PyPI / kubernetes / 37.0.2

kubernetes 37.0.2

Source
https://github.com/kubernetes-client/python
Artifact scanned
kubernetes-37.0.2-py2.py3-none-any.whl (wheel · 7.2 MB · SHA-256 d72683392fc1…)
Compared with
kubernetes-37.0.1-py2.py3-none-any.whl (0 signals introduced since)
Files
1934 scanned, 7 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 176 info
Scan time
17.0 s
LLM review
Reviewed by claude-haiku-5-5 (Anthropic): 6 of 6 warn and critical signals; 6 demoted to info.
Disclude version
4.3.0
Scanned (UTC)
2026-11-06 08:28

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info warn → info by review dynamic-attribute kubernetes/aio/client/__init__.py:2802:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            value = getattr(import_module(module_name, __name__), name)
            globals()[name] = value
            return value
    dismissed LLM, confidence 0.92 Lazy-loading __getattr__ in the async Kubernetes client package that imports a submodule attribute on first access and caches it.
    Reasoning

    The snippet is a standard PEP 562 module-level __getattr__ lazy-import idiom. It imports a submodule by name with import_module, fetches the attribute, and caches it in globals(). It runs no decoded or fetched code, and the name comes from the module's own lazy-loading table. The flag is a false positive from the dynamic-attribute signal.

  2. info warn → info by review dynamic-attribute kubernetes/aio/client/api/__init__.py:219:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            value = getattr(import_module(module_name, __name__), name)
            globals()[name] = value
            return value
    dismissed LLM, confidence 0.92 Lazy attribute loader for the async Kubernetes API subpackage that imports and caches API classes on demand.
    Reasoning

    This is the same PEP 562 lazy-import pattern used across the generated Kubernetes client. It resolves an API class from a fixed module table and caches it in globals(). Nothing is decoded, executed or sent over the network.

  3. info warn → info by review dynamic-attribute kubernetes/aio/client/models/__init__.py:2568:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            value = getattr(import_module(module_name, __name__), name)
            globals()[name] = value
            return value
    dismissed LLM, confidence 0.92 Lazy model-class loader in the async Kubernetes client that resolves model attributes through import_module on first access.
    Reasoning

    The snippet is the standard PEP 562 lazy-loading __getattr__ used in generated model packages. It imports a model submodule by name and caches the result. It has no malicious indicators.

  4. line length 625 characters (raw pass, confidence 0.50)

        storage_version_hash: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("storageVersionHash", "storage_version_hash"), serialization_alias="storageVersionHash", description="The hash value of the storage version, the version this resource is converted to when written to the data store. Value m
  5. line length 753 characters (raw pass, confidence 0.50)

        binary_data: Optional[Dict[str, Union[Annotated[bytes, Field(strict=True)], Annotated[str, Field(strict=True)]]]] = Field(default=None, validation_alias=AliasChoices("binaryData", "binary_data"), serialization_alias="binaryData", description="BinaryData contains the binary data. Each key must consist of alphanumeri
  6. line length 639 characters (raw pass, confidence 0.50)

        default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
  7. compression ratio 0.609 is >2σ above file mean 0.520 (raw pass, confidence 0.50)

    alization_alias="requiresRepublish", description="requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.  Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVo
  8. line length 678 characters (raw pass, confidence 0.50)

        maximum_volume_size: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("maximumVolumeSize", "maximum_volume_size"), serialization_alias="maximumVolumeSize", description="maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology 
  9. line length 696 characters (raw pass, confidence 0.50)

        preserve_unknown_fields: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("preserveUnknownFields", "preserve_unknown_fields"), serialization_alias="preserveUnknownFields", description="preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be 
  10. line length 618 characters (raw pass, confidence 0.50)

        stored_versions: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("storedVersions", "stored_versions"), serialization_alias="storedVersions", description="storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for s
  11. line length 538 characters (raw pass, confidence 0.50)

        additional_printer_columns: Optional[List[V1CustomResourceColumnDefinition]] = Field(default=None, validation_alias=AliasChoices("additionalPrinterColumns", "additional_printer_columns"), serialization_alias="additionalPrinterColumns", description="additionalPrinterColumns specifies additional columns returned in T
  12. line length 525 characters (raw pass, confidence 0.50)

        status_replicas_path: StrictStr = Field(validation_alias=AliasChoices("statusReplicasPath", "status_replicas_path"), serialization_alias="statusReplicasPath", description="statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the ar
  13. line length 667 characters (raw pass, confidence 0.50)

        propagation_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("propagationPolicy", "propagation_policy"), serialization_alias="propagationPolicy", description="Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The defa
  14. line length 588 characters (raw pass, confidence 0.50)

        progress_deadline_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("progressDeadlineSeconds", "progress_deadline_seconds"), serialization_alias="progressDeadlineSeconds", description="The maximum time in seconds for a deployment to make progress before it is considered to be failed. 
  15. line length 504 characters (raw pass, confidence 0.50)

        terminating_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("terminatingReplicas", "terminating_replicas"), serialization_alias="terminatingReplicas", description="Total number of terminating pods targeted by this deployment. Terminating pods have a non-null .metadata.deletionTimes
  16. line length 593 characters (raw pass, confidence 0.50)

        skip_node_operations: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("skipNodeOperations", "skip_node_operations"), serialization_alias="skipNodeOperations", description="SkipNodeOperations lists node-local resource operations (gRPC calls) that will be skipped for this allocated devic
  17. line length 643 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  18. line length 595 characters (raw pass, confidence 0.50)

        size_limit: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("sizeLimit", "size_limit"), serialization_alias="sizeLimit", description="sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on me
  19. line length 604 characters (raw pass, confidence 0.50)

        deprecated_topology: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("deprecatedTopology", "deprecated_topology"), serialization_alias="deprecatedTopology", description="deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be
  20. compression ratio 0.734 is >2σ above file mean 0.553 (raw pass, confidence 0.50)

        capacity: Optional[V1CapacityRequirements] = None
        count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
  21. line length 603 characters (raw pass, confidence 0.50)

        lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels.  This value of this 
  22. line length 554 characters (raw pass, confidence 0.50)

        matching_precedence: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("matchingPrecedence", "matching_precedence"), serialization_alias="matchingPrecedence", description="`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among th
  23. line length 504 characters (raw pass, confidence 0.50)

        min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be
  24. line length 506 characters (raw pass, confidence 0.50)

        secret_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("secretName", "secret_name"), serialization_alias="secretName", description="secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. I
  25. line length 712 characters (raw pass, confidence 0.50)

        resource_claims: Optional[List[V1alpha3WorkloadPodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="ResourceClaims defines which ResourceClaims may be shared among Pods in the Job. Pods consume the device
  26. compression ratio 0.816 is >2σ above file mean 0.588 (raw pass, confidence 0.50)

        enum: Optional[List[Any]] = None
        example: Any = Field(default=None, description="JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.")
  27. line length 601 characters (raw pass, confidence 0.50)

        lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this fi
  28. line length 575 characters (raw pass, confidence 0.50)

        resource_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceVersion", "resource_version"), serialization_alias="resourceVersion", description="String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed
  29. compression ratio 0.786 is >2σ above file mean 0.548 (raw pass, confidence 0.50)

        failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
  30. line length 576 characters (raw pass, confidence 0.50)

        var_from: Optional[List[V1NetworkPolicyPeer]] = Field(default=None, validation_alias=AliasChoices("from", "_from"), serialization_alias="from", description="from is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this
  31. line length 954 characters (raw pass, confidence 0.50)

        preferred_during_scheduling_ignored_during_execution: Optional[List[V1PreferredSchedulingTerm]] = Field(default=None, validation_alias=AliasChoices("preferredDuringSchedulingIgnoredDuringExecution", "preferred_during_scheduling_ignored_during_execution"), serialization_alias="preferredDuringSchedulingIgnoredDuringE
  32. line length 529 characters (raw pass, confidence 0.50)

        per_pod: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("perPod", "per_pod"), serialization_alias="perPod", description="PerPod is the flat overhead quantity allocated per pod. Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cg
  33. line length 604 characters (raw pass, confidence 0.50)

        disable_resize_preemption: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("disableResizePreemption", "disable_resize_preemption"), serialization_alias="disableResizePreemption", description="DisableResizePreemption lists the owners (e.g., autoscalers, operators, administrators) that h
  34. line length 564 characters (raw pass, confidence 0.50)

        non_resource_urls: List[StrictStr] = Field(validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:   - \"/healthz\" is legal   - \"/hea*\
  35. line length 690 characters (raw pass, confidence 0.50)

        block_owner_deletion: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("blockOwnerDeletion", "block_owner_deletion"), serialization_alias="blockOwnerDeletion", description="If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value
  36. line length 656 characters (raw pass, confidence 0.50)

        parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
  37. line length 682 characters (raw pass, confidence 0.50)

        persistent_volume_reclaim_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("persistentVolumeReclaimPolicy", "persistent_volume_reclaim_policy"), serialization_alias="persistentVolumeReclaimPolicy", description="persistentVolumeReclaimPolicy defines what happens to a persistent volume 
  38. line length 697 characters (raw pass, confidence 0.50)

        volume_attributes_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeAttributesClassName", "volume_attributes_class_name"), serialization_alias="volumeAttributesClassName", description="Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not 
  39. line length 816 characters (raw pass, confidence 0.50)

        required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
  40. line length 826 characters (raw pass, confidence 0.50)

        required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
  41. line length 769 characters (raw pass, confidence 0.50)

        unverified_user_annotations: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("unverifiedUserAnnotations", "unverified_user_annotations"), serialization_alias="unverifiedUserAnnotations", description="unverifiedUserAnnotations allow pod authors to pass additional information to the
  42. line length 515 characters (raw pass, confidence 0.50)

        max_unavailable: Optional[StrictInt | StrictStr] = Field(default=None, validation_alias=AliasChoices("maxUnavailable", "max_unavailable"), serialization_alias="maxUnavailable", description="maxUnavailable indicates that an eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailab
  43. line length 679 characters (raw pass, confidence 0.50)

        resource_claim_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceClaimName", "resource_claim_name"), serialization_alias="resourceClaimName", description="ResourceClaimName is the name of the ResourceClaim that was generated for the Pod in the namespace of the Pod.  When the DRA
  44. compression ratio 0.768 is >2σ above file mean 0.601 (raw pass, confidence 0.50)

    lization_alias="enableServiceLinks", description="EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.")
  45. line length 686 characters (raw pass, confidence 0.50)

        set_hostname_as_fqdn: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("setHostnameAsFQDN", "set_hostname_as_fqdn"), serialization_alias="setHostnameAsFQDN", description="If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux contai
  46. compression ratio 0.776 is >2σ above file mean 0.601 (raw pass, confidence 0.50)

        volumes: Optional[List[V1Volume]] = Field(default=None, description="List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes")
        openapi_types: ClassVar[Dict[str, str]] = {
            "active_deadline_seconds": "int",
  47. compression ratio 0.772 is >2σ above file mean 0.598 (raw pass, confidence 0.50)

        start_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("startTime", "start_time"), serialization_alias="startTime", description="RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.")
  48. line length 597 characters (raw pass, confidence 0.50)

        non_resource_urls: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="nonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step 
  49. line length 570 characters (raw pass, confidence 0.50)

        global_default: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("globalDefault", "global_default"), serialization_alias="globalDefault", description="globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class.
  50. line length 616 characters (raw pass, confidence 0.50)

        default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value bet
  51. line length 639 characters (raw pass, confidence 0.50)

        default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
  52. compression ratio 0.761 is >2σ above file mean 0.625 (raw pass, confidence 0.50)

    tion_alias="readOnlyRootFilesystem", description="Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.")
  53. line length 594 characters (raw pass, confidence 0.50)

        run_as_non_root: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("runAsNonRoot", "run_as_non_root"), serialization_alias="runAsNonRoot", description="Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not 
  54. line length 604 characters (raw pass, confidence 0.50)

        image_pull_secrets: Optional[List[V1LocalObjectReference]] = Field(default=None, validation_alias=AliasChoices("imagePullSecrets", "image_pull_secrets"), serialization_alias="imagePullSecrets", description="ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in po
  55. line length 593 characters (raw pass, confidence 0.50)

        expiration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("expirationSeconds", "expiration_seconds"), serialization_alias="expirationSeconds", description="expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the 
  56. compression ratio 0.735 is >2σ above file mean 0.565 (raw pass, confidence 0.50)

     serialization_alias="externalName", description="externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"Ex
  57. compression ratio 0.736 is >2σ above file mean 0.565 (raw pass, confidence 0.50)

        ports: Optional[List[V1ServicePort]] = Field(default=None, description="The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies")
  58. line length 641 characters (raw pass, confidence 0.50)

        volume_claim_templates: Optional[List[V1PersistentVolumeClaim]] = Field(default=None, validation_alias=AliasChoices("volumeClaimTemplates", "volume_claim_templates"), serialization_alias="volumeClaimTemplates", description="volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet
  59. line length 532 characters (raw pass, confidence 0.50)

        allowed_topologies: Optional[List[V1TopologySelectorTerm]] = Field(default=None, validation_alias=AliasChoices("allowedTopologies", "allowed_topologies"), serialization_alias="allowedTopologies", description="allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume pl
  60. line length 620 characters (raw pass, confidence 0.50)

        volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS.  If no namespace is specified then the Pod's namespace will be use
  61. line length 620 characters (raw pass, confidence 0.50)

        volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS.  If no namespace is specified then the Pod's namespace will be use
  62. line length 504 characters (raw pass, confidence 0.50)

        evaluation_error: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("evaluationError", "evaluation_error"), serialization_alias="evaluationError", description="evaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and 
  63. line length 511 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  64. compression ratio 0.786 is >2σ above file mean 0.560 (raw pass, confidence 0.50)

        failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
  65. line length 664 characters (raw pass, confidence 0.50)

        parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
  66. line length 527 characters (raw pass, confidence 0.50)

        completion_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("completionTime", "completion_time"), serialization_alias="completionTime", description="completionTime tracks the time at which the Responder stopped processing the eviction request. Completion means that the responders has eit
  67. line length 545 characters (raw pass, confidence 0.50)

        common_encoding_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("commonEncodingVersion", "common_encoding_version"), serialization_alias="commonEncodingVersion", description="commonEncodingVersion is set to an encoding storage version if all API server instances share that same vers
  68. line length 574 characters (raw pass, confidence 0.50)

        renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
  69. line length 633 characters (raw pass, confidence 0.50)

        preemption_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("preemptionPolicy", "preemption_policy"), serialization_alias="preemptionPolicy", description="preemptionPolicy is the Policy for preempting pods/podgroups with lower priority. One of Never, PreemptLowerPriority. Defaults to 
  70. compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)

        name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
  71. line length 567 characters (raw pass, confidence 0.50)

        priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
  72. line length 666 characters (raw pass, confidence 0.50)

        resource_claims: Optional[List[V1alpha3PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices allo
  73. line length 744 characters (raw pass, confidence 0.50)

        partition_summary: Optional[List[V1alpha3PartitionTypeStatus]] = Field(default=None, validation_alias=AliasChoices("partitionSummary", "partition_summary"), serialization_alias="partitionSummary", description="PartitionSummary reports allocatability per (attribute, partition type) for a partitionable pool that publ
  74. line length 579 characters (raw pass, confidence 0.50)

        composite_pod_group_templates: Optional[List[V1alpha3CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGr
  75. line length 551 characters (raw pass, confidence 0.50)

        pod_group_templates: Optional[List[V1alpha3PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates i
  76. compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)

        name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
  77. line length 567 characters (raw pass, confidence 0.50)

        priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
  78. compression ratio 0.690 is >2σ above file mean 0.538 (raw pass, confidence 0.50)

        name: StrictStr = Field(description="Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim.  Must be a DNS label and unique among all DeviceRequests in a ResourceClaim.")
  79. line length 643 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  80. line length 574 characters (raw pass, confidence 0.50)

        renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
  81. line length 656 characters (raw pass, confidence 0.50)

        parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
  82. line length 665 characters (raw pass, confidence 0.50)

        resource_claims: Optional[List[V1beta1PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices alloc
  83. line length 578 characters (raw pass, confidence 0.50)

        composite_pod_group_templates: Optional[List[V1beta1CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGro
  84. line length 550 characters (raw pass, confidence 0.50)

        pod_group_templates: Optional[List[V1beta1PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates is
  85. line length 643 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  86. compression ratio 0.734 is >2σ above file mean 0.551 (raw pass, confidence 0.50)

        capacity: Optional[V1beta2CapacityRequirements] = None
        count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
  87. line length 504 characters (raw pass, confidence 0.50)

        min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be
  88. line length 641 characters (raw pass, confidence 0.50)

        stabilization_window_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("stabilizationWindowSeconds", "stabilization_window_seconds"), serialization_alias="stabilizationWindowSeconds", description="stabilizationWindowSeconds is the number of seconds for which past recommendations shoul
  89. info warn → info by review dynamic-attribute kubernetes/client/__init__.py:2802:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            value = getattr(import_module(module_name, __name__), name)
            globals()[name] = value
            return value
    dismissed LLM, confidence 0.92 Lazy-loading __getattr__ in the synchronous Kubernetes client package that caches submodule attributes on first access.
    Reasoning

    This is the same generated PEP 562 lazy-import idiom as the async copy. It imports a submodule attribute by name and caches it in globals(). There is no decoding, execution or network activity.

  90. info warn → info by review dynamic-attribute kubernetes/client/api/__init__.py:219:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            value = getattr(import_module(module_name, __name__), name)
            globals()[name] = value
            return value
    dismissed LLM, confidence 0.92 Lazy API-class loader in the synchronous Kubernetes client that imports and caches API modules on demand.
    Reasoning

    The code is the standard lazy-import pattern for API classes in the generated Kubernetes client. It resolves names from a fixed table with import_module and caches them. The finding is a false positive.

  91. info warn → info by review dynamic-attribute kubernetes/client/models/__init__.py:2568:9

    reach-by-name through `globals` (ast pass, confidence 0.60)

            value = getattr(import_module(module_name, __name__), name)
            globals()[name] = value
            return value
    dismissed LLM, confidence 0.92 Lazy model-class loader in the synchronous Kubernetes client that resolves model attributes on first access.
    Reasoning

    This is the generated PEP 562 lazy-import idiom for model classes. It imports a fixed module by name and caches the attribute. There is no evidence of malicious intent.

  92. line length 625 characters (raw pass, confidence 0.50)

        storage_version_hash: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("storageVersionHash", "storage_version_hash"), serialization_alias="storageVersionHash", description="The hash value of the storage version, the version this resource is converted to when written to the data store. Value m
  93. line length 753 characters (raw pass, confidence 0.50)

        binary_data: Optional[Dict[str, Union[Annotated[bytes, Field(strict=True)], Annotated[str, Field(strict=True)]]]] = Field(default=None, validation_alias=AliasChoices("binaryData", "binary_data"), serialization_alias="binaryData", description="BinaryData contains the binary data. Each key must consist of alphanumeri
  94. line length 639 characters (raw pass, confidence 0.50)

        default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
  95. compression ratio 0.609 is >2σ above file mean 0.520 (raw pass, confidence 0.50)

    alization_alias="requiresRepublish", description="requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.  Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVo
  96. line length 678 characters (raw pass, confidence 0.50)

        maximum_volume_size: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("maximumVolumeSize", "maximum_volume_size"), serialization_alias="maximumVolumeSize", description="maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology 
  97. line length 696 characters (raw pass, confidence 0.50)

        preserve_unknown_fields: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("preserveUnknownFields", "preserve_unknown_fields"), serialization_alias="preserveUnknownFields", description="preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be 
  98. line length 618 characters (raw pass, confidence 0.50)

        stored_versions: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("storedVersions", "stored_versions"), serialization_alias="storedVersions", description="storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for s
  99. line length 538 characters (raw pass, confidence 0.50)

        additional_printer_columns: Optional[List[V1CustomResourceColumnDefinition]] = Field(default=None, validation_alias=AliasChoices("additionalPrinterColumns", "additional_printer_columns"), serialization_alias="additionalPrinterColumns", description="additionalPrinterColumns specifies additional columns returned in T
  100. line length 525 characters (raw pass, confidence 0.50)

        status_replicas_path: StrictStr = Field(validation_alias=AliasChoices("statusReplicasPath", "status_replicas_path"), serialization_alias="statusReplicasPath", description="statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the ar
  101. line length 667 characters (raw pass, confidence 0.50)

        propagation_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("propagationPolicy", "propagation_policy"), serialization_alias="propagationPolicy", description="Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The defa
  102. line length 588 characters (raw pass, confidence 0.50)

        progress_deadline_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("progressDeadlineSeconds", "progress_deadline_seconds"), serialization_alias="progressDeadlineSeconds", description="The maximum time in seconds for a deployment to make progress before it is considered to be failed. 
  103. line length 504 characters (raw pass, confidence 0.50)

        terminating_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("terminatingReplicas", "terminating_replicas"), serialization_alias="terminatingReplicas", description="Total number of terminating pods targeted by this deployment. Terminating pods have a non-null .metadata.deletionTimes
  104. line length 593 characters (raw pass, confidence 0.50)

        skip_node_operations: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("skipNodeOperations", "skip_node_operations"), serialization_alias="skipNodeOperations", description="SkipNodeOperations lists node-local resource operations (gRPC calls) that will be skipped for this allocated devic
  105. line length 643 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  106. line length 595 characters (raw pass, confidence 0.50)

        size_limit: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("sizeLimit", "size_limit"), serialization_alias="sizeLimit", description="sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on me
  107. line length 604 characters (raw pass, confidence 0.50)

        deprecated_topology: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("deprecatedTopology", "deprecated_topology"), serialization_alias="deprecatedTopology", description="deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be
  108. compression ratio 0.734 is >2σ above file mean 0.553 (raw pass, confidence 0.50)

        capacity: Optional[V1CapacityRequirements] = None
        count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
  109. line length 603 characters (raw pass, confidence 0.50)

        lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels.  This value of this 
  110. line length 554 characters (raw pass, confidence 0.50)

        matching_precedence: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("matchingPrecedence", "matching_precedence"), serialization_alias="matchingPrecedence", description="`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among th
  111. line length 504 characters (raw pass, confidence 0.50)

        min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be
  112. line length 506 characters (raw pass, confidence 0.50)

        secret_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("secretName", "secret_name"), serialization_alias="secretName", description="secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. I
  113. line length 712 characters (raw pass, confidence 0.50)

        resource_claims: Optional[List[V1alpha3WorkloadPodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="ResourceClaims defines which ResourceClaims may be shared among Pods in the Job. Pods consume the device
  114. compression ratio 0.816 is >2σ above file mean 0.588 (raw pass, confidence 0.50)

        enum: Optional[List[Any]] = None
        example: Any = Field(default=None, description="JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.")
  115. line length 601 characters (raw pass, confidence 0.50)

        lendable_percent: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("lendablePercent", "lendable_percent"), serialization_alias="lendablePercent", description="`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this fi
  116. line length 575 characters (raw pass, confidence 0.50)

        resource_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceVersion", "resource_version"), serialization_alias="resourceVersion", description="String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed
  117. compression ratio 0.786 is >2σ above file mean 0.548 (raw pass, confidence 0.50)

        failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
  118. line length 576 characters (raw pass, confidence 0.50)

        var_from: Optional[List[V1NetworkPolicyPeer]] = Field(default=None, validation_alias=AliasChoices("from", "_from"), serialization_alias="from", description="from is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this
  119. line length 954 characters (raw pass, confidence 0.50)

        preferred_during_scheduling_ignored_during_execution: Optional[List[V1PreferredSchedulingTerm]] = Field(default=None, validation_alias=AliasChoices("preferredDuringSchedulingIgnoredDuringExecution", "preferred_during_scheduling_ignored_during_execution"), serialization_alias="preferredDuringSchedulingIgnoredDuringE
  120. line length 529 characters (raw pass, confidence 0.50)

        per_pod: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("perPod", "per_pod"), serialization_alias="perPod", description="PerPod is the flat overhead quantity allocated per pod. Adding to each container limit allows individual containers to utilize the overhead, while the parent pod-level cg
  121. line length 604 characters (raw pass, confidence 0.50)

        disable_resize_preemption: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("disableResizePreemption", "disable_resize_preemption"), serialization_alias="disableResizePreemption", description="DisableResizePreemption lists the owners (e.g., autoscalers, operators, administrators) that h
  122. line length 564 characters (raw pass, confidence 0.50)

        non_resource_urls: List[StrictStr] = Field(validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:   - \"/healthz\" is legal   - \"/hea*\
  123. line length 690 characters (raw pass, confidence 0.50)

        block_owner_deletion: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("blockOwnerDeletion", "block_owner_deletion"), serialization_alias="blockOwnerDeletion", description="If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value
  124. line length 656 characters (raw pass, confidence 0.50)

        parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
  125. line length 682 characters (raw pass, confidence 0.50)

        persistent_volume_reclaim_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("persistentVolumeReclaimPolicy", "persistent_volume_reclaim_policy"), serialization_alias="persistentVolumeReclaimPolicy", description="persistentVolumeReclaimPolicy defines what happens to a persistent volume 
  126. line length 697 characters (raw pass, confidence 0.50)

        volume_attributes_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeAttributesClassName", "volume_attributes_class_name"), serialization_alias="volumeAttributesClassName", description="Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not 
  127. line length 816 characters (raw pass, confidence 0.50)

        required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
  128. line length 826 characters (raw pass, confidence 0.50)

        required_during_scheduling_ignored_during_execution: Optional[List[V1PodAffinityTerm]] = Field(default=None, validation_alias=AliasChoices("requiredDuringSchedulingIgnoredDuringExecution", "required_during_scheduling_ignored_during_execution"), serialization_alias="requiredDuringSchedulingIgnoredDuringExecution", d
  129. line length 769 characters (raw pass, confidence 0.50)

        unverified_user_annotations: Optional[Dict[str, StrictStr]] = Field(default=None, validation_alias=AliasChoices("unverifiedUserAnnotations", "unverified_user_annotations"), serialization_alias="unverifiedUserAnnotations", description="unverifiedUserAnnotations allow pod authors to pass additional information to the
  130. line length 515 characters (raw pass, confidence 0.50)

        max_unavailable: Optional[StrictInt | StrictStr] = Field(default=None, validation_alias=AliasChoices("maxUnavailable", "max_unavailable"), serialization_alias="maxUnavailable", description="maxUnavailable indicates that an eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailab
  131. line length 679 characters (raw pass, confidence 0.50)

        resource_claim_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("resourceClaimName", "resource_claim_name"), serialization_alias="resourceClaimName", description="ResourceClaimName is the name of the ResourceClaim that was generated for the Pod in the namespace of the Pod.  When the DRA
  132. compression ratio 0.768 is >2σ above file mean 0.601 (raw pass, confidence 0.50)

    lization_alias="enableServiceLinks", description="EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.")
  133. line length 686 characters (raw pass, confidence 0.50)

        set_hostname_as_fqdn: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("setHostnameAsFQDN", "set_hostname_as_fqdn"), serialization_alias="setHostnameAsFQDN", description="If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux contai
  134. compression ratio 0.776 is >2σ above file mean 0.601 (raw pass, confidence 0.50)

        volumes: Optional[List[V1Volume]] = Field(default=None, description="List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes")
        openapi_types: ClassVar[Dict[str, str]] = {
            "active_deadline_seconds": "int",
  135. compression ratio 0.772 is >2σ above file mean 0.598 (raw pass, confidence 0.50)

        start_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("startTime", "start_time"), serialization_alias="startTime", description="RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.")
  136. line length 597 characters (raw pass, confidence 0.50)

        non_resource_urls: Optional[List[StrictStr]] = Field(default=None, validation_alias=AliasChoices("nonResourceURLs", "non_resource_urls"), serialization_alias="nonResourceURLs", description="nonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step 
  137. line length 570 characters (raw pass, confidence 0.50)

        global_default: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("globalDefault", "global_default"), serialization_alias="globalDefault", description="globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class.
  138. line length 616 characters (raw pass, confidence 0.50)

        default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value bet
  139. line length 639 characters (raw pass, confidence 0.50)

        default_mode: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("defaultMode", "default_mode"), serialization_alias="defaultMode", description="defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal valu
  140. compression ratio 0.761 is >2σ above file mean 0.625 (raw pass, confidence 0.50)

    tion_alias="readOnlyRootFilesystem", description="Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.")
  141. line length 594 characters (raw pass, confidence 0.50)

        run_as_non_root: Optional[StrictBool] = Field(default=None, validation_alias=AliasChoices("runAsNonRoot", "run_as_non_root"), serialization_alias="runAsNonRoot", description="Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not 
  142. line length 604 characters (raw pass, confidence 0.50)

        image_pull_secrets: Optional[List[V1LocalObjectReference]] = Field(default=None, validation_alias=AliasChoices("imagePullSecrets", "image_pull_secrets"), serialization_alias="imagePullSecrets", description="ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in po
  143. line length 593 characters (raw pass, confidence 0.50)

        expiration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("expirationSeconds", "expiration_seconds"), serialization_alias="expirationSeconds", description="expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the 
  144. compression ratio 0.735 is >2σ above file mean 0.565 (raw pass, confidence 0.50)

     serialization_alias="externalName", description="externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved.  Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"Ex
  145. compression ratio 0.736 is >2σ above file mean 0.565 (raw pass, confidence 0.50)

        ports: Optional[List[V1ServicePort]] = Field(default=None, description="The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies")
  146. line length 641 characters (raw pass, confidence 0.50)

        volume_claim_templates: Optional[List[V1PersistentVolumeClaim]] = Field(default=None, validation_alias=AliasChoices("volumeClaimTemplates", "volume_claim_templates"), serialization_alias="volumeClaimTemplates", description="volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet
  147. line length 532 characters (raw pass, confidence 0.50)

        allowed_topologies: Optional[List[V1TopologySelectorTerm]] = Field(default=None, validation_alias=AliasChoices("allowedTopologies", "allowed_topologies"), serialization_alias="allowedTopologies", description="allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume pl
  148. line length 620 characters (raw pass, confidence 0.50)

        volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS.  If no namespace is specified then the Pod's namespace will be use
  149. line length 620 characters (raw pass, confidence 0.50)

        volume_namespace: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("volumeNamespace", "volume_namespace"), serialization_alias="volumeNamespace", description="volumeNamespace specifies the scope of the volume within StorageOS.  If no namespace is specified then the Pod's namespace will be use
  150. line length 504 characters (raw pass, confidence 0.50)

        evaluation_error: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("evaluationError", "evaluation_error"), serialization_alias="evaluationError", description="evaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and 
  151. line length 511 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  152. compression ratio 0.786 is >2σ above file mean 0.560 (raw pass, confidence 0.50)

        failure_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("failurePolicy", "failure_policy"), serialization_alias="failurePolicy", description="failurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.")
  153. line length 664 characters (raw pass, confidence 0.50)

        parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
  154. line length 527 characters (raw pass, confidence 0.50)

        completion_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("completionTime", "completion_time"), serialization_alias="completionTime", description="completionTime tracks the time at which the Responder stopped processing the eviction request. Completion means that the responders has eit
  155. line length 545 characters (raw pass, confidence 0.50)

        common_encoding_version: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("commonEncodingVersion", "common_encoding_version"), serialization_alias="commonEncodingVersion", description="commonEncodingVersion is set to an encoding storage version if all API server instances share that same vers
  156. line length 574 characters (raw pass, confidence 0.50)

        renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
  157. line length 633 characters (raw pass, confidence 0.50)

        preemption_policy: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("preemptionPolicy", "preemption_policy"), serialization_alias="preemptionPolicy", description="preemptionPolicy is the Policy for preempting pods/podgroups with lower priority. One of Never, PreemptLowerPriority. Defaults to 
  158. compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)

        name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
  159. line length 567 characters (raw pass, confidence 0.50)

        priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
  160. line length 666 characters (raw pass, confidence 0.50)

        resource_claims: Optional[List[V1alpha3PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices allo
  161. line length 744 characters (raw pass, confidence 0.50)

        partition_summary: Optional[List[V1alpha3PartitionTypeStatus]] = Field(default=None, validation_alias=AliasChoices("partitionSummary", "partition_summary"), serialization_alias="partitionSummary", description="PartitionSummary reports allocatability per (attribute, partition type) for a partitionable pool that publ
  162. line length 579 characters (raw pass, confidence 0.50)

        composite_pod_group_templates: Optional[List[V1alpha3CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGr
  163. line length 551 characters (raw pass, confidence 0.50)

        pod_group_templates: Optional[List[V1alpha3PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates i
  164. compression ratio 0.831 is >2σ above file mean 0.613 (raw pass, confidence 0.50)

        name: StrictStr = Field(description="name is a unique identifier for the CompositePodGroupTemplate within the Workload. It must be a DNS label. This field is required.")
  165. line length 567 characters (raw pass, confidence 0.50)

        priority_class_name: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("priorityClassName", "priority_class_name"), serialization_alias="priorityClassName", description="priorityClassName indicates the priority that should be considered when scheduling a composite pod group created from this t
  166. compression ratio 0.690 is >2σ above file mean 0.538 (raw pass, confidence 0.50)

        name: StrictStr = Field(description="Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim.  Must be a DNS label and unique among all DeviceRequests in a ResourceClaim.")
  167. line length 643 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  168. line length 574 characters (raw pass, confidence 0.50)

        renew_time: Optional[datetime] = Field(default=None, validation_alias=AliasChoices("renewTime", "renew_time"), serialization_alias="renewTime", description="renewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the Le
  169. line length 656 characters (raw pass, confidence 0.50)

        parameter_not_found_action: Optional[StrictStr] = Field(default=None, validation_alias=AliasChoices("parameterNotFoundAction", "parameter_not_found_action"), serialization_alias="parameterNotFoundAction", description="parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or
  170. line length 665 characters (raw pass, confidence 0.50)

        resource_claims: Optional[List[V1beta1PodGroupResourceClaim]] = Field(default=None, validation_alias=AliasChoices("resourceClaims", "resource_claims"), serialization_alias="resourceClaims", description="resourceClaims defines which ResourceClaims may be shared among Pods in the group. Pods consume the devices alloc
  171. line length 578 characters (raw pass, confidence 0.50)

        composite_pod_group_templates: Optional[List[V1beta1CompositePodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("compositePodGroupTemplates", "composite_pod_group_templates"), serialization_alias="compositePodGroupTemplates", description="compositePodGroupTemplates is the list of CompositePodGro
  172. line length 550 characters (raw pass, confidence 0.50)

        pod_group_templates: Optional[List[V1beta1PodGroupTemplate]] = Field(default=None, validation_alias=AliasChoices("podGroupTemplates", "pod_group_templates"), serialization_alias="podGroupTemplates", description="podGroupTemplates is the list of templates that make up the Workload. The maximum number of templates is
  173. line length 643 characters (raw pass, confidence 0.50)

        toleration_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("tolerationSeconds", "toleration_seconds"), serialization_alias="tolerationSeconds", description="TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ign
  174. compression ratio 0.734 is >2σ above file mean 0.551 (raw pass, confidence 0.50)

        capacity: Optional[V1beta2CapacityRequirements] = None
        count: Optional[StrictInt] = Field(default=None, description="Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.")
  175. line length 504 characters (raw pass, confidence 0.50)

        min_replicas: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("minReplicas", "min_replicas"), serialization_alias="minReplicas", description="minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down.  It defaults to 1 pod.  minReplicas is allowed to be
  176. line length 641 characters (raw pass, confidence 0.50)

        stabilization_window_seconds: Optional[StrictInt] = Field(default=None, validation_alias=AliasChoices("stabilizationWindowSeconds", "stabilization_window_seconds"), serialization_alias="stabilizationWindowSeconds", description="stabilizationWindowSeconds is the number of seconds for which past recommendations shoul

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o kubernetes-37.0.2-py2.py3-none-any.whl https://files.pythonhosted.org/packages/c8/9e/bb4b445924591c09e6451da66274ee4afd3acb783f15c17c3623b9a4824a/kubernetes-37.0.2-py2.py3-none-any.whl
printf '%s  %s\n' d72683392fc10f59fb78b89bd91cb3be60a05d6ff0bbb2150966a224af6edc03 kubernetes-37.0.2-py2.py3-none-any.whl | shasum -a 256 -c -
unzip -q kubernetes-37.0.2-py2.py3-none-any.whl -d pkg
disclude scan --untrusted --severity info pkg