Detect cloud provider from environment

Detect if container resource requests/limits changed between old and new pod specs. Used to trigger in-place pod resize (KEP-1287).

Enqueue all existing APIService keys for reconciliation.

Enrich a CRD raw JSON value being stored on update with derived metadata and status fields. Specifically: - Sets `metadata.uid`/`metadata.name` from

Pull an image if necessary based on the pull policy

Print the list of flags inherited by all commands. Equivalent to: kubectl options

Execute a request with flow control Returns a permit that must be held while the request is processed

Execute --all: delete all resources of the given type in the namespace.

Execute an instant query and return the first value

Execute a network configuration (chain of plugins)

Update subjects in a RoleBinding or ClusterRoleBinding. Usage: `kubectl set subject clusterrolebinding/admin --user=admin --group=devs`

Extract API version from resource

Helper to extract a value from a JSON object using a simple JSONPath

Extract current managed fields from a resource

Extract the Prometheus label name used for resource names Different exporters use different label conventions: - kube-state-metrics: pod, service, de

Find ALL duplicate JSON keys at any nesting level of a JSON object string. Returns dotted paths (e.g., "spec.replicas") for each duplicate found.

Find existing load balancer by tags

Build the RFC 7234 `Warning` header value for an unknown-field warning. Upstream k8s (`apimachinery/pkg/util/warning/warning.go`) uses warn-code `299

Get all resources from storage

Helper to get all API group names and their preferred versions

Get the effective IP for a container, resolving through pause containers when the app container uses NetworkMode=container:pause.

Get a mutable reference to a value at the specified path

Get network configuration by name or use default

Get the user for a given context

Get a value at the specified JSON pointer path

Map an HTTP method to the Kubernetes authorization verb used for proxy subresources. K8s ref: staging/src/k8s.io/apiserver/pkg/endpoints/request/requ

Get channel ID

Initialize basic tracing without OpenTelemetry

Create rustls server config

Check if a pod is owned by this RC (has a controller ownerReference pointing to it)

Check if a pod is ready by examining its conditions

Check if a pod's containers are running

Get the key

Build a minimal pod in `ns-a` with the given phase. The pod carries no resources so it is BestEffort QoS — quota calculations only count it toward `po

ResourceQuota in `ns-a` with `hard: { pods: 10 }`. We pre-seed `status.used = { pods: "0" }` so the controller's idempotency guard (`if quota.status !

Helper: create a pod with given name, priority, and resource requests, scheduled on a node

Helper to create a minimal DaemonSet for testing

Helper to create a minimal Node for testing

Helper to mark a pod as Ready in storage

Parse CPU string (e.g., "500m", "1", "2000m") to millicores

Parse a value that can be either an absolute integer or a percentage string (e.g. "25%" or "1"). For percentages, the result is ceil(pct/100 * total).

Parse a Kubernetes memory quantity string (e.g., "128Mi", "1Gi", "1000000") into bytes.

Parse memory string (e.g., "128Mi", "1Gi") to bytes

Test parsing of nested property paths

Extract group, version, and resource type from a scale subresource URI. e.g. "/apis/apps/v1/namespaces/default/deployments/foo/scale" -> ("apps", "v1"

Reconcile all pods and create events for lifecycle changes

Parse resourceVersion string to mod_revision

Send a raw JSON byte body so we can exercise duplicate keys that would otherwise be normalized away by `serde_json::to_vec`.

Set the desired-replicas and max-replicas annotations on a ReplicaSet. K8s ref: pkg/controller/deployment/util/deployment_util.go — SetReplicasAnnotat

Set the unschedulable field on a node.

Simulate kubelet behavior: remove from storage any pods the controller has marked for deletion. StatefulSet reconcile only sets a deletionTimestamp (g

Generate a small `HashMap<String,String>` (<=3 entries) for labels / data fields.

Split a path into parent path and final key

Start watching.

Start a mock mutating webhook server that adds a label

Stop all containers for a pod with a specific grace period in seconds. Stops the pause container last to keep the network namespace alive.

Strategic merge for arrays If array items have a 'name' field, merge by name. Otherwise, replace the array.

Subscribe to watch events and replay any historical events since the given resourceVersion. Returns (historical_events, live_receiver). The caller sho

Teardown network for a container (DEL operation)

Teardown CNI networking for a pod Removes CNI configuration and deletes the network namespace

Update HPA status with error condition

Re-read the pod, apply `mutate`, and write it back. On a resource-version conflict, re-read and reapply once. NotFound is a no-op (the pod is already

Set the sampling rate