which the autoscaler
                            can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the
                            alpha feature gate HPAScaleToZero is enabled and at least one Object or External
                            metric is configured. Scaling is active as long as at least one metric value is
                            available.
                          format: int32
                          type: integer
                        status:
                          default: DISABLED
                          description: |-
                            `status` describes the desired status regarding deploying an horizontal pod autoscaler.<br>
                            - `DISABLED` does not deploy an horizontal pod autoscaler.<br>
                            - `ENABLED` deploys an horizontal pod autoscaler.<br>
                          enum:
                            - DISABLED
                            - ENABLED
                          type: string
                      type: object
                    enable:
                      default: true
                      description: |-
                        Enables the console plugin deployment.
                        `spec.loki.enable` must also be `true`
                      type: boolean
                    imagePullPolicy:
                      default: IfNotPresent
                      description: '`imagePullPolicy` is the Kubernetes pull policy for the image defined above'
                      enum:
                        - IfNotPresent
                        - Always
                        - Never
                      type: string
                    logLevel:
                      default: info
                      description: '`logLevel` for the console plugin backend'
                      enum:
                        - trace
                        - debug
                        - info
                        - warn
                        - error
                        - fatal
                        - panic
                      type: string
                    port:
                      default: 9001
                      description: '`port` is the plugin service port. Do not use 9002, which is reserved for metrics.'
                      format: int32
                      maximum: 65535
                      minimum: 1
                      type: integer
                    portNaming:
                      default:
                        enable: true
                      description: '`portNaming` defines the configuration of the port-to-service name translation'
                      properties:
                        enable:
                          default: true
                          description: Enable the console plugin port-to-service name translation
                          type: boolean
                        portNames:
                          additionalProperties:
                            type: string
                          description: |-
                            `portNames` defines additional port names to use in the console,
                            for example, `portNames: {"3100": "loki"}`.
                          type: object
                      type: object
                    quickFilters:
                      default:
                        - default: true
                          filter:
                            flow_layer: app
                          name: Applications
                        - filter:
                            flow_layer: infra
                          name: Infrastructure
                        - default: true
                          filter:
                            dst_kind: Pod
                            src_kind: Pod
                          name: Pods network
                        - filter:
                            dst_kind: Service
                          name: Services network
                      description: '`quickFilters` configures quick filter presets for the Console plugin'
                      items:
                        description: '`QuickFilter` defines preset configuration for Console''s quick filters'
                        properties:
                          default:
                            description: '`default` defines whether this filter should be active by default or not'
                            type: boolean
                          filter:
                            additionalProperties:
                              type: string
                            description: |-
                              `filter` is a set of keys and values to be set when this filter is selected. Each key can relate to a list of values using a coma-separated string,
                              for example, `filter: {"src_namespace": "namespace1,namespace2"}`.
                            type: object
                          name:
                            description: Name of the filter, that is displayed in the Console
                            type: string
                        required:
                          - filter
                          - name
                        type: object
                      type: array
                    register:
                      default: true
                      description: |-
                        `register` allows, when set to `true`, to automatically register the provided console plugin with the OpenShift Console operator.
                        When set to `false`, you can still register it manually by editing console.operator.openshift.io/cluster with the following command:
                        `oc patch console.operator.openshift.io cluster --type='json' -p '[{"op": "add", "path": "/spec/plugins/-", "value": "netobserv-plugin"}]'`
                      type: boolean
                    replicas:
                      default: 1
                      description: '`replicas` defines the number of replicas (pods) to start.'
                      format: int32
                      minimum: 0
                      type: integer
                    resources:
                      default:
                        limits:
                          memory: 100Mi
                        requests:
                          cpu: 100m
                          memory: 50Mi
                      description: |-
                        `resources`, in terms of compute resources, required by this container.
                        More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                      properties:
                        claims:
                          description: |-
                            Claims lists the names of resources, defined in spec.resourceClaims,
                            that are used by this container.

                            This is an alpha field and requires enabling the
                            DynamicResourceAllocation feature gate.

                            This field is immutable. It can only be set for containers.
                          items:
                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                            properties:
                              name:
                                description: |-
                                  Name must match the name of one entry in pod.spec.resourceClaims of
                                  the Pod where this field is used. It makes that resource available
                                  inside a container.
                                type: string
                              request:
                                description: |-
                                  Request is the name chosen for a request in the referenced claim.
                                  If empty, everything from the claim is made available, otherwise
                                  only the result of this request.
                                type: string
                            required:
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - name
                          x-kubernetes-list-type: map
                        limits:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Limits describes the maximum amount of compute resources allowed.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                        requests:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Requests describes the minimum amount of compute resources required.
                            If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                            otherwise to an implementation-defined value. Requests cannot exceed Limits.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                      type: object
                  type: object
                deploymentModel:
                  default: DIRECT
                  description: |-
                    `deploymentModel` defines the desired type of deployment for flow processing. Possible values are:<br>
                    - `DIRECT` (default) to make the flow processor listening directly from the agents.<br>
                    - `KAFKA` to make flows sent to a Kafka pipeline before consumption by the processor.<br>
                    Kafka can provide better scalability, resiliency, and high availability (for more details, see https://www.redhat.com/en/topics/integration/what-is-apache-kafka).
                  enum:
                    - DIRECT
                    - KAFKA
                  type: string
                exporters:
                  description: '`exporters` define additional optional exporters for custom consumption or storage.'
                  items:
                    description: '`FlowCollectorExporter` defines an additional exporter to send enriched flows to.'
                    properties:
                      ipfix:
                        description: IPFIX configuration, such as the IP address and port to send enriched IPFIX flows to.
                        properties:
                          targetHost:
                            default: ""
                            description: Address of the IPFIX external receiver
                            type: string
                          targetPort:
                            description: Port for the IPFIX external receiver
                            type: integer
                          transport:
                            description: Transport protocol (`TCP` or `UDP`) to be used for the IPFIX connection, defaults to `TCP`.
                            enum:
                              - TCP
                              - UDP
                            type: string
                        required:
                          - targetHost
                          - targetPort
                        type: object
                      kafka:
                        description: Kafka configuration, such as the address and topic, to send enriched flows to.
                        properties:
                          address:
                            default: ""
                            description: Address of the Kafka server
                            type: string
                          sasl:
                            description: SASL authentication configuration. [Unsupported (*)].
                            properties:
                              clientIDReference:
                                description: Reference to the secret or config map containing the client ID
                                properties:
                                  file:
                                    description: File name within the config map or secret
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing the file
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the file reference: "configmap" or "secret"'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              clientSecretReference:
                                description: Reference to the secret or config map containing the client secret
                                properties:
                                  file:
                                    description: File name within the config map or secret
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing the file
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the file reference: "configmap" or "secret"'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              type:
                                default: DISABLED
                                description: Type of SASL authentication to use, or `DISABLED` if SASL is not used
                                enum:
                                  - DISABLED
                                  - PLAIN
                                  - SCRAM-SHA512
                                type: string
                            type: object
                          tls:
                            description: TLS client configuration. When using TLS, verify that the address matches the Kafka port used for TLS, generally 9093.
                            properties:
                              caCert:
                                description: '`caCert` defines the reference of the certificate for the Certificate Authority'
                                properties:
                                  certFile:
                                    description: '`certFile` defines the path to the certificate file name within the config map or secret'
                                    type: string
                                  certKey:
                                    description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing certificates
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the certificate reference: `configmap` or `secret`'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              enable:
                                default: false
                                description: Enable TLS
                                type: boolean
                              insecureSkipVerify:
                                default: false
                                description: |-
                                  `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                  If set to `true`, the `caCert` field is ignored.
                                type: boolean
                              userCert:
                                description: '`userCert` defines the user certificate reference and is used for mTLS (you can ignore it when using one-way TLS)'
                                properties:
                                  certFile:
                                    description: '`certFile` defines the path to the certificate file name within the config map or secret'
                                    type: string
                                  certKey:
                                    description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing certificates
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the certificate reference: `configmap` or `secret`'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                            type: object
                          topic:
                            default: ""
                            description: Kafka topic to use. It must exist. NetObserv does not create it.
                            type: string
                        required:
                          - address
                          - topic
                        type: object
                      type:
                        description: '`type` selects the type of exporters. The available options are `KAFKA` and `IPFIX`.'
                        enum:
                          - KAFKA
                          - IPFIX
                        type: string
                    required:
                      - type
                    type: object
                  type: array
                kafka:
                  description: Kafka configuration, allowing to use Kafka as a broker as part of the flow collection pipeline. Available when the `spec.deploymentModel` is `KAFKA`.
                  properties:
                    address:
                      default: ""
                      description: Address of the Kafka server
                      type: string
                    sasl:
                      description: SASL authentication configuration. [Unsupported (*)].
                      properties:
                        clientIDReference:
                          description: Reference to the secret or config map containing the client ID
                          properties:
                            file:
                              description: File name within the config map or secret
                              type: string
                            name:
                              description: Name of the config map or secret containing the file
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the file reference: "configmap" or "secret"'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        clientSecretReference:
                          description: Reference to the secret or config map containing the client secret
                          properties:
                            file:
                              description: File name within the config map or secret
                              type: string
                            name:
                              description: Name of the config map or secret containing the file
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the file reference: "configmap" or "secret"'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        type:
                          default: DISABLED
                          description: Type of SASL authentication to use, or `DISABLED` if SASL is not used
                          enum:
                            - DISABLED
                            - PLAIN
                            - SCRAM-SHA512
                          type: string
                      type: object
                    tls:
                      description: TLS client configuration. When using TLS, verify that the address matches the Kafka port used for TLS, generally 9093.
                      properties:
                        caCert:
                          description: '`caCert` defines the reference of the certificate for the Certificate Authority'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        enable:
                          default: false
                          description: Enable TLS
                          type: boolean
                        insecureSkipVerify:
                          default: false
                          description: |-
                            `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                            If set to `true`, the `caCert` field is ignored.
                          type: boolean
                        userCert:
                          description: '`userCert` defines the user certificate reference and is used for mTLS (you can ignore it when using one-way TLS)'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                      type: object
                    topic:
                      default: ""
                      description: Kafka topic to use. It must exist. NetObserv does not create it.
                      type: string
                  required:
                    - address
                    - topic
                  type: object
                loki:
                  description: '`loki`, the flow store, client settings.'
                  properties:
                    authToken:
                      default: DISABLED
                      description: |-
                        `authToken` describes the way to get a token to authenticate to Loki.<br>
                        - `DISABLED` does not send any token with the request.<br>
                        - `FORWARD` forwards the user token for authorization.<br>
                        - `HOST` [deprecated (*)] - uses the local pod service account to authenticate to Loki.<br>
                        When using the Loki Operator, this must be set to `FORWARD`.
                      enum:
                        - DISABLED
                        - HOST
                        - FORWARD
                      type: string
                    batchSize:
                      default: 102400
                      description: '`batchSize` is the maximum batch size (in bytes) of logs to accumulate before sending.'
                      format: int64
                      minimum: 1
                      type: integer
                    batchWait:
                      default: 1s
                      description: '`batchWait` is the maximum time to wait before sending a batch.'
                      type: string
                    enable:
                      default: true
                      description: |-
                        Set `enable` to `true` to store flows in Loki.
                        The Console plugin can use either Loki or Prometheus as a data source for metrics (see also `spec.prometheus.querier`), or both.
                        Not all queries are transposable from Loki to Prometheus. Hence, if Loki is disabled, some features of the plugin are disabled as well,
                        such as getting per-pod information or viewing raw flows.
                        If both Prometheus and Loki are enabled, Prometheus takes precedence and Loki is used as a fallback for queries that Prometheus cannot handle.
                        If they are both disabled, the Console plugin is not deployed.
                      type: boolean
                    maxBackoff:
                      default: 5s
                      description: '`maxBackoff` is the maximum backoff time for client connection between retries.'
                      type: string
                    maxRetries:
                      default: 2
                      description: '`maxRetries` is the maximum number of retries for client connections.'
                      format: int32
                      minimum: 0
                      type: integer
                    minBackoff:
                      default: 1s
                      description: '`minBackoff` is the initial backoff time for client connection between retries.'
                      type: string
                    querierUrl:
                      description: |-
                        `querierURL` specifies the address of the Loki querier service, in case it is different from the
                        Loki ingester URL. If empty, the URL value is used (assuming that the Loki ingester
                        and querier are in the same server). When using the Loki Operator, do not set it, since
                        ingestion and queries use the Loki gateway.
                      type: string
                    readTimeout:
                      default: 30s
                      description: |-
                        `readTimeout` is the maximum loki query total time limit.
                        A timeout of zero means no timeout.
                      type: string
                    staticLabels:
                      additionalProperties:
                        type: string
                      default:
                        app: netobserv-flowcollector
                      description: '`staticLabels` is a map of common labels to set on each flow.'
                      type: object
                    statusTls:
                      description: TLS client configuration for Loki status URL.
                      properties:
                        caCert:
                          description: '`caCert` defines the reference of the certificate for the Certificate Authority'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        enable:
                          default: false
                          description: Enable TLS
                          type: boolean
                        insecureSkipVerify:
                          default: false
                          description: |-
                            `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                            If set to `true`, the `caCert` field is ignored.
                          type: boolean
                        userCert:
                          description: '`userCert` defines the user certificate reference and is used for mTLS (you can ignore it when using one-way TLS)'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                      type: object
                    statusUrl:
                      description: |-
                        `statusURL` specifies the address of the Loki `/ready`, `/metrics` and `/config` endpoints, in case it is different from the
                        Loki querier URL. If empty, the `querierURL` value is used.
                        This is useful to show error messages and some context in the frontend.
                        When using the Loki Operator, set it to the Loki HTTP query frontend service, for example
                        https://loki-query-frontend-http.netobserv.svc:3100/.
                        `statusTLS` configuration is used when `statusUrl` is set.
                      type: string
                    tenantID:
                      default: netobserv
                      description: |-
                        `tenantID` is the Loki `X-Scope-OrgID` that identifies the tenant for each request.
                        When using the Loki Operator, set it to `network`, which corresponds to a special tenant mode.
                      type: string
                    timeout:
                      default: 10s
                      description: |-
                        `timeout` is the maximum processor time connection / request limit.
                        A timeout of zero means no timeout.
                      type: string
                    tls:
                      description: TLS client configuration for Loki URL.
                      properties:
                        caCert:
                          description: '`caCert` defines the reference of the certificate for the Certificate Authority'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        enable:
                          default: false
                          description: Enable TLS
                          type: boolean
                        insecureSkipVerify:
                          default: false
                          description: |-
                            `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                            If set to `true`, the `caCert` field is ignored.
                          type: boolean
                        userCert:
                          description: '`userCert` defines the user certificate reference and is used for mTLS (you can ignore it when using one-way TLS)'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                      type: object
                    url:
                      default: http://loki:3100/
                      description: |-
                        `url` is the address of an existing Loki service to push the flows to. When using the Loki Operator,
                        set it to the Loki gateway service with the `network` tenant set in path, for example
                        https://loki-gateway-http.netobserv.svc:8080/api/logs/v1/network.
                      type: string
                  type: object
                namespace:
                  default: netobserv
                  description: Namespace where NetObserv pods are deployed.
                  type: string
                processor:
                  description: |-
                    `processor` defines the settings of the component that receives the flows from the agent,
                    enriches them, generates metrics, and forwards them to the Loki persistence layer and/or any available exporter.
                  properties:
                    addZone:
                      description: |-
                        `addZone` allows availability zone awareness by labelling flows with their source and destination zones.
                        This feature requires the "topology.kubernetes.io/zone" label to be set on nodes.
                      type: boolean
                    clusterName:
                      default: ""
                      description: '`clusterName` is the name of the cluster to appear in the flows data. This is useful in a multi-cluster context. When using OpenShift, leave empty to make it automatically determined.'
                      type: string
                    conversationEndTimeout:
                      default: 10s
                      description: |-
                        `conversationEndTimeout` is the time to wait after a network flow is received, to consider the conversation ended.
                        This delay is ignored when a FIN packet is collected for TCP flows (see `conversationTerminatingTimeout` instead).
                      type: string
                    conversationHeartbeatInterval:
                      default: 30s
                      description: '`conversationHeartbeatInterval` is the time to wait between "tick" events of a conversation'
                      type: string
                    conversationTerminatingTimeout:
                      default: 5s
                      description: '`conversationTerminatingTimeout` is the time to wait from detected FIN flag to end a conversation. Only relevant for TCP flows.'
                      type: string
                    debug:
                      description: |-
                        `debug` allows setting some aspects of the internal configuration of the flow processor.
                        This section is aimed exclusively for debugging and fine-grained performance optimizations,
                        such as `GOGC` and `GOMAXPROCS` env vars. Set these values at your own risk.
                      properties:
                        env:
                          additionalProperties:
                            type: string
                          description: |-
                            `env` allows passing custom environment variables to underlying components. Useful for passing
                            some very concrete performance-tuning options, such as `GOGC` and `GOMAXPROCS`, that should not be
                            publicly exposed as part of the FlowCollector descriptor, as they are only useful
                            in edge debug or support scenarios.
                          type: object
                      type: object
                    deduper:
                      description: '`deduper` allows to sample or drop flows identified as duplicates, in order to save on resource usage.'
                      properties:
                        mode:
                          default: Disabled
                          description: |-
                            Set the Processor deduper mode (de-duplication). It comes in addition to the Agent deduper because the Agent cannot de-duplicate same flows reported from different nodes.<br>
                            - Use `Drop` to drop every flow considered as duplicates, allowing saving more on resource usage but potentially loosing some information such as the network interfaces used from peer.<br>
                            - Use `Sample` to randomly keep only 1 flow on 50 (by default) among the ones considered as duplicates. This is a compromise between dropping every duplicates or keeping every duplicates. This sampling action comes in addition to the Agent-based sampling. If both Agent and Processor sampling are 50, the combined sampling is 1:2500.<br>
                            - Use `Disabled` to turn off Processor-based de-duplication.<br>
                          enum:
                            - Disabled
                            - Drop
                            - Sample
                          type: string
                        sampling:
                          default: 50
                          description: '`sampling` is the sampling rate when deduper `mode` is `Sample`.'
                          format: int32
                          minimum: 0
                          type: integer
                      type: object
                    dropUnusedFields:
                      default: true
                      description: '`dropUnusedFields` [deprecated (*)] this setting is not used anymore.'
                      type: boolean
                    enableKubeProbes:
                      default: true
                      description: '`enableKubeProbes` is a flag to enable or disable Kubernetes liveness and readiness probes'
                      type: boolean
                    filters:
                      description: '`filters` let you define custom filters to limit the amount of generated flows.'
                      items:
                        description: '`FLPFilterSet` defines the desired configuration for FLP-based filtering satisfying all conditions'
                        properties:
                          allOf:
                            description: '`filters` is a list of matches that must be all satisfied in order to remove a flow.'
                            items:
                              description: '`FLPSingleFilter` defines the desired configuration for a single FLP-based filter'
                              properties:
                                field:
                                  description: |-
                                    Name of the field to filter on
                                    Refer to the documentation for the list of available fields: https://docs.openshift.com/container-platform/latest/observability/network_observability/json-flows-format-reference.html.
                                  type: string
                                matchType:
                                  default: Equal
                                  description: Type of matching to apply
                                  enum:
                                    - Equal
                                    - NotEqual
                                    - Presence
                                    - Absence
                                    - MatchRegex
                                    - NotMatchRegex
                                  type: string
                                value:
                                  description: Value to filter on. When `matchType` is `Equal` or `NotEqual`, you can use field injection with `$(SomeField)` to refer to any other field of the flow.
                                  type: string
                              required:
                                - field
                                - matchType
                              type: object
                            type: array
                          outputTarget:
                            description: 'If specified, this filters only target a single output: `Loki`, `Metrics` or `Exporters`. By default, all outputs are targeted.'
                            enum:
                              - ""
                              - Loki
                              - Metrics
                              - Exporters
                            type: string
                          sampling:
                            description: '`sampling` is an optional sampling rate to apply to this filter.'
                            format: int32
                            minimum: 0
                            type: integer
                        type: object
                      type: array
                    healthPort:
                      default: 8080
                      description: '`healthPort` is a collector HTTP port in the Pod that exposes the health check API'
                      format: int32
                      maximum: 65535
                      minimum: 1
                      type: integer
                    imagePullPolicy:
                      default: IfNotPresent
                      description: '`imagePullPolicy` is the Kubernetes pull policy for the image defined above'
                      enum:
                        - IfNotPresent
                        - Always
                        - Never
                      type: string
                    kafkaConsumerAutoscaler:
                      description: |-
                        `kafkaConsumerAutoscaler` is the spec of a horizontal pod autoscaler to set up for `flowlogs-pipeline-transformer`, which consumes Kafka messages.
                        This setting is ignored when Kafka is disabled.
                      properties:
                        maxReplicas:
                          default: 3
                          description: '`maxReplicas` is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.'
                          format: int32
                          type: integer
                        metrics:
                          description: Metrics used by the pod autoscaler. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/
                          items:
                            properties:
                              containerResource:
                                properties:
                                  container:
                                    type: string
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - container
                                  - name
                                  - target
                                type: object
                              external:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              object:
                                properties:
                                  describedObject:
                                    properties:
                                      apiVersion:
                                        type: string
                                      kind:
                                        type: string
                                      name:
                                        type: string
                                    required:
                                      - kind
                                      - name
                                    type: object
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - describedObject
                                  - metric
                                  - target
                                type: object
                              pods:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              resource:
                                properties:
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - name
                                  - target
                                type: object
                              type:
                                type: string
                            required:
                              - type
                            type: object
                          type: array
                        minReplicas:
                          description: |-
                            `minReplicas` is the lower limit for the number of replicas to which the autoscaler
                            can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the
                            alpha feature gate HPAScaleToZero is enabled and at least one Object or External
                            metric is configured. Scaling is active as long as at least one metric value is
                            available.
                          format: int32
                          type: integer
                        status:
                          default: DISABLED
                          description: |-
                            `status` describes the desired status regarding deploying an horizontal pod autoscaler.<br>
                            - `DISABLED` does not deploy an horizontal pod autoscaler.<br>
                            - `ENABLED` deploys an horizontal pod autoscaler.<br>
                          enum:
                            - DISABLED
                            - ENABLED
                          type: string
                      type: object
                    kafkaConsumerBatchSize:
                      default: 10485760
                      description: '`kafkaConsumerBatchSize` indicates to the broker the maximum batch size, in bytes, that the consumer accepts. Ignored when not using Kafka. Default: 10MB.'
                      type: integer
                    kafkaConsumerQueueCapacity:
                      default: 1000
                      description: '`kafkaConsumerQueueCapacity` defines the capacity of the internal message queue used in the Kafka consumer client. Ignored when not using Kafka.'
                      type: integer
                    kafkaConsumerReplicas:
                      default: 3
                      description: |-
                        `kafkaConsumerReplicas` defines the number of replicas (pods) to start for `flowlogs-pipeline-transformer`, which consumes Kafka messages.
                        This setting is ignored when Kafka is disabled.
                      format: int32
                      minimum: 0
                      type: integer
                    logLevel:
                      default: info
                      description: '`logLevel` of the processor runtime'
                      enum:
                        - trace
                        - debug
                        - info
                        - warn
                        - error
                        - fatal
                        - panic
                      type: string
                    logTypes:
                      default: FLOWS
                      description: |-
                        `logTypes` defines the desired record types to generate. Possible values are:<br>
                        - `FLOWS` (default) to export regular network flows<br>
                        - `CONVERSATIONS` to generate events for started conversations, ended conversations as well as periodic "tick" updates<br>
                        - `ENDED_CONVERSATIONS` to generate only ended conversations events<br>
                        - `ALL` to generate both network flows and all conversations events<br>
                      enum:
                        - FLOWS
                        - CONVERSATIONS
                        - ENDED_CONVERSATIONS
                        - ALL
                      type: string
                    metrics:
                      description: '`Metrics` define the processor configuration regarding metrics'
                      properties:
                        disableAlerts:
                          description: |-
                            `disableAlerts` is a list of alerts that should be disabled.
                            Possible values are:<br>
                            `NetObservNoFlows`, which is triggered when no flows are being observed for a certain period.<br>
                            `NetObservLokiError`, which is triggered when flows are being dropped due to Loki errors.<br>
                          items:
                            description: |-
                              Name of a processor alert.
                              Possible values are:<br>
                              - `NetObservNoFlows`, which is triggered when no flows are being observed for a certain period.<br>
                              - `NetObservLokiError`, which is triggered when flows are being dropped due to Loki errors.<br>
                            enum:
                              - NetObservNoFlows
                              - NetObservLokiError
                            type: string
                          type: array
                        ignoreTags:
                          default:
                            - egress
                            - packets
                            - nodes-flows
                            - namespaces-flows
                            - workloads-flows
                            - namespaces
                          description: |-
                            `ignoreTags` [deprecated (*)] is a list of tags to specify which metrics to ignore. Each metric is associated with a list of tags. More details in https://github.com/netobserv/network-observability-operator/tree/main/controllers/flowlogspipeline/metrics_definitions .
                            Available tags are: `egress`, `ingress`, `flows`, `bytes`, `packets`, `namespaces`, `nodes`, `workloads`, `nodes-flows`, `namespaces-flows`, `workloads-flows`.
                            Namespace-based metrics are covered by both `workloads` and `namespaces` tags, hence it is recommended to always ignore one of them (`workloads` offering a finer granularity).<br>
                            Deprecation notice: use `includeList` instead.
                          items:
                            type: string
                          type: array
                        includeList:
                          description: |-
                            `includeList` is a list of metric names to specify which ones to generate.
                            The names correspond to the names in Prometheus without the prefix. For example,
                            `namespace_egress_packets_total` will show up as `netobserv_namespace_egress_packets_total` in Prometheus.
                            Note that the more metrics you add, the bigger is the impact on Prometheus workload resources.
                            Metrics enabled by default are:
                            `namespace_flows_total`, `node_ingress_bytes_total`, `workload_ingress_bytes_total`, `namespace_drop_packets_total` (when `PacketDrop` feature is enabled),
                            `namespace_rtt_seconds` (when `FlowRTT` feature is enabled), `namespace_dns_latency_seconds` (when `DNSTracking` feature is enabled).
                            More information, with full list of available metrics: https://github.com/netobserv/network-observability-operator/blob/main/docs/Metrics.md
                          items:
                            description: Metric name. More information in https://github.com/netobserv/network-observability-operator/blob/main/docs/Metrics.md.
                            enum:
                              - namespace_egress_bytes_total
                              - namespace_egress_packets_total
                              - namespace_ingress_bytes_total
                              - namespace_ingress_packets_total
                              - namespace_flows_total
                              - node_egress_bytes_total
                              - node_egress_packets_total
                              - node_ingress_bytes_total
                              - node_ingress_packets_total
                              - node_flows_total
                              - workload_egress_bytes_total
                              - workload_egress_packets_total
                              - workload_ingress_bytes_total
                              - workload_ingress_packets_total
                              - workload_flows_total
                              - namespace_drop_bytes_total
                              - namespace_drop_packets_total
                              - node_drop_bytes_total
                              - node_drop_packets_total
                              - workload_drop_bytes_total
                              - workload_drop_packets_total
                              - namespace_rtt_seconds
                              - node_rtt_seconds
                              - workload_rtt_seconds
                              - namespace_dns_latency_seconds
                              - node_dns_latency_seconds
                              - workload_dns_latency_seconds
                            type: string
                          type: array
                        server:
                          description: Metrics server endpoint configuration for Prometheus scraper
                          properties:
                            port:
                              description: The prometheus HTTP port
                              format: int32
                              maximum: 65535
                              minimum: 1
                              type: integer
                            tls:
                              description: TLS configuration.
                              properties:
                                insecureSkipVerify:
                                  default: false
                                  description: |-
                                    `insecureSkipVerify` allows skipping client-side verification of the provided certificate.
                                    If set to `true`, the `providedCaFile` field is ignored.
                                  type: boolean
                                provided:
                                  description: TLS configuration when `type` is set to `PROVIDED`.
                                  properties:
                                    certFile:
                                      description: '`certFile` defines the path to the certificate file name within the config map or secret'
                                      type: string
                                    certKey:
                                      description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing certificates
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the certificate reference: `configmap` or `secret`'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                                providedCaFile:
                                  description: Reference to the CA file when `type` is set to `PROVIDED`.
                                  properties:
                                    file:
                                      description: File name within the config map or secret
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing the file
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the file reference: "configmap" or "secret"'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                                type:
                                  default: DISABLED
                                  description: |-
                                    Select the type of TLS configuration:<br>
                                    - `DISABLED` (default) to not configure TLS for the endpoint.
                                    - `PROVIDED` to manually provide cert file and a key file. [Unsupported (*)].
                                    - `AUTO` to use OpenShift auto generated certificate using annotations.
                                  enum:
                                    - DISABLED
                                    - PROVIDED
                                    - AUTO
                                  type: string
                              required:
                                - type
                              type: object
                          type: object
                      type: object
                    multiClusterDeployment:
                      default: false
                      description: Set `multiClusterDeployment` to `true` to enable multi clusters feature. This adds clusterName label to flows data
                      type: boolean
                    port:
                      default: 2055
                      description: |-
                        Port of the flow collector (host port).
                        By convention, some values are forbidden. It must be greater than 1024 and different from
                        4500, 4789 and 6081.
                      format: int32
                      maximum: 65535
                      minimum: 1025
                      type: integer
                    profilePort:
                      description: '`profilePort` allows setting up a Go pprof profiler listening to this port'
                      format: int32
                      maximum: 65535
                      minimum: 0
                      type: integer
                    resources:
                      default:
                        limits:
                          memory: 800Mi
                        requests:
                          cpu: 100m
                          memory: 100Mi
                      description: |-
                        `resources` are the compute resources required by this container.
                        More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                      properties:
                        claims:
                          description: |-
                            Claims lists the names of resources, defined in spec.resourceClaims,
                            that are used by this container.

                            This is an alpha field and requires enabling the
                            DynamicResourceAllocation feature gate.

                            This field is immutable. It can only be set for containers.
                          items:
                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                            properties:
                              name:
                                description: |-
                                  Name must match the name of one entry in pod.spec.resourceClaims of
                                  the Pod where this field is used. It makes that resource available
                                  inside a container.
                                type: string
                              request:
                                description: |-
                                  Request is the name chosen for a request in the referenced claim.
                                  If empty, everything from the claim is made available, otherwise
                                  only the result of this request.
                                type: string
                            required:
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - name
                          x-kubernetes-list-type: map
                        limits:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Limits describes the maximum amount of compute resources allowed.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                        requests:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Requests describes the minimum amount of compute resources required.
                            If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                            otherwise to an implementation-defined value. Requests cannot exceed Limits.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                      type: object
                    subnetLabels:
                      description: |-
                        `subnetLabels` allows to define custom labels on subnets and IPs or to enable automatic labelling of recognized subnets in OpenShift.
                        When a subnet matches the source or destination IP of a flow, a corresponding field is added: `SrcSubnetLabel` or `DstSubnetLabel`.
                      properties:
                        customLabels:
                          description: |-
                            `customLabels` allows to customize subnets and IPs labelling, such as to identify cluster-external workloads or web services.
                            If you enable `openShiftAutoDetect`, `customLabels` can override the detected subnets in case they overlap.
                          items:
                            description: SubnetLabel allows to label subnets and IPs, such as to identify cluster-external workloads or web services.
                            properties:
                              cidrs:
                                description: List of CIDRs, such as `["1.2.3.4/32"]`.
                                items:
                                  type: string
                                type: array
                              name:
                                description: Label name, used to flag matching flows.
                                type: string
                            required:
                              - cidrs
                              - name
                            type: object
                          type: array
                        openShiftAutoDetect:
                          description: |-
                            `openShiftAutoDetect` allows, when set to `true`, to detect automatically the machines, pods and services subnets based on the
                            OpenShift install configuration and the Cluster Network Operator configuration. Indirectly, this is a way to accurately detect
                            external traffic: flows that are not labeled for those subnets are external to the cluster. Enabled by default on OpenShift.
                          type: boolean
                      type: object
                  type: object
                prometheus:
                  description: '`prometheus` defines Prometheus settings, such as querier configuration used to fetch metrics from the Console plugin.'
                  properties:
                    querier:
                      description: Prometheus querying configuration, such as client settings, used in the Console plugin.
                      properties:
                        enable:
                          default: true
                          description: |-
                            Set `enable` to `true` to make the Console plugin querying flow metrics from Prometheus instead of Loki whenever possible.
                            The Console plugin can use either Loki or Prometheus as a data source for metrics (see also `spec.loki`), or both.
                            Not all queries are transposable from Loki to Prometheus. Hence, if Loki is disabled, some features of the plugin are disabled as well,
                            such as getting per-pod information or viewing raw flows.
                            If both Prometheus and Loki are enabled, Prometheus takes precedence and Loki is used as a fallback for queries that Prometheus cannot handle.
                            If they are both disabled, the Console plugin is not deployed.
                          type: boolean
                        manual:
                          description: Prometheus configuration for `Manual` mode.
                          properties:
                            forwardUserToken:
                              description: Set `true` to forward logged in user token in queries to Prometheus
                              type: boolean
                            tls:
                              description: TLS client configuration for Prometheus URL.
                              properties:
                                caCert:
                                  description: '`caCert` defines the reference of the certificate for the Certificate Authority'
                                  properties:
                                    certFile:
                                      description: '`certFile` defines the path to the certificate file name within the config map or secret'
                                      type: string
                                    certKey:
                                      description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing certificates
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the certificate reference: `configmap` or `secret`'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                                enable:
                                  default: false
                                  description: Enable TLS
                                  type: boolean
                                insecureSkipVerify:
                                  default: false
                                  description: |-
                                    `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                    If set to `true`, the `caCert` field is ignored.
                                  type: boolean
                                userCert:
                                  description: '`userCert` defines the user certificate reference and is used for mTLS (you can ignore it when using one-way TLS)'
                                  properties:
                                    certFile:
                                      description: '`certFile` defines the path to the certificate file name within the config map or secret'
                                      type: string
                                    certKey:
                                      description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing certificates
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the certificate reference: `configmap` or `secret`'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                              type: object
                            url:
                              default: http://prometheus:9090
                              description: '`url` is the address of an existing Prometheus service to use for querying metrics.'
                              type: string
                          type: object
                        mode:
                          default: Auto
                          description: |-
                            `mode` must be set according to the type of Prometheus installation that stores NetObserv metrics:<br>
                            - Use `Auto` to try configuring automatically. In OpenShift, it uses the Thanos querier from OpenShift Cluster Monitoring<br>
                            - Use `Manual` for a manual setup<br>
                          enum:
                            - Manual
                            - Auto
                          type: string
                        timeout:
                          default: 30s
                          description: |-
                            `timeout` is the read timeout for console plugin queries to Prometheus.
                            A timeout of zero means no timeout.
                          type: string
                      required:
                        - mode
                      type: object
                  type: object
              type: object
            status:
              description: '`FlowCollectorStatus` defines the observed state of FlowCollector'
              properties:
                conditions:
                  description: '`conditions` represent the latest available observations of an object''s state'
                  items:
                    description: Condition contains details for one aspect of the current state of this API Resource.
                    properties:
                      lastTransitionTime:
                        description: |-
                          lastTransitionTime is the last time the condition transitioned from one status to another.
                          This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                        format: date-time
                        type: string
                      message:
                        description: |-
                          message is a human readable message indicating details about the transition.
                          This may be an empty string.
                        maxLength: 32768
                        type: string
                      observedGeneration:
                        description: |-
                          observedGeneration represents the .metadata.generation that the condition was set based upon.
                          For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                          with respect to the current state of the instance.
                        format: int64
                        minimum: 0
                        type: integer
                      reason:
                        description: |-
                          reason contains a programmatic identifier indicating the reason for the condition's last transition.
                          Producers of specific condition types may define expected values and meanings for this field,
                          and whether the values are considered a guaranteed API.
                          The value should be a CamelCase string.
                          This field may not be empty.
                        maxLength: 1024
                        minLength: 1
                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                        type: string
                      status:
                        description: status of the condition, one of True, False, Unknown.
                        enum:
                          - "True"
                          - "False"
                          - Unknown
                        type: string
                      type:
                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
                        maxLength: 316
                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                        type: string
                    required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
                    type: object
                  type: array
                namespace:
                  description: Namespace where console plugin and flowlogs-pipeline have been deployed.
                  type: string
              required:
                - conditions
              type: object
          type: object
      served: true
      storage: false
      subresources:
        status: {}
    - additionalPrinterColumns:
        - jsonPath: .spec.agent.type
          name: Agent
          type: string
        - jsonPath: .spec.agent.ebpf.sampling
          name: Sampling (EBPF)
          type: string
        - jsonPath: .spec.deploymentModel
          name: Deployment Model
          type: string
        - jsonPath: .status.conditions[?(@.type=="Ready")].reason
          name: Status
          type: string
      name: v1beta2
      schema:
        openAPIV3Schema:
          description: '`FlowCollector` is the schema for the network flows collection API, which pilots and configures the underlying deployments.'
          properties:
            apiVersion:
              description: |-
                APIVersion defines the versioned schema of this representation of an object.
                Servers should convert recognized schemas to the latest internal value, and
                may reject unrecognized values.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
              type: string
            kind:
              description: |-
                Kind is a string value representing the REST resource this object represents.
                Servers may infer this from the endpoint the client submits requests to.
                Cannot be updated.
                In CamelCase.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
              type: string
            metadata:
              type: object
            spec:
              description: |-
                Defines the desired state of the FlowCollector resource.
                <br><br>
                *: the mention of "unsupported" or "deprecated" for a feature throughout this document means that this feature
                is not officially supported by Red Hat. It might have been, for example, contributed by the community
                and accepted without a formal agreement for maintenance. The product maintainers might provide some support
                for these features as a best effort only.
              properties:
                agent:
                  description: Agent configuration for flows extraction.
                  properties:
                    ebpf:
                      description: |-
                        `ebpf` describes the settings related to the eBPF-based flow reporter when `spec.agent.type`
                        is set to `eBPF`.
                      properties:
                        advanced:
                          description: |-
                            `advanced` allows setting some aspects of the internal configuration of the eBPF agent.
                            This section is aimed mostly for debugging and fine-grained performance optimizations,
                            such as `GOGC` and `GOMAXPROCS` env vars. Set these values at your own risk.
                          properties:
                            env:
                              additionalProperties:
                                type: string
                              description: |-
                                `env` allows passing custom environment variables to underlying components. Useful for passing
                                some very concrete performance-tuning options, such as `GOGC` and `GOMAXPROCS`, that should not be
                                publicly exposed as part of the FlowCollector descriptor, as they are only useful
                                in edge debug or support scenarios.
                              type: object
                            scheduling:
                              description: scheduling controls how the pods are scheduled on nodes.
                              properties:
                                affinity:
                                  description: If specified, the pod's scheduling constraints. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling.
                                  properties:
                                    nodeAffinity:
                                      description: Describes node affinity scheduling rules for the pod.
                                      properties:
                                        preferredDuringSchedulingIgnoredDuringExecution:
                                          description: |-
                                            The scheduler will prefer to schedule pods to nodes that satisfy
                                            the affinity expressions specified by this field, but it may choose
                                            a node that violates one or more of the expressions. The node that is
                                            most preferred is the one with the greatest sum of weights, i.e.
                                            for each node that meets all of the scheduling requirements (resource
                                            request, requiredDuringScheduling affinity expressions, etc.),
                                            compute a sum by iterating through the elements of this field and adding
                                            "weight" to the sum if the node matches the corresponding matchExpressions; the
                                            node(s) with the highest sum are the most preferred.
                                          items:
                                            description: |-
                                              An empty preferred scheduling term matches all objects with implicit weight 0
                                              (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).
                                            properties:
                                              preference:
                                                description: A node selector term, associated with the corresponding weight.
                                                properties:
                                                  matchExpressions:
                                                    description: A list of node selector requirements by node's labels.
                                                    items:
                                                      description: |-
                                                        A node selector requirement is a selector that contains values, a key, and an operator
                                                        that relates the key and values.
                                                      properties:
                                                        key:
                                                          description: The label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            Represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            An array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. If the operator is Gt or Lt, the values
                                                            array must have a single element, which will be interpreted as an integer.
                                                            This array is replaced during a strategic merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchFields:
                                                    description: A list of node selector requirements by node's fields.
                                                    items:
                                                      description: |-
                                                        A node selector requirement is a selector that contains values, a key, and an operator
                                                        that relates the key and values.
                                                      properties:
                                                        key:
                                                          description: The label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            Represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            An array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. If the operator is Gt or Lt, the values
                                                            array must have a single element, which will be interpreted as an integer.
                                                            This array is replaced during a strategic merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              weight:
                                                description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
                                                format: int32
                                                type: integer
                                            required:
                                              - preference
                                              - weight
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                        requiredDuringSchedulingIgnoredDuringExecution:
                                          description: |-
                                            If the affinity requirements specified by this field are not met at
                                            scheduling time, the pod will not be scheduled onto the node.
                                            If the affinity requirements specified by this field cease to be met
                                            at some point during pod execution (e.g. due to an update), the system
                                            may or may not try to eventually evict the pod from its node.
                                          properties:
                                            nodeSelectorTerms:
                                              description: Required. A list of node selector terms. The terms are ORed.
                                              items:
                                                description: |-
                                                  A null or empty node selector term matches no objects. The requirements of
                                                  them are ANDed.
                                                  The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.
                                                properties:
                                                  matchExpressions:
                                                    description: A list of node selector requirements by node's labels.
                                                    items:
                                                      description: |-
                                                        A node selector requirement is a selector that contains values, a key, and an operator
                                                        that relates the key and values.
                                                      properties:
                                                        key:
                                                          description: The label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            Represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            An array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. If the operator is Gt or Lt, the values
                                                            array must have a single element, which will be interpreted as an integer.
                                                            This array is replaced during a strategic merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchFields:
                                                    description: A list of node selector requirements by node's fields.
                                                    items:
                                                      description: |-
                                                        A node selector requirement is a selector that contains values, a key, and an operator
                                                        that relates the key and values.
                                                      properties:
                                                        key:
                                                          description: The label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            Represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            An array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. If the operator is Gt or Lt, the values
                                                            array must have a single element, which will be interpreted as an integer.
                                                            This array is replaced during a strategic merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - nodeSelectorTerms
                                          type: object
                                          x-kubernetes-map-type: atomic
                                      type: object
                                    podAffinity:
                                      description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
                                      properties:
                                        preferredDuringSchedulingIgnoredDuringExecution:
                                          description: |-
                                            The scheduler will prefer to schedule pods to nodes that satisfy
                                            the affinity expressions specified by this field, but it may choose
                                            a node that violates one or more of the expressions. The node that is
                                            most preferred is the one with the greatest sum of weights, i.e.
                                            for each node that meets all of the scheduling requirements (resource
                                            request, requiredDuringScheduling affinity expressions, etc.),
                                            compute a sum by iterating through the elements of this field and adding
                                            "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                            node(s) with the highest sum are the most preferred.
                                          items:
                                            description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
                                            properties:
                                              podAffinityTerm:
                                                description: Required. A pod affinity term, associated with the corresponding weight.
                                                properties:
                                                  labelSelector:
                                                    description: |-
                                                      A label query over a set of resources, in this case pods.
                                                      If it's null, this PodAffinityTerm matches with no Pods.
                                                    properties:
                                                      matchExpressions:
                                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                        items:
                                                          description: |-
                                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                                            relates the key and values.
                                                          properties:
                                                            key:
                                                              description: key is the label key that the selector applies to.
                                                              type: string
                                                            operator:
                                                              description: |-
                                                                operator represents a key's relationship to a set of values.
                                                                Valid operators are In, NotIn, Exists and DoesNotExist.
                                                              type: string
                                                            values:
                                                              description: |-
                                                                values is an array of string values. If the operator is In or NotIn,
                                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                                the values array must be empty. This array is replaced during a strategic
                                                                merge patch.
                                                              items:
                                                                type: string
                                                              type: array
                                                              x-kubernetes-list-type: atomic
                                                          required:
                                                            - key
                                                            - operator
                                                          type: object
                                                        type: array
                                                        x-kubernetes-list-type: atomic
                                                      matchLabels:
                                                        additionalProperties:
                                                          type: string
                                                        description: |-
                                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                        type: object
                                                    type: object
                                                    x-kubernetes-map-type: atomic
                                                  matchLabelKeys:
                                                    description: |-
                                                      MatchLabelKeys is a set of pod label keys to select which pods will
                                                      be taken into consideration. The keys are used to lookup values from the
                                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                      to select the group of existing pods which pods will be taken into consideration
                                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                      pod labels will be ignored. The default value is empty.
                                                      The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                      Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                      This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  mismatchLabelKeys:
                                                    description: |-
                                                      MismatchLabelKeys is a set of pod label keys to select which pods will
                                                      be taken into consideration. The keys are used to lookup values from the
                                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                      to select the group of existing pods which pods will be taken into consideration
                                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                      pod labels will be ignored. The default value is empty.
                                                      The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                      Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                      This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  namespaceSelector:
                                                    description: |-
                                                      A label query over the set of namespaces that the term applies to.
                                                      The term is applied to the union of the namespaces selected by this field
                                                      and the ones listed in the namespaces field.
                                                      null selector and null or empty namespaces list means "this pod's namespace".
                                                      An empty selector ({}) matches all namespaces.
                                                    properties:
                                                      matchExpressions:
                                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                        items:
                                                          description: |-
                                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                                            relates the key and values.
                                                          properties:
                                                            key:
                                                              description: key is the label key that the selector applies to.
                                                              type: string
                                                            operator:
                                                              description: |-
                                                                operator represents a key's relationship to a set of values.
                                                                Valid operators are In, NotIn, Exists and DoesNotExist.
                                                              type: string
                                                            values:
                                                              description: |-
                                                                values is an array of string values. If the operator is In or NotIn,
                                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                                the values array must be empty. This array is replaced during a strategic
                                                                merge patch.
                                                              items:
                                                                type: string
                                                              type: array
                                                              x-kubernetes-list-type: atomic
                                                          required:
                                                            - key
                                                            - operator
                                                          type: object
                                                        type: array
                                                        x-kubernetes-list-type: atomic
                                                      matchLabels:
                                                        additionalProperties:
                                                          type: string
                                                        description: |-
                                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                        type: object
                                                    type: object
                                                    x-kubernetes-map-type: atomic
                                                  namespaces:
                                                    description: |-
                                                      namespaces specifies a static list of namespace names that the term applies to.
                                                      The term is applied to the union of the namespaces listed in this field
                                                      and the ones selected by namespaceSelector.
                                                      null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  topologyKey:
                                                    description: |-
                                                      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                      the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                      whose value of the label with key topologyKey matches that of any node on which any of the
                                                      selected pods is running.
                                                      Empty topologyKey is not allowed.
                                                    type: string
                                                required:
                                                  - topologyKey
                                                type: object
                                              weight:
                                                description: |-
                                                  weight associated with matching the corresponding podAffinityTerm,
                                                  in the range 1-100.
                                                format: int32
                                                type: integer
                                            required:
                                              - podAffinityTerm
                                              - weight
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                        requiredDuringSchedulingIgnoredDuringExecution:
                                          description: |-
                                            If the affinity requirements specified by this field are not met at
                                            scheduling time, the pod will not be scheduled onto the node.
                                            If the affinity requirements specified by this field cease to be met
                                            at some point during pod execution (e.g. due to a pod label update), the
                                            system may or may not try to eventually evict the pod from its node.
                                            When there are multiple elements, the lists of nodes corresponding to each
                                            podAffinityTerm are intersected, i.e. all terms must be satisfied.
                                          items:
                                            description: |-
                                              Defines a set of pods (namely those matching the labelSelector
                                              relative to the given namespace(s)) that this pod should be
                                              co-located (affinity) or not co-located (anti-affinity) with,
                                              where co-located is defined as running on a node whose value of
                                              the label with key <topologyKey> matches that of any node on which
                                              a pod of the set of pods is running
                                            properties:
                                              labelSelector:
                                                description: |-
                                                  A label query over a set of resources, in this case pods.
                                                  If it's null, this PodAffinityTerm matches with no Pods.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              matchLabelKeys:
                                                description: |-
                                                  MatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                  Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              mismatchLabelKeys:
                                                description: |-
                                                  MismatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                  Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              namespaceSelector:
                                                description: |-
                                                  A label query over the set of namespaces that the term applies to.
                                                  The term is applied to the union of the namespaces selected by this field
                                                  and the ones listed in the namespaces field.
                                                  null selector and null or empty namespaces list means "this pod's namespace".
                                                  An empty selector ({}) matches all namespaces.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              namespaces:
                                                description: |-
                                                  namespaces specifies a static list of namespace names that the term applies to.
                                                  The term is applied to the union of the namespaces listed in this field
                                                  and the ones selected by namespaceSelector.
                                                  null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              topologyKey:
                                                description: |-
                                                  This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                  the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                  whose value of the label with key topologyKey matches that of any node on which any of the
                                                  selected pods is running.
                                                  Empty topologyKey is not allowed.
                                                type: string
                                            required:
                                              - topologyKey
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                      type: object
                                    podAntiAffinity:
                                      description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
                                      properties:
                                        preferredDuringSchedulingIgnoredDuringExecution:
                                          description: |-
                                            The scheduler will prefer to schedule pods to nodes that satisfy
                                            the anti-affinity expressions specified by this field, but it may choose
                                            a node that violates one or more of the expressions. The node that is
                                            most preferred is the one with the greatest sum of weights, i.e.
                                            for each node that meets all of the scheduling requirements (resource
                                            request, requiredDuringScheduling anti-affinity expressions, etc.),
                                            compute a sum by iterating through the elements of this field and adding
                                            "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                            node(s) with the highest sum are the most preferred.
                                          items:
                                            description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
                                            properties:
                                              podAffinityTerm:
                                                description: Required. A pod affinity term, associated with the corresponding weight.
                                                properties:
                                                  labelSelector:
                                                    description: |-
                                                      A label query over a set of resources, in this case pods.
                                                      If it's null, this PodAffinityTerm matches with no Pods.
                                                    properties:
                                                      matchExpressions:
                                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                        items:
                                                          description: |-
                                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                                            relates the key and values.
                                                          properties:
                                                            key:
                                                              description: key is the label key that the selector applies to.
                                                              type: string
                                                            operator:
                                                              description: |-
                                                                operator represents a key's relationship to a set of values.
                                                                Valid operators are In, NotIn, Exists and DoesNotExist.
                                                              type: string
                                                            values:
                                                              description: |-
                                                                values is an array of string values. If the operator is In or NotIn,
                                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                                the values array must be empty. This array is replaced during a strategic
                                                                merge patch.
                                                              items:
                                                                type: string
                                                              type: array
                                                              x-kubernetes-list-type: atomic
                                                          required:
                                                            - key
                                                            - operator
                                                          type: object
                                                        type: array
                                                        x-kubernetes-list-type: atomic
                                                      matchLabels:
                                                        additionalProperties:
                                                          type: string
                                                        description: |-
                                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                        type: object
                                                    type: object
                                                    x-kubernetes-map-type: atomic
                                                  matchLabelKeys:
                                                    description: |-
                                                      MatchLabelKeys is a set of pod label keys to select which pods will
                                                      be taken into consideration. The keys are used to lookup values from the
                                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                      to select the group of existing pods which pods will be taken into consideration
                                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                      pod labels will be ignored. The default value is empty.
                                                      The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                      Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                      This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  mismatchLabelKeys:
                                                    description: |-
                                                      MismatchLabelKeys is a set of pod label keys to select which pods will
                                                      be taken into consideration. The keys are used to lookup values from the
                                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                      to select the group of existing pods which pods will be taken into consideration
                                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                      pod labels will be ignored. The default value is empty.
                                                      The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                      Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                      This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  namespaceSelector:
                                                    description: |-
                                                      A label query over the set of namespaces that the term applies to.
                                                      The term is applied to the union of the namespaces selected by this field
                                                      and the ones listed in the namespaces field.
                                                      null selector and null or empty namespaces list means "this pod's namespace".
                                                      An empty selector ({}) matches all namespaces.
                                                    properties:
                                                      matchExpressions:
                                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                        items:
                                                          description: |-
                                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                                            relates the key and values.
                                                          properties:
                                                            key:
                                                              description: key is the label key that the selector applies to.
                                                              type: string
                                                            operator:
                                                              description: |-
                                                                operator represents a key's relationship to a set of values.
                                                                Valid operators are In, NotIn, Exists and DoesNotExist.
                                                              type: string
                                                            values:
                                                              description: |-
                                                                values is an array of string values. If the operator is In or NotIn,
                                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                                the values array must be empty. This array is replaced during a strategic
                                                                merge patch.
                                                              items:
                                                                type: string
                                                              type: array
                                                              x-kubernetes-list-type: atomic
                                                          required:
                                                            - key
                                                            - operator
                                                          type: object
                                                        type: array
                                                        x-kubernetes-list-type: atomic
                                                      matchLabels:
                                                        additionalProperties:
                                                          type: string
                                                        description: |-
                                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                        type: object
                                                    type: object
                                                    x-kubernetes-map-type: atomic
                                                  namespaces:
                                                    description: |-
                                                      namespaces specifies a static list of namespace names that the term applies to.
                                                      The term is applied to the union of the namespaces listed in this field
                                                      and the ones selected by namespaceSelector.
                                                      null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  topologyKey:
                                                    description: |-
                                                      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                      the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                      whose value of the label with key topologyKey matches that of any node on which any of the
                                                      selected pods is running.
                                                      Empty topologyKey is not allowed.
                                                    type: string
                                                required:
                                                  - topologyKey
                                                type: object
                                              weight:
                                                description: |-
                                                  weight associated with matching the corresponding podAffinityTerm,
                                                  in the range 1-100.
                                                format: int32
                                                type: integer
                                            required:
                                              - podAffinityTerm
                                              - weight
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                        requiredDuringSchedulingIgnoredDuringExecution:
                                          description: |-
                                            If the anti-affinity requirements specified by this field are not met at
                                            scheduling time, the pod will not be scheduled onto the node.
                                            If the anti-affinity requirements specified by this field cease to be met
                                            at some point during pod execution (e.g. due to a pod label update), the
                                            system may or may not try to eventually evict the pod from its node.
                                            When there are multiple elements, the lists of nodes corresponding to each
                                            podAffinityTerm are intersected, i.e. all terms must be satisfied.
                                          items:
                                            description: |-
                                              Defines a set of pods (namely those matching the labelSelector
                                              relative to the given namespace(s)) that this pod should be
                                              co-located (affinity) or not co-located (anti-affinity) with,
                                              where co-located is defined as running on a node whose value of
                                              the label with key <topologyKey> matches that of any node on which
                                              a pod of the set of pods is running
                                            properties:
                                              labelSelector:
                                                description: |-
                                                  A label query over a set of resources, in this case pods.
                                                  If it's null, this PodAffinityTerm matches with no Pods.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              matchLabelKeys:
                                                description: |-
                                                  MatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                  Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              mismatchLabelKeys:
                                                description: |-
                                                  MismatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                  Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              namespaceSelector:
                                                description: |-
                                                  A label query over the set of namespaces that the term applies to.
                                                  The term is applied to the union of the namespaces selected by this field
                                                  and the ones listed in the namespaces field.
                                                  null selector and null or empty namespaces list means "this pod's namespace".
                                                  An empty selector ({}) matches all namespaces.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              namespaces:
                                                description: |-
                                                  namespaces specifies a static list of namespace names that the term applies to.
                                                  The term is applied to the union of the namespaces listed in this field
                                                  and the ones selected by namespaceSelector.
                                                  null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              topologyKey:
                                                description: |-
                                                  This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                  the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                  whose value of the label with key topologyKey matches that of any node on which any of the
                                                  selected pods is running.
                                                  Empty topologyKey is not allowed.
                                                type: string
                                            required:
                                              - topologyKey
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                      type: object
                                  type: object
                                nodeSelector:
                                  additionalProperties:
                                    type: string
                                  description: |-
                                    `nodeSelector` allows scheduling of pods only onto nodes that have each of the specified labels.
                                    For documentation, refer to https://kubernetes.io/docs/concepts/configuration/assign-pod-node/.
                                  type: object
                                  x-kubernetes-map-type: atomic
                                priorityClassName:
                                  description: |-
                                    If specified, indicates the pod's priority. For documentation, refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#how-to-use-priority-and-preemption.
                                    If not specified, default priority is used, or zero if there is no default.
                                  type: string
                                tolerations:
                                  description: |-
                                    `tolerations` is a list of tolerations that allow the pod to schedule onto nodes with matching taints.
                                    For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling.
                                  items:
                                    description: |-
                                      The pod this Toleration is attached to tolerates any taint that matches
                                      the triple <key,value,effect> using the matching operator <operator>.
                                    properties:
                                      effect:
                                        description: |-
                                          Effect indicates the taint effect to match. Empty means match all taint effects.
                                          When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
                                        type: string
                                      key:
                                        description: |-
                                          Key is the taint key that the toleration applies to. Empty means match all taint keys.
                                          If the key is empty, operator must be Exists; this combination means to match all values and all keys.
                                        type: string
                                      operator:
                                        description: |-
                                          Operator represents a key's relationship to the value.
                                          Valid operators are Exists and Equal. Defaults to Equal.
                                          Exists is equivalent to wildcard for value, so that a pod can
                                          tolerate all taints of a particular category.
                                        type: string
                                      tolerationSeconds:
                                        description: |-
                                          TolerationSeconds represents the period of time the toleration (which must be
                                          of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
                                          it is not set, which means tolerate the taint forever (do not evict). Zero and
                                          negative values will be treated as 0 (evict immediately) by the system.
                                        format: int64
                                        type: integer
                                      value:
                                        description: |-
                                          Value is the taint value the toleration matches to.
                                          If the operator is Exists, the value should be empty, otherwise just a regular string.
                                        type: string
                                    type: object
                                  type: array
                              type: object
                          type: object
                        cacheActiveTimeout:
                          default: 5s
                          description: |-
                            `cacheActiveTimeout` is the max period during which the reporter aggregates flows before sending.
                            Increasing `cacheMaxFlows` and `cacheActiveTimeout` can decrease the network traffic overhead and the CPU load,
                            however you can expect higher memory consumption and an increased latency in the flow collection.
                          pattern: ^\d+(ns|ms|s|m)?$
                          type: string
                        cacheMaxFlows:
                          default: 100000
                          description: |-
                            `cacheMaxFlows` is the max number of flows in an aggregate; when reached, the reporter sends the flows.
                            Increasing `cacheMaxFlows` and `cacheActiveTimeout` can decrease the network traffic overhead and the CPU load,
                            however you can expect higher memory consumption and an increased latency in the flow collection.
                          format: int32
                          minimum: 1
                          type: integer
                        excludeInterfaces:
                          default:
                            - lo
                          description: |-
                            `excludeInterfaces` contains the interface names that are excluded from flow tracing.
                            An entry enclosed by slashes, such as `/br-/`, is matched as a regular expression.
                            Otherwise it is matched as a case-sensitive string.
                          items:
                            type: string
                          type: array
                        features:
                          description: |-
                            List of additional features to enable. They are all disabled by default. Enabling additional features might have performance impacts. Possible values are:<br>
                            - `PacketDrop`: enable the packets drop flows logging feature. This feature requires mounting
                            the kernel debug filesystem, so the eBPF agent pods have to run as privileged.
                            If the `spec.agent.ebpf.privileged` parameter is not set, an error is reported.<br>
                            - `DNSTracking`: enable the DNS tracking feature.<br>
                            - `FlowRTT`: enable flow latency (sRTT) extraction in the eBPF agent from TCP traffic.<br>
                            - `NetworkEvents`: enable the network events monitoring feature, such as correlating flows and network policies.
                            This feature requires mounting the kernel debug filesystem, so the eBPF agent pods have to run as privileged.
                            It requires using the OVN-Kubernetes network plugin with the Observability feature.
                            IMPORTANT: This feature is available as a Developer Preview.<br>
                            - `PacketTranslation`: enable enriching flows with packet's translation information. <br>
                            - `EbpfManager`: allow using eBPF manager to manage netobserv ebpf programs. <br>
                            IMPORTANT: This feature is available as a Developer Preview.<br>
                            - `UDNMapping`, to enable interfaces mappind to udn. <br>
                            This feature requires mounting the kernel debug filesystem, so the eBPF agent pods have to run as privileged.
                            It requires using the OVN-Kubernetes network plugin with the Observability feature.
                            IMPORTANT: This feature is available as a Developer Preview.<br>
                          items:
                            description: |-
                              Agent feature, can be one of:<br>
                              - `PacketDrop`, to track packet drops.<br>
                              - `DNSTracking`, to track specific information on DNS traffic.<br>
                              - `FlowRTT`, to track TCP latency.<br>
                              - `NetworkEvents`, to track Network events [Developer Preview].<br>
                              - `PacketTranslation`, to enrich flows with packets translation information. <br>
                              - `EbpfManager`, to enable using EBPF Manager to manage netobserv ebpf programs [Developer Preview].<br>
                              - `UDNMapping`, to enable interfaces mappind to udn [Developer Preview]. <br>
                            enum:
                              - PacketDrop
                              - DNSTracking
                              - FlowRTT
                              - NetworkEvents
                              - PacketTranslation
                              - EbpfManager
                              - UDNMapping
                            type: string
                          type: array
                        flowFilter:
                          description: '`flowFilter` defines the eBPF agent configuration regarding flow filtering.'
                          properties:
                            action:
                              description: '`action` defines the action to perform on the flows that match the filter. The available options are `Accept`, which is the default, and `Reject`.'
                              enum:
                                - Accept
                                - Reject
                              type: string
                            cidr:
                              description: |-
                                `cidr` defines the IP CIDR to filter flows by.
                                Examples: `10.10.10.0/24` or `100:100:100:100::/64`
                              type: string
                            destPorts:
                              anyOf:
                                - type: integer
                                - type: string
                              description: |-
                                `destPorts` optionally defines the destination ports to filter flows by.
                                To filter a single port, set a single port as an integer value. For example, `destPorts: 80`.
                                To filter a range of ports, use a "start-end" range in string format. For example, `destPorts: "80-100"`.
                                To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                              x-kubernetes-int-or-string: true
                            direction:
                              description: '`direction` optionally defines a direction to filter flows by. The available options are `Ingress` and `Egress`.'
                              enum:
                                - Ingress
                                - Egress
                              type: string
                            enable:
                              description: Set `enable` to `true` to enable the eBPF flow filtering feature.
                              type: boolean
                            icmpCode:
                              description: '`icmpCode`, for Internet Control Message Protocol (ICMP) traffic, optionally defines the ICMP code to filter flows by.'
                              type: integer
                            icmpType:
                              description: '`icmpType`, for ICMP traffic, optionally defines the ICMP type to filter flows by.'
                              type: integer
                            peerIP:
                              description: |-
                                `peerIP` optionally defines the remote IP address to filter flows by.
                                Example: `10.10.10.10`.
                              type: string
                            pktDrops:
                              description: '`pktDrops` optionally filters only flows containing packet drops.'
                              type: boolean
                            ports:
                              anyOf:
                                - type: integer
                                - type: string
                              description: |-
                                `ports` optionally defines the ports to filter flows by. It is used both for source and destination ports.
                                To filter a single port, set a single port as an integer value. For example, `ports: 80`.
                                To filter a range of ports, use a "start-end" range in string format. For example, `ports: "80-100"`.
                                To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                              x-kubernetes-int-or-string: true
                            protocol:
                              description: '`protocol` optionally defines a protocol to filter flows by. The available options are `TCP`, `UDP`, `ICMP`, `ICMPv6`, and `SCTP`.'
                              enum:
                                - TCP
                                - UDP
                                - ICMP
                                - ICMPv6
                                - SCTP
                              type: string
                            rules:
                              description: '`flowFilterRules` defines a list of ebpf agent flow filtering rules'
                              items:
                                description: '`EBPFFlowFilterRule` defines the desired eBPF agent configuration regarding flow filtering rule.'
                                properties:
                                  action:
                                    description: '`action` defines the action to perform on the flows that match the filter. The available options are `Accept`, which is the default, and `Reject`.'
                                    enum:
                                      - Accept
                                      - Reject
                                    type: string
                                  cidr:
                                    description: |-
                                      `cidr` defines the IP CIDR to filter flows by.
                                      Examples: `10.10.10.0/24` or `100:100:100:100::/64`
                                    type: string
                                  destPorts:
                                    anyOf:
                                      - type: integer
                                      - type: string
                                    description: |-
                                      `destPorts` optionally defines the destination ports to filter flows by.
                                      To filter a single port, set a single port as an integer value. For example, `destPorts: 80`.
                                      To filter a range of ports, use a "start-end" range in string format. For example, `destPorts: "80-100"`.
                                      To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                                    x-kubernetes-int-or-string: true
                                  direction:
                                    description: '`direction` optionally defines a direction to filter flows by. The available options are `Ingress` and `Egress`.'
                                    enum:
                                      - Ingress
                                      - Egress
                                    type: string
                                  icmpCode:
                                    description: '`icmpCode`, for Internet Control Message Protocol (ICMP) traffic, optionally defines the ICMP code to filter flows by.'
                                    type: integer
                                  icmpType:
                                    description: '`icmpType`, for ICMP traffic, optionally defines the ICMP type to filter flows by.'
                                    type: integer
                                  peerIP:
                                    description: |-
                                      `peerIP` optionally defines the remote IP address to filter flows by.
                                      Example: `10.10.10.10`.
                                    type: string
                                  pktDrops:
                                    description: '`pktDrops` optionally filters only flows containing packet drops.'
                                    type: boolean
                                  ports:
                                    anyOf:
                                      - type: integer
                                      - type: string
                                    description: |-
                                      `ports` optionally defines the ports to filter flows by. It is used both for source and destination ports.
                                      To filter a single port, set a single port as an integer value. For example, `ports: 80`.
                                      To filter a range of ports, use a "start-end" range in string format. For example, `ports: "80-100"`.
                                      To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                                    x-kubernetes-int-or-string: true
                                  protocol:
                                    description: '`protocol` optionally defines a protocol to filter flows by. The available options are `TCP`, `UDP`, `ICMP`, `ICMPv6`, and `SCTP`.'
                                    enum:
                                      - TCP
                                      - UDP
                                      - ICMP
                                      - ICMPv6
                                      - SCTP
                                    type: string
                                  sampling:
                                    description: '`sampling` sampling rate for the matched flow'
                                    format: int32
                                    type: integer
                                  sourcePorts:
                                    anyOf:
                                      - type: integer
                                      - type: string
                                    description: |-
                                      `sourcePorts` optionally defines the source ports to filter flows by.
                                      To filter a single port, set a single port as an integer value. For example, `sourcePorts: 80`.
                                      To filter a range of ports, use a "start-end" range in string format. For example, `sourcePorts: "80-100"`.
                                      To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                                    x-kubernetes-int-or-string: true
                                  tcpFlags:
                                    description: |-
                                      `tcpFlags` optionally defines TCP flags to filter flows by.
                                      In addition to the standard flags (RFC-9293), you can also filter by one of the three following combinations: `SYN-ACK`, `FIN-ACK`, and `RST-ACK`.
                                    enum:
                                      - SYN
                                      - SYN-ACK
                                      - ACK
                                      - FIN
                                      - RST
                                      - URG
                                      - ECE
                                      - CWR
                                      - FIN-ACK
                                      - RST-ACK
                                    type: string
                                type: object
                              maxItems: 16
                              minItems: 1
                              type: array
                            sampling:
                              description: '`sampling` sampling rate for the matched flow'
                              format: int32
                              type: integer
                            sourcePorts:
                              anyOf:
                                - type: integer
                                - type: string
                              description: |-
                                `sourcePorts` optionally defines the source ports to filter flows by.
                                To filter a single port, set a single port as an integer value. For example, `sourcePorts: 80`.
                                To filter a range of ports, use a "start-end" range in string format. For example, `sourcePorts: "80-100"`.
                                To filter two ports, use a "port1,port2" in string format. For example, `ports: "80,100"`.
                              x-kubernetes-int-or-string: true
                            tcpFlags:
                              description: |-
                                `tcpFlags` optionally defines TCP flags to filter flows by.
                                In addition to the standard flags (RFC-9293), you can also filter by one of the three following combinations: `SYN-ACK`, `FIN-ACK`, and `RST-ACK`.
                              enum:
                                - SYN
                                - SYN-ACK
                                - ACK
                                - FIN
                                - RST
                                - URG
                                - ECE
                                - CWR
                                - FIN-ACK
                                - RST-ACK
                              type: string
                          type: object
                        imagePullPolicy:
                          default: IfNotPresent
                          description: '`imagePullPolicy` is the Kubernetes pull policy for the image defined above'
                          enum:
                            - IfNotPresent
                            - Always
                            - Never
                          type: string
                        interfaces:
                          description: |-
                            `interfaces` contains the interface names from where flows are collected. If empty, the agent
                            fetches all the interfaces in the system, excepting the ones listed in `excludeInterfaces`.
                            An entry enclosed by slashes, such as `/br-/`, is matched as a regular expression.
                            Otherwise it is matched as a case-sensitive string.
                          items:
                            type: string
                          type: array
                        kafkaBatchSize:
                          default: 1048576
                          description: '`kafkaBatchSize` limits the maximum size of a request in bytes before being sent to a partition. Ignored when not using Kafka. Default: 1MB.'
                          type: integer
                        logLevel:
                          default: info
                          description: '`logLevel` defines the log level for the NetObserv eBPF Agent'
                          enum:
                            - trace
                            - debug
                            - info
                            - warn
                            - error
                            - fatal
                            - panic
                          type: string
                        metrics:
                          description: '`metrics` defines the eBPF agent configuration regarding metrics.'
                          properties:
                            disableAlerts:
                              description: |-
                                `disableAlerts` is a list of alerts that should be disabled.
                                Possible values are:<br>
                                `NetObservDroppedFlows`, which is triggered when the eBPF agent is missing packets or flows, such as when the BPF hashmap is busy or full, or the capacity limiter is being triggered.<br>
                              items:
                                description: |-
                                  Name of an eBPF agent alert.
                                  Possible values are:<br>
                                  `NetObservDroppedFlows`, which is triggered when the eBPF agent is missing packets or flows, such as when the BPF hashmap is busy or full, or the capacity limiter is being triggered.<br>
                                enum:
                                  - NetObservDroppedFlows
                                type: string
                              type: array
                            enable:
                              description: Set `enable` to `false` to disable eBPF agent metrics collection. It is enabled by default.
                              type: boolean
                            server:
                              description: Metrics server endpoint configuration for the Prometheus scraper.
                              properties:
                                port:
                                  description: The metrics server HTTP port.
                                  format: int32
                                  maximum: 65535
                                  minimum: 1
                                  type: integer
                                tls:
                                  description: TLS configuration.
                                  properties:
                                    insecureSkipVerify:
                                      default: false
                                      description: |-
                                        `insecureSkipVerify` allows skipping client-side verification of the provided certificate.
                                        If set to `true`, the `providedCaFile` field is ignored.
                                      type: boolean
                                    provided:
                                      description: TLS configuration when `type` is set to `Provided`.
                                      properties:
                                        certFile:
                                          description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                          type: string
                                        certKey:
                                          description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                          type: string
                                        name:
                                          description: Name of the config map or secret containing certificates.
                                          type: string
                                        namespace:
                                          default: ""
                                          description: |-
                                            Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                            If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                          type: string
                                        type:
                                          description: 'Type for the certificate reference: `configmap` or `secret`.'
                                          enum:
                                            - configmap
                                            - secret
                                          type: string
                                      type: object
                                    providedCaFile:
                                      description: Reference to the CA file when `type` is set to `Provided`.
                                      properties:
                                        file:
                                          description: File name within the config map or secret.
                                          type: string
                                        name:
                                          description: Name of the config map or secret containing the file.
                                          type: string
                                        namespace:
                                          default: ""
                                          description: |-
                                            Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                            If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                          type: string
                                        type:
                                          description: 'Type for the file reference: `configmap` or `secret`.'
                                          enum:
                                            - configmap
                                            - secret
                                          type: string
                                      type: object
                                    type:
                                      default: Disabled
                                      description: |-
                                        Select the type of TLS configuration:<br>
                                        - `Disabled` (default) to not configure TLS for the endpoint.
                                        - `Provided` to manually provide cert file and a key file. [Unsupported (*)].
                                        - `Auto` to use OpenShift auto generated certificate using annotations.
                                      enum:
                                        - Disabled
                                        - Provided
                                        - Auto
                                      type: string
                                  required:
                                    - type
                                  type: object
                              type: object
                          type: object
                        privileged:
                          description: |-
                            Privileged mode for the eBPF Agent container. When ignored or set to `false`, the operator sets
                            granular capabilities (BPF, PERFMON, NET_ADMIN, SYS_RESOURCE) to the container.
                            If for some reason these capabilities cannot be set, such as if an old kernel version not knowing CAP_BPF
                            is in use, then you can turn on this mode for more global privileges.
                            Some agent features require the privileged mode, such as packet drops tracking (see `features`) and SR-IOV support.
                          type: boolean
                        resources:
                          default:
                            limits:
                              memory: 800Mi
                            requests:
                              cpu: 100m
                              memory: 50Mi
                          description: |-
                            `resources` are the compute resources required by this container.
                            For more information, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          properties:
                            claims:
                              description: |-
                                Claims lists the names of resources, defined in spec.resourceClaims,
                                that are used by this container.

                                This is an alpha field and requires enabling the
                                DynamicResourceAllocation feature gate.

                                This field is immutable. It can only be set for containers.
                              items:
                                description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                                properties:
                                  name:
                                    description: |-
                                      Name must match the name of one entry in pod.spec.resourceClaims of
                                      the Pod where this field is used. It makes that resource available
                                      inside a container.
                                    type: string
                                  request:
                                    description: |-
                                      Request is the name chosen for a request in the referenced claim.
                                      If empty, everything from the claim is made available, otherwise
                                      only the result of this request.
                                    type: string
                                required:
                                  - name
                                type: object
                              type: array
                              x-kubernetes-list-map-keys:
                                - name
                              x-kubernetes-list-type: map
                            limits:
                              additionalProperties:
                                anyOf:
                                  - type: integer
                                  - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              description: |-
                                Limits describes the maximum amount of compute resources allowed.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                              type: object
                            requests:
                              additionalProperties:
                                anyOf:
                                  - type: integer
                                  - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              description: |-
                                Requests describes the minimum amount of compute resources required.
                                If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                              type: object
                          type: object
                        sampling:
                          default: 50
                          description: Sampling rate of the flow reporter. 100 means one flow on 100 is sent. 0 or 1 means all flows are sampled.
                          format: int32
                          minimum: 0
                          type: integer
                      type: object
                    ipfix:
                      description: |-
                        `ipfix` [deprecated (*)] - describes the settings related to the IPFIX-based flow reporter when `spec.agent.type`
                        is set to `IPFIX`.
                      properties:
                        cacheActiveTimeout:
                          default: 20s
                          description: '`cacheActiveTimeout` is the max period during which the reporter aggregates flows before sending.'
                          pattern: ^\d+(ns|ms|s|m)?$
                          type: string
                        cacheMaxFlows:
                          default: 400
                          description: '`cacheMaxFlows` is the max number of flows in an aggregate; when reached, the reporter sends the flows.'
                          format: int32
                          minimum: 0
                          type: integer
                        clusterNetworkOperator:
                          description: '`clusterNetworkOperator` defines the settings related to the OpenShift Cluster Network Operator, when available.'
                          properties:
                            namespace:
                              default: openshift-network-operator
                              description: Namespace  where the config map is going to be deployed.
                              type: string
                          type: object
                        forceSampleAll:
                          default: false
                          description: |-
                            `forceSampleAll` allows disabling sampling in the IPFIX-based flow reporter.
                            It is not recommended to sample all the traffic with IPFIX, as it might generate cluster instability.
                            If you REALLY want to do that, set this flag to `true`. Use at your own risk.
                            When it is set to `true`, the value of `sampling` is ignored.
                          type: boolean
                        ovnKubernetes:
                          description: '`ovnKubernetes` defines the settings of the OVN-Kubernetes network plugin, when available. This configuration is used when using OVN''s IPFIX exports, without OpenShift. When using OpenShift, refer to the `clusterNetworkOperator` property instead.'
                          properties:
                            containerName:
                              default: ovnkube-node
                              description: '`containerName` defines the name of the container to configure for IPFIX.'
                              type: string
                            daemonSetName:
                              default: ovnkube-node
                              description: '`daemonSetName` defines the name of the DaemonSet controlling the OVN-Kubernetes pods.'
                              type: string
                            namespace:
                              default: ovn-kubernetes
                              description: Namespace where OVN-Kubernetes pods are deployed.
                              type: string
                          type: object
                        sampling:
                          default: 400
                          description: |-
                            `sampling` is the sampling rate on the reporter. 100 means one flow on 100 is sent.
                            To ensure cluster stability, it is not possible to set a value below 2.
                            If you really want to sample every packet, which might impact the cluster stability,
                            refer to `forceSampleAll`. Alternatively, you can use the eBPF Agent instead of IPFIX.
                          format: int32
                          minimum: 2
                          type: integer
                      type: object
                    type:
                      default: eBPF
                      description: |-
                        `type` [deprecated (*)] selects the flows tracing agent. Previously, this field allowed to select between `eBPF` or `IPFIX`.
                        Only `eBPF` is allowed now, so this field is deprecated and is planned for removal in a future version of the API.
                      enum:
                        - eBPF
                        - IPFIX
                      type: string
                  type: object
                consolePlugin:
                  description: '`consolePlugin` defines the settings related to the OpenShift Console plugin, when available.'
                  properties:
                    advanced:
                      description: |-
                        `advanced` allows setting some aspects of the internal configuration of the console plugin.
                        This section is aimed mostly for debugging and fine-grained performance optimizations,
                        such as `GOGC` and `GOMAXPROCS` env vars. Set these values at your own risk.
                      properties:
                        args:
                          description: |-
                            `args` allows passing custom arguments to underlying components. Useful for overriding
                            some parameters, such as a URL or a configuration path, that should not be
                            publicly exposed as part of the FlowCollector descriptor, as they are only useful
                            in edge debug or support scenarios.
                          items:
                            type: string
                          type: array
                        env:
                          additionalProperties:
                            type: string
                          description: |-
                            `env` allows passing custom environment variables to underlying components. Useful for passing
                            some very concrete performance-tuning options, such as `GOGC` and `GOMAXPROCS`, that should not be
                            publicly exposed as part of the FlowCollector descriptor, as they are only useful
                            in edge debug or support scenarios.
                          type: object
                        port:
                          default: 9001
                          description: '`port` is the plugin service port. Do not use 9002, which is reserved for metrics.'
                          format: int32
                          maximum: 65535
                          minimum: 1
                          type: integer
                        register:
                          default: true
                          description: |-
                            `register` allows, when set to `true`, to automatically register the provided console plugin with the OpenShift Console operator.
                            When set to `false`, you can still register it manually by editing console.operator.openshift.io/cluster with the following command:
                            `oc patch console.operator.openshift.io cluster --type='json' -p '[{"op": "add", "path": "/spec/plugins/-", "value": "netobserv-plugin"}]'`
                          type: boolean
                        scheduling:
                          description: '`scheduling` controls how the pods are scheduled on nodes.'
                          properties:
                            affinity:
                              description: If specified, the pod's scheduling constraints. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling.
                              properties:
                                nodeAffinity:
                                  description: Describes node affinity scheduling rules for the pod.
                                  properties:
                                    preferredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        The scheduler will prefer to schedule pods to nodes that satisfy
                                        the affinity expressions specified by this field, but it may choose
                                        a node that violates one or more of the expressions. The node that is
                                        most preferred is the one with the greatest sum of weights, i.e.
                                        for each node that meets all of the scheduling requirements (resource
                                        request, requiredDuringScheduling affinity expressions, etc.),
                                        compute a sum by iterating through the elements of this field and adding
                                        "weight" to the sum if the node matches the corresponding matchExpressions; the
                                        node(s) with the highest sum are the most preferred.
                                      items:
                                        description: |-
                                          An empty preferred scheduling term matches all objects with implicit weight 0
                                          (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).
                                        properties:
                                          preference:
                                            description: A node selector term, associated with the corresponding weight.
                                            properties:
                                              matchExpressions:
                                                description: A list of node selector requirements by node's labels.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchFields:
                                                description: A list of node selector requirements by node's fields.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          weight:
                                            description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
                                            format: int32
                                            type: integer
                                        required:
                                          - preference
                                          - weight
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    requiredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        If the affinity requirements specified by this field are not met at
                                        scheduling time, the pod will not be scheduled onto the node.
                                        If the affinity requirements specified by this field cease to be met
                                        at some point during pod execution (e.g. due to an update), the system
                                        may or may not try to eventually evict the pod from its node.
                                      properties:
                                        nodeSelectorTerms:
                                          description: Required. A list of node selector terms. The terms are ORed.
                                          items:
                                            description: |-
                                              A null or empty node selector term matches no objects. The requirements of
                                              them are ANDed.
                                              The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.
                                            properties:
                                              matchExpressions:
                                                description: A list of node selector requirements by node's labels.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchFields:
                                                description: A list of node selector requirements by node's fields.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          type: array
                                          x-kubernetes-list-type: atomic
                                      required:
                                        - nodeSelectorTerms
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  type: object
                                podAffinity:
                                  description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
                                  properties:
                                    preferredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        The scheduler will prefer to schedule pods to nodes that satisfy
                                        the affinity expressions specified by this field, but it may choose
                                        a node that violates one or more of the expressions. The node that is
                                        most preferred is the one with the greatest sum of weights, i.e.
                                        for each node that meets all of the scheduling requirements (resource
                                        request, requiredDuringScheduling affinity expressions, etc.),
                                        compute a sum by iterating through the elements of this field and adding
                                        "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                        node(s) with the highest sum are the most preferred.
                                      items:
                                        description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
                                        properties:
                                          podAffinityTerm:
                                            description: Required. A pod affinity term, associated with the corresponding weight.
                                            properties:
                                              labelSelector:
                                                description: |-
                                                  A label query over a set of resources, in this case pods.
                                                  If it's null, this PodAffinityTerm matches with no Pods.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              matchLabelKeys:
                                                description: |-
                                                  MatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                  Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              mismatchLabelKeys:
                                                description: |-
                                                  MismatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                  Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              namespaceSelector:
                                                description: |-
                                                  A label query over the set of namespaces that the term applies to.
                                                  The term is applied to the union of the namespaces selected by this field
                                                  and the ones listed in the namespaces field.
                                                  null selector and null or empty namespaces list means "this pod's namespace".
                                                  An empty selector ({}) matches all namespaces.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              namespaces:
                                                description: |-
                                                  namespaces specifies a static list of namespace names that the term applies to.
                                                  The term is applied to the union of the namespaces listed in this field
                                                  and the ones selected by namespaceSelector.
                                                  null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              topologyKey:
                                                description: |-
                                                  This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                  the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                  whose value of the label with key topologyKey matches that of any node on which any of the
                                                  selected pods is running.
                                                  Empty topologyKey is not allowed.
                                                type: string
                                            required:
                                              - topologyKey
                                            type: object
                                          weight:
                                            description: |-
                                              weight associated with matching the corresponding podAffinityTerm,
                                              in the range 1-100.
                                            format: int32
                                            type: integer
                                        required:
                                          - podAffinityTerm
                                          - weight
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    requiredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        If the affinity requirements specified by this field are not met at
                                        scheduling time, the pod will not be scheduled onto the node.
                                        If the affinity requirements specified by this field cease to be met
                                        at some point during pod execution (e.g. due to a pod label update), the
                                        system may or may not try to eventually evict the pod from its node.
                                        When there are multiple elements, the lists of nodes corresponding to each
                                        podAffinityTerm are intersected, i.e. all terms must be satisfied.
                                      items:
                                        description: |-
                                          Defines a set of pods (namely those matching the labelSelector
                                          relative to the given namespace(s)) that this pod should be
                                          co-located (affinity) or not co-located (anti-affinity) with,
                                          where co-located is defined as running on a node whose value of
                                          the label with key <topologyKey> matches that of any node on which
                                          a pod of the set of pods is running
                                        properties:
                                          labelSelector:
                                            description: |-
                                              A label query over a set of resources, in this case pods.
                                              If it's null, this PodAffinityTerm matches with no Pods.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          matchLabelKeys:
                                            description: |-
                                              MatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                              Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          mismatchLabelKeys:
                                            description: |-
                                              MismatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                              Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          namespaceSelector:
                                            description: |-
                                              A label query over the set of namespaces that the term applies to.
                                              The term is applied to the union of the namespaces selected by this field
                                              and the ones listed in the namespaces field.
                                              null selector and null or empty namespaces list means "this pod's namespace".
                                              An empty selector ({}) matches all namespaces.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          namespaces:
                                            description: |-
                                              namespaces specifies a static list of namespace names that the term applies to.
                                              The term is applied to the union of the namespaces listed in this field
                                              and the ones selected by namespaceSelector.
                                              null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          topologyKey:
                                            description: |-
                                              This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                              the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                              whose value of the label with key topologyKey matches that of any node on which any of the
                                              selected pods is running.
                                              Empty topologyKey is not allowed.
                                            type: string
                                        required:
                                          - topologyKey
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                                podAntiAffinity:
                                  description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
                                  properties:
                                    preferredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        The scheduler will prefer to schedule pods to nodes that satisfy
                                        the anti-affinity expressions specified by this field, but it may choose
                                        a node that violates one or more of the expressions. The node that is
                                        most preferred is the one with the greatest sum of weights, i.e.
                                        for each node that meets all of the scheduling requirements (resource
                                        request, requiredDuringScheduling anti-affinity expressions, etc.),
                                        compute a sum by iterating through the elements of this field and adding
                                        "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                        node(s) with the highest sum are the most preferred.
                                      items:
                                        description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
                                        properties:
                                          podAffinityTerm:
                                            description: Required. A pod affinity term, associated with the corresponding weight.
                                            properties:
                                              labelSelector:
                                                description: |-
                                                  A label query over a set of resources, in this case pods.
                                                  If it's null, this PodAffinityTerm matches with no Pods.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              matchLabelKeys:
                                                description: |-
                                                  MatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                  Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              mismatchLabelKeys:
                                                description: |-
                                                  MismatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                  Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              namespaceSelector:
                                                description: |-
                                                  A label query over the set of namespaces that the term applies to.
                                                  The term is applied to the union of the namespaces selected by this field
                                                  and the ones listed in the namespaces field.
                                                  null selector and null or empty namespaces list means "this pod's namespace".
                                                  An empty selector ({}) matches all namespaces.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              namespaces:
                                                description: |-
                                                  namespaces specifies a static list of namespace names that the term applies to.
                                                  The term is applied to the union of the namespaces listed in this field
                                                  and the ones selected by namespaceSelector.
                                                  null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              topologyKey:
                                                description: |-
                                                  This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                  the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                  whose value of the label with key topologyKey matches that of any node on which any of the
                                                  selected pods is running.
                                                  Empty topologyKey is not allowed.
                                                type: string
                                            required:
                                              - topologyKey
                                            type: object
                                          weight:
                                            description: |-
                                              weight associated with matching the corresponding podAffinityTerm,
                                              in the range 1-100.
                                            format: int32
                                            type: integer
                                        required:
                                          - podAffinityTerm
                                          - weight
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    requiredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        If the anti-affinity requirements specified by this field are not met at
                                        scheduling time, the pod will not be scheduled onto the node.
                                        If the anti-affinity requirements specified by this field cease to be met
                                        at some point during pod execution (e.g. due to a pod label update), the
                                        system may or may not try to eventually evict the pod from its node.
                                        When there are multiple elements, the lists of nodes corresponding to each
                                        podAffinityTerm are intersected, i.e. all terms must be satisfied.
                                      items:
                                        description: |-
                                          Defines a set of pods (namely those matching the labelSelector
                                          relative to the given namespace(s)) that this pod should be
                                          co-located (affinity) or not co-located (anti-affinity) with,
                                          where co-located is defined as running on a node whose value of
                                          the label with key <topologyKey> matches that of any node on which
                                          a pod of the set of pods is running
                                        properties:
                                          labelSelector:
                                            description: |-
                                              A label query over a set of resources, in this case pods.
                                              If it's null, this PodAffinityTerm matches with no Pods.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          matchLabelKeys:
                                            description: |-
                                              MatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                              Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          mismatchLabelKeys:
                                            description: |-
                                              MismatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                              Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          namespaceSelector:
                                            description: |-
                                              A label query over the set of namespaces that the term applies to.
                                              The term is applied to the union of the namespaces selected by this field
                                              and the ones listed in the namespaces field.
                                              null selector and null or empty namespaces list means "this pod's namespace".
                                              An empty selector ({}) matches all namespaces.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          namespaces:
                                            description: |-
                                              namespaces specifies a static list of namespace names that the term applies to.
                                              The term is applied to the union of the namespaces listed in this field
                                              and the ones selected by namespaceSelector.
                                              null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          topologyKey:
                                            description: |-
                                              This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                              the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                              whose value of the label with key topologyKey matches that of any node on which any of the
                                              selected pods is running.
                                              Empty topologyKey is not allowed.
                                            type: string
                                        required:
                                          - topologyKey
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                              type: object
                            nodeSelector:
                              additionalProperties:
                                type: string
                              description: |-
                                `nodeSelector` allows scheduling of pods only onto nodes that have each of the specified labels.
                                For documentation, refer to https://kubernetes.io/docs/concepts/configuration/assign-pod-node/.
                              type: object
                              x-kubernetes-map-type: atomic
                            priorityClassName:
                              description: |-
                                If specified, indicates the pod's priority. For documentation, refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#how-to-use-priority-and-preemption.
                                If not specified, default priority is used, or zero if there is no default.
                              type: string
                            tolerations:
                              description: |-
                                `tolerations` is a list of tolerations that allow the pod to schedule onto nodes with matching taints.
                                For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling.
                              items:
                                description: |-
                                  The pod this Toleration is attached to tolerates any taint that matches
                                  the triple <key,value,effect> using the matching operator <operator>.
                                properties:
                                  effect:
                                    description: |-
                                      Effect indicates the taint effect to match. Empty means match all taint effects.
                                      When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
                                    type: string
                                  key:
                                    description: |-
                                      Key is the taint key that the toleration applies to. Empty means match all taint keys.
                                      If the key is empty, operator must be Exists; this combination means to match all values and all keys.
                                    type: string
                                  operator:
                                    description: |-
                                      Operator represents a key's relationship to the value.
                                      Valid operators are Exists and Equal. Defaults to Equal.
                                      Exists is equivalent to wildcard for value, so that a pod can
                                      tolerate all taints of a particular category.
                                    type: string
                                  tolerationSeconds:
                                    description: |-
                                      TolerationSeconds represents the period of time the toleration (which must be
                                      of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
                                      it is not set, which means tolerate the taint forever (do not evict). Zero and
                                      negative values will be treated as 0 (evict immediately) by the system.
                                    format: int64
                                    type: integer
                                  value:
                                    description: |-
                                      Value is the taint value the toleration matches to.
                                      If the operator is Exists, the value should be empty, otherwise just a regular string.
                                    type: string
                                type: object
                              type: array
                          type: object
                      type: object
                    autoscaler:
                      description: '`autoscaler` spec of a horizontal pod autoscaler to set up for the plugin Deployment.'
                      properties:
                        maxReplicas:
                          default: 3
                          description: '`maxReplicas` is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.'
                          format: int32
                          type: integer
                        metrics:
                          description: Metrics used by the pod autoscaler. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/
                          items:
                            properties:
                              containerResource:
                                properties:
                                  container:
                                    type: string
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - container
                                  - name
                                  - target
                                type: object
                              external:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              object:
                                properties:
                                  describedObject:
                                    properties:
                                      apiVersion:
                                        type: string
                                      kind:
                                        type: string
                                      name:
                                        type: string
                                    required:
                                      - kind
                                      - name
                                    type: object
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - describedObject
                                  - metric
                                  - target
                                type: object
                              pods:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              resource:
                                properties:
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - name
                                  - target
                                type: object
                              type:
                                type: string
                            required:
                              - type
                            type: object
                          type: array
                        minReplicas:
                          description: |-
                            `minReplicas` is the lower limit for the number of replicas to which the autoscaler
                            can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the
                            alpha feature gate HPAScaleToZero is enabled and at least one Object or External
                            metric is configured. Scaling is active as long as at least one metric value is
                            available.
                          format: int32
                          type: integer
                        status:
                          default: Disabled
                          description: |-
                            `status` describes the desired status regarding deploying an horizontal pod autoscaler.<br>
                            - `Disabled` does not deploy an horizontal pod autoscaler.<br>
                            - `Enabled` deploys an horizontal pod autoscaler.<br>
                          enum:
                            - Disabled
                            - Enabled
                          type: string
                      type: object
                    enable:
                      default: true
                      description: Enables the console plugin deployment.
                      type: boolean
                    imagePullPolicy:
                      default: IfNotPresent
                      description: '`imagePullPolicy` is the Kubernetes pull policy for the image defined above'
                      enum:
                        - IfNotPresent
                        - Always
                        - Never
                      type: string
                    logLevel:
                      default: info
                      description: '`logLevel` for the console plugin backend'
                      enum:
                        - trace
                        - debug
                        - info
                        - warn
                        - error
                        - fatal
                        - panic
                      type: string
                    portNaming:
                      default:
                        enable: true
                      description: '`portNaming` defines the configuration of the port-to-service name translation'
                      properties:
                        enable:
                          default: true
                          description: Enable the console plugin port-to-service name translation
                          type: boolean
                        portNames:
                          additionalProperties:
                            type: string
                          description: |-
                            `portNames` defines additional port names to use in the console,
                            for example, `portNames: {"3100": "loki"}`.
                          type: object
                      type: object
                    quickFilters:
                      default:
                        - default: true
                          filter:
                            flow_layer: '"app"'
                          name: Applications
                        - filter:
                            flow_layer: '"infra"'
                          name: Infrastructure
                        - default: true
                          filter:
                            dst_kind: '"Pod"'
                            src_kind: '"Pod"'
                          name: Pods network
                        - filter:
                            dst_kind: '"Service"'
                          name: Services network
                      description: '`quickFilters` configures quick filter presets for the Console plugin'
                      items:
                        description: '`QuickFilter` defines preset configuration for Console''s quick filters'
                        properties:
                          default:
                            description: '`default` defines whether this filter should be active by default or not'
                            type: boolean
                          filter:
                            additionalProperties:
                              type: string
                            description: |-
                              `filter` is a set of keys and values to be set when this filter is selected. Each key can relate to a list of values using a coma-separated string,
                              for example, `filter: {"src_namespace": "namespace1,namespace2"}`.
                            type: object
                          name:
                            description: Name of the filter, that is displayed in the Console
                            type: string
                        required:
                          - filter
                          - name
                        type: object
                      type: array
                    replicas:
                      default: 1
                      description: '`replicas` defines the number of replicas (pods) to start.'
                      format: int32
                      minimum: 0
                      type: integer
                    resources:
                      default:
                        limits:
                          memory: 100Mi
                        requests:
                          cpu: 100m
                          memory: 50Mi
                      description: |-
                        `resources`, in terms of compute resources, required by this container.
                        For more information, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                      properties:
                        claims:
                          description: |-
                            Claims lists the names of resources, defined in spec.resourceClaims,
                            that are used by this container.

                            This is an alpha field and requires enabling the
                            DynamicResourceAllocation feature gate.

                            This field is immutable. It can only be set for containers.
                          items:
                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                            properties:
                              name:
                                description: |-
                                  Name must match the name of one entry in pod.spec.resourceClaims of
                                  the Pod where this field is used. It makes that resource available
                                  inside a container.
                                type: string
                              request:
                                description: |-
                                  Request is the name chosen for a request in the referenced claim.
                                  If empty, everything from the claim is made available, otherwise
                                  only the result of this request.
                                type: string
                            required:
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - name
                          x-kubernetes-list-type: map
                        limits:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Limits describes the maximum amount of compute resources allowed.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                        requests:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Requests describes the minimum amount of compute resources required.
                            If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                            otherwise to an implementation-defined value. Requests cannot exceed Limits.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                      type: object
                  type: object
                deploymentModel:
                  default: Direct
                  description: |-
                    `deploymentModel` defines the desired type of deployment for flow processing. Possible values are:<br>
                    - `Direct` (default) to make the flow processor listen directly from the agents.<br>
                    - `Kafka` to make flows sent to a Kafka pipeline before consumption by the processor.<br>
                    Kafka can provide better scalability, resiliency, and high availability (for more details, see https://www.redhat.com/en/topics/integration/what-is-apache-kafka).
                  enum:
                    - Direct
                    - Kafka
                  type: string
                exporters:
                  description: '`exporters` define additional optional exporters for custom consumption or storage.'
                  items:
                    description: '`FlowCollectorExporter` defines an additional exporter to send enriched flows to.'
                    properties:
                      ipfix:
                        description: IPFIX configuration, such as the IP address and port to send enriched IPFIX flows to.
                        properties:
                          targetHost:
                            default: ""
                            description: Address of the IPFIX external receiver.
                            type: string
                          targetPort:
                            description: Port for the IPFIX external receiver.
                            type: integer
                          transport:
                            description: Transport protocol (`TCP` or `UDP`) to be used for the IPFIX connection, defaults to `TCP`.
                            enum:
                              - TCP
                              - UDP
                            type: string
                        required:
                          - targetHost
                          - targetPort
                        type: object
                      kafka:
                        description: Kafka configuration, such as the address and topic, to send enriched flows to.
                        properties:
                          address:
                            default: ""
                            description: Address of the Kafka server
                            type: string
                          sasl:
                            description: SASL authentication configuration. [Unsupported (*)].
                            properties:
                              clientIDReference:
                                description: Reference to the secret or config map containing the client ID
                                properties:
                                  file:
                                    description: File name within the config map or secret.
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing the file.
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the file reference: `configmap` or `secret`.'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              clientSecretReference:
                                description: Reference to the secret or config map containing the client secret
                                properties:
                                  file:
                                    description: File name within the config map or secret.
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing the file.
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the file reference: `configmap` or `secret`.'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              type:
                                default: Disabled
                                description: Type of SASL authentication to use, or `Disabled` if SASL is not used
                                enum:
                                  - Disabled
                                  - Plain
                                  - ScramSHA512
                                type: string
                            type: object
                          tls:
                            description: TLS client configuration. When using TLS, verify that the address matches the Kafka port used for TLS, generally 9093.
                            properties:
                              caCert:
                                description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                                properties:
                                  certFile:
                                    description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                    type: string
                                  certKey:
                                    description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing certificates.
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the certificate reference: `configmap` or `secret`.'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              enable:
                                default: false
                                description: Enable TLS
                                type: boolean
                              insecureSkipVerify:
                                default: false
                                description: |-
                                  `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                  If set to `true`, the `caCert` field is ignored.
                                type: boolean
                              userCert:
                                description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                                properties:
                                  certFile:
                                    description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                    type: string
                                  certKey:
                                    description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing certificates.
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the certificate reference: `configmap` or `secret`.'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                            type: object
                          topic:
                            default: ""
                            description: Kafka topic to use. It must exist. NetObserv does not create it.
                            type: string
                        required:
                          - address
                          - topic
                        type: object
                      openTelemetry:
                        description: OpenTelemetry configuration, such as the IP address and port to send enriched logs or metrics to.
                        properties:
                          fieldsMapping:
                            description: |-
                              Custom fields mapping to an OpenTelemetry conformant format.
                              By default, NetObserv format proposal is used: https://github.com/rhobs/observability-data-model/blob/main/network-observability.md#format-proposal .
                              As there is currently no accepted standard for L3 or L4 enriched network logs, you can freely override it with your own.
                            items:
                              properties:
                                input:
                                  type: string
                                multiplier:
                                  type: integer
                                output:
                                  type: string
                              type: object
                            type: array
                          headers:
                            additionalProperties:
                              type: string
                            description: Headers to add to messages (optional)
                            type: object
                          logs:
                            description: OpenTelemetry configuration for logs.
                            properties:
                              enable:
                                default: true
                                description: Set `enable` to `true` to send logs to an OpenTelemetry receiver.
                                type: boolean
                            type: object
                          metrics:
                            description: OpenTelemetry configuration for metrics.
                            properties:
                              enable:
                                default: true
                                description: Set `enable` to `true` to send metrics to an OpenTelemetry receiver.
                                type: boolean
                              pushTimeInterval:
                                default: 20s
                                description: Specify how often metrics are sent to a collector.
                                type: string
                            type: object
                          protocol:
                            description: Protocol of the OpenTelemetry connection. The available options are `http` and `grpc`.
                            enum:
                              - http
                              - grpc
                            type: string
                          targetHost:
                            default: ""
                            description: Address of the OpenTelemetry receiver.
                            type: string
                          targetPort:
                            description: Port for the OpenTelemetry receiver.
                            type: integer
                          tls:
                            description: TLS client configuration.
                            properties:
                              caCert:
                                description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                                properties:
                                  certFile:
                                    description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                    type: string
                                  certKey:
                                    description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing certificates.
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the certificate reference: `configmap` or `secret`.'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                              enable:
                                default: false
                                description: Enable TLS
                                type: boolean
                              insecureSkipVerify:
                                default: false
                                description: |-
                                  `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                  If set to `true`, the `caCert` field is ignored.
                                type: boolean
                              userCert:
                                description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                                properties:
                                  certFile:
                                    description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                    type: string
                                  certKey:
                                    description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                    type: string
                                  name:
                                    description: Name of the config map or secret containing certificates.
                                    type: string
                                  namespace:
                                    default: ""
                                    description: |-
                                      Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                      If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                    type: string
                                  type:
                                    description: 'Type for the certificate reference: `configmap` or `secret`.'
                                    enum:
                                      - configmap
                                      - secret
                                    type: string
                                type: object
                            type: object
                        required:
                          - targetHost
                          - targetPort
                        type: object
                      type:
                        description: '`type` selects the type of exporters. The available options are `Kafka`, `IPFIX`, and `OpenTelemetry`.'
                        enum:
                          - Kafka
                          - IPFIX
                          - OpenTelemetry
                        type: string
                    required:
                      - type
                    type: object
                  type: array
                kafka:
                  description: Kafka configuration, allowing to use Kafka as a broker as part of the flow collection pipeline. Available when the `spec.deploymentModel` is `Kafka`.
                  properties:
                    address:
                      default: ""
                      description: Address of the Kafka server
                      type: string
                    sasl:
                      description: SASL authentication configuration. [Unsupported (*)].
                      properties:
                        clientIDReference:
                          description: Reference to the secret or config map containing the client ID
                          properties:
                            file:
                              description: File name within the config map or secret.
                              type: string
                            name:
                              description: Name of the config map or secret containing the file.
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the file reference: `configmap` or `secret`.'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        clientSecretReference:
                          description: Reference to the secret or config map containing the client secret
                          properties:
                            file:
                              description: File name within the config map or secret.
                              type: string
                            name:
                              description: Name of the config map or secret containing the file.
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the file reference: `configmap` or `secret`.'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        type:
                          default: Disabled
                          description: Type of SASL authentication to use, or `Disabled` if SASL is not used
                          enum:
                            - Disabled
                            - Plain
                            - ScramSHA512
                          type: string
                      type: object
                    tls:
                      description: TLS client configuration. When using TLS, verify that the address matches the Kafka port used for TLS, generally 9093.
                      properties:
                        caCert:
                          description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates.
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`.'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                        enable:
                          default: false
                          description: Enable TLS
                          type: boolean
                        insecureSkipVerify:
                          default: false
                          description: |-
                            `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                            If set to `true`, the `caCert` field is ignored.
                          type: boolean
                        userCert:
                          description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                          properties:
                            certFile:
                              description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                              type: string
                            certKey:
                              description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                              type: string
                            name:
                              description: Name of the config map or secret containing certificates.
                              type: string
                            namespace:
                              default: ""
                              description: |-
                                Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                              type: string
                            type:
                              description: 'Type for the certificate reference: `configmap` or `secret`.'
                              enum:
                                - configmap
                                - secret
                              type: string
                          type: object
                      type: object
                    topic:
                      default: ""
                      description: Kafka topic to use. It must exist. NetObserv does not create it.
                      type: string
                  required:
                    - address
                    - topic
                  type: object
                loki:
                  description: '`loki`, the flow store, client settings.'
                  properties:
                    advanced:
                      description: |-
                        `advanced` allows setting some aspects of the internal configuration of the Loki clients.
                        This section is aimed mostly for debugging and fine-grained performance optimizations.
                      properties:
                        staticLabels:
                          additionalProperties:
                            type: string
                          default:
                            app: netobserv-flowcollector
                          description: '`staticLabels` is a map of common labels to set on each flow in Loki storage.'
                          type: object
                        writeMaxBackoff:
                          default: 5s
                          description: '`writeMaxBackoff` is the maximum backoff time for Loki client connection between retries.'
                          type: string
                        writeMaxRetries:
                          default: 2
                          description: '`writeMaxRetries` is the maximum number of retries for Loki client connections.'
                          format: int32
                          minimum: 0
                          type: integer
                        writeMinBackoff:
                          default: 1s
                          description: '`writeMinBackoff` is the initial backoff time for Loki client connection between retries.'
                          type: string
                      type: object
                    enable:
                      default: true
                      description: |-
                        Set `enable` to `true` to store flows in Loki.
                        The Console plugin can use either Loki or Prometheus as a data source for metrics (see also `spec.prometheus.querier`), or both.
                        Not all queries are transposable from Loki to Prometheus. Hence, if Loki is disabled, some features of the plugin are disabled as well,
                        such as getting per-pod information or viewing raw flows.
                        If both Prometheus and Loki are enabled, Prometheus takes precedence and Loki is used as a fallback for queries that Prometheus cannot handle.
                        If they are both disabled, the Console plugin is not deployed.
                      type: boolean
                    lokiStack:
                      description: |-
                        Loki configuration for `LokiStack` mode. This is useful for an easy Loki Operator configuration.
                        It is ignored for other modes.
                      properties:
                        name:
                          default: loki
                          description: Name of an existing LokiStack resource to use.
                          type: string
                        namespace:
                          description: Namespace where this `LokiStack` resource is located. If omitted, it is assumed to be the same as `spec.namespace`.
                          type: string
                      required:
                        - name
                      type: object
                    manual:
                      description: |-
                        Loki configuration for `Manual` mode. This is the most flexible configuration.
                        It is ignored for other modes.
                      properties:
                        authToken:
                          default: Disabled
                          description: |-
                            `authToken` describes the way to get a token to authenticate to Loki.<br>
                            - `Disabled` does not send any token with the request.<br>
                            - `Forward` forwards the user token for authorization.<br>
                            - `Host` [deprecated (*)] - uses the local pod service account to authenticate to Loki.<br>
                            When using the Loki Operator, this must be set to `Forward`.
                          enum:
                            - Disabled
                            - Host
                            - Forward
                          type: string
                        ingesterUrl:
                          default: http://loki:3100/
                          description: |-
                            `ingesterUrl` is the address of an existing Loki ingester service to push the flows to. When using the Loki Operator,
                            set it to the Loki gateway service with the `network` tenant set in path, for example
                            https://loki-gateway-http.netobserv.svc:8080/api/logs/v1/network.
                          type: string
                        querierUrl:
                          default: http://loki:3100/
                          description: |-
                            `querierUrl` specifies the address of the Loki querier service.
                            When using the Loki Operator, set it to the Loki gateway service with the `network` tenant set in path, for example
                            https://loki-gateway-http.netobserv.svc:8080/api/logs/v1/network.
                          type: string
                        statusTls:
                          description: TLS client configuration for Loki status URL.
                          properties:
                            caCert:
                              description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                            enable:
                              default: false
                              description: Enable TLS
                              type: boolean
                            insecureSkipVerify:
                              default: false
                              description: |-
                                `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                If set to `true`, the `caCert` field is ignored.
                              type: boolean
                            userCert:
                              description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                          type: object
                        statusUrl:
                          description: |-
                            `statusUrl` specifies the address of the Loki `/ready`, `/metrics` and `/config` endpoints, in case it is different from the
                            Loki querier URL. If empty, the `querierUrl` value is used.
                            This is useful to show error messages and some context in the frontend.
                            When using the Loki Operator, set it to the Loki HTTP query frontend service, for example
                            https://loki-query-frontend-http.netobserv.svc:3100/.
                            `statusTLS` configuration is used when `statusUrl` is set.
                          type: string
                        tenantID:
                          default: netobserv
                          description: |-
                            `tenantID` is the Loki `X-Scope-OrgID` that identifies the tenant for each request.
                            When using the Loki Operator, set it to `network`, which corresponds to a special tenant mode.
                          type: string
                        tls:
                          description: TLS client configuration for Loki URL.
                          properties:
                            caCert:
                              description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                            enable:
                              default: false
                              description: Enable TLS
                              type: boolean
                            insecureSkipVerify:
                              default: false
                              description: |-
                                `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                If set to `true`, the `caCert` field is ignored.
                              type: boolean
                            userCert:
                              description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                          type: object
                      type: object
                    microservices:
                      description: |-
                        Loki configuration for `Microservices` mode.
                        Use this option when Loki is installed using the microservices deployment mode (https://grafana.com/docs/loki/latest/fundamentals/architecture/deployment-modes/#microservices-mode).
                        It is ignored for other modes.
                      properties:
                        ingesterUrl:
                          default: http://loki-distributor:3100/
                          description: '`ingesterUrl` is the address of an existing Loki ingester service to push the flows to.'
                          type: string
                        querierUrl:
                          default: http://loki-query-frontend:3100/
                          description: '`querierURL` specifies the address of the Loki querier service.'
                          type: string
                        tenantID:
                          default: netobserv
                          description: '`tenantID` is the Loki `X-Scope-OrgID` header that identifies the tenant for each request.'
                          type: string
                        tls:
                          description: TLS client configuration for Loki URL.
                          properties:
                            caCert:
                              description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                            enable:
                              default: false
                              description: Enable TLS
                              type: boolean
                            insecureSkipVerify:
                              default: false
                              description: |-
                                `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                If set to `true`, the `caCert` field is ignored.
                              type: boolean
                            userCert:
                              description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                          type: object
                      type: object
                    mode:
                      default: Monolithic
                      description: |-
                        `mode` must be set according to the installation mode of Loki:<br>
                        - Use `LokiStack` when Loki is managed using the Loki Operator<br>
                        - Use `Monolithic` when Loki is installed as a monolithic workload<br>
                        - Use `Microservices` when Loki is installed as microservices, but without Loki Operator<br>
                        - Use `Manual` if none of the options above match your setup<br>
                      enum:
                        - Manual
                        - LokiStack
                        - Monolithic
                        - Microservices
                      type: string
                    monolithic:
                      description: |-
                        Loki configuration for `Monolithic` mode.
                        Use this option when Loki is installed using the monolithic deployment mode (https://grafana.com/docs/loki/latest/fundamentals/architecture/deployment-modes/#monolithic-mode).
                        It is ignored for other modes.
                      properties:
                        tenantID:
                          default: netobserv
                          description: '`tenantID` is the Loki `X-Scope-OrgID` header that identifies the tenant for each request.'
                          type: string
                        tls:
                          description: TLS client configuration for Loki URL.
                          properties:
                            caCert:
                              description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                            enable:
                              default: false
                              description: Enable TLS
                              type: boolean
                            insecureSkipVerify:
                              default: false
                              description: |-
                                `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                If set to `true`, the `caCert` field is ignored.
                              type: boolean
                            userCert:
                              description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                              properties:
                                certFile:
                                  description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                  type: string
                                certKey:
                                  description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                  type: string
                                name:
                                  description: Name of the config map or secret containing certificates.
                                  type: string
                                namespace:
                                  default: ""
                                  description: |-
                                    Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                    If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                  type: string
                                type:
                                  description: 'Type for the certificate reference: `configmap` or `secret`.'
                                  enum:
                                    - configmap
                                    - secret
                                  type: string
                              type: object
                          type: object
                        url:
                          default: http://loki:3100/
                          description: '`url` is the unique address of an existing Loki service that points to both the ingester and the querier.'
                          type: string
                      type: object
                    readTimeout:
                      default: 30s
                      description: |-
                        `readTimeout` is the maximum console plugin loki query total time limit.
                        A timeout of zero means no timeout.
                      type: string
                    writeBatchSize:
                      default: 10485760
                      description: '`writeBatchSize` is the maximum batch size (in bytes) of Loki logs to accumulate before sending.'
                      format: int64
                      minimum: 1
                      type: integer
                    writeBatchWait:
                      default: 1s
                      description: '`writeBatchWait` is the maximum time to wait before sending a Loki batch.'
                      type: string
                    writeTimeout:
                      default: 10s
                      description: |-
                        `writeTimeout` is the maximum Loki time connection / request limit.
                        A timeout of zero means no timeout.
                      type: string
                  required:
                    - mode
                  type: object
                namespace:
                  default: netobserv
                  description: Namespace where NetObserv pods are deployed.
                  type: string
                networkPolicy:
                  description: '`networkPolicy` defines ingress network policy settings for NetObserv components isolation.'
                  properties:
                    additionalNamespaces:
                      description: |-
                        `additionalNamespaces` contains additional namespaces allowed to connect to the NetObserv namespace.
                        It provides flexibility in the network policy configuration, but if you need a more specific
                        configuration, you can disable it and install your own instead.
                      items:
                        type: string
                      type: array
                    enable:
                      description: |-
                        Set `enable` to `true` to deploy network policies on the namespaces used by NetObserv (main and privileged). It is disabled by default.
                        These network policies better isolate the NetObserv components to prevent undesired connections to them.
                        To increase the security of connections, enable this option or create your own network policy.
                      type: boolean
                  type: object
                processor:
                  description: |-
                    `processor` defines the settings of the component that receives the flows from the agent,
                    enriches them, generates metrics, and forwards them to the Loki persistence layer and/or any available exporter.
                  properties:
                    addZone:
                      description: |-
                        `addZone` allows availability zone awareness by labelling flows with their source and destination zones.
                        This feature requires the "topology.kubernetes.io/zone" label to be set on nodes.
                      type: boolean
                    advanced:
                      description: |-
                        `advanced` allows setting some aspects of the internal configuration of the flow processor.
                        This section is aimed mostly for debugging and fine-grained performance optimizations,
                        such as `GOGC` and `GOMAXPROCS` env vars. Set these values at your own risk.
                      properties:
                        conversationEndTimeout:
                          default: 10s
                          description: |-
                            `conversationEndTimeout` is the time to wait after a network flow is received, to consider the conversation ended.
                            This delay is ignored when a FIN packet is collected for TCP flows (see `conversationTerminatingTimeout` instead).
                          type: string
                        conversationHeartbeatInterval:
                          default: 30s
                          description: '`conversationHeartbeatInterval` is the time to wait between "tick" events of a conversation'
                          type: string
                        conversationTerminatingTimeout:
                          default: 5s
                          description: '`conversationTerminatingTimeout` is the time to wait from detected FIN flag to end a conversation. Only relevant for TCP flows.'
                          type: string
                        dropUnusedFields:
                          default: true
                          description: '`dropUnusedFields` [deprecated (*)] this setting is not used anymore.'
                          type: boolean
                        enableKubeProbes:
                          default: true
                          description: '`enableKubeProbes` is a flag to enable or disable Kubernetes liveness and readiness probes'
                          type: boolean
                        env:
                          additionalProperties:
                            type: string
                          description: |-
                            `env` allows passing custom environment variables to underlying components. Useful for passing
                            some very concrete performance-tuning options, such as `GOGC` and `GOMAXPROCS`, that should not be
                            publicly exposed as part of the FlowCollector descriptor, as they are only useful
                            in edge debug or support scenarios.
                          type: object
                        healthPort:
                          default: 8080
                          description: '`healthPort` is a collector HTTP port in the Pod that exposes the health check API'
                          format: int32
                          maximum: 65535
                          minimum: 1
                          type: integer
                        port:
                          default: 2055
                          description: |-
                            Port of the flow collector (host port).
                            By convention, some values are forbidden. It must be greater than 1024 and different from
                            4500, 4789 and 6081.
                          format: int32
                          maximum: 65535
                          minimum: 1025
                          type: integer
                        profilePort:
                          default: 6060
                          description: '`profilePort` allows setting up a Go pprof profiler listening to this port'
                          format: int32
                          maximum: 65535
                          minimum: 0
                          type: integer
                        scheduling:
                          description: scheduling controls how the pods are scheduled on nodes.
                          properties:
                            affinity:
                              description: If specified, the pod's scheduling constraints. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling.
                              properties:
                                nodeAffinity:
                                  description: Describes node affinity scheduling rules for the pod.
                                  properties:
                                    preferredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        The scheduler will prefer to schedule pods to nodes that satisfy
                                        the affinity expressions specified by this field, but it may choose
                                        a node that violates one or more of the expressions. The node that is
                                        most preferred is the one with the greatest sum of weights, i.e.
                                        for each node that meets all of the scheduling requirements (resource
                                        request, requiredDuringScheduling affinity expressions, etc.),
                                        compute a sum by iterating through the elements of this field and adding
                                        "weight" to the sum if the node matches the corresponding matchExpressions; the
                                        node(s) with the highest sum are the most preferred.
                                      items:
                                        description: |-
                                          An empty preferred scheduling term matches all objects with implicit weight 0
                                          (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).
                                        properties:
                                          preference:
                                            description: A node selector term, associated with the corresponding weight.
                                            properties:
                                              matchExpressions:
                                                description: A list of node selector requirements by node's labels.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchFields:
                                                description: A list of node selector requirements by node's fields.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          weight:
                                            description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
                                            format: int32
                                            type: integer
                                        required:
                                          - preference
                                          - weight
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    requiredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        If the affinity requirements specified by this field are not met at
                                        scheduling time, the pod will not be scheduled onto the node.
                                        If the affinity requirements specified by this field cease to be met
                                        at some point during pod execution (e.g. due to an update), the system
                                        may or may not try to eventually evict the pod from its node.
                                      properties:
                                        nodeSelectorTerms:
                                          description: Required. A list of node selector terms. The terms are ORed.
                                          items:
                                            description: |-
                                              A null or empty node selector term matches no objects. The requirements of
                                              them are ANDed.
                                              The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.
                                            properties:
                                              matchExpressions:
                                                description: A list of node selector requirements by node's labels.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchFields:
                                                description: A list of node selector requirements by node's fields.
                                                items:
                                                  description: |-
                                                    A node selector requirement is a selector that contains values, a key, and an operator
                                                    that relates the key and values.
                                                  properties:
                                                    key:
                                                      description: The label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        Represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        An array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. If the operator is Gt or Lt, the values
                                                        array must have a single element, which will be interpreted as an integer.
                                                        This array is replaced during a strategic merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          type: array
                                          x-kubernetes-list-type: atomic
                                      required:
                                        - nodeSelectorTerms
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  type: object
                                podAffinity:
                                  description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
                                  properties:
                                    preferredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        The scheduler will prefer to schedule pods to nodes that satisfy
                                        the affinity expressions specified by this field, but it may choose
                                        a node that violates one or more of the expressions. The node that is
                                        most preferred is the one with the greatest sum of weights, i.e.
                                        for each node that meets all of the scheduling requirements (resource
                                        request, requiredDuringScheduling affinity expressions, etc.),
                                        compute a sum by iterating through the elements of this field and adding
                                        "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                        node(s) with the highest sum are the most preferred.
                                      items:
                                        description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
                                        properties:
                                          podAffinityTerm:
                                            description: Required. A pod affinity term, associated with the corresponding weight.
                                            properties:
                                              labelSelector:
                                                description: |-
                                                  A label query over a set of resources, in this case pods.
                                                  If it's null, this PodAffinityTerm matches with no Pods.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              matchLabelKeys:
                                                description: |-
                                                  MatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                  Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              mismatchLabelKeys:
                                                description: |-
                                                  MismatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                  Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              namespaceSelector:
                                                description: |-
                                                  A label query over the set of namespaces that the term applies to.
                                                  The term is applied to the union of the namespaces selected by this field
                                                  and the ones listed in the namespaces field.
                                                  null selector and null or empty namespaces list means "this pod's namespace".
                                                  An empty selector ({}) matches all namespaces.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              namespaces:
                                                description: |-
                                                  namespaces specifies a static list of namespace names that the term applies to.
                                                  The term is applied to the union of the namespaces listed in this field
                                                  and the ones selected by namespaceSelector.
                                                  null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              topologyKey:
                                                description: |-
                                                  This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                  the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                  whose value of the label with key topologyKey matches that of any node on which any of the
                                                  selected pods is running.
                                                  Empty topologyKey is not allowed.
                                                type: string
                                            required:
                                              - topologyKey
                                            type: object
                                          weight:
                                            description: |-
                                              weight associated with matching the corresponding podAffinityTerm,
                                              in the range 1-100.
                                            format: int32
                                            type: integer
                                        required:
                                          - podAffinityTerm
                                          - weight
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    requiredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        If the affinity requirements specified by this field are not met at
                                        scheduling time, the pod will not be scheduled onto the node.
                                        If the affinity requirements specified by this field cease to be met
                                        at some point during pod execution (e.g. due to a pod label update), the
                                        system may or may not try to eventually evict the pod from its node.
                                        When there are multiple elements, the lists of nodes corresponding to each
                                        podAffinityTerm are intersected, i.e. all terms must be satisfied.
                                      items:
                                        description: |-
                                          Defines a set of pods (namely those matching the labelSelector
                                          relative to the given namespace(s)) that this pod should be
                                          co-located (affinity) or not co-located (anti-affinity) with,
                                          where co-located is defined as running on a node whose value of
                                          the label with key <topologyKey> matches that of any node on which
                                          a pod of the set of pods is running
                                        properties:
                                          labelSelector:
                                            description: |-
                                              A label query over a set of resources, in this case pods.
                                              If it's null, this PodAffinityTerm matches with no Pods.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          matchLabelKeys:
                                            description: |-
                                              MatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                              Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          mismatchLabelKeys:
                                            description: |-
                                              MismatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                              Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          namespaceSelector:
                                            description: |-
                                              A label query over the set of namespaces that the term applies to.
                                              The term is applied to the union of the namespaces selected by this field
                                              and the ones listed in the namespaces field.
                                              null selector and null or empty namespaces list means "this pod's namespace".
                                              An empty selector ({}) matches all namespaces.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          namespaces:
                                            description: |-
                                              namespaces specifies a static list of namespace names that the term applies to.
                                              The term is applied to the union of the namespaces listed in this field
                                              and the ones selected by namespaceSelector.
                                              null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          topologyKey:
                                            description: |-
                                              This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                              the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                              whose value of the label with key topologyKey matches that of any node on which any of the
                                              selected pods is running.
                                              Empty topologyKey is not allowed.
                                            type: string
                                        required:
                                          - topologyKey
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                                podAntiAffinity:
                                  description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
                                  properties:
                                    preferredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        The scheduler will prefer to schedule pods to nodes that satisfy
                                        the anti-affinity expressions specified by this field, but it may choose
                                        a node that violates one or more of the expressions. The node that is
                                        most preferred is the one with the greatest sum of weights, i.e.
                                        for each node that meets all of the scheduling requirements (resource
                                        request, requiredDuringScheduling anti-affinity expressions, etc.),
                                        compute a sum by iterating through the elements of this field and adding
                                        "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                        node(s) with the highest sum are the most preferred.
                                      items:
                                        description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
                                        properties:
                                          podAffinityTerm:
                                            description: Required. A pod affinity term, associated with the corresponding weight.
                                            properties:
                                              labelSelector:
                                                description: |-
                                                  A label query over a set of resources, in this case pods.
                                                  If it's null, this PodAffinityTerm matches with no Pods.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              matchLabelKeys:
                                                description: |-
                                                  MatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                                  Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              mismatchLabelKeys:
                                                description: |-
                                                  MismatchLabelKeys is a set of pod label keys to select which pods will
                                                  be taken into consideration. The keys are used to lookup values from the
                                                  incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                                  to select the group of existing pods which pods will be taken into consideration
                                                  for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                                  pod labels will be ignored. The default value is empty.
                                                  The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                                  Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                                  This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              namespaceSelector:
                                                description: |-
                                                  A label query over the set of namespaces that the term applies to.
                                                  The term is applied to the union of the namespaces selected by this field
                                                  and the ones listed in the namespaces field.
                                                  null selector and null or empty namespaces list means "this pod's namespace".
                                                  An empty selector ({}) matches all namespaces.
                                                properties:
                                                  matchExpressions:
                                                    description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                    items:
                                                      description: |-
                                                        A label selector requirement is a selector that contains values, a key, and an operator that
                                                        relates the key and values.
                                                      properties:
                                                        key:
                                                          description: key is the label key that the selector applies to.
                                                          type: string
                                                        operator:
                                                          description: |-
                                                            operator represents a key's relationship to a set of values.
                                                            Valid operators are In, NotIn, Exists and DoesNotExist.
                                                          type: string
                                                        values:
                                                          description: |-
                                                            values is an array of string values. If the operator is In or NotIn,
                                                            the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                            the values array must be empty. This array is replaced during a strategic
                                                            merge patch.
                                                          items:
                                                            type: string
                                                          type: array
                                                          x-kubernetes-list-type: atomic
                                                      required:
                                                        - key
                                                        - operator
                                                      type: object
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                  matchLabels:
                                                    additionalProperties:
                                                      type: string
                                                    description: |-
                                                      matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                      map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                      operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                    type: object
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              namespaces:
                                                description: |-
                                                  namespaces specifies a static list of namespace names that the term applies to.
                                                  The term is applied to the union of the namespaces listed in this field
                                                  and the ones selected by namespaceSelector.
                                                  null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                                items:
                                                  type: string
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              topologyKey:
                                                description: |-
                                                  This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                                  the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                                  whose value of the label with key topologyKey matches that of any node on which any of the
                                                  selected pods is running.
                                                  Empty topologyKey is not allowed.
                                                type: string
                                            required:
                                              - topologyKey
                                            type: object
                                          weight:
                                            description: |-
                                              weight associated with matching the corresponding podAffinityTerm,
                                              in the range 1-100.
                                            format: int32
                                            type: integer
                                        required:
                                          - podAffinityTerm
                                          - weight
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    requiredDuringSchedulingIgnoredDuringExecution:
                                      description: |-
                                        If the anti-affinity requirements specified by this field are not met at
                                        scheduling time, the pod will not be scheduled onto the node.
                                        If the anti-affinity requirements specified by this field cease to be met
                                        at some point during pod execution (e.g. due to a pod label update), the
                                        system may or may not try to eventually evict the pod from its node.
                                        When there are multiple elements, the lists of nodes corresponding to each
                                        podAffinityTerm are intersected, i.e. all terms must be satisfied.
                                      items:
                                        description: |-
                                          Defines a set of pods (namely those matching the labelSelector
                                          relative to the given namespace(s)) that this pod should be
                                          co-located (affinity) or not co-located (anti-affinity) with,
                                          where co-located is defined as running on a node whose value of
                                          the label with key <topologyKey> matches that of any node on which
                                          a pod of the set of pods is running
                                        properties:
                                          labelSelector:
                                            description: |-
                                              A label query over a set of resources, in this case pods.
                                              If it's null, this PodAffinityTerm matches with no Pods.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          matchLabelKeys:
                                            description: |-
                                              MatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                              Also, matchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          mismatchLabelKeys:
                                            description: |-
                                              MismatchLabelKeys is a set of pod label keys to select which pods will
                                              be taken into consideration. The keys are used to lookup values from the
                                              incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                              to select the group of existing pods which pods will be taken into consideration
                                              for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                              pod labels will be ignored. The default value is empty.
                                              The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                              Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
                                              This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          namespaceSelector:
                                            description: |-
                                              A label query over the set of namespaces that the term applies to.
                                              The term is applied to the union of the namespaces selected by this field
                                              and the ones listed in the namespaces field.
                                              null selector and null or empty namespaces list means "this pod's namespace".
                                              An empty selector ({}) matches all namespaces.
                                            properties:
                                              matchExpressions:
                                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
                                                items:
                                                  description: |-
                                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                                    relates the key and values.
                                                  properties:
                                                    key:
                                                      description: key is the label key that the selector applies to.
                                                      type: string
                                                    operator:
                                                      description: |-
                                                        operator represents a key's relationship to a set of values.
                                                        Valid operators are In, NotIn, Exists and DoesNotExist.
                                                      type: string
                                                    values:
                                                      description: |-
                                                        values is an array of string values. If the operator is In or NotIn,
                                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                        the values array must be empty. This array is replaced during a strategic
                                                        merge patch.
                                                      items:
                                                        type: string
                                                      type: array
                                                      x-kubernetes-list-type: atomic
                                                  required:
                                                    - key
                                                    - operator
                                                  type: object
                                                type: array
                                                x-kubernetes-list-type: atomic
                                              matchLabels:
                                                additionalProperties:
                                                  type: string
                                                description: |-
                                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
                                                type: object
                                            type: object
                                            x-kubernetes-map-type: atomic
                                          namespaces:
                                            description: |-
                                              namespaces specifies a static list of namespace names that the term applies to.
                                              The term is applied to the union of the namespaces listed in this field
                                              and the ones selected by namespaceSelector.
                                              null or empty namespaces list and null namespaceSelector means "this pod's namespace".
                                            items:
                                              type: string
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          topologyKey:
                                            description: |-
                                              This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                              the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                              whose value of the label with key topologyKey matches that of any node on which any of the
                                              selected pods is running.
                                              Empty topologyKey is not allowed.
                                            type: string
                                        required:
                                          - topologyKey
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                              type: object
                            nodeSelector:
                              additionalProperties:
                                type: string
                              description: |-
                                `nodeSelector` allows scheduling of pods only onto nodes that have each of the specified labels.
                                For documentation, refer to https://kubernetes.io/docs/concepts/configuration/assign-pod-node/.
                              type: object
                              x-kubernetes-map-type: atomic
                            priorityClassName:
                              description: |-
                                If specified, indicates the pod's priority. For documentation, refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#how-to-use-priority-and-preemption.
                                If not specified, default priority is used, or zero if there is no default.
                              type: string
                            tolerations:
                              description: |-
                                `tolerations` is a list of tolerations that allow the pod to schedule onto nodes with matching taints.
                                For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling.
                              items:
                                description: |-
                                  The pod this Toleration is attached to tolerates any taint that matches
                                  the triple <key,value,effect> using the matching operator <operator>.
                                properties:
                                  effect:
                                    description: |-
                                      Effect indicates the taint effect to match. Empty means match all taint effects.
                                      When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
                                    type: string
                                  key:
                                    description: |-
                                      Key is the taint key that the toleration applies to. Empty means match all taint keys.
                                      If the key is empty, operator must be Exists; this combination means to match all values and all keys.
                                    type: string
                                  operator:
                                    description: |-
                                      Operator represents a key's relationship to the value.
                                      Valid operators are Exists and Equal. Defaults to Equal.
                                      Exists is equivalent to wildcard for value, so that a pod can
                                      tolerate all taints of a particular category.
                                    type: string
                                  tolerationSeconds:
                                    description: |-
                                      TolerationSeconds represents the period of time the toleration (which must be
                                      of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
                                      it is not set, which means tolerate the taint forever (do not evict). Zero and
                                      negative values will be treated as 0 (evict immediately) by the system.
                                    format: int64
                                    type: integer
                                  value:
                                    description: |-
                                      Value is the taint value the toleration matches to.
                                      If the operator is Exists, the value should be empty, otherwise just a regular string.
                                    type: string
                                type: object
                              type: array
                          type: object
                        secondaryNetworks:
                          description: |-
                            Define secondary networks to be checked for resources identification.
                            To guarantee a correct identification, indexed values must form an unique identifier across the cluster.
                            If the same index is used by several resources, those resources might be incorrectly labeled.
                          items:
                            properties:
                              index:
                                description: |-
                                  `index` is a list of fields to use for indexing the pods. They should form a unique Pod identifier across the cluster.
                                  Can be any of: `MAC`, `IP`, `Interface`.
                                  Fields absent from the 'k8s.v1.cni.cncf.io/network-status' annotation must not be added to the index.
                                items:
                                  description: 'Field to index for secondary network pod identification, can be any of: `MAC`, `IP`, `Interface`.'
                                  enum:
                                    - MAC
                                    - IP
                                    - Interface
                                  type: string
                                type: array
                              name:
                                description: '`name` should match the network name as visible in the pods annotation ''k8s.v1.cni.cncf.io/network-status''.'
                                type: string
                            required:
                              - index
                              - name
                            type: object
                          type: array
                      type: object
                    clusterName:
                      default: ""
                      description: '`clusterName` is the name of the cluster to appear in the flows data. This is useful in a multi-cluster context. When using OpenShift, leave empty to make it automatically determined.'
                      type: string
                    deduper:
                      description: |-
                        `deduper` allows to sample or drop flows identified as duplicates, in order to save on resource usage.
                        IMPORTANT: This feature is available as a Developer Preview.
                      properties:
                        mode:
                          default: Disabled
                          description: |-
                            Set the Processor de-duplication mode. It comes in addition to the Agent-based deduplication because the Agent cannot de-duplicate same flows reported from different nodes.<br>
                            - Use `Drop` to drop every flow considered as duplicates, allowing saving more on resource usage but potentially loosing some information such as the network interfaces used from peer, or network events.<br>
                            - Use `Sample` to randomly keep only 1 flow on 50 (by default) among the ones considered as duplicates. This is a compromise between dropping every duplicates or keeping every duplicates. This sampling action comes in addition to the Agent-based sampling. If both Agent and Processor sampling are 50, the combined sampling is 1:2500.<br>
                            - Use `Disabled` to turn off Processor-based de-duplication.<br>
                          enum:
                            - Disabled
                            - Drop
                            - Sample
                          type: string
                        sampling:
                          default: 50
                          description: '`sampling` is the sampling rate when deduper `mode` is `Sample`.'
                          format: int32
                          minimum: 0
                          type: integer
                      type: object
                    filters:
                      description: |-
                        `filters` let you define custom filters to limit the amount of generated flows.
                        IMPORTANT: This feature is available as a Developer Preview.
                      items:
                        description: '`FLPFilterSet` defines the desired configuration for FLP-based filtering satisfying all conditions'
                        properties:
                          allOf:
                            description: '`filters` is a list of matches that must be all satisfied in order to remove a flow.'
                            items:
                              description: '`FLPSingleFilter` defines the desired configuration for a single FLP-based filter'
                              properties:
                                field:
                                  description: |-
                                    Name of the field to filter on
                                    Refer to the documentation for the list of available fields: https://docs.openshift.com/container-platform/latest/observability/network_observability/json-flows-format-reference.html.
                                  type: string
                                matchType:
                                  default: Equal
                                  description: Type of matching to apply
                                  enum:
                                    - Equal
                                    - NotEqual
                                    - Presence
                                    - Absence
                                    - MatchRegex
                                    - NotMatchRegex
                                  type: string
                                value:
                                  description: Value to filter on. When `matchType` is `Equal` or `NotEqual`, you can use field injection with `$(SomeField)` to refer to any other field of the flow.
                                  type: string
                              required:
                                - field
                                - matchType
                              type: object
                            type: array
                          outputTarget:
                            description: 'If specified, this filters only target a single output: `Loki`, `Metrics` or `Exporters`. By default, all outputs are targeted.'
                            enum:
                              - ""
                              - Loki
                              - Metrics
                              - Exporters
                            type: string
                          sampling:
                            description: '`sampling` is an optional sampling rate to apply to this filter.'
                            format: int32
                            minimum: 0
                            type: integer
                        type: object
                      type: array
                    imagePullPolicy:
                      default: IfNotPresent
                      description: '`imagePullPolicy` is the Kubernetes pull policy for the image defined above'
                      enum:
                        - IfNotPresent
                        - Always
                        - Never
                      type: string
                    kafkaConsumerAutoscaler:
                      description: |-
                        `kafkaConsumerAutoscaler` is the spec of a horizontal pod autoscaler to set up for `flowlogs-pipeline-transformer`, which consumes Kafka messages.
                        This setting is ignored when Kafka is disabled.
                      properties:
                        maxReplicas:
                          default: 3
                          description: '`maxReplicas` is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.'
                          format: int32
                          type: integer
                        metrics:
                          description: Metrics used by the pod autoscaler. For documentation, refer to https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/horizontal-pod-autoscaler-v2/
                          items:
                            properties:
                              containerResource:
                                properties:
                                  container:
                                    type: string
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - container
                                  - name
                                  - target
                                type: object
                              external:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              object:
                                properties:
                                  describedObject:
                                    properties:
                                      apiVersion:
                                        type: string
                                      kind:
                                        type: string
                                      name:
                                        type: string
                                    required:
                                      - kind
                                      - name
                                    type: object
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - describedObject
                                  - metric
                                  - target
                                type: object
                              pods:
                                properties:
                                  metric:
                                    properties:
                                      name:
                                        type: string
                                      selector:
                                        properties:
                                          matchExpressions:
                                            items:
                                              properties:
                                                key:
                                                  type: string
                                                operator:
                                                  type: string
                                                values:
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                    required:
                                      - name
                                    type: object
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - metric
                                  - target
                                type: object
                              resource:
                                properties:
                                  name:
                                    type: string
                                  target:
                                    properties:
                                      averageUtilization:
                                        format: int32
                                        type: integer
                                      averageValue:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      type:
                                        type: string
                                      value:
                                        anyOf:
                                          - type: integer
                                          - type: string
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - type
                                    type: object
                                required:
                                  - name
                                  - target
                                type: object
                              type:
                                type: string
                            required:
                              - type
                            type: object
                          type: array
                        minReplicas:
                          description: |-
                            `minReplicas` is the lower limit for the number of replicas to which the autoscaler
                            can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the
                            alpha feature gate HPAScaleToZero is enabled and at least one Object or External
                            metric is configured. Scaling is active as long as at least one metric value is
                            available.
                          format: int32
                          type: integer
                        status:
                          default: Disabled
                          description: |-
                            `status` describes the desired status regarding deploying an horizontal pod autoscaler.<br>
                            - `Disabled` does not deploy an horizontal pod autoscaler.<br>
                            - `Enabled` deploys an horizontal pod autoscaler.<br>
                          enum:
                            - Disabled
                            - Enabled
                          type: string
                      type: object
                    kafkaConsumerBatchSize:
                      default: 10485760
                      description: '`kafkaConsumerBatchSize` indicates to the broker the maximum batch size, in bytes, that the consumer accepts. Ignored when not using Kafka. Default: 10MB.'
                      type: integer
                    kafkaConsumerQueueCapacity:
                      default: 1000
                      description: '`kafkaConsumerQueueCapacity` defines the capacity of the internal message queue used in the Kafka consumer client. Ignored when not using Kafka.'
                      type: integer
                    kafkaConsumerReplicas:
                      default: 3
                      description: |-
                        `kafkaConsumerReplicas` defines the number of replicas (pods) to start for `flowlogs-pipeline-transformer`, which consumes Kafka messages.
                        This setting is ignored when Kafka is disabled.
                      format: int32
                      minimum: 0
                      type: integer
                    logLevel:
                      default: info
                      description: '`logLevel` of the processor runtime'
                      enum:
                        - trace
                        - debug
                        - info
                        - warn
                        - error
                        - fatal
                        - panic
                      type: string
                    logTypes:
                      default: Flows
                      description: |-
                        `logTypes` defines the desired record types to generate. Possible values are:<br>
                        - `Flows` (default) to export regular network flows.<br>
                        - `Conversations` to generate events for started conversations, ended conversations as well as periodic "tick" updates.<br>
                        - `EndedConversations` to generate only ended conversations events.<br>
                        - `All` to generate both network flows and all conversations events. It is not recommended due to the impact on resources footprint.<br>
                      enum:
                        - Flows
                        - Conversations
                        - EndedConversations
                        - All
                      type: string
                    metrics:
                      description: '`Metrics` define the processor configuration regarding metrics'
                      properties:
                        disableAlerts:
                          description: |-
                            `disableAlerts` is a list of alerts that should be disabled.
                            Possible values are:<br>
                            `NetObservNoFlows`, which is triggered when no flows are being observed for a certain period.<br>
                            `NetObservLokiError`, which is triggered when flows are being dropped due to Loki errors.<br>
                          items:
                            description: |-
                              Name of a processor alert.
                              Possible values are:<br>
                              - `NetObservNoFlows`, which is triggered when no flows are being observed for a certain period.<br>
                              - `NetObservLokiError`, which is triggered when flows are being dropped due to Loki errors.<br>
                            enum:
                              - NetObservNoFlows
                              - NetObservLokiError
                            type: string
                          type: array
                        includeList:
                          description: |-
                            `includeList` is a list of metric names to specify which ones to generate.
                            The names correspond to the names in Prometheus without the prefix. For example,
                            `namespace_egress_packets_total` shows up as `netobserv_namespace_egress_packets_total` in Prometheus.
                            Note that the more metrics you add, the bigger is the impact on Prometheus workload resources.
                            Metrics enabled by default are:
                            `namespace_flows_total`, `node_ingress_bytes_total`, `node_egress_bytes_total`, `workload_ingress_bytes_total`,
                            `workload_egress_bytes_total`, `namespace_drop_packets_total` (when `PacketDrop` feature is enabled),
                            `namespace_rtt_seconds` (when `FlowRTT` feature is enabled), `namespace_dns_latency_seconds` (when `DNSTracking` feature is enabled),
                            `namespace_network_policy_events_total` (when `NetworkEvents` feature is enabled).
                            More information, with full list of available metrics: https://github.com/netobserv/network-observability-operator/blob/main/docs/Metrics.md
                          items:
                            description: Metric name. More information in https://github.com/netobserv/network-observability-operator/blob/main/docs/Metrics.md.
                            enum:
                              - namespace_egress_bytes_total
                              - namespace_egress_packets_total
                              - namespace_ingress_bytes_total
                              - namespace_ingress_packets_total
                              - namespace_flows_total
                              - node_egress_bytes_total
                              - node_egress_packets_total
                              - node_ingress_bytes_total
                              - node_ingress_packets_total
                              - node_flows_total
                              - workload_egress_bytes_total
                              - workload_egress_packets_total
                              - workload_ingress_bytes_total
                              - workload_ingress_packets_total
                              - workload_flows_total
                              - namespace_drop_bytes_total
                              - namespace_drop_packets_total
                              - node_drop_bytes_total
                              - node_drop_packets_total
                              - workload_drop_bytes_total
                              - workload_drop_packets_total
                              - namespace_rtt_seconds
                              - node_rtt_seconds
                              - workload_rtt_seconds
                              - namespace_dns_latency_seconds
                              - node_dns_latency_seconds
                              - workload_dns_latency_seconds
                              - node_network_policy_events_total
                              - namespace_network_policy_events_total
                              - workload_network_policy_events_total
                            type: string
                          type: array
                        server:
                          description: Metrics server endpoint configuration for Prometheus scraper
                          properties:
                            port:
                              description: The metrics server HTTP port.
                              format: int32
                              maximum: 65535
                              minimum: 1
                              type: integer
                            tls:
                              description: TLS configuration.
                              properties:
                                insecureSkipVerify:
                                  default: false
                                  description: |-
                                    `insecureSkipVerify` allows skipping client-side verification of the provided certificate.
                                    If set to `true`, the `providedCaFile` field is ignored.
                                  type: boolean
                                provided:
                                  description: TLS configuration when `type` is set to `Provided`.
                                  properties:
                                    certFile:
                                      description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                      type: string
                                    certKey:
                                      description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing certificates.
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the certificate reference: `configmap` or `secret`.'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                                providedCaFile:
                                  description: Reference to the CA file when `type` is set to `Provided`.
                                  properties:
                                    file:
                                      description: File name within the config map or secret.
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing the file.
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing the file. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the file reference: `configmap` or `secret`.'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                                type:
                                  default: Disabled
                                  description: |-
                                    Select the type of TLS configuration:<br>
                                    - `Disabled` (default) to not configure TLS for the endpoint.
                                    - `Provided` to manually provide cert file and a key file. [Unsupported (*)].
                                    - `Auto` to use OpenShift auto generated certificate using annotations.
                                  enum:
                                    - Disabled
                                    - Provided
                                    - Auto
                                  type: string
                              required:
                                - type
                              type: object
                          type: object
                      type: object
                    multiClusterDeployment:
                      default: false
                      description: Set `multiClusterDeployment` to `true` to enable multi clusters feature. This adds `clusterName` label to flows data
                      type: boolean
                    resources:
                      default:
                        limits:
                          memory: 800Mi
                        requests:
                          cpu: 100m
                          memory: 100Mi
                      description: |-
                        `resources` are the compute resources required by this container.
                        For more information, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                      properties:
                        claims:
                          description: |-
                            Claims lists the names of resources, defined in spec.resourceClaims,
                            that are used by this container.

                            This is an alpha field and requires enabling the
                            DynamicResourceAllocation feature gate.

                            This field is immutable. It can only be set for containers.
                          items:
                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
                            properties:
                              name:
                                description: |-
                                  Name must match the name of one entry in pod.spec.resourceClaims of
                                  the Pod where this field is used. It makes that resource available
                                  inside a container.
                                type: string
                              request:
                                description: |-
                                  Request is the name chosen for a request in the referenced claim.
                                  If empty, everything from the claim is made available, otherwise
                                  only the result of this request.
                                type: string
                            required:
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - name
                          x-kubernetes-list-type: map
                        limits:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Limits describes the maximum amount of compute resources allowed.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                        requests:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
                          description: |-
                            Requests describes the minimum amount of compute resources required.
                            If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                            otherwise to an implementation-defined value. Requests cannot exceed Limits.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                          type: object
                      type: object
                    subnetLabels:
                      description: |-
                        `subnetLabels` allows to define custom labels on subnets and IPs or to enable automatic labelling of recognized subnets in OpenShift, which is used to identify cluster external traffic.
                        When a subnet matches the source or destination IP of a flow, a corresponding field is added: `SrcSubnetLabel` or `DstSubnetLabel`.
                      properties:
                        customLabels:
                          description: |-
                            `customLabels` allows to customize subnets and IPs labelling, such as to identify cluster-external workloads or web services.
                            If you enable `openShiftAutoDetect`, `customLabels` can override the detected subnets in case they overlap.
                          items:
                            description: SubnetLabel allows to label subnets and IPs, such as to identify cluster-external workloads or web services.
                            properties:
                              cidrs:
                                description: List of CIDRs, such as `["1.2.3.4/32"]`.
                                items:
                                  type: string
                                type: array
                              name:
                                description: Label name, used to flag matching flows.
                                type: string
                            required:
                              - cidrs
                              - name
                            type: object
                          type: array
                        openShiftAutoDetect:
                          description: |-
                            `openShiftAutoDetect` allows, when set to `true`, to detect automatically the machines, pods and services subnets based on the
                            OpenShift install configuration and the Cluster Network Operator configuration. Indirectly, this is a way to accurately detect
                            external traffic: flows that are not labeled for those subnets are external to the cluster. Enabled by default on OpenShift.
                          type: boolean
                      type: object
                  type: object
                prometheus:
                  description: '`prometheus` defines Prometheus settings, such as querier configuration used to fetch metrics from the Console plugin.'
                  properties:
                    querier:
                      description: Prometheus querying configuration, such as client settings, used in the Console plugin.
                      properties:
                        enable:
                          description: |-
                            When `enable` is `true`, the Console plugin queries flow metrics from Prometheus instead of Loki whenever possible.
                            It is enbaled by default: set it to `false` to disable this feature.
                            The Console plugin can use either Loki or Prometheus as a data source for metrics (see also `spec.loki`), or both.
                            Not all queries are transposable from Loki to Prometheus. Hence, if Loki is disabled, some features of the plugin are disabled as well,
                            such as getting per-pod information or viewing raw flows.
                            If both Prometheus and Loki are enabled, Prometheus takes precedence and Loki is used as a fallback for queries that Prometheus cannot handle.
                            If they are both disabled, the Console plugin is not deployed.
                          type: boolean
                        manual:
                          description: Prometheus configuration for `Manual` mode.
                          properties:
                            forwardUserToken:
                              description: Set `true` to forward logged in user token in queries to Prometheus
                              type: boolean
                            tls:
                              description: TLS client configuration for Prometheus URL.
                              properties:
                                caCert:
                                  description: '`caCert` defines the reference of the certificate for the Certificate Authority.'
                                  properties:
                                    certFile:
                                      description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                      type: string
                                    certKey:
                                      description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing certificates.
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the certificate reference: `configmap` or `secret`.'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                                enable:
                                  default: false
                                  description: Enable TLS
                                  type: boolean
                                insecureSkipVerify:
                                  default: false
                                  description: |-
                                    `insecureSkipVerify` allows skipping client-side verification of the server certificate.
                                    If set to `true`, the `caCert` field is ignored.
                                  type: boolean
                                userCert:
                                  description: '`userCert` defines the user certificate reference and is used for mTLS. When you use one-way TLS, you can ignore this property.'
                                  properties:
                                    certFile:
                                      description: '`certFile` defines the path to the certificate file name within the config map or secret.'
                                      type: string
                                    certKey:
                                      description: '`certKey` defines the path to the certificate private key file name within the config map or secret. Omit when the key is not necessary.'
                                      type: string
                                    name:
                                      description: Name of the config map or secret containing certificates.
                                      type: string
                                    namespace:
                                      default: ""
                                      description: |-
                                        Namespace of the config map or secret containing certificates. If omitted, the default is to use the same namespace as where NetObserv is deployed.
                                        If the namespace is different, the config map or the secret is copied so that it can be mounted as required.
                                      type: string
                                    type:
                                      description: 'Type for the certificate reference: `configmap` or `secret`.'
                                      enum:
                                        - configmap
                                        - secret
                                      type: string
                                  type: object
                              type: object
                            url:
                              default: http://prometheus:9090
                              description: '`url` is the address of an existing Prometheus service to use for querying metrics.'
                              type: string
                          type: object
                        mode:
                          default: Auto
                          description: |-
                            `mode` must be set according to the type of Prometheus installation that stores NetObserv metrics:<br>
                            - Use `Auto` to try configuring automatically. In OpenShift, it uses the Thanos querier from OpenShift Cluster Monitoring<br>
                            - Use `Manual` for a manual setup<br>
                          enum:
                            - Manual
                            - Auto
                          type: string
                        timeout:
                          default: 30s
                          description: |-
                            `timeout` is the read timeout for console plugin queries to Prometheus.
                            A timeout of zero means no timeout.
                          type: string
                      required:
                        - mode
                      type: object
                  type: object
              type: object
            status:
              description: '`FlowCollectorStatus` defines the observed state of FlowCollector'
              properties:
                conditions:
                  description: '`conditions` represent the latest available observations of an object''s state'
                  items:
                    description: Condition contains details for one aspect of the current state of this API Resource.
                    properties:
                      lastTransitionTime:
                        description: |-
                          lastTransitionTime is the last time the condition transitioned from one status to another.
                          This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
                        format: date-time
                        type: string
                      message:
                        description: |-
                          message is a human readable message indicating details about the transition.
                          This may be an empty string.
                        maxLength: 32768
                        type: string
                      observedGeneration:
                        description: |-
                          observedGeneration represents the .metadata.generation that the condition was set based upon.
                          For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                          with respect to the current state of the instance.
                        format: int64
                        minimum: 0
                        type: integer
                      reason:
                        description: |-
                          reason contains a programmatic identifier indicating the reason for the condition's last transition.
                          Producers of specific condition types may define expected values and meanings for this field,
                          and whether the values are considered a guaranteed API.
                          The value should be a CamelCase string.
                          This field may not be empty.
                        maxLength: 1024
                        minLength: 1
                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
                        type: string
                      status:
                        description: status of the condition, one of True, False, Unknown.
                        enum:
                          - "True"
                          - "False"
                          - Unknown
                        type: string
                      type:
                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
                        maxLength: 316
                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                        type: string
                    required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
                    type: object
                  type: array
                namespace:
                  description: |-
                    Namespace where console plugin and flowlogs-pipeline have been deployed.
                    Deprecated: annotations are used instead
                  type: string
              required:
                - conditions
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}