Update vendor package

vendor/k8s.io/api/policy/v1beta1/generated.proto

@@ -17,7 +17,7 @@ limitations under the License.
 
 // This file was autogenerated by go-to-protobuf. Do not edit it manually!
 
-syntax = 'proto2';
+syntax = "proto2";
 
 package k8s.io.api.policy.v1beta1;
 
@@ -136,6 +136,10 @@ message PodDisruptionBudgetSpec {
 
   // Label query over pods whose evictions are managed by the disruption
   // budget.
+  // A null selector selects no pods.
+  // An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods.
+  // In policy/v1, an empty selector will select all pods in the namespace.
+  // +patchStrategy=replace
   // +optional
   optional k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector selector = 2;
 
@@ -180,10 +184,31 @@ message PodDisruptionBudgetStatus {
 
   // total number of pods counted by this disruption budget
   optional int32 expectedPods = 6;
+
+  // Conditions contain conditions for PDB. The disruption controller sets the
+  // DisruptionAllowed condition. The following are known values for the reason field
+  // (additional reasons could be added in the future):
+  // - SyncFailed: The controller encountered an error and wasn't able to compute
+  //               the number of allowed disruptions. Therefore no disruptions are
+  //               allowed and the status of the condition will be False.
+  // - InsufficientPods: The number of pods are either at or below the number
+  //                     required by the PodDisruptionBudget. No disruptions are
+  //                     allowed and the status of the condition will be False.
+  // - SufficientPods: There are more pods than required by the PodDisruptionBudget.
+  //                   The condition will be True, and the number of allowed
+  //                   disruptions are provided by the disruptionsAllowed property.
+  //
+  // +optional
+  // +patchMergeKey=type
+  // +patchStrategy=merge
+  // +listType=map
+  // +listMapKey=type
+  repeated k8s.io.apimachinery.pkg.apis.meta.v1.Condition conditions = 7;
 }
 
 // PodSecurityPolicy governs the ability to make requests that affect the Security Context
 // that will be applied to a pod and container.
+// Deprecated in 1.21.
 message PodSecurityPolicy {
   // Standard object's metadata.
   // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
@@ -230,7 +255,7 @@ message PodSecurityPolicySpec {
   // +optional
   repeated string allowedCapabilities = 4;
 
-  // volumes is a white list of allowed volume plugins. Empty indicates that
+  // volumes is an allowlist of volume plugins. Empty indicates that
   // no volumes may be used. To allow all volumes you may use '*'.
   // +optional
   repeated string volumes = 5;
@@ -287,27 +312,27 @@ message PodSecurityPolicySpec {
   // +optional
   optional bool allowPrivilegeEscalation = 16;
 
-  // allowedHostPaths is a white list of allowed host paths. Empty indicates
+  // allowedHostPaths is an allowlist of host paths. Empty indicates
   // that all host paths may be used.
   // +optional
   repeated AllowedHostPath allowedHostPaths = 17;
 
-  // allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all
+  // allowedFlexVolumes is an allowlist of Flexvolumes.  Empty or nil indicates that all
   // Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes
   // is allowed in the "volumes" field.
   // +optional
   repeated AllowedFlexVolume allowedFlexVolumes = 18;
 
-  // AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
+  // AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec.
   // An empty value indicates that any CSI driver can be used for inline ephemeral volumes.
-  // This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
+  // This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate.
   // +optional
   repeated AllowedCSIDriver allowedCSIDrivers = 23;
 
   // allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none.
   // Each entry is either a plain sysctl name or ends in "*" in which case it is considered
   // as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed.
-  // Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
+  // Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection.
   //
   // Examples:
   // e.g. "foo/*" allows "foo/bar", "foo/baz", etc.
@@ -325,7 +350,7 @@ message PodSecurityPolicySpec {
   // +optional
   repeated string forbiddenSysctls = 20;
 
-  // AllowedProcMountTypes is a whitelist of allowed ProcMountTypes.
+  // AllowedProcMountTypes is an allowlist of allowed ProcMountTypes.
   // Empty or nil indicates that only the DefaultProcMountType may be used.
   // This requires the ProcMountType feature flag to be enabled.
   // +optional
@@ -363,7 +388,7 @@ message RunAsUserStrategyOptions {
 // RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses
 // for a pod.
 message RuntimeClassStrategyOptions {
-  // allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod.
+  // allowedRuntimeClassNames is an allowlist of RuntimeClass names that may be specified on a pod.
   // A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the
   // list. An empty list requires the RuntimeClassName field to be unset.
   repeated string allowedRuntimeClassNames = 1;