13.diff (1593011B)
1 diff --git a/clusters/2024_cluster/flux-system/gotk-components.yaml b/clusters/2024_cluster/flux-system/gotk-components.yaml 2 index f57b6188..3a33379c 100644 3 --- a/clusters/2024_cluster/flux-system/gotk-components.yaml 4 +++ b/clusters/2024_cluster/flux-system/gotk-components.yaml 5 @@ -1,14144 +1,14446 @@ 6 +--- 7 # This manifest was generated by flux. DO NOT EDIT. 8 -# Flux Version: v2.4.0 9 +# Flux Version: v2.5.1 10 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller 11 apiVersion: v1 12 kind: Namespace 13 metadata: 14 - labels: 15 - app.kubernetes.io/instance: flux-system 16 - app.kubernetes.io/part-of: flux 17 - app.kubernetes.io/version: v2.4.0 18 - pod-security.kubernetes.io/warn: restricted 19 - pod-security.kubernetes.io/warn-version: latest 20 - name: flux-system 21 + labels: 22 + app.kubernetes.io/instance: flux-system 23 + app.kubernetes.io/part-of: flux 24 + app.kubernetes.io/version: v2.5.1 25 + pod-security.kubernetes.io/warn: restricted 26 + pod-security.kubernetes.io/warn-version: latest 27 + name: flux-system 28 --- 29 apiVersion: networking.k8s.io/v1 30 kind: NetworkPolicy 31 metadata: 32 - labels: 33 - app.kubernetes.io/instance: flux-system 34 - app.kubernetes.io/part-of: flux 35 - app.kubernetes.io/version: v2.4.0 36 - name: allow-egress 37 - namespace: flux-system 38 + labels: 39 + app.kubernetes.io/instance: flux-system 40 + app.kubernetes.io/part-of: flux 41 + app.kubernetes.io/version: v2.5.1 42 + name: allow-egress 43 + namespace: flux-system 44 spec: 45 - egress: 46 - - {} 47 - ingress: 48 - - from: 49 - - podSelector: {} 50 - podSelector: {} 51 - policyTypes: 52 - - Ingress 53 - - Egress 54 + egress: 55 + - {} 56 + ingress: 57 + - from: 58 + - podSelector: {} 59 + podSelector: {} 60 + policyTypes: 61 + - Ingress 62 + - Egress 63 --- 64 apiVersion: networking.k8s.io/v1 65 kind: NetworkPolicy 66 metadata: 67 - labels: 68 - app.kubernetes.io/instance: flux-system 69 - app.kubernetes.io/part-of: flux 70 - app.kubernetes.io/version: v2.4.0 71 - name: allow-scraping 72 - namespace: flux-system 73 + labels: 74 + app.kubernetes.io/instance: flux-system 75 + app.kubernetes.io/part-of: flux 76 + app.kubernetes.io/version: v2.5.1 77 + name: allow-scraping 78 + namespace: flux-system 79 spec: 80 - ingress: 81 - - from: 82 - - namespaceSelector: {} 83 - ports: 84 - - port: 8080 85 - protocol: TCP 86 - podSelector: {} 87 - policyTypes: 88 - - Ingress 89 + ingress: 90 + - from: 91 + - namespaceSelector: {} 92 + ports: 93 + - port: 8080 94 + protocol: TCP 95 + podSelector: {} 96 + policyTypes: 97 + - Ingress 98 --- 99 apiVersion: networking.k8s.io/v1 100 kind: NetworkPolicy 101 metadata: 102 - labels: 103 - app.kubernetes.io/instance: flux-system 104 - app.kubernetes.io/part-of: flux 105 - app.kubernetes.io/version: v2.4.0 106 - name: allow-webhooks 107 - namespace: flux-system 108 + labels: 109 + app.kubernetes.io/instance: flux-system 110 + app.kubernetes.io/part-of: flux 111 + app.kubernetes.io/version: v2.5.1 112 + name: allow-webhooks 113 + namespace: flux-system 114 spec: 115 - ingress: 116 - - from: 117 - - namespaceSelector: {} 118 - podSelector: 119 - matchLabels: 120 - app: notification-controller 121 - policyTypes: 122 - - Ingress 123 + ingress: 124 + - from: 125 + - namespaceSelector: {} 126 + podSelector: 127 + matchLabels: 128 + app: notification-controller 129 + policyTypes: 130 + - Ingress 131 --- 132 apiVersion: v1 133 kind: ResourceQuota 134 metadata: 135 - labels: 136 - app.kubernetes.io/instance: flux-system 137 - app.kubernetes.io/part-of: flux 138 - app.kubernetes.io/version: v2.4.0 139 - name: critical-pods-flux-system 140 - namespace: flux-system 141 + labels: 142 + app.kubernetes.io/instance: flux-system 143 + app.kubernetes.io/part-of: flux 144 + app.kubernetes.io/version: v2.5.1 145 + name: critical-pods-flux-system 146 + namespace: flux-system 147 spec: 148 - hard: 149 - pods: "1000" 150 - scopeSelector: 151 - matchExpressions: 152 - - operator: In 153 - scopeName: PriorityClass 154 - values: 155 - - system-node-critical 156 - - system-cluster-critical 157 + hard: 158 + pods: "1000" 159 + scopeSelector: 160 + matchExpressions: 161 + - operator: In 162 + scopeName: PriorityClass 163 + values: 164 + - system-node-critical 165 + - system-cluster-critical 166 --- 167 apiVersion: rbac.authorization.k8s.io/v1 168 kind: ClusterRole 169 metadata: 170 - labels: 171 - app.kubernetes.io/instance: flux-system 172 - app.kubernetes.io/part-of: flux 173 - app.kubernetes.io/version: v2.4.0 174 - name: crd-controller-flux-system 175 + labels: 176 + app.kubernetes.io/instance: flux-system 177 + app.kubernetes.io/part-of: flux 178 + app.kubernetes.io/version: v2.5.1 179 + name: crd-controller-flux-system 180 rules: 181 - - apiGroups: 182 - - source.toolkit.fluxcd.io 183 - resources: 184 - - '*' 185 - verbs: 186 - - '*' 187 - - apiGroups: 188 - - kustomize.toolkit.fluxcd.io 189 - resources: 190 - - '*' 191 - verbs: 192 - - '*' 193 - - apiGroups: 194 - - helm.toolkit.fluxcd.io 195 - resources: 196 - - '*' 197 - verbs: 198 - - '*' 199 - - apiGroups: 200 - - notification.toolkit.fluxcd.io 201 - resources: 202 - - '*' 203 - verbs: 204 - - '*' 205 - - apiGroups: 206 - - image.toolkit.fluxcd.io 207 - resources: 208 - - '*' 209 - verbs: 210 - - '*' 211 - - apiGroups: 212 - - "" 213 - resources: 214 - - namespaces 215 - - secrets 216 - - configmaps 217 - - serviceaccounts 218 - verbs: 219 - - get 220 - - list 221 - - watch 222 - - apiGroups: 223 - - "" 224 - resources: 225 - - events 226 - verbs: 227 - - create 228 - - patch 229 - - apiGroups: 230 - - "" 231 - resources: 232 - - configmaps 233 - verbs: 234 - - get 235 - - list 236 - - watch 237 - - create 238 - - update 239 - - patch 240 - - delete 241 - - apiGroups: 242 - - "" 243 - resources: 244 - - configmaps/status 245 - verbs: 246 - - get 247 - - update 248 - - patch 249 - - apiGroups: 250 - - coordination.k8s.io 251 - resources: 252 - - leases 253 - verbs: 254 - - get 255 - - list 256 - - watch 257 - - create 258 - - update 259 - - patch 260 - - delete 261 - - nonResourceURLs: 262 - - /livez/ping 263 - verbs: 264 - - head 265 +- apiGroups: 266 + - source.toolkit.fluxcd.io 267 + resources: 268 + - '*' 269 + verbs: 270 + - '*' 271 +- apiGroups: 272 + - kustomize.toolkit.fluxcd.io 273 + resources: 274 + - '*' 275 + verbs: 276 + - '*' 277 +- apiGroups: 278 + - helm.toolkit.fluxcd.io 279 + resources: 280 + - '*' 281 + verbs: 282 + - '*' 283 +- apiGroups: 284 + - notification.toolkit.fluxcd.io 285 + resources: 286 + - '*' 287 + verbs: 288 + - '*' 289 +- apiGroups: 290 + - image.toolkit.fluxcd.io 291 + resources: 292 + - '*' 293 + verbs: 294 + - '*' 295 +- apiGroups: 296 + - "" 297 + resources: 298 + - namespaces 299 + - secrets 300 + - configmaps 301 + - serviceaccounts 302 + verbs: 303 + - get 304 + - list 305 + - watch 306 +- apiGroups: 307 + - "" 308 + resources: 309 + - events 310 + verbs: 311 + - create 312 + - patch 313 +- apiGroups: 314 + - "" 315 + resources: 316 + - configmaps 317 + verbs: 318 + - get 319 + - list 320 + - watch 321 + - create 322 + - update 323 + - patch 324 + - delete 325 +- apiGroups: 326 + - "" 327 + resources: 328 + - configmaps/status 329 + verbs: 330 + - get 331 + - update 332 + - patch 333 +- apiGroups: 334 + - coordination.k8s.io 335 + resources: 336 + - leases 337 + verbs: 338 + - get 339 + - list 340 + - watch 341 + - create 342 + - update 343 + - patch 344 + - delete 345 +- nonResourceURLs: 346 + - /livez/ping 347 + verbs: 348 + - head 349 --- 350 apiVersion: rbac.authorization.k8s.io/v1 351 kind: ClusterRole 352 metadata: 353 - labels: 354 - app.kubernetes.io/instance: flux-system 355 - app.kubernetes.io/part-of: flux 356 - app.kubernetes.io/version: v2.4.0 357 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 358 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 359 - name: flux-edit-flux-system 360 + labels: 361 + app.kubernetes.io/instance: flux-system 362 + app.kubernetes.io/part-of: flux 363 + app.kubernetes.io/version: v2.5.1 364 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 365 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 366 + name: flux-edit-flux-system 367 rules: 368 - - apiGroups: 369 - - notification.toolkit.fluxcd.io 370 - - source.toolkit.fluxcd.io 371 - - helm.toolkit.fluxcd.io 372 - - image.toolkit.fluxcd.io 373 - - kustomize.toolkit.fluxcd.io 374 - resources: 375 - - '*' 376 - verbs: 377 - - create 378 - - delete 379 - - deletecollection 380 - - patch 381 - - update 382 +- apiGroups: 383 + - notification.toolkit.fluxcd.io 384 + - source.toolkit.fluxcd.io 385 + - helm.toolkit.fluxcd.io 386 + - image.toolkit.fluxcd.io 387 + - kustomize.toolkit.fluxcd.io 388 + resources: 389 + - '*' 390 + verbs: 391 + - create 392 + - delete 393 + - deletecollection 394 + - patch 395 + - update 396 --- 397 apiVersion: rbac.authorization.k8s.io/v1 398 kind: ClusterRole 399 metadata: 400 - labels: 401 - app.kubernetes.io/instance: flux-system 402 - app.kubernetes.io/part-of: flux 403 - app.kubernetes.io/version: v2.4.0 404 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 405 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 406 - rbac.authorization.k8s.io/aggregate-to-view: "true" 407 - name: flux-view-flux-system 408 + labels: 409 + app.kubernetes.io/instance: flux-system 410 + app.kubernetes.io/part-of: flux 411 + app.kubernetes.io/version: v2.5.1 412 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 413 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 414 + rbac.authorization.k8s.io/aggregate-to-view: "true" 415 + name: flux-view-flux-system 416 rules: 417 - - apiGroups: 418 - - notification.toolkit.fluxcd.io 419 - - source.toolkit.fluxcd.io 420 - - helm.toolkit.fluxcd.io 421 - - image.toolkit.fluxcd.io 422 - - kustomize.toolkit.fluxcd.io 423 - resources: 424 - - '*' 425 - verbs: 426 - - get 427 - - list 428 - - watch 429 +- apiGroups: 430 + - notification.toolkit.fluxcd.io 431 + - source.toolkit.fluxcd.io 432 + - helm.toolkit.fluxcd.io 433 + - image.toolkit.fluxcd.io 434 + - kustomize.toolkit.fluxcd.io 435 + resources: 436 + - '*' 437 + verbs: 438 + - get 439 + - list 440 + - watch 441 --- 442 apiVersion: rbac.authorization.k8s.io/v1 443 kind: ClusterRoleBinding 444 metadata: 445 - labels: 446 - app.kubernetes.io/instance: flux-system 447 - app.kubernetes.io/part-of: flux 448 - app.kubernetes.io/version: v2.4.0 449 - name: cluster-reconciler-flux-system 450 + labels: 451 + app.kubernetes.io/instance: flux-system 452 + app.kubernetes.io/part-of: flux 453 + app.kubernetes.io/version: v2.5.1 454 + name: cluster-reconciler-flux-system 455 roleRef: 456 - apiGroup: rbac.authorization.k8s.io 457 - kind: ClusterRole 458 - name: cluster-admin 459 + apiGroup: rbac.authorization.k8s.io 460 + kind: ClusterRole 461 + name: cluster-admin 462 subjects: 463 - - kind: ServiceAccount 464 - name: kustomize-controller 465 - namespace: flux-system 466 - - kind: ServiceAccount 467 - name: helm-controller 468 - namespace: flux-system 469 +- kind: ServiceAccount 470 + name: kustomize-controller 471 + namespace: flux-system 472 +- kind: ServiceAccount 473 + name: helm-controller 474 + namespace: flux-system 475 --- 476 apiVersion: rbac.authorization.k8s.io/v1 477 kind: ClusterRoleBinding 478 metadata: 479 - labels: 480 - app.kubernetes.io/instance: flux-system 481 - app.kubernetes.io/part-of: flux 482 - app.kubernetes.io/version: v2.4.0 483 - name: crd-controller-flux-system 484 + labels: 485 + app.kubernetes.io/instance: flux-system 486 + app.kubernetes.io/part-of: flux 487 + app.kubernetes.io/version: v2.5.1 488 + name: crd-controller-flux-system 489 roleRef: 490 - apiGroup: rbac.authorization.k8s.io 491 - kind: ClusterRole 492 - name: crd-controller-flux-system 493 + apiGroup: rbac.authorization.k8s.io 494 + kind: ClusterRole 495 + name: crd-controller-flux-system 496 subjects: 497 - - kind: ServiceAccount 498 - name: kustomize-controller 499 - namespace: flux-system 500 - - kind: ServiceAccount 501 - name: helm-controller 502 - namespace: flux-system 503 - - kind: ServiceAccount 504 - name: source-controller 505 - namespace: flux-system 506 - - kind: ServiceAccount 507 - name: notification-controller 508 - namespace: flux-system 509 - - kind: ServiceAccount 510 - name: image-reflector-controller 511 - namespace: flux-system 512 - - kind: ServiceAccount 513 - name: image-automation-controller 514 - namespace: flux-system 515 +- kind: ServiceAccount 516 + name: kustomize-controller 517 + namespace: flux-system 518 +- kind: ServiceAccount 519 + name: helm-controller 520 + namespace: flux-system 521 +- kind: ServiceAccount 522 + name: source-controller 523 + namespace: flux-system 524 +- kind: ServiceAccount 525 + name: notification-controller 526 + namespace: flux-system 527 +- kind: ServiceAccount 528 + name: image-reflector-controller 529 + namespace: flux-system 530 +- kind: ServiceAccount 531 + name: image-automation-controller 532 + namespace: flux-system 533 --- 534 apiVersion: apiextensions.k8s.io/v1 535 kind: CustomResourceDefinition 536 metadata: 537 - annotations: 538 - controller-gen.kubebuilder.io/version: v0.16.1 539 - labels: 540 - app.kubernetes.io/component: source-controller 541 - app.kubernetes.io/instance: flux-system 542 - app.kubernetes.io/part-of: flux 543 - app.kubernetes.io/version: v2.4.0 544 - name: buckets.source.toolkit.fluxcd.io 545 + annotations: 546 + controller-gen.kubebuilder.io/version: v0.16.1 547 + labels: 548 + app.kubernetes.io/component: source-controller 549 + app.kubernetes.io/instance: flux-system 550 + app.kubernetes.io/part-of: flux 551 + app.kubernetes.io/version: v2.5.1 552 + name: buckets.source.toolkit.fluxcd.io 553 spec: 554 - group: source.toolkit.fluxcd.io 555 - names: 556 - kind: Bucket 557 - listKind: BucketList 558 - plural: buckets 559 - singular: bucket 560 - scope: Namespaced 561 - versions: 562 - - additionalPrinterColumns: 563 - - jsonPath: .spec.endpoint 564 - name: Endpoint 565 - type: string 566 - - jsonPath: .metadata.creationTimestamp 567 - name: Age 568 - type: date 569 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 570 - name: Ready 571 - type: string 572 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 573 - name: Status 574 - type: string 575 - name: v1 576 - schema: 577 - openAPIV3Schema: 578 - description: Bucket is the Schema for the buckets API. 579 - properties: 580 - apiVersion: 581 - description: |- 582 - APIVersion defines the versioned schema of this representation of an object. 583 - Servers should convert recognized schemas to the latest internal value, and 584 - may reject unrecognized values. 585 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 586 - type: string 587 - kind: 588 - description: |- 589 - Kind is a string value representing the REST resource this object represents. 590 - Servers may infer this from the endpoint the client submits requests to. 591 - Cannot be updated. 592 - In CamelCase. 593 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 594 - type: string 595 - metadata: 596 - type: object 597 - spec: 598 - description: |- 599 - BucketSpec specifies the required configuration to produce an Artifact for 600 - an object storage bucket. 601 - properties: 602 - bucketName: 603 - description: BucketName is the name of the object storage bucket. 604 - type: string 605 - certSecretRef: 606 - description: |- 607 - CertSecretRef can be given the name of a Secret containing 608 - either or both of 609 + group: source.toolkit.fluxcd.io 610 + names: 611 + kind: Bucket 612 + listKind: BucketList 613 + plural: buckets 614 + singular: bucket 615 + scope: Namespaced 616 + versions: 617 + - additionalPrinterColumns: 618 + - jsonPath: .spec.endpoint 619 + name: Endpoint 620 + type: string 621 + - jsonPath: .metadata.creationTimestamp 622 + name: Age 623 + type: date 624 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 625 + name: Ready 626 + type: string 627 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 628 + name: Status 629 + type: string 630 + name: v1 631 + schema: 632 + openAPIV3Schema: 633 + description: Bucket is the Schema for the buckets API. 634 + properties: 635 + apiVersion: 636 + description: |- 637 + APIVersion defines the versioned schema of this representation of an object. 638 + Servers should convert recognized schemas to the latest internal value, and 639 + may reject unrecognized values. 640 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 641 + type: string 642 + kind: 643 + description: |- 644 + Kind is a string value representing the REST resource this object represents. 645 + Servers may infer this from the endpoint the client submits requests to. 646 + Cannot be updated. 647 + In CamelCase. 648 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 649 + type: string 650 + metadata: 651 + type: object 652 + spec: 653 + description: |- 654 + BucketSpec specifies the required configuration to produce an Artifact for 655 + an object storage bucket. 656 + properties: 657 + bucketName: 658 + description: BucketName is the name of the object storage bucket. 659 + type: string 660 + certSecretRef: 661 + description: |- 662 + CertSecretRef can be given the name of a Secret containing 663 + either or both of 664 665 - - a PEM-encoded client certificate (`tls.crt`) and private 666 - key (`tls.key`); 667 - - a PEM-encoded CA certificate (`ca.crt`) 668 + - a PEM-encoded client certificate (`tls.crt`) and private 669 + key (`tls.key`); 670 + - a PEM-encoded CA certificate (`ca.crt`) 671 672 - and whichever are supplied, will be used for connecting to the 673 - bucket. The client cert and key are useful if you are 674 - authenticating with a certificate; the CA cert is useful if 675 - you are using a self-signed server certificate. The Secret must 676 - be of type `Opaque` or `kubernetes.io/tls`. 677 + and whichever are supplied, will be used for connecting to the 678 + bucket. The client cert and key are useful if you are 679 + authenticating with a certificate; the CA cert is useful if 680 + you are using a self-signed server certificate. The Secret must 681 + be of type `Opaque` or `kubernetes.io/tls`. 682 683 - This field is only supported for the `generic` provider. 684 - properties: 685 - name: 686 - description: Name of the referent. 687 - type: string 688 - required: 689 - - name 690 - type: object 691 - endpoint: 692 - description: Endpoint is the object storage address the BucketName is located at. 693 - type: string 694 - ignore: 695 - description: |- 696 - Ignore overrides the set of excluded patterns in the .sourceignore format 697 - (which is the same as .gitignore). If not provided, a default will be used, 698 - consult the documentation for your version to find out what those are. 699 - type: string 700 - insecure: 701 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 702 - type: boolean 703 - interval: 704 - description: |- 705 - Interval at which the Bucket Endpoint is checked for updates. 706 - This interval is approximate and may be subject to jitter to ensure 707 - efficient use of resources. 708 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 709 - type: string 710 - prefix: 711 - description: Prefix to use for server-side filtering of files in the Bucket. 712 - type: string 713 - provider: 714 - default: generic 715 - description: |- 716 - Provider of the object storage bucket. 717 - Defaults to 'generic', which expects an S3 (API) compatible object 718 - storage. 719 - enum: 720 - - generic 721 - - aws 722 - - gcp 723 - - azure 724 - type: string 725 - proxySecretRef: 726 - description: |- 727 - ProxySecretRef specifies the Secret containing the proxy configuration 728 - to use while communicating with the Bucket server. 729 - properties: 730 - name: 731 - description: Name of the referent. 732 - type: string 733 - required: 734 - - name 735 - type: object 736 - region: 737 - description: Region of the Endpoint where the BucketName is located in. 738 - type: string 739 - secretRef: 740 - description: |- 741 - SecretRef specifies the Secret containing authentication credentials 742 - for the Bucket. 743 - properties: 744 - name: 745 - description: Name of the referent. 746 - type: string 747 - required: 748 - - name 749 - type: object 750 - sts: 751 - description: |- 752 - STS specifies the required configuration to use a Security Token 753 - Service for fetching temporary credentials to authenticate in a 754 - Bucket provider. 755 + This field is only supported for the `generic` provider. 756 + properties: 757 + name: 758 + description: Name of the referent. 759 + type: string 760 + required: 761 + - name 762 + type: object 763 + endpoint: 764 + description: Endpoint is the object storage address the BucketName 765 + is located at. 766 + type: string 767 + ignore: 768 + description: |- 769 + Ignore overrides the set of excluded patterns in the .sourceignore format 770 + (which is the same as .gitignore). If not provided, a default will be used, 771 + consult the documentation for your version to find out what those are. 772 + type: string 773 + insecure: 774 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 775 + type: boolean 776 + interval: 777 + description: |- 778 + Interval at which the Bucket Endpoint is checked for updates. 779 + This interval is approximate and may be subject to jitter to ensure 780 + efficient use of resources. 781 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 782 + type: string 783 + prefix: 784 + description: Prefix to use for server-side filtering of files in the 785 + Bucket. 786 + type: string 787 + provider: 788 + default: generic 789 + description: |- 790 + Provider of the object storage bucket. 791 + Defaults to 'generic', which expects an S3 (API) compatible object 792 + storage. 793 + enum: 794 + - generic 795 + - aws 796 + - gcp 797 + - azure 798 + type: string 799 + proxySecretRef: 800 + description: |- 801 + ProxySecretRef specifies the Secret containing the proxy configuration 802 + to use while communicating with the Bucket server. 803 + properties: 804 + name: 805 + description: Name of the referent. 806 + type: string 807 + required: 808 + - name 809 + type: object 810 + region: 811 + description: Region of the Endpoint where the BucketName is located 812 + in. 813 + type: string 814 + secretRef: 815 + description: |- 816 + SecretRef specifies the Secret containing authentication credentials 817 + for the Bucket. 818 + properties: 819 + name: 820 + description: Name of the referent. 821 + type: string 822 + required: 823 + - name 824 + type: object 825 + sts: 826 + description: |- 827 + STS specifies the required configuration to use a Security Token 828 + Service for fetching temporary credentials to authenticate in a 829 + Bucket provider. 830 831 - This field is only supported for the `aws` and `generic` providers. 832 - properties: 833 - certSecretRef: 834 - description: |- 835 - CertSecretRef can be given the name of a Secret containing 836 - either or both of 837 + This field is only supported for the `aws` and `generic` providers. 838 + properties: 839 + certSecretRef: 840 + description: |- 841 + CertSecretRef can be given the name of a Secret containing 842 + either or both of 843 844 - - a PEM-encoded client certificate (`tls.crt`) and private 845 - key (`tls.key`); 846 - - a PEM-encoded CA certificate (`ca.crt`) 847 + - a PEM-encoded client certificate (`tls.crt`) and private 848 + key (`tls.key`); 849 + - a PEM-encoded CA certificate (`ca.crt`) 850 851 - and whichever are supplied, will be used for connecting to the 852 - STS endpoint. The client cert and key are useful if you are 853 - authenticating with a certificate; the CA cert is useful if 854 - you are using a self-signed server certificate. The Secret must 855 - be of type `Opaque` or `kubernetes.io/tls`. 856 + and whichever are supplied, will be used for connecting to the 857 + STS endpoint. The client cert and key are useful if you are 858 + authenticating with a certificate; the CA cert is useful if 859 + you are using a self-signed server certificate. The Secret must 860 + be of type `Opaque` or `kubernetes.io/tls`. 861 862 - This field is only supported for the `ldap` provider. 863 - properties: 864 - name: 865 - description: Name of the referent. 866 - type: string 867 - required: 868 - - name 869 - type: object 870 - endpoint: 871 - description: |- 872 - Endpoint is the HTTP/S endpoint of the Security Token Service from 873 - where temporary credentials will be fetched. 874 - pattern: ^(http|https)://.*$ 875 - type: string 876 - provider: 877 - description: Provider of the Security Token Service. 878 - enum: 879 - - aws 880 - - ldap 881 - type: string 882 - secretRef: 883 - description: |- 884 - SecretRef specifies the Secret containing authentication credentials 885 - for the STS endpoint. This Secret must contain the fields `username` 886 - and `password` and is supported only for the `ldap` provider. 887 - properties: 888 - name: 889 - description: Name of the referent. 890 - type: string 891 - required: 892 - - name 893 - type: object 894 - required: 895 - - endpoint 896 - - provider 897 - type: object 898 - suspend: 899 - description: |- 900 - Suspend tells the controller to suspend the reconciliation of this 901 - Bucket. 902 - type: boolean 903 - timeout: 904 - default: 60s 905 - description: Timeout for fetch operations, defaults to 60s. 906 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 907 - type: string 908 - required: 909 - - bucketName 910 - - endpoint 911 - - interval 912 - type: object 913 - x-kubernetes-validations: 914 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 915 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 916 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 917 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 918 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 919 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 920 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 921 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 922 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 923 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 924 - status: 925 - default: 926 - observedGeneration: -1 927 - description: BucketStatus records the observed state of a Bucket. 928 - properties: 929 - artifact: 930 - description: Artifact represents the last successful Bucket reconciliation. 931 - properties: 932 - digest: 933 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 934 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 935 - type: string 936 - lastUpdateTime: 937 - description: |- 938 - LastUpdateTime is the timestamp corresponding to the last update of the 939 - Artifact. 940 - format: date-time 941 - type: string 942 - metadata: 943 - additionalProperties: 944 - type: string 945 - description: Metadata holds upstream information such as OCI annotations. 946 - type: object 947 - path: 948 - description: |- 949 - Path is the relative file path of the Artifact. It can be used to locate 950 - the file in the root of the Artifact storage on the local file system of 951 - the controller managing the Source. 952 - type: string 953 - revision: 954 - description: |- 955 - Revision is a human-readable identifier traceable in the origin source 956 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 957 - type: string 958 - size: 959 - description: Size is the number of bytes in the file. 960 - format: int64 961 - type: integer 962 - url: 963 - description: |- 964 - URL is the HTTP address of the Artifact as exposed by the controller 965 - managing the Source. It can be used to retrieve the Artifact for 966 - consumption, e.g. by another controller applying the Artifact contents. 967 - type: string 968 - required: 969 - - lastUpdateTime 970 - - path 971 - - revision 972 - - url 973 - type: object 974 - conditions: 975 - description: Conditions holds the conditions for the Bucket. 976 - items: 977 - description: Condition contains details for one aspect of the current state of this API 978 - Resource. 979 - properties: 980 - lastTransitionTime: 981 - description: |- 982 - lastTransitionTime is the last time the condition transitioned from one status to another. 983 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 984 - format: date-time 985 - type: string 986 - message: 987 - description: |- 988 - message is a human readable message indicating details about the transition. 989 - This may be an empty string. 990 - maxLength: 32768 991 - type: string 992 - observedGeneration: 993 - description: |- 994 - observedGeneration represents the .metadata.generation that the condition was set based upon. 995 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 996 - with respect to the current state of the instance. 997 - format: int64 998 - minimum: 0 999 - type: integer 1000 - reason: 1001 - description: |- 1002 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1003 - Producers of specific condition types may define expected values and meanings for this field, 1004 - and whether the values are considered a guaranteed API. 1005 - The value should be a CamelCase string. 1006 - This field may not be empty. 1007 - maxLength: 1024 1008 - minLength: 1 1009 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1010 - type: string 1011 - status: 1012 - description: status of the condition, one of True, False, Unknown. 1013 - enum: 1014 - - "True" 1015 - - "False" 1016 - - Unknown 1017 - type: string 1018 - type: 1019 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1020 - maxLength: 316 1021 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1022 - type: string 1023 - required: 1024 - - lastTransitionTime 1025 - - message 1026 - - reason 1027 - - status 1028 - - type 1029 - type: object 1030 - type: array 1031 - lastHandledReconcileAt: 1032 - description: |- 1033 - LastHandledReconcileAt holds the value of the most recent 1034 - reconcile request value, so a change of the annotation value 1035 - can be detected. 1036 - type: string 1037 - observedGeneration: 1038 - description: ObservedGeneration is the last observed generation of the Bucket object. 1039 - format: int64 1040 - type: integer 1041 - observedIgnore: 1042 - description: |- 1043 - ObservedIgnore is the observed exclusion patterns used for constructing 1044 - the source artifact. 1045 - type: string 1046 - url: 1047 - description: |- 1048 - URL is the dynamic fetch link for the latest Artifact. 1049 - It is provided on a "best effort" basis, and using the precise 1050 - BucketStatus.Artifact data is recommended. 1051 - type: string 1052 - type: object 1053 - type: object 1054 - served: true 1055 - storage: true 1056 - subresources: 1057 - status: {} 1058 - - additionalPrinterColumns: 1059 - - jsonPath: .spec.endpoint 1060 - name: Endpoint 1061 - type: string 1062 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1063 - name: Ready 1064 - type: string 1065 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1066 - name: Status 1067 - type: string 1068 - - jsonPath: .metadata.creationTimestamp 1069 - name: Age 1070 - type: date 1071 - deprecated: true 1072 - deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1 1073 - name: v1beta1 1074 - schema: 1075 - openAPIV3Schema: 1076 - description: Bucket is the Schema for the buckets API 1077 - properties: 1078 - apiVersion: 1079 - description: |- 1080 - APIVersion defines the versioned schema of this representation of an object. 1081 - Servers should convert recognized schemas to the latest internal value, and 1082 - may reject unrecognized values. 1083 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1084 + This field is only supported for the `ldap` provider. 1085 + properties: 1086 + name: 1087 + description: Name of the referent. 1088 type: string 1089 - kind: 1090 - description: |- 1091 - Kind is a string value representing the REST resource this object represents. 1092 - Servers may infer this from the endpoint the client submits requests to. 1093 - Cannot be updated. 1094 - In CamelCase. 1095 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1096 + required: 1097 + - name 1098 + type: object 1099 + endpoint: 1100 + description: |- 1101 + Endpoint is the HTTP/S endpoint of the Security Token Service from 1102 + where temporary credentials will be fetched. 1103 + pattern: ^(http|https)://.*$ 1104 + type: string 1105 + provider: 1106 + description: Provider of the Security Token Service. 1107 + enum: 1108 + - aws 1109 + - ldap 1110 + type: string 1111 + secretRef: 1112 + description: |- 1113 + SecretRef specifies the Secret containing authentication credentials 1114 + for the STS endpoint. This Secret must contain the fields `username` 1115 + and `password` and is supported only for the `ldap` provider. 1116 + properties: 1117 + name: 1118 + description: Name of the referent. 1119 type: string 1120 - metadata: 1121 - type: object 1122 - spec: 1123 - description: BucketSpec defines the desired state of an S3 compatible bucket 1124 - properties: 1125 - accessFrom: 1126 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 1127 - to this object. 1128 - properties: 1129 - namespaceSelectors: 1130 - description: |- 1131 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1132 - Items in this list are evaluated using a logical OR operation. 1133 - items: 1134 - description: |- 1135 - NamespaceSelector selects the namespaces to which this ACL applies. 1136 - An empty map of MatchLabels matches all namespaces in a cluster. 1137 - properties: 1138 - matchLabels: 1139 - additionalProperties: 1140 - type: string 1141 - description: |- 1142 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1143 - map is equivalent to an element of matchExpressions, whose key field is "key", the 1144 - operator is "In", and the values array contains only "value". The requirements are ANDed. 1145 - type: object 1146 - type: object 1147 - type: array 1148 - required: 1149 - - namespaceSelectors 1150 - type: object 1151 - bucketName: 1152 - description: The bucket name. 1153 - type: string 1154 - endpoint: 1155 - description: The bucket endpoint address. 1156 - type: string 1157 - ignore: 1158 - description: |- 1159 - Ignore overrides the set of excluded patterns in the .sourceignore format 1160 - (which is the same as .gitignore). If not provided, a default will be used, 1161 - consult the documentation for your version to find out what those are. 1162 - type: string 1163 - insecure: 1164 - description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. 1165 - type: boolean 1166 - interval: 1167 - description: The interval at which to check for bucket updates. 1168 - type: string 1169 - provider: 1170 - default: generic 1171 - description: The S3 compatible storage provider name, default ('generic'). 1172 - enum: 1173 - - generic 1174 - - aws 1175 - - gcp 1176 - type: string 1177 - region: 1178 - description: The bucket region. 1179 - type: string 1180 - secretRef: 1181 - description: |- 1182 - The name of the secret containing authentication credentials 1183 - for the Bucket. 1184 - properties: 1185 - name: 1186 - description: Name of the referent. 1187 - type: string 1188 - required: 1189 - - name 1190 - type: object 1191 - suspend: 1192 - description: This flag tells the controller to suspend the reconciliation of this source. 1193 - type: boolean 1194 - timeout: 1195 - default: 60s 1196 - description: The timeout for download operations, defaults to 60s. 1197 - type: string 1198 - required: 1199 - - bucketName 1200 - - endpoint 1201 - - interval 1202 - type: object 1203 + required: 1204 + - name 1205 + type: object 1206 + required: 1207 + - endpoint 1208 + - provider 1209 + type: object 1210 + suspend: 1211 + description: |- 1212 + Suspend tells the controller to suspend the reconciliation of this 1213 + Bucket. 1214 + type: boolean 1215 + timeout: 1216 + default: 60s 1217 + description: Timeout for fetch operations, defaults to 60s. 1218 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1219 + type: string 1220 + required: 1221 + - bucketName 1222 + - endpoint 1223 + - interval 1224 + type: object 1225 + x-kubernetes-validations: 1226 + - message: STS configuration is only supported for the 'aws' and 'generic' 1227 + Bucket providers 1228 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 1229 + - message: '''aws'' is the only supported STS provider for the ''aws'' 1230 + Bucket provider' 1231 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 1232 + == 'aws' 1233 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 1234 + Bucket provider' 1235 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 1236 + == 'ldap' 1237 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 1238 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 1239 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 1240 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 1241 + status: 1242 + default: 1243 + observedGeneration: -1 1244 + description: BucketStatus records the observed state of a Bucket. 1245 + properties: 1246 + artifact: 1247 + description: Artifact represents the last successful Bucket reconciliation. 1248 + properties: 1249 + digest: 1250 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1251 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1252 + type: string 1253 + lastUpdateTime: 1254 + description: |- 1255 + LastUpdateTime is the timestamp corresponding to the last update of the 1256 + Artifact. 1257 + format: date-time 1258 + type: string 1259 + metadata: 1260 + additionalProperties: 1261 + type: string 1262 + description: Metadata holds upstream information such as OCI annotations. 1263 + type: object 1264 + path: 1265 + description: |- 1266 + Path is the relative file path of the Artifact. It can be used to locate 1267 + the file in the root of the Artifact storage on the local file system of 1268 + the controller managing the Source. 1269 + type: string 1270 + revision: 1271 + description: |- 1272 + Revision is a human-readable identifier traceable in the origin source 1273 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1274 + type: string 1275 + size: 1276 + description: Size is the number of bytes in the file. 1277 + format: int64 1278 + type: integer 1279 + url: 1280 + description: |- 1281 + URL is the HTTP address of the Artifact as exposed by the controller 1282 + managing the Source. It can be used to retrieve the Artifact for 1283 + consumption, e.g. by another controller applying the Artifact contents. 1284 + type: string 1285 + required: 1286 + - lastUpdateTime 1287 + - path 1288 + - revision 1289 + - url 1290 + type: object 1291 + conditions: 1292 + description: Conditions holds the conditions for the Bucket. 1293 + items: 1294 + description: Condition contains details for one aspect of the current 1295 + state of this API Resource. 1296 + properties: 1297 + lastTransitionTime: 1298 + description: |- 1299 + lastTransitionTime is the last time the condition transitioned from one status to another. 1300 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1301 + format: date-time 1302 + type: string 1303 + message: 1304 + description: |- 1305 + message is a human readable message indicating details about the transition. 1306 + This may be an empty string. 1307 + maxLength: 32768 1308 + type: string 1309 + observedGeneration: 1310 + description: |- 1311 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1312 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1313 + with respect to the current state of the instance. 1314 + format: int64 1315 + minimum: 0 1316 + type: integer 1317 + reason: 1318 + description: |- 1319 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1320 + Producers of specific condition types may define expected values and meanings for this field, 1321 + and whether the values are considered a guaranteed API. 1322 + The value should be a CamelCase string. 1323 + This field may not be empty. 1324 + maxLength: 1024 1325 + minLength: 1 1326 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1327 + type: string 1328 status: 1329 - default: 1330 - observedGeneration: -1 1331 - description: BucketStatus defines the observed state of a bucket 1332 - properties: 1333 - artifact: 1334 - description: Artifact represents the output of the last successful Bucket sync. 1335 - properties: 1336 - checksum: 1337 - description: Checksum is the SHA256 checksum of the artifact. 1338 - type: string 1339 - lastUpdateTime: 1340 - description: |- 1341 - LastUpdateTime is the timestamp corresponding to the last update of this 1342 - artifact. 1343 - format: date-time 1344 - type: string 1345 - path: 1346 - description: Path is the relative file path of this artifact. 1347 - type: string 1348 - revision: 1349 - description: |- 1350 - Revision is a human readable identifier traceable in the origin source 1351 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 1352 - chart version, etc. 1353 - type: string 1354 - url: 1355 - description: URL is the HTTP address of this artifact. 1356 - type: string 1357 - required: 1358 - - lastUpdateTime 1359 - - path 1360 - - url 1361 - type: object 1362 - conditions: 1363 - description: Conditions holds the conditions for the Bucket. 1364 - items: 1365 - description: Condition contains details for one aspect of the current state of this API 1366 - Resource. 1367 - properties: 1368 - lastTransitionTime: 1369 - description: |- 1370 - lastTransitionTime is the last time the condition transitioned from one status to another. 1371 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1372 - format: date-time 1373 - type: string 1374 - message: 1375 - description: |- 1376 - message is a human readable message indicating details about the transition. 1377 - This may be an empty string. 1378 - maxLength: 32768 1379 - type: string 1380 - observedGeneration: 1381 - description: |- 1382 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1383 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1384 - with respect to the current state of the instance. 1385 - format: int64 1386 - minimum: 0 1387 - type: integer 1388 - reason: 1389 - description: |- 1390 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1391 - Producers of specific condition types may define expected values and meanings for this field, 1392 - and whether the values are considered a guaranteed API. 1393 - The value should be a CamelCase string. 1394 - This field may not be empty. 1395 - maxLength: 1024 1396 - minLength: 1 1397 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1398 - type: string 1399 - status: 1400 - description: status of the condition, one of True, False, Unknown. 1401 - enum: 1402 - - "True" 1403 - - "False" 1404 - - Unknown 1405 - type: string 1406 - type: 1407 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1408 - maxLength: 316 1409 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1410 - type: string 1411 - required: 1412 - - lastTransitionTime 1413 - - message 1414 - - reason 1415 - - status 1416 - - type 1417 - type: object 1418 - type: array 1419 - lastHandledReconcileAt: 1420 - description: |- 1421 - LastHandledReconcileAt holds the value of the most recent 1422 - reconcile request value, so a change of the annotation value 1423 - can be detected. 1424 - type: string 1425 - observedGeneration: 1426 - description: ObservedGeneration is the last observed generation. 1427 - format: int64 1428 - type: integer 1429 - url: 1430 - description: URL is the download link for the artifact output of the last Bucket sync. 1431 - type: string 1432 - type: object 1433 + description: status of the condition, one of True, False, Unknown. 1434 + enum: 1435 + - "True" 1436 + - "False" 1437 + - Unknown 1438 + type: string 1439 + type: 1440 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1441 + maxLength: 316 1442 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1443 + type: string 1444 + required: 1445 + - lastTransitionTime 1446 + - message 1447 + - reason 1448 + - status 1449 + - type 1450 + type: object 1451 + type: array 1452 + lastHandledReconcileAt: 1453 + description: |- 1454 + LastHandledReconcileAt holds the value of the most recent 1455 + reconcile request value, so a change of the annotation value 1456 + can be detected. 1457 + type: string 1458 + observedGeneration: 1459 + description: ObservedGeneration is the last observed generation of 1460 + the Bucket object. 1461 + format: int64 1462 + type: integer 1463 + observedIgnore: 1464 + description: |- 1465 + ObservedIgnore is the observed exclusion patterns used for constructing 1466 + the source artifact. 1467 + type: string 1468 + url: 1469 + description: |- 1470 + URL is the dynamic fetch link for the latest Artifact. 1471 + It is provided on a "best effort" basis, and using the precise 1472 + BucketStatus.Artifact data is recommended. 1473 + type: string 1474 + type: object 1475 + type: object 1476 + served: true 1477 + storage: true 1478 + subresources: 1479 + status: {} 1480 + - additionalPrinterColumns: 1481 + - jsonPath: .spec.endpoint 1482 + name: Endpoint 1483 + type: string 1484 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1485 + name: Ready 1486 + type: string 1487 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1488 + name: Status 1489 + type: string 1490 + - jsonPath: .metadata.creationTimestamp 1491 + name: Age 1492 + type: date 1493 + deprecated: true 1494 + deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1 1495 + name: v1beta1 1496 + schema: 1497 + openAPIV3Schema: 1498 + description: Bucket is the Schema for the buckets API 1499 + properties: 1500 + apiVersion: 1501 + description: |- 1502 + APIVersion defines the versioned schema of this representation of an object. 1503 + Servers should convert recognized schemas to the latest internal value, and 1504 + may reject unrecognized values. 1505 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1506 + type: string 1507 + kind: 1508 + description: |- 1509 + Kind is a string value representing the REST resource this object represents. 1510 + Servers may infer this from the endpoint the client submits requests to. 1511 + Cannot be updated. 1512 + In CamelCase. 1513 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1514 + type: string 1515 + metadata: 1516 + type: object 1517 + spec: 1518 + description: BucketSpec defines the desired state of an S3 compatible 1519 + bucket 1520 + properties: 1521 + accessFrom: 1522 + description: AccessFrom defines an Access Control List for allowing 1523 + cross-namespace references to this object. 1524 + properties: 1525 + namespaceSelectors: 1526 + description: |- 1527 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1528 + Items in this list are evaluated using a logical OR operation. 1529 + items: 1530 + description: |- 1531 + NamespaceSelector selects the namespaces to which this ACL applies. 1532 + An empty map of MatchLabels matches all namespaces in a cluster. 1533 + properties: 1534 + matchLabels: 1535 + additionalProperties: 1536 + type: string 1537 + description: |- 1538 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1539 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1540 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1541 + type: object 1542 + type: object 1543 + type: array 1544 + required: 1545 + - namespaceSelectors 1546 type: object 1547 - served: true 1548 - storage: false 1549 - subresources: 1550 - status: {} 1551 - - additionalPrinterColumns: 1552 - - jsonPath: .spec.endpoint 1553 - name: Endpoint 1554 - type: string 1555 - - jsonPath: .metadata.creationTimestamp 1556 - name: Age 1557 - type: date 1558 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1559 - name: Ready 1560 - type: string 1561 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1562 - name: Status 1563 - type: string 1564 - deprecated: true 1565 - deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1566 - name: v1beta2 1567 - schema: 1568 - openAPIV3Schema: 1569 - description: Bucket is the Schema for the buckets API. 1570 + bucketName: 1571 + description: The bucket name. 1572 + type: string 1573 + endpoint: 1574 + description: The bucket endpoint address. 1575 + type: string 1576 + ignore: 1577 + description: |- 1578 + Ignore overrides the set of excluded patterns in the .sourceignore format 1579 + (which is the same as .gitignore). If not provided, a default will be used, 1580 + consult the documentation for your version to find out what those are. 1581 + type: string 1582 + insecure: 1583 + description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. 1584 + type: boolean 1585 + interval: 1586 + description: The interval at which to check for bucket updates. 1587 + type: string 1588 + provider: 1589 + default: generic 1590 + description: The S3 compatible storage provider name, default ('generic'). 1591 + enum: 1592 + - generic 1593 + - aws 1594 + - gcp 1595 + type: string 1596 + region: 1597 + description: The bucket region. 1598 + type: string 1599 + secretRef: 1600 + description: |- 1601 + The name of the secret containing authentication credentials 1602 + for the Bucket. 1603 properties: 1604 - apiVersion: 1605 - description: |- 1606 - APIVersion defines the versioned schema of this representation of an object. 1607 - Servers should convert recognized schemas to the latest internal value, and 1608 - may reject unrecognized values. 1609 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1610 - type: string 1611 - kind: 1612 - description: |- 1613 - Kind is a string value representing the REST resource this object represents. 1614 - Servers may infer this from the endpoint the client submits requests to. 1615 - Cannot be updated. 1616 - In CamelCase. 1617 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1618 - type: string 1619 - metadata: 1620 - type: object 1621 - spec: 1622 - description: |- 1623 - BucketSpec specifies the required configuration to produce an Artifact for 1624 - an object storage bucket. 1625 - properties: 1626 - accessFrom: 1627 - description: |- 1628 - AccessFrom specifies an Access Control List for allowing cross-namespace 1629 - references to this object. 1630 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1631 - properties: 1632 - namespaceSelectors: 1633 - description: |- 1634 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1635 - Items in this list are evaluated using a logical OR operation. 1636 - items: 1637 - description: |- 1638 - NamespaceSelector selects the namespaces to which this ACL applies. 1639 - An empty map of MatchLabels matches all namespaces in a cluster. 1640 - properties: 1641 - matchLabels: 1642 - additionalProperties: 1643 - type: string 1644 - description: |- 1645 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1646 - map is equivalent to an element of matchExpressions, whose key field is "key", the 1647 - operator is "In", and the values array contains only "value". The requirements are ANDed. 1648 - type: object 1649 - type: object 1650 - type: array 1651 - required: 1652 - - namespaceSelectors 1653 - type: object 1654 - bucketName: 1655 - description: BucketName is the name of the object storage bucket. 1656 - type: string 1657 - certSecretRef: 1658 - description: |- 1659 - CertSecretRef can be given the name of a Secret containing 1660 - either or both of 1661 + name: 1662 + description: Name of the referent. 1663 + type: string 1664 + required: 1665 + - name 1666 + type: object 1667 + suspend: 1668 + description: This flag tells the controller to suspend the reconciliation 1669 + of this source. 1670 + type: boolean 1671 + timeout: 1672 + default: 60s 1673 + description: The timeout for download operations, defaults to 60s. 1674 + type: string 1675 + required: 1676 + - bucketName 1677 + - endpoint 1678 + - interval 1679 + type: object 1680 + status: 1681 + default: 1682 + observedGeneration: -1 1683 + description: BucketStatus defines the observed state of a bucket 1684 + properties: 1685 + artifact: 1686 + description: Artifact represents the output of the last successful 1687 + Bucket sync. 1688 + properties: 1689 + checksum: 1690 + description: Checksum is the SHA256 checksum of the artifact. 1691 + type: string 1692 + lastUpdateTime: 1693 + description: |- 1694 + LastUpdateTime is the timestamp corresponding to the last update of this 1695 + artifact. 1696 + format: date-time 1697 + type: string 1698 + path: 1699 + description: Path is the relative file path of this artifact. 1700 + type: string 1701 + revision: 1702 + description: |- 1703 + Revision is a human readable identifier traceable in the origin source 1704 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 1705 + chart version, etc. 1706 + type: string 1707 + url: 1708 + description: URL is the HTTP address of this artifact. 1709 + type: string 1710 + required: 1711 + - lastUpdateTime 1712 + - path 1713 + - url 1714 + type: object 1715 + conditions: 1716 + description: Conditions holds the conditions for the Bucket. 1717 + items: 1718 + description: Condition contains details for one aspect of the current 1719 + state of this API Resource. 1720 + properties: 1721 + lastTransitionTime: 1722 + description: |- 1723 + lastTransitionTime is the last time the condition transitioned from one status to another. 1724 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1725 + format: date-time 1726 + type: string 1727 + message: 1728 + description: |- 1729 + message is a human readable message indicating details about the transition. 1730 + This may be an empty string. 1731 + maxLength: 32768 1732 + type: string 1733 + observedGeneration: 1734 + description: |- 1735 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1736 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1737 + with respect to the current state of the instance. 1738 + format: int64 1739 + minimum: 0 1740 + type: integer 1741 + reason: 1742 + description: |- 1743 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1744 + Producers of specific condition types may define expected values and meanings for this field, 1745 + and whether the values are considered a guaranteed API. 1746 + The value should be a CamelCase string. 1747 + This field may not be empty. 1748 + maxLength: 1024 1749 + minLength: 1 1750 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1751 + type: string 1752 + status: 1753 + description: status of the condition, one of True, False, Unknown. 1754 + enum: 1755 + - "True" 1756 + - "False" 1757 + - Unknown 1758 + type: string 1759 + type: 1760 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1761 + maxLength: 316 1762 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1763 + type: string 1764 + required: 1765 + - lastTransitionTime 1766 + - message 1767 + - reason 1768 + - status 1769 + - type 1770 + type: object 1771 + type: array 1772 + lastHandledReconcileAt: 1773 + description: |- 1774 + LastHandledReconcileAt holds the value of the most recent 1775 + reconcile request value, so a change of the annotation value 1776 + can be detected. 1777 + type: string 1778 + observedGeneration: 1779 + description: ObservedGeneration is the last observed generation. 1780 + format: int64 1781 + type: integer 1782 + url: 1783 + description: URL is the download link for the artifact output of the 1784 + last Bucket sync. 1785 + type: string 1786 + type: object 1787 + type: object 1788 + served: true 1789 + storage: false 1790 + subresources: 1791 + status: {} 1792 + - additionalPrinterColumns: 1793 + - jsonPath: .spec.endpoint 1794 + name: Endpoint 1795 + type: string 1796 + - jsonPath: .metadata.creationTimestamp 1797 + name: Age 1798 + type: date 1799 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1800 + name: Ready 1801 + type: string 1802 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1803 + name: Status 1804 + type: string 1805 + deprecated: true 1806 + deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1807 + name: v1beta2 1808 + schema: 1809 + openAPIV3Schema: 1810 + description: Bucket is the Schema for the buckets API. 1811 + properties: 1812 + apiVersion: 1813 + description: |- 1814 + APIVersion defines the versioned schema of this representation of an object. 1815 + Servers should convert recognized schemas to the latest internal value, and 1816 + may reject unrecognized values. 1817 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1818 + type: string 1819 + kind: 1820 + description: |- 1821 + Kind is a string value representing the REST resource this object represents. 1822 + Servers may infer this from the endpoint the client submits requests to. 1823 + Cannot be updated. 1824 + In CamelCase. 1825 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1826 + type: string 1827 + metadata: 1828 + type: object 1829 + spec: 1830 + description: |- 1831 + BucketSpec specifies the required configuration to produce an Artifact for 1832 + an object storage bucket. 1833 + properties: 1834 + accessFrom: 1835 + description: |- 1836 + AccessFrom specifies an Access Control List for allowing cross-namespace 1837 + references to this object. 1838 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1839 + properties: 1840 + namespaceSelectors: 1841 + description: |- 1842 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1843 + Items in this list are evaluated using a logical OR operation. 1844 + items: 1845 + description: |- 1846 + NamespaceSelector selects the namespaces to which this ACL applies. 1847 + An empty map of MatchLabels matches all namespaces in a cluster. 1848 + properties: 1849 + matchLabels: 1850 + additionalProperties: 1851 + type: string 1852 + description: |- 1853 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1854 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1855 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1856 + type: object 1857 + type: object 1858 + type: array 1859 + required: 1860 + - namespaceSelectors 1861 + type: object 1862 + bucketName: 1863 + description: BucketName is the name of the object storage bucket. 1864 + type: string 1865 + certSecretRef: 1866 + description: |- 1867 + CertSecretRef can be given the name of a Secret containing 1868 + either or both of 1869 1870 - - a PEM-encoded client certificate (`tls.crt`) and private 1871 - key (`tls.key`); 1872 - - a PEM-encoded CA certificate (`ca.crt`) 1873 + - a PEM-encoded client certificate (`tls.crt`) and private 1874 + key (`tls.key`); 1875 + - a PEM-encoded CA certificate (`ca.crt`) 1876 1877 - and whichever are supplied, will be used for connecting to the 1878 - bucket. The client cert and key are useful if you are 1879 - authenticating with a certificate; the CA cert is useful if 1880 - you are using a self-signed server certificate. The Secret must 1881 - be of type `Opaque` or `kubernetes.io/tls`. 1882 + and whichever are supplied, will be used for connecting to the 1883 + bucket. The client cert and key are useful if you are 1884 + authenticating with a certificate; the CA cert is useful if 1885 + you are using a self-signed server certificate. The Secret must 1886 + be of type `Opaque` or `kubernetes.io/tls`. 1887 1888 - This field is only supported for the `generic` provider. 1889 - properties: 1890 - name: 1891 - description: Name of the referent. 1892 - type: string 1893 - required: 1894 - - name 1895 - type: object 1896 - endpoint: 1897 - description: Endpoint is the object storage address the BucketName is located at. 1898 - type: string 1899 - ignore: 1900 - description: |- 1901 - Ignore overrides the set of excluded patterns in the .sourceignore format 1902 - (which is the same as .gitignore). If not provided, a default will be used, 1903 - consult the documentation for your version to find out what those are. 1904 - type: string 1905 - insecure: 1906 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1907 - type: boolean 1908 - interval: 1909 - description: |- 1910 - Interval at which the Bucket Endpoint is checked for updates. 1911 - This interval is approximate and may be subject to jitter to ensure 1912 - efficient use of resources. 1913 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1914 - type: string 1915 - prefix: 1916 - description: Prefix to use for server-side filtering of files in the Bucket. 1917 - type: string 1918 - provider: 1919 - default: generic 1920 - description: |- 1921 - Provider of the object storage bucket. 1922 - Defaults to 'generic', which expects an S3 (API) compatible object 1923 - storage. 1924 - enum: 1925 - - generic 1926 - - aws 1927 - - gcp 1928 - - azure 1929 - type: string 1930 - proxySecretRef: 1931 - description: |- 1932 - ProxySecretRef specifies the Secret containing the proxy configuration 1933 - to use while communicating with the Bucket server. 1934 - properties: 1935 - name: 1936 - description: Name of the referent. 1937 - type: string 1938 - required: 1939 - - name 1940 - type: object 1941 - region: 1942 - description: Region of the Endpoint where the BucketName is located in. 1943 - type: string 1944 - secretRef: 1945 - description: |- 1946 - SecretRef specifies the Secret containing authentication credentials 1947 - for the Bucket. 1948 - properties: 1949 - name: 1950 - description: Name of the referent. 1951 - type: string 1952 - required: 1953 - - name 1954 - type: object 1955 - sts: 1956 - description: |- 1957 - STS specifies the required configuration to use a Security Token 1958 - Service for fetching temporary credentials to authenticate in a 1959 - Bucket provider. 1960 + This field is only supported for the `generic` provider. 1961 + properties: 1962 + name: 1963 + description: Name of the referent. 1964 + type: string 1965 + required: 1966 + - name 1967 + type: object 1968 + endpoint: 1969 + description: Endpoint is the object storage address the BucketName 1970 + is located at. 1971 + type: string 1972 + ignore: 1973 + description: |- 1974 + Ignore overrides the set of excluded patterns in the .sourceignore format 1975 + (which is the same as .gitignore). If not provided, a default will be used, 1976 + consult the documentation for your version to find out what those are. 1977 + type: string 1978 + insecure: 1979 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1980 + type: boolean 1981 + interval: 1982 + description: |- 1983 + Interval at which the Bucket Endpoint is checked for updates. 1984 + This interval is approximate and may be subject to jitter to ensure 1985 + efficient use of resources. 1986 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1987 + type: string 1988 + prefix: 1989 + description: Prefix to use for server-side filtering of files in the 1990 + Bucket. 1991 + type: string 1992 + provider: 1993 + default: generic 1994 + description: |- 1995 + Provider of the object storage bucket. 1996 + Defaults to 'generic', which expects an S3 (API) compatible object 1997 + storage. 1998 + enum: 1999 + - generic 2000 + - aws 2001 + - gcp 2002 + - azure 2003 + type: string 2004 + proxySecretRef: 2005 + description: |- 2006 + ProxySecretRef specifies the Secret containing the proxy configuration 2007 + to use while communicating with the Bucket server. 2008 + properties: 2009 + name: 2010 + description: Name of the referent. 2011 + type: string 2012 + required: 2013 + - name 2014 + type: object 2015 + region: 2016 + description: Region of the Endpoint where the BucketName is located 2017 + in. 2018 + type: string 2019 + secretRef: 2020 + description: |- 2021 + SecretRef specifies the Secret containing authentication credentials 2022 + for the Bucket. 2023 + properties: 2024 + name: 2025 + description: Name of the referent. 2026 + type: string 2027 + required: 2028 + - name 2029 + type: object 2030 + sts: 2031 + description: |- 2032 + STS specifies the required configuration to use a Security Token 2033 + Service for fetching temporary credentials to authenticate in a 2034 + Bucket provider. 2035 2036 - This field is only supported for the `aws` and `generic` providers. 2037 - properties: 2038 - certSecretRef: 2039 - description: |- 2040 - CertSecretRef can be given the name of a Secret containing 2041 - either or both of 2042 + This field is only supported for the `aws` and `generic` providers. 2043 + properties: 2044 + certSecretRef: 2045 + description: |- 2046 + CertSecretRef can be given the name of a Secret containing 2047 + either or both of 2048 2049 - - a PEM-encoded client certificate (`tls.crt`) and private 2050 - key (`tls.key`); 2051 - - a PEM-encoded CA certificate (`ca.crt`) 2052 + - a PEM-encoded client certificate (`tls.crt`) and private 2053 + key (`tls.key`); 2054 + - a PEM-encoded CA certificate (`ca.crt`) 2055 2056 - and whichever are supplied, will be used for connecting to the 2057 - STS endpoint. The client cert and key are useful if you are 2058 - authenticating with a certificate; the CA cert is useful if 2059 - you are using a self-signed server certificate. The Secret must 2060 - be of type `Opaque` or `kubernetes.io/tls`. 2061 + and whichever are supplied, will be used for connecting to the 2062 + STS endpoint. The client cert and key are useful if you are 2063 + authenticating with a certificate; the CA cert is useful if 2064 + you are using a self-signed server certificate. The Secret must 2065 + be of type `Opaque` or `kubernetes.io/tls`. 2066 2067 - This field is only supported for the `ldap` provider. 2068 - properties: 2069 - name: 2070 - description: Name of the referent. 2071 - type: string 2072 - required: 2073 - - name 2074 - type: object 2075 - endpoint: 2076 - description: |- 2077 - Endpoint is the HTTP/S endpoint of the Security Token Service from 2078 - where temporary credentials will be fetched. 2079 - pattern: ^(http|https)://.*$ 2080 - type: string 2081 - provider: 2082 - description: Provider of the Security Token Service. 2083 - enum: 2084 - - aws 2085 - - ldap 2086 - type: string 2087 - secretRef: 2088 - description: |- 2089 - SecretRef specifies the Secret containing authentication credentials 2090 - for the STS endpoint. This Secret must contain the fields `username` 2091 - and `password` and is supported only for the `ldap` provider. 2092 - properties: 2093 - name: 2094 - description: Name of the referent. 2095 - type: string 2096 - required: 2097 - - name 2098 - type: object 2099 - required: 2100 - - endpoint 2101 - - provider 2102 - type: object 2103 - suspend: 2104 - description: |- 2105 - Suspend tells the controller to suspend the reconciliation of this 2106 - Bucket. 2107 - type: boolean 2108 - timeout: 2109 - default: 60s 2110 - description: Timeout for fetch operations, defaults to 60s. 2111 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2112 - type: string 2113 - required: 2114 - - bucketName 2115 - - endpoint 2116 - - interval 2117 - type: object 2118 - x-kubernetes-validations: 2119 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 2120 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 2121 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 2122 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 2123 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 2124 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 2125 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 2126 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 2127 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 2128 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 2129 - status: 2130 - default: 2131 - observedGeneration: -1 2132 - description: BucketStatus records the observed state of a Bucket. 2133 - properties: 2134 - artifact: 2135 - description: Artifact represents the last successful Bucket reconciliation. 2136 - properties: 2137 - digest: 2138 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2139 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2140 - type: string 2141 - lastUpdateTime: 2142 - description: |- 2143 - LastUpdateTime is the timestamp corresponding to the last update of the 2144 - Artifact. 2145 - format: date-time 2146 - type: string 2147 - metadata: 2148 - additionalProperties: 2149 - type: string 2150 - description: Metadata holds upstream information such as OCI annotations. 2151 - type: object 2152 - path: 2153 - description: |- 2154 - Path is the relative file path of the Artifact. It can be used to locate 2155 - the file in the root of the Artifact storage on the local file system of 2156 - the controller managing the Source. 2157 - type: string 2158 - revision: 2159 - description: |- 2160 - Revision is a human-readable identifier traceable in the origin source 2161 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2162 - type: string 2163 - size: 2164 - description: Size is the number of bytes in the file. 2165 - format: int64 2166 - type: integer 2167 - url: 2168 - description: |- 2169 - URL is the HTTP address of the Artifact as exposed by the controller 2170 - managing the Source. It can be used to retrieve the Artifact for 2171 - consumption, e.g. by another controller applying the Artifact contents. 2172 - type: string 2173 - required: 2174 - - lastUpdateTime 2175 - - path 2176 - - revision 2177 - - url 2178 - type: object 2179 - conditions: 2180 - description: Conditions holds the conditions for the Bucket. 2181 - items: 2182 - description: Condition contains details for one aspect of the current state of this API 2183 - Resource. 2184 - properties: 2185 - lastTransitionTime: 2186 - description: |- 2187 - lastTransitionTime is the last time the condition transitioned from one status to another. 2188 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2189 - format: date-time 2190 - type: string 2191 - message: 2192 - description: |- 2193 - message is a human readable message indicating details about the transition. 2194 - This may be an empty string. 2195 - maxLength: 32768 2196 - type: string 2197 - observedGeneration: 2198 - description: |- 2199 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2200 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2201 - with respect to the current state of the instance. 2202 - format: int64 2203 - minimum: 0 2204 - type: integer 2205 - reason: 2206 - description: |- 2207 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2208 - Producers of specific condition types may define expected values and meanings for this field, 2209 - and whether the values are considered a guaranteed API. 2210 - The value should be a CamelCase string. 2211 - This field may not be empty. 2212 - maxLength: 1024 2213 - minLength: 1 2214 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2215 - type: string 2216 - status: 2217 - description: status of the condition, one of True, False, Unknown. 2218 - enum: 2219 - - "True" 2220 - - "False" 2221 - - Unknown 2222 - type: string 2223 - type: 2224 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 2225 - maxLength: 316 2226 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2227 - type: string 2228 - required: 2229 - - lastTransitionTime 2230 - - message 2231 - - reason 2232 - - status 2233 - - type 2234 - type: object 2235 - type: array 2236 - lastHandledReconcileAt: 2237 - description: |- 2238 - LastHandledReconcileAt holds the value of the most recent 2239 - reconcile request value, so a change of the annotation value 2240 - can be detected. 2241 - type: string 2242 - observedGeneration: 2243 - description: ObservedGeneration is the last observed generation of the Bucket object. 2244 - format: int64 2245 - type: integer 2246 - observedIgnore: 2247 - description: |- 2248 - ObservedIgnore is the observed exclusion patterns used for constructing 2249 - the source artifact. 2250 - type: string 2251 - url: 2252 - description: |- 2253 - URL is the dynamic fetch link for the latest Artifact. 2254 - It is provided on a "best effort" basis, and using the precise 2255 - BucketStatus.Artifact data is recommended. 2256 - type: string 2257 - type: object 2258 + This field is only supported for the `ldap` provider. 2259 + properties: 2260 + name: 2261 + description: Name of the referent. 2262 + type: string 2263 + required: 2264 + - name 2265 + type: object 2266 + endpoint: 2267 + description: |- 2268 + Endpoint is the HTTP/S endpoint of the Security Token Service from 2269 + where temporary credentials will be fetched. 2270 + pattern: ^(http|https)://.*$ 2271 + type: string 2272 + provider: 2273 + description: Provider of the Security Token Service. 2274 + enum: 2275 + - aws 2276 + - ldap 2277 + type: string 2278 + secretRef: 2279 + description: |- 2280 + SecretRef specifies the Secret containing authentication credentials 2281 + for the STS endpoint. This Secret must contain the fields `username` 2282 + and `password` and is supported only for the `ldap` provider. 2283 + properties: 2284 + name: 2285 + description: Name of the referent. 2286 + type: string 2287 + required: 2288 + - name 2289 + type: object 2290 + required: 2291 + - endpoint 2292 + - provider 2293 + type: object 2294 + suspend: 2295 + description: |- 2296 + Suspend tells the controller to suspend the reconciliation of this 2297 + Bucket. 2298 + type: boolean 2299 + timeout: 2300 + default: 60s 2301 + description: Timeout for fetch operations, defaults to 60s. 2302 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2303 + type: string 2304 + required: 2305 + - bucketName 2306 + - endpoint 2307 + - interval 2308 + type: object 2309 + x-kubernetes-validations: 2310 + - message: STS configuration is only supported for the 'aws' and 'generic' 2311 + Bucket providers 2312 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 2313 + - message: '''aws'' is the only supported STS provider for the ''aws'' 2314 + Bucket provider' 2315 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 2316 + == 'aws' 2317 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 2318 + Bucket provider' 2319 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 2320 + == 'ldap' 2321 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 2322 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 2323 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 2324 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 2325 + status: 2326 + default: 2327 + observedGeneration: -1 2328 + description: BucketStatus records the observed state of a Bucket. 2329 + properties: 2330 + artifact: 2331 + description: Artifact represents the last successful Bucket reconciliation. 2332 + properties: 2333 + digest: 2334 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2335 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2336 + type: string 2337 + lastUpdateTime: 2338 + description: |- 2339 + LastUpdateTime is the timestamp corresponding to the last update of the 2340 + Artifact. 2341 + format: date-time 2342 + type: string 2343 + metadata: 2344 + additionalProperties: 2345 + type: string 2346 + description: Metadata holds upstream information such as OCI annotations. 2347 + type: object 2348 + path: 2349 + description: |- 2350 + Path is the relative file path of the Artifact. It can be used to locate 2351 + the file in the root of the Artifact storage on the local file system of 2352 + the controller managing the Source. 2353 + type: string 2354 + revision: 2355 + description: |- 2356 + Revision is a human-readable identifier traceable in the origin source 2357 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2358 + type: string 2359 + size: 2360 + description: Size is the number of bytes in the file. 2361 + format: int64 2362 + type: integer 2363 + url: 2364 + description: |- 2365 + URL is the HTTP address of the Artifact as exposed by the controller 2366 + managing the Source. It can be used to retrieve the Artifact for 2367 + consumption, e.g. by another controller applying the Artifact contents. 2368 + type: string 2369 + required: 2370 + - lastUpdateTime 2371 + - path 2372 + - revision 2373 + - url 2374 type: object 2375 - served: true 2376 - storage: false 2377 - subresources: 2378 - status: {} 2379 + conditions: 2380 + description: Conditions holds the conditions for the Bucket. 2381 + items: 2382 + description: Condition contains details for one aspect of the current 2383 + state of this API Resource. 2384 + properties: 2385 + lastTransitionTime: 2386 + description: |- 2387 + lastTransitionTime is the last time the condition transitioned from one status to another. 2388 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2389 + format: date-time 2390 + type: string 2391 + message: 2392 + description: |- 2393 + message is a human readable message indicating details about the transition. 2394 + This may be an empty string. 2395 + maxLength: 32768 2396 + type: string 2397 + observedGeneration: 2398 + description: |- 2399 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2400 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2401 + with respect to the current state of the instance. 2402 + format: int64 2403 + minimum: 0 2404 + type: integer 2405 + reason: 2406 + description: |- 2407 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2408 + Producers of specific condition types may define expected values and meanings for this field, 2409 + and whether the values are considered a guaranteed API. 2410 + The value should be a CamelCase string. 2411 + This field may not be empty. 2412 + maxLength: 1024 2413 + minLength: 1 2414 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2415 + type: string 2416 + status: 2417 + description: status of the condition, one of True, False, Unknown. 2418 + enum: 2419 + - "True" 2420 + - "False" 2421 + - Unknown 2422 + type: string 2423 + type: 2424 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2425 + maxLength: 316 2426 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2427 + type: string 2428 + required: 2429 + - lastTransitionTime 2430 + - message 2431 + - reason 2432 + - status 2433 + - type 2434 + type: object 2435 + type: array 2436 + lastHandledReconcileAt: 2437 + description: |- 2438 + LastHandledReconcileAt holds the value of the most recent 2439 + reconcile request value, so a change of the annotation value 2440 + can be detected. 2441 + type: string 2442 + observedGeneration: 2443 + description: ObservedGeneration is the last observed generation of 2444 + the Bucket object. 2445 + format: int64 2446 + type: integer 2447 + observedIgnore: 2448 + description: |- 2449 + ObservedIgnore is the observed exclusion patterns used for constructing 2450 + the source artifact. 2451 + type: string 2452 + url: 2453 + description: |- 2454 + URL is the dynamic fetch link for the latest Artifact. 2455 + It is provided on a "best effort" basis, and using the precise 2456 + BucketStatus.Artifact data is recommended. 2457 + type: string 2458 + type: object 2459 + type: object 2460 + served: true 2461 + storage: false 2462 + subresources: 2463 + status: {} 2464 --- 2465 apiVersion: apiextensions.k8s.io/v1 2466 kind: CustomResourceDefinition 2467 metadata: 2468 - annotations: 2469 - controller-gen.kubebuilder.io/version: v0.16.1 2470 - labels: 2471 - app.kubernetes.io/component: source-controller 2472 - app.kubernetes.io/instance: flux-system 2473 - app.kubernetes.io/part-of: flux 2474 - app.kubernetes.io/version: v2.4.0 2475 - name: gitrepositories.source.toolkit.fluxcd.io 2476 + annotations: 2477 + controller-gen.kubebuilder.io/version: v0.16.1 2478 + labels: 2479 + app.kubernetes.io/component: source-controller 2480 + app.kubernetes.io/instance: flux-system 2481 + app.kubernetes.io/part-of: flux 2482 + app.kubernetes.io/version: v2.5.1 2483 + name: gitrepositories.source.toolkit.fluxcd.io 2484 spec: 2485 - group: source.toolkit.fluxcd.io 2486 - names: 2487 - kind: GitRepository 2488 - listKind: GitRepositoryList 2489 - plural: gitrepositories 2490 - shortNames: 2491 - - gitrepo 2492 - singular: gitrepository 2493 - scope: Namespaced 2494 - versions: 2495 - - additionalPrinterColumns: 2496 - - jsonPath: .spec.url 2497 - name: URL 2498 - type: string 2499 - - jsonPath: .metadata.creationTimestamp 2500 - name: Age 2501 - type: date 2502 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2503 - name: Ready 2504 - type: string 2505 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2506 - name: Status 2507 - type: string 2508 - name: v1 2509 - schema: 2510 - openAPIV3Schema: 2511 - description: GitRepository is the Schema for the gitrepositories API. 2512 + group: source.toolkit.fluxcd.io 2513 + names: 2514 + kind: GitRepository 2515 + listKind: GitRepositoryList 2516 + plural: gitrepositories 2517 + shortNames: 2518 + - gitrepo 2519 + singular: gitrepository 2520 + scope: Namespaced 2521 + versions: 2522 + - additionalPrinterColumns: 2523 + - jsonPath: .spec.url 2524 + name: URL 2525 + type: string 2526 + - jsonPath: .metadata.creationTimestamp 2527 + name: Age 2528 + type: date 2529 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2530 + name: Ready 2531 + type: string 2532 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 2533 + name: Status 2534 + type: string 2535 + name: v1 2536 + schema: 2537 + openAPIV3Schema: 2538 + description: GitRepository is the Schema for the gitrepositories API. 2539 + properties: 2540 + apiVersion: 2541 + description: |- 2542 + APIVersion defines the versioned schema of this representation of an object. 2543 + Servers should convert recognized schemas to the latest internal value, and 2544 + may reject unrecognized values. 2545 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2546 + type: string 2547 + kind: 2548 + description: |- 2549 + Kind is a string value representing the REST resource this object represents. 2550 + Servers may infer this from the endpoint the client submits requests to. 2551 + Cannot be updated. 2552 + In CamelCase. 2553 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2554 + type: string 2555 + metadata: 2556 + type: object 2557 + spec: 2558 + description: |- 2559 + GitRepositorySpec specifies the required configuration to produce an 2560 + Artifact for a Git repository. 2561 + properties: 2562 + ignore: 2563 + description: |- 2564 + Ignore overrides the set of excluded patterns in the .sourceignore format 2565 + (which is the same as .gitignore). If not provided, a default will be used, 2566 + consult the documentation for your version to find out what those are. 2567 + type: string 2568 + include: 2569 + description: |- 2570 + Include specifies a list of GitRepository resources which Artifacts 2571 + should be included in the Artifact produced for this GitRepository. 2572 + items: 2573 + description: |- 2574 + GitRepositoryInclude specifies a local reference to a GitRepository which 2575 + Artifact (sub-)contents must be included, and where they should be placed. 2576 + properties: 2577 + fromPath: 2578 + description: |- 2579 + FromPath specifies the path to copy contents from, defaults to the root 2580 + of the Artifact. 2581 + type: string 2582 + repository: 2583 + description: |- 2584 + GitRepositoryRef specifies the GitRepository which Artifact contents 2585 + must be included. 2586 + properties: 2587 + name: 2588 + description: Name of the referent. 2589 + type: string 2590 + required: 2591 + - name 2592 + type: object 2593 + toPath: 2594 + description: |- 2595 + ToPath specifies the path to copy contents to, defaults to the name of 2596 + the GitRepositoryRef. 2597 + type: string 2598 + required: 2599 + - repository 2600 + type: object 2601 + type: array 2602 + interval: 2603 + description: |- 2604 + Interval at which the GitRepository URL is checked for updates. 2605 + This interval is approximate and may be subject to jitter to ensure 2606 + efficient use of resources. 2607 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2608 + type: string 2609 + provider: 2610 + description: |- 2611 + Provider used for authentication, can be 'azure', 'github', 'generic'. 2612 + When not specified, defaults to 'generic'. 2613 + enum: 2614 + - generic 2615 + - azure 2616 + - github 2617 + type: string 2618 + proxySecretRef: 2619 + description: |- 2620 + ProxySecretRef specifies the Secret containing the proxy configuration 2621 + to use while communicating with the Git server. 2622 properties: 2623 - apiVersion: 2624 - description: |- 2625 - APIVersion defines the versioned schema of this representation of an object. 2626 - Servers should convert recognized schemas to the latest internal value, and 2627 - may reject unrecognized values. 2628 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2629 - type: string 2630 - kind: 2631 - description: |- 2632 - Kind is a string value representing the REST resource this object represents. 2633 - Servers may infer this from the endpoint the client submits requests to. 2634 - Cannot be updated. 2635 - In CamelCase. 2636 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2637 - type: string 2638 - metadata: 2639 - type: object 2640 - spec: 2641 - description: |- 2642 - GitRepositorySpec specifies the required configuration to produce an 2643 - Artifact for a Git repository. 2644 - properties: 2645 - ignore: 2646 - description: |- 2647 - Ignore overrides the set of excluded patterns in the .sourceignore format 2648 - (which is the same as .gitignore). If not provided, a default will be used, 2649 - consult the documentation for your version to find out what those are. 2650 - type: string 2651 - include: 2652 - description: |- 2653 - Include specifies a list of GitRepository resources which Artifacts 2654 - should be included in the Artifact produced for this GitRepository. 2655 - items: 2656 - description: |- 2657 - GitRepositoryInclude specifies a local reference to a GitRepository which 2658 - Artifact (sub-)contents must be included, and where they should be placed. 2659 - properties: 2660 - fromPath: 2661 - description: |- 2662 - FromPath specifies the path to copy contents from, defaults to the root 2663 - of the Artifact. 2664 - type: string 2665 - repository: 2666 - description: |- 2667 - GitRepositoryRef specifies the GitRepository which Artifact contents 2668 - must be included. 2669 - properties: 2670 - name: 2671 - description: Name of the referent. 2672 - type: string 2673 - required: 2674 - - name 2675 - type: object 2676 - toPath: 2677 - description: |- 2678 - ToPath specifies the path to copy contents to, defaults to the name of 2679 - the GitRepositoryRef. 2680 - type: string 2681 - required: 2682 - - repository 2683 - type: object 2684 - type: array 2685 - interval: 2686 - description: |- 2687 - Interval at which the GitRepository URL is checked for updates. 2688 - This interval is approximate and may be subject to jitter to ensure 2689 - efficient use of resources. 2690 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2691 - type: string 2692 - provider: 2693 - description: |- 2694 - Provider used for authentication, can be 'azure', 'generic'. 2695 - When not specified, defaults to 'generic'. 2696 - enum: 2697 - - generic 2698 - - azure 2699 - type: string 2700 - proxySecretRef: 2701 - description: |- 2702 - ProxySecretRef specifies the Secret containing the proxy configuration 2703 - to use while communicating with the Git server. 2704 - properties: 2705 - name: 2706 - description: Name of the referent. 2707 - type: string 2708 - required: 2709 - - name 2710 - type: object 2711 - recurseSubmodules: 2712 - description: |- 2713 - RecurseSubmodules enables the initialization of all submodules within 2714 - the GitRepository as cloned from the URL, using their default settings. 2715 - type: boolean 2716 - ref: 2717 - description: |- 2718 - Reference specifies the Git reference to resolve and monitor for 2719 - changes, defaults to the 'master' branch. 2720 - properties: 2721 - branch: 2722 - description: Branch to check out, defaults to 'master' if no other field is defined. 2723 - type: string 2724 - commit: 2725 - description: |- 2726 - Commit SHA to check out, takes precedence over all reference fields. 2727 + name: 2728 + description: Name of the referent. 2729 + type: string 2730 + required: 2731 + - name 2732 + type: object 2733 + recurseSubmodules: 2734 + description: |- 2735 + RecurseSubmodules enables the initialization of all submodules within 2736 + the GitRepository as cloned from the URL, using their default settings. 2737 + type: boolean 2738 + ref: 2739 + description: |- 2740 + Reference specifies the Git reference to resolve and monitor for 2741 + changes, defaults to the 'master' branch. 2742 + properties: 2743 + branch: 2744 + description: Branch to check out, defaults to 'master' if no other 2745 + field is defined. 2746 + type: string 2747 + commit: 2748 + description: |- 2749 + Commit SHA to check out, takes precedence over all reference fields. 2750 2751 - This can be combined with Branch to shallow clone the branch, in which 2752 - the commit is expected to exist. 2753 - type: string 2754 - name: 2755 - description: |- 2756 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2757 + This can be combined with Branch to shallow clone the branch, in which 2758 + the commit is expected to exist. 2759 + type: string 2760 + name: 2761 + description: |- 2762 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2763 2764 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2765 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2766 - type: string 2767 - semver: 2768 - description: SemVer tag expression to check out, takes precedence over Tag. 2769 - type: string 2770 - tag: 2771 - description: Tag to check out, takes precedence over Branch. 2772 - type: string 2773 - type: object 2774 - secretRef: 2775 - description: |- 2776 - SecretRef specifies the Secret containing authentication credentials for 2777 - the GitRepository. 2778 - For HTTPS repositories the Secret must contain 'username' and 'password' 2779 - fields for basic auth or 'bearerToken' field for token auth. 2780 - For SSH repositories the Secret must contain 'identity' 2781 - and 'known_hosts' fields. 2782 - properties: 2783 - name: 2784 - description: Name of the referent. 2785 - type: string 2786 - required: 2787 - - name 2788 - type: object 2789 - suspend: 2790 - description: |- 2791 - Suspend tells the controller to suspend the reconciliation of this 2792 - GitRepository. 2793 - type: boolean 2794 - timeout: 2795 - default: 60s 2796 - description: Timeout for Git operations like cloning, defaults to 60s. 2797 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2798 - type: string 2799 - url: 2800 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 2801 - pattern: ^(http|https|ssh)://.*$ 2802 - type: string 2803 - verify: 2804 - description: |- 2805 - Verification specifies the configuration to verify the Git commit 2806 - signature(s). 2807 - properties: 2808 - mode: 2809 - default: HEAD 2810 - description: |- 2811 - Mode specifies which Git object(s) should be verified. 2812 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2813 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2814 + type: string 2815 + semver: 2816 + description: SemVer tag expression to check out, takes precedence 2817 + over Tag. 2818 + type: string 2819 + tag: 2820 + description: Tag to check out, takes precedence over Branch. 2821 + type: string 2822 + type: object 2823 + secretRef: 2824 + description: |- 2825 + SecretRef specifies the Secret containing authentication credentials for 2826 + the GitRepository. 2827 + For HTTPS repositories the Secret must contain 'username' and 'password' 2828 + fields for basic auth or 'bearerToken' field for token auth. 2829 + For SSH repositories the Secret must contain 'identity' 2830 + and 'known_hosts' fields. 2831 + properties: 2832 + name: 2833 + description: Name of the referent. 2834 + type: string 2835 + required: 2836 + - name 2837 + type: object 2838 + suspend: 2839 + description: |- 2840 + Suspend tells the controller to suspend the reconciliation of this 2841 + GitRepository. 2842 + type: boolean 2843 + timeout: 2844 + default: 60s 2845 + description: Timeout for Git operations like cloning, defaults to 2846 + 60s. 2847 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2848 + type: string 2849 + url: 2850 + description: URL specifies the Git repository URL, it can be an HTTP/S 2851 + or SSH address. 2852 + pattern: ^(http|https|ssh)://.*$ 2853 + type: string 2854 + verify: 2855 + description: |- 2856 + Verification specifies the configuration to verify the Git commit 2857 + signature(s). 2858 + properties: 2859 + mode: 2860 + default: HEAD 2861 + description: |- 2862 + Mode specifies which Git object(s) should be verified. 2863 2864 - The variants "head" and "HEAD" both imply the same thing, i.e. verify 2865 - the commit that the HEAD of the Git repository points to. The variant 2866 - "head" solely exists to ensure backwards compatibility. 2867 - enum: 2868 - - head 2869 - - HEAD 2870 - - Tag 2871 - - TagAndHEAD 2872 - type: string 2873 - secretRef: 2874 - description: |- 2875 - SecretRef specifies the Secret containing the public keys of trusted Git 2876 - authors. 2877 - properties: 2878 - name: 2879 - description: Name of the referent. 2880 - type: string 2881 - required: 2882 - - name 2883 - type: object 2884 - required: 2885 - - secretRef 2886 - type: object 2887 - required: 2888 - - interval 2889 - - url 2890 - type: object 2891 - status: 2892 - default: 2893 - observedGeneration: -1 2894 - description: GitRepositoryStatus records the observed state of a Git repository. 2895 - properties: 2896 - artifact: 2897 - description: Artifact represents the last successful GitRepository reconciliation. 2898 - properties: 2899 - digest: 2900 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2901 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2902 - type: string 2903 - lastUpdateTime: 2904 - description: |- 2905 - LastUpdateTime is the timestamp corresponding to the last update of the 2906 - Artifact. 2907 - format: date-time 2908 - type: string 2909 - metadata: 2910 - additionalProperties: 2911 - type: string 2912 - description: Metadata holds upstream information such as OCI annotations. 2913 - type: object 2914 - path: 2915 - description: |- 2916 - Path is the relative file path of the Artifact. It can be used to locate 2917 - the file in the root of the Artifact storage on the local file system of 2918 - the controller managing the Source. 2919 - type: string 2920 - revision: 2921 - description: |- 2922 - Revision is a human-readable identifier traceable in the origin source 2923 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2924 - type: string 2925 - size: 2926 - description: Size is the number of bytes in the file. 2927 - format: int64 2928 - type: integer 2929 - url: 2930 - description: |- 2931 - URL is the HTTP address of the Artifact as exposed by the controller 2932 - managing the Source. It can be used to retrieve the Artifact for 2933 - consumption, e.g. by another controller applying the Artifact contents. 2934 - type: string 2935 - required: 2936 - - lastUpdateTime 2937 - - path 2938 - - revision 2939 - - url 2940 - type: object 2941 - conditions: 2942 - description: Conditions holds the conditions for the GitRepository. 2943 - items: 2944 - description: Condition contains details for one aspect of the current state of this API 2945 - Resource. 2946 - properties: 2947 - lastTransitionTime: 2948 - description: |- 2949 - lastTransitionTime is the last time the condition transitioned from one status to another. 2950 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2951 - format: date-time 2952 - type: string 2953 - message: 2954 - description: |- 2955 - message is a human readable message indicating details about the transition. 2956 - This may be an empty string. 2957 - maxLength: 32768 2958 - type: string 2959 - observedGeneration: 2960 - description: |- 2961 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2962 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2963 - with respect to the current state of the instance. 2964 - format: int64 2965 - minimum: 0 2966 - type: integer 2967 - reason: 2968 - description: |- 2969 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2970 - Producers of specific condition types may define expected values and meanings for this field, 2971 - and whether the values are considered a guaranteed API. 2972 - The value should be a CamelCase string. 2973 - This field may not be empty. 2974 - maxLength: 1024 2975 - minLength: 1 2976 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2977 - type: string 2978 - status: 2979 - description: status of the condition, one of True, False, Unknown. 2980 - enum: 2981 - - "True" 2982 - - "False" 2983 - - Unknown 2984 - type: string 2985 - type: 2986 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 2987 - maxLength: 316 2988 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2989 - type: string 2990 - required: 2991 - - lastTransitionTime 2992 - - message 2993 - - reason 2994 - - status 2995 - - type 2996 - type: object 2997 - type: array 2998 - includedArtifacts: 2999 - description: |- 3000 - IncludedArtifacts contains a list of the last successfully included 3001 - Artifacts as instructed by GitRepositorySpec.Include. 3002 - items: 3003 - description: Artifact represents the output of a Source reconciliation. 3004 - properties: 3005 - digest: 3006 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3007 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3008 - type: string 3009 - lastUpdateTime: 3010 - description: |- 3011 - LastUpdateTime is the timestamp corresponding to the last update of the 3012 - Artifact. 3013 - format: date-time 3014 - type: string 3015 - metadata: 3016 - additionalProperties: 3017 - type: string 3018 - description: Metadata holds upstream information such as OCI annotations. 3019 - type: object 3020 - path: 3021 - description: |- 3022 - Path is the relative file path of the Artifact. It can be used to locate 3023 - the file in the root of the Artifact storage on the local file system of 3024 - the controller managing the Source. 3025 - type: string 3026 - revision: 3027 - description: |- 3028 - Revision is a human-readable identifier traceable in the origin source 3029 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3030 - type: string 3031 - size: 3032 - description: Size is the number of bytes in the file. 3033 - format: int64 3034 - type: integer 3035 - url: 3036 - description: |- 3037 - URL is the HTTP address of the Artifact as exposed by the controller 3038 - managing the Source. It can be used to retrieve the Artifact for 3039 - consumption, e.g. by another controller applying the Artifact contents. 3040 - type: string 3041 - required: 3042 - - lastUpdateTime 3043 - - path 3044 - - revision 3045 - - url 3046 - type: object 3047 - type: array 3048 - lastHandledReconcileAt: 3049 - description: |- 3050 - LastHandledReconcileAt holds the value of the most recent 3051 - reconcile request value, so a change of the annotation value 3052 - can be detected. 3053 - type: string 3054 - observedGeneration: 3055 - description: |- 3056 - ObservedGeneration is the last observed generation of the GitRepository 3057 - object. 3058 - format: int64 3059 - type: integer 3060 - observedIgnore: 3061 - description: |- 3062 - ObservedIgnore is the observed exclusion patterns used for constructing 3063 - the source artifact. 3064 - type: string 3065 - observedInclude: 3066 - description: |- 3067 - ObservedInclude is the observed list of GitRepository resources used to 3068 - produce the current Artifact. 3069 - items: 3070 - description: |- 3071 - GitRepositoryInclude specifies a local reference to a GitRepository which 3072 - Artifact (sub-)contents must be included, and where they should be placed. 3073 - properties: 3074 - fromPath: 3075 - description: |- 3076 - FromPath specifies the path to copy contents from, defaults to the root 3077 - of the Artifact. 3078 - type: string 3079 - repository: 3080 - description: |- 3081 - GitRepositoryRef specifies the GitRepository which Artifact contents 3082 - must be included. 3083 - properties: 3084 - name: 3085 - description: Name of the referent. 3086 - type: string 3087 - required: 3088 - - name 3089 - type: object 3090 - toPath: 3091 - description: |- 3092 - ToPath specifies the path to copy contents to, defaults to the name of 3093 - the GitRepositoryRef. 3094 - type: string 3095 - required: 3096 - - repository 3097 - type: object 3098 - type: array 3099 - observedRecurseSubmodules: 3100 - description: |- 3101 - ObservedRecurseSubmodules is the observed resource submodules 3102 - configuration used to produce the current Artifact. 3103 - type: boolean 3104 - sourceVerificationMode: 3105 - description: |- 3106 - SourceVerificationMode is the last used verification mode indicating 3107 - which Git object(s) have been verified. 3108 - type: string 3109 - type: object 3110 + The variants "head" and "HEAD" both imply the same thing, i.e. verify 3111 + the commit that the HEAD of the Git repository points to. The variant 3112 + "head" solely exists to ensure backwards compatibility. 3113 + enum: 3114 + - head 3115 + - HEAD 3116 + - Tag 3117 + - TagAndHEAD 3118 + type: string 3119 + secretRef: 3120 + description: |- 3121 + SecretRef specifies the Secret containing the public keys of trusted Git 3122 + authors. 3123 + properties: 3124 + name: 3125 + description: Name of the referent. 3126 + type: string 3127 + required: 3128 + - name 3129 + type: object 3130 + required: 3131 + - secretRef 3132 type: object 3133 - served: true 3134 - storage: true 3135 - subresources: 3136 - status: {} 3137 - - additionalPrinterColumns: 3138 - - jsonPath: .spec.url 3139 - name: URL 3140 - type: string 3141 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 3142 - name: Ready 3143 - type: string 3144 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 3145 - name: Status 3146 - type: string 3147 - - jsonPath: .metadata.creationTimestamp 3148 - name: Age 3149 - type: date 3150 - deprecated: true 3151 - deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1 3152 - name: v1beta1 3153 - schema: 3154 - openAPIV3Schema: 3155 - description: GitRepository is the Schema for the gitrepositories API 3156 + required: 3157 + - interval 3158 + - url 3159 + type: object 3160 + status: 3161 + default: 3162 + observedGeneration: -1 3163 + description: GitRepositoryStatus records the observed state of a Git repository. 3164 + properties: 3165 + artifact: 3166 + description: Artifact represents the last successful GitRepository 3167 + reconciliation. 3168 properties: 3169 - apiVersion: 3170 - description: |- 3171 - APIVersion defines the versioned schema of this representation of an object. 3172 - Servers should convert recognized schemas to the latest internal value, and 3173 - may reject unrecognized values. 3174 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3175 + digest: 3176 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3177 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3178 + type: string 3179 + lastUpdateTime: 3180 + description: |- 3181 + LastUpdateTime is the timestamp corresponding to the last update of the 3182 + Artifact. 3183 + format: date-time 3184 + type: string 3185 + metadata: 3186 + additionalProperties: 3187 + type: string 3188 + description: Metadata holds upstream information such as OCI annotations. 3189 + type: object 3190 + path: 3191 + description: |- 3192 + Path is the relative file path of the Artifact. It can be used to locate 3193 + the file in the root of the Artifact storage on the local file system of 3194 + the controller managing the Source. 3195 + type: string 3196 + revision: 3197 + description: |- 3198 + Revision is a human-readable identifier traceable in the origin source 3199 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3200 + type: string 3201 + size: 3202 + description: Size is the number of bytes in the file. 3203 + format: int64 3204 + type: integer 3205 + url: 3206 + description: |- 3207 + URL is the HTTP address of the Artifact as exposed by the controller 3208 + managing the Source. It can be used to retrieve the Artifact for 3209 + consumption, e.g. by another controller applying the Artifact contents. 3210 + type: string 3211 + required: 3212 + - lastUpdateTime 3213 + - path 3214 + - revision 3215 + - url 3216 + type: object 3217 + conditions: 3218 + description: Conditions holds the conditions for the GitRepository. 3219 + items: 3220 + description: Condition contains details for one aspect of the current 3221 + state of this API Resource. 3222 + properties: 3223 + lastTransitionTime: 3224 + description: |- 3225 + lastTransitionTime is the last time the condition transitioned from one status to another. 3226 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3227 + format: date-time 3228 + type: string 3229 + message: 3230 + description: |- 3231 + message is a human readable message indicating details about the transition. 3232 + This may be an empty string. 3233 + maxLength: 32768 3234 + type: string 3235 + observedGeneration: 3236 + description: |- 3237 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3238 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3239 + with respect to the current state of the instance. 3240 + format: int64 3241 + minimum: 0 3242 + type: integer 3243 + reason: 3244 + description: |- 3245 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3246 + Producers of specific condition types may define expected values and meanings for this field, 3247 + and whether the values are considered a guaranteed API. 3248 + The value should be a CamelCase string. 3249 + This field may not be empty. 3250 + maxLength: 1024 3251 + minLength: 1 3252 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3253 + type: string 3254 + status: 3255 + description: status of the condition, one of True, False, Unknown. 3256 + enum: 3257 + - "True" 3258 + - "False" 3259 + - Unknown 3260 + type: string 3261 + type: 3262 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3263 + maxLength: 316 3264 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3265 + type: string 3266 + required: 3267 + - lastTransitionTime 3268 + - message 3269 + - reason 3270 + - status 3271 + - type 3272 + type: object 3273 + type: array 3274 + includedArtifacts: 3275 + description: |- 3276 + IncludedArtifacts contains a list of the last successfully included 3277 + Artifacts as instructed by GitRepositorySpec.Include. 3278 + items: 3279 + description: Artifact represents the output of a Source reconciliation. 3280 + properties: 3281 + digest: 3282 + description: Digest is the digest of the file in the form of 3283 + '<algorithm>:<checksum>'. 3284 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3285 + type: string 3286 + lastUpdateTime: 3287 + description: |- 3288 + LastUpdateTime is the timestamp corresponding to the last update of the 3289 + Artifact. 3290 + format: date-time 3291 + type: string 3292 + metadata: 3293 + additionalProperties: 3294 type: string 3295 - kind: 3296 - description: |- 3297 - Kind is a string value representing the REST resource this object represents. 3298 - Servers may infer this from the endpoint the client submits requests to. 3299 - Cannot be updated. 3300 - In CamelCase. 3301 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3302 + description: Metadata holds upstream information such as OCI 3303 + annotations. 3304 + type: object 3305 + path: 3306 + description: |- 3307 + Path is the relative file path of the Artifact. It can be used to locate 3308 + the file in the root of the Artifact storage on the local file system of 3309 + the controller managing the Source. 3310 + type: string 3311 + revision: 3312 + description: |- 3313 + Revision is a human-readable identifier traceable in the origin source 3314 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3315 + type: string 3316 + size: 3317 + description: Size is the number of bytes in the file. 3318 + format: int64 3319 + type: integer 3320 + url: 3321 + description: |- 3322 + URL is the HTTP address of the Artifact as exposed by the controller 3323 + managing the Source. It can be used to retrieve the Artifact for 3324 + consumption, e.g. by another controller applying the Artifact contents. 3325 + type: string 3326 + required: 3327 + - lastUpdateTime 3328 + - path 3329 + - revision 3330 + - url 3331 + type: object 3332 + type: array 3333 + lastHandledReconcileAt: 3334 + description: |- 3335 + LastHandledReconcileAt holds the value of the most recent 3336 + reconcile request value, so a change of the annotation value 3337 + can be detected. 3338 + type: string 3339 + observedGeneration: 3340 + description: |- 3341 + ObservedGeneration is the last observed generation of the GitRepository 3342 + object. 3343 + format: int64 3344 + type: integer 3345 + observedIgnore: 3346 + description: |- 3347 + ObservedIgnore is the observed exclusion patterns used for constructing 3348 + the source artifact. 3349 + type: string 3350 + observedInclude: 3351 + description: |- 3352 + ObservedInclude is the observed list of GitRepository resources used to 3353 + produce the current Artifact. 3354 + items: 3355 + description: |- 3356 + GitRepositoryInclude specifies a local reference to a GitRepository which 3357 + Artifact (sub-)contents must be included, and where they should be placed. 3358 + properties: 3359 + fromPath: 3360 + description: |- 3361 + FromPath specifies the path to copy contents from, defaults to the root 3362 + of the Artifact. 3363 + type: string 3364 + repository: 3365 + description: |- 3366 + GitRepositoryRef specifies the GitRepository which Artifact contents 3367 + must be included. 3368 + properties: 3369 + name: 3370 + description: Name of the referent. 3371 + type: string 3372 + required: 3373 + - name 3374 + type: object 3375 + toPath: 3376 + description: |- 3377 + ToPath specifies the path to copy contents to, defaults to the name of 3378 + the GitRepositoryRef. 3379 + type: string 3380 + required: 3381 + - repository 3382 + type: object 3383 + type: array 3384 + observedRecurseSubmodules: 3385 + description: |- 3386 + ObservedRecurseSubmodules is the observed resource submodules 3387 + configuration used to produce the current Artifact. 3388 + type: boolean 3389 + sourceVerificationMode: 3390 + description: |- 3391 + SourceVerificationMode is the last used verification mode indicating 3392 + which Git object(s) have been verified. 3393 + type: string 3394 + type: object 3395 + type: object 3396 + served: true 3397 + storage: true 3398 + subresources: 3399 + status: {} 3400 + - additionalPrinterColumns: 3401 + - jsonPath: .spec.url 3402 + name: URL 3403 + type: string 3404 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 3405 + name: Ready 3406 + type: string 3407 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3408 + name: Status 3409 + type: string 3410 + - jsonPath: .metadata.creationTimestamp 3411 + name: Age 3412 + type: date 3413 + deprecated: true 3414 + deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1 3415 + name: v1beta1 3416 + schema: 3417 + openAPIV3Schema: 3418 + description: GitRepository is the Schema for the gitrepositories API 3419 + properties: 3420 + apiVersion: 3421 + description: |- 3422 + APIVersion defines the versioned schema of this representation of an object. 3423 + Servers should convert recognized schemas to the latest internal value, and 3424 + may reject unrecognized values. 3425 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3426 + type: string 3427 + kind: 3428 + description: |- 3429 + Kind is a string value representing the REST resource this object represents. 3430 + Servers may infer this from the endpoint the client submits requests to. 3431 + Cannot be updated. 3432 + In CamelCase. 3433 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3434 + type: string 3435 + metadata: 3436 + type: object 3437 + spec: 3438 + description: GitRepositorySpec defines the desired state of a Git repository. 3439 + properties: 3440 + accessFrom: 3441 + description: AccessFrom defines an Access Control List for allowing 3442 + cross-namespace references to this object. 3443 + properties: 3444 + namespaceSelectors: 3445 + description: |- 3446 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3447 + Items in this list are evaluated using a logical OR operation. 3448 + items: 3449 + description: |- 3450 + NamespaceSelector selects the namespaces to which this ACL applies. 3451 + An empty map of MatchLabels matches all namespaces in a cluster. 3452 + properties: 3453 + matchLabels: 3454 + additionalProperties: 3455 + type: string 3456 + description: |- 3457 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3458 + map is equivalent to an element of matchExpressions, whose key field is "key", the 3459 + operator is "In", and the values array contains only "value". The requirements are ANDed. 3460 + type: object 3461 + type: object 3462 + type: array 3463 + required: 3464 + - namespaceSelectors 3465 + type: object 3466 + gitImplementation: 3467 + default: go-git 3468 + description: |- 3469 + Determines which git client library to use. 3470 + Defaults to go-git, valid values are ('go-git', 'libgit2'). 3471 + enum: 3472 + - go-git 3473 + - libgit2 3474 + type: string 3475 + ignore: 3476 + description: |- 3477 + Ignore overrides the set of excluded patterns in the .sourceignore format 3478 + (which is the same as .gitignore). If not provided, a default will be used, 3479 + consult the documentation for your version to find out what those are. 3480 + type: string 3481 + include: 3482 + description: Extra git repositories to map into the repository 3483 + items: 3484 + description: GitRepositoryInclude defines a source with a from and 3485 + to path. 3486 + properties: 3487 + fromPath: 3488 + description: The path to copy contents from, defaults to the 3489 + root directory. 3490 + type: string 3491 + repository: 3492 + description: Reference to a GitRepository to include. 3493 + properties: 3494 + name: 3495 + description: Name of the referent. 3496 + type: string 3497 + required: 3498 + - name 3499 + type: object 3500 + toPath: 3501 + description: The path to copy contents to, defaults to the name 3502 + of the source ref. 3503 + type: string 3504 + required: 3505 + - repository 3506 + type: object 3507 + type: array 3508 + interval: 3509 + description: The interval at which to check for repository updates. 3510 + type: string 3511 + recurseSubmodules: 3512 + description: |- 3513 + When enabled, after the clone is created, initializes all submodules within, 3514 + using their default settings. 3515 + This option is available only when using the 'go-git' GitImplementation. 3516 + type: boolean 3517 + ref: 3518 + description: |- 3519 + The Git reference to checkout and monitor for changes, defaults to 3520 + master branch. 3521 + properties: 3522 + branch: 3523 + description: The Git branch to checkout, defaults to master. 3524 + type: string 3525 + commit: 3526 + description: The Git commit SHA to checkout, if specified Tag 3527 + filters will be ignored. 3528 + type: string 3529 + semver: 3530 + description: The Git tag semver expression, takes precedence over 3531 + Tag. 3532 + type: string 3533 + tag: 3534 + description: The Git tag to checkout, takes precedence over Branch. 3535 + type: string 3536 + type: object 3537 + secretRef: 3538 + description: |- 3539 + The secret name containing the Git credentials. 3540 + For HTTPS repositories the secret must contain username and password 3541 + fields. 3542 + For SSH repositories the secret must contain identity and known_hosts 3543 + fields. 3544 + properties: 3545 + name: 3546 + description: Name of the referent. 3547 + type: string 3548 + required: 3549 + - name 3550 + type: object 3551 + suspend: 3552 + description: This flag tells the controller to suspend the reconciliation 3553 + of this source. 3554 + type: boolean 3555 + timeout: 3556 + default: 60s 3557 + description: The timeout for remote Git operations like cloning, defaults 3558 + to 60s. 3559 + type: string 3560 + url: 3561 + description: The repository URL, can be a HTTP/S or SSH address. 3562 + pattern: ^(http|https|ssh)://.*$ 3563 + type: string 3564 + verify: 3565 + description: Verify OpenPGP signature for the Git commit HEAD points 3566 + to. 3567 + properties: 3568 + mode: 3569 + description: Mode describes what git object should be verified, 3570 + currently ('head'). 3571 + enum: 3572 + - head 3573 + type: string 3574 + secretRef: 3575 + description: The secret name containing the public keys of all 3576 + trusted Git authors. 3577 + properties: 3578 + name: 3579 + description: Name of the referent. 3580 type: string 3581 - metadata: 3582 - type: object 3583 - spec: 3584 - description: GitRepositorySpec defines the desired state of a Git repository. 3585 - properties: 3586 - accessFrom: 3587 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 3588 - to this object. 3589 - properties: 3590 - namespaceSelectors: 3591 - description: |- 3592 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3593 - Items in this list are evaluated using a logical OR operation. 3594 - items: 3595 - description: |- 3596 - NamespaceSelector selects the namespaces to which this ACL applies. 3597 - An empty map of MatchLabels matches all namespaces in a cluster. 3598 - properties: 3599 - matchLabels: 3600 - additionalProperties: 3601 - type: string 3602 - description: |- 3603 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3604 - map is equivalent to an element of matchExpressions, whose key field is "key", the 3605 - operator is "In", and the values array contains only "value". The requirements are ANDed. 3606 - type: object 3607 - type: object 3608 - type: array 3609 - required: 3610 - - namespaceSelectors 3611 - type: object 3612 - gitImplementation: 3613 - default: go-git 3614 - description: |- 3615 - Determines which git client library to use. 3616 - Defaults to go-git, valid values are ('go-git', 'libgit2'). 3617 - enum: 3618 - - go-git 3619 - - libgit2 3620 - type: string 3621 - ignore: 3622 - description: |- 3623 - Ignore overrides the set of excluded patterns in the .sourceignore format 3624 - (which is the same as .gitignore). If not provided, a default will be used, 3625 - consult the documentation for your version to find out what those are. 3626 - type: string 3627 - include: 3628 - description: Extra git repositories to map into the repository 3629 - items: 3630 - description: GitRepositoryInclude defines a source with a from and to path. 3631 - properties: 3632 - fromPath: 3633 - description: The path to copy contents from, defaults to the root directory. 3634 - type: string 3635 - repository: 3636 - description: Reference to a GitRepository to include. 3637 - properties: 3638 - name: 3639 - description: Name of the referent. 3640 - type: string 3641 - required: 3642 - - name 3643 - type: object 3644 - toPath: 3645 - description: The path to copy contents to, defaults to the name of the source 3646 - ref. 3647 - type: string 3648 - required: 3649 - - repository 3650 - type: object 3651 - type: array 3652 - interval: 3653 - description: The interval at which to check for repository updates. 3654 - type: string 3655 - recurseSubmodules: 3656 - description: |- 3657 - When enabled, after the clone is created, initializes all submodules within, 3658 - using their default settings. 3659 - This option is available only when using the 'go-git' GitImplementation. 3660 - type: boolean 3661 - ref: 3662 - description: |- 3663 - The Git reference to checkout and monitor for changes, defaults to 3664 - master branch. 3665 - properties: 3666 - branch: 3667 - description: The Git branch to checkout, defaults to master. 3668 - type: string 3669 - commit: 3670 - description: The Git commit SHA to checkout, if specified Tag filters will be ignored. 3671 - type: string 3672 - semver: 3673 - description: The Git tag semver expression, takes precedence over Tag. 3674 - type: string 3675 - tag: 3676 - description: The Git tag to checkout, takes precedence over Branch. 3677 - type: string 3678 - type: object 3679 - secretRef: 3680 - description: |- 3681 - The secret name containing the Git credentials. 3682 - For HTTPS repositories the secret must contain username and password 3683 - fields. 3684 - For SSH repositories the secret must contain identity and known_hosts 3685 - fields. 3686 - properties: 3687 - name: 3688 - description: Name of the referent. 3689 - type: string 3690 - required: 3691 - - name 3692 - type: object 3693 - suspend: 3694 - description: This flag tells the controller to suspend the reconciliation of this source. 3695 - type: boolean 3696 - timeout: 3697 - default: 60s 3698 - description: The timeout for remote Git operations like cloning, defaults to 60s. 3699 - type: string 3700 - url: 3701 - description: The repository URL, can be a HTTP/S or SSH address. 3702 - pattern: ^(http|https|ssh)://.*$ 3703 - type: string 3704 - verify: 3705 - description: Verify OpenPGP signature for the Git commit HEAD points to. 3706 - properties: 3707 - mode: 3708 - description: Mode describes what git object should be verified, currently ('head'). 3709 - enum: 3710 - - head 3711 - type: string 3712 - secretRef: 3713 - description: The secret name containing the public keys of all trusted Git authors. 3714 - properties: 3715 - name: 3716 - description: Name of the referent. 3717 - type: string 3718 - required: 3719 - - name 3720 - type: object 3721 - required: 3722 - - mode 3723 - type: object 3724 - required: 3725 - - interval 3726 - - url 3727 - type: object 3728 + required: 3729 + - name 3730 + type: object 3731 + required: 3732 + - mode 3733 + type: object 3734 + required: 3735 + - interval 3736 + - url 3737 + type: object 3738 + status: 3739 + default: 3740 + observedGeneration: -1 3741 + description: GitRepositoryStatus defines the observed state of a Git repository. 3742 + properties: 3743 + artifact: 3744 + description: Artifact represents the output of the last successful 3745 + repository sync. 3746 + properties: 3747 + checksum: 3748 + description: Checksum is the SHA256 checksum of the artifact. 3749 + type: string 3750 + lastUpdateTime: 3751 + description: |- 3752 + LastUpdateTime is the timestamp corresponding to the last update of this 3753 + artifact. 3754 + format: date-time 3755 + type: string 3756 + path: 3757 + description: Path is the relative file path of this artifact. 3758 + type: string 3759 + revision: 3760 + description: |- 3761 + Revision is a human readable identifier traceable in the origin source 3762 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3763 + chart version, etc. 3764 + type: string 3765 + url: 3766 + description: URL is the HTTP address of this artifact. 3767 + type: string 3768 + required: 3769 + - lastUpdateTime 3770 + - path 3771 + - url 3772 + type: object 3773 + conditions: 3774 + description: Conditions holds the conditions for the GitRepository. 3775 + items: 3776 + description: Condition contains details for one aspect of the current 3777 + state of this API Resource. 3778 + properties: 3779 + lastTransitionTime: 3780 + description: |- 3781 + lastTransitionTime is the last time the condition transitioned from one status to another. 3782 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3783 + format: date-time 3784 + type: string 3785 + message: 3786 + description: |- 3787 + message is a human readable message indicating details about the transition. 3788 + This may be an empty string. 3789 + maxLength: 32768 3790 + type: string 3791 + observedGeneration: 3792 + description: |- 3793 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3794 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3795 + with respect to the current state of the instance. 3796 + format: int64 3797 + minimum: 0 3798 + type: integer 3799 + reason: 3800 + description: |- 3801 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3802 + Producers of specific condition types may define expected values and meanings for this field, 3803 + and whether the values are considered a guaranteed API. 3804 + The value should be a CamelCase string. 3805 + This field may not be empty. 3806 + maxLength: 1024 3807 + minLength: 1 3808 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3809 + type: string 3810 status: 3811 - default: 3812 - observedGeneration: -1 3813 - description: GitRepositoryStatus defines the observed state of a Git repository. 3814 - properties: 3815 - artifact: 3816 - description: Artifact represents the output of the last successful repository sync. 3817 - properties: 3818 - checksum: 3819 - description: Checksum is the SHA256 checksum of the artifact. 3820 - type: string 3821 - lastUpdateTime: 3822 - description: |- 3823 - LastUpdateTime is the timestamp corresponding to the last update of this 3824 - artifact. 3825 - format: date-time 3826 - type: string 3827 - path: 3828 - description: Path is the relative file path of this artifact. 3829 - type: string 3830 - revision: 3831 - description: |- 3832 - Revision is a human readable identifier traceable in the origin source 3833 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3834 - chart version, etc. 3835 - type: string 3836 - url: 3837 - description: URL is the HTTP address of this artifact. 3838 - type: string 3839 - required: 3840 - - lastUpdateTime 3841 - - path 3842 - - url 3843 - type: object 3844 - conditions: 3845 - description: Conditions holds the conditions for the GitRepository. 3846 - items: 3847 - description: Condition contains details for one aspect of the current state of this API 3848 - Resource. 3849 - properties: 3850 - lastTransitionTime: 3851 - description: |- 3852 - lastTransitionTime is the last time the condition transitioned from one status to another. 3853 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3854 - format: date-time 3855 - type: string 3856 - message: 3857 - description: |- 3858 - message is a human readable message indicating details about the transition. 3859 - This may be an empty string. 3860 - maxLength: 32768 3861 - type: string 3862 - observedGeneration: 3863 - description: |- 3864 - observedGeneration represents the .metadata.generation that the condition was set based upon. 3865 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3866 - with respect to the current state of the instance. 3867 - format: int64 3868 - minimum: 0 3869 - type: integer 3870 - reason: 3871 - description: |- 3872 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 3873 - Producers of specific condition types may define expected values and meanings for this field, 3874 - and whether the values are considered a guaranteed API. 3875 - The value should be a CamelCase string. 3876 - This field may not be empty. 3877 - maxLength: 1024 3878 - minLength: 1 3879 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3880 - type: string 3881 - status: 3882 - description: status of the condition, one of True, False, Unknown. 3883 - enum: 3884 - - "True" 3885 - - "False" 3886 - - Unknown 3887 - type: string 3888 - type: 3889 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 3890 - maxLength: 316 3891 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3892 - type: string 3893 - required: 3894 - - lastTransitionTime 3895 - - message 3896 - - reason 3897 - - status 3898 - - type 3899 - type: object 3900 - type: array 3901 - includedArtifacts: 3902 - description: IncludedArtifacts represents the included artifacts from the last successful 3903 - repository sync. 3904 - items: 3905 - description: Artifact represents the output of a source synchronisation. 3906 - properties: 3907 - checksum: 3908 - description: Checksum is the SHA256 checksum of the artifact. 3909 - type: string 3910 - lastUpdateTime: 3911 - description: |- 3912 - LastUpdateTime is the timestamp corresponding to the last update of this 3913 - artifact. 3914 - format: date-time 3915 - type: string 3916 - path: 3917 - description: Path is the relative file path of this artifact. 3918 - type: string 3919 - revision: 3920 - description: |- 3921 - Revision is a human readable identifier traceable in the origin source 3922 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3923 - chart version, etc. 3924 - type: string 3925 - url: 3926 - description: URL is the HTTP address of this artifact. 3927 - type: string 3928 - required: 3929 - - lastUpdateTime 3930 - - path 3931 - - url 3932 - type: object 3933 - type: array 3934 - lastHandledReconcileAt: 3935 - description: |- 3936 - LastHandledReconcileAt holds the value of the most recent 3937 - reconcile request value, so a change of the annotation value 3938 - can be detected. 3939 - type: string 3940 - observedGeneration: 3941 - description: ObservedGeneration is the last observed generation. 3942 - format: int64 3943 - type: integer 3944 - url: 3945 - description: |- 3946 - URL is the download link for the artifact output of the last repository 3947 - sync. 3948 - type: string 3949 - type: object 3950 + description: status of the condition, one of True, False, Unknown. 3951 + enum: 3952 + - "True" 3953 + - "False" 3954 + - Unknown 3955 + type: string 3956 + type: 3957 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3958 + maxLength: 316 3959 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3960 + type: string 3961 + required: 3962 + - lastTransitionTime 3963 + - message 3964 + - reason 3965 + - status 3966 + - type 3967 + type: object 3968 + type: array 3969 + includedArtifacts: 3970 + description: IncludedArtifacts represents the included artifacts from 3971 + the last successful repository sync. 3972 + items: 3973 + description: Artifact represents the output of a source synchronisation. 3974 + properties: 3975 + checksum: 3976 + description: Checksum is the SHA256 checksum of the artifact. 3977 + type: string 3978 + lastUpdateTime: 3979 + description: |- 3980 + LastUpdateTime is the timestamp corresponding to the last update of this 3981 + artifact. 3982 + format: date-time 3983 + type: string 3984 + path: 3985 + description: Path is the relative file path of this artifact. 3986 + type: string 3987 + revision: 3988 + description: |- 3989 + Revision is a human readable identifier traceable in the origin source 3990 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3991 + chart version, etc. 3992 + type: string 3993 + url: 3994 + description: URL is the HTTP address of this artifact. 3995 + type: string 3996 + required: 3997 + - lastUpdateTime 3998 + - path 3999 + - url 4000 + type: object 4001 + type: array 4002 + lastHandledReconcileAt: 4003 + description: |- 4004 + LastHandledReconcileAt holds the value of the most recent 4005 + reconcile request value, so a change of the annotation value 4006 + can be detected. 4007 + type: string 4008 + observedGeneration: 4009 + description: ObservedGeneration is the last observed generation. 4010 + format: int64 4011 + type: integer 4012 + url: 4013 + description: |- 4014 + URL is the download link for the artifact output of the last repository 4015 + sync. 4016 + type: string 4017 + type: object 4018 + type: object 4019 + served: true 4020 + storage: false 4021 + subresources: 4022 + status: {} 4023 + - additionalPrinterColumns: 4024 + - jsonPath: .spec.url 4025 + name: URL 4026 + type: string 4027 + - jsonPath: .metadata.creationTimestamp 4028 + name: Age 4029 + type: date 4030 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 4031 + name: Ready 4032 + type: string 4033 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 4034 + name: Status 4035 + type: string 4036 + deprecated: true 4037 + deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 4038 + name: v1beta2 4039 + schema: 4040 + openAPIV3Schema: 4041 + description: GitRepository is the Schema for the gitrepositories API. 4042 + properties: 4043 + apiVersion: 4044 + description: |- 4045 + APIVersion defines the versioned schema of this representation of an object. 4046 + Servers should convert recognized schemas to the latest internal value, and 4047 + may reject unrecognized values. 4048 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4049 + type: string 4050 + kind: 4051 + description: |- 4052 + Kind is a string value representing the REST resource this object represents. 4053 + Servers may infer this from the endpoint the client submits requests to. 4054 + Cannot be updated. 4055 + In CamelCase. 4056 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4057 + type: string 4058 + metadata: 4059 + type: object 4060 + spec: 4061 + description: |- 4062 + GitRepositorySpec specifies the required configuration to produce an 4063 + Artifact for a Git repository. 4064 + properties: 4065 + accessFrom: 4066 + description: |- 4067 + AccessFrom specifies an Access Control List for allowing cross-namespace 4068 + references to this object. 4069 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 4070 + properties: 4071 + namespaceSelectors: 4072 + description: |- 4073 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 4074 + Items in this list are evaluated using a logical OR operation. 4075 + items: 4076 + description: |- 4077 + NamespaceSelector selects the namespaces to which this ACL applies. 4078 + An empty map of MatchLabels matches all namespaces in a cluster. 4079 + properties: 4080 + matchLabels: 4081 + additionalProperties: 4082 + type: string 4083 + description: |- 4084 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 4085 + map is equivalent to an element of matchExpressions, whose key field is "key", the 4086 + operator is "In", and the values array contains only "value". The requirements are ANDed. 4087 + type: object 4088 + type: object 4089 + type: array 4090 + required: 4091 + - namespaceSelectors 4092 type: object 4093 - served: true 4094 - storage: false 4095 - subresources: 4096 - status: {} 4097 - - additionalPrinterColumns: 4098 - - jsonPath: .spec.url 4099 - name: URL 4100 - type: string 4101 - - jsonPath: .metadata.creationTimestamp 4102 - name: Age 4103 - type: date 4104 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 4105 - name: Ready 4106 - type: string 4107 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 4108 - name: Status 4109 - type: string 4110 - deprecated: true 4111 - deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 4112 - name: v1beta2 4113 - schema: 4114 - openAPIV3Schema: 4115 - description: GitRepository is the Schema for the gitrepositories API. 4116 + gitImplementation: 4117 + default: go-git 4118 + description: |- 4119 + GitImplementation specifies which Git client library implementation to 4120 + use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 4121 + Deprecated: gitImplementation is deprecated now that 'go-git' is the 4122 + only supported implementation. 4123 + enum: 4124 + - go-git 4125 + - libgit2 4126 + type: string 4127 + ignore: 4128 + description: |- 4129 + Ignore overrides the set of excluded patterns in the .sourceignore format 4130 + (which is the same as .gitignore). If not provided, a default will be used, 4131 + consult the documentation for your version to find out what those are. 4132 + type: string 4133 + include: 4134 + description: |- 4135 + Include specifies a list of GitRepository resources which Artifacts 4136 + should be included in the Artifact produced for this GitRepository. 4137 + items: 4138 + description: |- 4139 + GitRepositoryInclude specifies a local reference to a GitRepository which 4140 + Artifact (sub-)contents must be included, and where they should be placed. 4141 + properties: 4142 + fromPath: 4143 + description: |- 4144 + FromPath specifies the path to copy contents from, defaults to the root 4145 + of the Artifact. 4146 + type: string 4147 + repository: 4148 + description: |- 4149 + GitRepositoryRef specifies the GitRepository which Artifact contents 4150 + must be included. 4151 + properties: 4152 + name: 4153 + description: Name of the referent. 4154 + type: string 4155 + required: 4156 + - name 4157 + type: object 4158 + toPath: 4159 + description: |- 4160 + ToPath specifies the path to copy contents to, defaults to the name of 4161 + the GitRepositoryRef. 4162 + type: string 4163 + required: 4164 + - repository 4165 + type: object 4166 + type: array 4167 + interval: 4168 + description: Interval at which to check the GitRepository for updates. 4169 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4170 + type: string 4171 + recurseSubmodules: 4172 + description: |- 4173 + RecurseSubmodules enables the initialization of all submodules within 4174 + the GitRepository as cloned from the URL, using their default settings. 4175 + type: boolean 4176 + ref: 4177 + description: |- 4178 + Reference specifies the Git reference to resolve and monitor for 4179 + changes, defaults to the 'master' branch. 4180 properties: 4181 - apiVersion: 4182 - description: |- 4183 - APIVersion defines the versioned schema of this representation of an object. 4184 - Servers should convert recognized schemas to the latest internal value, and 4185 - may reject unrecognized values. 4186 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4187 - type: string 4188 - kind: 4189 - description: |- 4190 - Kind is a string value representing the REST resource this object represents. 4191 - Servers may infer this from the endpoint the client submits requests to. 4192 - Cannot be updated. 4193 - In CamelCase. 4194 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4195 - type: string 4196 - metadata: 4197 - type: object 4198 - spec: 4199 - description: |- 4200 - GitRepositorySpec specifies the required configuration to produce an 4201 - Artifact for a Git repository. 4202 - properties: 4203 - accessFrom: 4204 - description: |- 4205 - AccessFrom specifies an Access Control List for allowing cross-namespace 4206 - references to this object. 4207 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 4208 - properties: 4209 - namespaceSelectors: 4210 - description: |- 4211 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 4212 - Items in this list are evaluated using a logical OR operation. 4213 - items: 4214 - description: |- 4215 - NamespaceSelector selects the namespaces to which this ACL applies. 4216 - An empty map of MatchLabels matches all namespaces in a cluster. 4217 - properties: 4218 - matchLabels: 4219 - additionalProperties: 4220 - type: string 4221 - description: |- 4222 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 4223 - map is equivalent to an element of matchExpressions, whose key field is "key", the 4224 - operator is "In", and the values array contains only "value". The requirements are ANDed. 4225 - type: object 4226 - type: object 4227 - type: array 4228 - required: 4229 - - namespaceSelectors 4230 - type: object 4231 - gitImplementation: 4232 - default: go-git 4233 - description: |- 4234 - GitImplementation specifies which Git client library implementation to 4235 - use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 4236 - Deprecated: gitImplementation is deprecated now that 'go-git' is the 4237 - only supported implementation. 4238 - enum: 4239 - - go-git 4240 - - libgit2 4241 - type: string 4242 - ignore: 4243 - description: |- 4244 - Ignore overrides the set of excluded patterns in the .sourceignore format 4245 - (which is the same as .gitignore). If not provided, a default will be used, 4246 - consult the documentation for your version to find out what those are. 4247 - type: string 4248 - include: 4249 - description: |- 4250 - Include specifies a list of GitRepository resources which Artifacts 4251 - should be included in the Artifact produced for this GitRepository. 4252 - items: 4253 - description: |- 4254 - GitRepositoryInclude specifies a local reference to a GitRepository which 4255 - Artifact (sub-)contents must be included, and where they should be placed. 4256 - properties: 4257 - fromPath: 4258 - description: |- 4259 - FromPath specifies the path to copy contents from, defaults to the root 4260 - of the Artifact. 4261 - type: string 4262 - repository: 4263 - description: |- 4264 - GitRepositoryRef specifies the GitRepository which Artifact contents 4265 - must be included. 4266 - properties: 4267 - name: 4268 - description: Name of the referent. 4269 - type: string 4270 - required: 4271 - - name 4272 - type: object 4273 - toPath: 4274 - description: |- 4275 - ToPath specifies the path to copy contents to, defaults to the name of 4276 - the GitRepositoryRef. 4277 - type: string 4278 - required: 4279 - - repository 4280 - type: object 4281 - type: array 4282 - interval: 4283 - description: Interval at which to check the GitRepository for updates. 4284 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4285 - type: string 4286 - recurseSubmodules: 4287 - description: |- 4288 - RecurseSubmodules enables the initialization of all submodules within 4289 - the GitRepository as cloned from the URL, using their default settings. 4290 - type: boolean 4291 - ref: 4292 - description: |- 4293 - Reference specifies the Git reference to resolve and monitor for 4294 - changes, defaults to the 'master' branch. 4295 - properties: 4296 - branch: 4297 - description: Branch to check out, defaults to 'master' if no other field is defined. 4298 - type: string 4299 - commit: 4300 - description: |- 4301 - Commit SHA to check out, takes precedence over all reference fields. 4302 + branch: 4303 + description: Branch to check out, defaults to 'master' if no other 4304 + field is defined. 4305 + type: string 4306 + commit: 4307 + description: |- 4308 + Commit SHA to check out, takes precedence over all reference fields. 4309 4310 - This can be combined with Branch to shallow clone the branch, in which 4311 - the commit is expected to exist. 4312 - type: string 4313 - name: 4314 - description: |- 4315 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 4316 + This can be combined with Branch to shallow clone the branch, in which 4317 + the commit is expected to exist. 4318 + type: string 4319 + name: 4320 + description: |- 4321 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 4322 4323 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 4324 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 4325 - type: string 4326 - semver: 4327 - description: SemVer tag expression to check out, takes precedence over Tag. 4328 - type: string 4329 - tag: 4330 - description: Tag to check out, takes precedence over Branch. 4331 - type: string 4332 - type: object 4333 - secretRef: 4334 - description: |- 4335 - SecretRef specifies the Secret containing authentication credentials for 4336 - the GitRepository. 4337 - For HTTPS repositories the Secret must contain 'username' and 'password' 4338 - fields for basic auth or 'bearerToken' field for token auth. 4339 - For SSH repositories the Secret must contain 'identity' 4340 - and 'known_hosts' fields. 4341 - properties: 4342 - name: 4343 - description: Name of the referent. 4344 - type: string 4345 - required: 4346 - - name 4347 - type: object 4348 - suspend: 4349 - description: |- 4350 - Suspend tells the controller to suspend the reconciliation of this 4351 - GitRepository. 4352 - type: boolean 4353 - timeout: 4354 - default: 60s 4355 - description: Timeout for Git operations like cloning, defaults to 60s. 4356 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 4357 - type: string 4358 - url: 4359 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 4360 - pattern: ^(http|https|ssh)://.*$ 4361 - type: string 4362 - verify: 4363 - description: |- 4364 - Verification specifies the configuration to verify the Git commit 4365 - signature(s). 4366 - properties: 4367 - mode: 4368 - description: Mode specifies what Git object should be verified, currently ('head'). 4369 - enum: 4370 - - head 4371 - type: string 4372 - secretRef: 4373 - description: |- 4374 - SecretRef specifies the Secret containing the public keys of trusted Git 4375 - authors. 4376 - properties: 4377 - name: 4378 - description: Name of the referent. 4379 - type: string 4380 - required: 4381 - - name 4382 - type: object 4383 - required: 4384 - - mode 4385 - - secretRef 4386 - type: object 4387 - required: 4388 - - interval 4389 - - url 4390 - type: object 4391 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 4392 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 4393 + type: string 4394 + semver: 4395 + description: SemVer tag expression to check out, takes precedence 4396 + over Tag. 4397 + type: string 4398 + tag: 4399 + description: Tag to check out, takes precedence over Branch. 4400 + type: string 4401 + type: object 4402 + secretRef: 4403 + description: |- 4404 + SecretRef specifies the Secret containing authentication credentials for 4405 + the GitRepository. 4406 + For HTTPS repositories the Secret must contain 'username' and 'password' 4407 + fields for basic auth or 'bearerToken' field for token auth. 4408 + For SSH repositories the Secret must contain 'identity' 4409 + and 'known_hosts' fields. 4410 + properties: 4411 + name: 4412 + description: Name of the referent. 4413 + type: string 4414 + required: 4415 + - name 4416 + type: object 4417 + suspend: 4418 + description: |- 4419 + Suspend tells the controller to suspend the reconciliation of this 4420 + GitRepository. 4421 + type: boolean 4422 + timeout: 4423 + default: 60s 4424 + description: Timeout for Git operations like cloning, defaults to 4425 + 60s. 4426 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 4427 + type: string 4428 + url: 4429 + description: URL specifies the Git repository URL, it can be an HTTP/S 4430 + or SSH address. 4431 + pattern: ^(http|https|ssh)://.*$ 4432 + type: string 4433 + verify: 4434 + description: |- 4435 + Verification specifies the configuration to verify the Git commit 4436 + signature(s). 4437 + properties: 4438 + mode: 4439 + description: Mode specifies what Git object should be verified, 4440 + currently ('head'). 4441 + enum: 4442 + - head 4443 + type: string 4444 + secretRef: 4445 + description: |- 4446 + SecretRef specifies the Secret containing the public keys of trusted Git 4447 + authors. 4448 + properties: 4449 + name: 4450 + description: Name of the referent. 4451 + type: string 4452 + required: 4453 + - name 4454 + type: object 4455 + required: 4456 + - mode 4457 + - secretRef 4458 + type: object 4459 + required: 4460 + - interval 4461 + - url 4462 + type: object 4463 + status: 4464 + default: 4465 + observedGeneration: -1 4466 + description: GitRepositoryStatus records the observed state of a Git repository. 4467 + properties: 4468 + artifact: 4469 + description: Artifact represents the last successful GitRepository 4470 + reconciliation. 4471 + properties: 4472 + digest: 4473 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4474 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4475 + type: string 4476 + lastUpdateTime: 4477 + description: |- 4478 + LastUpdateTime is the timestamp corresponding to the last update of the 4479 + Artifact. 4480 + format: date-time 4481 + type: string 4482 + metadata: 4483 + additionalProperties: 4484 + type: string 4485 + description: Metadata holds upstream information such as OCI annotations. 4486 + type: object 4487 + path: 4488 + description: |- 4489 + Path is the relative file path of the Artifact. It can be used to locate 4490 + the file in the root of the Artifact storage on the local file system of 4491 + the controller managing the Source. 4492 + type: string 4493 + revision: 4494 + description: |- 4495 + Revision is a human-readable identifier traceable in the origin source 4496 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4497 + type: string 4498 + size: 4499 + description: Size is the number of bytes in the file. 4500 + format: int64 4501 + type: integer 4502 + url: 4503 + description: |- 4504 + URL is the HTTP address of the Artifact as exposed by the controller 4505 + managing the Source. It can be used to retrieve the Artifact for 4506 + consumption, e.g. by another controller applying the Artifact contents. 4507 + type: string 4508 + required: 4509 + - lastUpdateTime 4510 + - path 4511 + - revision 4512 + - url 4513 + type: object 4514 + conditions: 4515 + description: Conditions holds the conditions for the GitRepository. 4516 + items: 4517 + description: Condition contains details for one aspect of the current 4518 + state of this API Resource. 4519 + properties: 4520 + lastTransitionTime: 4521 + description: |- 4522 + lastTransitionTime is the last time the condition transitioned from one status to another. 4523 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4524 + format: date-time 4525 + type: string 4526 + message: 4527 + description: |- 4528 + message is a human readable message indicating details about the transition. 4529 + This may be an empty string. 4530 + maxLength: 32768 4531 + type: string 4532 + observedGeneration: 4533 + description: |- 4534 + observedGeneration represents the .metadata.generation that the condition was set based upon. 4535 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4536 + with respect to the current state of the instance. 4537 + format: int64 4538 + minimum: 0 4539 + type: integer 4540 + reason: 4541 + description: |- 4542 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 4543 + Producers of specific condition types may define expected values and meanings for this field, 4544 + and whether the values are considered a guaranteed API. 4545 + The value should be a CamelCase string. 4546 + This field may not be empty. 4547 + maxLength: 1024 4548 + minLength: 1 4549 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4550 + type: string 4551 status: 4552 - default: 4553 - observedGeneration: -1 4554 - description: GitRepositoryStatus records the observed state of a Git repository. 4555 - properties: 4556 - artifact: 4557 - description: Artifact represents the last successful GitRepository reconciliation. 4558 - properties: 4559 - digest: 4560 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4561 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4562 - type: string 4563 - lastUpdateTime: 4564 - description: |- 4565 - LastUpdateTime is the timestamp corresponding to the last update of the 4566 - Artifact. 4567 - format: date-time 4568 - type: string 4569 - metadata: 4570 - additionalProperties: 4571 - type: string 4572 - description: Metadata holds upstream information such as OCI annotations. 4573 - type: object 4574 - path: 4575 - description: |- 4576 - Path is the relative file path of the Artifact. It can be used to locate 4577 - the file in the root of the Artifact storage on the local file system of 4578 - the controller managing the Source. 4579 - type: string 4580 - revision: 4581 - description: |- 4582 - Revision is a human-readable identifier traceable in the origin source 4583 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4584 - type: string 4585 - size: 4586 - description: Size is the number of bytes in the file. 4587 - format: int64 4588 - type: integer 4589 - url: 4590 - description: |- 4591 - URL is the HTTP address of the Artifact as exposed by the controller 4592 - managing the Source. It can be used to retrieve the Artifact for 4593 - consumption, e.g. by another controller applying the Artifact contents. 4594 - type: string 4595 - required: 4596 - - lastUpdateTime 4597 - - path 4598 - - revision 4599 - - url 4600 - type: object 4601 - conditions: 4602 - description: Conditions holds the conditions for the GitRepository. 4603 - items: 4604 - description: Condition contains details for one aspect of the current state of this API 4605 - Resource. 4606 - properties: 4607 - lastTransitionTime: 4608 - description: |- 4609 - lastTransitionTime is the last time the condition transitioned from one status to another. 4610 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4611 - format: date-time 4612 - type: string 4613 - message: 4614 - description: |- 4615 - message is a human readable message indicating details about the transition. 4616 - This may be an empty string. 4617 - maxLength: 32768 4618 - type: string 4619 - observedGeneration: 4620 - description: |- 4621 - observedGeneration represents the .metadata.generation that the condition was set based upon. 4622 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4623 - with respect to the current state of the instance. 4624 - format: int64 4625 - minimum: 0 4626 - type: integer 4627 - reason: 4628 - description: |- 4629 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 4630 - Producers of specific condition types may define expected values and meanings for this field, 4631 - and whether the values are considered a guaranteed API. 4632 - The value should be a CamelCase string. 4633 - This field may not be empty. 4634 - maxLength: 1024 4635 - minLength: 1 4636 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4637 - type: string 4638 - status: 4639 - description: status of the condition, one of True, False, Unknown. 4640 - enum: 4641 - - "True" 4642 - - "False" 4643 - - Unknown 4644 - type: string 4645 - type: 4646 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 4647 - maxLength: 316 4648 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4649 - type: string 4650 - required: 4651 - - lastTransitionTime 4652 - - message 4653 - - reason 4654 - - status 4655 - - type 4656 - type: object 4657 - type: array 4658 - contentConfigChecksum: 4659 - description: |- 4660 - ContentConfigChecksum is a checksum of all the configurations related to 4661 - the content of the source artifact: 4662 - - .spec.ignore 4663 - - .spec.recurseSubmodules 4664 - - .spec.included and the checksum of the included artifacts 4665 - observed in .status.observedGeneration version of the object. This can 4666 - be used to determine if the content of the included repository has 4667 - changed. 4668 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4669 + description: status of the condition, one of True, False, Unknown. 4670 + enum: 4671 + - "True" 4672 + - "False" 4673 + - Unknown 4674 + type: string 4675 + type: 4676 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 4677 + maxLength: 316 4678 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4679 + type: string 4680 + required: 4681 + - lastTransitionTime 4682 + - message 4683 + - reason 4684 + - status 4685 + - type 4686 + type: object 4687 + type: array 4688 + contentConfigChecksum: 4689 + description: |- 4690 + ContentConfigChecksum is a checksum of all the configurations related to 4691 + the content of the source artifact: 4692 + - .spec.ignore 4693 + - .spec.recurseSubmodules 4694 + - .spec.included and the checksum of the included artifacts 4695 + observed in .status.observedGeneration version of the object. This can 4696 + be used to determine if the content of the included repository has 4697 + changed. 4698 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4699 4700 - Deprecated: Replaced with explicit fields for observed artifact content 4701 - config in the status. 4702 - type: string 4703 - includedArtifacts: 4704 - description: |- 4705 - IncludedArtifacts contains a list of the last successfully included 4706 - Artifacts as instructed by GitRepositorySpec.Include. 4707 - items: 4708 - description: Artifact represents the output of a Source reconciliation. 4709 - properties: 4710 - digest: 4711 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4712 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4713 - type: string 4714 - lastUpdateTime: 4715 - description: |- 4716 - LastUpdateTime is the timestamp corresponding to the last update of the 4717 - Artifact. 4718 - format: date-time 4719 - type: string 4720 - metadata: 4721 - additionalProperties: 4722 - type: string 4723 - description: Metadata holds upstream information such as OCI annotations. 4724 - type: object 4725 - path: 4726 - description: |- 4727 - Path is the relative file path of the Artifact. It can be used to locate 4728 - the file in the root of the Artifact storage on the local file system of 4729 - the controller managing the Source. 4730 - type: string 4731 - revision: 4732 - description: |- 4733 - Revision is a human-readable identifier traceable in the origin source 4734 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4735 - type: string 4736 - size: 4737 - description: Size is the number of bytes in the file. 4738 - format: int64 4739 - type: integer 4740 - url: 4741 - description: |- 4742 - URL is the HTTP address of the Artifact as exposed by the controller 4743 - managing the Source. It can be used to retrieve the Artifact for 4744 - consumption, e.g. by another controller applying the Artifact contents. 4745 - type: string 4746 - required: 4747 - - lastUpdateTime 4748 - - path 4749 - - revision 4750 - - url 4751 - type: object 4752 - type: array 4753 - lastHandledReconcileAt: 4754 - description: |- 4755 - LastHandledReconcileAt holds the value of the most recent 4756 - reconcile request value, so a change of the annotation value 4757 - can be detected. 4758 - type: string 4759 - observedGeneration: 4760 - description: |- 4761 - ObservedGeneration is the last observed generation of the GitRepository 4762 - object. 4763 - format: int64 4764 - type: integer 4765 - observedIgnore: 4766 - description: |- 4767 - ObservedIgnore is the observed exclusion patterns used for constructing 4768 - the source artifact. 4769 - type: string 4770 - observedInclude: 4771 - description: |- 4772 - ObservedInclude is the observed list of GitRepository resources used to 4773 - to produce the current Artifact. 4774 - items: 4775 - description: |- 4776 - GitRepositoryInclude specifies a local reference to a GitRepository which 4777 - Artifact (sub-)contents must be included, and where they should be placed. 4778 - properties: 4779 - fromPath: 4780 - description: |- 4781 - FromPath specifies the path to copy contents from, defaults to the root 4782 - of the Artifact. 4783 - type: string 4784 - repository: 4785 - description: |- 4786 - GitRepositoryRef specifies the GitRepository which Artifact contents 4787 - must be included. 4788 - properties: 4789 - name: 4790 - description: Name of the referent. 4791 - type: string 4792 - required: 4793 - - name 4794 - type: object 4795 - toPath: 4796 - description: |- 4797 - ToPath specifies the path to copy contents to, defaults to the name of 4798 - the GitRepositoryRef. 4799 - type: string 4800 - required: 4801 - - repository 4802 - type: object 4803 - type: array 4804 - observedRecurseSubmodules: 4805 - description: |- 4806 - ObservedRecurseSubmodules is the observed resource submodules 4807 - configuration used to produce the current Artifact. 4808 - type: boolean 4809 - url: 4810 - description: |- 4811 - URL is the dynamic fetch link for the latest Artifact. 4812 - It is provided on a "best effort" basis, and using the precise 4813 - GitRepositoryStatus.Artifact data is recommended. 4814 - type: string 4815 - type: object 4816 - type: object 4817 - served: true 4818 - storage: false 4819 - subresources: 4820 - status: {} 4821 + Deprecated: Replaced with explicit fields for observed artifact content 4822 + config in the status. 4823 + type: string 4824 + includedArtifacts: 4825 + description: |- 4826 + IncludedArtifacts contains a list of the last successfully included 4827 + Artifacts as instructed by GitRepositorySpec.Include. 4828 + items: 4829 + description: Artifact represents the output of a Source reconciliation. 4830 + properties: 4831 + digest: 4832 + description: Digest is the digest of the file in the form of 4833 + '<algorithm>:<checksum>'. 4834 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4835 + type: string 4836 + lastUpdateTime: 4837 + description: |- 4838 + LastUpdateTime is the timestamp corresponding to the last update of the 4839 + Artifact. 4840 + format: date-time 4841 + type: string 4842 + metadata: 4843 + additionalProperties: 4844 + type: string 4845 + description: Metadata holds upstream information such as OCI 4846 + annotations. 4847 + type: object 4848 + path: 4849 + description: |- 4850 + Path is the relative file path of the Artifact. It can be used to locate 4851 + the file in the root of the Artifact storage on the local file system of 4852 + the controller managing the Source. 4853 + type: string 4854 + revision: 4855 + description: |- 4856 + Revision is a human-readable identifier traceable in the origin source 4857 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4858 + type: string 4859 + size: 4860 + description: Size is the number of bytes in the file. 4861 + format: int64 4862 + type: integer 4863 + url: 4864 + description: |- 4865 + URL is the HTTP address of the Artifact as exposed by the controller 4866 + managing the Source. It can be used to retrieve the Artifact for 4867 + consumption, e.g. by another controller applying the Artifact contents. 4868 + type: string 4869 + required: 4870 + - lastUpdateTime 4871 + - path 4872 + - revision 4873 + - url 4874 + type: object 4875 + type: array 4876 + lastHandledReconcileAt: 4877 + description: |- 4878 + LastHandledReconcileAt holds the value of the most recent 4879 + reconcile request value, so a change of the annotation value 4880 + can be detected. 4881 + type: string 4882 + observedGeneration: 4883 + description: |- 4884 + ObservedGeneration is the last observed generation of the GitRepository 4885 + object. 4886 + format: int64 4887 + type: integer 4888 + observedIgnore: 4889 + description: |- 4890 + ObservedIgnore is the observed exclusion patterns used for constructing 4891 + the source artifact. 4892 + type: string 4893 + observedInclude: 4894 + description: |- 4895 + ObservedInclude is the observed list of GitRepository resources used to 4896 + to produce the current Artifact. 4897 + items: 4898 + description: |- 4899 + GitRepositoryInclude specifies a local reference to a GitRepository which 4900 + Artifact (sub-)contents must be included, and where they should be placed. 4901 + properties: 4902 + fromPath: 4903 + description: |- 4904 + FromPath specifies the path to copy contents from, defaults to the root 4905 + of the Artifact. 4906 + type: string 4907 + repository: 4908 + description: |- 4909 + GitRepositoryRef specifies the GitRepository which Artifact contents 4910 + must be included. 4911 + properties: 4912 + name: 4913 + description: Name of the referent. 4914 + type: string 4915 + required: 4916 + - name 4917 + type: object 4918 + toPath: 4919 + description: |- 4920 + ToPath specifies the path to copy contents to, defaults to the name of 4921 + the GitRepositoryRef. 4922 + type: string 4923 + required: 4924 + - repository 4925 + type: object 4926 + type: array 4927 + observedRecurseSubmodules: 4928 + description: |- 4929 + ObservedRecurseSubmodules is the observed resource submodules 4930 + configuration used to produce the current Artifact. 4931 + type: boolean 4932 + url: 4933 + description: |- 4934 + URL is the dynamic fetch link for the latest Artifact. 4935 + It is provided on a "best effort" basis, and using the precise 4936 + GitRepositoryStatus.Artifact data is recommended. 4937 + type: string 4938 + type: object 4939 + type: object 4940 + served: true 4941 + storage: false 4942 + subresources: 4943 + status: {} 4944 --- 4945 apiVersion: apiextensions.k8s.io/v1 4946 kind: CustomResourceDefinition 4947 metadata: 4948 - annotations: 4949 - controller-gen.kubebuilder.io/version: v0.16.1 4950 - labels: 4951 - app.kubernetes.io/component: source-controller 4952 - app.kubernetes.io/instance: flux-system 4953 - app.kubernetes.io/part-of: flux 4954 - app.kubernetes.io/version: v2.4.0 4955 - name: helmcharts.source.toolkit.fluxcd.io 4956 + annotations: 4957 + controller-gen.kubebuilder.io/version: v0.16.1 4958 + labels: 4959 + app.kubernetes.io/component: source-controller 4960 + app.kubernetes.io/instance: flux-system 4961 + app.kubernetes.io/part-of: flux 4962 + app.kubernetes.io/version: v2.5.1 4963 + name: helmcharts.source.toolkit.fluxcd.io 4964 spec: 4965 - group: source.toolkit.fluxcd.io 4966 - names: 4967 - kind: HelmChart 4968 - listKind: HelmChartList 4969 - plural: helmcharts 4970 - shortNames: 4971 - - hc 4972 - singular: helmchart 4973 - scope: Namespaced 4974 - versions: 4975 - - additionalPrinterColumns: 4976 - - jsonPath: .spec.chart 4977 - name: Chart 4978 - type: string 4979 - - jsonPath: .spec.version 4980 - name: Version 4981 - type: string 4982 - - jsonPath: .spec.sourceRef.kind 4983 - name: Source Kind 4984 - type: string 4985 - - jsonPath: .spec.sourceRef.name 4986 - name: Source Name 4987 - type: string 4988 - - jsonPath: .metadata.creationTimestamp 4989 - name: Age 4990 - type: date 4991 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 4992 - name: Ready 4993 - type: string 4994 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 4995 - name: Status 4996 - type: string 4997 - name: v1 4998 - schema: 4999 - openAPIV3Schema: 5000 - description: HelmChart is the Schema for the helmcharts API. 5001 + group: source.toolkit.fluxcd.io 5002 + names: 5003 + kind: HelmChart 5004 + listKind: HelmChartList 5005 + plural: helmcharts 5006 + shortNames: 5007 + - hc 5008 + singular: helmchart 5009 + scope: Namespaced 5010 + versions: 5011 + - additionalPrinterColumns: 5012 + - jsonPath: .spec.chart 5013 + name: Chart 5014 + type: string 5015 + - jsonPath: .spec.version 5016 + name: Version 5017 + type: string 5018 + - jsonPath: .spec.sourceRef.kind 5019 + name: Source Kind 5020 + type: string 5021 + - jsonPath: .spec.sourceRef.name 5022 + name: Source Name 5023 + type: string 5024 + - jsonPath: .metadata.creationTimestamp 5025 + name: Age 5026 + type: date 5027 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5028 + name: Ready 5029 + type: string 5030 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5031 + name: Status 5032 + type: string 5033 + name: v1 5034 + schema: 5035 + openAPIV3Schema: 5036 + description: HelmChart is the Schema for the helmcharts API. 5037 + properties: 5038 + apiVersion: 5039 + description: |- 5040 + APIVersion defines the versioned schema of this representation of an object. 5041 + Servers should convert recognized schemas to the latest internal value, and 5042 + may reject unrecognized values. 5043 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5044 + type: string 5045 + kind: 5046 + description: |- 5047 + Kind is a string value representing the REST resource this object represents. 5048 + Servers may infer this from the endpoint the client submits requests to. 5049 + Cannot be updated. 5050 + In CamelCase. 5051 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5052 + type: string 5053 + metadata: 5054 + type: object 5055 + spec: 5056 + description: HelmChartSpec specifies the desired state of a Helm chart. 5057 + properties: 5058 + chart: 5059 + description: |- 5060 + Chart is the name or path the Helm chart is available at in the 5061 + SourceRef. 5062 + type: string 5063 + ignoreMissingValuesFiles: 5064 + description: |- 5065 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 5066 + files rather than failing. 5067 + type: boolean 5068 + interval: 5069 + description: |- 5070 + Interval at which the HelmChart SourceRef is checked for updates. 5071 + This interval is approximate and may be subject to jitter to ensure 5072 + efficient use of resources. 5073 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5074 + type: string 5075 + reconcileStrategy: 5076 + default: ChartVersion 5077 + description: |- 5078 + ReconcileStrategy determines what enables the creation of a new artifact. 5079 + Valid values are ('ChartVersion', 'Revision'). 5080 + See the documentation of the values for an explanation on their behavior. 5081 + Defaults to ChartVersion when omitted. 5082 + enum: 5083 + - ChartVersion 5084 + - Revision 5085 + type: string 5086 + sourceRef: 5087 + description: SourceRef is the reference to the Source the chart is 5088 + available at. 5089 properties: 5090 - apiVersion: 5091 - description: |- 5092 - APIVersion defines the versioned schema of this representation of an object. 5093 - Servers should convert recognized schemas to the latest internal value, and 5094 - may reject unrecognized values. 5095 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5096 - type: string 5097 - kind: 5098 - description: |- 5099 - Kind is a string value representing the REST resource this object represents. 5100 - Servers may infer this from the endpoint the client submits requests to. 5101 - Cannot be updated. 5102 - In CamelCase. 5103 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5104 + apiVersion: 5105 + description: APIVersion of the referent. 5106 + type: string 5107 + kind: 5108 + description: |- 5109 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5110 + 'Bucket'). 5111 + enum: 5112 + - HelmRepository 5113 + - GitRepository 5114 + - Bucket 5115 + type: string 5116 + name: 5117 + description: Name of the referent. 5118 + type: string 5119 + required: 5120 + - kind 5121 + - name 5122 + type: object 5123 + suspend: 5124 + description: |- 5125 + Suspend tells the controller to suspend the reconciliation of this 5126 + source. 5127 + type: boolean 5128 + valuesFiles: 5129 + description: |- 5130 + ValuesFiles is an alternative list of values files to use as the chart 5131 + values (values.yaml is not included by default), expected to be a 5132 + relative path in the SourceRef. 5133 + Values files are merged in the order of this list with the last file 5134 + overriding the first. Ignored when omitted. 5135 + items: 5136 + type: string 5137 + type: array 5138 + verify: 5139 + description: |- 5140 + Verify contains the secret name containing the trusted public keys 5141 + used to verify the signature and specifies which provider to use to check 5142 + whether OCI image is authentic. 5143 + This field is only supported when using HelmRepository source with spec.type 'oci'. 5144 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5145 + properties: 5146 + matchOIDCIdentity: 5147 + description: |- 5148 + MatchOIDCIdentity specifies the identity matching criteria to use 5149 + while verifying an OCI artifact which was signed using Cosign keyless 5150 + signing. The artifact's identity is deemed to be verified if any of the 5151 + specified matchers match against the identity. 5152 + items: 5153 + description: |- 5154 + OIDCIdentityMatch specifies options for verifying the certificate identity, 5155 + i.e. the issuer and the subject of the certificate. 5156 + properties: 5157 + issuer: 5158 + description: |- 5159 + Issuer specifies the regex pattern to match against to verify 5160 + the OIDC issuer in the Fulcio certificate. The pattern must be a 5161 + valid Go regular expression. 5162 + type: string 5163 + subject: 5164 + description: |- 5165 + Subject specifies the regex pattern to match against to verify 5166 + the identity subject in the Fulcio certificate. The pattern must 5167 + be a valid Go regular expression. 5168 + type: string 5169 + required: 5170 + - issuer 5171 + - subject 5172 + type: object 5173 + type: array 5174 + provider: 5175 + default: cosign 5176 + description: Provider specifies the technology used to sign the 5177 + OCI Artifact. 5178 + enum: 5179 + - cosign 5180 + - notation 5181 + type: string 5182 + secretRef: 5183 + description: |- 5184 + SecretRef specifies the Kubernetes Secret containing the 5185 + trusted public keys. 5186 + properties: 5187 + name: 5188 + description: Name of the referent. 5189 type: string 5190 - metadata: 5191 - type: object 5192 - spec: 5193 - description: HelmChartSpec specifies the desired state of a Helm chart. 5194 - properties: 5195 - chart: 5196 - description: |- 5197 - Chart is the name or path the Helm chart is available at in the 5198 - SourceRef. 5199 - type: string 5200 - ignoreMissingValuesFiles: 5201 - description: |- 5202 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 5203 - files rather than failing. 5204 - type: boolean 5205 - interval: 5206 - description: |- 5207 - Interval at which the HelmChart SourceRef is checked for updates. 5208 - This interval is approximate and may be subject to jitter to ensure 5209 - efficient use of resources. 5210 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5211 - type: string 5212 - reconcileStrategy: 5213 - default: ChartVersion 5214 - description: |- 5215 - ReconcileStrategy determines what enables the creation of a new artifact. 5216 - Valid values are ('ChartVersion', 'Revision'). 5217 - See the documentation of the values for an explanation on their behavior. 5218 - Defaults to ChartVersion when omitted. 5219 - enum: 5220 - - ChartVersion 5221 - - Revision 5222 - type: string 5223 - sourceRef: 5224 - description: SourceRef is the reference to the Source the chart is available at. 5225 - properties: 5226 - apiVersion: 5227 - description: APIVersion of the referent. 5228 - type: string 5229 - kind: 5230 - description: |- 5231 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5232 - 'Bucket'). 5233 - enum: 5234 - - HelmRepository 5235 - - GitRepository 5236 - - Bucket 5237 - type: string 5238 - name: 5239 - description: Name of the referent. 5240 - type: string 5241 - required: 5242 - - kind 5243 - - name 5244 - type: object 5245 - suspend: 5246 - description: |- 5247 - Suspend tells the controller to suspend the reconciliation of this 5248 - source. 5249 - type: boolean 5250 - valuesFiles: 5251 - description: |- 5252 - ValuesFiles is an alternative list of values files to use as the chart 5253 - values (values.yaml is not included by default), expected to be a 5254 - relative path in the SourceRef. 5255 - Values files are merged in the order of this list with the last file 5256 - overriding the first. Ignored when omitted. 5257 - items: 5258 - type: string 5259 - type: array 5260 - verify: 5261 - description: |- 5262 - Verify contains the secret name containing the trusted public keys 5263 - used to verify the signature and specifies which provider to use to check 5264 - whether OCI image is authentic. 5265 - This field is only supported when using HelmRepository source with spec.type 'oci'. 5266 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5267 - properties: 5268 - matchOIDCIdentity: 5269 - description: |- 5270 - MatchOIDCIdentity specifies the identity matching criteria to use 5271 - while verifying an OCI artifact which was signed using Cosign keyless 5272 - signing. The artifact's identity is deemed to be verified if any of the 5273 - specified matchers match against the identity. 5274 - items: 5275 - description: |- 5276 - OIDCIdentityMatch specifies options for verifying the certificate identity, 5277 - i.e. the issuer and the subject of the certificate. 5278 - properties: 5279 - issuer: 5280 - description: |- 5281 - Issuer specifies the regex pattern to match against to verify 5282 - the OIDC issuer in the Fulcio certificate. The pattern must be a 5283 - valid Go regular expression. 5284 - type: string 5285 - subject: 5286 - description: |- 5287 - Subject specifies the regex pattern to match against to verify 5288 - the identity subject in the Fulcio certificate. The pattern must 5289 - be a valid Go regular expression. 5290 - type: string 5291 - required: 5292 - - issuer 5293 - - subject 5294 - type: object 5295 - type: array 5296 - provider: 5297 - default: cosign 5298 - description: Provider specifies the technology used to sign the OCI Artifact. 5299 - enum: 5300 - - cosign 5301 - - notation 5302 - type: string 5303 - secretRef: 5304 - description: |- 5305 - SecretRef specifies the Kubernetes Secret containing the 5306 - trusted public keys. 5307 - properties: 5308 - name: 5309 - description: Name of the referent. 5310 - type: string 5311 - required: 5312 - - name 5313 - type: object 5314 - required: 5315 - - provider 5316 - type: object 5317 - version: 5318 - default: '*' 5319 - description: |- 5320 - Version is the chart version semver expression, ignored for charts from 5321 - GitRepository and Bucket sources. Defaults to latest when omitted. 5322 - type: string 5323 - required: 5324 - - chart 5325 - - interval 5326 - - sourceRef 5327 - type: object 5328 + required: 5329 + - name 5330 + type: object 5331 + required: 5332 + - provider 5333 + type: object 5334 + version: 5335 + default: '*' 5336 + description: |- 5337 + Version is the chart version semver expression, ignored for charts from 5338 + GitRepository and Bucket sources. Defaults to latest when omitted. 5339 + type: string 5340 + required: 5341 + - chart 5342 + - interval 5343 + - sourceRef 5344 + type: object 5345 + status: 5346 + default: 5347 + observedGeneration: -1 5348 + description: HelmChartStatus records the observed state of the HelmChart. 5349 + properties: 5350 + artifact: 5351 + description: Artifact represents the output of the last successful 5352 + reconciliation. 5353 + properties: 5354 + digest: 5355 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5356 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5357 + type: string 5358 + lastUpdateTime: 5359 + description: |- 5360 + LastUpdateTime is the timestamp corresponding to the last update of the 5361 + Artifact. 5362 + format: date-time 5363 + type: string 5364 + metadata: 5365 + additionalProperties: 5366 + type: string 5367 + description: Metadata holds upstream information such as OCI annotations. 5368 + type: object 5369 + path: 5370 + description: |- 5371 + Path is the relative file path of the Artifact. It can be used to locate 5372 + the file in the root of the Artifact storage on the local file system of 5373 + the controller managing the Source. 5374 + type: string 5375 + revision: 5376 + description: |- 5377 + Revision is a human-readable identifier traceable in the origin source 5378 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5379 + type: string 5380 + size: 5381 + description: Size is the number of bytes in the file. 5382 + format: int64 5383 + type: integer 5384 + url: 5385 + description: |- 5386 + URL is the HTTP address of the Artifact as exposed by the controller 5387 + managing the Source. It can be used to retrieve the Artifact for 5388 + consumption, e.g. by another controller applying the Artifact contents. 5389 + type: string 5390 + required: 5391 + - lastUpdateTime 5392 + - path 5393 + - revision 5394 + - url 5395 + type: object 5396 + conditions: 5397 + description: Conditions holds the conditions for the HelmChart. 5398 + items: 5399 + description: Condition contains details for one aspect of the current 5400 + state of this API Resource. 5401 + properties: 5402 + lastTransitionTime: 5403 + description: |- 5404 + lastTransitionTime is the last time the condition transitioned from one status to another. 5405 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5406 + format: date-time 5407 + type: string 5408 + message: 5409 + description: |- 5410 + message is a human readable message indicating details about the transition. 5411 + This may be an empty string. 5412 + maxLength: 32768 5413 + type: string 5414 + observedGeneration: 5415 + description: |- 5416 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5417 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5418 + with respect to the current state of the instance. 5419 + format: int64 5420 + minimum: 0 5421 + type: integer 5422 + reason: 5423 + description: |- 5424 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5425 + Producers of specific condition types may define expected values and meanings for this field, 5426 + and whether the values are considered a guaranteed API. 5427 + The value should be a CamelCase string. 5428 + This field may not be empty. 5429 + maxLength: 1024 5430 + minLength: 1 5431 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5432 + type: string 5433 status: 5434 - default: 5435 - observedGeneration: -1 5436 - description: HelmChartStatus records the observed state of the HelmChart. 5437 - properties: 5438 - artifact: 5439 - description: Artifact represents the output of the last successful reconciliation. 5440 - properties: 5441 - digest: 5442 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5443 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5444 - type: string 5445 - lastUpdateTime: 5446 - description: |- 5447 - LastUpdateTime is the timestamp corresponding to the last update of the 5448 - Artifact. 5449 - format: date-time 5450 - type: string 5451 - metadata: 5452 - additionalProperties: 5453 - type: string 5454 - description: Metadata holds upstream information such as OCI annotations. 5455 - type: object 5456 - path: 5457 - description: |- 5458 - Path is the relative file path of the Artifact. It can be used to locate 5459 - the file in the root of the Artifact storage on the local file system of 5460 - the controller managing the Source. 5461 - type: string 5462 - revision: 5463 - description: |- 5464 - Revision is a human-readable identifier traceable in the origin source 5465 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5466 - type: string 5467 - size: 5468 - description: Size is the number of bytes in the file. 5469 - format: int64 5470 - type: integer 5471 - url: 5472 - description: |- 5473 - URL is the HTTP address of the Artifact as exposed by the controller 5474 - managing the Source. It can be used to retrieve the Artifact for 5475 - consumption, e.g. by another controller applying the Artifact contents. 5476 - type: string 5477 - required: 5478 - - lastUpdateTime 5479 - - path 5480 - - revision 5481 - - url 5482 - type: object 5483 - conditions: 5484 - description: Conditions holds the conditions for the HelmChart. 5485 - items: 5486 - description: Condition contains details for one aspect of the current state of this API 5487 - Resource. 5488 - properties: 5489 - lastTransitionTime: 5490 - description: |- 5491 - lastTransitionTime is the last time the condition transitioned from one status to another. 5492 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5493 - format: date-time 5494 - type: string 5495 - message: 5496 - description: |- 5497 - message is a human readable message indicating details about the transition. 5498 - This may be an empty string. 5499 - maxLength: 32768 5500 - type: string 5501 - observedGeneration: 5502 - description: |- 5503 - observedGeneration represents the .metadata.generation that the condition was set based upon. 5504 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5505 - with respect to the current state of the instance. 5506 - format: int64 5507 - minimum: 0 5508 - type: integer 5509 - reason: 5510 - description: |- 5511 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 5512 - Producers of specific condition types may define expected values and meanings for this field, 5513 - and whether the values are considered a guaranteed API. 5514 - The value should be a CamelCase string. 5515 - This field may not be empty. 5516 - maxLength: 1024 5517 - minLength: 1 5518 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5519 - type: string 5520 - status: 5521 - description: status of the condition, one of True, False, Unknown. 5522 - enum: 5523 - - "True" 5524 - - "False" 5525 - - Unknown 5526 - type: string 5527 - type: 5528 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 5529 - maxLength: 316 5530 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5531 - type: string 5532 - required: 5533 - - lastTransitionTime 5534 - - message 5535 - - reason 5536 - - status 5537 - - type 5538 - type: object 5539 - type: array 5540 - lastHandledReconcileAt: 5541 - description: |- 5542 - LastHandledReconcileAt holds the value of the most recent 5543 - reconcile request value, so a change of the annotation value 5544 - can be detected. 5545 - type: string 5546 - observedChartName: 5547 - description: |- 5548 - ObservedChartName is the last observed chart name as specified by the 5549 - resolved chart reference. 5550 - type: string 5551 - observedGeneration: 5552 - description: |- 5553 - ObservedGeneration is the last observed generation of the HelmChart 5554 - object. 5555 - format: int64 5556 - type: integer 5557 - observedSourceArtifactRevision: 5558 - description: |- 5559 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 5560 - of the HelmChartSpec.SourceRef. 5561 - type: string 5562 - observedValuesFiles: 5563 - description: |- 5564 - ObservedValuesFiles are the observed value files of the last successful 5565 - reconciliation. 5566 - It matches the chart in the last successfully reconciled artifact. 5567 - items: 5568 - type: string 5569 - type: array 5570 - url: 5571 - description: |- 5572 - URL is the dynamic fetch link for the latest Artifact. 5573 - It is provided on a "best effort" basis, and using the precise 5574 - BucketStatus.Artifact data is recommended. 5575 - type: string 5576 - type: object 5577 + description: status of the condition, one of True, False, Unknown. 5578 + enum: 5579 + - "True" 5580 + - "False" 5581 + - Unknown 5582 + type: string 5583 + type: 5584 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 5585 + maxLength: 316 5586 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5587 + type: string 5588 + required: 5589 + - lastTransitionTime 5590 + - message 5591 + - reason 5592 + - status 5593 + - type 5594 + type: object 5595 + type: array 5596 + lastHandledReconcileAt: 5597 + description: |- 5598 + LastHandledReconcileAt holds the value of the most recent 5599 + reconcile request value, so a change of the annotation value 5600 + can be detected. 5601 + type: string 5602 + observedChartName: 5603 + description: |- 5604 + ObservedChartName is the last observed chart name as specified by the 5605 + resolved chart reference. 5606 + type: string 5607 + observedGeneration: 5608 + description: |- 5609 + ObservedGeneration is the last observed generation of the HelmChart 5610 + object. 5611 + format: int64 5612 + type: integer 5613 + observedSourceArtifactRevision: 5614 + description: |- 5615 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 5616 + of the HelmChartSpec.SourceRef. 5617 + type: string 5618 + observedValuesFiles: 5619 + description: |- 5620 + ObservedValuesFiles are the observed value files of the last successful 5621 + reconciliation. 5622 + It matches the chart in the last successfully reconciled artifact. 5623 + items: 5624 + type: string 5625 + type: array 5626 + url: 5627 + description: |- 5628 + URL is the dynamic fetch link for the latest Artifact. 5629 + It is provided on a "best effort" basis, and using the precise 5630 + BucketStatus.Artifact data is recommended. 5631 + type: string 5632 + type: object 5633 + type: object 5634 + served: true 5635 + storage: true 5636 + subresources: 5637 + status: {} 5638 + - additionalPrinterColumns: 5639 + - jsonPath: .spec.chart 5640 + name: Chart 5641 + type: string 5642 + - jsonPath: .spec.version 5643 + name: Version 5644 + type: string 5645 + - jsonPath: .spec.sourceRef.kind 5646 + name: Source Kind 5647 + type: string 5648 + - jsonPath: .spec.sourceRef.name 5649 + name: Source Name 5650 + type: string 5651 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5652 + name: Ready 5653 + type: string 5654 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5655 + name: Status 5656 + type: string 5657 + - jsonPath: .metadata.creationTimestamp 5658 + name: Age 5659 + type: date 5660 + deprecated: true 5661 + deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1 5662 + name: v1beta1 5663 + schema: 5664 + openAPIV3Schema: 5665 + description: HelmChart is the Schema for the helmcharts API 5666 + properties: 5667 + apiVersion: 5668 + description: |- 5669 + APIVersion defines the versioned schema of this representation of an object. 5670 + Servers should convert recognized schemas to the latest internal value, and 5671 + may reject unrecognized values. 5672 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5673 + type: string 5674 + kind: 5675 + description: |- 5676 + Kind is a string value representing the REST resource this object represents. 5677 + Servers may infer this from the endpoint the client submits requests to. 5678 + Cannot be updated. 5679 + In CamelCase. 5680 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5681 + type: string 5682 + metadata: 5683 + type: object 5684 + spec: 5685 + description: HelmChartSpec defines the desired state of a Helm chart. 5686 + properties: 5687 + accessFrom: 5688 + description: AccessFrom defines an Access Control List for allowing 5689 + cross-namespace references to this object. 5690 + properties: 5691 + namespaceSelectors: 5692 + description: |- 5693 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5694 + Items in this list are evaluated using a logical OR operation. 5695 + items: 5696 + description: |- 5697 + NamespaceSelector selects the namespaces to which this ACL applies. 5698 + An empty map of MatchLabels matches all namespaces in a cluster. 5699 + properties: 5700 + matchLabels: 5701 + additionalProperties: 5702 + type: string 5703 + description: |- 5704 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5705 + map is equivalent to an element of matchExpressions, whose key field is "key", the 5706 + operator is "In", and the values array contains only "value". The requirements are ANDed. 5707 + type: object 5708 + type: object 5709 + type: array 5710 + required: 5711 + - namespaceSelectors 5712 type: object 5713 - served: true 5714 - storage: true 5715 - subresources: 5716 - status: {} 5717 - - additionalPrinterColumns: 5718 - - jsonPath: .spec.chart 5719 - name: Chart 5720 - type: string 5721 - - jsonPath: .spec.version 5722 - name: Version 5723 - type: string 5724 - - jsonPath: .spec.sourceRef.kind 5725 - name: Source Kind 5726 - type: string 5727 - - jsonPath: .spec.sourceRef.name 5728 - name: Source Name 5729 - type: string 5730 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5731 - name: Ready 5732 - type: string 5733 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5734 - name: Status 5735 - type: string 5736 - - jsonPath: .metadata.creationTimestamp 5737 - name: Age 5738 - type: date 5739 - deprecated: true 5740 - deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1 5741 - name: v1beta1 5742 - schema: 5743 - openAPIV3Schema: 5744 - description: HelmChart is the Schema for the helmcharts API 5745 + chart: 5746 + description: The name or path the Helm chart is available at in the 5747 + SourceRef. 5748 + type: string 5749 + interval: 5750 + description: The interval at which to check the Source for updates. 5751 + type: string 5752 + reconcileStrategy: 5753 + default: ChartVersion 5754 + description: |- 5755 + Determines what enables the creation of a new artifact. Valid values are 5756 + ('ChartVersion', 'Revision'). 5757 + See the documentation of the values for an explanation on their behavior. 5758 + Defaults to ChartVersion when omitted. 5759 + enum: 5760 + - ChartVersion 5761 + - Revision 5762 + type: string 5763 + sourceRef: 5764 + description: The reference to the Source the chart is available at. 5765 properties: 5766 - apiVersion: 5767 - description: |- 5768 - APIVersion defines the versioned schema of this representation of an object. 5769 - Servers should convert recognized schemas to the latest internal value, and 5770 - may reject unrecognized values. 5771 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5772 - type: string 5773 - kind: 5774 - description: |- 5775 - Kind is a string value representing the REST resource this object represents. 5776 - Servers may infer this from the endpoint the client submits requests to. 5777 - Cannot be updated. 5778 - In CamelCase. 5779 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5780 - type: string 5781 - metadata: 5782 - type: object 5783 - spec: 5784 - description: HelmChartSpec defines the desired state of a Helm chart. 5785 - properties: 5786 - accessFrom: 5787 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 5788 - to this object. 5789 - properties: 5790 - namespaceSelectors: 5791 - description: |- 5792 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5793 - Items in this list are evaluated using a logical OR operation. 5794 - items: 5795 - description: |- 5796 - NamespaceSelector selects the namespaces to which this ACL applies. 5797 - An empty map of MatchLabels matches all namespaces in a cluster. 5798 - properties: 5799 - matchLabels: 5800 - additionalProperties: 5801 - type: string 5802 - description: |- 5803 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5804 - map is equivalent to an element of matchExpressions, whose key field is "key", the 5805 - operator is "In", and the values array contains only "value". The requirements are ANDed. 5806 - type: object 5807 - type: object 5808 - type: array 5809 - required: 5810 - - namespaceSelectors 5811 - type: object 5812 - chart: 5813 - description: The name or path the Helm chart is available at in the SourceRef. 5814 - type: string 5815 - interval: 5816 - description: The interval at which to check the Source for updates. 5817 - type: string 5818 - reconcileStrategy: 5819 - default: ChartVersion 5820 - description: |- 5821 - Determines what enables the creation of a new artifact. Valid values are 5822 - ('ChartVersion', 'Revision'). 5823 - See the documentation of the values for an explanation on their behavior. 5824 - Defaults to ChartVersion when omitted. 5825 - enum: 5826 - - ChartVersion 5827 - - Revision 5828 - type: string 5829 - sourceRef: 5830 - description: The reference to the Source the chart is available at. 5831 - properties: 5832 - apiVersion: 5833 - description: APIVersion of the referent. 5834 - type: string 5835 - kind: 5836 - description: |- 5837 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5838 - 'Bucket'). 5839 - enum: 5840 - - HelmRepository 5841 - - GitRepository 5842 - - Bucket 5843 - type: string 5844 - name: 5845 - description: Name of the referent. 5846 - type: string 5847 - required: 5848 - - kind 5849 - - name 5850 - type: object 5851 - suspend: 5852 - description: This flag tells the controller to suspend the reconciliation of this source. 5853 - type: boolean 5854 - valuesFile: 5855 - description: |- 5856 - Alternative values file to use as the default chart values, expected to 5857 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 5858 - for backwards compatibility the file defined here is merged before the 5859 - ValuesFiles items. Ignored when omitted. 5860 - type: string 5861 - valuesFiles: 5862 - description: |- 5863 - Alternative list of values files to use as the chart values (values.yaml 5864 - is not included by default), expected to be a relative path in the SourceRef. 5865 - Values files are merged in the order of this list with the last file overriding 5866 - the first. Ignored when omitted. 5867 - items: 5868 - type: string 5869 - type: array 5870 - version: 5871 - default: '*' 5872 - description: |- 5873 - The chart version semver expression, ignored for charts from GitRepository 5874 - and Bucket sources. Defaults to latest when omitted. 5875 - type: string 5876 - required: 5877 - - chart 5878 - - interval 5879 - - sourceRef 5880 - type: object 5881 + apiVersion: 5882 + description: APIVersion of the referent. 5883 + type: string 5884 + kind: 5885 + description: |- 5886 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5887 + 'Bucket'). 5888 + enum: 5889 + - HelmRepository 5890 + - GitRepository 5891 + - Bucket 5892 + type: string 5893 + name: 5894 + description: Name of the referent. 5895 + type: string 5896 + required: 5897 + - kind 5898 + - name 5899 + type: object 5900 + suspend: 5901 + description: This flag tells the controller to suspend the reconciliation 5902 + of this source. 5903 + type: boolean 5904 + valuesFile: 5905 + description: |- 5906 + Alternative values file to use as the default chart values, expected to 5907 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 5908 + for backwards compatibility the file defined here is merged before the 5909 + ValuesFiles items. Ignored when omitted. 5910 + type: string 5911 + valuesFiles: 5912 + description: |- 5913 + Alternative list of values files to use as the chart values (values.yaml 5914 + is not included by default), expected to be a relative path in the SourceRef. 5915 + Values files are merged in the order of this list with the last file overriding 5916 + the first. Ignored when omitted. 5917 + items: 5918 + type: string 5919 + type: array 5920 + version: 5921 + default: '*' 5922 + description: |- 5923 + The chart version semver expression, ignored for charts from GitRepository 5924 + and Bucket sources. Defaults to latest when omitted. 5925 + type: string 5926 + required: 5927 + - chart 5928 + - interval 5929 + - sourceRef 5930 + type: object 5931 + status: 5932 + default: 5933 + observedGeneration: -1 5934 + description: HelmChartStatus defines the observed state of the HelmChart. 5935 + properties: 5936 + artifact: 5937 + description: Artifact represents the output of the last successful 5938 + chart sync. 5939 + properties: 5940 + checksum: 5941 + description: Checksum is the SHA256 checksum of the artifact. 5942 + type: string 5943 + lastUpdateTime: 5944 + description: |- 5945 + LastUpdateTime is the timestamp corresponding to the last update of this 5946 + artifact. 5947 + format: date-time 5948 + type: string 5949 + path: 5950 + description: Path is the relative file path of this artifact. 5951 + type: string 5952 + revision: 5953 + description: |- 5954 + Revision is a human readable identifier traceable in the origin source 5955 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 5956 + chart version, etc. 5957 + type: string 5958 + url: 5959 + description: URL is the HTTP address of this artifact. 5960 + type: string 5961 + required: 5962 + - lastUpdateTime 5963 + - path 5964 + - url 5965 + type: object 5966 + conditions: 5967 + description: Conditions holds the conditions for the HelmChart. 5968 + items: 5969 + description: Condition contains details for one aspect of the current 5970 + state of this API Resource. 5971 + properties: 5972 + lastTransitionTime: 5973 + description: |- 5974 + lastTransitionTime is the last time the condition transitioned from one status to another. 5975 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5976 + format: date-time 5977 + type: string 5978 + message: 5979 + description: |- 5980 + message is a human readable message indicating details about the transition. 5981 + This may be an empty string. 5982 + maxLength: 32768 5983 + type: string 5984 + observedGeneration: 5985 + description: |- 5986 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5987 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5988 + with respect to the current state of the instance. 5989 + format: int64 5990 + minimum: 0 5991 + type: integer 5992 + reason: 5993 + description: |- 5994 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5995 + Producers of specific condition types may define expected values and meanings for this field, 5996 + and whether the values are considered a guaranteed API. 5997 + The value should be a CamelCase string. 5998 + This field may not be empty. 5999 + maxLength: 1024 6000 + minLength: 1 6001 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6002 + type: string 6003 status: 6004 - default: 6005 - observedGeneration: -1 6006 - description: HelmChartStatus defines the observed state of the HelmChart. 6007 - properties: 6008 - artifact: 6009 - description: Artifact represents the output of the last successful chart sync. 6010 - properties: 6011 - checksum: 6012 - description: Checksum is the SHA256 checksum of the artifact. 6013 - type: string 6014 - lastUpdateTime: 6015 - description: |- 6016 - LastUpdateTime is the timestamp corresponding to the last update of this 6017 - artifact. 6018 - format: date-time 6019 - type: string 6020 - path: 6021 - description: Path is the relative file path of this artifact. 6022 - type: string 6023 - revision: 6024 - description: |- 6025 - Revision is a human readable identifier traceable in the origin source 6026 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 6027 - chart version, etc. 6028 - type: string 6029 - url: 6030 - description: URL is the HTTP address of this artifact. 6031 - type: string 6032 - required: 6033 - - lastUpdateTime 6034 - - path 6035 - - url 6036 - type: object 6037 - conditions: 6038 - description: Conditions holds the conditions for the HelmChart. 6039 - items: 6040 - description: Condition contains details for one aspect of the current state of this API 6041 - Resource. 6042 - properties: 6043 - lastTransitionTime: 6044 - description: |- 6045 - lastTransitionTime is the last time the condition transitioned from one status to another. 6046 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6047 - format: date-time 6048 - type: string 6049 - message: 6050 - description: |- 6051 - message is a human readable message indicating details about the transition. 6052 - This may be an empty string. 6053 - maxLength: 32768 6054 - type: string 6055 - observedGeneration: 6056 - description: |- 6057 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6058 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6059 - with respect to the current state of the instance. 6060 - format: int64 6061 - minimum: 0 6062 - type: integer 6063 - reason: 6064 - description: |- 6065 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6066 - Producers of specific condition types may define expected values and meanings for this field, 6067 - and whether the values are considered a guaranteed API. 6068 - The value should be a CamelCase string. 6069 - This field may not be empty. 6070 - maxLength: 1024 6071 - minLength: 1 6072 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6073 - type: string 6074 - status: 6075 - description: status of the condition, one of True, False, Unknown. 6076 - enum: 6077 - - "True" 6078 - - "False" 6079 - - Unknown 6080 - type: string 6081 - type: 6082 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 6083 - maxLength: 316 6084 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6085 - type: string 6086 - required: 6087 - - lastTransitionTime 6088 - - message 6089 - - reason 6090 - - status 6091 - - type 6092 - type: object 6093 - type: array 6094 - lastHandledReconcileAt: 6095 - description: |- 6096 - LastHandledReconcileAt holds the value of the most recent 6097 - reconcile request value, so a change of the annotation value 6098 - can be detected. 6099 - type: string 6100 - observedGeneration: 6101 - description: ObservedGeneration is the last observed generation. 6102 - format: int64 6103 - type: integer 6104 - url: 6105 - description: URL is the download link for the last chart pulled. 6106 - type: string 6107 - type: object 6108 + description: status of the condition, one of True, False, Unknown. 6109 + enum: 6110 + - "True" 6111 + - "False" 6112 + - Unknown 6113 + type: string 6114 + type: 6115 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6116 + maxLength: 316 6117 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6118 + type: string 6119 + required: 6120 + - lastTransitionTime 6121 + - message 6122 + - reason 6123 + - status 6124 + - type 6125 + type: object 6126 + type: array 6127 + lastHandledReconcileAt: 6128 + description: |- 6129 + LastHandledReconcileAt holds the value of the most recent 6130 + reconcile request value, so a change of the annotation value 6131 + can be detected. 6132 + type: string 6133 + observedGeneration: 6134 + description: ObservedGeneration is the last observed generation. 6135 + format: int64 6136 + type: integer 6137 + url: 6138 + description: URL is the download link for the last chart pulled. 6139 + type: string 6140 + type: object 6141 + type: object 6142 + served: true 6143 + storage: false 6144 + subresources: 6145 + status: {} 6146 + - additionalPrinterColumns: 6147 + - jsonPath: .spec.chart 6148 + name: Chart 6149 + type: string 6150 + - jsonPath: .spec.version 6151 + name: Version 6152 + type: string 6153 + - jsonPath: .spec.sourceRef.kind 6154 + name: Source Kind 6155 + type: string 6156 + - jsonPath: .spec.sourceRef.name 6157 + name: Source Name 6158 + type: string 6159 + - jsonPath: .metadata.creationTimestamp 6160 + name: Age 6161 + type: date 6162 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 6163 + name: Ready 6164 + type: string 6165 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 6166 + name: Status 6167 + type: string 6168 + deprecated: true 6169 + deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 6170 + name: v1beta2 6171 + schema: 6172 + openAPIV3Schema: 6173 + description: HelmChart is the Schema for the helmcharts API. 6174 + properties: 6175 + apiVersion: 6176 + description: |- 6177 + APIVersion defines the versioned schema of this representation of an object. 6178 + Servers should convert recognized schemas to the latest internal value, and 6179 + may reject unrecognized values. 6180 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6181 + type: string 6182 + kind: 6183 + description: |- 6184 + Kind is a string value representing the REST resource this object represents. 6185 + Servers may infer this from the endpoint the client submits requests to. 6186 + Cannot be updated. 6187 + In CamelCase. 6188 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6189 + type: string 6190 + metadata: 6191 + type: object 6192 + spec: 6193 + description: HelmChartSpec specifies the desired state of a Helm chart. 6194 + properties: 6195 + accessFrom: 6196 + description: |- 6197 + AccessFrom specifies an Access Control List for allowing cross-namespace 6198 + references to this object. 6199 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6200 + properties: 6201 + namespaceSelectors: 6202 + description: |- 6203 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6204 + Items in this list are evaluated using a logical OR operation. 6205 + items: 6206 + description: |- 6207 + NamespaceSelector selects the namespaces to which this ACL applies. 6208 + An empty map of MatchLabels matches all namespaces in a cluster. 6209 + properties: 6210 + matchLabels: 6211 + additionalProperties: 6212 + type: string 6213 + description: |- 6214 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6215 + map is equivalent to an element of matchExpressions, whose key field is "key", the 6216 + operator is "In", and the values array contains only "value". The requirements are ANDed. 6217 + type: object 6218 + type: object 6219 + type: array 6220 + required: 6221 + - namespaceSelectors 6222 type: object 6223 - served: true 6224 - storage: false 6225 - subresources: 6226 - status: {} 6227 - - additionalPrinterColumns: 6228 - - jsonPath: .spec.chart 6229 - name: Chart 6230 - type: string 6231 - - jsonPath: .spec.version 6232 - name: Version 6233 - type: string 6234 - - jsonPath: .spec.sourceRef.kind 6235 - name: Source Kind 6236 - type: string 6237 - - jsonPath: .spec.sourceRef.name 6238 - name: Source Name 6239 - type: string 6240 - - jsonPath: .metadata.creationTimestamp 6241 - name: Age 6242 - type: date 6243 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6244 - name: Ready 6245 - type: string 6246 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6247 - name: Status 6248 - type: string 6249 - deprecated: true 6250 - deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 6251 - name: v1beta2 6252 - schema: 6253 - openAPIV3Schema: 6254 - description: HelmChart is the Schema for the helmcharts API. 6255 + chart: 6256 + description: |- 6257 + Chart is the name or path the Helm chart is available at in the 6258 + SourceRef. 6259 + type: string 6260 + ignoreMissingValuesFiles: 6261 + description: |- 6262 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 6263 + files rather than failing. 6264 + type: boolean 6265 + interval: 6266 + description: |- 6267 + Interval at which the HelmChart SourceRef is checked for updates. 6268 + This interval is approximate and may be subject to jitter to ensure 6269 + efficient use of resources. 6270 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6271 + type: string 6272 + reconcileStrategy: 6273 + default: ChartVersion 6274 + description: |- 6275 + ReconcileStrategy determines what enables the creation of a new artifact. 6276 + Valid values are ('ChartVersion', 'Revision'). 6277 + See the documentation of the values for an explanation on their behavior. 6278 + Defaults to ChartVersion when omitted. 6279 + enum: 6280 + - ChartVersion 6281 + - Revision 6282 + type: string 6283 + sourceRef: 6284 + description: SourceRef is the reference to the Source the chart is 6285 + available at. 6286 properties: 6287 - apiVersion: 6288 - description: |- 6289 - APIVersion defines the versioned schema of this representation of an object. 6290 - Servers should convert recognized schemas to the latest internal value, and 6291 - may reject unrecognized values. 6292 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6293 - type: string 6294 - kind: 6295 - description: |- 6296 - Kind is a string value representing the REST resource this object represents. 6297 - Servers may infer this from the endpoint the client submits requests to. 6298 - Cannot be updated. 6299 - In CamelCase. 6300 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6301 + apiVersion: 6302 + description: APIVersion of the referent. 6303 + type: string 6304 + kind: 6305 + description: |- 6306 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 6307 + 'Bucket'). 6308 + enum: 6309 + - HelmRepository 6310 + - GitRepository 6311 + - Bucket 6312 + type: string 6313 + name: 6314 + description: Name of the referent. 6315 + type: string 6316 + required: 6317 + - kind 6318 + - name 6319 + type: object 6320 + suspend: 6321 + description: |- 6322 + Suspend tells the controller to suspend the reconciliation of this 6323 + source. 6324 + type: boolean 6325 + valuesFile: 6326 + description: |- 6327 + ValuesFile is an alternative values file to use as the default chart 6328 + values, expected to be a relative path in the SourceRef. Deprecated in 6329 + favor of ValuesFiles, for backwards compatibility the file specified here 6330 + is merged before the ValuesFiles items. Ignored when omitted. 6331 + type: string 6332 + valuesFiles: 6333 + description: |- 6334 + ValuesFiles is an alternative list of values files to use as the chart 6335 + values (values.yaml is not included by default), expected to be a 6336 + relative path in the SourceRef. 6337 + Values files are merged in the order of this list with the last file 6338 + overriding the first. Ignored when omitted. 6339 + items: 6340 + type: string 6341 + type: array 6342 + verify: 6343 + description: |- 6344 + Verify contains the secret name containing the trusted public keys 6345 + used to verify the signature and specifies which provider to use to check 6346 + whether OCI image is authentic. 6347 + This field is only supported when using HelmRepository source with spec.type 'oci'. 6348 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 6349 + properties: 6350 + matchOIDCIdentity: 6351 + description: |- 6352 + MatchOIDCIdentity specifies the identity matching criteria to use 6353 + while verifying an OCI artifact which was signed using Cosign keyless 6354 + signing. The artifact's identity is deemed to be verified if any of the 6355 + specified matchers match against the identity. 6356 + items: 6357 + description: |- 6358 + OIDCIdentityMatch specifies options for verifying the certificate identity, 6359 + i.e. the issuer and the subject of the certificate. 6360 + properties: 6361 + issuer: 6362 + description: |- 6363 + Issuer specifies the regex pattern to match against to verify 6364 + the OIDC issuer in the Fulcio certificate. The pattern must be a 6365 + valid Go regular expression. 6366 + type: string 6367 + subject: 6368 + description: |- 6369 + Subject specifies the regex pattern to match against to verify 6370 + the identity subject in the Fulcio certificate. The pattern must 6371 + be a valid Go regular expression. 6372 + type: string 6373 + required: 6374 + - issuer 6375 + - subject 6376 + type: object 6377 + type: array 6378 + provider: 6379 + default: cosign 6380 + description: Provider specifies the technology used to sign the 6381 + OCI Artifact. 6382 + enum: 6383 + - cosign 6384 + - notation 6385 + type: string 6386 + secretRef: 6387 + description: |- 6388 + SecretRef specifies the Kubernetes Secret containing the 6389 + trusted public keys. 6390 + properties: 6391 + name: 6392 + description: Name of the referent. 6393 type: string 6394 - metadata: 6395 - type: object 6396 - spec: 6397 - description: HelmChartSpec specifies the desired state of a Helm chart. 6398 - properties: 6399 - accessFrom: 6400 - description: |- 6401 - AccessFrom specifies an Access Control List for allowing cross-namespace 6402 - references to this object. 6403 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6404 - properties: 6405 - namespaceSelectors: 6406 - description: |- 6407 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6408 - Items in this list are evaluated using a logical OR operation. 6409 - items: 6410 - description: |- 6411 - NamespaceSelector selects the namespaces to which this ACL applies. 6412 - An empty map of MatchLabels matches all namespaces in a cluster. 6413 - properties: 6414 - matchLabels: 6415 - additionalProperties: 6416 - type: string 6417 - description: |- 6418 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6419 - map is equivalent to an element of matchExpressions, whose key field is "key", the 6420 - operator is "In", and the values array contains only "value". The requirements are ANDed. 6421 - type: object 6422 - type: object 6423 - type: array 6424 - required: 6425 - - namespaceSelectors 6426 - type: object 6427 - chart: 6428 - description: |- 6429 - Chart is the name or path the Helm chart is available at in the 6430 - SourceRef. 6431 - type: string 6432 - ignoreMissingValuesFiles: 6433 - description: |- 6434 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 6435 - files rather than failing. 6436 - type: boolean 6437 - interval: 6438 - description: |- 6439 - Interval at which the HelmChart SourceRef is checked for updates. 6440 - This interval is approximate and may be subject to jitter to ensure 6441 - efficient use of resources. 6442 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6443 - type: string 6444 - reconcileStrategy: 6445 - default: ChartVersion 6446 - description: |- 6447 - ReconcileStrategy determines what enables the creation of a new artifact. 6448 - Valid values are ('ChartVersion', 'Revision'). 6449 - See the documentation of the values for an explanation on their behavior. 6450 - Defaults to ChartVersion when omitted. 6451 - enum: 6452 - - ChartVersion 6453 - - Revision 6454 - type: string 6455 - sourceRef: 6456 - description: SourceRef is the reference to the Source the chart is available at. 6457 - properties: 6458 - apiVersion: 6459 - description: APIVersion of the referent. 6460 - type: string 6461 - kind: 6462 - description: |- 6463 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 6464 - 'Bucket'). 6465 - enum: 6466 - - HelmRepository 6467 - - GitRepository 6468 - - Bucket 6469 - type: string 6470 - name: 6471 - description: Name of the referent. 6472 - type: string 6473 - required: 6474 - - kind 6475 - - name 6476 - type: object 6477 - suspend: 6478 - description: |- 6479 - Suspend tells the controller to suspend the reconciliation of this 6480 - source. 6481 - type: boolean 6482 - valuesFile: 6483 - description: |- 6484 - ValuesFile is an alternative values file to use as the default chart 6485 - values, expected to be a relative path in the SourceRef. Deprecated in 6486 - favor of ValuesFiles, for backwards compatibility the file specified here 6487 - is merged before the ValuesFiles items. Ignored when omitted. 6488 - type: string 6489 - valuesFiles: 6490 - description: |- 6491 - ValuesFiles is an alternative list of values files to use as the chart 6492 - values (values.yaml is not included by default), expected to be a 6493 - relative path in the SourceRef. 6494 - Values files are merged in the order of this list with the last file 6495 - overriding the first. Ignored when omitted. 6496 - items: 6497 - type: string 6498 - type: array 6499 - verify: 6500 - description: |- 6501 - Verify contains the secret name containing the trusted public keys 6502 - used to verify the signature and specifies which provider to use to check 6503 - whether OCI image is authentic. 6504 - This field is only supported when using HelmRepository source with spec.type 'oci'. 6505 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 6506 - properties: 6507 - matchOIDCIdentity: 6508 - description: |- 6509 - MatchOIDCIdentity specifies the identity matching criteria to use 6510 - while verifying an OCI artifact which was signed using Cosign keyless 6511 - signing. The artifact's identity is deemed to be verified if any of the 6512 - specified matchers match against the identity. 6513 - items: 6514 - description: |- 6515 - OIDCIdentityMatch specifies options for verifying the certificate identity, 6516 - i.e. the issuer and the subject of the certificate. 6517 - properties: 6518 - issuer: 6519 - description: |- 6520 - Issuer specifies the regex pattern to match against to verify 6521 - the OIDC issuer in the Fulcio certificate. The pattern must be a 6522 - valid Go regular expression. 6523 - type: string 6524 - subject: 6525 - description: |- 6526 - Subject specifies the regex pattern to match against to verify 6527 - the identity subject in the Fulcio certificate. The pattern must 6528 - be a valid Go regular expression. 6529 - type: string 6530 - required: 6531 - - issuer 6532 - - subject 6533 - type: object 6534 - type: array 6535 - provider: 6536 - default: cosign 6537 - description: Provider specifies the technology used to sign the OCI Artifact. 6538 - enum: 6539 - - cosign 6540 - - notation 6541 - type: string 6542 - secretRef: 6543 - description: |- 6544 - SecretRef specifies the Kubernetes Secret containing the 6545 - trusted public keys. 6546 - properties: 6547 - name: 6548 - description: Name of the referent. 6549 - type: string 6550 - required: 6551 - - name 6552 - type: object 6553 - required: 6554 - - provider 6555 - type: object 6556 - version: 6557 - default: '*' 6558 - description: |- 6559 - Version is the chart version semver expression, ignored for charts from 6560 - GitRepository and Bucket sources. Defaults to latest when omitted. 6561 - type: string 6562 - required: 6563 - - chart 6564 - - interval 6565 - - sourceRef 6566 - type: object 6567 + required: 6568 + - name 6569 + type: object 6570 + required: 6571 + - provider 6572 + type: object 6573 + version: 6574 + default: '*' 6575 + description: |- 6576 + Version is the chart version semver expression, ignored for charts from 6577 + GitRepository and Bucket sources. Defaults to latest when omitted. 6578 + type: string 6579 + required: 6580 + - chart 6581 + - interval 6582 + - sourceRef 6583 + type: object 6584 + status: 6585 + default: 6586 + observedGeneration: -1 6587 + description: HelmChartStatus records the observed state of the HelmChart. 6588 + properties: 6589 + artifact: 6590 + description: Artifact represents the output of the last successful 6591 + reconciliation. 6592 + properties: 6593 + digest: 6594 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6595 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6596 + type: string 6597 + lastUpdateTime: 6598 + description: |- 6599 + LastUpdateTime is the timestamp corresponding to the last update of the 6600 + Artifact. 6601 + format: date-time 6602 + type: string 6603 + metadata: 6604 + additionalProperties: 6605 + type: string 6606 + description: Metadata holds upstream information such as OCI annotations. 6607 + type: object 6608 + path: 6609 + description: |- 6610 + Path is the relative file path of the Artifact. It can be used to locate 6611 + the file in the root of the Artifact storage on the local file system of 6612 + the controller managing the Source. 6613 + type: string 6614 + revision: 6615 + description: |- 6616 + Revision is a human-readable identifier traceable in the origin source 6617 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6618 + type: string 6619 + size: 6620 + description: Size is the number of bytes in the file. 6621 + format: int64 6622 + type: integer 6623 + url: 6624 + description: |- 6625 + URL is the HTTP address of the Artifact as exposed by the controller 6626 + managing the Source. It can be used to retrieve the Artifact for 6627 + consumption, e.g. by another controller applying the Artifact contents. 6628 + type: string 6629 + required: 6630 + - lastUpdateTime 6631 + - path 6632 + - revision 6633 + - url 6634 + type: object 6635 + conditions: 6636 + description: Conditions holds the conditions for the HelmChart. 6637 + items: 6638 + description: Condition contains details for one aspect of the current 6639 + state of this API Resource. 6640 + properties: 6641 + lastTransitionTime: 6642 + description: |- 6643 + lastTransitionTime is the last time the condition transitioned from one status to another. 6644 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6645 + format: date-time 6646 + type: string 6647 + message: 6648 + description: |- 6649 + message is a human readable message indicating details about the transition. 6650 + This may be an empty string. 6651 + maxLength: 32768 6652 + type: string 6653 + observedGeneration: 6654 + description: |- 6655 + observedGeneration represents the .metadata.generation that the condition was set based upon. 6656 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6657 + with respect to the current state of the instance. 6658 + format: int64 6659 + minimum: 0 6660 + type: integer 6661 + reason: 6662 + description: |- 6663 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 6664 + Producers of specific condition types may define expected values and meanings for this field, 6665 + and whether the values are considered a guaranteed API. 6666 + The value should be a CamelCase string. 6667 + This field may not be empty. 6668 + maxLength: 1024 6669 + minLength: 1 6670 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6671 + type: string 6672 status: 6673 - default: 6674 - observedGeneration: -1 6675 - description: HelmChartStatus records the observed state of the HelmChart. 6676 - properties: 6677 - artifact: 6678 - description: Artifact represents the output of the last successful reconciliation. 6679 - properties: 6680 - digest: 6681 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6682 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6683 - type: string 6684 - lastUpdateTime: 6685 - description: |- 6686 - LastUpdateTime is the timestamp corresponding to the last update of the 6687 - Artifact. 6688 - format: date-time 6689 - type: string 6690 - metadata: 6691 - additionalProperties: 6692 - type: string 6693 - description: Metadata holds upstream information such as OCI annotations. 6694 - type: object 6695 - path: 6696 - description: |- 6697 - Path is the relative file path of the Artifact. It can be used to locate 6698 - the file in the root of the Artifact storage on the local file system of 6699 - the controller managing the Source. 6700 - type: string 6701 - revision: 6702 - description: |- 6703 - Revision is a human-readable identifier traceable in the origin source 6704 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6705 - type: string 6706 - size: 6707 - description: Size is the number of bytes in the file. 6708 - format: int64 6709 - type: integer 6710 - url: 6711 - description: |- 6712 - URL is the HTTP address of the Artifact as exposed by the controller 6713 - managing the Source. It can be used to retrieve the Artifact for 6714 - consumption, e.g. by another controller applying the Artifact contents. 6715 - type: string 6716 - required: 6717 - - lastUpdateTime 6718 - - path 6719 - - revision 6720 - - url 6721 - type: object 6722 - conditions: 6723 - description: Conditions holds the conditions for the HelmChart. 6724 - items: 6725 - description: Condition contains details for one aspect of the current state of this API 6726 - Resource. 6727 - properties: 6728 - lastTransitionTime: 6729 - description: |- 6730 - lastTransitionTime is the last time the condition transitioned from one status to another. 6731 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6732 - format: date-time 6733 - type: string 6734 - message: 6735 - description: |- 6736 - message is a human readable message indicating details about the transition. 6737 - This may be an empty string. 6738 - maxLength: 32768 6739 - type: string 6740 - observedGeneration: 6741 - description: |- 6742 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6743 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6744 - with respect to the current state of the instance. 6745 - format: int64 6746 - minimum: 0 6747 - type: integer 6748 - reason: 6749 - description: |- 6750 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6751 - Producers of specific condition types may define expected values and meanings for this field, 6752 - and whether the values are considered a guaranteed API. 6753 - The value should be a CamelCase string. 6754 - This field may not be empty. 6755 - maxLength: 1024 6756 - minLength: 1 6757 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6758 - type: string 6759 - status: 6760 - description: status of the condition, one of True, False, Unknown. 6761 - enum: 6762 - - "True" 6763 - - "False" 6764 - - Unknown 6765 - type: string 6766 - type: 6767 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 6768 - maxLength: 316 6769 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6770 - type: string 6771 - required: 6772 - - lastTransitionTime 6773 - - message 6774 - - reason 6775 - - status 6776 - - type 6777 - type: object 6778 - type: array 6779 - lastHandledReconcileAt: 6780 - description: |- 6781 - LastHandledReconcileAt holds the value of the most recent 6782 - reconcile request value, so a change of the annotation value 6783 - can be detected. 6784 - type: string 6785 - observedChartName: 6786 - description: |- 6787 - ObservedChartName is the last observed chart name as specified by the 6788 - resolved chart reference. 6789 - type: string 6790 - observedGeneration: 6791 - description: |- 6792 - ObservedGeneration is the last observed generation of the HelmChart 6793 - object. 6794 - format: int64 6795 - type: integer 6796 - observedSourceArtifactRevision: 6797 - description: |- 6798 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 6799 - of the HelmChartSpec.SourceRef. 6800 - type: string 6801 - observedValuesFiles: 6802 - description: |- 6803 - ObservedValuesFiles are the observed value files of the last successful 6804 - reconciliation. 6805 - It matches the chart in the last successfully reconciled artifact. 6806 - items: 6807 - type: string 6808 - type: array 6809 - url: 6810 - description: |- 6811 - URL is the dynamic fetch link for the latest Artifact. 6812 - It is provided on a "best effort" basis, and using the precise 6813 - BucketStatus.Artifact data is recommended. 6814 - type: string 6815 - type: object 6816 - type: object 6817 - served: true 6818 - storage: false 6819 - subresources: 6820 - status: {} 6821 + description: status of the condition, one of True, False, Unknown. 6822 + enum: 6823 + - "True" 6824 + - "False" 6825 + - Unknown 6826 + type: string 6827 + type: 6828 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6829 + maxLength: 316 6830 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6831 + type: string 6832 + required: 6833 + - lastTransitionTime 6834 + - message 6835 + - reason 6836 + - status 6837 + - type 6838 + type: object 6839 + type: array 6840 + lastHandledReconcileAt: 6841 + description: |- 6842 + LastHandledReconcileAt holds the value of the most recent 6843 + reconcile request value, so a change of the annotation value 6844 + can be detected. 6845 + type: string 6846 + observedChartName: 6847 + description: |- 6848 + ObservedChartName is the last observed chart name as specified by the 6849 + resolved chart reference. 6850 + type: string 6851 + observedGeneration: 6852 + description: |- 6853 + ObservedGeneration is the last observed generation of the HelmChart 6854 + object. 6855 + format: int64 6856 + type: integer 6857 + observedSourceArtifactRevision: 6858 + description: |- 6859 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 6860 + of the HelmChartSpec.SourceRef. 6861 + type: string 6862 + observedValuesFiles: 6863 + description: |- 6864 + ObservedValuesFiles are the observed value files of the last successful 6865 + reconciliation. 6866 + It matches the chart in the last successfully reconciled artifact. 6867 + items: 6868 + type: string 6869 + type: array 6870 + url: 6871 + description: |- 6872 + URL is the dynamic fetch link for the latest Artifact. 6873 + It is provided on a "best effort" basis, and using the precise 6874 + BucketStatus.Artifact data is recommended. 6875 + type: string 6876 + type: object 6877 + type: object 6878 + served: true 6879 + storage: false 6880 + subresources: 6881 + status: {} 6882 --- 6883 apiVersion: apiextensions.k8s.io/v1 6884 kind: CustomResourceDefinition 6885 metadata: 6886 - annotations: 6887 - controller-gen.kubebuilder.io/version: v0.16.1 6888 - labels: 6889 - app.kubernetes.io/component: source-controller 6890 - app.kubernetes.io/instance: flux-system 6891 - app.kubernetes.io/part-of: flux 6892 - app.kubernetes.io/version: v2.4.0 6893 - name: helmrepositories.source.toolkit.fluxcd.io 6894 + annotations: 6895 + controller-gen.kubebuilder.io/version: v0.16.1 6896 + labels: 6897 + app.kubernetes.io/component: source-controller 6898 + app.kubernetes.io/instance: flux-system 6899 + app.kubernetes.io/part-of: flux 6900 + app.kubernetes.io/version: v2.5.1 6901 + name: helmrepositories.source.toolkit.fluxcd.io 6902 spec: 6903 - group: source.toolkit.fluxcd.io 6904 - names: 6905 - kind: HelmRepository 6906 - listKind: HelmRepositoryList 6907 - plural: helmrepositories 6908 - shortNames: 6909 - - helmrepo 6910 - singular: helmrepository 6911 - scope: Namespaced 6912 - versions: 6913 - - additionalPrinterColumns: 6914 - - jsonPath: .spec.url 6915 - name: URL 6916 - type: string 6917 - - jsonPath: .metadata.creationTimestamp 6918 - name: Age 6919 - type: date 6920 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6921 - name: Ready 6922 - type: string 6923 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6924 - name: Status 6925 - type: string 6926 - name: v1 6927 - schema: 6928 - openAPIV3Schema: 6929 - description: HelmRepository is the Schema for the helmrepositories API. 6930 + group: source.toolkit.fluxcd.io 6931 + names: 6932 + kind: HelmRepository 6933 + listKind: HelmRepositoryList 6934 + plural: helmrepositories 6935 + shortNames: 6936 + - helmrepo 6937 + singular: helmrepository 6938 + scope: Namespaced 6939 + versions: 6940 + - additionalPrinterColumns: 6941 + - jsonPath: .spec.url 6942 + name: URL 6943 + type: string 6944 + - jsonPath: .metadata.creationTimestamp 6945 + name: Age 6946 + type: date 6947 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 6948 + name: Ready 6949 + type: string 6950 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 6951 + name: Status 6952 + type: string 6953 + name: v1 6954 + schema: 6955 + openAPIV3Schema: 6956 + description: HelmRepository is the Schema for the helmrepositories API. 6957 + properties: 6958 + apiVersion: 6959 + description: |- 6960 + APIVersion defines the versioned schema of this representation of an object. 6961 + Servers should convert recognized schemas to the latest internal value, and 6962 + may reject unrecognized values. 6963 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6964 + type: string 6965 + kind: 6966 + description: |- 6967 + Kind is a string value representing the REST resource this object represents. 6968 + Servers may infer this from the endpoint the client submits requests to. 6969 + Cannot be updated. 6970 + In CamelCase. 6971 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6972 + type: string 6973 + metadata: 6974 + type: object 6975 + spec: 6976 + description: |- 6977 + HelmRepositorySpec specifies the required configuration to produce an 6978 + Artifact for a Helm repository index YAML. 6979 + properties: 6980 + accessFrom: 6981 + description: |- 6982 + AccessFrom specifies an Access Control List for allowing cross-namespace 6983 + references to this object. 6984 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6985 properties: 6986 - apiVersion: 6987 - description: |- 6988 - APIVersion defines the versioned schema of this representation of an object. 6989 - Servers should convert recognized schemas to the latest internal value, and 6990 - may reject unrecognized values. 6991 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6992 - type: string 6993 - kind: 6994 - description: |- 6995 - Kind is a string value representing the REST resource this object represents. 6996 - Servers may infer this from the endpoint the client submits requests to. 6997 - Cannot be updated. 6998 - In CamelCase. 6999 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7000 - type: string 7001 - metadata: 7002 - type: object 7003 - spec: 7004 - description: |- 7005 - HelmRepositorySpec specifies the required configuration to produce an 7006 - Artifact for a Helm repository index YAML. 7007 - properties: 7008 - accessFrom: 7009 - description: |- 7010 - AccessFrom specifies an Access Control List for allowing cross-namespace 7011 - references to this object. 7012 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 7013 - properties: 7014 - namespaceSelectors: 7015 - description: |- 7016 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7017 - Items in this list are evaluated using a logical OR operation. 7018 - items: 7019 - description: |- 7020 - NamespaceSelector selects the namespaces to which this ACL applies. 7021 - An empty map of MatchLabels matches all namespaces in a cluster. 7022 - properties: 7023 - matchLabels: 7024 - additionalProperties: 7025 - type: string 7026 - description: |- 7027 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7028 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7029 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7030 - type: object 7031 - type: object 7032 - type: array 7033 - required: 7034 - - namespaceSelectors 7035 - type: object 7036 - certSecretRef: 7037 - description: |- 7038 - CertSecretRef can be given the name of a Secret containing 7039 - either or both of 7040 - 7041 - - a PEM-encoded client certificate (`tls.crt`) and private 7042 - key (`tls.key`); 7043 - - a PEM-encoded CA certificate (`ca.crt`) 7044 - 7045 - and whichever are supplied, will be used for connecting to the 7046 - registry. The client cert and key are useful if you are 7047 - authenticating with a certificate; the CA cert is useful if 7048 - you are using a self-signed server certificate. The Secret must 7049 - be of type `Opaque` or `kubernetes.io/tls`. 7050 - 7051 - It takes precedence over the values specified in the Secret referred 7052 - to by `.spec.secretRef`. 7053 - properties: 7054 - name: 7055 - description: Name of the referent. 7056 - type: string 7057 - required: 7058 - - name 7059 - type: object 7060 - insecure: 7061 - description: |- 7062 - Insecure allows connecting to a non-TLS HTTP container registry. 7063 - This field is only taken into account if the .spec.type field is set to 'oci'. 7064 - type: boolean 7065 - interval: 7066 - description: |- 7067 - Interval at which the HelmRepository URL is checked for updates. 7068 - This interval is approximate and may be subject to jitter to ensure 7069 - efficient use of resources. 7070 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7071 - type: string 7072 - passCredentials: 7073 - description: |- 7074 - PassCredentials allows the credentials from the SecretRef to be passed 7075 - on to a host that does not match the host as defined in URL. 7076 - This may be required if the host of the advertised chart URLs in the 7077 - index differ from the defined URL. 7078 - Enabling this should be done with caution, as it can potentially result 7079 - in credentials getting stolen in a MITM-attack. 7080 - type: boolean 7081 - provider: 7082 - default: generic 7083 - description: |- 7084 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7085 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 7086 - When not specified, defaults to 'generic'. 7087 - enum: 7088 - - generic 7089 - - aws 7090 - - azure 7091 - - gcp 7092 - type: string 7093 - secretRef: 7094 - description: |- 7095 - SecretRef specifies the Secret containing authentication credentials 7096 - for the HelmRepository. 7097 - For HTTP/S basic auth the secret must contain 'username' and 'password' 7098 - fields. 7099 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 7100 - keys is deprecated. Please use `.spec.certSecretRef` instead. 7101 - properties: 7102 - name: 7103 - description: Name of the referent. 7104 - type: string 7105 - required: 7106 - - name 7107 - type: object 7108 - suspend: 7109 - description: |- 7110 - Suspend tells the controller to suspend the reconciliation of this 7111 - HelmRepository. 7112 - type: boolean 7113 - timeout: 7114 - description: |- 7115 - Timeout is used for the index fetch operation for an HTTPS helm repository, 7116 - and for remote OCI Repository operations like pulling for an OCI helm 7117 - chart by the associated HelmChart. 7118 - Its default value is 60s. 7119 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7120 - type: string 7121 - type: 7122 - description: |- 7123 - Type of the HelmRepository. 7124 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 7125 - enum: 7126 - - default 7127 - - oci 7128 - type: string 7129 - url: 7130 - description: |- 7131 - URL of the Helm repository, a valid URL contains at least a protocol and 7132 - host. 7133 - pattern: ^(http|https|oci)://.*$ 7134 - type: string 7135 - required: 7136 - - url 7137 - type: object 7138 - status: 7139 - default: 7140 - observedGeneration: -1 7141 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 7142 - properties: 7143 - artifact: 7144 - description: Artifact represents the last successful HelmRepository reconciliation. 7145 - properties: 7146 - digest: 7147 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7148 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7149 - type: string 7150 - lastUpdateTime: 7151 - description: |- 7152 - LastUpdateTime is the timestamp corresponding to the last update of the 7153 - Artifact. 7154 - format: date-time 7155 - type: string 7156 - metadata: 7157 - additionalProperties: 7158 - type: string 7159 - description: Metadata holds upstream information such as OCI annotations. 7160 - type: object 7161 - path: 7162 - description: |- 7163 - Path is the relative file path of the Artifact. It can be used to locate 7164 - the file in the root of the Artifact storage on the local file system of 7165 - the controller managing the Source. 7166 - type: string 7167 - revision: 7168 - description: |- 7169 - Revision is a human-readable identifier traceable in the origin source 7170 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7171 - type: string 7172 - size: 7173 - description: Size is the number of bytes in the file. 7174 - format: int64 7175 - type: integer 7176 - url: 7177 - description: |- 7178 - URL is the HTTP address of the Artifact as exposed by the controller 7179 - managing the Source. It can be used to retrieve the Artifact for 7180 - consumption, e.g. by another controller applying the Artifact contents. 7181 - type: string 7182 - required: 7183 - - lastUpdateTime 7184 - - path 7185 - - revision 7186 - - url 7187 - type: object 7188 - conditions: 7189 - description: Conditions holds the conditions for the HelmRepository. 7190 - items: 7191 - description: Condition contains details for one aspect of the current state of this API 7192 - Resource. 7193 - properties: 7194 - lastTransitionTime: 7195 - description: |- 7196 - lastTransitionTime is the last time the condition transitioned from one status to another. 7197 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7198 - format: date-time 7199 - type: string 7200 - message: 7201 - description: |- 7202 - message is a human readable message indicating details about the transition. 7203 - This may be an empty string. 7204 - maxLength: 32768 7205 - type: string 7206 - observedGeneration: 7207 - description: |- 7208 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7209 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7210 - with respect to the current state of the instance. 7211 - format: int64 7212 - minimum: 0 7213 - type: integer 7214 - reason: 7215 - description: |- 7216 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7217 - Producers of specific condition types may define expected values and meanings for this field, 7218 - and whether the values are considered a guaranteed API. 7219 - The value should be a CamelCase string. 7220 - This field may not be empty. 7221 - maxLength: 1024 7222 - minLength: 1 7223 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7224 - type: string 7225 - status: 7226 - description: status of the condition, one of True, False, Unknown. 7227 - enum: 7228 - - "True" 7229 - - "False" 7230 - - Unknown 7231 - type: string 7232 - type: 7233 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7234 - maxLength: 316 7235 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7236 - type: string 7237 - required: 7238 - - lastTransitionTime 7239 - - message 7240 - - reason 7241 - - status 7242 - - type 7243 - type: object 7244 - type: array 7245 - lastHandledReconcileAt: 7246 - description: |- 7247 - LastHandledReconcileAt holds the value of the most recent 7248 - reconcile request value, so a change of the annotation value 7249 - can be detected. 7250 - type: string 7251 - observedGeneration: 7252 - description: |- 7253 - ObservedGeneration is the last observed generation of the HelmRepository 7254 - object. 7255 - format: int64 7256 - type: integer 7257 - url: 7258 - description: |- 7259 - URL is the dynamic fetch link for the latest Artifact. 7260 - It is provided on a "best effort" basis, and using the precise 7261 - HelmRepositoryStatus.Artifact data is recommended. 7262 - type: string 7263 - type: object 7264 + namespaceSelectors: 7265 + description: |- 7266 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7267 + Items in this list are evaluated using a logical OR operation. 7268 + items: 7269 + description: |- 7270 + NamespaceSelector selects the namespaces to which this ACL applies. 7271 + An empty map of MatchLabels matches all namespaces in a cluster. 7272 + properties: 7273 + matchLabels: 7274 + additionalProperties: 7275 + type: string 7276 + description: |- 7277 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7278 + map is equivalent to an element of matchExpressions, whose key field is "key", the 7279 + operator is "In", and the values array contains only "value". The requirements are ANDed. 7280 + type: object 7281 + type: object 7282 + type: array 7283 + required: 7284 + - namespaceSelectors 7285 type: object 7286 - served: true 7287 - storage: true 7288 - subresources: 7289 - status: {} 7290 - - additionalPrinterColumns: 7291 - - jsonPath: .spec.url 7292 - name: URL 7293 - type: string 7294 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7295 - name: Ready 7296 - type: string 7297 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7298 - name: Status 7299 - type: string 7300 - - jsonPath: .metadata.creationTimestamp 7301 - name: Age 7302 - type: date 7303 - deprecated: true 7304 - deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1 7305 - name: v1beta1 7306 - schema: 7307 - openAPIV3Schema: 7308 - description: HelmRepository is the Schema for the helmrepositories API 7309 - properties: 7310 - apiVersion: 7311 - description: |- 7312 - APIVersion defines the versioned schema of this representation of an object. 7313 - Servers should convert recognized schemas to the latest internal value, and 7314 - may reject unrecognized values. 7315 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7316 - type: string 7317 - kind: 7318 - description: |- 7319 - Kind is a string value representing the REST resource this object represents. 7320 - Servers may infer this from the endpoint the client submits requests to. 7321 - Cannot be updated. 7322 - In CamelCase. 7323 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7324 - type: string 7325 - metadata: 7326 - type: object 7327 - spec: 7328 - description: HelmRepositorySpec defines the reference to a Helm repository. 7329 - properties: 7330 - accessFrom: 7331 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 7332 - to this object. 7333 - properties: 7334 - namespaceSelectors: 7335 - description: |- 7336 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7337 - Items in this list are evaluated using a logical OR operation. 7338 - items: 7339 - description: |- 7340 - NamespaceSelector selects the namespaces to which this ACL applies. 7341 - An empty map of MatchLabels matches all namespaces in a cluster. 7342 - properties: 7343 - matchLabels: 7344 - additionalProperties: 7345 - type: string 7346 - description: |- 7347 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7348 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7349 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7350 - type: object 7351 - type: object 7352 - type: array 7353 - required: 7354 - - namespaceSelectors 7355 - type: object 7356 - interval: 7357 - description: The interval at which to check the upstream for updates. 7358 - type: string 7359 - passCredentials: 7360 - description: |- 7361 - PassCredentials allows the credentials from the SecretRef to be passed on to 7362 - a host that does not match the host as defined in URL. 7363 - This may be required if the host of the advertised chart URLs in the index 7364 - differ from the defined URL. 7365 - Enabling this should be done with caution, as it can potentially result in 7366 - credentials getting stolen in a MITM-attack. 7367 - type: boolean 7368 - secretRef: 7369 - description: |- 7370 - The name of the secret containing authentication credentials for the Helm 7371 - repository. 7372 - For HTTP/S basic auth the secret must contain username and 7373 - password fields. 7374 - For TLS the secret must contain a certFile and keyFile, and/or 7375 - caFile fields. 7376 - properties: 7377 - name: 7378 - description: Name of the referent. 7379 - type: string 7380 - required: 7381 - - name 7382 - type: object 7383 - suspend: 7384 - description: This flag tells the controller to suspend the reconciliation of this source. 7385 - type: boolean 7386 - timeout: 7387 - default: 60s 7388 - description: The timeout of index downloading, defaults to 60s. 7389 - type: string 7390 - url: 7391 - description: The Helm repository URL, a valid URL contains at least a protocol and host. 7392 - type: string 7393 - required: 7394 - - interval 7395 - - url 7396 - type: object 7397 - status: 7398 - default: 7399 - observedGeneration: -1 7400 - description: HelmRepositoryStatus defines the observed state of the HelmRepository. 7401 - properties: 7402 - artifact: 7403 - description: Artifact represents the output of the last successful repository sync. 7404 - properties: 7405 - checksum: 7406 - description: Checksum is the SHA256 checksum of the artifact. 7407 - type: string 7408 - lastUpdateTime: 7409 - description: |- 7410 - LastUpdateTime is the timestamp corresponding to the last update of this 7411 - artifact. 7412 - format: date-time 7413 - type: string 7414 - path: 7415 - description: Path is the relative file path of this artifact. 7416 - type: string 7417 - revision: 7418 - description: |- 7419 - Revision is a human readable identifier traceable in the origin source 7420 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 7421 - chart version, etc. 7422 - type: string 7423 - url: 7424 - description: URL is the HTTP address of this artifact. 7425 - type: string 7426 - required: 7427 - - lastUpdateTime 7428 - - path 7429 - - url 7430 - type: object 7431 - conditions: 7432 - description: Conditions holds the conditions for the HelmRepository. 7433 - items: 7434 - description: Condition contains details for one aspect of the current state of this API 7435 - Resource. 7436 - properties: 7437 - lastTransitionTime: 7438 - description: |- 7439 - lastTransitionTime is the last time the condition transitioned from one status to another. 7440 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7441 - format: date-time 7442 - type: string 7443 - message: 7444 - description: |- 7445 - message is a human readable message indicating details about the transition. 7446 - This may be an empty string. 7447 - maxLength: 32768 7448 - type: string 7449 - observedGeneration: 7450 - description: |- 7451 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7452 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7453 - with respect to the current state of the instance. 7454 - format: int64 7455 - minimum: 0 7456 - type: integer 7457 - reason: 7458 - description: |- 7459 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7460 - Producers of specific condition types may define expected values and meanings for this field, 7461 - and whether the values are considered a guaranteed API. 7462 - The value should be a CamelCase string. 7463 - This field may not be empty. 7464 - maxLength: 1024 7465 - minLength: 1 7466 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7467 - type: string 7468 - status: 7469 - description: status of the condition, one of True, False, Unknown. 7470 - enum: 7471 - - "True" 7472 - - "False" 7473 - - Unknown 7474 - type: string 7475 - type: 7476 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7477 - maxLength: 316 7478 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7479 - type: string 7480 - required: 7481 - - lastTransitionTime 7482 - - message 7483 - - reason 7484 - - status 7485 - - type 7486 - type: object 7487 - type: array 7488 - lastHandledReconcileAt: 7489 - description: |- 7490 - LastHandledReconcileAt holds the value of the most recent 7491 - reconcile request value, so a change of the annotation value 7492 - can be detected. 7493 - type: string 7494 - observedGeneration: 7495 - description: ObservedGeneration is the last observed generation. 7496 - format: int64 7497 - type: integer 7498 - url: 7499 - description: URL is the download link for the last index fetched. 7500 - type: string 7501 - type: object 7502 - type: object 7503 - served: true 7504 - storage: false 7505 - subresources: 7506 - status: {} 7507 - - additionalPrinterColumns: 7508 - - jsonPath: .spec.url 7509 - name: URL 7510 - type: string 7511 - - jsonPath: .metadata.creationTimestamp 7512 - name: Age 7513 - type: date 7514 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7515 - name: Ready 7516 - type: string 7517 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7518 - name: Status 7519 - type: string 7520 - deprecated: true 7521 - deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 7522 - name: v1beta2 7523 - schema: 7524 - openAPIV3Schema: 7525 - description: HelmRepository is the Schema for the helmrepositories API. 7526 - properties: 7527 - apiVersion: 7528 - description: |- 7529 - APIVersion defines the versioned schema of this representation of an object. 7530 - Servers should convert recognized schemas to the latest internal value, and 7531 - may reject unrecognized values. 7532 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7533 - type: string 7534 - kind: 7535 - description: |- 7536 - Kind is a string value representing the REST resource this object represents. 7537 - Servers may infer this from the endpoint the client submits requests to. 7538 - Cannot be updated. 7539 - In CamelCase. 7540 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7541 - type: string 7542 - metadata: 7543 - type: object 7544 - spec: 7545 - description: |- 7546 - HelmRepositorySpec specifies the required configuration to produce an 7547 - Artifact for a Helm repository index YAML. 7548 - properties: 7549 - accessFrom: 7550 - description: |- 7551 - AccessFrom specifies an Access Control List for allowing cross-namespace 7552 - references to this object. 7553 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 7554 - properties: 7555 - namespaceSelectors: 7556 - description: |- 7557 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7558 - Items in this list are evaluated using a logical OR operation. 7559 - items: 7560 - description: |- 7561 - NamespaceSelector selects the namespaces to which this ACL applies. 7562 - An empty map of MatchLabels matches all namespaces in a cluster. 7563 - properties: 7564 - matchLabels: 7565 - additionalProperties: 7566 - type: string 7567 - description: |- 7568 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7569 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7570 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7571 - type: object 7572 - type: object 7573 - type: array 7574 - required: 7575 - - namespaceSelectors 7576 - type: object 7577 - certSecretRef: 7578 - description: |- 7579 - CertSecretRef can be given the name of a Secret containing 7580 - either or both of 7581 + certSecretRef: 7582 + description: |- 7583 + CertSecretRef can be given the name of a Secret containing 7584 + either or both of 7585 7586 - - a PEM-encoded client certificate (`tls.crt`) and private 7587 - key (`tls.key`); 7588 - - a PEM-encoded CA certificate (`ca.crt`) 7589 + - a PEM-encoded client certificate (`tls.crt`) and private 7590 + key (`tls.key`); 7591 + - a PEM-encoded CA certificate (`ca.crt`) 7592 7593 - and whichever are supplied, will be used for connecting to the 7594 - registry. The client cert and key are useful if you are 7595 - authenticating with a certificate; the CA cert is useful if 7596 - you are using a self-signed server certificate. The Secret must 7597 - be of type `Opaque` or `kubernetes.io/tls`. 7598 + and whichever are supplied, will be used for connecting to the 7599 + registry. The client cert and key are useful if you are 7600 + authenticating with a certificate; the CA cert is useful if 7601 + you are using a self-signed server certificate. The Secret must 7602 + be of type `Opaque` or `kubernetes.io/tls`. 7603 7604 - It takes precedence over the values specified in the Secret referred 7605 - to by `.spec.secretRef`. 7606 - properties: 7607 - name: 7608 - description: Name of the referent. 7609 - type: string 7610 - required: 7611 - - name 7612 - type: object 7613 - insecure: 7614 - description: |- 7615 - Insecure allows connecting to a non-TLS HTTP container registry. 7616 - This field is only taken into account if the .spec.type field is set to 'oci'. 7617 - type: boolean 7618 - interval: 7619 - description: |- 7620 - Interval at which the HelmRepository URL is checked for updates. 7621 - This interval is approximate and may be subject to jitter to ensure 7622 - efficient use of resources. 7623 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7624 - type: string 7625 - passCredentials: 7626 - description: |- 7627 - PassCredentials allows the credentials from the SecretRef to be passed 7628 - on to a host that does not match the host as defined in URL. 7629 - This may be required if the host of the advertised chart URLs in the 7630 - index differ from the defined URL. 7631 - Enabling this should be done with caution, as it can potentially result 7632 - in credentials getting stolen in a MITM-attack. 7633 - type: boolean 7634 - provider: 7635 - default: generic 7636 - description: |- 7637 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7638 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 7639 - When not specified, defaults to 'generic'. 7640 - enum: 7641 - - generic 7642 - - aws 7643 - - azure 7644 - - gcp 7645 - type: string 7646 - secretRef: 7647 - description: |- 7648 - SecretRef specifies the Secret containing authentication credentials 7649 - for the HelmRepository. 7650 - For HTTP/S basic auth the secret must contain 'username' and 'password' 7651 - fields. 7652 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 7653 - keys is deprecated. Please use `.spec.certSecretRef` instead. 7654 - properties: 7655 - name: 7656 - description: Name of the referent. 7657 - type: string 7658 - required: 7659 - - name 7660 - type: object 7661 - suspend: 7662 - description: |- 7663 - Suspend tells the controller to suspend the reconciliation of this 7664 - HelmRepository. 7665 - type: boolean 7666 - timeout: 7667 - description: |- 7668 - Timeout is used for the index fetch operation for an HTTPS helm repository, 7669 - and for remote OCI Repository operations like pulling for an OCI helm 7670 - chart by the associated HelmChart. 7671 - Its default value is 60s. 7672 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7673 - type: string 7674 - type: 7675 - description: |- 7676 - Type of the HelmRepository. 7677 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 7678 - enum: 7679 - - default 7680 - - oci 7681 - type: string 7682 - url: 7683 - description: |- 7684 - URL of the Helm repository, a valid URL contains at least a protocol and 7685 - host. 7686 - pattern: ^(http|https|oci)://.*$ 7687 - type: string 7688 - required: 7689 - - url 7690 - type: object 7691 - status: 7692 - default: 7693 - observedGeneration: -1 7694 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 7695 - properties: 7696 - artifact: 7697 - description: Artifact represents the last successful HelmRepository reconciliation. 7698 - properties: 7699 - digest: 7700 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7701 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7702 - type: string 7703 - lastUpdateTime: 7704 - description: |- 7705 - LastUpdateTime is the timestamp corresponding to the last update of the 7706 - Artifact. 7707 - format: date-time 7708 - type: string 7709 - metadata: 7710 - additionalProperties: 7711 - type: string 7712 - description: Metadata holds upstream information such as OCI annotations. 7713 - type: object 7714 - path: 7715 - description: |- 7716 - Path is the relative file path of the Artifact. It can be used to locate 7717 - the file in the root of the Artifact storage on the local file system of 7718 - the controller managing the Source. 7719 - type: string 7720 - revision: 7721 - description: |- 7722 - Revision is a human-readable identifier traceable in the origin source 7723 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7724 - type: string 7725 - size: 7726 - description: Size is the number of bytes in the file. 7727 - format: int64 7728 - type: integer 7729 - url: 7730 - description: |- 7731 - URL is the HTTP address of the Artifact as exposed by the controller 7732 - managing the Source. It can be used to retrieve the Artifact for 7733 - consumption, e.g. by another controller applying the Artifact contents. 7734 - type: string 7735 - required: 7736 - - lastUpdateTime 7737 - - path 7738 - - revision 7739 - - url 7740 - type: object 7741 - conditions: 7742 - description: Conditions holds the conditions for the HelmRepository. 7743 - items: 7744 - description: Condition contains details for one aspect of the current state of this API 7745 - Resource. 7746 - properties: 7747 - lastTransitionTime: 7748 - description: |- 7749 - lastTransitionTime is the last time the condition transitioned from one status to another. 7750 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7751 - format: date-time 7752 - type: string 7753 - message: 7754 - description: |- 7755 - message is a human readable message indicating details about the transition. 7756 - This may be an empty string. 7757 - maxLength: 32768 7758 - type: string 7759 - observedGeneration: 7760 - description: |- 7761 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7762 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7763 - with respect to the current state of the instance. 7764 - format: int64 7765 - minimum: 0 7766 - type: integer 7767 - reason: 7768 - description: |- 7769 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7770 - Producers of specific condition types may define expected values and meanings for this field, 7771 - and whether the values are considered a guaranteed API. 7772 - The value should be a CamelCase string. 7773 - This field may not be empty. 7774 - maxLength: 1024 7775 - minLength: 1 7776 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7777 - type: string 7778 - status: 7779 - description: status of the condition, one of True, False, Unknown. 7780 - enum: 7781 - - "True" 7782 - - "False" 7783 - - Unknown 7784 - type: string 7785 - type: 7786 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7787 - maxLength: 316 7788 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7789 - type: string 7790 - required: 7791 - - lastTransitionTime 7792 - - message 7793 - - reason 7794 - - status 7795 - - type 7796 - type: object 7797 - type: array 7798 - lastHandledReconcileAt: 7799 - description: |- 7800 - LastHandledReconcileAt holds the value of the most recent 7801 - reconcile request value, so a change of the annotation value 7802 - can be detected. 7803 - type: string 7804 - observedGeneration: 7805 - description: |- 7806 - ObservedGeneration is the last observed generation of the HelmRepository 7807 - object. 7808 - format: int64 7809 - type: integer 7810 - url: 7811 - description: |- 7812 - URL is the dynamic fetch link for the latest Artifact. 7813 - It is provided on a "best effort" basis, and using the precise 7814 - HelmRepositoryStatus.Artifact data is recommended. 7815 - type: string 7816 - type: object 7817 - type: object 7818 - served: true 7819 - storage: false 7820 - subresources: 7821 - status: {} 7822 ---- 7823 -apiVersion: apiextensions.k8s.io/v1 7824 -kind: CustomResourceDefinition 7825 -metadata: 7826 - annotations: 7827 - controller-gen.kubebuilder.io/version: v0.16.1 7828 - labels: 7829 - app.kubernetes.io/component: source-controller 7830 - app.kubernetes.io/instance: flux-system 7831 - app.kubernetes.io/part-of: flux 7832 - app.kubernetes.io/version: v2.4.0 7833 - name: ocirepositories.source.toolkit.fluxcd.io 7834 -spec: 7835 - group: source.toolkit.fluxcd.io 7836 - names: 7837 - kind: OCIRepository 7838 - listKind: OCIRepositoryList 7839 - plural: ocirepositories 7840 - shortNames: 7841 - - ocirepo 7842 - singular: ocirepository 7843 - scope: Namespaced 7844 - versions: 7845 - - additionalPrinterColumns: 7846 - - jsonPath: .spec.url 7847 - name: URL 7848 - type: string 7849 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7850 - name: Ready 7851 - type: string 7852 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7853 - name: Status 7854 - type: string 7855 - - jsonPath: .metadata.creationTimestamp 7856 - name: Age 7857 - type: date 7858 - name: v1beta2 7859 - schema: 7860 - openAPIV3Schema: 7861 - description: OCIRepository is the Schema for the ocirepositories API 7862 + It takes precedence over the values specified in the Secret referred 7863 + to by `.spec.secretRef`. 7864 properties: 7865 - apiVersion: 7866 - description: |- 7867 - APIVersion defines the versioned schema of this representation of an object. 7868 - Servers should convert recognized schemas to the latest internal value, and 7869 - may reject unrecognized values. 7870 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7871 - type: string 7872 - kind: 7873 - description: |- 7874 - Kind is a string value representing the REST resource this object represents. 7875 - Servers may infer this from the endpoint the client submits requests to. 7876 - Cannot be updated. 7877 - In CamelCase. 7878 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7879 - type: string 7880 - metadata: 7881 - type: object 7882 - spec: 7883 - description: OCIRepositorySpec defines the desired state of OCIRepository 7884 - properties: 7885 - certSecretRef: 7886 - description: |- 7887 - CertSecretRef can be given the name of a Secret containing 7888 - either or both of 7889 - 7890 - - a PEM-encoded client certificate (`tls.crt`) and private 7891 - key (`tls.key`); 7892 - - a PEM-encoded CA certificate (`ca.crt`) 7893 - 7894 - and whichever are supplied, will be used for connecting to the 7895 - registry. The client cert and key are useful if you are 7896 - authenticating with a certificate; the CA cert is useful if 7897 - you are using a self-signed server certificate. The Secret must 7898 - be of type `Opaque` or `kubernetes.io/tls`. 7899 - 7900 - Note: Support for the `caFile`, `certFile` and `keyFile` keys have 7901 - been deprecated. 7902 - properties: 7903 - name: 7904 - description: Name of the referent. 7905 - type: string 7906 - required: 7907 - - name 7908 - type: object 7909 - ignore: 7910 - description: |- 7911 - Ignore overrides the set of excluded patterns in the .sourceignore format 7912 - (which is the same as .gitignore). If not provided, a default will be used, 7913 - consult the documentation for your version to find out what those are. 7914 - type: string 7915 - insecure: 7916 - description: Insecure allows connecting to a non-TLS HTTP container registry. 7917 - type: boolean 7918 - interval: 7919 - description: |- 7920 - Interval at which the OCIRepository URL is checked for updates. 7921 - This interval is approximate and may be subject to jitter to ensure 7922 - efficient use of resources. 7923 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7924 - type: string 7925 - layerSelector: 7926 - description: |- 7927 - LayerSelector specifies which layer should be extracted from the OCI artifact. 7928 - When not specified, the first layer found in the artifact is selected. 7929 - properties: 7930 - mediaType: 7931 - description: |- 7932 - MediaType specifies the OCI media type of the layer 7933 - which should be extracted from the OCI Artifact. The 7934 - first layer matching this type is selected. 7935 - type: string 7936 - operation: 7937 - description: |- 7938 - Operation specifies how the selected layer should be processed. 7939 - By default, the layer compressed content is extracted to storage. 7940 - When the operation is set to 'copy', the layer compressed content 7941 - is persisted to storage as it is. 7942 - enum: 7943 - - extract 7944 - - copy 7945 - type: string 7946 - type: object 7947 - provider: 7948 - default: generic 7949 - description: |- 7950 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7951 - When not specified, defaults to 'generic'. 7952 - enum: 7953 - - generic 7954 - - aws 7955 - - azure 7956 - - gcp 7957 - type: string 7958 - proxySecretRef: 7959 - description: |- 7960 - ProxySecretRef specifies the Secret containing the proxy configuration 7961 - to use while communicating with the container registry. 7962 - properties: 7963 - name: 7964 - description: Name of the referent. 7965 - type: string 7966 - required: 7967 - - name 7968 - type: object 7969 - ref: 7970 - description: |- 7971 - The OCI reference to pull and monitor for changes, 7972 - defaults to the latest tag. 7973 - properties: 7974 - digest: 7975 - description: |- 7976 - Digest is the image digest to pull, takes precedence over SemVer. 7977 - The value should be in the format 'sha256:<HASH>'. 7978 - type: string 7979 - semver: 7980 - description: |- 7981 - SemVer is the range of tags to pull selecting the latest within 7982 - the range, takes precedence over Tag. 7983 - type: string 7984 - semverFilter: 7985 - description: SemverFilter is a regex pattern to filter the tags within the SemVer 7986 - range. 7987 - type: string 7988 - tag: 7989 - description: Tag is the image tag to pull, defaults to latest. 7990 - type: string 7991 - type: object 7992 - secretRef: 7993 - description: |- 7994 - SecretRef contains the secret name containing the registry login 7995 - credentials to resolve image metadata. 7996 - The secret must be of type kubernetes.io/dockerconfigjson. 7997 - properties: 7998 - name: 7999 - description: Name of the referent. 8000 - type: string 8001 - required: 8002 - - name 8003 - type: object 8004 - serviceAccountName: 8005 - description: |- 8006 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 8007 - the image pull if the service account has attached pull secrets. For more information: 8008 - https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 8009 - type: string 8010 - suspend: 8011 - description: This flag tells the controller to suspend the reconciliation of this source. 8012 - type: boolean 8013 - timeout: 8014 - default: 60s 8015 - description: The timeout for remote OCI Repository operations like pulling, defaults to 60s. 8016 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 8017 - type: string 8018 - url: 8019 - description: |- 8020 - URL is a reference to an OCI artifact repository hosted 8021 - on a remote container registry. 8022 - pattern: ^oci://.*$ 8023 - type: string 8024 - verify: 8025 - description: |- 8026 - Verify contains the secret name containing the trusted public keys 8027 - used to verify the signature and specifies which provider to use to check 8028 - whether OCI image is authentic. 8029 - properties: 8030 - matchOIDCIdentity: 8031 - description: |- 8032 - MatchOIDCIdentity specifies the identity matching criteria to use 8033 - while verifying an OCI artifact which was signed using Cosign keyless 8034 - signing. The artifact's identity is deemed to be verified if any of the 8035 - specified matchers match against the identity. 8036 - items: 8037 - description: |- 8038 - OIDCIdentityMatch specifies options for verifying the certificate identity, 8039 - i.e. the issuer and the subject of the certificate. 8040 - properties: 8041 - issuer: 8042 - description: |- 8043 - Issuer specifies the regex pattern to match against to verify 8044 - the OIDC issuer in the Fulcio certificate. The pattern must be a 8045 - valid Go regular expression. 8046 - type: string 8047 - subject: 8048 - description: |- 8049 - Subject specifies the regex pattern to match against to verify 8050 - the identity subject in the Fulcio certificate. The pattern must 8051 - be a valid Go regular expression. 8052 - type: string 8053 - required: 8054 - - issuer 8055 - - subject 8056 - type: object 8057 - type: array 8058 - provider: 8059 - default: cosign 8060 - description: Provider specifies the technology used to sign the OCI Artifact. 8061 - enum: 8062 - - cosign 8063 - - notation 8064 - type: string 8065 - secretRef: 8066 - description: |- 8067 - SecretRef specifies the Kubernetes Secret containing the 8068 - trusted public keys. 8069 - properties: 8070 - name: 8071 - description: Name of the referent. 8072 - type: string 8073 - required: 8074 - - name 8075 - type: object 8076 - required: 8077 - - provider 8078 - type: object 8079 - required: 8080 - - interval 8081 - - url 8082 - type: object 8083 - status: 8084 - default: 8085 - observedGeneration: -1 8086 - description: OCIRepositoryStatus defines the observed state of OCIRepository 8087 - properties: 8088 - artifact: 8089 - description: Artifact represents the output of the last successful OCI Repository sync. 8090 - properties: 8091 - digest: 8092 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 8093 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 8094 - type: string 8095 - lastUpdateTime: 8096 - description: |- 8097 - LastUpdateTime is the timestamp corresponding to the last update of the 8098 - Artifact. 8099 - format: date-time 8100 - type: string 8101 - metadata: 8102 - additionalProperties: 8103 - type: string 8104 - description: Metadata holds upstream information such as OCI annotations. 8105 - type: object 8106 - path: 8107 - description: |- 8108 - Path is the relative file path of the Artifact. It can be used to locate 8109 - the file in the root of the Artifact storage on the local file system of 8110 - the controller managing the Source. 8111 - type: string 8112 - revision: 8113 - description: |- 8114 - Revision is a human-readable identifier traceable in the origin source 8115 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 8116 - type: string 8117 - size: 8118 - description: Size is the number of bytes in the file. 8119 - format: int64 8120 - type: integer 8121 - url: 8122 - description: |- 8123 - URL is the HTTP address of the Artifact as exposed by the controller 8124 - managing the Source. It can be used to retrieve the Artifact for 8125 - consumption, e.g. by another controller applying the Artifact contents. 8126 - type: string 8127 - required: 8128 - - lastUpdateTime 8129 - - path 8130 - - revision 8131 - - url 8132 - type: object 8133 - conditions: 8134 - description: Conditions holds the conditions for the OCIRepository. 8135 - items: 8136 - description: Condition contains details for one aspect of the current state of this API 8137 - Resource. 8138 - properties: 8139 - lastTransitionTime: 8140 - description: |- 8141 - lastTransitionTime is the last time the condition transitioned from one status to another. 8142 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8143 - format: date-time 8144 - type: string 8145 - message: 8146 - description: |- 8147 - message is a human readable message indicating details about the transition. 8148 - This may be an empty string. 8149 - maxLength: 32768 8150 - type: string 8151 - observedGeneration: 8152 - description: |- 8153 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8154 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8155 - with respect to the current state of the instance. 8156 - format: int64 8157 - minimum: 0 8158 - type: integer 8159 - reason: 8160 - description: |- 8161 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8162 - Producers of specific condition types may define expected values and meanings for this field, 8163 - and whether the values are considered a guaranteed API. 8164 - The value should be a CamelCase string. 8165 - This field may not be empty. 8166 - maxLength: 1024 8167 - minLength: 1 8168 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8169 - type: string 8170 - status: 8171 - description: status of the condition, one of True, False, Unknown. 8172 - enum: 8173 - - "True" 8174 - - "False" 8175 - - Unknown 8176 - type: string 8177 - type: 8178 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 8179 - maxLength: 316 8180 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8181 - type: string 8182 - required: 8183 - - lastTransitionTime 8184 - - message 8185 - - reason 8186 - - status 8187 - - type 8188 - type: object 8189 - type: array 8190 - contentConfigChecksum: 8191 - description: |- 8192 - ContentConfigChecksum is a checksum of all the configurations related to 8193 - the content of the source artifact: 8194 - - .spec.ignore 8195 - - .spec.layerSelector 8196 - observed in .status.observedGeneration version of the object. This can 8197 - be used to determine if the content configuration has changed and the 8198 - artifact needs to be rebuilt. 8199 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 8200 - 8201 - Deprecated: Replaced with explicit fields for observed artifact content 8202 - config in the status. 8203 - type: string 8204 - lastHandledReconcileAt: 8205 - description: |- 8206 - LastHandledReconcileAt holds the value of the most recent 8207 - reconcile request value, so a change of the annotation value 8208 - can be detected. 8209 - type: string 8210 - observedGeneration: 8211 - description: ObservedGeneration is the last observed generation. 8212 - format: int64 8213 - type: integer 8214 - observedIgnore: 8215 - description: |- 8216 - ObservedIgnore is the observed exclusion patterns used for constructing 8217 - the source artifact. 8218 - type: string 8219 - observedLayerSelector: 8220 - description: |- 8221 - ObservedLayerSelector is the observed layer selector used for constructing 8222 - the source artifact. 8223 - properties: 8224 - mediaType: 8225 - description: |- 8226 - MediaType specifies the OCI media type of the layer 8227 - which should be extracted from the OCI Artifact. The 8228 - first layer matching this type is selected. 8229 - type: string 8230 - operation: 8231 - description: |- 8232 - Operation specifies how the selected layer should be processed. 8233 - By default, the layer compressed content is extracted to storage. 8234 - When the operation is set to 'copy', the layer compressed content 8235 - is persisted to storage as it is. 8236 - enum: 8237 - - extract 8238 - - copy 8239 - type: string 8240 - type: object 8241 - url: 8242 - description: URL is the download link for the artifact output of the last OCI Repository sync. 8243 - type: string 8244 - type: object 8245 + name: 8246 + description: Name of the referent. 8247 + type: string 8248 + required: 8249 + - name 8250 type: object 8251 - served: true 8252 - storage: true 8253 - subresources: 8254 - status: {} 8255 ---- 8256 -apiVersion: v1 8257 -kind: ServiceAccount 8258 -metadata: 8259 - labels: 8260 - app.kubernetes.io/component: source-controller 8261 - app.kubernetes.io/instance: flux-system 8262 - app.kubernetes.io/part-of: flux 8263 - app.kubernetes.io/version: v2.4.0 8264 - name: source-controller 8265 - namespace: flux-system 8266 ---- 8267 -apiVersion: v1 8268 -kind: Service 8269 -metadata: 8270 - labels: 8271 - app.kubernetes.io/component: source-controller 8272 - app.kubernetes.io/instance: flux-system 8273 - app.kubernetes.io/part-of: flux 8274 - app.kubernetes.io/version: v2.4.0 8275 - control-plane: controller 8276 - name: source-controller 8277 - namespace: flux-system 8278 -spec: 8279 - ports: 8280 - - name: http 8281 - port: 80 8282 - protocol: TCP 8283 - targetPort: http 8284 - selector: 8285 - app: source-controller 8286 - type: ClusterIP 8287 ---- 8288 -apiVersion: apps/v1 8289 -kind: Deployment 8290 -metadata: 8291 - labels: 8292 - app.kubernetes.io/component: source-controller 8293 - app.kubernetes.io/instance: flux-system 8294 - app.kubernetes.io/part-of: flux 8295 - app.kubernetes.io/version: v2.4.0 8296 - control-plane: controller 8297 - name: source-controller 8298 - namespace: flux-system 8299 -spec: 8300 - replicas: 1 8301 - selector: 8302 - matchLabels: 8303 - app: source-controller 8304 - strategy: 8305 - type: Recreate 8306 - template: 8307 - metadata: 8308 - annotations: 8309 - prometheus.io/port: "8080" 8310 - prometheus.io/scrape: "true" 8311 - labels: 8312 - app: source-controller 8313 - spec: 8314 - containers: 8315 - - args: 8316 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 8317 - - --watch-all-namespaces=true 8318 - - --log-level=info 8319 - - --log-encoding=json 8320 - - --enable-leader-election 8321 - - --storage-path=/data 8322 - - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 8323 - env: 8324 - - name: RUNTIME_NAMESPACE 8325 - valueFrom: 8326 - fieldRef: 8327 - fieldPath: metadata.namespace 8328 - - name: TUF_ROOT 8329 - value: /tmp/.sigstore 8330 - - name: GOMAXPROCS 8331 - valueFrom: 8332 - resourceFieldRef: 8333 - containerName: manager 8334 - resource: limits.cpu 8335 - - name: GOMEMLIMIT 8336 - valueFrom: 8337 - resourceFieldRef: 8338 - containerName: manager 8339 - resource: limits.memory 8340 - image: ghcr.io/fluxcd/source-controller:v1.4.1 8341 - imagePullPolicy: IfNotPresent 8342 - livenessProbe: 8343 - httpGet: 8344 - path: /healthz 8345 - port: healthz 8346 - name: manager 8347 - ports: 8348 - - containerPort: 9090 8349 - name: http 8350 - protocol: TCP 8351 - - containerPort: 8080 8352 - name: http-prom 8353 - protocol: TCP 8354 - - containerPort: 9440 8355 - name: healthz 8356 - protocol: TCP 8357 - readinessProbe: 8358 - httpGet: 8359 - path: / 8360 - port: http 8361 - resources: 8362 - limits: 8363 - cpu: 1000m 8364 - memory: 1Gi 8365 - requests: 8366 - cpu: 50m 8367 - memory: 64Mi 8368 - securityContext: 8369 - allowPrivilegeEscalation: false 8370 - capabilities: 8371 - drop: 8372 - - ALL 8373 - readOnlyRootFilesystem: true 8374 - runAsNonRoot: true 8375 - seccompProfile: 8376 - type: RuntimeDefault 8377 - volumeMounts: 8378 - - mountPath: /data 8379 - name: data 8380 - - mountPath: /tmp 8381 - name: tmp 8382 - nodeSelector: 8383 - kubernetes.io/os: linux 8384 - priorityClassName: system-cluster-critical 8385 - securityContext: 8386 - fsGroup: 1337 8387 - serviceAccountName: source-controller 8388 - terminationGracePeriodSeconds: 10 8389 - volumes: 8390 - - emptyDir: {} 8391 - name: data 8392 - - emptyDir: {} 8393 - name: tmp 8394 ---- 8395 -apiVersion: apiextensions.k8s.io/v1 8396 -kind: CustomResourceDefinition 8397 -metadata: 8398 - annotations: 8399 - controller-gen.kubebuilder.io/version: v0.16.1 8400 - labels: 8401 - app.kubernetes.io/component: kustomize-controller 8402 - app.kubernetes.io/instance: flux-system 8403 - app.kubernetes.io/part-of: flux 8404 - app.kubernetes.io/version: v2.4.0 8405 - name: kustomizations.kustomize.toolkit.fluxcd.io 8406 -spec: 8407 - group: kustomize.toolkit.fluxcd.io 8408 - names: 8409 - kind: Kustomization 8410 - listKind: KustomizationList 8411 - plural: kustomizations 8412 - shortNames: 8413 - - ks 8414 - singular: kustomization 8415 - scope: Namespaced 8416 - versions: 8417 - - additionalPrinterColumns: 8418 - - jsonPath: .metadata.creationTimestamp 8419 - name: Age 8420 - type: date 8421 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 8422 - name: Ready 8423 - type: string 8424 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 8425 - name: Status 8426 - type: string 8427 - name: v1 8428 - schema: 8429 - openAPIV3Schema: 8430 - description: Kustomization is the Schema for the kustomizations API. 8431 + insecure: 8432 + description: |- 8433 + Insecure allows connecting to a non-TLS HTTP container registry. 8434 + This field is only taken into account if the .spec.type field is set to 'oci'. 8435 + type: boolean 8436 + interval: 8437 + description: |- 8438 + Interval at which the HelmRepository URL is checked for updates. 8439 + This interval is approximate and may be subject to jitter to ensure 8440 + efficient use of resources. 8441 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8442 + type: string 8443 + passCredentials: 8444 + description: |- 8445 + PassCredentials allows the credentials from the SecretRef to be passed 8446 + on to a host that does not match the host as defined in URL. 8447 + This may be required if the host of the advertised chart URLs in the 8448 + index differ from the defined URL. 8449 + Enabling this should be done with caution, as it can potentially result 8450 + in credentials getting stolen in a MITM-attack. 8451 + type: boolean 8452 + provider: 8453 + default: generic 8454 + description: |- 8455 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 8456 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 8457 + When not specified, defaults to 'generic'. 8458 + enum: 8459 + - generic 8460 + - aws 8461 + - azure 8462 + - gcp 8463 + type: string 8464 + secretRef: 8465 + description: |- 8466 + SecretRef specifies the Secret containing authentication credentials 8467 + for the HelmRepository. 8468 + For HTTP/S basic auth the secret must contain 'username' and 'password' 8469 + fields. 8470 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 8471 + keys is deprecated. Please use `.spec.certSecretRef` instead. 8472 properties: 8473 - apiVersion: 8474 - description: |- 8475 - APIVersion defines the versioned schema of this representation of an object. 8476 - Servers should convert recognized schemas to the latest internal value, and 8477 - may reject unrecognized values. 8478 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 8479 - type: string 8480 - kind: 8481 - description: |- 8482 - Kind is a string value representing the REST resource this object represents. 8483 - Servers may infer this from the endpoint the client submits requests to. 8484 - Cannot be updated. 8485 - In CamelCase. 8486 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 8487 - type: string 8488 - metadata: 8489 - type: object 8490 - spec: 8491 - description: |- 8492 - KustomizationSpec defines the configuration to calculate the desired state 8493 - from a Source using Kustomize. 8494 - properties: 8495 - commonMetadata: 8496 - description: |- 8497 - CommonMetadata specifies the common labels and annotations that are 8498 - applied to all resources. Any existing label or annotation will be 8499 - overridden if its key matches a common one. 8500 - properties: 8501 - annotations: 8502 - additionalProperties: 8503 - type: string 8504 - description: Annotations to be added to the object's metadata. 8505 - type: object 8506 - labels: 8507 - additionalProperties: 8508 - type: string 8509 - description: Labels to be added to the object's metadata. 8510 - type: object 8511 - type: object 8512 - components: 8513 - description: Components specifies relative paths to specifications of other Components. 8514 - items: 8515 - type: string 8516 - type: array 8517 - decryption: 8518 - description: Decrypt Kubernetes secrets before applying them on the cluster. 8519 - properties: 8520 - provider: 8521 - description: Provider is the name of the decryption engine. 8522 - enum: 8523 - - sops 8524 - type: string 8525 - secretRef: 8526 - description: The secret name containing the private OpenPGP keys used for decryption. 8527 - properties: 8528 - name: 8529 - description: Name of the referent. 8530 - type: string 8531 - required: 8532 - - name 8533 - type: object 8534 - required: 8535 - - provider 8536 - type: object 8537 - dependsOn: 8538 - description: |- 8539 - DependsOn may contain a meta.NamespacedObjectReference slice 8540 - with references to Kustomization resources that must be ready before this 8541 - Kustomization can be reconciled. 8542 - items: 8543 - description: |- 8544 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 8545 - namespace. 8546 - properties: 8547 - name: 8548 - description: Name of the referent. 8549 - type: string 8550 - namespace: 8551 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 8552 - type: string 8553 - required: 8554 - - name 8555 - type: object 8556 - type: array 8557 - force: 8558 - default: false 8559 - description: |- 8560 - Force instructs the controller to recreate resources 8561 - when patching fails due to an immutable field change. 8562 - type: boolean 8563 - healthChecks: 8564 - description: A list of resources to be included in the health assessment. 8565 - items: 8566 - description: |- 8567 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 8568 - in any namespace. 8569 - properties: 8570 - apiVersion: 8571 - description: API version of the referent, if not specified the Kubernetes preferred 8572 - version will be used. 8573 - type: string 8574 - kind: 8575 - description: Kind of the referent. 8576 - type: string 8577 - name: 8578 - description: Name of the referent. 8579 - type: string 8580 - namespace: 8581 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 8582 - type: string 8583 - required: 8584 - - kind 8585 - - name 8586 - type: object 8587 - type: array 8588 - images: 8589 - description: |- 8590 - Images is a list of (image name, new name, new tag or digest) 8591 - for changing image names, tags or digests. This can also be achieved with a 8592 - patch, but this operator is simpler to specify. 8593 - items: 8594 - description: Image contains an image name, a new name, a new tag or digest, which will 8595 - replace the original name and tag. 8596 - properties: 8597 - digest: 8598 - description: |- 8599 - Digest is the value used to replace the original image tag. 8600 - If digest is present NewTag value is ignored. 8601 - type: string 8602 - name: 8603 - description: Name is a tag-less image name. 8604 - type: string 8605 - newName: 8606 - description: NewName is the value used to replace the original name. 8607 - type: string 8608 - newTag: 8609 - description: NewTag is the value used to replace the original tag. 8610 - type: string 8611 - required: 8612 - - name 8613 - type: object 8614 - type: array 8615 - interval: 8616 - description: |- 8617 - The interval at which to reconcile the Kustomization. 8618 - This interval is approximate and may be subject to jitter to ensure 8619 - efficient use of resources. 8620 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8621 - type: string 8622 - kubeConfig: 8623 - description: |- 8624 - The KubeConfig for reconciling the Kustomization on a remote cluster. 8625 - When used in combination with KustomizationSpec.ServiceAccountName, 8626 - forces the controller to act on behalf of that Service Account at the 8627 - target cluster. 8628 - If the --default-service-account flag is set, its value will be used as 8629 - a controller level fallback for when KustomizationSpec.ServiceAccountName 8630 - is empty. 8631 - properties: 8632 - secretRef: 8633 - description: |- 8634 - SecretRef holds the name of a secret that contains a key with 8635 - the kubeconfig file as the value. If no key is set, the key will default 8636 - to 'value'. 8637 - It is recommended that the kubeconfig is self-contained, and the secret 8638 - is regularly updated if credentials such as a cloud-access-token expire. 8639 - Cloud specific `cmd-path` auth helpers will not function without adding 8640 - binaries and credentials to the Pod that is responsible for reconciling 8641 - Kubernetes resources. 8642 - properties: 8643 - key: 8644 - description: Key in the Secret, when not specified an implementation-specific 8645 - default key is used. 8646 - type: string 8647 - name: 8648 - description: Name of the Secret. 8649 - type: string 8650 - required: 8651 - - name 8652 - type: object 8653 - required: 8654 - - secretRef 8655 - type: object 8656 - namePrefix: 8657 - description: NamePrefix will prefix the names of all managed resources. 8658 - maxLength: 200 8659 - minLength: 1 8660 - type: string 8661 - nameSuffix: 8662 - description: NameSuffix will suffix the names of all managed resources. 8663 - maxLength: 200 8664 - minLength: 1 8665 - type: string 8666 - patches: 8667 - description: |- 8668 - Strategic merge and JSON patches, defined as inline YAML objects, 8669 - capable of targeting objects based on kind, label and annotation selectors. 8670 - items: 8671 - description: |- 8672 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 8673 - be applied to. 8674 - properties: 8675 - patch: 8676 - description: |- 8677 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 8678 - an array of operation objects. 8679 - type: string 8680 - target: 8681 - description: Target points to the resources that the patch document should be 8682 - applied to. 8683 - properties: 8684 - annotationSelector: 8685 - description: |- 8686 - AnnotationSelector is a string that follows the label selection expression 8687 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8688 - It matches with the resource annotations. 8689 - type: string 8690 - group: 8691 - description: |- 8692 - Group is the API group to select resources from. 8693 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 8694 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8695 - type: string 8696 - kind: 8697 - description: |- 8698 - Kind of the API Group to select resources from. 8699 - Together with Group and Version it is capable of unambiguously 8700 - identifying and/or selecting resources. 8701 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8702 - type: string 8703 - labelSelector: 8704 - description: |- 8705 - LabelSelector is a string that follows the label selection expression 8706 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8707 - It matches with the resource labels. 8708 - type: string 8709 - name: 8710 - description: Name to match resources with. 8711 - type: string 8712 - namespace: 8713 - description: Namespace to select resources from. 8714 - type: string 8715 - version: 8716 - description: |- 8717 - Version of the API Group to select resources from. 8718 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 8719 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8720 - type: string 8721 - type: object 8722 - required: 8723 - - patch 8724 - type: object 8725 - type: array 8726 - path: 8727 - description: |- 8728 - Path to the directory containing the kustomization.yaml file, or the 8729 - set of plain YAMLs a kustomization.yaml should be generated for. 8730 - Defaults to 'None', which translates to the root path of the SourceRef. 8731 - type: string 8732 - postBuild: 8733 - description: |- 8734 - PostBuild describes which actions to perform on the YAML manifest 8735 - generated by building the kustomize overlay. 8736 - properties: 8737 - substitute: 8738 - additionalProperties: 8739 - type: string 8740 - description: |- 8741 - Substitute holds a map of key/value pairs. 8742 - The variables defined in your YAML manifests that match any of the keys 8743 - defined in the map will be substituted with the set value. 8744 - Includes support for bash string replacement functions 8745 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 8746 - type: object 8747 - substituteFrom: 8748 - description: |- 8749 - SubstituteFrom holds references to ConfigMaps and Secrets containing 8750 - the variables and their values to be substituted in the YAML manifests. 8751 - The ConfigMap and the Secret data keys represent the var names, and they 8752 - must match the vars declared in the manifests for the substitution to 8753 - happen. 8754 - items: 8755 - description: |- 8756 - SubstituteReference contains a reference to a resource containing 8757 - the variables name and value. 8758 - properties: 8759 - kind: 8760 - description: Kind of the values referent, valid values are ('Secret', 8761 - 'ConfigMap'). 8762 - enum: 8763 - - Secret 8764 - - ConfigMap 8765 - type: string 8766 - name: 8767 - description: |- 8768 - Name of the values referent. Should reside in the same namespace as the 8769 - referring resource. 8770 - maxLength: 253 8771 - minLength: 1 8772 - type: string 8773 - optional: 8774 - default: false 8775 - description: |- 8776 - Optional indicates whether the referenced resource must exist, or whether to 8777 - tolerate its absence. If true and the referenced resource is absent, proceed 8778 - as if the resource was present but empty, without any variables defined. 8779 - type: boolean 8780 - required: 8781 - - kind 8782 - - name 8783 - type: object 8784 - type: array 8785 - type: object 8786 - prune: 8787 - description: Prune enables garbage collection. 8788 - type: boolean 8789 - retryInterval: 8790 - description: |- 8791 - The interval at which to retry a previously failed reconciliation. 8792 - When not specified, the controller uses the KustomizationSpec.Interval 8793 - value to retry failures. 8794 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8795 - type: string 8796 - serviceAccountName: 8797 - description: |- 8798 - The name of the Kubernetes service account to impersonate 8799 - when reconciling this Kustomization. 8800 - type: string 8801 - sourceRef: 8802 - description: Reference of the source where the kustomization file is. 8803 - properties: 8804 - apiVersion: 8805 - description: API version of the referent. 8806 - type: string 8807 - kind: 8808 - description: Kind of the referent. 8809 - enum: 8810 - - OCIRepository 8811 - - GitRepository 8812 - - Bucket 8813 - type: string 8814 - name: 8815 - description: Name of the referent. 8816 - type: string 8817 - namespace: 8818 - description: |- 8819 - Namespace of the referent, defaults to the namespace of the Kubernetes 8820 - resource object that contains the reference. 8821 - type: string 8822 - required: 8823 - - kind 8824 - - name 8825 - type: object 8826 - suspend: 8827 - description: |- 8828 - This flag tells the controller to suspend subsequent kustomize executions, 8829 - it does not apply to already started executions. Defaults to false. 8830 - type: boolean 8831 - targetNamespace: 8832 - description: |- 8833 - TargetNamespace sets or overrides the namespace in the 8834 - kustomization.yaml file. 8835 - maxLength: 63 8836 - minLength: 1 8837 - type: string 8838 - timeout: 8839 - description: |- 8840 - Timeout for validation, apply and health checking operations. 8841 - Defaults to 'Interval' duration. 8842 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8843 - type: string 8844 - wait: 8845 - description: |- 8846 - Wait instructs the controller to check the health of all the reconciled 8847 - resources. When enabled, the HealthChecks are ignored. Defaults to false. 8848 - type: boolean 8849 - required: 8850 - - interval 8851 - - prune 8852 - - sourceRef 8853 - type: object 8854 - status: 8855 - default: 8856 - observedGeneration: -1 8857 - description: KustomizationStatus defines the observed state of a kustomization. 8858 - properties: 8859 - conditions: 8860 - items: 8861 - description: Condition contains details for one aspect of the current state of this API 8862 - Resource. 8863 - properties: 8864 - lastTransitionTime: 8865 - description: |- 8866 - lastTransitionTime is the last time the condition transitioned from one status to another. 8867 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8868 - format: date-time 8869 - type: string 8870 - message: 8871 - description: |- 8872 - message is a human readable message indicating details about the transition. 8873 - This may be an empty string. 8874 - maxLength: 32768 8875 - type: string 8876 - observedGeneration: 8877 - description: |- 8878 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8879 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8880 - with respect to the current state of the instance. 8881 - format: int64 8882 - minimum: 0 8883 - type: integer 8884 - reason: 8885 - description: |- 8886 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8887 - Producers of specific condition types may define expected values and meanings for this field, 8888 - and whether the values are considered a guaranteed API. 8889 - The value should be a CamelCase string. 8890 - This field may not be empty. 8891 - maxLength: 1024 8892 - minLength: 1 8893 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8894 - type: string 8895 - status: 8896 - description: status of the condition, one of True, False, Unknown. 8897 - enum: 8898 - - "True" 8899 - - "False" 8900 - - Unknown 8901 - type: string 8902 - type: 8903 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 8904 - maxLength: 316 8905 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8906 - type: string 8907 - required: 8908 - - lastTransitionTime 8909 - - message 8910 - - reason 8911 - - status 8912 - - type 8913 - type: object 8914 - type: array 8915 - inventory: 8916 - description: |- 8917 - Inventory contains the list of Kubernetes resource object references that 8918 - have been successfully applied. 8919 - properties: 8920 - entries: 8921 - description: Entries of Kubernetes resource object references. 8922 - items: 8923 - description: ResourceRef contains the information necessary to locate a resource 8924 - within a cluster. 8925 - properties: 8926 - id: 8927 - description: |- 8928 - ID is the string representation of the Kubernetes resource object's metadata, 8929 - in the format '<namespace>_<name>_<group>_<kind>'. 8930 - type: string 8931 - v: 8932 - description: Version is the API version of the Kubernetes resource object's 8933 - kind. 8934 - type: string 8935 - required: 8936 - - id 8937 - - v 8938 - type: object 8939 - type: array 8940 - required: 8941 - - entries 8942 - type: object 8943 - lastAppliedRevision: 8944 - description: |- 8945 - The last successfully applied revision. 8946 - Equals the Revision of the applied Artifact from the referenced Source. 8947 - type: string 8948 - lastAttemptedRevision: 8949 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 8950 - type: string 8951 - lastHandledReconcileAt: 8952 - description: |- 8953 - LastHandledReconcileAt holds the value of the most recent 8954 - reconcile request value, so a change of the annotation value 8955 - can be detected. 8956 - type: string 8957 - observedGeneration: 8958 - description: ObservedGeneration is the last reconciled generation. 8959 - format: int64 8960 - type: integer 8961 - type: object 8962 + name: 8963 + description: Name of the referent. 8964 + type: string 8965 + required: 8966 + - name 8967 type: object 8968 - served: true 8969 - storage: true 8970 - subresources: 8971 - status: {} 8972 - - additionalPrinterColumns: 8973 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 8974 - name: Ready 8975 - type: string 8976 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 8977 - name: Status 8978 - type: string 8979 - - jsonPath: .metadata.creationTimestamp 8980 - name: Age 8981 - type: date 8982 - deprecated: true 8983 - deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1 8984 - name: v1beta1 8985 - schema: 8986 - openAPIV3Schema: 8987 - description: Kustomization is the Schema for the kustomizations API. 8988 + suspend: 8989 + description: |- 8990 + Suspend tells the controller to suspend the reconciliation of this 8991 + HelmRepository. 8992 + type: boolean 8993 + timeout: 8994 + description: |- 8995 + Timeout is used for the index fetch operation for an HTTPS helm repository, 8996 + and for remote OCI Repository operations like pulling for an OCI helm 8997 + chart by the associated HelmChart. 8998 + Its default value is 60s. 8999 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 9000 + type: string 9001 + type: 9002 + description: |- 9003 + Type of the HelmRepository. 9004 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 9005 + enum: 9006 + - default 9007 + - oci 9008 + type: string 9009 + url: 9010 + description: |- 9011 + URL of the Helm repository, a valid URL contains at least a protocol and 9012 + host. 9013 + pattern: ^(http|https|oci)://.*$ 9014 + type: string 9015 + required: 9016 + - url 9017 + type: object 9018 + status: 9019 + default: 9020 + observedGeneration: -1 9021 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 9022 + properties: 9023 + artifact: 9024 + description: Artifact represents the last successful HelmRepository 9025 + reconciliation. 9026 properties: 9027 - apiVersion: 9028 - description: |- 9029 - APIVersion defines the versioned schema of this representation of an object. 9030 - Servers should convert recognized schemas to the latest internal value, and 9031 - may reject unrecognized values. 9032 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9033 - type: string 9034 - kind: 9035 - description: |- 9036 - Kind is a string value representing the REST resource this object represents. 9037 - Servers may infer this from the endpoint the client submits requests to. 9038 - Cannot be updated. 9039 - In CamelCase. 9040 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9041 - type: string 9042 - metadata: 9043 - type: object 9044 - spec: 9045 - description: KustomizationSpec defines the desired state of a kustomization. 9046 - properties: 9047 - decryption: 9048 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9049 - properties: 9050 - provider: 9051 - description: Provider is the name of the decryption engine. 9052 - enum: 9053 - - sops 9054 - type: string 9055 - secretRef: 9056 - description: The secret name containing the private OpenPGP keys used for decryption. 9057 - properties: 9058 - name: 9059 - description: Name of the referent. 9060 - type: string 9061 - required: 9062 - - name 9063 - type: object 9064 - required: 9065 - - provider 9066 - type: object 9067 - dependsOn: 9068 - description: |- 9069 - DependsOn may contain a meta.NamespacedObjectReference slice 9070 - with references to Kustomization resources that must be ready before this 9071 - Kustomization can be reconciled. 9072 - items: 9073 - description: |- 9074 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 9075 - namespace. 9076 - properties: 9077 - name: 9078 - description: Name of the referent. 9079 - type: string 9080 - namespace: 9081 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9082 - type: string 9083 - required: 9084 - - name 9085 - type: object 9086 - type: array 9087 - force: 9088 - default: false 9089 - description: |- 9090 - Force instructs the controller to recreate resources 9091 - when patching fails due to an immutable field change. 9092 - type: boolean 9093 - healthChecks: 9094 - description: A list of resources to be included in the health assessment. 9095 - items: 9096 - description: |- 9097 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9098 - in any namespace. 9099 - properties: 9100 - apiVersion: 9101 - description: API version of the referent, if not specified the Kubernetes preferred 9102 - version will be used. 9103 - type: string 9104 - kind: 9105 - description: Kind of the referent. 9106 - type: string 9107 - name: 9108 - description: Name of the referent. 9109 - type: string 9110 - namespace: 9111 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9112 - type: string 9113 - required: 9114 - - kind 9115 - - name 9116 - type: object 9117 - type: array 9118 - images: 9119 - description: |- 9120 - Images is a list of (image name, new name, new tag or digest) 9121 - for changing image names, tags or digests. This can also be achieved with a 9122 - patch, but this operator is simpler to specify. 9123 - items: 9124 - description: Image contains an image name, a new name, a new tag or digest, which will 9125 - replace the original name and tag. 9126 - properties: 9127 - digest: 9128 - description: |- 9129 - Digest is the value used to replace the original image tag. 9130 - If digest is present NewTag value is ignored. 9131 - type: string 9132 - name: 9133 - description: Name is a tag-less image name. 9134 - type: string 9135 - newName: 9136 - description: NewName is the value used to replace the original name. 9137 - type: string 9138 - newTag: 9139 - description: NewTag is the value used to replace the original tag. 9140 - type: string 9141 - required: 9142 - - name 9143 - type: object 9144 - type: array 9145 - interval: 9146 - description: The interval at which to reconcile the Kustomization. 9147 - type: string 9148 - kubeConfig: 9149 - description: |- 9150 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9151 - When specified, KubeConfig takes precedence over ServiceAccountName. 9152 - properties: 9153 - secretRef: 9154 - description: |- 9155 - SecretRef holds the name to a secret that contains a 'value' key with 9156 - the kubeconfig file as the value. It must be in the same namespace as 9157 - the Kustomization. 9158 - It is recommended that the kubeconfig is self-contained, and the secret 9159 - is regularly updated if credentials such as a cloud-access-token expire. 9160 - Cloud specific `cmd-path` auth helpers will not function without adding 9161 - binaries and credentials to the Pod that is responsible for reconciling 9162 - the Kustomization. 9163 - properties: 9164 - name: 9165 - description: Name of the referent. 9166 - type: string 9167 - required: 9168 - - name 9169 - type: object 9170 - required: 9171 - - secretRef 9172 - type: object 9173 - patches: 9174 - description: |- 9175 - Strategic merge and JSON patches, defined as inline YAML objects, 9176 - capable of targeting objects based on kind, label and annotation selectors. 9177 - items: 9178 - description: |- 9179 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9180 - be applied to. 9181 - properties: 9182 - patch: 9183 - description: |- 9184 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9185 - an array of operation objects. 9186 - type: string 9187 - target: 9188 - description: Target points to the resources that the patch document should be 9189 - applied to. 9190 - properties: 9191 - annotationSelector: 9192 - description: |- 9193 - AnnotationSelector is a string that follows the label selection expression 9194 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9195 - It matches with the resource annotations. 9196 - type: string 9197 - group: 9198 - description: |- 9199 - Group is the API group to select resources from. 9200 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9201 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9202 - type: string 9203 - kind: 9204 - description: |- 9205 - Kind of the API Group to select resources from. 9206 - Together with Group and Version it is capable of unambiguously 9207 - identifying and/or selecting resources. 9208 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9209 - type: string 9210 - labelSelector: 9211 - description: |- 9212 - LabelSelector is a string that follows the label selection expression 9213 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9214 - It matches with the resource labels. 9215 - type: string 9216 - name: 9217 - description: Name to match resources with. 9218 - type: string 9219 - namespace: 9220 - description: Namespace to select resources from. 9221 - type: string 9222 - version: 9223 - description: |- 9224 - Version of the API Group to select resources from. 9225 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9226 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9227 - type: string 9228 - type: object 9229 - required: 9230 - - patch 9231 - type: object 9232 - type: array 9233 - patchesJson6902: 9234 - description: JSON 6902 patches, defined as inline YAML objects. 9235 - items: 9236 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 9237 - applied to. 9238 - properties: 9239 - patch: 9240 - description: Patch contains the JSON6902 patch document with an array of operation 9241 - objects. 9242 - items: 9243 - description: |- 9244 - JSON6902 is a JSON6902 operation object. 9245 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9246 - properties: 9247 - from: 9248 - description: |- 9249 - From contains a JSON-pointer value that references a location within the target document where the operation is 9250 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 9251 - type: string 9252 - op: 9253 - description: |- 9254 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 9255 - "test". 9256 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9257 - enum: 9258 - - test 9259 - - remove 9260 - - add 9261 - - replace 9262 - - move 9263 - - copy 9264 - type: string 9265 - path: 9266 - description: |- 9267 - Path contains the JSON-pointer value that references a location within the target document where the operation 9268 - is performed. The meaning of the value depends on the value of Op. 9269 - type: string 9270 - value: 9271 - description: |- 9272 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 9273 - account by all operations. 9274 - x-kubernetes-preserve-unknown-fields: true 9275 - required: 9276 - - op 9277 - - path 9278 - type: object 9279 - type: array 9280 - target: 9281 - description: Target points to the resources that the patch document should be 9282 - applied to. 9283 - properties: 9284 - annotationSelector: 9285 - description: |- 9286 - AnnotationSelector is a string that follows the label selection expression 9287 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9288 - It matches with the resource annotations. 9289 - type: string 9290 - group: 9291 - description: |- 9292 - Group is the API group to select resources from. 9293 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9294 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9295 - type: string 9296 - kind: 9297 - description: |- 9298 - Kind of the API Group to select resources from. 9299 - Together with Group and Version it is capable of unambiguously 9300 - identifying and/or selecting resources. 9301 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9302 - type: string 9303 - labelSelector: 9304 - description: |- 9305 - LabelSelector is a string that follows the label selection expression 9306 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9307 - It matches with the resource labels. 9308 - type: string 9309 - name: 9310 - description: Name to match resources with. 9311 - type: string 9312 - namespace: 9313 - description: Namespace to select resources from. 9314 - type: string 9315 - version: 9316 - description: |- 9317 - Version of the API Group to select resources from. 9318 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9319 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9320 - type: string 9321 - type: object 9322 - required: 9323 - - patch 9324 - - target 9325 - type: object 9326 - type: array 9327 - patchesStrategicMerge: 9328 - description: Strategic merge patches, defined as inline YAML objects. 9329 - items: 9330 - x-kubernetes-preserve-unknown-fields: true 9331 - type: array 9332 - path: 9333 - description: |- 9334 - Path to the directory containing the kustomization.yaml file, or the 9335 - set of plain YAMLs a kustomization.yaml should be generated for. 9336 - Defaults to 'None', which translates to the root path of the SourceRef. 9337 - type: string 9338 - postBuild: 9339 - description: |- 9340 - PostBuild describes which actions to perform on the YAML manifest 9341 - generated by building the kustomize overlay. 9342 - properties: 9343 - substitute: 9344 - additionalProperties: 9345 - type: string 9346 - description: |- 9347 - Substitute holds a map of key/value pairs. 9348 - The variables defined in your YAML manifests 9349 - that match any of the keys defined in the map 9350 - will be substituted with the set value. 9351 - Includes support for bash string replacement functions 9352 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 9353 - type: object 9354 - substituteFrom: 9355 - description: |- 9356 - SubstituteFrom holds references to ConfigMaps and Secrets containing 9357 - the variables and their values to be substituted in the YAML manifests. 9358 - The ConfigMap and the Secret data keys represent the var names and they 9359 - must match the vars declared in the manifests for the substitution to happen. 9360 - items: 9361 - description: |- 9362 - SubstituteReference contains a reference to a resource containing 9363 - the variables name and value. 9364 - properties: 9365 - kind: 9366 - description: Kind of the values referent, valid values are ('Secret', 9367 - 'ConfigMap'). 9368 - enum: 9369 - - Secret 9370 - - ConfigMap 9371 - type: string 9372 - name: 9373 - description: |- 9374 - Name of the values referent. Should reside in the same namespace as the 9375 - referring resource. 9376 - maxLength: 253 9377 - minLength: 1 9378 - type: string 9379 - required: 9380 - - kind 9381 - - name 9382 - type: object 9383 - type: array 9384 - type: object 9385 - prune: 9386 - description: Prune enables garbage collection. 9387 - type: boolean 9388 - retryInterval: 9389 - description: |- 9390 - The interval at which to retry a previously failed reconciliation. 9391 - When not specified, the controller uses the KustomizationSpec.Interval 9392 - value to retry failures. 9393 - type: string 9394 - serviceAccountName: 9395 - description: |- 9396 - The name of the Kubernetes service account to impersonate 9397 - when reconciling this Kustomization. 9398 - type: string 9399 - sourceRef: 9400 - description: Reference of the source where the kustomization file is. 9401 - properties: 9402 - apiVersion: 9403 - description: API version of the referent 9404 - type: string 9405 - kind: 9406 - description: Kind of the referent 9407 - enum: 9408 - - GitRepository 9409 - - Bucket 9410 - type: string 9411 - name: 9412 - description: Name of the referent 9413 - type: string 9414 - namespace: 9415 - description: Namespace of the referent, defaults to the Kustomization namespace 9416 - type: string 9417 - required: 9418 - - kind 9419 - - name 9420 - type: object 9421 - suspend: 9422 - description: |- 9423 - This flag tells the controller to suspend subsequent kustomize executions, 9424 - it does not apply to already started executions. Defaults to false. 9425 - type: boolean 9426 - targetNamespace: 9427 - description: |- 9428 - TargetNamespace sets or overrides the namespace in the 9429 - kustomization.yaml file. 9430 - maxLength: 63 9431 - minLength: 1 9432 - type: string 9433 - timeout: 9434 - description: |- 9435 - Timeout for validation, apply and health checking operations. 9436 - Defaults to 'Interval' duration. 9437 - type: string 9438 - validation: 9439 - description: |- 9440 - Validate the Kubernetes objects before applying them on the cluster. 9441 - The validation strategy can be 'client' (local dry-run), 'server' 9442 - (APIServer dry-run) or 'none'. 9443 - When 'Force' is 'true', validation will fallback to 'client' if set to 9444 - 'server' because server-side validation is not supported in this scenario. 9445 - enum: 9446 - - none 9447 - - client 9448 - - server 9449 - type: string 9450 - required: 9451 - - interval 9452 - - prune 9453 - - sourceRef 9454 - type: object 9455 + digest: 9456 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 9457 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 9458 + type: string 9459 + lastUpdateTime: 9460 + description: |- 9461 + LastUpdateTime is the timestamp corresponding to the last update of the 9462 + Artifact. 9463 + format: date-time 9464 + type: string 9465 + metadata: 9466 + additionalProperties: 9467 + type: string 9468 + description: Metadata holds upstream information such as OCI annotations. 9469 + type: object 9470 + path: 9471 + description: |- 9472 + Path is the relative file path of the Artifact. It can be used to locate 9473 + the file in the root of the Artifact storage on the local file system of 9474 + the controller managing the Source. 9475 + type: string 9476 + revision: 9477 + description: |- 9478 + Revision is a human-readable identifier traceable in the origin source 9479 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 9480 + type: string 9481 + size: 9482 + description: Size is the number of bytes in the file. 9483 + format: int64 9484 + type: integer 9485 + url: 9486 + description: |- 9487 + URL is the HTTP address of the Artifact as exposed by the controller 9488 + managing the Source. It can be used to retrieve the Artifact for 9489 + consumption, e.g. by another controller applying the Artifact contents. 9490 + type: string 9491 + required: 9492 + - lastUpdateTime 9493 + - path 9494 + - revision 9495 + - url 9496 + type: object 9497 + conditions: 9498 + description: Conditions holds the conditions for the HelmRepository. 9499 + items: 9500 + description: Condition contains details for one aspect of the current 9501 + state of this API Resource. 9502 + properties: 9503 + lastTransitionTime: 9504 + description: |- 9505 + lastTransitionTime is the last time the condition transitioned from one status to another. 9506 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9507 + format: date-time 9508 + type: string 9509 + message: 9510 + description: |- 9511 + message is a human readable message indicating details about the transition. 9512 + This may be an empty string. 9513 + maxLength: 32768 9514 + type: string 9515 + observedGeneration: 9516 + description: |- 9517 + observedGeneration represents the .metadata.generation that the condition was set based upon. 9518 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9519 + with respect to the current state of the instance. 9520 + format: int64 9521 + minimum: 0 9522 + type: integer 9523 + reason: 9524 + description: |- 9525 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 9526 + Producers of specific condition types may define expected values and meanings for this field, 9527 + and whether the values are considered a guaranteed API. 9528 + The value should be a CamelCase string. 9529 + This field may not be empty. 9530 + maxLength: 1024 9531 + minLength: 1 9532 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9533 + type: string 9534 status: 9535 - default: 9536 - observedGeneration: -1 9537 - description: KustomizationStatus defines the observed state of a kustomization. 9538 - properties: 9539 - conditions: 9540 - items: 9541 - description: Condition contains details for one aspect of the current state of this API 9542 - Resource. 9543 - properties: 9544 - lastTransitionTime: 9545 - description: |- 9546 - lastTransitionTime is the last time the condition transitioned from one status to another. 9547 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9548 - format: date-time 9549 - type: string 9550 - message: 9551 - description: |- 9552 - message is a human readable message indicating details about the transition. 9553 - This may be an empty string. 9554 - maxLength: 32768 9555 - type: string 9556 - observedGeneration: 9557 - description: |- 9558 - observedGeneration represents the .metadata.generation that the condition was set based upon. 9559 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9560 - with respect to the current state of the instance. 9561 - format: int64 9562 - minimum: 0 9563 - type: integer 9564 - reason: 9565 - description: |- 9566 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 9567 - Producers of specific condition types may define expected values and meanings for this field, 9568 - and whether the values are considered a guaranteed API. 9569 - The value should be a CamelCase string. 9570 - This field may not be empty. 9571 - maxLength: 1024 9572 - minLength: 1 9573 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9574 - type: string 9575 - status: 9576 - description: status of the condition, one of True, False, Unknown. 9577 - enum: 9578 - - "True" 9579 - - "False" 9580 - - Unknown 9581 - type: string 9582 - type: 9583 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 9584 - maxLength: 316 9585 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9586 - type: string 9587 - required: 9588 - - lastTransitionTime 9589 - - message 9590 - - reason 9591 - - status 9592 - - type 9593 - type: object 9594 - type: array 9595 - lastAppliedRevision: 9596 - description: |- 9597 - The last successfully applied revision. 9598 - The revision format for Git sources is <branch|tag>/<commit-sha>. 9599 - type: string 9600 - lastAttemptedRevision: 9601 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 9602 - type: string 9603 - lastHandledReconcileAt: 9604 - description: |- 9605 - LastHandledReconcileAt holds the value of the most recent 9606 - reconcile request value, so a change of the annotation value 9607 - can be detected. 9608 - type: string 9609 - observedGeneration: 9610 - description: ObservedGeneration is the last reconciled generation. 9611 - format: int64 9612 - type: integer 9613 - snapshot: 9614 - description: The last successfully applied revision metadata. 9615 - properties: 9616 - checksum: 9617 - description: The manifests sha1 checksum. 9618 - type: string 9619 - entries: 9620 - description: A list of Kubernetes kinds grouped by namespace. 9621 - items: 9622 - description: |- 9623 - Snapshot holds the metadata of namespaced 9624 - Kubernetes objects 9625 - properties: 9626 - kinds: 9627 - additionalProperties: 9628 - type: string 9629 - description: The list of Kubernetes kinds. 9630 - type: object 9631 - namespace: 9632 - description: The namespace of this entry. 9633 - type: string 9634 - required: 9635 - - kinds 9636 - type: object 9637 - type: array 9638 - required: 9639 - - checksum 9640 - - entries 9641 - type: object 9642 - type: object 9643 + description: status of the condition, one of True, False, Unknown. 9644 + enum: 9645 + - "True" 9646 + - "False" 9647 + - Unknown 9648 + type: string 9649 + type: 9650 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 9651 + maxLength: 316 9652 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9653 + type: string 9654 + required: 9655 + - lastTransitionTime 9656 + - message 9657 + - reason 9658 + - status 9659 + - type 9660 + type: object 9661 + type: array 9662 + lastHandledReconcileAt: 9663 + description: |- 9664 + LastHandledReconcileAt holds the value of the most recent 9665 + reconcile request value, so a change of the annotation value 9666 + can be detected. 9667 + type: string 9668 + observedGeneration: 9669 + description: |- 9670 + ObservedGeneration is the last observed generation of the HelmRepository 9671 + object. 9672 + format: int64 9673 + type: integer 9674 + url: 9675 + description: |- 9676 + URL is the dynamic fetch link for the latest Artifact. 9677 + It is provided on a "best effort" basis, and using the precise 9678 + HelmRepositoryStatus.Artifact data is recommended. 9679 + type: string 9680 + type: object 9681 + type: object 9682 + served: true 9683 + storage: true 9684 + subresources: 9685 + status: {} 9686 + - additionalPrinterColumns: 9687 + - jsonPath: .spec.url 9688 + name: URL 9689 + type: string 9690 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 9691 + name: Ready 9692 + type: string 9693 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 9694 + name: Status 9695 + type: string 9696 + - jsonPath: .metadata.creationTimestamp 9697 + name: Age 9698 + type: date 9699 + deprecated: true 9700 + deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1 9701 + name: v1beta1 9702 + schema: 9703 + openAPIV3Schema: 9704 + description: HelmRepository is the Schema for the helmrepositories API 9705 + properties: 9706 + apiVersion: 9707 + description: |- 9708 + APIVersion defines the versioned schema of this representation of an object. 9709 + Servers should convert recognized schemas to the latest internal value, and 9710 + may reject unrecognized values. 9711 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9712 + type: string 9713 + kind: 9714 + description: |- 9715 + Kind is a string value representing the REST resource this object represents. 9716 + Servers may infer this from the endpoint the client submits requests to. 9717 + Cannot be updated. 9718 + In CamelCase. 9719 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9720 + type: string 9721 + metadata: 9722 + type: object 9723 + spec: 9724 + description: HelmRepositorySpec defines the reference to a Helm repository. 9725 + properties: 9726 + accessFrom: 9727 + description: AccessFrom defines an Access Control List for allowing 9728 + cross-namespace references to this object. 9729 + properties: 9730 + namespaceSelectors: 9731 + description: |- 9732 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 9733 + Items in this list are evaluated using a logical OR operation. 9734 + items: 9735 + description: |- 9736 + NamespaceSelector selects the namespaces to which this ACL applies. 9737 + An empty map of MatchLabels matches all namespaces in a cluster. 9738 + properties: 9739 + matchLabels: 9740 + additionalProperties: 9741 + type: string 9742 + description: |- 9743 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 9744 + map is equivalent to an element of matchExpressions, whose key field is "key", the 9745 + operator is "In", and the values array contains only "value". The requirements are ANDed. 9746 + type: object 9747 + type: object 9748 + type: array 9749 + required: 9750 + - namespaceSelectors 9751 type: object 9752 - served: true 9753 - storage: false 9754 - subresources: 9755 - status: {} 9756 - - additionalPrinterColumns: 9757 - - jsonPath: .metadata.creationTimestamp 9758 - name: Age 9759 - type: date 9760 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9761 - name: Ready 9762 - type: string 9763 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9764 - name: Status 9765 - type: string 9766 - deprecated: true 9767 - deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 9768 - name: v1beta2 9769 - schema: 9770 - openAPIV3Schema: 9771 - description: Kustomization is the Schema for the kustomizations API. 9772 + interval: 9773 + description: The interval at which to check the upstream for updates. 9774 + type: string 9775 + passCredentials: 9776 + description: |- 9777 + PassCredentials allows the credentials from the SecretRef to be passed on to 9778 + a host that does not match the host as defined in URL. 9779 + This may be required if the host of the advertised chart URLs in the index 9780 + differ from the defined URL. 9781 + Enabling this should be done with caution, as it can potentially result in 9782 + credentials getting stolen in a MITM-attack. 9783 + type: boolean 9784 + secretRef: 9785 + description: |- 9786 + The name of the secret containing authentication credentials for the Helm 9787 + repository. 9788 + For HTTP/S basic auth the secret must contain username and 9789 + password fields. 9790 + For TLS the secret must contain a certFile and keyFile, and/or 9791 + caFile fields. 9792 properties: 9793 - apiVersion: 9794 - description: |- 9795 - APIVersion defines the versioned schema of this representation of an object. 9796 - Servers should convert recognized schemas to the latest internal value, and 9797 - may reject unrecognized values. 9798 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9799 - type: string 9800 - kind: 9801 - description: |- 9802 - Kind is a string value representing the REST resource this object represents. 9803 - Servers may infer this from the endpoint the client submits requests to. 9804 - Cannot be updated. 9805 - In CamelCase. 9806 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9807 + name: 9808 + description: Name of the referent. 9809 + type: string 9810 + required: 9811 + - name 9812 + type: object 9813 + suspend: 9814 + description: This flag tells the controller to suspend the reconciliation 9815 + of this source. 9816 + type: boolean 9817 + timeout: 9818 + default: 60s 9819 + description: The timeout of index downloading, defaults to 60s. 9820 + type: string 9821 + url: 9822 + description: The Helm repository URL, a valid URL contains at least 9823 + a protocol and host. 9824 + type: string 9825 + required: 9826 + - interval 9827 + - url 9828 + type: object 9829 + status: 9830 + default: 9831 + observedGeneration: -1 9832 + description: HelmRepositoryStatus defines the observed state of the HelmRepository. 9833 + properties: 9834 + artifact: 9835 + description: Artifact represents the output of the last successful 9836 + repository sync. 9837 + properties: 9838 + checksum: 9839 + description: Checksum is the SHA256 checksum of the artifact. 9840 + type: string 9841 + lastUpdateTime: 9842 + description: |- 9843 + LastUpdateTime is the timestamp corresponding to the last update of this 9844 + artifact. 9845 + format: date-time 9846 + type: string 9847 + path: 9848 + description: Path is the relative file path of this artifact. 9849 + type: string 9850 + revision: 9851 + description: |- 9852 + Revision is a human readable identifier traceable in the origin source 9853 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 9854 + chart version, etc. 9855 + type: string 9856 + url: 9857 + description: URL is the HTTP address of this artifact. 9858 + type: string 9859 + required: 9860 + - lastUpdateTime 9861 + - path 9862 + - url 9863 + type: object 9864 + conditions: 9865 + description: Conditions holds the conditions for the HelmRepository. 9866 + items: 9867 + description: Condition contains details for one aspect of the current 9868 + state of this API Resource. 9869 + properties: 9870 + lastTransitionTime: 9871 + description: |- 9872 + lastTransitionTime is the last time the condition transitioned from one status to another. 9873 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9874 + format: date-time 9875 + type: string 9876 + message: 9877 + description: |- 9878 + message is a human readable message indicating details about the transition. 9879 + This may be an empty string. 9880 + maxLength: 32768 9881 + type: string 9882 + observedGeneration: 9883 + description: |- 9884 + observedGeneration represents the .metadata.generation that the condition was set based upon. 9885 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9886 + with respect to the current state of the instance. 9887 + format: int64 9888 + minimum: 0 9889 + type: integer 9890 + reason: 9891 + description: |- 9892 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 9893 + Producers of specific condition types may define expected values and meanings for this field, 9894 + and whether the values are considered a guaranteed API. 9895 + The value should be a CamelCase string. 9896 + This field may not be empty. 9897 + maxLength: 1024 9898 + minLength: 1 9899 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9900 + type: string 9901 + status: 9902 + description: status of the condition, one of True, False, Unknown. 9903 + enum: 9904 + - "True" 9905 + - "False" 9906 + - Unknown 9907 + type: string 9908 + type: 9909 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 9910 + maxLength: 316 9911 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9912 + type: string 9913 + required: 9914 + - lastTransitionTime 9915 + - message 9916 + - reason 9917 + - status 9918 + - type 9919 + type: object 9920 + type: array 9921 + lastHandledReconcileAt: 9922 + description: |- 9923 + LastHandledReconcileAt holds the value of the most recent 9924 + reconcile request value, so a change of the annotation value 9925 + can be detected. 9926 + type: string 9927 + observedGeneration: 9928 + description: ObservedGeneration is the last observed generation. 9929 + format: int64 9930 + type: integer 9931 + url: 9932 + description: URL is the download link for the last index fetched. 9933 + type: string 9934 + type: object 9935 + type: object 9936 + served: true 9937 + storage: false 9938 + subresources: 9939 + status: {} 9940 + - additionalPrinterColumns: 9941 + - jsonPath: .spec.url 9942 + name: URL 9943 + type: string 9944 + - jsonPath: .metadata.creationTimestamp 9945 + name: Age 9946 + type: date 9947 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 9948 + name: Ready 9949 + type: string 9950 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 9951 + name: Status 9952 + type: string 9953 + deprecated: true 9954 + deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 9955 + name: v1beta2 9956 + schema: 9957 + openAPIV3Schema: 9958 + description: HelmRepository is the Schema for the helmrepositories API. 9959 + properties: 9960 + apiVersion: 9961 + description: |- 9962 + APIVersion defines the versioned schema of this representation of an object. 9963 + Servers should convert recognized schemas to the latest internal value, and 9964 + may reject unrecognized values. 9965 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9966 + type: string 9967 + kind: 9968 + description: |- 9969 + Kind is a string value representing the REST resource this object represents. 9970 + Servers may infer this from the endpoint the client submits requests to. 9971 + Cannot be updated. 9972 + In CamelCase. 9973 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9974 + type: string 9975 + metadata: 9976 + type: object 9977 + spec: 9978 + description: |- 9979 + HelmRepositorySpec specifies the required configuration to produce an 9980 + Artifact for a Helm repository index YAML. 9981 + properties: 9982 + accessFrom: 9983 + description: |- 9984 + AccessFrom specifies an Access Control List for allowing cross-namespace 9985 + references to this object. 9986 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 9987 + properties: 9988 + namespaceSelectors: 9989 + description: |- 9990 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 9991 + Items in this list are evaluated using a logical OR operation. 9992 + items: 9993 + description: |- 9994 + NamespaceSelector selects the namespaces to which this ACL applies. 9995 + An empty map of MatchLabels matches all namespaces in a cluster. 9996 + properties: 9997 + matchLabels: 9998 + additionalProperties: 9999 + type: string 10000 + description: |- 10001 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 10002 + map is equivalent to an element of matchExpressions, whose key field is "key", the 10003 + operator is "In", and the values array contains only "value". The requirements are ANDed. 10004 + type: object 10005 + type: object 10006 + type: array 10007 + required: 10008 + - namespaceSelectors 10009 + type: object 10010 + certSecretRef: 10011 + description: |- 10012 + CertSecretRef can be given the name of a Secret containing 10013 + either or both of 10014 + 10015 + - a PEM-encoded client certificate (`tls.crt`) and private 10016 + key (`tls.key`); 10017 + - a PEM-encoded CA certificate (`ca.crt`) 10018 + 10019 + and whichever are supplied, will be used for connecting to the 10020 + registry. The client cert and key are useful if you are 10021 + authenticating with a certificate; the CA cert is useful if 10022 + you are using a self-signed server certificate. The Secret must 10023 + be of type `Opaque` or `kubernetes.io/tls`. 10024 + 10025 + It takes precedence over the values specified in the Secret referred 10026 + to by `.spec.secretRef`. 10027 + properties: 10028 + name: 10029 + description: Name of the referent. 10030 + type: string 10031 + required: 10032 + - name 10033 + type: object 10034 + insecure: 10035 + description: |- 10036 + Insecure allows connecting to a non-TLS HTTP container registry. 10037 + This field is only taken into account if the .spec.type field is set to 'oci'. 10038 + type: boolean 10039 + interval: 10040 + description: |- 10041 + Interval at which the HelmRepository URL is checked for updates. 10042 + This interval is approximate and may be subject to jitter to ensure 10043 + efficient use of resources. 10044 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10045 + type: string 10046 + passCredentials: 10047 + description: |- 10048 + PassCredentials allows the credentials from the SecretRef to be passed 10049 + on to a host that does not match the host as defined in URL. 10050 + This may be required if the host of the advertised chart URLs in the 10051 + index differ from the defined URL. 10052 + Enabling this should be done with caution, as it can potentially result 10053 + in credentials getting stolen in a MITM-attack. 10054 + type: boolean 10055 + provider: 10056 + default: generic 10057 + description: |- 10058 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 10059 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 10060 + When not specified, defaults to 'generic'. 10061 + enum: 10062 + - generic 10063 + - aws 10064 + - azure 10065 + - gcp 10066 + type: string 10067 + secretRef: 10068 + description: |- 10069 + SecretRef specifies the Secret containing authentication credentials 10070 + for the HelmRepository. 10071 + For HTTP/S basic auth the secret must contain 'username' and 'password' 10072 + fields. 10073 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 10074 + keys is deprecated. Please use `.spec.certSecretRef` instead. 10075 + properties: 10076 + name: 10077 + description: Name of the referent. 10078 + type: string 10079 + required: 10080 + - name 10081 + type: object 10082 + suspend: 10083 + description: |- 10084 + Suspend tells the controller to suspend the reconciliation of this 10085 + HelmRepository. 10086 + type: boolean 10087 + timeout: 10088 + description: |- 10089 + Timeout is used for the index fetch operation for an HTTPS helm repository, 10090 + and for remote OCI Repository operations like pulling for an OCI helm 10091 + chart by the associated HelmChart. 10092 + Its default value is 60s. 10093 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 10094 + type: string 10095 + type: 10096 + description: |- 10097 + Type of the HelmRepository. 10098 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 10099 + enum: 10100 + - default 10101 + - oci 10102 + type: string 10103 + url: 10104 + description: |- 10105 + URL of the Helm repository, a valid URL contains at least a protocol and 10106 + host. 10107 + pattern: ^(http|https|oci)://.*$ 10108 + type: string 10109 + required: 10110 + - url 10111 + type: object 10112 + status: 10113 + default: 10114 + observedGeneration: -1 10115 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 10116 + properties: 10117 + artifact: 10118 + description: Artifact represents the last successful HelmRepository 10119 + reconciliation. 10120 + properties: 10121 + digest: 10122 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 10123 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 10124 + type: string 10125 + lastUpdateTime: 10126 + description: |- 10127 + LastUpdateTime is the timestamp corresponding to the last update of the 10128 + Artifact. 10129 + format: date-time 10130 + type: string 10131 + metadata: 10132 + additionalProperties: 10133 + type: string 10134 + description: Metadata holds upstream information such as OCI annotations. 10135 + type: object 10136 + path: 10137 + description: |- 10138 + Path is the relative file path of the Artifact. It can be used to locate 10139 + the file in the root of the Artifact storage on the local file system of 10140 + the controller managing the Source. 10141 + type: string 10142 + revision: 10143 + description: |- 10144 + Revision is a human-readable identifier traceable in the origin source 10145 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 10146 + type: string 10147 + size: 10148 + description: Size is the number of bytes in the file. 10149 + format: int64 10150 + type: integer 10151 + url: 10152 + description: |- 10153 + URL is the HTTP address of the Artifact as exposed by the controller 10154 + managing the Source. It can be used to retrieve the Artifact for 10155 + consumption, e.g. by another controller applying the Artifact contents. 10156 + type: string 10157 + required: 10158 + - lastUpdateTime 10159 + - path 10160 + - revision 10161 + - url 10162 + type: object 10163 + conditions: 10164 + description: Conditions holds the conditions for the HelmRepository. 10165 + items: 10166 + description: Condition contains details for one aspect of the current 10167 + state of this API Resource. 10168 + properties: 10169 + lastTransitionTime: 10170 + description: |- 10171 + lastTransitionTime is the last time the condition transitioned from one status to another. 10172 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 10173 + format: date-time 10174 + type: string 10175 + message: 10176 + description: |- 10177 + message is a human readable message indicating details about the transition. 10178 + This may be an empty string. 10179 + maxLength: 32768 10180 + type: string 10181 + observedGeneration: 10182 + description: |- 10183 + observedGeneration represents the .metadata.generation that the condition was set based upon. 10184 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10185 + with respect to the current state of the instance. 10186 + format: int64 10187 + minimum: 0 10188 + type: integer 10189 + reason: 10190 + description: |- 10191 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 10192 + Producers of specific condition types may define expected values and meanings for this field, 10193 + and whether the values are considered a guaranteed API. 10194 + The value should be a CamelCase string. 10195 + This field may not be empty. 10196 + maxLength: 1024 10197 + minLength: 1 10198 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10199 + type: string 10200 + status: 10201 + description: status of the condition, one of True, False, Unknown. 10202 + enum: 10203 + - "True" 10204 + - "False" 10205 + - Unknown 10206 + type: string 10207 + type: 10208 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 10209 + maxLength: 316 10210 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10211 + type: string 10212 + required: 10213 + - lastTransitionTime 10214 + - message 10215 + - reason 10216 + - status 10217 + - type 10218 + type: object 10219 + type: array 10220 + lastHandledReconcileAt: 10221 + description: |- 10222 + LastHandledReconcileAt holds the value of the most recent 10223 + reconcile request value, so a change of the annotation value 10224 + can be detected. 10225 + type: string 10226 + observedGeneration: 10227 + description: |- 10228 + ObservedGeneration is the last observed generation of the HelmRepository 10229 + object. 10230 + format: int64 10231 + type: integer 10232 + url: 10233 + description: |- 10234 + URL is the dynamic fetch link for the latest Artifact. 10235 + It is provided on a "best effort" basis, and using the precise 10236 + HelmRepositoryStatus.Artifact data is recommended. 10237 + type: string 10238 + type: object 10239 + type: object 10240 + served: true 10241 + storage: false 10242 + subresources: 10243 + status: {} 10244 +--- 10245 +apiVersion: apiextensions.k8s.io/v1 10246 +kind: CustomResourceDefinition 10247 +metadata: 10248 + annotations: 10249 + controller-gen.kubebuilder.io/version: v0.16.1 10250 + labels: 10251 + app.kubernetes.io/component: source-controller 10252 + app.kubernetes.io/instance: flux-system 10253 + app.kubernetes.io/part-of: flux 10254 + app.kubernetes.io/version: v2.5.1 10255 + name: ocirepositories.source.toolkit.fluxcd.io 10256 +spec: 10257 + group: source.toolkit.fluxcd.io 10258 + names: 10259 + kind: OCIRepository 10260 + listKind: OCIRepositoryList 10261 + plural: ocirepositories 10262 + shortNames: 10263 + - ocirepo 10264 + singular: ocirepository 10265 + scope: Namespaced 10266 + versions: 10267 + - additionalPrinterColumns: 10268 + - jsonPath: .spec.url 10269 + name: URL 10270 + type: string 10271 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 10272 + name: Ready 10273 + type: string 10274 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 10275 + name: Status 10276 + type: string 10277 + - jsonPath: .metadata.creationTimestamp 10278 + name: Age 10279 + type: date 10280 + name: v1beta2 10281 + schema: 10282 + openAPIV3Schema: 10283 + description: OCIRepository is the Schema for the ocirepositories API 10284 + properties: 10285 + apiVersion: 10286 + description: |- 10287 + APIVersion defines the versioned schema of this representation of an object. 10288 + Servers should convert recognized schemas to the latest internal value, and 10289 + may reject unrecognized values. 10290 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10291 + type: string 10292 + kind: 10293 + description: |- 10294 + Kind is a string value representing the REST resource this object represents. 10295 + Servers may infer this from the endpoint the client submits requests to. 10296 + Cannot be updated. 10297 + In CamelCase. 10298 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10299 + type: string 10300 + metadata: 10301 + type: object 10302 + spec: 10303 + description: OCIRepositorySpec defines the desired state of OCIRepository 10304 + properties: 10305 + certSecretRef: 10306 + description: |- 10307 + CertSecretRef can be given the name of a Secret containing 10308 + either or both of 10309 + 10310 + - a PEM-encoded client certificate (`tls.crt`) and private 10311 + key (`tls.key`); 10312 + - a PEM-encoded CA certificate (`ca.crt`) 10313 + 10314 + and whichever are supplied, will be used for connecting to the 10315 + registry. The client cert and key are useful if you are 10316 + authenticating with a certificate; the CA cert is useful if 10317 + you are using a self-signed server certificate. The Secret must 10318 + be of type `Opaque` or `kubernetes.io/tls`. 10319 + 10320 + Note: Support for the `caFile`, `certFile` and `keyFile` keys have 10321 + been deprecated. 10322 + properties: 10323 + name: 10324 + description: Name of the referent. 10325 + type: string 10326 + required: 10327 + - name 10328 + type: object 10329 + ignore: 10330 + description: |- 10331 + Ignore overrides the set of excluded patterns in the .sourceignore format 10332 + (which is the same as .gitignore). If not provided, a default will be used, 10333 + consult the documentation for your version to find out what those are. 10334 + type: string 10335 + insecure: 10336 + description: Insecure allows connecting to a non-TLS HTTP container 10337 + registry. 10338 + type: boolean 10339 + interval: 10340 + description: |- 10341 + Interval at which the OCIRepository URL is checked for updates. 10342 + This interval is approximate and may be subject to jitter to ensure 10343 + efficient use of resources. 10344 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10345 + type: string 10346 + layerSelector: 10347 + description: |- 10348 + LayerSelector specifies which layer should be extracted from the OCI artifact. 10349 + When not specified, the first layer found in the artifact is selected. 10350 + properties: 10351 + mediaType: 10352 + description: |- 10353 + MediaType specifies the OCI media type of the layer 10354 + which should be extracted from the OCI Artifact. The 10355 + first layer matching this type is selected. 10356 + type: string 10357 + operation: 10358 + description: |- 10359 + Operation specifies how the selected layer should be processed. 10360 + By default, the layer compressed content is extracted to storage. 10361 + When the operation is set to 'copy', the layer compressed content 10362 + is persisted to storage as it is. 10363 + enum: 10364 + - extract 10365 + - copy 10366 + type: string 10367 + type: object 10368 + provider: 10369 + default: generic 10370 + description: |- 10371 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 10372 + When not specified, defaults to 'generic'. 10373 + enum: 10374 + - generic 10375 + - aws 10376 + - azure 10377 + - gcp 10378 + type: string 10379 + proxySecretRef: 10380 + description: |- 10381 + ProxySecretRef specifies the Secret containing the proxy configuration 10382 + to use while communicating with the container registry. 10383 + properties: 10384 + name: 10385 + description: Name of the referent. 10386 + type: string 10387 + required: 10388 + - name 10389 + type: object 10390 + ref: 10391 + description: |- 10392 + The OCI reference to pull and monitor for changes, 10393 + defaults to the latest tag. 10394 + properties: 10395 + digest: 10396 + description: |- 10397 + Digest is the image digest to pull, takes precedence over SemVer. 10398 + The value should be in the format 'sha256:<HASH>'. 10399 + type: string 10400 + semver: 10401 + description: |- 10402 + SemVer is the range of tags to pull selecting the latest within 10403 + the range, takes precedence over Tag. 10404 + type: string 10405 + semverFilter: 10406 + description: SemverFilter is a regex pattern to filter the tags 10407 + within the SemVer range. 10408 + type: string 10409 + tag: 10410 + description: Tag is the image tag to pull, defaults to latest. 10411 + type: string 10412 + type: object 10413 + secretRef: 10414 + description: |- 10415 + SecretRef contains the secret name containing the registry login 10416 + credentials to resolve image metadata. 10417 + The secret must be of type kubernetes.io/dockerconfigjson. 10418 + properties: 10419 + name: 10420 + description: Name of the referent. 10421 + type: string 10422 + required: 10423 + - name 10424 + type: object 10425 + serviceAccountName: 10426 + description: |- 10427 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 10428 + the image pull if the service account has attached pull secrets. For more information: 10429 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 10430 + type: string 10431 + suspend: 10432 + description: This flag tells the controller to suspend the reconciliation 10433 + of this source. 10434 + type: boolean 10435 + timeout: 10436 + default: 60s 10437 + description: The timeout for remote OCI Repository operations like 10438 + pulling, defaults to 60s. 10439 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 10440 + type: string 10441 + url: 10442 + description: |- 10443 + URL is a reference to an OCI artifact repository hosted 10444 + on a remote container registry. 10445 + pattern: ^oci://.*$ 10446 + type: string 10447 + verify: 10448 + description: |- 10449 + Verify contains the secret name containing the trusted public keys 10450 + used to verify the signature and specifies which provider to use to check 10451 + whether OCI image is authentic. 10452 + properties: 10453 + matchOIDCIdentity: 10454 + description: |- 10455 + MatchOIDCIdentity specifies the identity matching criteria to use 10456 + while verifying an OCI artifact which was signed using Cosign keyless 10457 + signing. The artifact's identity is deemed to be verified if any of the 10458 + specified matchers match against the identity. 10459 + items: 10460 + description: |- 10461 + OIDCIdentityMatch specifies options for verifying the certificate identity, 10462 + i.e. the issuer and the subject of the certificate. 10463 + properties: 10464 + issuer: 10465 + description: |- 10466 + Issuer specifies the regex pattern to match against to verify 10467 + the OIDC issuer in the Fulcio certificate. The pattern must be a 10468 + valid Go regular expression. 10469 + type: string 10470 + subject: 10471 + description: |- 10472 + Subject specifies the regex pattern to match against to verify 10473 + the identity subject in the Fulcio certificate. The pattern must 10474 + be a valid Go regular expression. 10475 + type: string 10476 + required: 10477 + - issuer 10478 + - subject 10479 + type: object 10480 + type: array 10481 + provider: 10482 + default: cosign 10483 + description: Provider specifies the technology used to sign the 10484 + OCI Artifact. 10485 + enum: 10486 + - cosign 10487 + - notation 10488 + type: string 10489 + secretRef: 10490 + description: |- 10491 + SecretRef specifies the Kubernetes Secret containing the 10492 + trusted public keys. 10493 + properties: 10494 + name: 10495 + description: Name of the referent. 10496 type: string 10497 - metadata: 10498 - type: object 10499 - spec: 10500 - description: KustomizationSpec defines the configuration to calculate the desired state from a Source 10501 - using Kustomize. 10502 - properties: 10503 - commonMetadata: 10504 - description: |- 10505 - CommonMetadata specifies the common labels and annotations that are applied to all resources. 10506 - Any existing label or annotation will be overridden if its key matches a common one. 10507 - properties: 10508 - annotations: 10509 - additionalProperties: 10510 - type: string 10511 - description: Annotations to be added to the object's metadata. 10512 - type: object 10513 - labels: 10514 - additionalProperties: 10515 - type: string 10516 - description: Labels to be added to the object's metadata. 10517 - type: object 10518 - type: object 10519 - components: 10520 - description: Components specifies relative paths to specifications of other Components. 10521 - items: 10522 - type: string 10523 - type: array 10524 - decryption: 10525 - description: Decrypt Kubernetes secrets before applying them on the cluster. 10526 - properties: 10527 - provider: 10528 - description: Provider is the name of the decryption engine. 10529 - enum: 10530 - - sops 10531 - type: string 10532 - secretRef: 10533 - description: The secret name containing the private OpenPGP keys used for decryption. 10534 - properties: 10535 - name: 10536 - description: Name of the referent. 10537 - type: string 10538 - required: 10539 - - name 10540 - type: object 10541 - required: 10542 - - provider 10543 - type: object 10544 - dependsOn: 10545 - description: |- 10546 - DependsOn may contain a meta.NamespacedObjectReference slice 10547 - with references to Kustomization resources that must be ready before this 10548 - Kustomization can be reconciled. 10549 - items: 10550 - description: |- 10551 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 10552 - namespace. 10553 - properties: 10554 - name: 10555 - description: Name of the referent. 10556 - type: string 10557 - namespace: 10558 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 10559 - type: string 10560 - required: 10561 - - name 10562 - type: object 10563 - type: array 10564 - force: 10565 - default: false 10566 - description: |- 10567 - Force instructs the controller to recreate resources 10568 - when patching fails due to an immutable field change. 10569 - type: boolean 10570 - healthChecks: 10571 - description: A list of resources to be included in the health assessment. 10572 - items: 10573 - description: |- 10574 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 10575 - in any namespace. 10576 - properties: 10577 - apiVersion: 10578 - description: API version of the referent, if not specified the Kubernetes preferred 10579 - version will be used. 10580 - type: string 10581 - kind: 10582 - description: Kind of the referent. 10583 - type: string 10584 - name: 10585 - description: Name of the referent. 10586 - type: string 10587 - namespace: 10588 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 10589 - type: string 10590 - required: 10591 - - kind 10592 - - name 10593 - type: object 10594 - type: array 10595 - images: 10596 - description: |- 10597 - Images is a list of (image name, new name, new tag or digest) 10598 - for changing image names, tags or digests. This can also be achieved with a 10599 - patch, but this operator is simpler to specify. 10600 - items: 10601 - description: Image contains an image name, a new name, a new tag or digest, which will 10602 - replace the original name and tag. 10603 - properties: 10604 - digest: 10605 - description: |- 10606 - Digest is the value used to replace the original image tag. 10607 - If digest is present NewTag value is ignored. 10608 - type: string 10609 - name: 10610 - description: Name is a tag-less image name. 10611 - type: string 10612 - newName: 10613 - description: NewName is the value used to replace the original name. 10614 - type: string 10615 - newTag: 10616 - description: NewTag is the value used to replace the original tag. 10617 - type: string 10618 - required: 10619 - - name 10620 - type: object 10621 - type: array 10622 - interval: 10623 - description: The interval at which to reconcile the Kustomization. 10624 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10625 - type: string 10626 - kubeConfig: 10627 - description: |- 10628 - The KubeConfig for reconciling the Kustomization on a remote cluster. 10629 - When used in combination with KustomizationSpec.ServiceAccountName, 10630 - forces the controller to act on behalf of that Service Account at the 10631 - target cluster. 10632 - If the --default-service-account flag is set, its value will be used as 10633 - a controller level fallback for when KustomizationSpec.ServiceAccountName 10634 - is empty. 10635 - properties: 10636 - secretRef: 10637 - description: |- 10638 - SecretRef holds the name of a secret that contains a key with 10639 - the kubeconfig file as the value. If no key is set, the key will default 10640 - to 'value'. 10641 - It is recommended that the kubeconfig is self-contained, and the secret 10642 - is regularly updated if credentials such as a cloud-access-token expire. 10643 - Cloud specific `cmd-path` auth helpers will not function without adding 10644 - binaries and credentials to the Pod that is responsible for reconciling 10645 - Kubernetes resources. 10646 - properties: 10647 - key: 10648 - description: Key in the Secret, when not specified an implementation-specific 10649 - default key is used. 10650 - type: string 10651 - name: 10652 - description: Name of the Secret. 10653 - type: string 10654 - required: 10655 - - name 10656 - type: object 10657 - required: 10658 - - secretRef 10659 - type: object 10660 - patches: 10661 - description: |- 10662 - Strategic merge and JSON patches, defined as inline YAML objects, 10663 - capable of targeting objects based on kind, label and annotation selectors. 10664 - items: 10665 - description: |- 10666 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 10667 - be applied to. 10668 - properties: 10669 - patch: 10670 - description: |- 10671 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 10672 - an array of operation objects. 10673 - type: string 10674 - target: 10675 - description: Target points to the resources that the patch document should be 10676 - applied to. 10677 - properties: 10678 - annotationSelector: 10679 - description: |- 10680 - AnnotationSelector is a string that follows the label selection expression 10681 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10682 - It matches with the resource annotations. 10683 - type: string 10684 - group: 10685 - description: |- 10686 - Group is the API group to select resources from. 10687 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10688 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10689 - type: string 10690 - kind: 10691 - description: |- 10692 - Kind of the API Group to select resources from. 10693 - Together with Group and Version it is capable of unambiguously 10694 - identifying and/or selecting resources. 10695 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10696 - type: string 10697 - labelSelector: 10698 - description: |- 10699 - LabelSelector is a string that follows the label selection expression 10700 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10701 - It matches with the resource labels. 10702 - type: string 10703 - name: 10704 - description: Name to match resources with. 10705 - type: string 10706 - namespace: 10707 - description: Namespace to select resources from. 10708 - type: string 10709 - version: 10710 - description: |- 10711 - Version of the API Group to select resources from. 10712 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10713 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10714 - type: string 10715 - type: object 10716 - required: 10717 - - patch 10718 - type: object 10719 - type: array 10720 - patchesJson6902: 10721 - description: |- 10722 - JSON 6902 patches, defined as inline YAML objects. 10723 - Deprecated: Use Patches instead. 10724 - items: 10725 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 10726 - applied to. 10727 - properties: 10728 - patch: 10729 - description: Patch contains the JSON6902 patch document with an array of operation 10730 - objects. 10731 - items: 10732 - description: |- 10733 - JSON6902 is a JSON6902 operation object. 10734 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 10735 - properties: 10736 - from: 10737 - description: |- 10738 - From contains a JSON-pointer value that references a location within the target document where the operation is 10739 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 10740 - type: string 10741 - op: 10742 - description: |- 10743 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 10744 - "test". 10745 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 10746 - enum: 10747 - - test 10748 - - remove 10749 - - add 10750 - - replace 10751 - - move 10752 - - copy 10753 - type: string 10754 - path: 10755 - description: |- 10756 - Path contains the JSON-pointer value that references a location within the target document where the operation 10757 - is performed. The meaning of the value depends on the value of Op. 10758 - type: string 10759 - value: 10760 - description: |- 10761 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 10762 - account by all operations. 10763 - x-kubernetes-preserve-unknown-fields: true 10764 - required: 10765 - - op 10766 - - path 10767 - type: object 10768 - type: array 10769 - target: 10770 - description: Target points to the resources that the patch document should be 10771 - applied to. 10772 - properties: 10773 - annotationSelector: 10774 - description: |- 10775 - AnnotationSelector is a string that follows the label selection expression 10776 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10777 - It matches with the resource annotations. 10778 - type: string 10779 - group: 10780 - description: |- 10781 - Group is the API group to select resources from. 10782 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10783 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10784 - type: string 10785 - kind: 10786 - description: |- 10787 - Kind of the API Group to select resources from. 10788 - Together with Group and Version it is capable of unambiguously 10789 - identifying and/or selecting resources. 10790 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10791 - type: string 10792 - labelSelector: 10793 - description: |- 10794 - LabelSelector is a string that follows the label selection expression 10795 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10796 - It matches with the resource labels. 10797 - type: string 10798 - name: 10799 - description: Name to match resources with. 10800 - type: string 10801 - namespace: 10802 - description: Namespace to select resources from. 10803 - type: string 10804 - version: 10805 - description: |- 10806 - Version of the API Group to select resources from. 10807 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10808 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10809 - type: string 10810 - type: object 10811 - required: 10812 - - patch 10813 - - target 10814 - type: object 10815 - type: array 10816 - patchesStrategicMerge: 10817 - description: |- 10818 - Strategic merge patches, defined as inline YAML objects. 10819 - Deprecated: Use Patches instead. 10820 - items: 10821 - x-kubernetes-preserve-unknown-fields: true 10822 - type: array 10823 - path: 10824 - description: |- 10825 - Path to the directory containing the kustomization.yaml file, or the 10826 - set of plain YAMLs a kustomization.yaml should be generated for. 10827 - Defaults to 'None', which translates to the root path of the SourceRef. 10828 - type: string 10829 - postBuild: 10830 - description: |- 10831 - PostBuild describes which actions to perform on the YAML manifest 10832 - generated by building the kustomize overlay. 10833 - properties: 10834 - substitute: 10835 - additionalProperties: 10836 - type: string 10837 - description: |- 10838 - Substitute holds a map of key/value pairs. 10839 - The variables defined in your YAML manifests 10840 - that match any of the keys defined in the map 10841 - will be substituted with the set value. 10842 - Includes support for bash string replacement functions 10843 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 10844 - type: object 10845 - substituteFrom: 10846 - description: |- 10847 - SubstituteFrom holds references to ConfigMaps and Secrets containing 10848 - the variables and their values to be substituted in the YAML manifests. 10849 - The ConfigMap and the Secret data keys represent the var names and they 10850 - must match the vars declared in the manifests for the substitution to happen. 10851 - items: 10852 - description: |- 10853 - SubstituteReference contains a reference to a resource containing 10854 - the variables name and value. 10855 - properties: 10856 - kind: 10857 - description: Kind of the values referent, valid values are ('Secret', 10858 - 'ConfigMap'). 10859 - enum: 10860 - - Secret 10861 - - ConfigMap 10862 - type: string 10863 - name: 10864 - description: |- 10865 - Name of the values referent. Should reside in the same namespace as the 10866 - referring resource. 10867 - maxLength: 253 10868 - minLength: 1 10869 - type: string 10870 - optional: 10871 - default: false 10872 - description: |- 10873 - Optional indicates whether the referenced resource must exist, or whether to 10874 - tolerate its absence. If true and the referenced resource is absent, proceed 10875 - as if the resource was present but empty, without any variables defined. 10876 - type: boolean 10877 - required: 10878 - - kind 10879 - - name 10880 - type: object 10881 - type: array 10882 - type: object 10883 - prune: 10884 - description: Prune enables garbage collection. 10885 - type: boolean 10886 - retryInterval: 10887 - description: |- 10888 - The interval at which to retry a previously failed reconciliation. 10889 - When not specified, the controller uses the KustomizationSpec.Interval 10890 - value to retry failures. 10891 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10892 - type: string 10893 - serviceAccountName: 10894 - description: |- 10895 - The name of the Kubernetes service account to impersonate 10896 - when reconciling this Kustomization. 10897 - type: string 10898 - sourceRef: 10899 - description: Reference of the source where the kustomization file is. 10900 - properties: 10901 - apiVersion: 10902 - description: API version of the referent. 10903 - type: string 10904 - kind: 10905 - description: Kind of the referent. 10906 - enum: 10907 - - OCIRepository 10908 - - GitRepository 10909 - - Bucket 10910 - type: string 10911 - name: 10912 - description: Name of the referent. 10913 - type: string 10914 - namespace: 10915 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 10916 - resource object that contains the reference. 10917 - type: string 10918 - required: 10919 - - kind 10920 - - name 10921 - type: object 10922 - suspend: 10923 - description: |- 10924 - This flag tells the controller to suspend subsequent kustomize executions, 10925 - it does not apply to already started executions. Defaults to false. 10926 - type: boolean 10927 - targetNamespace: 10928 - description: |- 10929 - TargetNamespace sets or overrides the namespace in the 10930 - kustomization.yaml file. 10931 - maxLength: 63 10932 - minLength: 1 10933 - type: string 10934 - timeout: 10935 - description: |- 10936 - Timeout for validation, apply and health checking operations. 10937 - Defaults to 'Interval' duration. 10938 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10939 - type: string 10940 - validation: 10941 - description: 'Deprecated: Not used in v1beta2.' 10942 - enum: 10943 - - none 10944 - - client 10945 - - server 10946 - type: string 10947 - wait: 10948 - description: |- 10949 - Wait instructs the controller to check the health of all the reconciled resources. 10950 - When enabled, the HealthChecks are ignored. Defaults to false. 10951 - type: boolean 10952 - required: 10953 - - interval 10954 - - prune 10955 - - sourceRef 10956 - type: object 10957 + required: 10958 + - name 10959 + type: object 10960 + required: 10961 + - provider 10962 + type: object 10963 + required: 10964 + - interval 10965 + - url 10966 + type: object 10967 + status: 10968 + default: 10969 + observedGeneration: -1 10970 + description: OCIRepositoryStatus defines the observed state of OCIRepository 10971 + properties: 10972 + artifact: 10973 + description: Artifact represents the output of the last successful 10974 + OCI Repository sync. 10975 + properties: 10976 + digest: 10977 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 10978 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 10979 + type: string 10980 + lastUpdateTime: 10981 + description: |- 10982 + LastUpdateTime is the timestamp corresponding to the last update of the 10983 + Artifact. 10984 + format: date-time 10985 + type: string 10986 + metadata: 10987 + additionalProperties: 10988 + type: string 10989 + description: Metadata holds upstream information such as OCI annotations. 10990 + type: object 10991 + path: 10992 + description: |- 10993 + Path is the relative file path of the Artifact. It can be used to locate 10994 + the file in the root of the Artifact storage on the local file system of 10995 + the controller managing the Source. 10996 + type: string 10997 + revision: 10998 + description: |- 10999 + Revision is a human-readable identifier traceable in the origin source 11000 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 11001 + type: string 11002 + size: 11003 + description: Size is the number of bytes in the file. 11004 + format: int64 11005 + type: integer 11006 + url: 11007 + description: |- 11008 + URL is the HTTP address of the Artifact as exposed by the controller 11009 + managing the Source. It can be used to retrieve the Artifact for 11010 + consumption, e.g. by another controller applying the Artifact contents. 11011 + type: string 11012 + required: 11013 + - lastUpdateTime 11014 + - path 11015 + - revision 11016 + - url 11017 + type: object 11018 + conditions: 11019 + description: Conditions holds the conditions for the OCIRepository. 11020 + items: 11021 + description: Condition contains details for one aspect of the current 11022 + state of this API Resource. 11023 + properties: 11024 + lastTransitionTime: 11025 + description: |- 11026 + lastTransitionTime is the last time the condition transitioned from one status to another. 11027 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11028 + format: date-time 11029 + type: string 11030 + message: 11031 + description: |- 11032 + message is a human readable message indicating details about the transition. 11033 + This may be an empty string. 11034 + maxLength: 32768 11035 + type: string 11036 + observedGeneration: 11037 + description: |- 11038 + observedGeneration represents the .metadata.generation that the condition was set based upon. 11039 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11040 + with respect to the current state of the instance. 11041 + format: int64 11042 + minimum: 0 11043 + type: integer 11044 + reason: 11045 + description: |- 11046 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 11047 + Producers of specific condition types may define expected values and meanings for this field, 11048 + and whether the values are considered a guaranteed API. 11049 + The value should be a CamelCase string. 11050 + This field may not be empty. 11051 + maxLength: 1024 11052 + minLength: 1 11053 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11054 + type: string 11055 status: 11056 - default: 11057 - observedGeneration: -1 11058 - description: KustomizationStatus defines the observed state of a kustomization. 11059 - properties: 11060 - conditions: 11061 - items: 11062 - description: Condition contains details for one aspect of the current state of this API 11063 - Resource. 11064 - properties: 11065 - lastTransitionTime: 11066 - description: |- 11067 - lastTransitionTime is the last time the condition transitioned from one status to another. 11068 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11069 - format: date-time 11070 - type: string 11071 - message: 11072 - description: |- 11073 - message is a human readable message indicating details about the transition. 11074 - This may be an empty string. 11075 - maxLength: 32768 11076 - type: string 11077 - observedGeneration: 11078 - description: |- 11079 - observedGeneration represents the .metadata.generation that the condition was set based upon. 11080 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11081 - with respect to the current state of the instance. 11082 - format: int64 11083 - minimum: 0 11084 - type: integer 11085 - reason: 11086 - description: |- 11087 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 11088 - Producers of specific condition types may define expected values and meanings for this field, 11089 - and whether the values are considered a guaranteed API. 11090 - The value should be a CamelCase string. 11091 - This field may not be empty. 11092 - maxLength: 1024 11093 - minLength: 1 11094 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11095 - type: string 11096 - status: 11097 - description: status of the condition, one of True, False, Unknown. 11098 - enum: 11099 - - "True" 11100 - - "False" 11101 - - Unknown 11102 - type: string 11103 - type: 11104 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 11105 - maxLength: 316 11106 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11107 - type: string 11108 - required: 11109 - - lastTransitionTime 11110 - - message 11111 - - reason 11112 - - status 11113 - - type 11114 - type: object 11115 - type: array 11116 - inventory: 11117 - description: Inventory contains the list of Kubernetes resource object references that have 11118 - been successfully applied. 11119 - properties: 11120 - entries: 11121 - description: Entries of Kubernetes resource object references. 11122 - items: 11123 - description: ResourceRef contains the information necessary to locate a resource 11124 - within a cluster. 11125 - properties: 11126 - id: 11127 - description: |- 11128 - ID is the string representation of the Kubernetes resource object's metadata, 11129 - in the format '<namespace>_<name>_<group>_<kind>'. 11130 - type: string 11131 - v: 11132 - description: Version is the API version of the Kubernetes resource object's 11133 - kind. 11134 - type: string 11135 - required: 11136 - - id 11137 - - v 11138 - type: object 11139 - type: array 11140 - required: 11141 - - entries 11142 - type: object 11143 - lastAppliedRevision: 11144 - description: |- 11145 - The last successfully applied revision. 11146 - Equals the Revision of the applied Artifact from the referenced Source. 11147 - type: string 11148 - lastAttemptedRevision: 11149 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 11150 - type: string 11151 - lastHandledReconcileAt: 11152 - description: |- 11153 - LastHandledReconcileAt holds the value of the most recent 11154 - reconcile request value, so a change of the annotation value 11155 - can be detected. 11156 - type: string 11157 - observedGeneration: 11158 - description: ObservedGeneration is the last reconciled generation. 11159 - format: int64 11160 - type: integer 11161 - type: object 11162 + description: status of the condition, one of True, False, Unknown. 11163 + enum: 11164 + - "True" 11165 + - "False" 11166 + - Unknown 11167 + type: string 11168 + type: 11169 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 11170 + maxLength: 316 11171 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11172 + type: string 11173 + required: 11174 + - lastTransitionTime 11175 + - message 11176 + - reason 11177 + - status 11178 + - type 11179 + type: object 11180 + type: array 11181 + contentConfigChecksum: 11182 + description: |- 11183 + ContentConfigChecksum is a checksum of all the configurations related to 11184 + the content of the source artifact: 11185 + - .spec.ignore 11186 + - .spec.layerSelector 11187 + observed in .status.observedGeneration version of the object. This can 11188 + be used to determine if the content configuration has changed and the 11189 + artifact needs to be rebuilt. 11190 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 11191 + 11192 + Deprecated: Replaced with explicit fields for observed artifact content 11193 + config in the status. 11194 + type: string 11195 + lastHandledReconcileAt: 11196 + description: |- 11197 + LastHandledReconcileAt holds the value of the most recent 11198 + reconcile request value, so a change of the annotation value 11199 + can be detected. 11200 + type: string 11201 + observedGeneration: 11202 + description: ObservedGeneration is the last observed generation. 11203 + format: int64 11204 + type: integer 11205 + observedIgnore: 11206 + description: |- 11207 + ObservedIgnore is the observed exclusion patterns used for constructing 11208 + the source artifact. 11209 + type: string 11210 + observedLayerSelector: 11211 + description: |- 11212 + ObservedLayerSelector is the observed layer selector used for constructing 11213 + the source artifact. 11214 + properties: 11215 + mediaType: 11216 + description: |- 11217 + MediaType specifies the OCI media type of the layer 11218 + which should be extracted from the OCI Artifact. The 11219 + first layer matching this type is selected. 11220 + type: string 11221 + operation: 11222 + description: |- 11223 + Operation specifies how the selected layer should be processed. 11224 + By default, the layer compressed content is extracted to storage. 11225 + When the operation is set to 'copy', the layer compressed content 11226 + is persisted to storage as it is. 11227 + enum: 11228 + - extract 11229 + - copy 11230 + type: string 11231 type: object 11232 - served: true 11233 - storage: false 11234 - subresources: 11235 - status: {} 11236 + url: 11237 + description: URL is the download link for the artifact output of the 11238 + last OCI Repository sync. 11239 + type: string 11240 + type: object 11241 + type: object 11242 + served: true 11243 + storage: true 11244 + subresources: 11245 + status: {} 11246 --- 11247 apiVersion: v1 11248 kind: ServiceAccount 11249 metadata: 11250 - labels: 11251 - app.kubernetes.io/component: kustomize-controller 11252 - app.kubernetes.io/instance: flux-system 11253 - app.kubernetes.io/part-of: flux 11254 - app.kubernetes.io/version: v2.4.0 11255 - name: kustomize-controller 11256 - namespace: flux-system 11257 + labels: 11258 + app.kubernetes.io/component: source-controller 11259 + app.kubernetes.io/instance: flux-system 11260 + app.kubernetes.io/part-of: flux 11261 + app.kubernetes.io/version: v2.5.1 11262 + name: source-controller 11263 + namespace: flux-system 11264 +--- 11265 +apiVersion: v1 11266 +kind: Service 11267 +metadata: 11268 + labels: 11269 + app.kubernetes.io/component: source-controller 11270 + app.kubernetes.io/instance: flux-system 11271 + app.kubernetes.io/part-of: flux 11272 + app.kubernetes.io/version: v2.5.1 11273 + control-plane: controller 11274 + name: source-controller 11275 + namespace: flux-system 11276 +spec: 11277 + ports: 11278 + - name: http 11279 + port: 80 11280 + protocol: TCP 11281 + targetPort: http 11282 + selector: 11283 + app: source-controller 11284 + type: ClusterIP 11285 --- 11286 apiVersion: apps/v1 11287 kind: Deployment 11288 metadata: 11289 - labels: 11290 - app.kubernetes.io/component: kustomize-controller 11291 - app.kubernetes.io/instance: flux-system 11292 - app.kubernetes.io/part-of: flux 11293 - app.kubernetes.io/version: v2.4.0 11294 - control-plane: controller 11295 - name: kustomize-controller 11296 - namespace: flux-system 11297 + labels: 11298 + app.kubernetes.io/component: source-controller 11299 + app.kubernetes.io/instance: flux-system 11300 + app.kubernetes.io/part-of: flux 11301 + app.kubernetes.io/version: v2.5.1 11302 + control-plane: controller 11303 + name: source-controller 11304 + namespace: flux-system 11305 spec: 11306 - replicas: 1 11307 - selector: 11308 - matchLabels: 11309 - app: kustomize-controller 11310 - template: 11311 - metadata: 11312 - annotations: 11313 - prometheus.io/port: "8080" 11314 - prometheus.io/scrape: "true" 11315 - labels: 11316 - app: kustomize-controller 11317 - spec: 11318 - containers: 11319 - - args: 11320 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 11321 - - --watch-all-namespaces=true 11322 - - --log-level=info 11323 - - --log-encoding=json 11324 - - --enable-leader-election 11325 - env: 11326 - - name: RUNTIME_NAMESPACE 11327 - valueFrom: 11328 - fieldRef: 11329 - fieldPath: metadata.namespace 11330 - - name: GOMAXPROCS 11331 - valueFrom: 11332 - resourceFieldRef: 11333 - containerName: manager 11334 - resource: limits.cpu 11335 - - name: GOMEMLIMIT 11336 - valueFrom: 11337 - resourceFieldRef: 11338 - containerName: manager 11339 - resource: limits.memory 11340 - image: ghcr.io/fluxcd/kustomize-controller:v1.4.0 11341 - imagePullPolicy: IfNotPresent 11342 - livenessProbe: 11343 - httpGet: 11344 - path: /healthz 11345 - port: healthz 11346 - name: manager 11347 - ports: 11348 - - containerPort: 8080 11349 - name: http-prom 11350 - protocol: TCP 11351 - - containerPort: 9440 11352 - name: healthz 11353 - protocol: TCP 11354 - readinessProbe: 11355 - httpGet: 11356 - path: /readyz 11357 - port: healthz 11358 - resources: 11359 - limits: 11360 - cpu: 1000m 11361 - memory: 1Gi 11362 - requests: 11363 - cpu: 100m 11364 - memory: 64Mi 11365 - securityContext: 11366 - allowPrivilegeEscalation: false 11367 - capabilities: 11368 - drop: 11369 - - ALL 11370 - readOnlyRootFilesystem: true 11371 - runAsNonRoot: true 11372 - seccompProfile: 11373 - type: RuntimeDefault 11374 - volumeMounts: 11375 - - mountPath: /tmp 11376 - name: temp 11377 - nodeSelector: 11378 - kubernetes.io/os: linux 11379 - priorityClassName: system-cluster-critical 11380 - securityContext: 11381 - fsGroup: 1337 11382 - serviceAccountName: kustomize-controller 11383 - terminationGracePeriodSeconds: 60 11384 - volumes: 11385 - - emptyDir: {} 11386 - name: temp 11387 + replicas: 1 11388 + selector: 11389 + matchLabels: 11390 + app: source-controller 11391 + strategy: 11392 + type: Recreate 11393 + template: 11394 + metadata: 11395 + annotations: 11396 + prometheus.io/port: "8080" 11397 + prometheus.io/scrape: "true" 11398 + labels: 11399 + app: source-controller 11400 + spec: 11401 + containers: 11402 + - args: 11403 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 11404 + - --watch-all-namespaces=true 11405 + - --log-level=info 11406 + - --log-encoding=json 11407 + - --enable-leader-election 11408 + - --storage-path=/data 11409 + - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 11410 + env: 11411 + - name: RUNTIME_NAMESPACE 11412 + valueFrom: 11413 + fieldRef: 11414 + fieldPath: metadata.namespace 11415 + - name: TUF_ROOT 11416 + value: /tmp/.sigstore 11417 + - name: GOMAXPROCS 11418 + valueFrom: 11419 + resourceFieldRef: 11420 + containerName: manager 11421 + resource: limits.cpu 11422 + - name: GOMEMLIMIT 11423 + valueFrom: 11424 + resourceFieldRef: 11425 + containerName: manager 11426 + resource: limits.memory 11427 + image: ghcr.io/fluxcd/source-controller:v1.5.0 11428 + imagePullPolicy: IfNotPresent 11429 + livenessProbe: 11430 + httpGet: 11431 + path: /healthz 11432 + port: healthz 11433 + name: manager 11434 + ports: 11435 + - containerPort: 9090 11436 + name: http 11437 + protocol: TCP 11438 + - containerPort: 8080 11439 + name: http-prom 11440 + protocol: TCP 11441 + - containerPort: 9440 11442 + name: healthz 11443 + protocol: TCP 11444 + readinessProbe: 11445 + httpGet: 11446 + path: / 11447 + port: http 11448 + resources: 11449 + limits: 11450 + cpu: 1000m 11451 + memory: 1Gi 11452 + requests: 11453 + cpu: 50m 11454 + memory: 64Mi 11455 + securityContext: 11456 + allowPrivilegeEscalation: false 11457 + capabilities: 11458 + drop: 11459 + - ALL 11460 + readOnlyRootFilesystem: true 11461 + runAsNonRoot: true 11462 + seccompProfile: 11463 + type: RuntimeDefault 11464 + volumeMounts: 11465 + - mountPath: /data 11466 + name: data 11467 + - mountPath: /tmp 11468 + name: tmp 11469 + nodeSelector: 11470 + kubernetes.io/os: linux 11471 + priorityClassName: system-cluster-critical 11472 + securityContext: 11473 + fsGroup: 1337 11474 + serviceAccountName: source-controller 11475 + terminationGracePeriodSeconds: 10 11476 + volumes: 11477 + - emptyDir: {} 11478 + name: data 11479 + - emptyDir: {} 11480 + name: tmp 11481 --- 11482 apiVersion: apiextensions.k8s.io/v1 11483 kind: CustomResourceDefinition 11484 metadata: 11485 - annotations: 11486 - controller-gen.kubebuilder.io/version: v0.16.1 11487 - labels: 11488 - app.kubernetes.io/component: helm-controller 11489 - app.kubernetes.io/instance: flux-system 11490 - app.kubernetes.io/part-of: flux 11491 - app.kubernetes.io/version: v2.4.0 11492 - name: helmreleases.helm.toolkit.fluxcd.io 11493 + annotations: 11494 + controller-gen.kubebuilder.io/version: v0.16.1 11495 + labels: 11496 + app.kubernetes.io/component: kustomize-controller 11497 + app.kubernetes.io/instance: flux-system 11498 + app.kubernetes.io/part-of: flux 11499 + app.kubernetes.io/version: v2.5.1 11500 + name: kustomizations.kustomize.toolkit.fluxcd.io 11501 spec: 11502 - group: helm.toolkit.fluxcd.io 11503 - names: 11504 - kind: HelmRelease 11505 - listKind: HelmReleaseList 11506 - plural: helmreleases 11507 - shortNames: 11508 - - hr 11509 - singular: helmrelease 11510 - scope: Namespaced 11511 - versions: 11512 - - additionalPrinterColumns: 11513 - - jsonPath: .metadata.creationTimestamp 11514 - name: Age 11515 - type: date 11516 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 11517 - name: Ready 11518 - type: string 11519 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 11520 - name: Status 11521 - type: string 11522 - name: v2 11523 - schema: 11524 - openAPIV3Schema: 11525 - description: HelmRelease is the Schema for the helmreleases API 11526 + group: kustomize.toolkit.fluxcd.io 11527 + names: 11528 + kind: Kustomization 11529 + listKind: KustomizationList 11530 + plural: kustomizations 11531 + shortNames: 11532 + - ks 11533 + singular: kustomization 11534 + scope: Namespaced 11535 + versions: 11536 + - additionalPrinterColumns: 11537 + - jsonPath: .metadata.creationTimestamp 11538 + name: Age 11539 + type: date 11540 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 11541 + name: Ready 11542 + type: string 11543 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 11544 + name: Status 11545 + type: string 11546 + name: v1 11547 + schema: 11548 + openAPIV3Schema: 11549 + description: Kustomization is the Schema for the kustomizations API. 11550 + properties: 11551 + apiVersion: 11552 + description: |- 11553 + APIVersion defines the versioned schema of this representation of an object. 11554 + Servers should convert recognized schemas to the latest internal value, and 11555 + may reject unrecognized values. 11556 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11557 + type: string 11558 + kind: 11559 + description: |- 11560 + Kind is a string value representing the REST resource this object represents. 11561 + Servers may infer this from the endpoint the client submits requests to. 11562 + Cannot be updated. 11563 + In CamelCase. 11564 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11565 + type: string 11566 + metadata: 11567 + type: object 11568 + spec: 11569 + description: |- 11570 + KustomizationSpec defines the configuration to calculate the desired state 11571 + from a Source using Kustomize. 11572 + properties: 11573 + commonMetadata: 11574 + description: |- 11575 + CommonMetadata specifies the common labels and annotations that are 11576 + applied to all resources. Any existing label or annotation will be 11577 + overridden if its key matches a common one. 11578 properties: 11579 - apiVersion: 11580 - description: |- 11581 - APIVersion defines the versioned schema of this representation of an object. 11582 - Servers should convert recognized schemas to the latest internal value, and 11583 - may reject unrecognized values. 11584 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11585 + annotations: 11586 + additionalProperties: 11587 + type: string 11588 + description: Annotations to be added to the object's metadata. 11589 + type: object 11590 + labels: 11591 + additionalProperties: 11592 + type: string 11593 + description: Labels to be added to the object's metadata. 11594 + type: object 11595 + type: object 11596 + components: 11597 + description: Components specifies relative paths to specifications 11598 + of other Components. 11599 + items: 11600 + type: string 11601 + type: array 11602 + decryption: 11603 + description: Decrypt Kubernetes secrets before applying them on the 11604 + cluster. 11605 + properties: 11606 + provider: 11607 + description: Provider is the name of the decryption engine. 11608 + enum: 11609 + - sops 11610 + type: string 11611 + secretRef: 11612 + description: The secret name containing the private OpenPGP keys 11613 + used for decryption. 11614 + properties: 11615 + name: 11616 + description: Name of the referent. 11617 type: string 11618 + required: 11619 + - name 11620 + type: object 11621 + required: 11622 + - provider 11623 + type: object 11624 + deletionPolicy: 11625 + description: |- 11626 + DeletionPolicy can be used to control garbage collection when this 11627 + Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 11628 + 'Orphan'). 'MirrorPrune' mirrors the Prune field (orphan if false, 11629 + delete if true). Defaults to 'MirrorPrune'. 11630 + enum: 11631 + - MirrorPrune 11632 + - Delete 11633 + - Orphan 11634 + type: string 11635 + dependsOn: 11636 + description: |- 11637 + DependsOn may contain a meta.NamespacedObjectReference slice 11638 + with references to Kustomization resources that must be ready before this 11639 + Kustomization can be reconciled. 11640 + items: 11641 + description: |- 11642 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 11643 + namespace. 11644 + properties: 11645 + name: 11646 + description: Name of the referent. 11647 + type: string 11648 + namespace: 11649 + description: Namespace of the referent, when not specified it 11650 + acts as LocalObjectReference. 11651 + type: string 11652 + required: 11653 + - name 11654 + type: object 11655 + type: array 11656 + force: 11657 + default: false 11658 + description: |- 11659 + Force instructs the controller to recreate resources 11660 + when patching fails due to an immutable field change. 11661 + type: boolean 11662 + healthCheckExprs: 11663 + description: |- 11664 + HealthCheckExprs is a list of healthcheck expressions for evaluating the 11665 + health of custom resources using Common Expression Language (CEL). 11666 + The expressions are evaluated only when Wait or HealthChecks are specified. 11667 + items: 11668 + description: CustomHealthCheck defines the health check for custom 11669 + resources. 11670 + properties: 11671 + apiVersion: 11672 + description: APIVersion of the custom resource under evaluation. 11673 + type: string 11674 + current: 11675 + description: |- 11676 + Current is the CEL expression that determines if the status 11677 + of the custom resource has reached the desired state. 11678 + type: string 11679 + failed: 11680 + description: |- 11681 + Failed is the CEL expression that determines if the status 11682 + of the custom resource has failed to reach the desired state. 11683 + type: string 11684 + inProgress: 11685 + description: |- 11686 + InProgress is the CEL expression that determines if the status 11687 + of the custom resource has not yet reached the desired state. 11688 + type: string 11689 kind: 11690 - description: |- 11691 - Kind is a string value representing the REST resource this object represents. 11692 - Servers may infer this from the endpoint the client submits requests to. 11693 - Cannot be updated. 11694 - In CamelCase. 11695 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11696 + description: Kind of the custom resource under evaluation. 11697 + type: string 11698 + required: 11699 + - apiVersion 11700 + - current 11701 + - kind 11702 + type: object 11703 + type: array 11704 + healthChecks: 11705 + description: A list of resources to be included in the health assessment. 11706 + items: 11707 + description: |- 11708 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 11709 + in any namespace. 11710 + properties: 11711 + apiVersion: 11712 + description: API version of the referent, if not specified the 11713 + Kubernetes preferred version will be used. 11714 + type: string 11715 + kind: 11716 + description: Kind of the referent. 11717 + type: string 11718 + name: 11719 + description: Name of the referent. 11720 + type: string 11721 + namespace: 11722 + description: Namespace of the referent, when not specified it 11723 + acts as LocalObjectReference. 11724 + type: string 11725 + required: 11726 + - kind 11727 + - name 11728 + type: object 11729 + type: array 11730 + images: 11731 + description: |- 11732 + Images is a list of (image name, new name, new tag or digest) 11733 + for changing image names, tags or digests. This can also be achieved with a 11734 + patch, but this operator is simpler to specify. 11735 + items: 11736 + description: Image contains an image name, a new name, a new tag 11737 + or digest, which will replace the original name and tag. 11738 + properties: 11739 + digest: 11740 + description: |- 11741 + Digest is the value used to replace the original image tag. 11742 + If digest is present NewTag value is ignored. 11743 + type: string 11744 + name: 11745 + description: Name is a tag-less image name. 11746 + type: string 11747 + newName: 11748 + description: NewName is the value used to replace the original 11749 + name. 11750 + type: string 11751 + newTag: 11752 + description: NewTag is the value used to replace the original 11753 + tag. 11754 + type: string 11755 + required: 11756 + - name 11757 + type: object 11758 + type: array 11759 + interval: 11760 + description: |- 11761 + The interval at which to reconcile the Kustomization. 11762 + This interval is approximate and may be subject to jitter to ensure 11763 + efficient use of resources. 11764 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11765 + type: string 11766 + kubeConfig: 11767 + description: |- 11768 + The KubeConfig for reconciling the Kustomization on a remote cluster. 11769 + When used in combination with KustomizationSpec.ServiceAccountName, 11770 + forces the controller to act on behalf of that Service Account at the 11771 + target cluster. 11772 + If the --default-service-account flag is set, its value will be used as 11773 + a controller level fallback for when KustomizationSpec.ServiceAccountName 11774 + is empty. 11775 + properties: 11776 + secretRef: 11777 + description: |- 11778 + SecretRef holds the name of a secret that contains a key with 11779 + the kubeconfig file as the value. If no key is set, the key will default 11780 + to 'value'. 11781 + It is recommended that the kubeconfig is self-contained, and the secret 11782 + is regularly updated if credentials such as a cloud-access-token expire. 11783 + Cloud specific `cmd-path` auth helpers will not function without adding 11784 + binaries and credentials to the Pod that is responsible for reconciling 11785 + Kubernetes resources. 11786 + properties: 11787 + key: 11788 + description: Key in the Secret, when not specified an implementation-specific 11789 + default key is used. 11790 type: string 11791 - metadata: 11792 - type: object 11793 - spec: 11794 - description: HelmReleaseSpec defines the desired state of a Helm release. 11795 - properties: 11796 - chart: 11797 - description: |- 11798 - Chart defines the template of the v1.HelmChart that should be created 11799 - for this HelmRelease. 11800 - properties: 11801 - metadata: 11802 - description: ObjectMeta holds the template for metadata like labels and annotations. 11803 - properties: 11804 - annotations: 11805 - additionalProperties: 11806 - type: string 11807 - description: |- 11808 - Annotations is an unstructured key value map stored with a resource that may be 11809 - set by external tools to store and retrieve arbitrary metadata. They are not 11810 - queryable and should be preserved when modifying objects. 11811 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 11812 - type: object 11813 - labels: 11814 - additionalProperties: 11815 - type: string 11816 - description: |- 11817 - Map of string keys and values that can be used to organize and categorize 11818 - (scope and select) objects. 11819 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 11820 - type: object 11821 - type: object 11822 - spec: 11823 - description: Spec holds the template for the v1.HelmChartSpec for this HelmRelease. 11824 - properties: 11825 - chart: 11826 - description: The name or path the Helm chart is available at in the SourceRef. 11827 - maxLength: 2048 11828 - minLength: 1 11829 - type: string 11830 - ignoreMissingValuesFiles: 11831 - description: IgnoreMissingValuesFiles controls whether to silently ignore 11832 - missing values files rather than failing. 11833 - type: boolean 11834 - interval: 11835 - description: |- 11836 - Interval at which to check the v1.Source for updates. Defaults to 11837 - 'HelmReleaseSpec.Interval'. 11838 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11839 - type: string 11840 - reconcileStrategy: 11841 - default: ChartVersion 11842 - description: |- 11843 - Determines what enables the creation of a new artifact. Valid values are 11844 - ('ChartVersion', 'Revision'). 11845 - See the documentation of the values for an explanation on their behavior. 11846 - Defaults to ChartVersion when omitted. 11847 - enum: 11848 - - ChartVersion 11849 - - Revision 11850 - type: string 11851 - sourceRef: 11852 - description: The name and namespace of the v1.Source the chart is available 11853 - at. 11854 - properties: 11855 - apiVersion: 11856 - description: APIVersion of the referent. 11857 - type: string 11858 - kind: 11859 - description: Kind of the referent. 11860 - enum: 11861 - - HelmRepository 11862 - - GitRepository 11863 - - Bucket 11864 - type: string 11865 - name: 11866 - description: Name of the referent. 11867 - maxLength: 253 11868 - minLength: 1 11869 - type: string 11870 - namespace: 11871 - description: Namespace of the referent. 11872 - maxLength: 63 11873 - minLength: 1 11874 - type: string 11875 - required: 11876 - - kind 11877 - - name 11878 - type: object 11879 - valuesFiles: 11880 - description: |- 11881 - Alternative list of values files to use as the chart values (values.yaml 11882 - is not included by default), expected to be a relative path in the SourceRef. 11883 - Values files are merged in the order of this list with the last file overriding 11884 - the first. Ignored when omitted. 11885 - items: 11886 - type: string 11887 - type: array 11888 - verify: 11889 - description: |- 11890 - Verify contains the secret name containing the trusted public keys 11891 - used to verify the signature and specifies which provider to use to check 11892 - whether OCI image is authentic. 11893 - This field is only supported for OCI sources. 11894 - Chart dependencies, which are not bundled in the umbrella chart artifact, 11895 - are not verified. 11896 - properties: 11897 - provider: 11898 - default: cosign 11899 - description: Provider specifies the technology used to sign the OCI 11900 - Helm chart. 11901 - enum: 11902 - - cosign 11903 - - notation 11904 - type: string 11905 - secretRef: 11906 - description: |- 11907 - SecretRef specifies the Kubernetes Secret containing the 11908 - trusted public keys. 11909 - properties: 11910 - name: 11911 - description: Name of the referent. 11912 - type: string 11913 - required: 11914 - - name 11915 - type: object 11916 - required: 11917 - - provider 11918 - type: object 11919 - version: 11920 - default: '*' 11921 - description: |- 11922 - Version semver expression, ignored for charts from v1.GitRepository and 11923 - v1beta2.Bucket sources. Defaults to latest when omitted. 11924 - type: string 11925 - required: 11926 - - chart 11927 - - sourceRef 11928 - type: object 11929 - required: 11930 - - spec 11931 - type: object 11932 - chartRef: 11933 - description: |- 11934 - ChartRef holds a reference to a source controller resource containing the 11935 - Helm chart artifact. 11936 - properties: 11937 - apiVersion: 11938 - description: APIVersion of the referent. 11939 - type: string 11940 - kind: 11941 - description: Kind of the referent. 11942 - enum: 11943 - - OCIRepository 11944 - - HelmChart 11945 - type: string 11946 - name: 11947 - description: Name of the referent. 11948 - maxLength: 253 11949 - minLength: 1 11950 - type: string 11951 - namespace: 11952 - description: |- 11953 - Namespace of the referent, defaults to the namespace of the Kubernetes 11954 - resource object that contains the reference. 11955 - maxLength: 63 11956 - minLength: 1 11957 - type: string 11958 - required: 11959 - - kind 11960 - - name 11961 - type: object 11962 - dependsOn: 11963 - description: |- 11964 - DependsOn may contain a meta.NamespacedObjectReference slice with 11965 - references to HelmRelease resources that must be ready before this HelmRelease 11966 - can be reconciled. 11967 - items: 11968 - description: |- 11969 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 11970 - namespace. 11971 - properties: 11972 - name: 11973 - description: Name of the referent. 11974 - type: string 11975 - namespace: 11976 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 11977 - type: string 11978 - required: 11979 - - name 11980 - type: object 11981 - type: array 11982 - driftDetection: 11983 - description: |- 11984 - DriftDetection holds the configuration for detecting and handling 11985 - differences between the manifest in the Helm storage and the resources 11986 - currently existing in the cluster. 11987 - properties: 11988 - ignore: 11989 - description: |- 11990 - Ignore contains a list of rules for specifying which changes to ignore 11991 - during diffing. 11992 - items: 11993 - description: |- 11994 - IgnoreRule defines a rule to selectively disregard specific changes during 11995 - the drift detection process. 11996 - properties: 11997 - paths: 11998 - description: |- 11999 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 12000 - consideration in a Kubernetes object. 12001 - items: 12002 - type: string 12003 - type: array 12004 - target: 12005 - description: |- 12006 - Target is a selector for specifying Kubernetes objects to which this 12007 - rule applies. 12008 - If Target is not set, the Paths will be ignored for all Kubernetes 12009 - objects within the manifest of the Helm release. 12010 - properties: 12011 - annotationSelector: 12012 - description: |- 12013 - AnnotationSelector is a string that follows the label selection expression 12014 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12015 - It matches with the resource annotations. 12016 - type: string 12017 - group: 12018 - description: |- 12019 - Group is the API group to select resources from. 12020 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12021 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12022 - type: string 12023 - kind: 12024 - description: |- 12025 - Kind of the API Group to select resources from. 12026 - Together with Group and Version it is capable of unambiguously 12027 - identifying and/or selecting resources. 12028 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12029 - type: string 12030 - labelSelector: 12031 - description: |- 12032 - LabelSelector is a string that follows the label selection expression 12033 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12034 - It matches with the resource labels. 12035 - type: string 12036 - name: 12037 - description: Name to match resources with. 12038 - type: string 12039 - namespace: 12040 - description: Namespace to select resources from. 12041 - type: string 12042 - version: 12043 - description: |- 12044 - Version of the API Group to select resources from. 12045 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12046 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12047 - type: string 12048 - type: object 12049 - required: 12050 - - paths 12051 - type: object 12052 - type: array 12053 - mode: 12054 - description: |- 12055 - Mode defines how differences should be handled between the Helm manifest 12056 - and the manifest currently applied to the cluster. 12057 - If not explicitly set, it defaults to DiffModeDisabled. 12058 - enum: 12059 - - enabled 12060 - - warn 12061 - - disabled 12062 - type: string 12063 - type: object 12064 - install: 12065 - description: Install holds the configuration for Helm install actions for this HelmRelease. 12066 - properties: 12067 - crds: 12068 - description: |- 12069 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12070 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12071 - `Create` or `CreateReplace`. Default is `Create` and if omitted 12072 - CRDs are installed but not updated. 12073 - 12074 - Skip: do neither install nor replace (update) any CRDs. 12075 - 12076 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12077 - 12078 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12079 - but not deleted. 12080 - 12081 - By default, CRDs are applied (installed) during Helm install action. 12082 - With this option users can opt in to CRD replace existing CRDs on Helm 12083 - install actions, which is not (yet) natively supported by Helm. 12084 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12085 - enum: 12086 - - Skip 12087 - - Create 12088 - - CreateReplace 12089 - type: string 12090 - createNamespace: 12091 - description: |- 12092 - CreateNamespace tells the Helm install action to create the 12093 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 12094 - On uninstall, the namespace will not be garbage collected. 12095 - type: boolean 12096 - disableHooks: 12097 - description: DisableHooks prevents hooks from running during the Helm install action. 12098 - type: boolean 12099 - disableOpenAPIValidation: 12100 - description: |- 12101 - DisableOpenAPIValidation prevents the Helm install action from validating 12102 - rendered templates against the Kubernetes OpenAPI Schema. 12103 - type: boolean 12104 - disableSchemaValidation: 12105 - description: |- 12106 - DisableSchemaValidation prevents the Helm install action from validating 12107 - the values against the JSON Schema. 12108 - type: boolean 12109 - disableWait: 12110 - description: |- 12111 - DisableWait disables the waiting for resources to be ready after a Helm 12112 - install has been performed. 12113 - type: boolean 12114 - disableWaitForJobs: 12115 - description: |- 12116 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12117 - install has been performed. 12118 - type: boolean 12119 - remediation: 12120 - description: |- 12121 - Remediation holds the remediation configuration for when the Helm install 12122 - action for the HelmRelease fails. The default is to not perform any action. 12123 - properties: 12124 - ignoreTestFailures: 12125 - description: |- 12126 - IgnoreTestFailures tells the controller to skip remediation when the Helm 12127 - tests are run after an install action but fail. Defaults to 12128 - 'Test.IgnoreFailures'. 12129 - type: boolean 12130 - remediateLastFailure: 12131 - description: |- 12132 - RemediateLastFailure tells the controller to remediate the last failure, when 12133 - no retries remain. Defaults to 'false'. 12134 - type: boolean 12135 - retries: 12136 - description: |- 12137 - Retries is the number of retries that should be attempted on failures before 12138 - bailing. Remediation, using an uninstall, is performed between each attempt. 12139 - Defaults to '0', a negative integer equals to unlimited retries. 12140 - type: integer 12141 - type: object 12142 - replace: 12143 - description: |- 12144 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 12145 - if that name is a deleted release which remains in the history. 12146 - type: boolean 12147 - skipCRDs: 12148 - description: |- 12149 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 12150 - CRDs are installed if not already present. 12151 - 12152 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 12153 - type: boolean 12154 - timeout: 12155 - description: |- 12156 - Timeout is the time to wait for any individual Kubernetes operation (like 12157 - Jobs for hooks) during the performance of a Helm install action. Defaults to 12158 - 'HelmReleaseSpec.Timeout'. 12159 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12160 - type: string 12161 - type: object 12162 - interval: 12163 - description: Interval at which to reconcile the Helm release. 12164 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12165 - type: string 12166 - kubeConfig: 12167 - description: |- 12168 - KubeConfig for reconciling the HelmRelease on a remote cluster. 12169 - When used in combination with HelmReleaseSpec.ServiceAccountName, 12170 - forces the controller to act on behalf of that Service Account at the 12171 - target cluster. 12172 - If the --default-service-account flag is set, its value will be used as 12173 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 12174 - is empty. 12175 - properties: 12176 - secretRef: 12177 - description: |- 12178 - SecretRef holds the name of a secret that contains a key with 12179 - the kubeconfig file as the value. If no key is set, the key will default 12180 - to 'value'. 12181 - It is recommended that the kubeconfig is self-contained, and the secret 12182 - is regularly updated if credentials such as a cloud-access-token expire. 12183 - Cloud specific `cmd-path` auth helpers will not function without adding 12184 - binaries and credentials to the Pod that is responsible for reconciling 12185 - Kubernetes resources. 12186 - properties: 12187 - key: 12188 - description: Key in the Secret, when not specified an implementation-specific 12189 - default key is used. 12190 - type: string 12191 - name: 12192 - description: Name of the Secret. 12193 - type: string 12194 - required: 12195 - - name 12196 - type: object 12197 - required: 12198 - - secretRef 12199 - type: object 12200 - maxHistory: 12201 - description: |- 12202 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 12203 - Use '0' for an unlimited number of revisions; defaults to '5'. 12204 - type: integer 12205 - persistentClient: 12206 - description: |- 12207 - PersistentClient tells the controller to use a persistent Kubernetes 12208 - client for this release. When enabled, the client will be reused for the 12209 - duration of the reconciliation, instead of being created and destroyed 12210 - for each (step of a) Helm action. 12211 - 12212 - This can improve performance, but may cause issues with some Helm charts 12213 - that for example do create Custom Resource Definitions during installation 12214 - outside Helm's CRD lifecycle hooks, which are then not observed to be 12215 - available by e.g. post-install hooks. 12216 - 12217 - If not set, it defaults to true. 12218 - type: boolean 12219 - postRenderers: 12220 - description: |- 12221 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 12222 - of their definition. 12223 - items: 12224 - description: PostRenderer contains a Helm PostRenderer specification. 12225 - properties: 12226 - kustomize: 12227 - description: Kustomization to apply as PostRenderer. 12228 - properties: 12229 - images: 12230 - description: |- 12231 - Images is a list of (image name, new name, new tag or digest) 12232 - for changing image names, tags or digests. This can also be achieved with a 12233 - patch, but this operator is simpler to specify. 12234 - items: 12235 - description: Image contains an image name, a new name, a new tag or 12236 - digest, which will replace the original name and tag. 12237 - properties: 12238 - digest: 12239 - description: |- 12240 - Digest is the value used to replace the original image tag. 12241 - If digest is present NewTag value is ignored. 12242 - type: string 12243 - name: 12244 - description: Name is a tag-less image name. 12245 - type: string 12246 - newName: 12247 - description: NewName is the value used to replace the original 12248 - name. 12249 - type: string 12250 - newTag: 12251 - description: NewTag is the value used to replace the original 12252 - tag. 12253 - type: string 12254 - required: 12255 - - name 12256 - type: object 12257 - type: array 12258 - patches: 12259 - description: |- 12260 - Strategic merge and JSON patches, defined as inline YAML objects, 12261 - capable of targeting objects based on kind, label and annotation selectors. 12262 - items: 12263 - description: |- 12264 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 12265 - be applied to. 12266 - properties: 12267 - patch: 12268 - description: |- 12269 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 12270 - an array of operation objects. 12271 - type: string 12272 - target: 12273 - description: Target points to the resources that the patch 12274 - document should be applied to. 12275 - properties: 12276 - annotationSelector: 12277 - description: |- 12278 - AnnotationSelector is a string that follows the label selection expression 12279 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12280 - It matches with the resource annotations. 12281 - type: string 12282 - group: 12283 - description: |- 12284 - Group is the API group to select resources from. 12285 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12286 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12287 - type: string 12288 - kind: 12289 - description: |- 12290 - Kind of the API Group to select resources from. 12291 - Together with Group and Version it is capable of unambiguously 12292 - identifying and/or selecting resources. 12293 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12294 - type: string 12295 - labelSelector: 12296 - description: |- 12297 - LabelSelector is a string that follows the label selection expression 12298 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12299 - It matches with the resource labels. 12300 - type: string 12301 - name: 12302 - description: Name to match resources with. 12303 - type: string 12304 - namespace: 12305 - description: Namespace to select resources from. 12306 - type: string 12307 - version: 12308 - description: |- 12309 - Version of the API Group to select resources from. 12310 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12311 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12312 - type: string 12313 - type: object 12314 - required: 12315 - - patch 12316 - type: object 12317 - type: array 12318 - type: object 12319 - type: object 12320 - type: array 12321 - releaseName: 12322 - description: |- 12323 - ReleaseName used for the Helm release. Defaults to a composition of 12324 - '[TargetNamespace-]Name'. 12325 - maxLength: 53 12326 - minLength: 1 12327 - type: string 12328 - rollback: 12329 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 12330 - properties: 12331 - cleanupOnFail: 12332 - description: |- 12333 - CleanupOnFail allows deletion of new resources created during the Helm 12334 - rollback action when it fails. 12335 - type: boolean 12336 - disableHooks: 12337 - description: DisableHooks prevents hooks from running during the Helm rollback action. 12338 - type: boolean 12339 - disableWait: 12340 - description: |- 12341 - DisableWait disables the waiting for resources to be ready after a Helm 12342 - rollback has been performed. 12343 - type: boolean 12344 - disableWaitForJobs: 12345 - description: |- 12346 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12347 - rollback has been performed. 12348 - type: boolean 12349 - force: 12350 - description: Force forces resource updates through a replacement strategy. 12351 - type: boolean 12352 - recreate: 12353 - description: Recreate performs pod restarts for the resource if applicable. 12354 - type: boolean 12355 - timeout: 12356 - description: |- 12357 - Timeout is the time to wait for any individual Kubernetes operation (like 12358 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 12359 - 'HelmReleaseSpec.Timeout'. 12360 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12361 - type: string 12362 - type: object 12363 - serviceAccountName: 12364 - description: |- 12365 - The name of the Kubernetes service account to impersonate 12366 - when reconciling this HelmRelease. 12367 - maxLength: 253 12368 - minLength: 1 12369 - type: string 12370 - storageNamespace: 12371 - description: |- 12372 - StorageNamespace used for the Helm storage. 12373 - Defaults to the namespace of the HelmRelease. 12374 - maxLength: 63 12375 - minLength: 1 12376 - type: string 12377 - suspend: 12378 - description: |- 12379 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 12380 - it does not apply to already started reconciliations. Defaults to false. 12381 - type: boolean 12382 - targetNamespace: 12383 - description: |- 12384 - TargetNamespace to target when performing operations for the HelmRelease. 12385 - Defaults to the namespace of the HelmRelease. 12386 - maxLength: 63 12387 - minLength: 1 12388 - type: string 12389 - test: 12390 - description: Test holds the configuration for Helm test actions for this HelmRelease. 12391 - properties: 12392 - enable: 12393 - description: |- 12394 - Enable enables Helm test actions for this HelmRelease after an Helm install 12395 - or upgrade action has been performed. 12396 - type: boolean 12397 - filters: 12398 - description: Filters is a list of tests to run or exclude from running. 12399 - items: 12400 - description: Filter holds the configuration for individual Helm test filters. 12401 - properties: 12402 - exclude: 12403 - description: Exclude specifies whether the named test should be excluded. 12404 - type: boolean 12405 - name: 12406 - description: Name is the name of the test. 12407 - maxLength: 253 12408 - minLength: 1 12409 - type: string 12410 - required: 12411 - - name 12412 - type: object 12413 - type: array 12414 - ignoreFailures: 12415 - description: |- 12416 - IgnoreFailures tells the controller to skip remediation when the Helm tests 12417 - are run but fail. Can be overwritten for tests run after install or upgrade 12418 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 12419 - type: boolean 12420 - timeout: 12421 - description: |- 12422 - Timeout is the time to wait for any individual Kubernetes operation during 12423 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 12424 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12425 - type: string 12426 - type: object 12427 - timeout: 12428 - description: |- 12429 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 12430 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 12431 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12432 - type: string 12433 - uninstall: 12434 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 12435 - properties: 12436 - deletionPropagation: 12437 - default: background 12438 - description: |- 12439 - DeletionPropagation specifies the deletion propagation policy when 12440 - a Helm uninstall is performed. 12441 - enum: 12442 - - background 12443 - - foreground 12444 - - orphan 12445 - type: string 12446 - disableHooks: 12447 - description: DisableHooks prevents hooks from running during the Helm rollback action. 12448 - type: boolean 12449 - disableWait: 12450 - description: |- 12451 - DisableWait disables waiting for all the resources to be deleted after 12452 - a Helm uninstall is performed. 12453 - type: boolean 12454 - keepHistory: 12455 - description: |- 12456 - KeepHistory tells Helm to remove all associated resources and mark the 12457 - release as deleted, but retain the release history. 12458 - type: boolean 12459 - timeout: 12460 - description: |- 12461 - Timeout is the time to wait for any individual Kubernetes operation (like 12462 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 12463 - to 'HelmReleaseSpec.Timeout'. 12464 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12465 - type: string 12466 - type: object 12467 - upgrade: 12468 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 12469 - properties: 12470 - cleanupOnFail: 12471 - description: |- 12472 - CleanupOnFail allows deletion of new resources created during the Helm 12473 - upgrade action when it fails. 12474 - type: boolean 12475 - crds: 12476 - description: |- 12477 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12478 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12479 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 12480 - CRDs are neither installed nor upgraded. 12481 - 12482 - Skip: do neither install nor replace (update) any CRDs. 12483 - 12484 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12485 - 12486 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12487 - but not deleted. 12488 - 12489 - By default, CRDs are not applied during Helm upgrade action. With this 12490 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 12491 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12492 - enum: 12493 - - Skip 12494 - - Create 12495 - - CreateReplace 12496 - type: string 12497 - disableHooks: 12498 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 12499 - type: boolean 12500 - disableOpenAPIValidation: 12501 - description: |- 12502 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 12503 - rendered templates against the Kubernetes OpenAPI Schema. 12504 - type: boolean 12505 - disableSchemaValidation: 12506 - description: |- 12507 - DisableSchemaValidation prevents the Helm upgrade action from validating 12508 - the values against the JSON Schema. 12509 - type: boolean 12510 - disableWait: 12511 - description: |- 12512 - DisableWait disables the waiting for resources to be ready after a Helm 12513 - upgrade has been performed. 12514 - type: boolean 12515 - disableWaitForJobs: 12516 - description: |- 12517 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12518 - upgrade has been performed. 12519 - type: boolean 12520 - force: 12521 - description: Force forces resource updates through a replacement strategy. 12522 - type: boolean 12523 - preserveValues: 12524 - description: |- 12525 - PreserveValues will make Helm reuse the last release's values and merge in 12526 - overrides from 'Values'. Setting this flag makes the HelmRelease 12527 - non-declarative. 12528 - type: boolean 12529 - remediation: 12530 - description: |- 12531 - Remediation holds the remediation configuration for when the Helm upgrade 12532 - action for the HelmRelease fails. The default is to not perform any action. 12533 - properties: 12534 - ignoreTestFailures: 12535 - description: |- 12536 - IgnoreTestFailures tells the controller to skip remediation when the Helm 12537 - tests are run after an upgrade action but fail. 12538 - Defaults to 'Test.IgnoreFailures'. 12539 - type: boolean 12540 - remediateLastFailure: 12541 - description: |- 12542 - RemediateLastFailure tells the controller to remediate the last failure, when 12543 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 12544 - type: boolean 12545 - retries: 12546 - description: |- 12547 - Retries is the number of retries that should be attempted on failures before 12548 - bailing. Remediation, using 'Strategy', is performed between each attempt. 12549 - Defaults to '0', a negative integer equals to unlimited retries. 12550 - type: integer 12551 - strategy: 12552 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 12553 - enum: 12554 - - rollback 12555 - - uninstall 12556 - type: string 12557 - type: object 12558 - timeout: 12559 - description: |- 12560 - Timeout is the time to wait for any individual Kubernetes operation (like 12561 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 12562 - 'HelmReleaseSpec.Timeout'. 12563 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12564 - type: string 12565 - type: object 12566 - values: 12567 - description: Values holds the values for this Helm release. 12568 - x-kubernetes-preserve-unknown-fields: true 12569 - valuesFrom: 12570 - description: |- 12571 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 12572 - and information about how they should be merged. 12573 - items: 12574 - description: |- 12575 - ValuesReference contains a reference to a resource containing Helm values, 12576 - and optionally the key they can be found at. 12577 - properties: 12578 - kind: 12579 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 12580 - enum: 12581 - - Secret 12582 - - ConfigMap 12583 - type: string 12584 - name: 12585 - description: |- 12586 - Name of the values referent. Should reside in the same namespace as the 12587 - referring resource. 12588 - maxLength: 253 12589 - minLength: 1 12590 - type: string 12591 - optional: 12592 - description: |- 12593 - Optional marks this ValuesReference as optional. When set, a not found error 12594 - for the values reference is ignored, but any ValuesKey, TargetPath or 12595 - transient error will still result in a reconciliation failure. 12596 - type: boolean 12597 - targetPath: 12598 - description: |- 12599 - TargetPath is the YAML dot notation path the value should be merged at. When 12600 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 12601 - which results in the values getting merged at the root. 12602 - maxLength: 250 12603 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 12604 - type: string 12605 - valuesKey: 12606 - description: |- 12607 - ValuesKey is the data key where the values.yaml or a specific value can be 12608 - found at. Defaults to 'values.yaml'. 12609 - maxLength: 253 12610 - pattern: ^[\-._a-zA-Z0-9]+$ 12611 - type: string 12612 - required: 12613 - - kind 12614 - - name 12615 - type: object 12616 - type: array 12617 - required: 12618 - - interval 12619 - type: object 12620 - x-kubernetes-validations: 12621 - - message: either chart or chartRef must be set 12622 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 12623 + name: 12624 + description: Name of the Secret. 12625 + type: string 12626 + required: 12627 + - name 12628 + type: object 12629 + required: 12630 + - secretRef 12631 + type: object 12632 + namePrefix: 12633 + description: NamePrefix will prefix the names of all managed resources. 12634 + maxLength: 200 12635 + minLength: 1 12636 + type: string 12637 + nameSuffix: 12638 + description: NameSuffix will suffix the names of all managed resources. 12639 + maxLength: 200 12640 + minLength: 1 12641 + type: string 12642 + patches: 12643 + description: |- 12644 + Strategic merge and JSON patches, defined as inline YAML objects, 12645 + capable of targeting objects based on kind, label and annotation selectors. 12646 + items: 12647 + description: |- 12648 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 12649 + be applied to. 12650 + properties: 12651 + patch: 12652 + description: |- 12653 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 12654 + an array of operation objects. 12655 + type: string 12656 + target: 12657 + description: Target points to the resources that the patch document 12658 + should be applied to. 12659 + properties: 12660 + annotationSelector: 12661 + description: |- 12662 + AnnotationSelector is a string that follows the label selection expression 12663 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12664 + It matches with the resource annotations. 12665 + type: string 12666 + group: 12667 + description: |- 12668 + Group is the API group to select resources from. 12669 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12670 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12671 + type: string 12672 + kind: 12673 + description: |- 12674 + Kind of the API Group to select resources from. 12675 + Together with Group and Version it is capable of unambiguously 12676 + identifying and/or selecting resources. 12677 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12678 + type: string 12679 + labelSelector: 12680 + description: |- 12681 + LabelSelector is a string that follows the label selection expression 12682 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12683 + It matches with the resource labels. 12684 + type: string 12685 + name: 12686 + description: Name to match resources with. 12687 + type: string 12688 + namespace: 12689 + description: Namespace to select resources from. 12690 + type: string 12691 + version: 12692 + description: |- 12693 + Version of the API Group to select resources from. 12694 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12695 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12696 + type: string 12697 + type: object 12698 + required: 12699 + - patch 12700 + type: object 12701 + type: array 12702 + path: 12703 + description: |- 12704 + Path to the directory containing the kustomization.yaml file, or the 12705 + set of plain YAMLs a kustomization.yaml should be generated for. 12706 + Defaults to 'None', which translates to the root path of the SourceRef. 12707 + type: string 12708 + postBuild: 12709 + description: |- 12710 + PostBuild describes which actions to perform on the YAML manifest 12711 + generated by building the kustomize overlay. 12712 + properties: 12713 + substitute: 12714 + additionalProperties: 12715 + type: string 12716 + description: |- 12717 + Substitute holds a map of key/value pairs. 12718 + The variables defined in your YAML manifests that match any of the keys 12719 + defined in the map will be substituted with the set value. 12720 + Includes support for bash string replacement functions 12721 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 12722 + type: object 12723 + substituteFrom: 12724 + description: |- 12725 + SubstituteFrom holds references to ConfigMaps and Secrets containing 12726 + the variables and their values to be substituted in the YAML manifests. 12727 + The ConfigMap and the Secret data keys represent the var names, and they 12728 + must match the vars declared in the manifests for the substitution to 12729 + happen. 12730 + items: 12731 + description: |- 12732 + SubstituteReference contains a reference to a resource containing 12733 + the variables name and value. 12734 + properties: 12735 + kind: 12736 + description: Kind of the values referent, valid values are 12737 + ('Secret', 'ConfigMap'). 12738 + enum: 12739 + - Secret 12740 + - ConfigMap 12741 + type: string 12742 + name: 12743 + description: |- 12744 + Name of the values referent. Should reside in the same namespace as the 12745 + referring resource. 12746 + maxLength: 253 12747 + minLength: 1 12748 + type: string 12749 + optional: 12750 + default: false 12751 + description: |- 12752 + Optional indicates whether the referenced resource must exist, or whether to 12753 + tolerate its absence. If true and the referenced resource is absent, proceed 12754 + as if the resource was present but empty, without any variables defined. 12755 + type: boolean 12756 + required: 12757 + - kind 12758 + - name 12759 + type: object 12760 + type: array 12761 + type: object 12762 + prune: 12763 + description: Prune enables garbage collection. 12764 + type: boolean 12765 + retryInterval: 12766 + description: |- 12767 + The interval at which to retry a previously failed reconciliation. 12768 + When not specified, the controller uses the KustomizationSpec.Interval 12769 + value to retry failures. 12770 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12771 + type: string 12772 + serviceAccountName: 12773 + description: |- 12774 + The name of the Kubernetes service account to impersonate 12775 + when reconciling this Kustomization. 12776 + type: string 12777 + sourceRef: 12778 + description: Reference of the source where the kustomization file 12779 + is. 12780 + properties: 12781 + apiVersion: 12782 + description: API version of the referent. 12783 + type: string 12784 + kind: 12785 + description: Kind of the referent. 12786 + enum: 12787 + - OCIRepository 12788 + - GitRepository 12789 + - Bucket 12790 + type: string 12791 + name: 12792 + description: Name of the referent. 12793 + type: string 12794 + namespace: 12795 + description: |- 12796 + Namespace of the referent, defaults to the namespace of the Kubernetes 12797 + resource object that contains the reference. 12798 + type: string 12799 + required: 12800 + - kind 12801 + - name 12802 + type: object 12803 + suspend: 12804 + description: |- 12805 + This flag tells the controller to suspend subsequent kustomize executions, 12806 + it does not apply to already started executions. Defaults to false. 12807 + type: boolean 12808 + targetNamespace: 12809 + description: |- 12810 + TargetNamespace sets or overrides the namespace in the 12811 + kustomization.yaml file. 12812 + maxLength: 63 12813 + minLength: 1 12814 + type: string 12815 + timeout: 12816 + description: |- 12817 + Timeout for validation, apply and health checking operations. 12818 + Defaults to 'Interval' duration. 12819 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12820 + type: string 12821 + wait: 12822 + description: |- 12823 + Wait instructs the controller to check the health of all the reconciled 12824 + resources. When enabled, the HealthChecks are ignored. Defaults to false. 12825 + type: boolean 12826 + required: 12827 + - interval 12828 + - prune 12829 + - sourceRef 12830 + type: object 12831 + status: 12832 + default: 12833 + observedGeneration: -1 12834 + description: KustomizationStatus defines the observed state of a kustomization. 12835 + properties: 12836 + conditions: 12837 + items: 12838 + description: Condition contains details for one aspect of the current 12839 + state of this API Resource. 12840 + properties: 12841 + lastTransitionTime: 12842 + description: |- 12843 + lastTransitionTime is the last time the condition transitioned from one status to another. 12844 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12845 + format: date-time 12846 + type: string 12847 + message: 12848 + description: |- 12849 + message is a human readable message indicating details about the transition. 12850 + This may be an empty string. 12851 + maxLength: 32768 12852 + type: string 12853 + observedGeneration: 12854 + description: |- 12855 + observedGeneration represents the .metadata.generation that the condition was set based upon. 12856 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12857 + with respect to the current state of the instance. 12858 + format: int64 12859 + minimum: 0 12860 + type: integer 12861 + reason: 12862 + description: |- 12863 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 12864 + Producers of specific condition types may define expected values and meanings for this field, 12865 + and whether the values are considered a guaranteed API. 12866 + The value should be a CamelCase string. 12867 + This field may not be empty. 12868 + maxLength: 1024 12869 + minLength: 1 12870 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12871 + type: string 12872 status: 12873 - default: 12874 - observedGeneration: -1 12875 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 12876 + description: status of the condition, one of True, False, Unknown. 12877 + enum: 12878 + - "True" 12879 + - "False" 12880 + - Unknown 12881 + type: string 12882 + type: 12883 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 12884 + maxLength: 316 12885 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12886 + type: string 12887 + required: 12888 + - lastTransitionTime 12889 + - message 12890 + - reason 12891 + - status 12892 + - type 12893 + type: object 12894 + type: array 12895 + inventory: 12896 + description: |- 12897 + Inventory contains the list of Kubernetes resource object references that 12898 + have been successfully applied. 12899 + properties: 12900 + entries: 12901 + description: Entries of Kubernetes resource object references. 12902 + items: 12903 + description: ResourceRef contains the information necessary 12904 + to locate a resource within a cluster. 12905 + properties: 12906 + id: 12907 + description: |- 12908 + ID is the string representation of the Kubernetes resource object's metadata, 12909 + in the format '<namespace>_<name>_<group>_<kind>'. 12910 + type: string 12911 + v: 12912 + description: Version is the API version of the Kubernetes 12913 + resource object's kind. 12914 + type: string 12915 + required: 12916 + - id 12917 + - v 12918 + type: object 12919 + type: array 12920 + required: 12921 + - entries 12922 + type: object 12923 + lastAppliedOriginRevision: 12924 + description: |- 12925 + The last successfully applied origin revision. 12926 + Equals the origin revision of the applied Artifact from the referenced Source. 12927 + Usually present on the Metadata of the applied Artifact and depends on the 12928 + Source type, e.g. for OCI it's the value associated with the key 12929 + "org.opencontainers.image.revision". 12930 + type: string 12931 + lastAppliedRevision: 12932 + description: |- 12933 + The last successfully applied revision. 12934 + Equals the Revision of the applied Artifact from the referenced Source. 12935 + type: string 12936 + lastAttemptedRevision: 12937 + description: LastAttemptedRevision is the revision of the last reconciliation 12938 + attempt. 12939 + type: string 12940 + lastHandledReconcileAt: 12941 + description: |- 12942 + LastHandledReconcileAt holds the value of the most recent 12943 + reconcile request value, so a change of the annotation value 12944 + can be detected. 12945 + type: string 12946 + observedGeneration: 12947 + description: ObservedGeneration is the last reconciled generation. 12948 + format: int64 12949 + type: integer 12950 + type: object 12951 + type: object 12952 + served: true 12953 + storage: true 12954 + subresources: 12955 + status: {} 12956 + - additionalPrinterColumns: 12957 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 12958 + name: Ready 12959 + type: string 12960 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 12961 + name: Status 12962 + type: string 12963 + - jsonPath: .metadata.creationTimestamp 12964 + name: Age 12965 + type: date 12966 + deprecated: true 12967 + deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1 12968 + name: v1beta1 12969 + schema: 12970 + openAPIV3Schema: 12971 + description: Kustomization is the Schema for the kustomizations API. 12972 + properties: 12973 + apiVersion: 12974 + description: |- 12975 + APIVersion defines the versioned schema of this representation of an object. 12976 + Servers should convert recognized schemas to the latest internal value, and 12977 + may reject unrecognized values. 12978 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 12979 + type: string 12980 + kind: 12981 + description: |- 12982 + Kind is a string value representing the REST resource this object represents. 12983 + Servers may infer this from the endpoint the client submits requests to. 12984 + Cannot be updated. 12985 + In CamelCase. 12986 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 12987 + type: string 12988 + metadata: 12989 + type: object 12990 + spec: 12991 + description: KustomizationSpec defines the desired state of a kustomization. 12992 + properties: 12993 + decryption: 12994 + description: Decrypt Kubernetes secrets before applying them on the 12995 + cluster. 12996 + properties: 12997 + provider: 12998 + description: Provider is the name of the decryption engine. 12999 + enum: 13000 + - sops 13001 + type: string 13002 + secretRef: 13003 + description: The secret name containing the private OpenPGP keys 13004 + used for decryption. 13005 + properties: 13006 + name: 13007 + description: Name of the referent. 13008 + type: string 13009 + required: 13010 + - name 13011 + type: object 13012 + required: 13013 + - provider 13014 + type: object 13015 + dependsOn: 13016 + description: |- 13017 + DependsOn may contain a meta.NamespacedObjectReference slice 13018 + with references to Kustomization resources that must be ready before this 13019 + Kustomization can be reconciled. 13020 + items: 13021 + description: |- 13022 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 13023 + namespace. 13024 + properties: 13025 + name: 13026 + description: Name of the referent. 13027 + type: string 13028 + namespace: 13029 + description: Namespace of the referent, when not specified it 13030 + acts as LocalObjectReference. 13031 + type: string 13032 + required: 13033 + - name 13034 + type: object 13035 + type: array 13036 + force: 13037 + default: false 13038 + description: |- 13039 + Force instructs the controller to recreate resources 13040 + when patching fails due to an immutable field change. 13041 + type: boolean 13042 + healthChecks: 13043 + description: A list of resources to be included in the health assessment. 13044 + items: 13045 + description: |- 13046 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 13047 + in any namespace. 13048 + properties: 13049 + apiVersion: 13050 + description: API version of the referent, if not specified the 13051 + Kubernetes preferred version will be used. 13052 + type: string 13053 + kind: 13054 + description: Kind of the referent. 13055 + type: string 13056 + name: 13057 + description: Name of the referent. 13058 + type: string 13059 + namespace: 13060 + description: Namespace of the referent, when not specified it 13061 + acts as LocalObjectReference. 13062 + type: string 13063 + required: 13064 + - kind 13065 + - name 13066 + type: object 13067 + type: array 13068 + images: 13069 + description: |- 13070 + Images is a list of (image name, new name, new tag or digest) 13071 + for changing image names, tags or digests. This can also be achieved with a 13072 + patch, but this operator is simpler to specify. 13073 + items: 13074 + description: Image contains an image name, a new name, a new tag 13075 + or digest, which will replace the original name and tag. 13076 + properties: 13077 + digest: 13078 + description: |- 13079 + Digest is the value used to replace the original image tag. 13080 + If digest is present NewTag value is ignored. 13081 + type: string 13082 + name: 13083 + description: Name is a tag-less image name. 13084 + type: string 13085 + newName: 13086 + description: NewName is the value used to replace the original 13087 + name. 13088 + type: string 13089 + newTag: 13090 + description: NewTag is the value used to replace the original 13091 + tag. 13092 + type: string 13093 + required: 13094 + - name 13095 + type: object 13096 + type: array 13097 + interval: 13098 + description: The interval at which to reconcile the Kustomization. 13099 + type: string 13100 + kubeConfig: 13101 + description: |- 13102 + The KubeConfig for reconciling the Kustomization on a remote cluster. 13103 + When specified, KubeConfig takes precedence over ServiceAccountName. 13104 + properties: 13105 + secretRef: 13106 + description: |- 13107 + SecretRef holds the name to a secret that contains a 'value' key with 13108 + the kubeconfig file as the value. It must be in the same namespace as 13109 + the Kustomization. 13110 + It is recommended that the kubeconfig is self-contained, and the secret 13111 + is regularly updated if credentials such as a cloud-access-token expire. 13112 + Cloud specific `cmd-path` auth helpers will not function without adding 13113 + binaries and credentials to the Pod that is responsible for reconciling 13114 + the Kustomization. 13115 + properties: 13116 + name: 13117 + description: Name of the referent. 13118 + type: string 13119 + required: 13120 + - name 13121 + type: object 13122 + required: 13123 + - secretRef 13124 + type: object 13125 + patches: 13126 + description: |- 13127 + Strategic merge and JSON patches, defined as inline YAML objects, 13128 + capable of targeting objects based on kind, label and annotation selectors. 13129 + items: 13130 + description: |- 13131 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 13132 + be applied to. 13133 + properties: 13134 + patch: 13135 + description: |- 13136 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 13137 + an array of operation objects. 13138 + type: string 13139 + target: 13140 + description: Target points to the resources that the patch document 13141 + should be applied to. 13142 + properties: 13143 + annotationSelector: 13144 + description: |- 13145 + AnnotationSelector is a string that follows the label selection expression 13146 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13147 + It matches with the resource annotations. 13148 + type: string 13149 + group: 13150 + description: |- 13151 + Group is the API group to select resources from. 13152 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 13153 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13154 + type: string 13155 + kind: 13156 + description: |- 13157 + Kind of the API Group to select resources from. 13158 + Together with Group and Version it is capable of unambiguously 13159 + identifying and/or selecting resources. 13160 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13161 + type: string 13162 + labelSelector: 13163 + description: |- 13164 + LabelSelector is a string that follows the label selection expression 13165 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13166 + It matches with the resource labels. 13167 + type: string 13168 + name: 13169 + description: Name to match resources with. 13170 + type: string 13171 + namespace: 13172 + description: Namespace to select resources from. 13173 + type: string 13174 + version: 13175 + description: |- 13176 + Version of the API Group to select resources from. 13177 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 13178 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13179 + type: string 13180 + type: object 13181 + required: 13182 + - patch 13183 + type: object 13184 + type: array 13185 + patchesJson6902: 13186 + description: JSON 6902 patches, defined as inline YAML objects. 13187 + items: 13188 + description: JSON6902Patch contains a JSON6902 patch and the target 13189 + the patch should be applied to. 13190 + properties: 13191 + patch: 13192 + description: Patch contains the JSON6902 patch document with 13193 + an array of operation objects. 13194 + items: 13195 + description: |- 13196 + JSON6902 is a JSON6902 operation object. 13197 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 13198 properties: 13199 - conditions: 13200 - description: Conditions holds the conditions for the HelmRelease. 13201 - items: 13202 - description: Condition contains details for one aspect of the current state of this API 13203 - Resource. 13204 - properties: 13205 - lastTransitionTime: 13206 - description: |- 13207 - lastTransitionTime is the last time the condition transitioned from one status to another. 13208 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13209 - format: date-time 13210 - type: string 13211 - message: 13212 - description: |- 13213 - message is a human readable message indicating details about the transition. 13214 - This may be an empty string. 13215 - maxLength: 32768 13216 - type: string 13217 - observedGeneration: 13218 - description: |- 13219 - observedGeneration represents the .metadata.generation that the condition was set based upon. 13220 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13221 - with respect to the current state of the instance. 13222 - format: int64 13223 - minimum: 0 13224 - type: integer 13225 - reason: 13226 - description: |- 13227 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 13228 - Producers of specific condition types may define expected values and meanings for this field, 13229 - and whether the values are considered a guaranteed API. 13230 - The value should be a CamelCase string. 13231 - This field may not be empty. 13232 - maxLength: 1024 13233 - minLength: 1 13234 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13235 - type: string 13236 - status: 13237 - description: status of the condition, one of True, False, Unknown. 13238 - enum: 13239 - - "True" 13240 - - "False" 13241 - - Unknown 13242 - type: string 13243 - type: 13244 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 13245 - maxLength: 316 13246 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13247 - type: string 13248 - required: 13249 - - lastTransitionTime 13250 - - message 13251 - - reason 13252 - - status 13253 - - type 13254 - type: object 13255 - type: array 13256 - failures: 13257 - description: |- 13258 - Failures is the reconciliation failure count against the latest desired 13259 - state. It is reset after a successful reconciliation. 13260 - format: int64 13261 - type: integer 13262 - helmChart: 13263 - description: |- 13264 - HelmChart is the namespaced name of the HelmChart resource created by 13265 - the controller for the HelmRelease. 13266 - type: string 13267 - history: 13268 - description: |- 13269 - History holds the history of Helm releases performed for this HelmRelease 13270 - up to the last successfully completed release. 13271 - items: 13272 - description: |- 13273 - Snapshot captures a point-in-time copy of the status information for a Helm release, 13274 - as managed by the controller. 13275 - properties: 13276 - apiVersion: 13277 - description: |- 13278 - APIVersion is the API version of the Snapshot. 13279 - Provisional: when the calculation method of the Digest field is changed, 13280 - this field will be used to distinguish between the old and new methods. 13281 - type: string 13282 - appVersion: 13283 - description: AppVersion is the chart app version of the release object in storage. 13284 - type: string 13285 - chartName: 13286 - description: ChartName is the chart name of the release object in storage. 13287 - type: string 13288 - chartVersion: 13289 - description: |- 13290 - ChartVersion is the chart version of the release object in 13291 - storage. 13292 - type: string 13293 - configDigest: 13294 - description: |- 13295 - ConfigDigest is the checksum of the config (better known as 13296 - "values") of the release object in storage. 13297 - It has the format of `<algo>:<checksum>`. 13298 - type: string 13299 - deleted: 13300 - description: Deleted is when the release was deleted. 13301 - format: date-time 13302 - type: string 13303 - digest: 13304 - description: |- 13305 - Digest is the checksum of the release object in storage. 13306 - It has the format of `<algo>:<checksum>`. 13307 - type: string 13308 - firstDeployed: 13309 - description: FirstDeployed is when the release was first deployed. 13310 - format: date-time 13311 - type: string 13312 - lastDeployed: 13313 - description: LastDeployed is when the release was last deployed. 13314 - format: date-time 13315 - type: string 13316 - name: 13317 - description: Name is the name of the release. 13318 - type: string 13319 - namespace: 13320 - description: Namespace is the namespace the release is deployed to. 13321 - type: string 13322 - ociDigest: 13323 - description: OCIDigest is the digest of the OCI artifact associated with the release. 13324 - type: string 13325 - status: 13326 - description: Status is the current state of the release. 13327 - type: string 13328 - testHooks: 13329 - additionalProperties: 13330 - description: |- 13331 - TestHookStatus holds the status information for a test hook as observed 13332 - to be run by the controller. 13333 - properties: 13334 - lastCompleted: 13335 - description: LastCompleted is the time the test hook last completed. 13336 - format: date-time 13337 - type: string 13338 - lastStarted: 13339 - description: LastStarted is the time the test hook was last started. 13340 - format: date-time 13341 - type: string 13342 - phase: 13343 - description: Phase the test hook was observed to be in. 13344 - type: string 13345 - type: object 13346 - description: |- 13347 - TestHooks is the list of test hooks for the release as observed to be 13348 - run by the controller. 13349 - type: object 13350 - version: 13351 - description: Version is the version of the release object in storage. 13352 - type: integer 13353 - required: 13354 - - chartName 13355 - - chartVersion 13356 - - configDigest 13357 - - digest 13358 - - firstDeployed 13359 - - lastDeployed 13360 - - name 13361 - - namespace 13362 - - status 13363 - - version 13364 - type: object 13365 - type: array 13366 - installFailures: 13367 - description: |- 13368 - InstallFailures is the install failure count against the latest desired 13369 - state. It is reset after a successful reconciliation. 13370 - format: int64 13371 - type: integer 13372 - lastAttemptedConfigDigest: 13373 - description: |- 13374 - LastAttemptedConfigDigest is the digest for the config (better known as 13375 - "values") of the last reconciliation attempt. 13376 - type: string 13377 - lastAttemptedGeneration: 13378 - description: |- 13379 - LastAttemptedGeneration is the last generation the controller attempted 13380 - to reconcile. 13381 - format: int64 13382 - type: integer 13383 - lastAttemptedReleaseAction: 13384 - description: |- 13385 - LastAttemptedReleaseAction is the last release action performed for this 13386 - HelmRelease. It is used to determine the active remediation strategy. 13387 - enum: 13388 - - install 13389 - - upgrade 13390 - type: string 13391 - lastAttemptedRevision: 13392 - description: |- 13393 - LastAttemptedRevision is the Source revision of the last reconciliation 13394 - attempt. For OCIRepository sources, the 12 first characters of the digest are 13395 - appended to the chart version e.g. "1.2.3+1234567890ab". 13396 - type: string 13397 - lastAttemptedRevisionDigest: 13398 - description: |- 13399 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 13400 - This is only set for OCIRepository sources. 13401 - type: string 13402 - lastAttemptedValuesChecksum: 13403 - description: |- 13404 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 13405 - reconciliation attempt. 13406 - Deprecated: Use LastAttemptedConfigDigest instead. 13407 - type: string 13408 - lastHandledForceAt: 13409 - description: |- 13410 - LastHandledForceAt holds the value of the most recent force request 13411 - value, so a change of the annotation value can be detected. 13412 - type: string 13413 - lastHandledReconcileAt: 13414 - description: |- 13415 - LastHandledReconcileAt holds the value of the most recent 13416 - reconcile request value, so a change of the annotation value 13417 - can be detected. 13418 - type: string 13419 - lastHandledResetAt: 13420 - description: |- 13421 - LastHandledResetAt holds the value of the most recent reset request 13422 - value, so a change of the annotation value can be detected. 13423 - type: string 13424 - lastReleaseRevision: 13425 - description: |- 13426 - LastReleaseRevision is the revision of the last successful Helm release. 13427 - Deprecated: Use History instead. 13428 - type: integer 13429 - observedGeneration: 13430 - description: ObservedGeneration is the last observed generation. 13431 - format: int64 13432 - type: integer 13433 - observedPostRenderersDigest: 13434 - description: |- 13435 - ObservedPostRenderersDigest is the digest for the post-renderers of 13436 - the last successful reconciliation attempt. 13437 - type: string 13438 - storageNamespace: 13439 - description: |- 13440 - StorageNamespace is the namespace of the Helm release storage for the 13441 - current release. 13442 - maxLength: 63 13443 - minLength: 1 13444 - type: string 13445 - upgradeFailures: 13446 - description: |- 13447 - UpgradeFailures is the upgrade failure count against the latest desired 13448 - state. It is reset after a successful reconciliation. 13449 - format: int64 13450 - type: integer 13451 + from: 13452 + description: |- 13453 + From contains a JSON-pointer value that references a location within the target document where the operation is 13454 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 13455 + type: string 13456 + op: 13457 + description: |- 13458 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 13459 + "test". 13460 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 13461 + enum: 13462 + - test 13463 + - remove 13464 + - add 13465 + - replace 13466 + - move 13467 + - copy 13468 + type: string 13469 + path: 13470 + description: |- 13471 + Path contains the JSON-pointer value that references a location within the target document where the operation 13472 + is performed. The meaning of the value depends on the value of Op. 13473 + type: string 13474 + value: 13475 + description: |- 13476 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 13477 + account by all operations. 13478 + x-kubernetes-preserve-unknown-fields: true 13479 + required: 13480 + - op 13481 + - path 13482 type: object 13483 + type: array 13484 + target: 13485 + description: Target points to the resources that the patch document 13486 + should be applied to. 13487 + properties: 13488 + annotationSelector: 13489 + description: |- 13490 + AnnotationSelector is a string that follows the label selection expression 13491 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13492 + It matches with the resource annotations. 13493 + type: string 13494 + group: 13495 + description: |- 13496 + Group is the API group to select resources from. 13497 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 13498 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13499 + type: string 13500 + kind: 13501 + description: |- 13502 + Kind of the API Group to select resources from. 13503 + Together with Group and Version it is capable of unambiguously 13504 + identifying and/or selecting resources. 13505 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13506 + type: string 13507 + labelSelector: 13508 + description: |- 13509 + LabelSelector is a string that follows the label selection expression 13510 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13511 + It matches with the resource labels. 13512 + type: string 13513 + name: 13514 + description: Name to match resources with. 13515 + type: string 13516 + namespace: 13517 + description: Namespace to select resources from. 13518 + type: string 13519 + version: 13520 + description: |- 13521 + Version of the API Group to select resources from. 13522 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 13523 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13524 + type: string 13525 + type: object 13526 + required: 13527 + - patch 13528 + - target 13529 + type: object 13530 + type: array 13531 + patchesStrategicMerge: 13532 + description: Strategic merge patches, defined as inline YAML objects. 13533 + items: 13534 + x-kubernetes-preserve-unknown-fields: true 13535 + type: array 13536 + path: 13537 + description: |- 13538 + Path to the directory containing the kustomization.yaml file, or the 13539 + set of plain YAMLs a kustomization.yaml should be generated for. 13540 + Defaults to 'None', which translates to the root path of the SourceRef. 13541 + type: string 13542 + postBuild: 13543 + description: |- 13544 + PostBuild describes which actions to perform on the YAML manifest 13545 + generated by building the kustomize overlay. 13546 + properties: 13547 + substitute: 13548 + additionalProperties: 13549 + type: string 13550 + description: |- 13551 + Substitute holds a map of key/value pairs. 13552 + The variables defined in your YAML manifests 13553 + that match any of the keys defined in the map 13554 + will be substituted with the set value. 13555 + Includes support for bash string replacement functions 13556 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 13557 + type: object 13558 + substituteFrom: 13559 + description: |- 13560 + SubstituteFrom holds references to ConfigMaps and Secrets containing 13561 + the variables and their values to be substituted in the YAML manifests. 13562 + The ConfigMap and the Secret data keys represent the var names and they 13563 + must match the vars declared in the manifests for the substitution to happen. 13564 + items: 13565 + description: |- 13566 + SubstituteReference contains a reference to a resource containing 13567 + the variables name and value. 13568 + properties: 13569 + kind: 13570 + description: Kind of the values referent, valid values are 13571 + ('Secret', 'ConfigMap'). 13572 + enum: 13573 + - Secret 13574 + - ConfigMap 13575 + type: string 13576 + name: 13577 + description: |- 13578 + Name of the values referent. Should reside in the same namespace as the 13579 + referring resource. 13580 + maxLength: 253 13581 + minLength: 1 13582 + type: string 13583 + required: 13584 + - kind 13585 + - name 13586 + type: object 13587 + type: array 13588 + type: object 13589 + prune: 13590 + description: Prune enables garbage collection. 13591 + type: boolean 13592 + retryInterval: 13593 + description: |- 13594 + The interval at which to retry a previously failed reconciliation. 13595 + When not specified, the controller uses the KustomizationSpec.Interval 13596 + value to retry failures. 13597 + type: string 13598 + serviceAccountName: 13599 + description: |- 13600 + The name of the Kubernetes service account to impersonate 13601 + when reconciling this Kustomization. 13602 + type: string 13603 + sourceRef: 13604 + description: Reference of the source where the kustomization file 13605 + is. 13606 + properties: 13607 + apiVersion: 13608 + description: API version of the referent 13609 + type: string 13610 + kind: 13611 + description: Kind of the referent 13612 + enum: 13613 + - GitRepository 13614 + - Bucket 13615 + type: string 13616 + name: 13617 + description: Name of the referent 13618 + type: string 13619 + namespace: 13620 + description: Namespace of the referent, defaults to the Kustomization 13621 + namespace 13622 + type: string 13623 + required: 13624 + - kind 13625 + - name 13626 + type: object 13627 + suspend: 13628 + description: |- 13629 + This flag tells the controller to suspend subsequent kustomize executions, 13630 + it does not apply to already started executions. Defaults to false. 13631 + type: boolean 13632 + targetNamespace: 13633 + description: |- 13634 + TargetNamespace sets or overrides the namespace in the 13635 + kustomization.yaml file. 13636 + maxLength: 63 13637 + minLength: 1 13638 + type: string 13639 + timeout: 13640 + description: |- 13641 + Timeout for validation, apply and health checking operations. 13642 + Defaults to 'Interval' duration. 13643 + type: string 13644 + validation: 13645 + description: |- 13646 + Validate the Kubernetes objects before applying them on the cluster. 13647 + The validation strategy can be 'client' (local dry-run), 'server' 13648 + (APIServer dry-run) or 'none'. 13649 + When 'Force' is 'true', validation will fallback to 'client' if set to 13650 + 'server' because server-side validation is not supported in this scenario. 13651 + enum: 13652 + - none 13653 + - client 13654 + - server 13655 + type: string 13656 + required: 13657 + - interval 13658 + - prune 13659 + - sourceRef 13660 + type: object 13661 + status: 13662 + default: 13663 + observedGeneration: -1 13664 + description: KustomizationStatus defines the observed state of a kustomization. 13665 + properties: 13666 + conditions: 13667 + items: 13668 + description: Condition contains details for one aspect of the current 13669 + state of this API Resource. 13670 + properties: 13671 + lastTransitionTime: 13672 + description: |- 13673 + lastTransitionTime is the last time the condition transitioned from one status to another. 13674 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13675 + format: date-time 13676 + type: string 13677 + message: 13678 + description: |- 13679 + message is a human readable message indicating details about the transition. 13680 + This may be an empty string. 13681 + maxLength: 32768 13682 + type: string 13683 + observedGeneration: 13684 + description: |- 13685 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13686 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13687 + with respect to the current state of the instance. 13688 + format: int64 13689 + minimum: 0 13690 + type: integer 13691 + reason: 13692 + description: |- 13693 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13694 + Producers of specific condition types may define expected values and meanings for this field, 13695 + and whether the values are considered a guaranteed API. 13696 + The value should be a CamelCase string. 13697 + This field may not be empty. 13698 + maxLength: 1024 13699 + minLength: 1 13700 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13701 + type: string 13702 + status: 13703 + description: status of the condition, one of True, False, Unknown. 13704 + enum: 13705 + - "True" 13706 + - "False" 13707 + - Unknown 13708 + type: string 13709 + type: 13710 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13711 + maxLength: 316 13712 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13713 + type: string 13714 + required: 13715 + - lastTransitionTime 13716 + - message 13717 + - reason 13718 + - status 13719 + - type 13720 + type: object 13721 + type: array 13722 + lastAppliedRevision: 13723 + description: |- 13724 + The last successfully applied revision. 13725 + The revision format for Git sources is <branch|tag>/<commit-sha>. 13726 + type: string 13727 + lastAttemptedRevision: 13728 + description: LastAttemptedRevision is the revision of the last reconciliation 13729 + attempt. 13730 + type: string 13731 + lastHandledReconcileAt: 13732 + description: |- 13733 + LastHandledReconcileAt holds the value of the most recent 13734 + reconcile request value, so a change of the annotation value 13735 + can be detected. 13736 + type: string 13737 + observedGeneration: 13738 + description: ObservedGeneration is the last reconciled generation. 13739 + format: int64 13740 + type: integer 13741 + snapshot: 13742 + description: The last successfully applied revision metadata. 13743 + properties: 13744 + checksum: 13745 + description: The manifests sha1 checksum. 13746 + type: string 13747 + entries: 13748 + description: A list of Kubernetes kinds grouped by namespace. 13749 + items: 13750 + description: |- 13751 + Snapshot holds the metadata of namespaced 13752 + Kubernetes objects 13753 + properties: 13754 + kinds: 13755 + additionalProperties: 13756 + type: string 13757 + description: The list of Kubernetes kinds. 13758 + type: object 13759 + namespace: 13760 + description: The namespace of this entry. 13761 + type: string 13762 + required: 13763 + - kinds 13764 + type: object 13765 + type: array 13766 + required: 13767 + - checksum 13768 + - entries 13769 + type: object 13770 + type: object 13771 + type: object 13772 + served: true 13773 + storage: false 13774 + subresources: 13775 + status: {} 13776 + - additionalPrinterColumns: 13777 + - jsonPath: .metadata.creationTimestamp 13778 + name: Age 13779 + type: date 13780 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13781 + name: Ready 13782 + type: string 13783 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13784 + name: Status 13785 + type: string 13786 + deprecated: true 13787 + deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 13788 + name: v1beta2 13789 + schema: 13790 + openAPIV3Schema: 13791 + description: Kustomization is the Schema for the kustomizations API. 13792 + properties: 13793 + apiVersion: 13794 + description: |- 13795 + APIVersion defines the versioned schema of this representation of an object. 13796 + Servers should convert recognized schemas to the latest internal value, and 13797 + may reject unrecognized values. 13798 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13799 + type: string 13800 + kind: 13801 + description: |- 13802 + Kind is a string value representing the REST resource this object represents. 13803 + Servers may infer this from the endpoint the client submits requests to. 13804 + Cannot be updated. 13805 + In CamelCase. 13806 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13807 + type: string 13808 + metadata: 13809 + type: object 13810 + spec: 13811 + description: KustomizationSpec defines the configuration to calculate 13812 + the desired state from a Source using Kustomize. 13813 + properties: 13814 + commonMetadata: 13815 + description: |- 13816 + CommonMetadata specifies the common labels and annotations that are applied to all resources. 13817 + Any existing label or annotation will be overridden if its key matches a common one. 13818 + properties: 13819 + annotations: 13820 + additionalProperties: 13821 + type: string 13822 + description: Annotations to be added to the object's metadata. 13823 + type: object 13824 + labels: 13825 + additionalProperties: 13826 + type: string 13827 + description: Labels to be added to the object's metadata. 13828 + type: object 13829 type: object 13830 - served: true 13831 - storage: true 13832 - subresources: 13833 - status: {} 13834 - - additionalPrinterColumns: 13835 - - jsonPath: .metadata.creationTimestamp 13836 - name: Age 13837 - type: date 13838 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 13839 - name: Ready 13840 - type: string 13841 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 13842 - name: Status 13843 - type: string 13844 - deprecated: true 13845 - deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2 13846 - name: v2beta1 13847 - schema: 13848 - openAPIV3Schema: 13849 - description: HelmRelease is the Schema for the helmreleases API 13850 + components: 13851 + description: Components specifies relative paths to specifications 13852 + of other Components. 13853 + items: 13854 + type: string 13855 + type: array 13856 + decryption: 13857 + description: Decrypt Kubernetes secrets before applying them on the 13858 + cluster. 13859 properties: 13860 + provider: 13861 + description: Provider is the name of the decryption engine. 13862 + enum: 13863 + - sops 13864 + type: string 13865 + secretRef: 13866 + description: The secret name containing the private OpenPGP keys 13867 + used for decryption. 13868 + properties: 13869 + name: 13870 + description: Name of the referent. 13871 + type: string 13872 + required: 13873 + - name 13874 + type: object 13875 + required: 13876 + - provider 13877 + type: object 13878 + dependsOn: 13879 + description: |- 13880 + DependsOn may contain a meta.NamespacedObjectReference slice 13881 + with references to Kustomization resources that must be ready before this 13882 + Kustomization can be reconciled. 13883 + items: 13884 + description: |- 13885 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 13886 + namespace. 13887 + properties: 13888 + name: 13889 + description: Name of the referent. 13890 + type: string 13891 + namespace: 13892 + description: Namespace of the referent, when not specified it 13893 + acts as LocalObjectReference. 13894 + type: string 13895 + required: 13896 + - name 13897 + type: object 13898 + type: array 13899 + force: 13900 + default: false 13901 + description: |- 13902 + Force instructs the controller to recreate resources 13903 + when patching fails due to an immutable field change. 13904 + type: boolean 13905 + healthChecks: 13906 + description: A list of resources to be included in the health assessment. 13907 + items: 13908 + description: |- 13909 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 13910 + in any namespace. 13911 + properties: 13912 apiVersion: 13913 + description: API version of the referent, if not specified the 13914 + Kubernetes preferred version will be used. 13915 + type: string 13916 + kind: 13917 + description: Kind of the referent. 13918 + type: string 13919 + name: 13920 + description: Name of the referent. 13921 + type: string 13922 + namespace: 13923 + description: Namespace of the referent, when not specified it 13924 + acts as LocalObjectReference. 13925 + type: string 13926 + required: 13927 + - kind 13928 + - name 13929 + type: object 13930 + type: array 13931 + images: 13932 + description: |- 13933 + Images is a list of (image name, new name, new tag or digest) 13934 + for changing image names, tags or digests. This can also be achieved with a 13935 + patch, but this operator is simpler to specify. 13936 + items: 13937 + description: Image contains an image name, a new name, a new tag 13938 + or digest, which will replace the original name and tag. 13939 + properties: 13940 + digest: 13941 + description: |- 13942 + Digest is the value used to replace the original image tag. 13943 + If digest is present NewTag value is ignored. 13944 + type: string 13945 + name: 13946 + description: Name is a tag-less image name. 13947 + type: string 13948 + newName: 13949 + description: NewName is the value used to replace the original 13950 + name. 13951 + type: string 13952 + newTag: 13953 + description: NewTag is the value used to replace the original 13954 + tag. 13955 + type: string 13956 + required: 13957 + - name 13958 + type: object 13959 + type: array 13960 + interval: 13961 + description: The interval at which to reconcile the Kustomization. 13962 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13963 + type: string 13964 + kubeConfig: 13965 + description: |- 13966 + The KubeConfig for reconciling the Kustomization on a remote cluster. 13967 + When used in combination with KustomizationSpec.ServiceAccountName, 13968 + forces the controller to act on behalf of that Service Account at the 13969 + target cluster. 13970 + If the --default-service-account flag is set, its value will be used as 13971 + a controller level fallback for when KustomizationSpec.ServiceAccountName 13972 + is empty. 13973 + properties: 13974 + secretRef: 13975 + description: |- 13976 + SecretRef holds the name of a secret that contains a key with 13977 + the kubeconfig file as the value. If no key is set, the key will default 13978 + to 'value'. 13979 + It is recommended that the kubeconfig is self-contained, and the secret 13980 + is regularly updated if credentials such as a cloud-access-token expire. 13981 + Cloud specific `cmd-path` auth helpers will not function without adding 13982 + binaries and credentials to the Pod that is responsible for reconciling 13983 + Kubernetes resources. 13984 + properties: 13985 + key: 13986 + description: Key in the Secret, when not specified an implementation-specific 13987 + default key is used. 13988 + type: string 13989 + name: 13990 + description: Name of the Secret. 13991 + type: string 13992 + required: 13993 + - name 13994 + type: object 13995 + required: 13996 + - secretRef 13997 + type: object 13998 + patches: 13999 + description: |- 14000 + Strategic merge and JSON patches, defined as inline YAML objects, 14001 + capable of targeting objects based on kind, label and annotation selectors. 14002 + items: 14003 + description: |- 14004 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 14005 + be applied to. 14006 + properties: 14007 + patch: 14008 + description: |- 14009 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 14010 + an array of operation objects. 14011 + type: string 14012 + target: 14013 + description: Target points to the resources that the patch document 14014 + should be applied to. 14015 + properties: 14016 + annotationSelector: 14017 + description: |- 14018 + AnnotationSelector is a string that follows the label selection expression 14019 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14020 + It matches with the resource annotations. 14021 + type: string 14022 + group: 14023 + description: |- 14024 + Group is the API group to select resources from. 14025 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14026 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14027 + type: string 14028 + kind: 14029 + description: |- 14030 + Kind of the API Group to select resources from. 14031 + Together with Group and Version it is capable of unambiguously 14032 + identifying and/or selecting resources. 14033 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14034 + type: string 14035 + labelSelector: 14036 + description: |- 14037 + LabelSelector is a string that follows the label selection expression 14038 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14039 + It matches with the resource labels. 14040 + type: string 14041 + name: 14042 + description: Name to match resources with. 14043 + type: string 14044 + namespace: 14045 + description: Namespace to select resources from. 14046 + type: string 14047 + version: 14048 + description: |- 14049 + Version of the API Group to select resources from. 14050 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14051 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14052 + type: string 14053 + type: object 14054 + required: 14055 + - patch 14056 + type: object 14057 + type: array 14058 + patchesJson6902: 14059 + description: |- 14060 + JSON 6902 patches, defined as inline YAML objects. 14061 + Deprecated: Use Patches instead. 14062 + items: 14063 + description: JSON6902Patch contains a JSON6902 patch and the target 14064 + the patch should be applied to. 14065 + properties: 14066 + patch: 14067 + description: Patch contains the JSON6902 patch document with 14068 + an array of operation objects. 14069 + items: 14070 + description: |- 14071 + JSON6902 is a JSON6902 operation object. 14072 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 14073 + properties: 14074 + from: 14075 + description: |- 14076 + From contains a JSON-pointer value that references a location within the target document where the operation is 14077 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 14078 + type: string 14079 + op: 14080 + description: |- 14081 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 14082 + "test". 14083 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 14084 + enum: 14085 + - test 14086 + - remove 14087 + - add 14088 + - replace 14089 + - move 14090 + - copy 14091 + type: string 14092 + path: 14093 + description: |- 14094 + Path contains the JSON-pointer value that references a location within the target document where the operation 14095 + is performed. The meaning of the value depends on the value of Op. 14096 + type: string 14097 + value: 14098 + description: |- 14099 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 14100 + account by all operations. 14101 + x-kubernetes-preserve-unknown-fields: true 14102 + required: 14103 + - op 14104 + - path 14105 + type: object 14106 + type: array 14107 + target: 14108 + description: Target points to the resources that the patch document 14109 + should be applied to. 14110 + properties: 14111 + annotationSelector: 14112 + description: |- 14113 + AnnotationSelector is a string that follows the label selection expression 14114 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14115 + It matches with the resource annotations. 14116 + type: string 14117 + group: 14118 + description: |- 14119 + Group is the API group to select resources from. 14120 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14121 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14122 + type: string 14123 + kind: 14124 + description: |- 14125 + Kind of the API Group to select resources from. 14126 + Together with Group and Version it is capable of unambiguously 14127 + identifying and/or selecting resources. 14128 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14129 + type: string 14130 + labelSelector: 14131 + description: |- 14132 + LabelSelector is a string that follows the label selection expression 14133 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14134 + It matches with the resource labels. 14135 + type: string 14136 + name: 14137 + description: Name to match resources with. 14138 + type: string 14139 + namespace: 14140 + description: Namespace to select resources from. 14141 + type: string 14142 + version: 14143 + description: |- 14144 + Version of the API Group to select resources from. 14145 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14146 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14147 + type: string 14148 + type: object 14149 + required: 14150 + - patch 14151 + - target 14152 + type: object 14153 + type: array 14154 + patchesStrategicMerge: 14155 + description: |- 14156 + Strategic merge patches, defined as inline YAML objects. 14157 + Deprecated: Use Patches instead. 14158 + items: 14159 + x-kubernetes-preserve-unknown-fields: true 14160 + type: array 14161 + path: 14162 + description: |- 14163 + Path to the directory containing the kustomization.yaml file, or the 14164 + set of plain YAMLs a kustomization.yaml should be generated for. 14165 + Defaults to 'None', which translates to the root path of the SourceRef. 14166 + type: string 14167 + postBuild: 14168 + description: |- 14169 + PostBuild describes which actions to perform on the YAML manifest 14170 + generated by building the kustomize overlay. 14171 + properties: 14172 + substitute: 14173 + additionalProperties: 14174 + type: string 14175 + description: |- 14176 + Substitute holds a map of key/value pairs. 14177 + The variables defined in your YAML manifests 14178 + that match any of the keys defined in the map 14179 + will be substituted with the set value. 14180 + Includes support for bash string replacement functions 14181 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 14182 + type: object 14183 + substituteFrom: 14184 + description: |- 14185 + SubstituteFrom holds references to ConfigMaps and Secrets containing 14186 + the variables and their values to be substituted in the YAML manifests. 14187 + The ConfigMap and the Secret data keys represent the var names and they 14188 + must match the vars declared in the manifests for the substitution to happen. 14189 + items: 14190 + description: |- 14191 + SubstituteReference contains a reference to a resource containing 14192 + the variables name and value. 14193 + properties: 14194 + kind: 14195 + description: Kind of the values referent, valid values are 14196 + ('Secret', 'ConfigMap'). 14197 + enum: 14198 + - Secret 14199 + - ConfigMap 14200 + type: string 14201 + name: 14202 + description: |- 14203 + Name of the values referent. Should reside in the same namespace as the 14204 + referring resource. 14205 + maxLength: 253 14206 + minLength: 1 14207 + type: string 14208 + optional: 14209 + default: false 14210 + description: |- 14211 + Optional indicates whether the referenced resource must exist, or whether to 14212 + tolerate its absence. If true and the referenced resource is absent, proceed 14213 + as if the resource was present but empty, without any variables defined. 14214 + type: boolean 14215 + required: 14216 + - kind 14217 + - name 14218 + type: object 14219 + type: array 14220 + type: object 14221 + prune: 14222 + description: Prune enables garbage collection. 14223 + type: boolean 14224 + retryInterval: 14225 + description: |- 14226 + The interval at which to retry a previously failed reconciliation. 14227 + When not specified, the controller uses the KustomizationSpec.Interval 14228 + value to retry failures. 14229 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14230 + type: string 14231 + serviceAccountName: 14232 + description: |- 14233 + The name of the Kubernetes service account to impersonate 14234 + when reconciling this Kustomization. 14235 + type: string 14236 + sourceRef: 14237 + description: Reference of the source where the kustomization file 14238 + is. 14239 + properties: 14240 + apiVersion: 14241 + description: API version of the referent. 14242 + type: string 14243 + kind: 14244 + description: Kind of the referent. 14245 + enum: 14246 + - OCIRepository 14247 + - GitRepository 14248 + - Bucket 14249 + type: string 14250 + name: 14251 + description: Name of the referent. 14252 + type: string 14253 + namespace: 14254 + description: Namespace of the referent, defaults to the namespace 14255 + of the Kubernetes resource object that contains the reference. 14256 + type: string 14257 + required: 14258 + - kind 14259 + - name 14260 + type: object 14261 + suspend: 14262 + description: |- 14263 + This flag tells the controller to suspend subsequent kustomize executions, 14264 + it does not apply to already started executions. Defaults to false. 14265 + type: boolean 14266 + targetNamespace: 14267 + description: |- 14268 + TargetNamespace sets or overrides the namespace in the 14269 + kustomization.yaml file. 14270 + maxLength: 63 14271 + minLength: 1 14272 + type: string 14273 + timeout: 14274 + description: |- 14275 + Timeout for validation, apply and health checking operations. 14276 + Defaults to 'Interval' duration. 14277 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14278 + type: string 14279 + validation: 14280 + description: 'Deprecated: Not used in v1beta2.' 14281 + enum: 14282 + - none 14283 + - client 14284 + - server 14285 + type: string 14286 + wait: 14287 + description: |- 14288 + Wait instructs the controller to check the health of all the reconciled resources. 14289 + When enabled, the HealthChecks are ignored. Defaults to false. 14290 + type: boolean 14291 + required: 14292 + - interval 14293 + - prune 14294 + - sourceRef 14295 + type: object 14296 + status: 14297 + default: 14298 + observedGeneration: -1 14299 + description: KustomizationStatus defines the observed state of a kustomization. 14300 + properties: 14301 + conditions: 14302 + items: 14303 + description: Condition contains details for one aspect of the current 14304 + state of this API Resource. 14305 + properties: 14306 + lastTransitionTime: 14307 + description: |- 14308 + lastTransitionTime is the last time the condition transitioned from one status to another. 14309 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 14310 + format: date-time 14311 + type: string 14312 + message: 14313 + description: |- 14314 + message is a human readable message indicating details about the transition. 14315 + This may be an empty string. 14316 + maxLength: 32768 14317 + type: string 14318 + observedGeneration: 14319 + description: |- 14320 + observedGeneration represents the .metadata.generation that the condition was set based upon. 14321 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 14322 + with respect to the current state of the instance. 14323 + format: int64 14324 + minimum: 0 14325 + type: integer 14326 + reason: 14327 + description: |- 14328 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 14329 + Producers of specific condition types may define expected values and meanings for this field, 14330 + and whether the values are considered a guaranteed API. 14331 + The value should be a CamelCase string. 14332 + This field may not be empty. 14333 + maxLength: 1024 14334 + minLength: 1 14335 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 14336 + type: string 14337 + status: 14338 + description: status of the condition, one of True, False, Unknown. 14339 + enum: 14340 + - "True" 14341 + - "False" 14342 + - Unknown 14343 + type: string 14344 + type: 14345 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 14346 + maxLength: 316 14347 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 14348 + type: string 14349 + required: 14350 + - lastTransitionTime 14351 + - message 14352 + - reason 14353 + - status 14354 + - type 14355 + type: object 14356 + type: array 14357 + inventory: 14358 + description: Inventory contains the list of Kubernetes resource object 14359 + references that have been successfully applied. 14360 + properties: 14361 + entries: 14362 + description: Entries of Kubernetes resource object references. 14363 + items: 14364 + description: ResourceRef contains the information necessary 14365 + to locate a resource within a cluster. 14366 + properties: 14367 + id: 14368 + description: |- 14369 + ID is the string representation of the Kubernetes resource object's metadata, 14370 + in the format '<namespace>_<name>_<group>_<kind>'. 14371 + type: string 14372 + v: 14373 + description: Version is the API version of the Kubernetes 14374 + resource object's kind. 14375 + type: string 14376 + required: 14377 + - id 14378 + - v 14379 + type: object 14380 + type: array 14381 + required: 14382 + - entries 14383 + type: object 14384 + lastAppliedRevision: 14385 + description: |- 14386 + The last successfully applied revision. 14387 + Equals the Revision of the applied Artifact from the referenced Source. 14388 + type: string 14389 + lastAttemptedRevision: 14390 + description: LastAttemptedRevision is the revision of the last reconciliation 14391 + attempt. 14392 + type: string 14393 + lastHandledReconcileAt: 14394 + description: |- 14395 + LastHandledReconcileAt holds the value of the most recent 14396 + reconcile request value, so a change of the annotation value 14397 + can be detected. 14398 + type: string 14399 + observedGeneration: 14400 + description: ObservedGeneration is the last reconciled generation. 14401 + format: int64 14402 + type: integer 14403 + type: object 14404 + type: object 14405 + served: true 14406 + storage: false 14407 + subresources: 14408 + status: {} 14409 +--- 14410 +apiVersion: v1 14411 +kind: ServiceAccount 14412 +metadata: 14413 + labels: 14414 + app.kubernetes.io/component: kustomize-controller 14415 + app.kubernetes.io/instance: flux-system 14416 + app.kubernetes.io/part-of: flux 14417 + app.kubernetes.io/version: v2.5.1 14418 + name: kustomize-controller 14419 + namespace: flux-system 14420 +--- 14421 +apiVersion: apps/v1 14422 +kind: Deployment 14423 +metadata: 14424 + labels: 14425 + app.kubernetes.io/component: kustomize-controller 14426 + app.kubernetes.io/instance: flux-system 14427 + app.kubernetes.io/part-of: flux 14428 + app.kubernetes.io/version: v2.5.1 14429 + control-plane: controller 14430 + name: kustomize-controller 14431 + namespace: flux-system 14432 +spec: 14433 + replicas: 1 14434 + selector: 14435 + matchLabels: 14436 + app: kustomize-controller 14437 + template: 14438 + metadata: 14439 + annotations: 14440 + prometheus.io/port: "8080" 14441 + prometheus.io/scrape: "true" 14442 + labels: 14443 + app: kustomize-controller 14444 + spec: 14445 + containers: 14446 + - args: 14447 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 14448 + - --watch-all-namespaces=true 14449 + - --log-level=info 14450 + - --log-encoding=json 14451 + - --enable-leader-election 14452 + env: 14453 + - name: RUNTIME_NAMESPACE 14454 + valueFrom: 14455 + fieldRef: 14456 + fieldPath: metadata.namespace 14457 + - name: GOMAXPROCS 14458 + valueFrom: 14459 + resourceFieldRef: 14460 + containerName: manager 14461 + resource: limits.cpu 14462 + - name: GOMEMLIMIT 14463 + valueFrom: 14464 + resourceFieldRef: 14465 + containerName: manager 14466 + resource: limits.memory 14467 + image: ghcr.io/fluxcd/kustomize-controller:v1.5.1 14468 + imagePullPolicy: IfNotPresent 14469 + livenessProbe: 14470 + httpGet: 14471 + path: /healthz 14472 + port: healthz 14473 + name: manager 14474 + ports: 14475 + - containerPort: 8080 14476 + name: http-prom 14477 + protocol: TCP 14478 + - containerPort: 9440 14479 + name: healthz 14480 + protocol: TCP 14481 + readinessProbe: 14482 + httpGet: 14483 + path: /readyz 14484 + port: healthz 14485 + resources: 14486 + limits: 14487 + cpu: 1000m 14488 + memory: 1Gi 14489 + requests: 14490 + cpu: 100m 14491 + memory: 64Mi 14492 + securityContext: 14493 + allowPrivilegeEscalation: false 14494 + capabilities: 14495 + drop: 14496 + - ALL 14497 + readOnlyRootFilesystem: true 14498 + runAsNonRoot: true 14499 + seccompProfile: 14500 + type: RuntimeDefault 14501 + volumeMounts: 14502 + - mountPath: /tmp 14503 + name: temp 14504 + nodeSelector: 14505 + kubernetes.io/os: linux 14506 + priorityClassName: system-cluster-critical 14507 + securityContext: 14508 + fsGroup: 1337 14509 + serviceAccountName: kustomize-controller 14510 + terminationGracePeriodSeconds: 60 14511 + volumes: 14512 + - emptyDir: {} 14513 + name: temp 14514 +--- 14515 +apiVersion: apiextensions.k8s.io/v1 14516 +kind: CustomResourceDefinition 14517 +metadata: 14518 + annotations: 14519 + controller-gen.kubebuilder.io/version: v0.16.1 14520 + labels: 14521 + app.kubernetes.io/component: helm-controller 14522 + app.kubernetes.io/instance: flux-system 14523 + app.kubernetes.io/part-of: flux 14524 + app.kubernetes.io/version: v2.5.1 14525 + name: helmreleases.helm.toolkit.fluxcd.io 14526 +spec: 14527 + group: helm.toolkit.fluxcd.io 14528 + names: 14529 + kind: HelmRelease 14530 + listKind: HelmReleaseList 14531 + plural: helmreleases 14532 + shortNames: 14533 + - hr 14534 + singular: helmrelease 14535 + scope: Namespaced 14536 + versions: 14537 + - additionalPrinterColumns: 14538 + - jsonPath: .metadata.creationTimestamp 14539 + name: Age 14540 + type: date 14541 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 14542 + name: Ready 14543 + type: string 14544 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 14545 + name: Status 14546 + type: string 14547 + name: v2 14548 + schema: 14549 + openAPIV3Schema: 14550 + description: HelmRelease is the Schema for the helmreleases API 14551 + properties: 14552 + apiVersion: 14553 + description: |- 14554 + APIVersion defines the versioned schema of this representation of an object. 14555 + Servers should convert recognized schemas to the latest internal value, and 14556 + may reject unrecognized values. 14557 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14558 + type: string 14559 + kind: 14560 + description: |- 14561 + Kind is a string value representing the REST resource this object represents. 14562 + Servers may infer this from the endpoint the client submits requests to. 14563 + Cannot be updated. 14564 + In CamelCase. 14565 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14566 + type: string 14567 + metadata: 14568 + type: object 14569 + spec: 14570 + description: HelmReleaseSpec defines the desired state of a Helm release. 14571 + properties: 14572 + chart: 14573 + description: |- 14574 + Chart defines the template of the v1.HelmChart that should be created 14575 + for this HelmRelease. 14576 + properties: 14577 + metadata: 14578 + description: ObjectMeta holds the template for metadata like labels 14579 + and annotations. 14580 + properties: 14581 + annotations: 14582 + additionalProperties: 14583 + type: string 14584 description: |- 14585 - APIVersion defines the versioned schema of this representation of an object. 14586 - Servers should convert recognized schemas to the latest internal value, and 14587 - may reject unrecognized values. 14588 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14589 + Annotations is an unstructured key value map stored with a resource that may be 14590 + set by external tools to store and retrieve arbitrary metadata. They are not 14591 + queryable and should be preserved when modifying objects. 14592 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 14593 + type: object 14594 + labels: 14595 + additionalProperties: 14596 + type: string 14597 + description: |- 14598 + Map of string keys and values that can be used to organize and categorize 14599 + (scope and select) objects. 14600 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 14601 + type: object 14602 + type: object 14603 + spec: 14604 + description: Spec holds the template for the v1.HelmChartSpec 14605 + for this HelmRelease. 14606 + properties: 14607 + chart: 14608 + description: The name or path the Helm chart is available 14609 + at in the SourceRef. 14610 + maxLength: 2048 14611 + minLength: 1 14612 type: string 14613 - kind: 14614 + ignoreMissingValuesFiles: 14615 + description: IgnoreMissingValuesFiles controls whether to 14616 + silently ignore missing values files rather than failing. 14617 + type: boolean 14618 + interval: 14619 description: |- 14620 - Kind is a string value representing the REST resource this object represents. 14621 - Servers may infer this from the endpoint the client submits requests to. 14622 - Cannot be updated. 14623 - In CamelCase. 14624 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14625 + Interval at which to check the v1.Source for updates. Defaults to 14626 + 'HelmReleaseSpec.Interval'. 14627 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14628 type: string 14629 - metadata: 14630 + reconcileStrategy: 14631 + default: ChartVersion 14632 + description: |- 14633 + Determines what enables the creation of a new artifact. Valid values are 14634 + ('ChartVersion', 'Revision'). 14635 + See the documentation of the values for an explanation on their behavior. 14636 + Defaults to ChartVersion when omitted. 14637 + enum: 14638 + - ChartVersion 14639 + - Revision 14640 + type: string 14641 + sourceRef: 14642 + description: The name and namespace of the v1.Source the chart 14643 + is available at. 14644 + properties: 14645 + apiVersion: 14646 + description: APIVersion of the referent. 14647 + type: string 14648 + kind: 14649 + description: Kind of the referent. 14650 + enum: 14651 + - HelmRepository 14652 + - GitRepository 14653 + - Bucket 14654 + type: string 14655 + name: 14656 + description: Name of the referent. 14657 + maxLength: 253 14658 + minLength: 1 14659 + type: string 14660 + namespace: 14661 + description: Namespace of the referent. 14662 + maxLength: 63 14663 + minLength: 1 14664 + type: string 14665 + required: 14666 + - kind 14667 + - name 14668 type: object 14669 - spec: 14670 - description: HelmReleaseSpec defines the desired state of a Helm release. 14671 + valuesFiles: 14672 + description: |- 14673 + Alternative list of values files to use as the chart values (values.yaml 14674 + is not included by default), expected to be a relative path in the SourceRef. 14675 + Values files are merged in the order of this list with the last file overriding 14676 + the first. Ignored when omitted. 14677 + items: 14678 + type: string 14679 + type: array 14680 + verify: 14681 + description: |- 14682 + Verify contains the secret name containing the trusted public keys 14683 + used to verify the signature and specifies which provider to use to check 14684 + whether OCI image is authentic. 14685 + This field is only supported for OCI sources. 14686 + Chart dependencies, which are not bundled in the umbrella chart artifact, 14687 + are not verified. 14688 properties: 14689 - chart: 14690 - description: |- 14691 - Chart defines the template of the v1beta2.HelmChart that should be created 14692 - for this HelmRelease. 14693 - properties: 14694 - metadata: 14695 - description: ObjectMeta holds the template for metadata like labels and annotations. 14696 - properties: 14697 - annotations: 14698 - additionalProperties: 14699 - type: string 14700 - description: |- 14701 - Annotations is an unstructured key value map stored with a resource that may be 14702 - set by external tools to store and retrieve arbitrary metadata. They are not 14703 - queryable and should be preserved when modifying objects. 14704 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 14705 - type: object 14706 - labels: 14707 - additionalProperties: 14708 - type: string 14709 - description: |- 14710 - Map of string keys and values that can be used to organize and categorize 14711 - (scope and select) objects. 14712 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 14713 - type: object 14714 - type: object 14715 - spec: 14716 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 14717 - properties: 14718 - chart: 14719 - description: The name or path the Helm chart is available at in the SourceRef. 14720 - type: string 14721 - interval: 14722 - description: |- 14723 - Interval at which to check the v1beta2.Source for updates. Defaults to 14724 - 'HelmReleaseSpec.Interval'. 14725 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14726 - type: string 14727 - reconcileStrategy: 14728 - default: ChartVersion 14729 - description: |- 14730 - Determines what enables the creation of a new artifact. Valid values are 14731 - ('ChartVersion', 'Revision'). 14732 - See the documentation of the values for an explanation on their behavior. 14733 - Defaults to ChartVersion when omitted. 14734 - enum: 14735 - - ChartVersion 14736 - - Revision 14737 - type: string 14738 - sourceRef: 14739 - description: The name and namespace of the v1beta2.Source the chart is available 14740 - at. 14741 - properties: 14742 - apiVersion: 14743 - description: APIVersion of the referent. 14744 - type: string 14745 - kind: 14746 - description: Kind of the referent. 14747 - enum: 14748 - - HelmRepository 14749 - - GitRepository 14750 - - Bucket 14751 - type: string 14752 - name: 14753 - description: Name of the referent. 14754 - maxLength: 253 14755 - minLength: 1 14756 - type: string 14757 - namespace: 14758 - description: Namespace of the referent. 14759 - maxLength: 63 14760 - minLength: 1 14761 - type: string 14762 - required: 14763 - - kind 14764 - - name 14765 - type: object 14766 - valuesFile: 14767 - description: |- 14768 - Alternative values file to use as the default chart values, expected to 14769 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 14770 - for backwards compatibility the file defined here is merged before the 14771 - ValuesFiles items. Ignored when omitted. 14772 - type: string 14773 - valuesFiles: 14774 - description: |- 14775 - Alternative list of values files to use as the chart values (values.yaml 14776 - is not included by default), expected to be a relative path in the SourceRef. 14777 - Values files are merged in the order of this list with the last file overriding 14778 - the first. Ignored when omitted. 14779 - items: 14780 - type: string 14781 - type: array 14782 - verify: 14783 - description: |- 14784 - Verify contains the secret name containing the trusted public keys 14785 - used to verify the signature and specifies which provider to use to check 14786 - whether OCI image is authentic. 14787 - This field is only supported for OCI sources. 14788 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 14789 - properties: 14790 - provider: 14791 - default: cosign 14792 - description: Provider specifies the technology used to sign the OCI 14793 - Helm chart. 14794 - enum: 14795 - - cosign 14796 - type: string 14797 - secretRef: 14798 - description: |- 14799 - SecretRef specifies the Kubernetes Secret containing the 14800 - trusted public keys. 14801 - properties: 14802 - name: 14803 - description: Name of the referent. 14804 - type: string 14805 - required: 14806 - - name 14807 - type: object 14808 - required: 14809 - - provider 14810 - type: object 14811 - version: 14812 - default: '*' 14813 - description: |- 14814 - Version semver expression, ignored for charts from v1beta2.GitRepository and 14815 - v1beta2.Bucket sources. Defaults to latest when omitted. 14816 - type: string 14817 - required: 14818 - - chart 14819 - - sourceRef 14820 - type: object 14821 - required: 14822 - - spec 14823 - type: object 14824 - chartRef: 14825 - description: |- 14826 - ChartRef holds a reference to a source controller resource containing the 14827 - Helm chart artifact. 14828 - 14829 - Note: this field is provisional to the v2 API, and not actively used 14830 - by v2beta1 HelmReleases. 14831 - properties: 14832 - apiVersion: 14833 - description: APIVersion of the referent. 14834 - type: string 14835 - kind: 14836 - description: Kind of the referent. 14837 - enum: 14838 - - OCIRepository 14839 - - HelmChart 14840 - type: string 14841 - name: 14842 - description: Name of the referent. 14843 - maxLength: 253 14844 - minLength: 1 14845 - type: string 14846 - namespace: 14847 - description: |- 14848 - Namespace of the referent, defaults to the namespace of the Kubernetes 14849 - resource object that contains the reference. 14850 - maxLength: 63 14851 - minLength: 1 14852 - type: string 14853 - required: 14854 - - kind 14855 - - name 14856 - type: object 14857 - dependsOn: 14858 - description: |- 14859 - DependsOn may contain a meta.NamespacedObjectReference slice with 14860 - references to HelmRelease resources that must be ready before this HelmRelease 14861 - can be reconciled. 14862 - items: 14863 - description: |- 14864 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 14865 - namespace. 14866 - properties: 14867 - name: 14868 - description: Name of the referent. 14869 - type: string 14870 - namespace: 14871 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 14872 - type: string 14873 - required: 14874 - - name 14875 - type: object 14876 - type: array 14877 - driftDetection: 14878 - description: |- 14879 - DriftDetection holds the configuration for detecting and handling 14880 - differences between the manifest in the Helm storage and the resources 14881 - currently existing in the cluster. 14882 - 14883 - Note: this field is provisional to the v2beta2 API, and not actively used 14884 - by v2beta1 HelmReleases. 14885 - properties: 14886 - ignore: 14887 - description: |- 14888 - Ignore contains a list of rules for specifying which changes to ignore 14889 - during diffing. 14890 - items: 14891 - description: |- 14892 - IgnoreRule defines a rule to selectively disregard specific changes during 14893 - the drift detection process. 14894 - properties: 14895 - paths: 14896 - description: |- 14897 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 14898 - consideration in a Kubernetes object. 14899 - items: 14900 - type: string 14901 - type: array 14902 - target: 14903 - description: |- 14904 - Target is a selector for specifying Kubernetes objects to which this 14905 - rule applies. 14906 - If Target is not set, the Paths will be ignored for all Kubernetes 14907 - objects within the manifest of the Helm release. 14908 - properties: 14909 - annotationSelector: 14910 - description: |- 14911 - AnnotationSelector is a string that follows the label selection expression 14912 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14913 - It matches with the resource annotations. 14914 - type: string 14915 - group: 14916 - description: |- 14917 - Group is the API group to select resources from. 14918 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14919 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14920 - type: string 14921 - kind: 14922 - description: |- 14923 - Kind of the API Group to select resources from. 14924 - Together with Group and Version it is capable of unambiguously 14925 - identifying and/or selecting resources. 14926 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14927 - type: string 14928 - labelSelector: 14929 - description: |- 14930 - LabelSelector is a string that follows the label selection expression 14931 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14932 - It matches with the resource labels. 14933 - type: string 14934 - name: 14935 - description: Name to match resources with. 14936 - type: string 14937 - namespace: 14938 - description: Namespace to select resources from. 14939 - type: string 14940 - version: 14941 - description: |- 14942 - Version of the API Group to select resources from. 14943 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14944 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14945 - type: string 14946 - type: object 14947 - required: 14948 - - paths 14949 - type: object 14950 - type: array 14951 - mode: 14952 - description: |- 14953 - Mode defines how differences should be handled between the Helm manifest 14954 - and the manifest currently applied to the cluster. 14955 - If not explicitly set, it defaults to DiffModeDisabled. 14956 - enum: 14957 - - enabled 14958 - - warn 14959 - - disabled 14960 - type: string 14961 - type: object 14962 - install: 14963 - description: Install holds the configuration for Helm install actions for this HelmRelease. 14964 - properties: 14965 - crds: 14966 - description: |- 14967 - CRDs upgrade CRDs from the Helm Chart's crds directory according 14968 - to the CRD upgrade policy provided here. Valid values are `Skip`, 14969 - `Create` or `CreateReplace`. Default is `Create` and if omitted 14970 - CRDs are installed but not updated. 14971 + provider: 14972 + default: cosign 14973 + description: Provider specifies the technology used to 14974 + sign the OCI Helm chart. 14975 + enum: 14976 + - cosign 14977 + - notation 14978 + type: string 14979 + secretRef: 14980 + description: |- 14981 + SecretRef specifies the Kubernetes Secret containing the 14982 + trusted public keys. 14983 + properties: 14984 + name: 14985 + description: Name of the referent. 14986 + type: string 14987 + required: 14988 + - name 14989 + type: object 14990 + required: 14991 + - provider 14992 + type: object 14993 + version: 14994 + default: '*' 14995 + description: |- 14996 + Version semver expression, ignored for charts from v1.GitRepository and 14997 + v1beta2.Bucket sources. Defaults to latest when omitted. 14998 + type: string 14999 + required: 15000 + - chart 15001 + - sourceRef 15002 + type: object 15003 + required: 15004 + - spec 15005 + type: object 15006 + chartRef: 15007 + description: |- 15008 + ChartRef holds a reference to a source controller resource containing the 15009 + Helm chart artifact. 15010 + properties: 15011 + apiVersion: 15012 + description: APIVersion of the referent. 15013 + type: string 15014 + kind: 15015 + description: Kind of the referent. 15016 + enum: 15017 + - OCIRepository 15018 + - HelmChart 15019 + type: string 15020 + name: 15021 + description: Name of the referent. 15022 + maxLength: 253 15023 + minLength: 1 15024 + type: string 15025 + namespace: 15026 + description: |- 15027 + Namespace of the referent, defaults to the namespace of the Kubernetes 15028 + resource object that contains the reference. 15029 + maxLength: 63 15030 + minLength: 1 15031 + type: string 15032 + required: 15033 + - kind 15034 + - name 15035 + type: object 15036 + dependsOn: 15037 + description: |- 15038 + DependsOn may contain a meta.NamespacedObjectReference slice with 15039 + references to HelmRelease resources that must be ready before this HelmRelease 15040 + can be reconciled. 15041 + items: 15042 + description: |- 15043 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 15044 + namespace. 15045 + properties: 15046 + name: 15047 + description: Name of the referent. 15048 + type: string 15049 + namespace: 15050 + description: Namespace of the referent, when not specified it 15051 + acts as LocalObjectReference. 15052 + type: string 15053 + required: 15054 + - name 15055 + type: object 15056 + type: array 15057 + driftDetection: 15058 + description: |- 15059 + DriftDetection holds the configuration for detecting and handling 15060 + differences between the manifest in the Helm storage and the resources 15061 + currently existing in the cluster. 15062 + properties: 15063 + ignore: 15064 + description: |- 15065 + Ignore contains a list of rules for specifying which changes to ignore 15066 + during diffing. 15067 + items: 15068 + description: |- 15069 + IgnoreRule defines a rule to selectively disregard specific changes during 15070 + the drift detection process. 15071 + properties: 15072 + paths: 15073 + description: |- 15074 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 15075 + consideration in a Kubernetes object. 15076 + items: 15077 + type: string 15078 + type: array 15079 + target: 15080 + description: |- 15081 + Target is a selector for specifying Kubernetes objects to which this 15082 + rule applies. 15083 + If Target is not set, the Paths will be ignored for all Kubernetes 15084 + objects within the manifest of the Helm release. 15085 + properties: 15086 + annotationSelector: 15087 + description: |- 15088 + AnnotationSelector is a string that follows the label selection expression 15089 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15090 + It matches with the resource annotations. 15091 + type: string 15092 + group: 15093 + description: |- 15094 + Group is the API group to select resources from. 15095 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15096 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15097 + type: string 15098 + kind: 15099 + description: |- 15100 + Kind of the API Group to select resources from. 15101 + Together with Group and Version it is capable of unambiguously 15102 + identifying and/or selecting resources. 15103 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15104 + type: string 15105 + labelSelector: 15106 + description: |- 15107 + LabelSelector is a string that follows the label selection expression 15108 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15109 + It matches with the resource labels. 15110 + type: string 15111 + name: 15112 + description: Name to match resources with. 15113 + type: string 15114 + namespace: 15115 + description: Namespace to select resources from. 15116 + type: string 15117 + version: 15118 + description: |- 15119 + Version of the API Group to select resources from. 15120 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15121 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15122 + type: string 15123 + type: object 15124 + required: 15125 + - paths 15126 + type: object 15127 + type: array 15128 + mode: 15129 + description: |- 15130 + Mode defines how differences should be handled between the Helm manifest 15131 + and the manifest currently applied to the cluster. 15132 + If not explicitly set, it defaults to DiffModeDisabled. 15133 + enum: 15134 + - enabled 15135 + - warn 15136 + - disabled 15137 + type: string 15138 + type: object 15139 + install: 15140 + description: Install holds the configuration for Helm install actions 15141 + for this HelmRelease. 15142 + properties: 15143 + crds: 15144 + description: |- 15145 + CRDs upgrade CRDs from the Helm Chart's crds directory according 15146 + to the CRD upgrade policy provided here. Valid values are `Skip`, 15147 + `Create` or `CreateReplace`. Default is `Create` and if omitted 15148 + CRDs are installed but not updated. 15149 15150 - Skip: do neither install nor replace (update) any CRDs. 15151 + Skip: do neither install nor replace (update) any CRDs. 15152 15153 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 15154 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 15155 15156 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 15157 - but not deleted. 15158 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 15159 + but not deleted. 15160 15161 - By default, CRDs are applied (installed) during Helm install action. 15162 - With this option users can opt-in to CRD replace existing CRDs on Helm 15163 - install actions, which is not (yet) natively supported by Helm. 15164 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 15165 - enum: 15166 - - Skip 15167 - - Create 15168 - - CreateReplace 15169 - type: string 15170 - createNamespace: 15171 - description: |- 15172 - CreateNamespace tells the Helm install action to create the 15173 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 15174 - On uninstall, the namespace will not be garbage collected. 15175 - type: boolean 15176 - disableHooks: 15177 - description: DisableHooks prevents hooks from running during the Helm install action. 15178 - type: boolean 15179 - disableOpenAPIValidation: 15180 - description: |- 15181 - DisableOpenAPIValidation prevents the Helm install action from validating 15182 - rendered templates against the Kubernetes OpenAPI Schema. 15183 - type: boolean 15184 - disableWait: 15185 - description: |- 15186 - DisableWait disables the waiting for resources to be ready after a Helm 15187 - install has been performed. 15188 - type: boolean 15189 - disableWaitForJobs: 15190 - description: |- 15191 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 15192 - install has been performed. 15193 - type: boolean 15194 - remediation: 15195 - description: |- 15196 - Remediation holds the remediation configuration for when the Helm install 15197 - action for the HelmRelease fails. The default is to not perform any action. 15198 - properties: 15199 - ignoreTestFailures: 15200 - description: |- 15201 - IgnoreTestFailures tells the controller to skip remediation when the Helm 15202 - tests are run after an install action but fail. Defaults to 15203 - 'Test.IgnoreFailures'. 15204 - type: boolean 15205 - remediateLastFailure: 15206 - description: |- 15207 - RemediateLastFailure tells the controller to remediate the last failure, when 15208 - no retries remain. Defaults to 'false'. 15209 - type: boolean 15210 - retries: 15211 - description: |- 15212 - Retries is the number of retries that should be attempted on failures before 15213 - bailing. Remediation, using an uninstall, is performed between each attempt. 15214 - Defaults to '0', a negative integer equals to unlimited retries. 15215 - type: integer 15216 - type: object 15217 - replace: 15218 - description: |- 15219 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 15220 - if that name is a deleted release which remains in the history. 15221 - type: boolean 15222 - skipCRDs: 15223 - description: |- 15224 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 15225 - CRDs are installed if not already present. 15226 + By default, CRDs are applied (installed) during Helm install action. 15227 + With this option users can opt in to CRD replace existing CRDs on Helm 15228 + install actions, which is not (yet) natively supported by Helm. 15229 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 15230 + enum: 15231 + - Skip 15232 + - Create 15233 + - CreateReplace 15234 + type: string 15235 + createNamespace: 15236 + description: |- 15237 + CreateNamespace tells the Helm install action to create the 15238 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 15239 + On uninstall, the namespace will not be garbage collected. 15240 + type: boolean 15241 + disableHooks: 15242 + description: DisableHooks prevents hooks from running during the 15243 + Helm install action. 15244 + type: boolean 15245 + disableOpenAPIValidation: 15246 + description: |- 15247 + DisableOpenAPIValidation prevents the Helm install action from validating 15248 + rendered templates against the Kubernetes OpenAPI Schema. 15249 + type: boolean 15250 + disableSchemaValidation: 15251 + description: |- 15252 + DisableSchemaValidation prevents the Helm install action from validating 15253 + the values against the JSON Schema. 15254 + type: boolean 15255 + disableTakeOwnership: 15256 + description: |- 15257 + DisableTakeOwnership disables taking ownership of existing resources 15258 + during the Helm install action. Defaults to false. 15259 + type: boolean 15260 + disableWait: 15261 + description: |- 15262 + DisableWait disables the waiting for resources to be ready after a Helm 15263 + install has been performed. 15264 + type: boolean 15265 + disableWaitForJobs: 15266 + description: |- 15267 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 15268 + install has been performed. 15269 + type: boolean 15270 + remediation: 15271 + description: |- 15272 + Remediation holds the remediation configuration for when the Helm install 15273 + action for the HelmRelease fails. The default is to not perform any action. 15274 + properties: 15275 + ignoreTestFailures: 15276 + description: |- 15277 + IgnoreTestFailures tells the controller to skip remediation when the Helm 15278 + tests are run after an install action but fail. Defaults to 15279 + 'Test.IgnoreFailures'. 15280 + type: boolean 15281 + remediateLastFailure: 15282 + description: |- 15283 + RemediateLastFailure tells the controller to remediate the last failure, when 15284 + no retries remain. Defaults to 'false'. 15285 + type: boolean 15286 + retries: 15287 + description: |- 15288 + Retries is the number of retries that should be attempted on failures before 15289 + bailing. Remediation, using an uninstall, is performed between each attempt. 15290 + Defaults to '0', a negative integer equals to unlimited retries. 15291 + type: integer 15292 + type: object 15293 + replace: 15294 + description: |- 15295 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 15296 + if that name is a deleted release which remains in the history. 15297 + type: boolean 15298 + skipCRDs: 15299 + description: |- 15300 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 15301 + CRDs are installed if not already present. 15302 15303 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 15304 - type: boolean 15305 - timeout: 15306 - description: |- 15307 - Timeout is the time to wait for any individual Kubernetes operation (like 15308 - Jobs for hooks) during the performance of a Helm install action. Defaults to 15309 - 'HelmReleaseSpec.Timeout'. 15310 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15311 - type: string 15312 - type: object 15313 - interval: 15314 - description: |- 15315 - Interval at which to reconcile the Helm release. 15316 - This interval is approximate and may be subject to jitter to ensure 15317 - efficient use of resources. 15318 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15319 - type: string 15320 - kubeConfig: 15321 - description: |- 15322 - KubeConfig for reconciling the HelmRelease on a remote cluster. 15323 - When used in combination with HelmReleaseSpec.ServiceAccountName, 15324 - forces the controller to act on behalf of that Service Account at the 15325 - target cluster. 15326 - If the --default-service-account flag is set, its value will be used as 15327 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 15328 - is empty. 15329 - properties: 15330 - secretRef: 15331 - description: |- 15332 - SecretRef holds the name of a secret that contains a key with 15333 - the kubeconfig file as the value. If no key is set, the key will default 15334 - to 'value'. 15335 - It is recommended that the kubeconfig is self-contained, and the secret 15336 - is regularly updated if credentials such as a cloud-access-token expire. 15337 - Cloud specific `cmd-path` auth helpers will not function without adding 15338 - binaries and credentials to the Pod that is responsible for reconciling 15339 - Kubernetes resources. 15340 - properties: 15341 - key: 15342 - description: Key in the Secret, when not specified an implementation-specific 15343 - default key is used. 15344 - type: string 15345 - name: 15346 - description: Name of the Secret. 15347 - type: string 15348 - required: 15349 - - name 15350 - type: object 15351 - required: 15352 - - secretRef 15353 - type: object 15354 - maxHistory: 15355 - description: |- 15356 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 15357 - Use '0' for an unlimited number of revisions; defaults to '10'. 15358 - type: integer 15359 - persistentClient: 15360 - description: |- 15361 - PersistentClient tells the controller to use a persistent Kubernetes 15362 - client for this release. When enabled, the client will be reused for the 15363 - duration of the reconciliation, instead of being created and destroyed 15364 - for each (step of a) Helm action. 15365 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 15366 + type: boolean 15367 + timeout: 15368 + description: |- 15369 + Timeout is the time to wait for any individual Kubernetes operation (like 15370 + Jobs for hooks) during the performance of a Helm install action. Defaults to 15371 + 'HelmReleaseSpec.Timeout'. 15372 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15373 + type: string 15374 + type: object 15375 + interval: 15376 + description: Interval at which to reconcile the Helm release. 15377 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15378 + type: string 15379 + kubeConfig: 15380 + description: |- 15381 + KubeConfig for reconciling the HelmRelease on a remote cluster. 15382 + When used in combination with HelmReleaseSpec.ServiceAccountName, 15383 + forces the controller to act on behalf of that Service Account at the 15384 + target cluster. 15385 + If the --default-service-account flag is set, its value will be used as 15386 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 15387 + is empty. 15388 + properties: 15389 + secretRef: 15390 + description: |- 15391 + SecretRef holds the name of a secret that contains a key with 15392 + the kubeconfig file as the value. If no key is set, the key will default 15393 + to 'value'. 15394 + It is recommended that the kubeconfig is self-contained, and the secret 15395 + is regularly updated if credentials such as a cloud-access-token expire. 15396 + Cloud specific `cmd-path` auth helpers will not function without adding 15397 + binaries and credentials to the Pod that is responsible for reconciling 15398 + Kubernetes resources. 15399 + properties: 15400 + key: 15401 + description: Key in the Secret, when not specified an implementation-specific 15402 + default key is used. 15403 + type: string 15404 + name: 15405 + description: Name of the Secret. 15406 + type: string 15407 + required: 15408 + - name 15409 + type: object 15410 + required: 15411 + - secretRef 15412 + type: object 15413 + maxHistory: 15414 + description: |- 15415 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 15416 + Use '0' for an unlimited number of revisions; defaults to '5'. 15417 + type: integer 15418 + persistentClient: 15419 + description: |- 15420 + PersistentClient tells the controller to use a persistent Kubernetes 15421 + client for this release. When enabled, the client will be reused for the 15422 + duration of the reconciliation, instead of being created and destroyed 15423 + for each (step of a) Helm action. 15424 15425 - This can improve performance, but may cause issues with some Helm charts 15426 - that for example do create Custom Resource Definitions during installation 15427 - outside Helm's CRD lifecycle hooks, which are then not observed to be 15428 - available by e.g. post-install hooks. 15429 + This can improve performance, but may cause issues with some Helm charts 15430 + that for example do create Custom Resource Definitions during installation 15431 + outside Helm's CRD lifecycle hooks, which are then not observed to be 15432 + available by e.g. post-install hooks. 15433 15434 - If not set, it defaults to true. 15435 - type: boolean 15436 - postRenderers: 15437 - description: |- 15438 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 15439 - of their definition. 15440 - items: 15441 - description: PostRenderer contains a Helm PostRenderer specification. 15442 - properties: 15443 - kustomize: 15444 - description: Kustomization to apply as PostRenderer. 15445 - properties: 15446 - images: 15447 - description: |- 15448 - Images is a list of (image name, new name, new tag or digest) 15449 - for changing image names, tags or digests. This can also be achieved with a 15450 - patch, but this operator is simpler to specify. 15451 - items: 15452 - description: Image contains an image name, a new name, a new tag or 15453 - digest, which will replace the original name and tag. 15454 - properties: 15455 - digest: 15456 - description: |- 15457 - Digest is the value used to replace the original image tag. 15458 - If digest is present NewTag value is ignored. 15459 - type: string 15460 - name: 15461 - description: Name is a tag-less image name. 15462 - type: string 15463 - newName: 15464 - description: NewName is the value used to replace the original 15465 - name. 15466 - type: string 15467 - newTag: 15468 - description: NewTag is the value used to replace the original 15469 - tag. 15470 - type: string 15471 - required: 15472 - - name 15473 - type: object 15474 - type: array 15475 - patches: 15476 - description: |- 15477 - Strategic merge and JSON patches, defined as inline YAML objects, 15478 - capable of targeting objects based on kind, label and annotation selectors. 15479 - items: 15480 - description: |- 15481 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 15482 - be applied to. 15483 - properties: 15484 - patch: 15485 - description: |- 15486 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 15487 - an array of operation objects. 15488 - type: string 15489 - target: 15490 - description: Target points to the resources that the patch 15491 - document should be applied to. 15492 - properties: 15493 - annotationSelector: 15494 - description: |- 15495 - AnnotationSelector is a string that follows the label selection expression 15496 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15497 - It matches with the resource annotations. 15498 - type: string 15499 - group: 15500 - description: |- 15501 - Group is the API group to select resources from. 15502 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15503 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15504 - type: string 15505 - kind: 15506 - description: |- 15507 - Kind of the API Group to select resources from. 15508 - Together with Group and Version it is capable of unambiguously 15509 - identifying and/or selecting resources. 15510 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15511 - type: string 15512 - labelSelector: 15513 - description: |- 15514 - LabelSelector is a string that follows the label selection expression 15515 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15516 - It matches with the resource labels. 15517 - type: string 15518 - name: 15519 - description: Name to match resources with. 15520 - type: string 15521 - namespace: 15522 - description: Namespace to select resources from. 15523 - type: string 15524 - version: 15525 - description: |- 15526 - Version of the API Group to select resources from. 15527 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15528 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15529 - type: string 15530 - type: object 15531 - required: 15532 - - patch 15533 - type: object 15534 - type: array 15535 - patchesJson6902: 15536 - description: JSON 6902 patches, defined as inline YAML objects. 15537 - items: 15538 - description: JSON6902Patch contains a JSON6902 patch and the target 15539 - the patch should be applied to. 15540 - properties: 15541 - patch: 15542 - description: Patch contains the JSON6902 patch document with 15543 - an array of operation objects. 15544 - items: 15545 - description: |- 15546 - JSON6902 is a JSON6902 operation object. 15547 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 15548 - properties: 15549 - from: 15550 - description: |- 15551 - From contains a JSON-pointer value that references a location within the target document where the operation is 15552 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 15553 - type: string 15554 - op: 15555 - description: |- 15556 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 15557 - "test". 15558 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 15559 - enum: 15560 - - test 15561 - - remove 15562 - - add 15563 - - replace 15564 - - move 15565 - - copy 15566 - type: string 15567 - path: 15568 - description: |- 15569 - Path contains the JSON-pointer value that references a location within the target document where the operation 15570 - is performed. The meaning of the value depends on the value of Op. 15571 - type: string 15572 - value: 15573 - description: |- 15574 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 15575 - account by all operations. 15576 - x-kubernetes-preserve-unknown-fields: true 15577 - required: 15578 - - op 15579 - - path 15580 - type: object 15581 - type: array 15582 - target: 15583 - description: Target points to the resources that the patch 15584 - document should be applied to. 15585 - properties: 15586 - annotationSelector: 15587 - description: |- 15588 - AnnotationSelector is a string that follows the label selection expression 15589 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15590 - It matches with the resource annotations. 15591 - type: string 15592 - group: 15593 - description: |- 15594 - Group is the API group to select resources from. 15595 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15596 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15597 - type: string 15598 - kind: 15599 - description: |- 15600 - Kind of the API Group to select resources from. 15601 - Together with Group and Version it is capable of unambiguously 15602 - identifying and/or selecting resources. 15603 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15604 - type: string 15605 - labelSelector: 15606 - description: |- 15607 - LabelSelector is a string that follows the label selection expression 15608 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15609 - It matches with the resource labels. 15610 - type: string 15611 - name: 15612 - description: Name to match resources with. 15613 - type: string 15614 - namespace: 15615 - description: Namespace to select resources from. 15616 - type: string 15617 - version: 15618 - description: |- 15619 - Version of the API Group to select resources from. 15620 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15621 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15622 - type: string 15623 - type: object 15624 - required: 15625 - - patch 15626 - - target 15627 - type: object 15628 - type: array 15629 - patchesStrategicMerge: 15630 - description: Strategic merge patches, defined as inline YAML objects. 15631 - items: 15632 - x-kubernetes-preserve-unknown-fields: true 15633 - type: array 15634 - type: object 15635 - type: object 15636 - type: array 15637 - releaseName: 15638 - description: |- 15639 - ReleaseName used for the Helm release. Defaults to a composition of 15640 - '[TargetNamespace-]Name'. 15641 - maxLength: 53 15642 - minLength: 1 15643 - type: string 15644 - rollback: 15645 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 15646 - properties: 15647 - cleanupOnFail: 15648 - description: |- 15649 - CleanupOnFail allows deletion of new resources created during the Helm 15650 - rollback action when it fails. 15651 - type: boolean 15652 - disableHooks: 15653 - description: DisableHooks prevents hooks from running during the Helm rollback action. 15654 - type: boolean 15655 - disableWait: 15656 - description: |- 15657 - DisableWait disables the waiting for resources to be ready after a Helm 15658 - rollback has been performed. 15659 - type: boolean 15660 - disableWaitForJobs: 15661 - description: |- 15662 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 15663 - rollback has been performed. 15664 - type: boolean 15665 - force: 15666 - description: Force forces resource updates through a replacement strategy. 15667 - type: boolean 15668 - recreate: 15669 - description: Recreate performs pod restarts for the resource if applicable. 15670 - type: boolean 15671 - timeout: 15672 - description: |- 15673 - Timeout is the time to wait for any individual Kubernetes operation (like 15674 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 15675 - 'HelmReleaseSpec.Timeout'. 15676 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15677 - type: string 15678 - type: object 15679 - serviceAccountName: 15680 - description: |- 15681 - The name of the Kubernetes service account to impersonate 15682 - when reconciling this HelmRelease. 15683 - type: string 15684 - storageNamespace: 15685 - description: |- 15686 - StorageNamespace used for the Helm storage. 15687 - Defaults to the namespace of the HelmRelease. 15688 - maxLength: 63 15689 - minLength: 1 15690 - type: string 15691 - suspend: 15692 - description: |- 15693 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 15694 - it does not apply to already started reconciliations. Defaults to false. 15695 - type: boolean 15696 - targetNamespace: 15697 - description: |- 15698 - TargetNamespace to target when performing operations for the HelmRelease. 15699 - Defaults to the namespace of the HelmRelease. 15700 - maxLength: 63 15701 - minLength: 1 15702 - type: string 15703 - test: 15704 - description: Test holds the configuration for Helm test actions for this HelmRelease. 15705 - properties: 15706 - enable: 15707 - description: |- 15708 - Enable enables Helm test actions for this HelmRelease after an Helm install 15709 - or upgrade action has been performed. 15710 - type: boolean 15711 - ignoreFailures: 15712 - description: |- 15713 - IgnoreFailures tells the controller to skip remediation when the Helm tests 15714 - are run but fail. Can be overwritten for tests run after install or upgrade 15715 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 15716 - type: boolean 15717 - timeout: 15718 - description: |- 15719 - Timeout is the time to wait for any individual Kubernetes operation during 15720 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 15721 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15722 - type: string 15723 - type: object 15724 - timeout: 15725 - description: |- 15726 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 15727 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 15728 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15729 - type: string 15730 - uninstall: 15731 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 15732 - properties: 15733 - deletionPropagation: 15734 - default: background 15735 - description: |- 15736 - DeletionPropagation specifies the deletion propagation policy when 15737 - a Helm uninstall is performed. 15738 - enum: 15739 - - background 15740 - - foreground 15741 - - orphan 15742 - type: string 15743 - disableHooks: 15744 - description: DisableHooks prevents hooks from running during the Helm rollback action. 15745 - type: boolean 15746 - disableWait: 15747 - description: |- 15748 - DisableWait disables waiting for all the resources to be deleted after 15749 - a Helm uninstall is performed. 15750 - type: boolean 15751 - keepHistory: 15752 - description: |- 15753 - KeepHistory tells Helm to remove all associated resources and mark the 15754 - release as deleted, but retain the release history. 15755 - type: boolean 15756 - timeout: 15757 - description: |- 15758 - Timeout is the time to wait for any individual Kubernetes operation (like 15759 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 15760 - to 'HelmReleaseSpec.Timeout'. 15761 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15762 - type: string 15763 + If not set, it defaults to true. 15764 + type: boolean 15765 + postRenderers: 15766 + description: |- 15767 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 15768 + of their definition. 15769 + items: 15770 + description: PostRenderer contains a Helm PostRenderer specification. 15771 + properties: 15772 + kustomize: 15773 + description: Kustomization to apply as PostRenderer. 15774 + properties: 15775 + images: 15776 + description: |- 15777 + Images is a list of (image name, new name, new tag or digest) 15778 + for changing image names, tags or digests. This can also be achieved with a 15779 + patch, but this operator is simpler to specify. 15780 + items: 15781 + description: Image contains an image name, a new name, 15782 + a new tag or digest, which will replace the original 15783 + name and tag. 15784 + properties: 15785 + digest: 15786 + description: |- 15787 + Digest is the value used to replace the original image tag. 15788 + If digest is present NewTag value is ignored. 15789 + type: string 15790 + name: 15791 + description: Name is a tag-less image name. 15792 + type: string 15793 + newName: 15794 + description: NewName is the value used to replace 15795 + the original name. 15796 + type: string 15797 + newTag: 15798 + description: NewTag is the value used to replace the 15799 + original tag. 15800 + type: string 15801 + required: 15802 + - name 15803 + type: object 15804 + type: array 15805 + patches: 15806 + description: |- 15807 + Strategic merge and JSON patches, defined as inline YAML objects, 15808 + capable of targeting objects based on kind, label and annotation selectors. 15809 + items: 15810 + description: |- 15811 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 15812 + be applied to. 15813 + properties: 15814 + patch: 15815 + description: |- 15816 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 15817 + an array of operation objects. 15818 + type: string 15819 + target: 15820 + description: Target points to the resources that the 15821 + patch document should be applied to. 15822 + properties: 15823 + annotationSelector: 15824 + description: |- 15825 + AnnotationSelector is a string that follows the label selection expression 15826 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15827 + It matches with the resource annotations. 15828 + type: string 15829 + group: 15830 + description: |- 15831 + Group is the API group to select resources from. 15832 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15833 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15834 + type: string 15835 + kind: 15836 + description: |- 15837 + Kind of the API Group to select resources from. 15838 + Together with Group and Version it is capable of unambiguously 15839 + identifying and/or selecting resources. 15840 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15841 + type: string 15842 + labelSelector: 15843 + description: |- 15844 + LabelSelector is a string that follows the label selection expression 15845 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15846 + It matches with the resource labels. 15847 + type: string 15848 + name: 15849 + description: Name to match resources with. 15850 + type: string 15851 + namespace: 15852 + description: Namespace to select resources from. 15853 + type: string 15854 + version: 15855 + description: |- 15856 + Version of the API Group to select resources from. 15857 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15858 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15859 + type: string 15860 type: object 15861 - upgrade: 15862 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 15863 - properties: 15864 - cleanupOnFail: 15865 - description: |- 15866 - CleanupOnFail allows deletion of new resources created during the Helm 15867 - upgrade action when it fails. 15868 - type: boolean 15869 - crds: 15870 - description: |- 15871 - CRDs upgrade CRDs from the Helm Chart's crds directory according 15872 - to the CRD upgrade policy provided here. Valid values are `Skip`, 15873 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 15874 - CRDs are neither installed nor upgraded. 15875 + required: 15876 + - patch 15877 + type: object 15878 + type: array 15879 + type: object 15880 + type: object 15881 + type: array 15882 + releaseName: 15883 + description: |- 15884 + ReleaseName used for the Helm release. Defaults to a composition of 15885 + '[TargetNamespace-]Name'. 15886 + maxLength: 53 15887 + minLength: 1 15888 + type: string 15889 + rollback: 15890 + description: Rollback holds the configuration for Helm rollback actions 15891 + for this HelmRelease. 15892 + properties: 15893 + cleanupOnFail: 15894 + description: |- 15895 + CleanupOnFail allows deletion of new resources created during the Helm 15896 + rollback action when it fails. 15897 + type: boolean 15898 + disableHooks: 15899 + description: DisableHooks prevents hooks from running during the 15900 + Helm rollback action. 15901 + type: boolean 15902 + disableWait: 15903 + description: |- 15904 + DisableWait disables the waiting for resources to be ready after a Helm 15905 + rollback has been performed. 15906 + type: boolean 15907 + disableWaitForJobs: 15908 + description: |- 15909 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 15910 + rollback has been performed. 15911 + type: boolean 15912 + force: 15913 + description: Force forces resource updates through a replacement 15914 + strategy. 15915 + type: boolean 15916 + recreate: 15917 + description: Recreate performs pod restarts for the resource if 15918 + applicable. 15919 + type: boolean 15920 + timeout: 15921 + description: |- 15922 + Timeout is the time to wait for any individual Kubernetes operation (like 15923 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 15924 + 'HelmReleaseSpec.Timeout'. 15925 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15926 + type: string 15927 + type: object 15928 + serviceAccountName: 15929 + description: |- 15930 + The name of the Kubernetes service account to impersonate 15931 + when reconciling this HelmRelease. 15932 + maxLength: 253 15933 + minLength: 1 15934 + type: string 15935 + storageNamespace: 15936 + description: |- 15937 + StorageNamespace used for the Helm storage. 15938 + Defaults to the namespace of the HelmRelease. 15939 + maxLength: 63 15940 + minLength: 1 15941 + type: string 15942 + suspend: 15943 + description: |- 15944 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 15945 + it does not apply to already started reconciliations. Defaults to false. 15946 + type: boolean 15947 + targetNamespace: 15948 + description: |- 15949 + TargetNamespace to target when performing operations for the HelmRelease. 15950 + Defaults to the namespace of the HelmRelease. 15951 + maxLength: 63 15952 + minLength: 1 15953 + type: string 15954 + test: 15955 + description: Test holds the configuration for Helm test actions for 15956 + this HelmRelease. 15957 + properties: 15958 + enable: 15959 + description: |- 15960 + Enable enables Helm test actions for this HelmRelease after an Helm install 15961 + or upgrade action has been performed. 15962 + type: boolean 15963 + filters: 15964 + description: Filters is a list of tests to run or exclude from 15965 + running. 15966 + items: 15967 + description: Filter holds the configuration for individual Helm 15968 + test filters. 15969 + properties: 15970 + exclude: 15971 + description: Exclude specifies whether the named test should 15972 + be excluded. 15973 + type: boolean 15974 + name: 15975 + description: Name is the name of the test. 15976 + maxLength: 253 15977 + minLength: 1 15978 + type: string 15979 + required: 15980 + - name 15981 + type: object 15982 + type: array 15983 + ignoreFailures: 15984 + description: |- 15985 + IgnoreFailures tells the controller to skip remediation when the Helm tests 15986 + are run but fail. Can be overwritten for tests run after install or upgrade 15987 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 15988 + type: boolean 15989 + timeout: 15990 + description: |- 15991 + Timeout is the time to wait for any individual Kubernetes operation during 15992 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 15993 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15994 + type: string 15995 + type: object 15996 + timeout: 15997 + description: |- 15998 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 15999 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 16000 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16001 + type: string 16002 + uninstall: 16003 + description: Uninstall holds the configuration for Helm uninstall 16004 + actions for this HelmRelease. 16005 + properties: 16006 + deletionPropagation: 16007 + default: background 16008 + description: |- 16009 + DeletionPropagation specifies the deletion propagation policy when 16010 + a Helm uninstall is performed. 16011 + enum: 16012 + - background 16013 + - foreground 16014 + - orphan 16015 + type: string 16016 + disableHooks: 16017 + description: DisableHooks prevents hooks from running during the 16018 + Helm rollback action. 16019 + type: boolean 16020 + disableWait: 16021 + description: |- 16022 + DisableWait disables waiting for all the resources to be deleted after 16023 + a Helm uninstall is performed. 16024 + type: boolean 16025 + keepHistory: 16026 + description: |- 16027 + KeepHistory tells Helm to remove all associated resources and mark the 16028 + release as deleted, but retain the release history. 16029 + type: boolean 16030 + timeout: 16031 + description: |- 16032 + Timeout is the time to wait for any individual Kubernetes operation (like 16033 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 16034 + to 'HelmReleaseSpec.Timeout'. 16035 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16036 + type: string 16037 + type: object 16038 + upgrade: 16039 + description: Upgrade holds the configuration for Helm upgrade actions 16040 + for this HelmRelease. 16041 + properties: 16042 + cleanupOnFail: 16043 + description: |- 16044 + CleanupOnFail allows deletion of new resources created during the Helm 16045 + upgrade action when it fails. 16046 + type: boolean 16047 + crds: 16048 + description: |- 16049 + CRDs upgrade CRDs from the Helm Chart's crds directory according 16050 + to the CRD upgrade policy provided here. Valid values are `Skip`, 16051 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 16052 + CRDs are neither installed nor upgraded. 16053 16054 - Skip: do neither install nor replace (update) any CRDs. 16055 + Skip: do neither install nor replace (update) any CRDs. 16056 16057 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 16058 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 16059 16060 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 16061 - but not deleted. 16062 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 16063 + but not deleted. 16064 16065 - By default, CRDs are not applied during Helm upgrade action. With this 16066 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 16067 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 16068 - enum: 16069 - - Skip 16070 - - Create 16071 - - CreateReplace 16072 - type: string 16073 - disableHooks: 16074 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 16075 - type: boolean 16076 - disableOpenAPIValidation: 16077 - description: |- 16078 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 16079 - rendered templates against the Kubernetes OpenAPI Schema. 16080 - type: boolean 16081 - disableWait: 16082 - description: |- 16083 - DisableWait disables the waiting for resources to be ready after a Helm 16084 - upgrade has been performed. 16085 - type: boolean 16086 - disableWaitForJobs: 16087 - description: |- 16088 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 16089 - upgrade has been performed. 16090 - type: boolean 16091 - force: 16092 - description: Force forces resource updates through a replacement strategy. 16093 - type: boolean 16094 - preserveValues: 16095 - description: |- 16096 - PreserveValues will make Helm reuse the last release's values and merge in 16097 - overrides from 'Values'. Setting this flag makes the HelmRelease 16098 - non-declarative. 16099 - type: boolean 16100 - remediation: 16101 - description: |- 16102 - Remediation holds the remediation configuration for when the Helm upgrade 16103 - action for the HelmRelease fails. The default is to not perform any action. 16104 - properties: 16105 - ignoreTestFailures: 16106 - description: |- 16107 - IgnoreTestFailures tells the controller to skip remediation when the Helm 16108 - tests are run after an upgrade action but fail. 16109 - Defaults to 'Test.IgnoreFailures'. 16110 - type: boolean 16111 - remediateLastFailure: 16112 - description: |- 16113 - RemediateLastFailure tells the controller to remediate the last failure, when 16114 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 16115 - type: boolean 16116 - retries: 16117 - description: |- 16118 - Retries is the number of retries that should be attempted on failures before 16119 - bailing. Remediation, using 'Strategy', is performed between each attempt. 16120 - Defaults to '0', a negative integer equals to unlimited retries. 16121 - type: integer 16122 - strategy: 16123 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 16124 - enum: 16125 - - rollback 16126 - - uninstall 16127 - type: string 16128 - type: object 16129 - timeout: 16130 - description: |- 16131 - Timeout is the time to wait for any individual Kubernetes operation (like 16132 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 16133 - 'HelmReleaseSpec.Timeout'. 16134 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16135 - type: string 16136 - type: object 16137 - values: 16138 - description: Values holds the values for this Helm release. 16139 - x-kubernetes-preserve-unknown-fields: true 16140 - valuesFrom: 16141 - description: |- 16142 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 16143 - and information about how they should be merged. 16144 - items: 16145 - description: |- 16146 - ValuesReference contains a reference to a resource containing Helm values, 16147 - and optionally the key they can be found at. 16148 - properties: 16149 - kind: 16150 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 16151 - enum: 16152 - - Secret 16153 - - ConfigMap 16154 - type: string 16155 - name: 16156 - description: |- 16157 - Name of the values referent. Should reside in the same namespace as the 16158 - referring resource. 16159 - maxLength: 253 16160 - minLength: 1 16161 - type: string 16162 - optional: 16163 - description: |- 16164 - Optional marks this ValuesReference as optional. When set, a not found error 16165 - for the values reference is ignored, but any ValuesKey, TargetPath or 16166 - transient error will still result in a reconciliation failure. 16167 - type: boolean 16168 - targetPath: 16169 - description: |- 16170 - TargetPath is the YAML dot notation path the value should be merged at. When 16171 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 16172 - which results in the values getting merged at the root. 16173 - maxLength: 250 16174 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 16175 - type: string 16176 - valuesKey: 16177 - description: |- 16178 - ValuesKey is the data key where the values.yaml or a specific value can be 16179 - found at. Defaults to 'values.yaml'. 16180 - When set, must be a valid Data Key, consisting of alphanumeric characters, 16181 - '-', '_' or '.'. 16182 - maxLength: 253 16183 - pattern: ^[\-._a-zA-Z0-9]+$ 16184 - type: string 16185 - required: 16186 - - kind 16187 - - name 16188 - type: object 16189 - type: array 16190 + By default, CRDs are not applied during Helm upgrade action. With this 16191 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 16192 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 16193 + enum: 16194 + - Skip 16195 + - Create 16196 + - CreateReplace 16197 + type: string 16198 + disableHooks: 16199 + description: DisableHooks prevents hooks from running during the 16200 + Helm upgrade action. 16201 + type: boolean 16202 + disableOpenAPIValidation: 16203 + description: |- 16204 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 16205 + rendered templates against the Kubernetes OpenAPI Schema. 16206 + type: boolean 16207 + disableSchemaValidation: 16208 + description: |- 16209 + DisableSchemaValidation prevents the Helm upgrade action from validating 16210 + the values against the JSON Schema. 16211 + type: boolean 16212 + disableTakeOwnership: 16213 + description: |- 16214 + DisableTakeOwnership disables taking ownership of existing resources 16215 + during the Helm upgrade action. Defaults to false. 16216 + type: boolean 16217 + disableWait: 16218 + description: |- 16219 + DisableWait disables the waiting for resources to be ready after a Helm 16220 + upgrade has been performed. 16221 + type: boolean 16222 + disableWaitForJobs: 16223 + description: |- 16224 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 16225 + upgrade has been performed. 16226 + type: boolean 16227 + force: 16228 + description: Force forces resource updates through a replacement 16229 + strategy. 16230 + type: boolean 16231 + preserveValues: 16232 + description: |- 16233 + PreserveValues will make Helm reuse the last release's values and merge in 16234 + overrides from 'Values'. Setting this flag makes the HelmRelease 16235 + non-declarative. 16236 + type: boolean 16237 + remediation: 16238 + description: |- 16239 + Remediation holds the remediation configuration for when the Helm upgrade 16240 + action for the HelmRelease fails. The default is to not perform any action. 16241 + properties: 16242 + ignoreTestFailures: 16243 + description: |- 16244 + IgnoreTestFailures tells the controller to skip remediation when the Helm 16245 + tests are run after an upgrade action but fail. 16246 + Defaults to 'Test.IgnoreFailures'. 16247 + type: boolean 16248 + remediateLastFailure: 16249 + description: |- 16250 + RemediateLastFailure tells the controller to remediate the last failure, when 16251 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 16252 + type: boolean 16253 + retries: 16254 + description: |- 16255 + Retries is the number of retries that should be attempted on failures before 16256 + bailing. Remediation, using 'Strategy', is performed between each attempt. 16257 + Defaults to '0', a negative integer equals to unlimited retries. 16258 + type: integer 16259 + strategy: 16260 + description: Strategy to use for failure remediation. Defaults 16261 + to 'rollback'. 16262 + enum: 16263 + - rollback 16264 + - uninstall 16265 + type: string 16266 + type: object 16267 + timeout: 16268 + description: |- 16269 + Timeout is the time to wait for any individual Kubernetes operation (like 16270 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 16271 + 'HelmReleaseSpec.Timeout'. 16272 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16273 + type: string 16274 + type: object 16275 + values: 16276 + description: Values holds the values for this Helm release. 16277 + x-kubernetes-preserve-unknown-fields: true 16278 + valuesFrom: 16279 + description: |- 16280 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 16281 + and information about how they should be merged. 16282 + items: 16283 + description: |- 16284 + ValuesReference contains a reference to a resource containing Helm values, 16285 + and optionally the key they can be found at. 16286 + properties: 16287 + kind: 16288 + description: Kind of the values referent, valid values are ('Secret', 16289 + 'ConfigMap'). 16290 + enum: 16291 + - Secret 16292 + - ConfigMap 16293 + type: string 16294 + name: 16295 + description: |- 16296 + Name of the values referent. Should reside in the same namespace as the 16297 + referring resource. 16298 + maxLength: 253 16299 + minLength: 1 16300 + type: string 16301 + optional: 16302 + description: |- 16303 + Optional marks this ValuesReference as optional. When set, a not found error 16304 + for the values reference is ignored, but any ValuesKey, TargetPath or 16305 + transient error will still result in a reconciliation failure. 16306 + type: boolean 16307 + targetPath: 16308 + description: |- 16309 + TargetPath is the YAML dot notation path the value should be merged at. When 16310 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 16311 + which results in the values getting merged at the root. 16312 + maxLength: 250 16313 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 16314 + type: string 16315 + valuesKey: 16316 + description: |- 16317 + ValuesKey is the data key where the values.yaml or a specific value can be 16318 + found at. Defaults to 'values.yaml'. 16319 + maxLength: 253 16320 + pattern: ^[\-._a-zA-Z0-9]+$ 16321 + type: string 16322 + required: 16323 + - kind 16324 + - name 16325 + type: object 16326 + type: array 16327 + required: 16328 + - interval 16329 + type: object 16330 + x-kubernetes-validations: 16331 + - message: either chart or chartRef must be set 16332 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 16333 + && has(self.chartRef)) 16334 + status: 16335 + default: 16336 + observedGeneration: -1 16337 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 16338 + properties: 16339 + conditions: 16340 + description: Conditions holds the conditions for the HelmRelease. 16341 + items: 16342 + description: Condition contains details for one aspect of the current 16343 + state of this API Resource. 16344 + properties: 16345 + lastTransitionTime: 16346 + description: |- 16347 + lastTransitionTime is the last time the condition transitioned from one status to another. 16348 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16349 + format: date-time 16350 + type: string 16351 + message: 16352 + description: |- 16353 + message is a human readable message indicating details about the transition. 16354 + This may be an empty string. 16355 + maxLength: 32768 16356 + type: string 16357 + observedGeneration: 16358 + description: |- 16359 + observedGeneration represents the .metadata.generation that the condition was set based upon. 16360 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16361 + with respect to the current state of the instance. 16362 + format: int64 16363 + minimum: 0 16364 + type: integer 16365 + reason: 16366 + description: |- 16367 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 16368 + Producers of specific condition types may define expected values and meanings for this field, 16369 + and whether the values are considered a guaranteed API. 16370 + The value should be a CamelCase string. 16371 + This field may not be empty. 16372 + maxLength: 1024 16373 + minLength: 1 16374 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16375 + type: string 16376 + status: 16377 + description: status of the condition, one of True, False, Unknown. 16378 + enum: 16379 + - "True" 16380 + - "False" 16381 + - Unknown 16382 + type: string 16383 + type: 16384 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 16385 + maxLength: 316 16386 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16387 + type: string 16388 + required: 16389 + - lastTransitionTime 16390 + - message 16391 + - reason 16392 + - status 16393 + - type 16394 + type: object 16395 + type: array 16396 + failures: 16397 + description: |- 16398 + Failures is the reconciliation failure count against the latest desired 16399 + state. It is reset after a successful reconciliation. 16400 + format: int64 16401 + type: integer 16402 + helmChart: 16403 + description: |- 16404 + HelmChart is the namespaced name of the HelmChart resource created by 16405 + the controller for the HelmRelease. 16406 + type: string 16407 + history: 16408 + description: |- 16409 + History holds the history of Helm releases performed for this HelmRelease 16410 + up to the last successfully completed release. 16411 + items: 16412 + description: |- 16413 + Snapshot captures a point-in-time copy of the status information for a Helm release, 16414 + as managed by the controller. 16415 + properties: 16416 + apiVersion: 16417 + description: |- 16418 + APIVersion is the API version of the Snapshot. 16419 + Provisional: when the calculation method of the Digest field is changed, 16420 + this field will be used to distinguish between the old and new methods. 16421 + type: string 16422 + appVersion: 16423 + description: AppVersion is the chart app version of the release 16424 + object in storage. 16425 + type: string 16426 + chartName: 16427 + description: ChartName is the chart name of the release object 16428 + in storage. 16429 + type: string 16430 + chartVersion: 16431 + description: |- 16432 + ChartVersion is the chart version of the release object in 16433 + storage. 16434 + type: string 16435 + configDigest: 16436 + description: |- 16437 + ConfigDigest is the checksum of the config (better known as 16438 + "values") of the release object in storage. 16439 + It has the format of `<algo>:<checksum>`. 16440 + type: string 16441 + deleted: 16442 + description: Deleted is when the release was deleted. 16443 + format: date-time 16444 + type: string 16445 + digest: 16446 + description: |- 16447 + Digest is the checksum of the release object in storage. 16448 + It has the format of `<algo>:<checksum>`. 16449 + type: string 16450 + firstDeployed: 16451 + description: FirstDeployed is when the release was first deployed. 16452 + format: date-time 16453 + type: string 16454 + lastDeployed: 16455 + description: LastDeployed is when the release was last deployed. 16456 + format: date-time 16457 + type: string 16458 + name: 16459 + description: Name is the name of the release. 16460 + type: string 16461 + namespace: 16462 + description: Namespace is the namespace the release is deployed 16463 + to. 16464 + type: string 16465 + ociDigest: 16466 + description: OCIDigest is the digest of the OCI artifact associated 16467 + with the release. 16468 + type: string 16469 + status: 16470 + description: Status is the current state of the release. 16471 + type: string 16472 + testHooks: 16473 + additionalProperties: 16474 + description: |- 16475 + TestHookStatus holds the status information for a test hook as observed 16476 + to be run by the controller. 16477 + properties: 16478 + lastCompleted: 16479 + description: LastCompleted is the time the test hook last 16480 + completed. 16481 + format: date-time 16482 + type: string 16483 + lastStarted: 16484 + description: LastStarted is the time the test hook was 16485 + last started. 16486 + format: date-time 16487 + type: string 16488 + phase: 16489 + description: Phase the test hook was observed to be in. 16490 + type: string 16491 + type: object 16492 + description: |- 16493 + TestHooks is the list of test hooks for the release as observed to be 16494 + run by the controller. 16495 + type: object 16496 + version: 16497 + description: Version is the version of the release object in 16498 + storage. 16499 + type: integer 16500 + required: 16501 + - chartName 16502 + - chartVersion 16503 + - configDigest 16504 + - digest 16505 + - firstDeployed 16506 + - lastDeployed 16507 + - name 16508 + - namespace 16509 + - status 16510 + - version 16511 + type: object 16512 + type: array 16513 + installFailures: 16514 + description: |- 16515 + InstallFailures is the install failure count against the latest desired 16516 + state. It is reset after a successful reconciliation. 16517 + format: int64 16518 + type: integer 16519 + lastAttemptedConfigDigest: 16520 + description: |- 16521 + LastAttemptedConfigDigest is the digest for the config (better known as 16522 + "values") of the last reconciliation attempt. 16523 + type: string 16524 + lastAttemptedGeneration: 16525 + description: |- 16526 + LastAttemptedGeneration is the last generation the controller attempted 16527 + to reconcile. 16528 + format: int64 16529 + type: integer 16530 + lastAttemptedReleaseAction: 16531 + description: |- 16532 + LastAttemptedReleaseAction is the last release action performed for this 16533 + HelmRelease. It is used to determine the active remediation strategy. 16534 + enum: 16535 + - install 16536 + - upgrade 16537 + type: string 16538 + lastAttemptedRevision: 16539 + description: |- 16540 + LastAttemptedRevision is the Source revision of the last reconciliation 16541 + attempt. For OCIRepository sources, the 12 first characters of the digest are 16542 + appended to the chart version e.g. "1.2.3+1234567890ab". 16543 + type: string 16544 + lastAttemptedRevisionDigest: 16545 + description: |- 16546 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 16547 + This is only set for OCIRepository sources. 16548 + type: string 16549 + lastAttemptedValuesChecksum: 16550 + description: |- 16551 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 16552 + reconciliation attempt. 16553 + Deprecated: Use LastAttemptedConfigDigest instead. 16554 + type: string 16555 + lastHandledForceAt: 16556 + description: |- 16557 + LastHandledForceAt holds the value of the most recent force request 16558 + value, so a change of the annotation value can be detected. 16559 + type: string 16560 + lastHandledReconcileAt: 16561 + description: |- 16562 + LastHandledReconcileAt holds the value of the most recent 16563 + reconcile request value, so a change of the annotation value 16564 + can be detected. 16565 + type: string 16566 + lastHandledResetAt: 16567 + description: |- 16568 + LastHandledResetAt holds the value of the most recent reset request 16569 + value, so a change of the annotation value can be detected. 16570 + type: string 16571 + lastReleaseRevision: 16572 + description: |- 16573 + LastReleaseRevision is the revision of the last successful Helm release. 16574 + Deprecated: Use History instead. 16575 + type: integer 16576 + observedGeneration: 16577 + description: ObservedGeneration is the last observed generation. 16578 + format: int64 16579 + type: integer 16580 + observedPostRenderersDigest: 16581 + description: |- 16582 + ObservedPostRenderersDigest is the digest for the post-renderers of 16583 + the last successful reconciliation attempt. 16584 + type: string 16585 + storageNamespace: 16586 + description: |- 16587 + StorageNamespace is the namespace of the Helm release storage for the 16588 + current release. 16589 + maxLength: 63 16590 + minLength: 1 16591 + type: string 16592 + upgradeFailures: 16593 + description: |- 16594 + UpgradeFailures is the upgrade failure count against the latest desired 16595 + state. It is reset after a successful reconciliation. 16596 + format: int64 16597 + type: integer 16598 + type: object 16599 + type: object 16600 + served: true 16601 + storage: true 16602 + subresources: 16603 + status: {} 16604 + - additionalPrinterColumns: 16605 + - jsonPath: .metadata.creationTimestamp 16606 + name: Age 16607 + type: date 16608 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 16609 + name: Ready 16610 + type: string 16611 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 16612 + name: Status 16613 + type: string 16614 + deprecated: true 16615 + deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2 16616 + name: v2beta1 16617 + schema: 16618 + openAPIV3Schema: 16619 + description: HelmRelease is the Schema for the helmreleases API 16620 + properties: 16621 + apiVersion: 16622 + description: |- 16623 + APIVersion defines the versioned schema of this representation of an object. 16624 + Servers should convert recognized schemas to the latest internal value, and 16625 + may reject unrecognized values. 16626 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 16627 + type: string 16628 + kind: 16629 + description: |- 16630 + Kind is a string value representing the REST resource this object represents. 16631 + Servers may infer this from the endpoint the client submits requests to. 16632 + Cannot be updated. 16633 + In CamelCase. 16634 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 16635 + type: string 16636 + metadata: 16637 + type: object 16638 + spec: 16639 + description: HelmReleaseSpec defines the desired state of a Helm release. 16640 + properties: 16641 + chart: 16642 + description: |- 16643 + Chart defines the template of the v1beta2.HelmChart that should be created 16644 + for this HelmRelease. 16645 + properties: 16646 + metadata: 16647 + description: ObjectMeta holds the template for metadata like labels 16648 + and annotations. 16649 + properties: 16650 + annotations: 16651 + additionalProperties: 16652 + type: string 16653 + description: |- 16654 + Annotations is an unstructured key value map stored with a resource that may be 16655 + set by external tools to store and retrieve arbitrary metadata. They are not 16656 + queryable and should be preserved when modifying objects. 16657 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 16658 + type: object 16659 + labels: 16660 + additionalProperties: 16661 + type: string 16662 + description: |- 16663 + Map of string keys and values that can be used to organize and categorize 16664 + (scope and select) objects. 16665 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 16666 + type: object 16667 + type: object 16668 + spec: 16669 + description: Spec holds the template for the v1beta2.HelmChartSpec 16670 + for this HelmRelease. 16671 + properties: 16672 + chart: 16673 + description: The name or path the Helm chart is available 16674 + at in the SourceRef. 16675 + type: string 16676 + interval: 16677 + description: |- 16678 + Interval at which to check the v1beta2.Source for updates. Defaults to 16679 + 'HelmReleaseSpec.Interval'. 16680 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16681 + type: string 16682 + reconcileStrategy: 16683 + default: ChartVersion 16684 + description: |- 16685 + Determines what enables the creation of a new artifact. Valid values are 16686 + ('ChartVersion', 'Revision'). 16687 + See the documentation of the values for an explanation on their behavior. 16688 + Defaults to ChartVersion when omitted. 16689 + enum: 16690 + - ChartVersion 16691 + - Revision 16692 + type: string 16693 + sourceRef: 16694 + description: The name and namespace of the v1beta2.Source 16695 + the chart is available at. 16696 + properties: 16697 + apiVersion: 16698 + description: APIVersion of the referent. 16699 + type: string 16700 + kind: 16701 + description: Kind of the referent. 16702 + enum: 16703 + - HelmRepository 16704 + - GitRepository 16705 + - Bucket 16706 + type: string 16707 + name: 16708 + description: Name of the referent. 16709 + maxLength: 253 16710 + minLength: 1 16711 + type: string 16712 + namespace: 16713 + description: Namespace of the referent. 16714 + maxLength: 63 16715 + minLength: 1 16716 + type: string 16717 required: 16718 - - chart 16719 - - interval 16720 + - kind 16721 + - name 16722 type: object 16723 - status: 16724 - default: 16725 - observedGeneration: -1 16726 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 16727 + valuesFile: 16728 + description: |- 16729 + Alternative values file to use as the default chart values, expected to 16730 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 16731 + for backwards compatibility the file defined here is merged before the 16732 + ValuesFiles items. Ignored when omitted. 16733 + type: string 16734 + valuesFiles: 16735 + description: |- 16736 + Alternative list of values files to use as the chart values (values.yaml 16737 + is not included by default), expected to be a relative path in the SourceRef. 16738 + Values files are merged in the order of this list with the last file overriding 16739 + the first. Ignored when omitted. 16740 + items: 16741 + type: string 16742 + type: array 16743 + verify: 16744 + description: |- 16745 + Verify contains the secret name containing the trusted public keys 16746 + used to verify the signature and specifies which provider to use to check 16747 + whether OCI image is authentic. 16748 + This field is only supported for OCI sources. 16749 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 16750 properties: 16751 - conditions: 16752 - description: Conditions holds the conditions for the HelmRelease. 16753 - items: 16754 - description: Condition contains details for one aspect of the current state of this API 16755 - Resource. 16756 - properties: 16757 - lastTransitionTime: 16758 - description: |- 16759 - lastTransitionTime is the last time the condition transitioned from one status to another. 16760 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16761 - format: date-time 16762 - type: string 16763 - message: 16764 - description: |- 16765 - message is a human readable message indicating details about the transition. 16766 - This may be an empty string. 16767 - maxLength: 32768 16768 - type: string 16769 - observedGeneration: 16770 - description: |- 16771 - observedGeneration represents the .metadata.generation that the condition was set based upon. 16772 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16773 - with respect to the current state of the instance. 16774 - format: int64 16775 - minimum: 0 16776 - type: integer 16777 - reason: 16778 - description: |- 16779 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 16780 - Producers of specific condition types may define expected values and meanings for this field, 16781 - and whether the values are considered a guaranteed API. 16782 - The value should be a CamelCase string. 16783 - This field may not be empty. 16784 - maxLength: 1024 16785 - minLength: 1 16786 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16787 - type: string 16788 - status: 16789 - description: status of the condition, one of True, False, Unknown. 16790 - enum: 16791 - - "True" 16792 - - "False" 16793 - - Unknown 16794 - type: string 16795 - type: 16796 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 16797 - maxLength: 316 16798 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16799 - type: string 16800 - required: 16801 - - lastTransitionTime 16802 - - message 16803 - - reason 16804 - - status 16805 - - type 16806 - type: object 16807 - type: array 16808 - failures: 16809 - description: |- 16810 - Failures is the reconciliation failure count against the latest desired 16811 - state. It is reset after a successful reconciliation. 16812 - format: int64 16813 - type: integer 16814 - helmChart: 16815 - description: |- 16816 - HelmChart is the namespaced name of the HelmChart resource created by 16817 - the controller for the HelmRelease. 16818 - type: string 16819 - history: 16820 - description: |- 16821 - History holds the history of Helm releases performed for this HelmRelease 16822 - up to the last successfully completed release. 16823 + provider: 16824 + default: cosign 16825 + description: Provider specifies the technology used to 16826 + sign the OCI Helm chart. 16827 + enum: 16828 + - cosign 16829 + type: string 16830 + secretRef: 16831 + description: |- 16832 + SecretRef specifies the Kubernetes Secret containing the 16833 + trusted public keys. 16834 + properties: 16835 + name: 16836 + description: Name of the referent. 16837 + type: string 16838 + required: 16839 + - name 16840 + type: object 16841 + required: 16842 + - provider 16843 + type: object 16844 + version: 16845 + default: '*' 16846 + description: |- 16847 + Version semver expression, ignored for charts from v1beta2.GitRepository and 16848 + v1beta2.Bucket sources. Defaults to latest when omitted. 16849 + type: string 16850 + required: 16851 + - chart 16852 + - sourceRef 16853 + type: object 16854 + required: 16855 + - spec 16856 + type: object 16857 + chartRef: 16858 + description: |- 16859 + ChartRef holds a reference to a source controller resource containing the 16860 + Helm chart artifact. 16861 16862 - Note: this field is provisional to the v2beta2 API, and not actively used 16863 - by v2beta1 HelmReleases. 16864 - items: 16865 - description: |- 16866 - Snapshot captures a point-in-time copy of the status information for a Helm release, 16867 - as managed by the controller. 16868 - properties: 16869 - apiVersion: 16870 - description: |- 16871 - APIVersion is the API version of the Snapshot. 16872 - Provisional: when the calculation method of the Digest field is changed, 16873 - this field will be used to distinguish between the old and new methods. 16874 - type: string 16875 - appVersion: 16876 - description: AppVersion is the chart app version of the release object in storage. 16877 - type: string 16878 - chartName: 16879 - description: ChartName is the chart name of the release object in storage. 16880 - type: string 16881 - chartVersion: 16882 - description: |- 16883 - ChartVersion is the chart version of the release object in 16884 - storage. 16885 - type: string 16886 - configDigest: 16887 - description: |- 16888 - ConfigDigest is the checksum of the config (better known as 16889 - "values") of the release object in storage. 16890 - It has the format of `<algo>:<checksum>`. 16891 - type: string 16892 - deleted: 16893 - description: Deleted is when the release was deleted. 16894 - format: date-time 16895 - type: string 16896 - digest: 16897 - description: |- 16898 - Digest is the checksum of the release object in storage. 16899 - It has the format of `<algo>:<checksum>`. 16900 - type: string 16901 - firstDeployed: 16902 - description: FirstDeployed is when the release was first deployed. 16903 - format: date-time 16904 - type: string 16905 - lastDeployed: 16906 - description: LastDeployed is when the release was last deployed. 16907 - format: date-time 16908 - type: string 16909 - name: 16910 - description: Name is the name of the release. 16911 - type: string 16912 - namespace: 16913 - description: Namespace is the namespace the release is deployed to. 16914 - type: string 16915 - ociDigest: 16916 - description: OCIDigest is the digest of the OCI artifact associated with the release. 16917 - type: string 16918 - status: 16919 - description: Status is the current state of the release. 16920 - type: string 16921 - testHooks: 16922 - additionalProperties: 16923 - description: |- 16924 - TestHookStatus holds the status information for a test hook as observed 16925 - to be run by the controller. 16926 - properties: 16927 - lastCompleted: 16928 - description: LastCompleted is the time the test hook last completed. 16929 - format: date-time 16930 - type: string 16931 - lastStarted: 16932 - description: LastStarted is the time the test hook was last started. 16933 - format: date-time 16934 - type: string 16935 - phase: 16936 - description: Phase the test hook was observed to be in. 16937 - type: string 16938 - type: object 16939 - description: |- 16940 - TestHooks is the list of test hooks for the release as observed to be 16941 - run by the controller. 16942 - type: object 16943 - version: 16944 - description: Version is the version of the release object in storage. 16945 - type: integer 16946 - required: 16947 - - chartName 16948 - - chartVersion 16949 - - configDigest 16950 - - digest 16951 - - firstDeployed 16952 - - lastDeployed 16953 - - name 16954 - - namespace 16955 - - status 16956 - - version 16957 - type: object 16958 - type: array 16959 - installFailures: 16960 - description: |- 16961 - InstallFailures is the install failure count against the latest desired 16962 - state. It is reset after a successful reconciliation. 16963 - format: int64 16964 - type: integer 16965 - lastAppliedRevision: 16966 - description: LastAppliedRevision is the revision of the last successfully applied source. 16967 - type: string 16968 - lastAttemptedConfigDigest: 16969 - description: |- 16970 - LastAttemptedConfigDigest is the digest for the config (better known as 16971 - "values") of the last reconciliation attempt. 16972 + Note: this field is provisional to the v2 API, and not actively used 16973 + by v2beta1 HelmReleases. 16974 + properties: 16975 + apiVersion: 16976 + description: APIVersion of the referent. 16977 + type: string 16978 + kind: 16979 + description: Kind of the referent. 16980 + enum: 16981 + - OCIRepository 16982 + - HelmChart 16983 + type: string 16984 + name: 16985 + description: Name of the referent. 16986 + maxLength: 253 16987 + minLength: 1 16988 + type: string 16989 + namespace: 16990 + description: |- 16991 + Namespace of the referent, defaults to the namespace of the Kubernetes 16992 + resource object that contains the reference. 16993 + maxLength: 63 16994 + minLength: 1 16995 + type: string 16996 + required: 16997 + - kind 16998 + - name 16999 + type: object 17000 + dependsOn: 17001 + description: |- 17002 + DependsOn may contain a meta.NamespacedObjectReference slice with 17003 + references to HelmRelease resources that must be ready before this HelmRelease 17004 + can be reconciled. 17005 + items: 17006 + description: |- 17007 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 17008 + namespace. 17009 + properties: 17010 + name: 17011 + description: Name of the referent. 17012 + type: string 17013 + namespace: 17014 + description: Namespace of the referent, when not specified it 17015 + acts as LocalObjectReference. 17016 + type: string 17017 + required: 17018 + - name 17019 + type: object 17020 + type: array 17021 + driftDetection: 17022 + description: |- 17023 + DriftDetection holds the configuration for detecting and handling 17024 + differences between the manifest in the Helm storage and the resources 17025 + currently existing in the cluster. 17026 17027 - Note: this field is provisional to the v2beta2 API, and not actively used 17028 - by v2beta1 HelmReleases. 17029 - type: string 17030 - lastAttemptedGeneration: 17031 - description: |- 17032 - LastAttemptedGeneration is the last generation the controller attempted 17033 - to reconcile. 17034 + Note: this field is provisional to the v2beta2 API, and not actively used 17035 + by v2beta1 HelmReleases. 17036 + properties: 17037 + ignore: 17038 + description: |- 17039 + Ignore contains a list of rules for specifying which changes to ignore 17040 + during diffing. 17041 + items: 17042 + description: |- 17043 + IgnoreRule defines a rule to selectively disregard specific changes during 17044 + the drift detection process. 17045 + properties: 17046 + paths: 17047 + description: |- 17048 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 17049 + consideration in a Kubernetes object. 17050 + items: 17051 + type: string 17052 + type: array 17053 + target: 17054 + description: |- 17055 + Target is a selector for specifying Kubernetes objects to which this 17056 + rule applies. 17057 + If Target is not set, the Paths will be ignored for all Kubernetes 17058 + objects within the manifest of the Helm release. 17059 + properties: 17060 + annotationSelector: 17061 + description: |- 17062 + AnnotationSelector is a string that follows the label selection expression 17063 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17064 + It matches with the resource annotations. 17065 + type: string 17066 + group: 17067 + description: |- 17068 + Group is the API group to select resources from. 17069 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17070 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17071 + type: string 17072 + kind: 17073 + description: |- 17074 + Kind of the API Group to select resources from. 17075 + Together with Group and Version it is capable of unambiguously 17076 + identifying and/or selecting resources. 17077 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17078 + type: string 17079 + labelSelector: 17080 + description: |- 17081 + LabelSelector is a string that follows the label selection expression 17082 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17083 + It matches with the resource labels. 17084 + type: string 17085 + name: 17086 + description: Name to match resources with. 17087 + type: string 17088 + namespace: 17089 + description: Namespace to select resources from. 17090 + type: string 17091 + version: 17092 + description: |- 17093 + Version of the API Group to select resources from. 17094 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17095 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17096 + type: string 17097 + type: object 17098 + required: 17099 + - paths 17100 + type: object 17101 + type: array 17102 + mode: 17103 + description: |- 17104 + Mode defines how differences should be handled between the Helm manifest 17105 + and the manifest currently applied to the cluster. 17106 + If not explicitly set, it defaults to DiffModeDisabled. 17107 + enum: 17108 + - enabled 17109 + - warn 17110 + - disabled 17111 + type: string 17112 + type: object 17113 + install: 17114 + description: Install holds the configuration for Helm install actions 17115 + for this HelmRelease. 17116 + properties: 17117 + crds: 17118 + description: |- 17119 + CRDs upgrade CRDs from the Helm Chart's crds directory according 17120 + to the CRD upgrade policy provided here. Valid values are `Skip`, 17121 + `Create` or `CreateReplace`. Default is `Create` and if omitted 17122 + CRDs are installed but not updated. 17123 17124 - Note: this field is provisional to the v2beta2 API, and not actively used 17125 - by v2beta1 HelmReleases. 17126 - format: int64 17127 - type: integer 17128 - lastAttemptedReleaseAction: 17129 - description: |- 17130 - LastAttemptedReleaseAction is the last release action performed for this 17131 - HelmRelease. It is used to determine the active remediation strategy. 17132 + Skip: do neither install nor replace (update) any CRDs. 17133 17134 - Note: this field is provisional to the v2beta2 API, and not actively used 17135 - by v2beta1 HelmReleases. 17136 - type: string 17137 - lastAttemptedRevision: 17138 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 17139 - type: string 17140 - lastAttemptedValuesChecksum: 17141 - description: |- 17142 - LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last 17143 - reconciliation attempt. 17144 - type: string 17145 - lastHandledForceAt: 17146 - description: |- 17147 - LastHandledForceAt holds the value of the most recent force request 17148 - value, so a change of the annotation value can be detected. 17149 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 17150 17151 - Note: this field is provisional to the v2beta2 API, and not actively used 17152 - by v2beta1 HelmReleases. 17153 - type: string 17154 - lastHandledReconcileAt: 17155 - description: |- 17156 - LastHandledReconcileAt holds the value of the most recent 17157 - reconcile request value, so a change of the annotation value 17158 - can be detected. 17159 - type: string 17160 - lastHandledResetAt: 17161 - description: |- 17162 - LastHandledResetAt holds the value of the most recent reset request 17163 - value, so a change of the annotation value can be detected. 17164 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 17165 + but not deleted. 17166 17167 - Note: this field is provisional to the v2beta2 API, and not actively used 17168 - by v2beta1 HelmReleases. 17169 - type: string 17170 - lastReleaseRevision: 17171 - description: LastReleaseRevision is the revision of the last successful Helm release. 17172 - type: integer 17173 - observedGeneration: 17174 - description: ObservedGeneration is the last observed generation. 17175 - format: int64 17176 - type: integer 17177 - observedPostRenderersDigest: 17178 - description: |- 17179 - ObservedPostRenderersDigest is the digest for the post-renderers of 17180 - the last successful reconciliation attempt. 17181 - type: string 17182 - storageNamespace: 17183 - description: |- 17184 - StorageNamespace is the namespace of the Helm release storage for the 17185 - current release. 17186 + By default, CRDs are applied (installed) during Helm install action. 17187 + With this option users can opt-in to CRD replace existing CRDs on Helm 17188 + install actions, which is not (yet) natively supported by Helm. 17189 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 17190 + enum: 17191 + - Skip 17192 + - Create 17193 + - CreateReplace 17194 + type: string 17195 + createNamespace: 17196 + description: |- 17197 + CreateNamespace tells the Helm install action to create the 17198 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 17199 + On uninstall, the namespace will not be garbage collected. 17200 + type: boolean 17201 + disableHooks: 17202 + description: DisableHooks prevents hooks from running during the 17203 + Helm install action. 17204 + type: boolean 17205 + disableOpenAPIValidation: 17206 + description: |- 17207 + DisableOpenAPIValidation prevents the Helm install action from validating 17208 + rendered templates against the Kubernetes OpenAPI Schema. 17209 + type: boolean 17210 + disableWait: 17211 + description: |- 17212 + DisableWait disables the waiting for resources to be ready after a Helm 17213 + install has been performed. 17214 + type: boolean 17215 + disableWaitForJobs: 17216 + description: |- 17217 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 17218 + install has been performed. 17219 + type: boolean 17220 + remediation: 17221 + description: |- 17222 + Remediation holds the remediation configuration for when the Helm install 17223 + action for the HelmRelease fails. The default is to not perform any action. 17224 + properties: 17225 + ignoreTestFailures: 17226 + description: |- 17227 + IgnoreTestFailures tells the controller to skip remediation when the Helm 17228 + tests are run after an install action but fail. Defaults to 17229 + 'Test.IgnoreFailures'. 17230 + type: boolean 17231 + remediateLastFailure: 17232 + description: |- 17233 + RemediateLastFailure tells the controller to remediate the last failure, when 17234 + no retries remain. Defaults to 'false'. 17235 + type: boolean 17236 + retries: 17237 + description: |- 17238 + Retries is the number of retries that should be attempted on failures before 17239 + bailing. Remediation, using an uninstall, is performed between each attempt. 17240 + Defaults to '0', a negative integer equals to unlimited retries. 17241 + type: integer 17242 + type: object 17243 + replace: 17244 + description: |- 17245 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 17246 + if that name is a deleted release which remains in the history. 17247 + type: boolean 17248 + skipCRDs: 17249 + description: |- 17250 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 17251 + CRDs are installed if not already present. 17252 17253 - Note: this field is provisional to the v2beta2 API, and not actively used 17254 - by v2beta1 HelmReleases. 17255 - type: string 17256 - upgradeFailures: 17257 - description: |- 17258 - UpgradeFailures is the upgrade failure count against the latest desired 17259 - state. It is reset after a successful reconciliation. 17260 - format: int64 17261 - type: integer 17262 - type: object 17263 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 17264 + type: boolean 17265 + timeout: 17266 + description: |- 17267 + Timeout is the time to wait for any individual Kubernetes operation (like 17268 + Jobs for hooks) during the performance of a Helm install action. Defaults to 17269 + 'HelmReleaseSpec.Timeout'. 17270 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17271 + type: string 17272 type: object 17273 - served: true 17274 - storage: false 17275 - subresources: 17276 - status: {} 17277 - - additionalPrinterColumns: 17278 - - jsonPath: .metadata.creationTimestamp 17279 - name: Age 17280 - type: date 17281 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 17282 - name: Ready 17283 - type: string 17284 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 17285 - name: Status 17286 - type: string 17287 - deprecated: true 17288 - deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 17289 - name: v2beta2 17290 - schema: 17291 - openAPIV3Schema: 17292 - description: HelmRelease is the Schema for the helmreleases API 17293 + interval: 17294 + description: |- 17295 + Interval at which to reconcile the Helm release. 17296 + This interval is approximate and may be subject to jitter to ensure 17297 + efficient use of resources. 17298 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17299 + type: string 17300 + kubeConfig: 17301 + description: |- 17302 + KubeConfig for reconciling the HelmRelease on a remote cluster. 17303 + When used in combination with HelmReleaseSpec.ServiceAccountName, 17304 + forces the controller to act on behalf of that Service Account at the 17305 + target cluster. 17306 + If the --default-service-account flag is set, its value will be used as 17307 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 17308 + is empty. 17309 properties: 17310 - apiVersion: 17311 - description: |- 17312 - APIVersion defines the versioned schema of this representation of an object. 17313 - Servers should convert recognized schemas to the latest internal value, and 17314 - may reject unrecognized values. 17315 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17316 + secretRef: 17317 + description: |- 17318 + SecretRef holds the name of a secret that contains a key with 17319 + the kubeconfig file as the value. If no key is set, the key will default 17320 + to 'value'. 17321 + It is recommended that the kubeconfig is self-contained, and the secret 17322 + is regularly updated if credentials such as a cloud-access-token expire. 17323 + Cloud specific `cmd-path` auth helpers will not function without adding 17324 + binaries and credentials to the Pod that is responsible for reconciling 17325 + Kubernetes resources. 17326 + properties: 17327 + key: 17328 + description: Key in the Secret, when not specified an implementation-specific 17329 + default key is used. 17330 type: string 17331 - kind: 17332 - description: |- 17333 - Kind is a string value representing the REST resource this object represents. 17334 - Servers may infer this from the endpoint the client submits requests to. 17335 - Cannot be updated. 17336 - In CamelCase. 17337 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17338 + name: 17339 + description: Name of the Secret. 17340 type: string 17341 - metadata: 17342 - type: object 17343 - spec: 17344 - description: HelmReleaseSpec defines the desired state of a Helm release. 17345 - properties: 17346 - chart: 17347 - description: |- 17348 - Chart defines the template of the v1beta2.HelmChart that should be created 17349 - for this HelmRelease. 17350 - properties: 17351 - metadata: 17352 - description: ObjectMeta holds the template for metadata like labels and annotations. 17353 - properties: 17354 - annotations: 17355 - additionalProperties: 17356 - type: string 17357 - description: |- 17358 - Annotations is an unstructured key value map stored with a resource that may be 17359 - set by external tools to store and retrieve arbitrary metadata. They are not 17360 - queryable and should be preserved when modifying objects. 17361 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 17362 - type: object 17363 - labels: 17364 - additionalProperties: 17365 - type: string 17366 - description: |- 17367 - Map of string keys and values that can be used to organize and categorize 17368 - (scope and select) objects. 17369 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 17370 - type: object 17371 - type: object 17372 - spec: 17373 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 17374 - properties: 17375 - chart: 17376 - description: The name or path the Helm chart is available at in the SourceRef. 17377 - maxLength: 2048 17378 - minLength: 1 17379 - type: string 17380 - ignoreMissingValuesFiles: 17381 - description: IgnoreMissingValuesFiles controls whether to silently ignore 17382 - missing values files rather than failing. 17383 - type: boolean 17384 - interval: 17385 - description: |- 17386 - Interval at which to check the v1.Source for updates. Defaults to 17387 - 'HelmReleaseSpec.Interval'. 17388 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17389 - type: string 17390 - reconcileStrategy: 17391 - default: ChartVersion 17392 - description: |- 17393 - Determines what enables the creation of a new artifact. Valid values are 17394 - ('ChartVersion', 'Revision'). 17395 - See the documentation of the values for an explanation on their behavior. 17396 - Defaults to ChartVersion when omitted. 17397 - enum: 17398 - - ChartVersion 17399 - - Revision 17400 - type: string 17401 - sourceRef: 17402 - description: The name and namespace of the v1.Source the chart is available 17403 - at. 17404 - properties: 17405 - apiVersion: 17406 - description: APIVersion of the referent. 17407 - type: string 17408 - kind: 17409 - description: Kind of the referent. 17410 - enum: 17411 - - HelmRepository 17412 - - GitRepository 17413 - - Bucket 17414 - type: string 17415 - name: 17416 - description: Name of the referent. 17417 - maxLength: 253 17418 - minLength: 1 17419 - type: string 17420 - namespace: 17421 - description: Namespace of the referent. 17422 - maxLength: 63 17423 - minLength: 1 17424 - type: string 17425 - required: 17426 - - kind 17427 - - name 17428 - type: object 17429 - valuesFile: 17430 - description: |- 17431 - Alternative values file to use as the default chart values, expected to 17432 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 17433 - for backwards compatibility the file defined here is merged before the 17434 - ValuesFiles items. Ignored when omitted. 17435 - type: string 17436 - valuesFiles: 17437 - description: |- 17438 - Alternative list of values files to use as the chart values (values.yaml 17439 - is not included by default), expected to be a relative path in the SourceRef. 17440 - Values files are merged in the order of this list with the last file overriding 17441 - the first. Ignored when omitted. 17442 - items: 17443 - type: string 17444 - type: array 17445 - verify: 17446 - description: |- 17447 - Verify contains the secret name containing the trusted public keys 17448 - used to verify the signature and specifies which provider to use to check 17449 - whether OCI image is authentic. 17450 - This field is only supported for OCI sources. 17451 - Chart dependencies, which are not bundled in the umbrella chart artifact, 17452 - are not verified. 17453 - properties: 17454 - provider: 17455 - default: cosign 17456 - description: Provider specifies the technology used to sign the OCI 17457 - Helm chart. 17458 - enum: 17459 - - cosign 17460 - - notation 17461 - type: string 17462 - secretRef: 17463 - description: |- 17464 - SecretRef specifies the Kubernetes Secret containing the 17465 - trusted public keys. 17466 - properties: 17467 - name: 17468 - description: Name of the referent. 17469 - type: string 17470 - required: 17471 - - name 17472 - type: object 17473 - required: 17474 - - provider 17475 - type: object 17476 - version: 17477 - default: '*' 17478 - description: |- 17479 - Version semver expression, ignored for charts from v1beta2.GitRepository and 17480 - v1beta2.Bucket sources. Defaults to latest when omitted. 17481 - type: string 17482 - required: 17483 - - chart 17484 - - sourceRef 17485 - type: object 17486 - required: 17487 - - spec 17488 - type: object 17489 - chartRef: 17490 - description: |- 17491 - ChartRef holds a reference to a source controller resource containing the 17492 - Helm chart artifact. 17493 + required: 17494 + - name 17495 + type: object 17496 + required: 17497 + - secretRef 17498 + type: object 17499 + maxHistory: 17500 + description: |- 17501 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 17502 + Use '0' for an unlimited number of revisions; defaults to '10'. 17503 + type: integer 17504 + persistentClient: 17505 + description: |- 17506 + PersistentClient tells the controller to use a persistent Kubernetes 17507 + client for this release. When enabled, the client will be reused for the 17508 + duration of the reconciliation, instead of being created and destroyed 17509 + for each (step of a) Helm action. 17510 17511 - Note: this field is provisional to the v2 API, and not actively used 17512 - by v2beta2 HelmReleases. 17513 - properties: 17514 - apiVersion: 17515 - description: APIVersion of the referent. 17516 - type: string 17517 - kind: 17518 - description: Kind of the referent. 17519 - enum: 17520 - - OCIRepository 17521 - - HelmChart 17522 - type: string 17523 - name: 17524 - description: Name of the referent. 17525 - maxLength: 253 17526 - minLength: 1 17527 - type: string 17528 - namespace: 17529 - description: |- 17530 - Namespace of the referent, defaults to the namespace of the Kubernetes 17531 - resource object that contains the reference. 17532 - maxLength: 63 17533 - minLength: 1 17534 - type: string 17535 - required: 17536 - - kind 17537 - - name 17538 + This can improve performance, but may cause issues with some Helm charts 17539 + that for example do create Custom Resource Definitions during installation 17540 + outside Helm's CRD lifecycle hooks, which are then not observed to be 17541 + available by e.g. post-install hooks. 17542 + 17543 + If not set, it defaults to true. 17544 + type: boolean 17545 + postRenderers: 17546 + description: |- 17547 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 17548 + of their definition. 17549 + items: 17550 + description: PostRenderer contains a Helm PostRenderer specification. 17551 + properties: 17552 + kustomize: 17553 + description: Kustomization to apply as PostRenderer. 17554 + properties: 17555 + images: 17556 + description: |- 17557 + Images is a list of (image name, new name, new tag or digest) 17558 + for changing image names, tags or digests. This can also be achieved with a 17559 + patch, but this operator is simpler to specify. 17560 + items: 17561 + description: Image contains an image name, a new name, 17562 + a new tag or digest, which will replace the original 17563 + name and tag. 17564 + properties: 17565 + digest: 17566 + description: |- 17567 + Digest is the value used to replace the original image tag. 17568 + If digest is present NewTag value is ignored. 17569 + type: string 17570 + name: 17571 + description: Name is a tag-less image name. 17572 + type: string 17573 + newName: 17574 + description: NewName is the value used to replace 17575 + the original name. 17576 + type: string 17577 + newTag: 17578 + description: NewTag is the value used to replace the 17579 + original tag. 17580 + type: string 17581 + required: 17582 + - name 17583 + type: object 17584 + type: array 17585 + patches: 17586 + description: |- 17587 + Strategic merge and JSON patches, defined as inline YAML objects, 17588 + capable of targeting objects based on kind, label and annotation selectors. 17589 + items: 17590 + description: |- 17591 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 17592 + be applied to. 17593 + properties: 17594 + patch: 17595 + description: |- 17596 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 17597 + an array of operation objects. 17598 + type: string 17599 + target: 17600 + description: Target points to the resources that the 17601 + patch document should be applied to. 17602 + properties: 17603 + annotationSelector: 17604 + description: |- 17605 + AnnotationSelector is a string that follows the label selection expression 17606 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17607 + It matches with the resource annotations. 17608 + type: string 17609 + group: 17610 + description: |- 17611 + Group is the API group to select resources from. 17612 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17613 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17614 + type: string 17615 + kind: 17616 + description: |- 17617 + Kind of the API Group to select resources from. 17618 + Together with Group and Version it is capable of unambiguously 17619 + identifying and/or selecting resources. 17620 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17621 + type: string 17622 + labelSelector: 17623 + description: |- 17624 + LabelSelector is a string that follows the label selection expression 17625 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17626 + It matches with the resource labels. 17627 + type: string 17628 + name: 17629 + description: Name to match resources with. 17630 + type: string 17631 + namespace: 17632 + description: Namespace to select resources from. 17633 + type: string 17634 + version: 17635 + description: |- 17636 + Version of the API Group to select resources from. 17637 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17638 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17639 + type: string 17640 type: object 17641 - dependsOn: 17642 - description: |- 17643 - DependsOn may contain a meta.NamespacedObjectReference slice with 17644 - references to HelmRelease resources that must be ready before this HelmRelease 17645 - can be reconciled. 17646 + required: 17647 + - patch 17648 + type: object 17649 + type: array 17650 + patchesJson6902: 17651 + description: JSON 6902 patches, defined as inline YAML objects. 17652 + items: 17653 + description: JSON6902Patch contains a JSON6902 patch and 17654 + the target the patch should be applied to. 17655 + properties: 17656 + patch: 17657 + description: Patch contains the JSON6902 patch document 17658 + with an array of operation objects. 17659 items: 17660 - description: |- 17661 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 17662 - namespace. 17663 - properties: 17664 - name: 17665 - description: Name of the referent. 17666 - type: string 17667 - namespace: 17668 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 17669 - type: string 17670 - required: 17671 - - name 17672 - type: object 17673 + description: |- 17674 + JSON6902 is a JSON6902 operation object. 17675 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 17676 + properties: 17677 + from: 17678 + description: |- 17679 + From contains a JSON-pointer value that references a location within the target document where the operation is 17680 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 17681 + type: string 17682 + op: 17683 + description: |- 17684 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 17685 + "test". 17686 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 17687 + enum: 17688 + - test 17689 + - remove 17690 + - add 17691 + - replace 17692 + - move 17693 + - copy 17694 + type: string 17695 + path: 17696 + description: |- 17697 + Path contains the JSON-pointer value that references a location within the target document where the operation 17698 + is performed. The meaning of the value depends on the value of Op. 17699 + type: string 17700 + value: 17701 + description: |- 17702 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 17703 + account by all operations. 17704 + x-kubernetes-preserve-unknown-fields: true 17705 + required: 17706 + - op 17707 + - path 17708 + type: object 17709 type: array 17710 - driftDetection: 17711 - description: |- 17712 - DriftDetection holds the configuration for detecting and handling 17713 - differences between the manifest in the Helm storage and the resources 17714 - currently existing in the cluster. 17715 + target: 17716 + description: Target points to the resources that the 17717 + patch document should be applied to. 17718 properties: 17719 - ignore: 17720 - description: |- 17721 - Ignore contains a list of rules for specifying which changes to ignore 17722 - during diffing. 17723 - items: 17724 - description: |- 17725 - IgnoreRule defines a rule to selectively disregard specific changes during 17726 - the drift detection process. 17727 - properties: 17728 - paths: 17729 - description: |- 17730 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 17731 - consideration in a Kubernetes object. 17732 - items: 17733 - type: string 17734 - type: array 17735 - target: 17736 - description: |- 17737 - Target is a selector for specifying Kubernetes objects to which this 17738 - rule applies. 17739 - If Target is not set, the Paths will be ignored for all Kubernetes 17740 - objects within the manifest of the Helm release. 17741 - properties: 17742 - annotationSelector: 17743 - description: |- 17744 - AnnotationSelector is a string that follows the label selection expression 17745 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17746 - It matches with the resource annotations. 17747 - type: string 17748 - group: 17749 - description: |- 17750 - Group is the API group to select resources from. 17751 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17752 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17753 - type: string 17754 - kind: 17755 - description: |- 17756 - Kind of the API Group to select resources from. 17757 - Together with Group and Version it is capable of unambiguously 17758 - identifying and/or selecting resources. 17759 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17760 - type: string 17761 - labelSelector: 17762 - description: |- 17763 - LabelSelector is a string that follows the label selection expression 17764 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17765 - It matches with the resource labels. 17766 - type: string 17767 - name: 17768 - description: Name to match resources with. 17769 - type: string 17770 - namespace: 17771 - description: Namespace to select resources from. 17772 - type: string 17773 - version: 17774 - description: |- 17775 - Version of the API Group to select resources from. 17776 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17777 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17778 - type: string 17779 - type: object 17780 - required: 17781 - - paths 17782 - type: object 17783 - type: array 17784 - mode: 17785 - description: |- 17786 - Mode defines how differences should be handled between the Helm manifest 17787 - and the manifest currently applied to the cluster. 17788 - If not explicitly set, it defaults to DiffModeDisabled. 17789 - enum: 17790 - - enabled 17791 - - warn 17792 - - disabled 17793 - type: string 17794 + annotationSelector: 17795 + description: |- 17796 + AnnotationSelector is a string that follows the label selection expression 17797 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17798 + It matches with the resource annotations. 17799 + type: string 17800 + group: 17801 + description: |- 17802 + Group is the API group to select resources from. 17803 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17804 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17805 + type: string 17806 + kind: 17807 + description: |- 17808 + Kind of the API Group to select resources from. 17809 + Together with Group and Version it is capable of unambiguously 17810 + identifying and/or selecting resources. 17811 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17812 + type: string 17813 + labelSelector: 17814 + description: |- 17815 + LabelSelector is a string that follows the label selection expression 17816 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17817 + It matches with the resource labels. 17818 + type: string 17819 + name: 17820 + description: Name to match resources with. 17821 + type: string 17822 + namespace: 17823 + description: Namespace to select resources from. 17824 + type: string 17825 + version: 17826 + description: |- 17827 + Version of the API Group to select resources from. 17828 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17829 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17830 + type: string 17831 type: object 17832 - install: 17833 - description: Install holds the configuration for Helm install actions for this HelmRelease. 17834 - properties: 17835 - crds: 17836 - description: |- 17837 - CRDs upgrade CRDs from the Helm Chart's crds directory according 17838 - to the CRD upgrade policy provided here. Valid values are `Skip`, 17839 - `Create` or `CreateReplace`. Default is `Create` and if omitted 17840 - CRDs are installed but not updated. 17841 + required: 17842 + - patch 17843 + - target 17844 + type: object 17845 + type: array 17846 + patchesStrategicMerge: 17847 + description: Strategic merge patches, defined as inline 17848 + YAML objects. 17849 + items: 17850 + x-kubernetes-preserve-unknown-fields: true 17851 + type: array 17852 + type: object 17853 + type: object 17854 + type: array 17855 + releaseName: 17856 + description: |- 17857 + ReleaseName used for the Helm release. Defaults to a composition of 17858 + '[TargetNamespace-]Name'. 17859 + maxLength: 53 17860 + minLength: 1 17861 + type: string 17862 + rollback: 17863 + description: Rollback holds the configuration for Helm rollback actions 17864 + for this HelmRelease. 17865 + properties: 17866 + cleanupOnFail: 17867 + description: |- 17868 + CleanupOnFail allows deletion of new resources created during the Helm 17869 + rollback action when it fails. 17870 + type: boolean 17871 + disableHooks: 17872 + description: DisableHooks prevents hooks from running during the 17873 + Helm rollback action. 17874 + type: boolean 17875 + disableWait: 17876 + description: |- 17877 + DisableWait disables the waiting for resources to be ready after a Helm 17878 + rollback has been performed. 17879 + type: boolean 17880 + disableWaitForJobs: 17881 + description: |- 17882 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 17883 + rollback has been performed. 17884 + type: boolean 17885 + force: 17886 + description: Force forces resource updates through a replacement 17887 + strategy. 17888 + type: boolean 17889 + recreate: 17890 + description: Recreate performs pod restarts for the resource if 17891 + applicable. 17892 + type: boolean 17893 + timeout: 17894 + description: |- 17895 + Timeout is the time to wait for any individual Kubernetes operation (like 17896 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 17897 + 'HelmReleaseSpec.Timeout'. 17898 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17899 + type: string 17900 + type: object 17901 + serviceAccountName: 17902 + description: |- 17903 + The name of the Kubernetes service account to impersonate 17904 + when reconciling this HelmRelease. 17905 + type: string 17906 + storageNamespace: 17907 + description: |- 17908 + StorageNamespace used for the Helm storage. 17909 + Defaults to the namespace of the HelmRelease. 17910 + maxLength: 63 17911 + minLength: 1 17912 + type: string 17913 + suspend: 17914 + description: |- 17915 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 17916 + it does not apply to already started reconciliations. Defaults to false. 17917 + type: boolean 17918 + targetNamespace: 17919 + description: |- 17920 + TargetNamespace to target when performing operations for the HelmRelease. 17921 + Defaults to the namespace of the HelmRelease. 17922 + maxLength: 63 17923 + minLength: 1 17924 + type: string 17925 + test: 17926 + description: Test holds the configuration for Helm test actions for 17927 + this HelmRelease. 17928 + properties: 17929 + enable: 17930 + description: |- 17931 + Enable enables Helm test actions for this HelmRelease after an Helm install 17932 + or upgrade action has been performed. 17933 + type: boolean 17934 + ignoreFailures: 17935 + description: |- 17936 + IgnoreFailures tells the controller to skip remediation when the Helm tests 17937 + are run but fail. Can be overwritten for tests run after install or upgrade 17938 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 17939 + type: boolean 17940 + timeout: 17941 + description: |- 17942 + Timeout is the time to wait for any individual Kubernetes operation during 17943 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 17944 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17945 + type: string 17946 + type: object 17947 + timeout: 17948 + description: |- 17949 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 17950 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 17951 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17952 + type: string 17953 + uninstall: 17954 + description: Uninstall holds the configuration for Helm uninstall 17955 + actions for this HelmRelease. 17956 + properties: 17957 + deletionPropagation: 17958 + default: background 17959 + description: |- 17960 + DeletionPropagation specifies the deletion propagation policy when 17961 + a Helm uninstall is performed. 17962 + enum: 17963 + - background 17964 + - foreground 17965 + - orphan 17966 + type: string 17967 + disableHooks: 17968 + description: DisableHooks prevents hooks from running during the 17969 + Helm rollback action. 17970 + type: boolean 17971 + disableWait: 17972 + description: |- 17973 + DisableWait disables waiting for all the resources to be deleted after 17974 + a Helm uninstall is performed. 17975 + type: boolean 17976 + keepHistory: 17977 + description: |- 17978 + KeepHistory tells Helm to remove all associated resources and mark the 17979 + release as deleted, but retain the release history. 17980 + type: boolean 17981 + timeout: 17982 + description: |- 17983 + Timeout is the time to wait for any individual Kubernetes operation (like 17984 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 17985 + to 'HelmReleaseSpec.Timeout'. 17986 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17987 + type: string 17988 + type: object 17989 + upgrade: 17990 + description: Upgrade holds the configuration for Helm upgrade actions 17991 + for this HelmRelease. 17992 + properties: 17993 + cleanupOnFail: 17994 + description: |- 17995 + CleanupOnFail allows deletion of new resources created during the Helm 17996 + upgrade action when it fails. 17997 + type: boolean 17998 + crds: 17999 + description: |- 18000 + CRDs upgrade CRDs from the Helm Chart's crds directory according 18001 + to the CRD upgrade policy provided here. Valid values are `Skip`, 18002 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 18003 + CRDs are neither installed nor upgraded. 18004 18005 - Skip: do neither install nor replace (update) any CRDs. 18006 + Skip: do neither install nor replace (update) any CRDs. 18007 18008 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 18009 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 18010 18011 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 18012 - but not deleted. 18013 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 18014 + but not deleted. 18015 18016 - By default, CRDs are applied (installed) during Helm install action. 18017 - With this option users can opt in to CRD replace existing CRDs on Helm 18018 - install actions, which is not (yet) natively supported by Helm. 18019 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 18020 - enum: 18021 - - Skip 18022 - - Create 18023 - - CreateReplace 18024 - type: string 18025 - createNamespace: 18026 - description: |- 18027 - CreateNamespace tells the Helm install action to create the 18028 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 18029 - On uninstall, the namespace will not be garbage collected. 18030 - type: boolean 18031 - disableHooks: 18032 - description: DisableHooks prevents hooks from running during the Helm install action. 18033 - type: boolean 18034 - disableOpenAPIValidation: 18035 - description: |- 18036 - DisableOpenAPIValidation prevents the Helm install action from validating 18037 - rendered templates against the Kubernetes OpenAPI Schema. 18038 - type: boolean 18039 - disableWait: 18040 - description: |- 18041 - DisableWait disables the waiting for resources to be ready after a Helm 18042 - install has been performed. 18043 - type: boolean 18044 - disableWaitForJobs: 18045 - description: |- 18046 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 18047 - install has been performed. 18048 - type: boolean 18049 - remediation: 18050 - description: |- 18051 - Remediation holds the remediation configuration for when the Helm install 18052 - action for the HelmRelease fails. The default is to not perform any action. 18053 - properties: 18054 - ignoreTestFailures: 18055 - description: |- 18056 - IgnoreTestFailures tells the controller to skip remediation when the Helm 18057 - tests are run after an install action but fail. Defaults to 18058 - 'Test.IgnoreFailures'. 18059 - type: boolean 18060 - remediateLastFailure: 18061 - description: |- 18062 - RemediateLastFailure tells the controller to remediate the last failure, when 18063 - no retries remain. Defaults to 'false'. 18064 - type: boolean 18065 - retries: 18066 - description: |- 18067 - Retries is the number of retries that should be attempted on failures before 18068 - bailing. Remediation, using an uninstall, is performed between each attempt. 18069 - Defaults to '0', a negative integer equals to unlimited retries. 18070 - type: integer 18071 - type: object 18072 - replace: 18073 - description: |- 18074 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 18075 - if that name is a deleted release which remains in the history. 18076 - type: boolean 18077 - skipCRDs: 18078 - description: |- 18079 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 18080 - CRDs are installed if not already present. 18081 + By default, CRDs are not applied during Helm upgrade action. With this 18082 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 18083 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 18084 + enum: 18085 + - Skip 18086 + - Create 18087 + - CreateReplace 18088 + type: string 18089 + disableHooks: 18090 + description: DisableHooks prevents hooks from running during the 18091 + Helm upgrade action. 18092 + type: boolean 18093 + disableOpenAPIValidation: 18094 + description: |- 18095 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 18096 + rendered templates against the Kubernetes OpenAPI Schema. 18097 + type: boolean 18098 + disableWait: 18099 + description: |- 18100 + DisableWait disables the waiting for resources to be ready after a Helm 18101 + upgrade has been performed. 18102 + type: boolean 18103 + disableWaitForJobs: 18104 + description: |- 18105 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 18106 + upgrade has been performed. 18107 + type: boolean 18108 + force: 18109 + description: Force forces resource updates through a replacement 18110 + strategy. 18111 + type: boolean 18112 + preserveValues: 18113 + description: |- 18114 + PreserveValues will make Helm reuse the last release's values and merge in 18115 + overrides from 'Values'. Setting this flag makes the HelmRelease 18116 + non-declarative. 18117 + type: boolean 18118 + remediation: 18119 + description: |- 18120 + Remediation holds the remediation configuration for when the Helm upgrade 18121 + action for the HelmRelease fails. The default is to not perform any action. 18122 + properties: 18123 + ignoreTestFailures: 18124 + description: |- 18125 + IgnoreTestFailures tells the controller to skip remediation when the Helm 18126 + tests are run after an upgrade action but fail. 18127 + Defaults to 'Test.IgnoreFailures'. 18128 + type: boolean 18129 + remediateLastFailure: 18130 + description: |- 18131 + RemediateLastFailure tells the controller to remediate the last failure, when 18132 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 18133 + type: boolean 18134 + retries: 18135 + description: |- 18136 + Retries is the number of retries that should be attempted on failures before 18137 + bailing. Remediation, using 'Strategy', is performed between each attempt. 18138 + Defaults to '0', a negative integer equals to unlimited retries. 18139 + type: integer 18140 + strategy: 18141 + description: Strategy to use for failure remediation. Defaults 18142 + to 'rollback'. 18143 + enum: 18144 + - rollback 18145 + - uninstall 18146 + type: string 18147 + type: object 18148 + timeout: 18149 + description: |- 18150 + Timeout is the time to wait for any individual Kubernetes operation (like 18151 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 18152 + 'HelmReleaseSpec.Timeout'. 18153 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18154 + type: string 18155 + type: object 18156 + values: 18157 + description: Values holds the values for this Helm release. 18158 + x-kubernetes-preserve-unknown-fields: true 18159 + valuesFrom: 18160 + description: |- 18161 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 18162 + and information about how they should be merged. 18163 + items: 18164 + description: |- 18165 + ValuesReference contains a reference to a resource containing Helm values, 18166 + and optionally the key they can be found at. 18167 + properties: 18168 + kind: 18169 + description: Kind of the values referent, valid values are ('Secret', 18170 + 'ConfigMap'). 18171 + enum: 18172 + - Secret 18173 + - ConfigMap 18174 + type: string 18175 + name: 18176 + description: |- 18177 + Name of the values referent. Should reside in the same namespace as the 18178 + referring resource. 18179 + maxLength: 253 18180 + minLength: 1 18181 + type: string 18182 + optional: 18183 + description: |- 18184 + Optional marks this ValuesReference as optional. When set, a not found error 18185 + for the values reference is ignored, but any ValuesKey, TargetPath or 18186 + transient error will still result in a reconciliation failure. 18187 + type: boolean 18188 + targetPath: 18189 + description: |- 18190 + TargetPath is the YAML dot notation path the value should be merged at. When 18191 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 18192 + which results in the values getting merged at the root. 18193 + maxLength: 250 18194 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 18195 + type: string 18196 + valuesKey: 18197 + description: |- 18198 + ValuesKey is the data key where the values.yaml or a specific value can be 18199 + found at. Defaults to 'values.yaml'. 18200 + When set, must be a valid Data Key, consisting of alphanumeric characters, 18201 + '-', '_' or '.'. 18202 + maxLength: 253 18203 + pattern: ^[\-._a-zA-Z0-9]+$ 18204 + type: string 18205 + required: 18206 + - kind 18207 + - name 18208 + type: object 18209 + type: array 18210 + required: 18211 + - chart 18212 + - interval 18213 + type: object 18214 + status: 18215 + default: 18216 + observedGeneration: -1 18217 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 18218 + properties: 18219 + conditions: 18220 + description: Conditions holds the conditions for the HelmRelease. 18221 + items: 18222 + description: Condition contains details for one aspect of the current 18223 + state of this API Resource. 18224 + properties: 18225 + lastTransitionTime: 18226 + description: |- 18227 + lastTransitionTime is the last time the condition transitioned from one status to another. 18228 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 18229 + format: date-time 18230 + type: string 18231 + message: 18232 + description: |- 18233 + message is a human readable message indicating details about the transition. 18234 + This may be an empty string. 18235 + maxLength: 32768 18236 + type: string 18237 + observedGeneration: 18238 + description: |- 18239 + observedGeneration represents the .metadata.generation that the condition was set based upon. 18240 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 18241 + with respect to the current state of the instance. 18242 + format: int64 18243 + minimum: 0 18244 + type: integer 18245 + reason: 18246 + description: |- 18247 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 18248 + Producers of specific condition types may define expected values and meanings for this field, 18249 + and whether the values are considered a guaranteed API. 18250 + The value should be a CamelCase string. 18251 + This field may not be empty. 18252 + maxLength: 1024 18253 + minLength: 1 18254 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 18255 + type: string 18256 + status: 18257 + description: status of the condition, one of True, False, Unknown. 18258 + enum: 18259 + - "True" 18260 + - "False" 18261 + - Unknown 18262 + type: string 18263 + type: 18264 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 18265 + maxLength: 316 18266 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 18267 + type: string 18268 + required: 18269 + - lastTransitionTime 18270 + - message 18271 + - reason 18272 + - status 18273 + - type 18274 + type: object 18275 + type: array 18276 + failures: 18277 + description: |- 18278 + Failures is the reconciliation failure count against the latest desired 18279 + state. It is reset after a successful reconciliation. 18280 + format: int64 18281 + type: integer 18282 + helmChart: 18283 + description: |- 18284 + HelmChart is the namespaced name of the HelmChart resource created by 18285 + the controller for the HelmRelease. 18286 + type: string 18287 + history: 18288 + description: |- 18289 + History holds the history of Helm releases performed for this HelmRelease 18290 + up to the last successfully completed release. 18291 18292 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 18293 - type: boolean 18294 - timeout: 18295 - description: |- 18296 - Timeout is the time to wait for any individual Kubernetes operation (like 18297 - Jobs for hooks) during the performance of a Helm install action. Defaults to 18298 - 'HelmReleaseSpec.Timeout'. 18299 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18300 - type: string 18301 - type: object 18302 - interval: 18303 - description: Interval at which to reconcile the Helm release. 18304 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18305 - type: string 18306 - kubeConfig: 18307 - description: |- 18308 - KubeConfig for reconciling the HelmRelease on a remote cluster. 18309 - When used in combination with HelmReleaseSpec.ServiceAccountName, 18310 - forces the controller to act on behalf of that Service Account at the 18311 - target cluster. 18312 - If the --default-service-account flag is set, its value will be used as 18313 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 18314 - is empty. 18315 - properties: 18316 - secretRef: 18317 - description: |- 18318 - SecretRef holds the name of a secret that contains a key with 18319 - the kubeconfig file as the value. If no key is set, the key will default 18320 - to 'value'. 18321 - It is recommended that the kubeconfig is self-contained, and the secret 18322 - is regularly updated if credentials such as a cloud-access-token expire. 18323 - Cloud specific `cmd-path` auth helpers will not function without adding 18324 - binaries and credentials to the Pod that is responsible for reconciling 18325 - Kubernetes resources. 18326 - properties: 18327 - key: 18328 - description: Key in the Secret, when not specified an implementation-specific 18329 - default key is used. 18330 - type: string 18331 - name: 18332 - description: Name of the Secret. 18333 - type: string 18334 - required: 18335 - - name 18336 - type: object 18337 - required: 18338 - - secretRef 18339 - type: object 18340 - maxHistory: 18341 - description: |- 18342 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 18343 - Use '0' for an unlimited number of revisions; defaults to '5'. 18344 - type: integer 18345 - persistentClient: 18346 - description: |- 18347 - PersistentClient tells the controller to use a persistent Kubernetes 18348 - client for this release. When enabled, the client will be reused for the 18349 - duration of the reconciliation, instead of being created and destroyed 18350 - for each (step of a) Helm action. 18351 + Note: this field is provisional to the v2beta2 API, and not actively used 18352 + by v2beta1 HelmReleases. 18353 + items: 18354 + description: |- 18355 + Snapshot captures a point-in-time copy of the status information for a Helm release, 18356 + as managed by the controller. 18357 + properties: 18358 + apiVersion: 18359 + description: |- 18360 + APIVersion is the API version of the Snapshot. 18361 + Provisional: when the calculation method of the Digest field is changed, 18362 + this field will be used to distinguish between the old and new methods. 18363 + type: string 18364 + appVersion: 18365 + description: AppVersion is the chart app version of the release 18366 + object in storage. 18367 + type: string 18368 + chartName: 18369 + description: ChartName is the chart name of the release object 18370 + in storage. 18371 + type: string 18372 + chartVersion: 18373 + description: |- 18374 + ChartVersion is the chart version of the release object in 18375 + storage. 18376 + type: string 18377 + configDigest: 18378 + description: |- 18379 + ConfigDigest is the checksum of the config (better known as 18380 + "values") of the release object in storage. 18381 + It has the format of `<algo>:<checksum>`. 18382 + type: string 18383 + deleted: 18384 + description: Deleted is when the release was deleted. 18385 + format: date-time 18386 + type: string 18387 + digest: 18388 + description: |- 18389 + Digest is the checksum of the release object in storage. 18390 + It has the format of `<algo>:<checksum>`. 18391 + type: string 18392 + firstDeployed: 18393 + description: FirstDeployed is when the release was first deployed. 18394 + format: date-time 18395 + type: string 18396 + lastDeployed: 18397 + description: LastDeployed is when the release was last deployed. 18398 + format: date-time 18399 + type: string 18400 + name: 18401 + description: Name is the name of the release. 18402 + type: string 18403 + namespace: 18404 + description: Namespace is the namespace the release is deployed 18405 + to. 18406 + type: string 18407 + ociDigest: 18408 + description: OCIDigest is the digest of the OCI artifact associated 18409 + with the release. 18410 + type: string 18411 + status: 18412 + description: Status is the current state of the release. 18413 + type: string 18414 + testHooks: 18415 + additionalProperties: 18416 + description: |- 18417 + TestHookStatus holds the status information for a test hook as observed 18418 + to be run by the controller. 18419 + properties: 18420 + lastCompleted: 18421 + description: LastCompleted is the time the test hook last 18422 + completed. 18423 + format: date-time 18424 + type: string 18425 + lastStarted: 18426 + description: LastStarted is the time the test hook was 18427 + last started. 18428 + format: date-time 18429 + type: string 18430 + phase: 18431 + description: Phase the test hook was observed to be in. 18432 + type: string 18433 + type: object 18434 + description: |- 18435 + TestHooks is the list of test hooks for the release as observed to be 18436 + run by the controller. 18437 + type: object 18438 + version: 18439 + description: Version is the version of the release object in 18440 + storage. 18441 + type: integer 18442 + required: 18443 + - chartName 18444 + - chartVersion 18445 + - configDigest 18446 + - digest 18447 + - firstDeployed 18448 + - lastDeployed 18449 + - name 18450 + - namespace 18451 + - status 18452 + - version 18453 + type: object 18454 + type: array 18455 + installFailures: 18456 + description: |- 18457 + InstallFailures is the install failure count against the latest desired 18458 + state. It is reset after a successful reconciliation. 18459 + format: int64 18460 + type: integer 18461 + lastAppliedRevision: 18462 + description: LastAppliedRevision is the revision of the last successfully 18463 + applied source. 18464 + type: string 18465 + lastAttemptedConfigDigest: 18466 + description: |- 18467 + LastAttemptedConfigDigest is the digest for the config (better known as 18468 + "values") of the last reconciliation attempt. 18469 18470 - This can improve performance, but may cause issues with some Helm charts 18471 - that for example do create Custom Resource Definitions during installation 18472 - outside Helm's CRD lifecycle hooks, which are then not observed to be 18473 - available by e.g. post-install hooks. 18474 + Note: this field is provisional to the v2beta2 API, and not actively used 18475 + by v2beta1 HelmReleases. 18476 + type: string 18477 + lastAttemptedGeneration: 18478 + description: |- 18479 + LastAttemptedGeneration is the last generation the controller attempted 18480 + to reconcile. 18481 18482 - If not set, it defaults to true. 18483 - type: boolean 18484 - postRenderers: 18485 - description: |- 18486 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 18487 - of their definition. 18488 - items: 18489 - description: PostRenderer contains a Helm PostRenderer specification. 18490 - properties: 18491 - kustomize: 18492 - description: Kustomization to apply as PostRenderer. 18493 - properties: 18494 - images: 18495 - description: |- 18496 - Images is a list of (image name, new name, new tag or digest) 18497 - for changing image names, tags or digests. This can also be achieved with a 18498 - patch, but this operator is simpler to specify. 18499 - items: 18500 - description: Image contains an image name, a new name, a new tag or 18501 - digest, which will replace the original name and tag. 18502 - properties: 18503 - digest: 18504 - description: |- 18505 - Digest is the value used to replace the original image tag. 18506 - If digest is present NewTag value is ignored. 18507 - type: string 18508 - name: 18509 - description: Name is a tag-less image name. 18510 - type: string 18511 - newName: 18512 - description: NewName is the value used to replace the original 18513 - name. 18514 - type: string 18515 - newTag: 18516 - description: NewTag is the value used to replace the original 18517 - tag. 18518 - type: string 18519 - required: 18520 - - name 18521 - type: object 18522 - type: array 18523 - patches: 18524 - description: |- 18525 - Strategic merge and JSON patches, defined as inline YAML objects, 18526 - capable of targeting objects based on kind, label and annotation selectors. 18527 - items: 18528 - description: |- 18529 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 18530 - be applied to. 18531 - properties: 18532 - patch: 18533 - description: |- 18534 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 18535 - an array of operation objects. 18536 - type: string 18537 - target: 18538 - description: Target points to the resources that the patch 18539 - document should be applied to. 18540 - properties: 18541 - annotationSelector: 18542 - description: |- 18543 - AnnotationSelector is a string that follows the label selection expression 18544 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18545 - It matches with the resource annotations. 18546 - type: string 18547 - group: 18548 - description: |- 18549 - Group is the API group to select resources from. 18550 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 18551 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18552 - type: string 18553 - kind: 18554 - description: |- 18555 - Kind of the API Group to select resources from. 18556 - Together with Group and Version it is capable of unambiguously 18557 - identifying and/or selecting resources. 18558 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18559 - type: string 18560 - labelSelector: 18561 - description: |- 18562 - LabelSelector is a string that follows the label selection expression 18563 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18564 - It matches with the resource labels. 18565 - type: string 18566 - name: 18567 - description: Name to match resources with. 18568 - type: string 18569 - namespace: 18570 - description: Namespace to select resources from. 18571 - type: string 18572 - version: 18573 - description: |- 18574 - Version of the API Group to select resources from. 18575 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 18576 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18577 - type: string 18578 - type: object 18579 - required: 18580 - - patch 18581 - type: object 18582 - type: array 18583 - patchesJson6902: 18584 - description: |- 18585 - JSON 6902 patches, defined as inline YAML objects. 18586 - Deprecated: use Patches instead. 18587 - items: 18588 - description: JSON6902Patch contains a JSON6902 patch and the target 18589 - the patch should be applied to. 18590 - properties: 18591 - patch: 18592 - description: Patch contains the JSON6902 patch document with 18593 - an array of operation objects. 18594 - items: 18595 - description: |- 18596 - JSON6902 is a JSON6902 operation object. 18597 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 18598 - properties: 18599 - from: 18600 - description: |- 18601 - From contains a JSON-pointer value that references a location within the target document where the operation is 18602 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 18603 - type: string 18604 - op: 18605 - description: |- 18606 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 18607 - "test". 18608 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 18609 - enum: 18610 - - test 18611 - - remove 18612 - - add 18613 - - replace 18614 - - move 18615 - - copy 18616 - type: string 18617 - path: 18618 - description: |- 18619 - Path contains the JSON-pointer value that references a location within the target document where the operation 18620 - is performed. The meaning of the value depends on the value of Op. 18621 - type: string 18622 - value: 18623 - description: |- 18624 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 18625 - account by all operations. 18626 - x-kubernetes-preserve-unknown-fields: true 18627 - required: 18628 - - op 18629 - - path 18630 - type: object 18631 - type: array 18632 - target: 18633 - description: Target points to the resources that the patch 18634 - document should be applied to. 18635 - properties: 18636 - annotationSelector: 18637 - description: |- 18638 - AnnotationSelector is a string that follows the label selection expression 18639 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18640 - It matches with the resource annotations. 18641 - type: string 18642 - group: 18643 - description: |- 18644 - Group is the API group to select resources from. 18645 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 18646 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18647 - type: string 18648 - kind: 18649 - description: |- 18650 - Kind of the API Group to select resources from. 18651 - Together with Group and Version it is capable of unambiguously 18652 - identifying and/or selecting resources. 18653 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18654 - type: string 18655 - labelSelector: 18656 - description: |- 18657 - LabelSelector is a string that follows the label selection expression 18658 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18659 - It matches with the resource labels. 18660 - type: string 18661 - name: 18662 - description: Name to match resources with. 18663 - type: string 18664 - namespace: 18665 - description: Namespace to select resources from. 18666 - type: string 18667 - version: 18668 - description: |- 18669 - Version of the API Group to select resources from. 18670 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 18671 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18672 - type: string 18673 - type: object 18674 - required: 18675 - - patch 18676 - - target 18677 - type: object 18678 - type: array 18679 - patchesStrategicMerge: 18680 - description: |- 18681 - Strategic merge patches, defined as inline YAML objects. 18682 - Deprecated: use Patches instead. 18683 - items: 18684 - x-kubernetes-preserve-unknown-fields: true 18685 - type: array 18686 - type: object 18687 - type: object 18688 - type: array 18689 - releaseName: 18690 - description: |- 18691 - ReleaseName used for the Helm release. Defaults to a composition of 18692 - '[TargetNamespace-]Name'. 18693 - maxLength: 53 18694 - minLength: 1 18695 - type: string 18696 - rollback: 18697 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 18698 - properties: 18699 - cleanupOnFail: 18700 - description: |- 18701 - CleanupOnFail allows deletion of new resources created during the Helm 18702 - rollback action when it fails. 18703 - type: boolean 18704 - disableHooks: 18705 - description: DisableHooks prevents hooks from running during the Helm rollback action. 18706 - type: boolean 18707 - disableWait: 18708 - description: |- 18709 - DisableWait disables the waiting for resources to be ready after a Helm 18710 - rollback has been performed. 18711 - type: boolean 18712 - disableWaitForJobs: 18713 - description: |- 18714 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 18715 - rollback has been performed. 18716 - type: boolean 18717 - force: 18718 - description: Force forces resource updates through a replacement strategy. 18719 - type: boolean 18720 - recreate: 18721 - description: Recreate performs pod restarts for the resource if applicable. 18722 - type: boolean 18723 - timeout: 18724 - description: |- 18725 - Timeout is the time to wait for any individual Kubernetes operation (like 18726 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 18727 - 'HelmReleaseSpec.Timeout'. 18728 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18729 - type: string 18730 - type: object 18731 - serviceAccountName: 18732 - description: |- 18733 - The name of the Kubernetes service account to impersonate 18734 - when reconciling this HelmRelease. 18735 - maxLength: 253 18736 - minLength: 1 18737 - type: string 18738 - storageNamespace: 18739 - description: |- 18740 - StorageNamespace used for the Helm storage. 18741 - Defaults to the namespace of the HelmRelease. 18742 - maxLength: 63 18743 - minLength: 1 18744 - type: string 18745 - suspend: 18746 - description: |- 18747 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 18748 - it does not apply to already started reconciliations. Defaults to false. 18749 - type: boolean 18750 - targetNamespace: 18751 - description: |- 18752 - TargetNamespace to target when performing operations for the HelmRelease. 18753 - Defaults to the namespace of the HelmRelease. 18754 - maxLength: 63 18755 - minLength: 1 18756 - type: string 18757 - test: 18758 - description: Test holds the configuration for Helm test actions for this HelmRelease. 18759 - properties: 18760 - enable: 18761 - description: |- 18762 - Enable enables Helm test actions for this HelmRelease after an Helm install 18763 - or upgrade action has been performed. 18764 - type: boolean 18765 - filters: 18766 - description: Filters is a list of tests to run or exclude from running. 18767 - items: 18768 - description: Filter holds the configuration for individual Helm test filters. 18769 - properties: 18770 - exclude: 18771 - description: Exclude specifies whether the named test should be excluded. 18772 - type: boolean 18773 - name: 18774 - description: Name is the name of the test. 18775 - maxLength: 253 18776 - minLength: 1 18777 - type: string 18778 - required: 18779 - - name 18780 - type: object 18781 - type: array 18782 - ignoreFailures: 18783 - description: |- 18784 - IgnoreFailures tells the controller to skip remediation when the Helm tests 18785 - are run but fail. Can be overwritten for tests run after install or upgrade 18786 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 18787 - type: boolean 18788 - timeout: 18789 - description: |- 18790 - Timeout is the time to wait for any individual Kubernetes operation during 18791 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 18792 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18793 - type: string 18794 - type: object 18795 - timeout: 18796 - description: |- 18797 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 18798 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 18799 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18800 - type: string 18801 - uninstall: 18802 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 18803 - properties: 18804 - deletionPropagation: 18805 - default: background 18806 - description: |- 18807 - DeletionPropagation specifies the deletion propagation policy when 18808 - a Helm uninstall is performed. 18809 - enum: 18810 - - background 18811 - - foreground 18812 - - orphan 18813 - type: string 18814 - disableHooks: 18815 - description: DisableHooks prevents hooks from running during the Helm rollback action. 18816 - type: boolean 18817 - disableWait: 18818 - description: |- 18819 - DisableWait disables waiting for all the resources to be deleted after 18820 - a Helm uninstall is performed. 18821 - type: boolean 18822 - keepHistory: 18823 - description: |- 18824 - KeepHistory tells Helm to remove all associated resources and mark the 18825 - release as deleted, but retain the release history. 18826 - type: boolean 18827 - timeout: 18828 - description: |- 18829 - Timeout is the time to wait for any individual Kubernetes operation (like 18830 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 18831 - to 'HelmReleaseSpec.Timeout'. 18832 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18833 - type: string 18834 - type: object 18835 - upgrade: 18836 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 18837 - properties: 18838 - cleanupOnFail: 18839 - description: |- 18840 - CleanupOnFail allows deletion of new resources created during the Helm 18841 - upgrade action when it fails. 18842 - type: boolean 18843 - crds: 18844 - description: |- 18845 - CRDs upgrade CRDs from the Helm Chart's crds directory according 18846 - to the CRD upgrade policy provided here. Valid values are `Skip`, 18847 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 18848 - CRDs are neither installed nor upgraded. 18849 + Note: this field is provisional to the v2beta2 API, and not actively used 18850 + by v2beta1 HelmReleases. 18851 + format: int64 18852 + type: integer 18853 + lastAttemptedReleaseAction: 18854 + description: |- 18855 + LastAttemptedReleaseAction is the last release action performed for this 18856 + HelmRelease. It is used to determine the active remediation strategy. 18857 18858 - Skip: do neither install nor replace (update) any CRDs. 18859 + Note: this field is provisional to the v2beta2 API, and not actively used 18860 + by v2beta1 HelmReleases. 18861 + type: string 18862 + lastAttemptedRevision: 18863 + description: LastAttemptedRevision is the revision of the last reconciliation 18864 + attempt. 18865 + type: string 18866 + lastAttemptedValuesChecksum: 18867 + description: |- 18868 + LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last 18869 + reconciliation attempt. 18870 + type: string 18871 + lastHandledForceAt: 18872 + description: |- 18873 + LastHandledForceAt holds the value of the most recent force request 18874 + value, so a change of the annotation value can be detected. 18875 18876 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 18877 + Note: this field is provisional to the v2beta2 API, and not actively used 18878 + by v2beta1 HelmReleases. 18879 + type: string 18880 + lastHandledReconcileAt: 18881 + description: |- 18882 + LastHandledReconcileAt holds the value of the most recent 18883 + reconcile request value, so a change of the annotation value 18884 + can be detected. 18885 + type: string 18886 + lastHandledResetAt: 18887 + description: |- 18888 + LastHandledResetAt holds the value of the most recent reset request 18889 + value, so a change of the annotation value can be detected. 18890 18891 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 18892 - but not deleted. 18893 + Note: this field is provisional to the v2beta2 API, and not actively used 18894 + by v2beta1 HelmReleases. 18895 + type: string 18896 + lastReleaseRevision: 18897 + description: LastReleaseRevision is the revision of the last successful 18898 + Helm release. 18899 + type: integer 18900 + observedGeneration: 18901 + description: ObservedGeneration is the last observed generation. 18902 + format: int64 18903 + type: integer 18904 + observedPostRenderersDigest: 18905 + description: |- 18906 + ObservedPostRenderersDigest is the digest for the post-renderers of 18907 + the last successful reconciliation attempt. 18908 + type: string 18909 + storageNamespace: 18910 + description: |- 18911 + StorageNamespace is the namespace of the Helm release storage for the 18912 + current release. 18913 18914 - By default, CRDs are not applied during Helm upgrade action. With this 18915 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 18916 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 18917 - enum: 18918 - - Skip 18919 - - Create 18920 - - CreateReplace 18921 - type: string 18922 - disableHooks: 18923 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 18924 - type: boolean 18925 - disableOpenAPIValidation: 18926 - description: |- 18927 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 18928 - rendered templates against the Kubernetes OpenAPI Schema. 18929 - type: boolean 18930 - disableWait: 18931 - description: |- 18932 - DisableWait disables the waiting for resources to be ready after a Helm 18933 - upgrade has been performed. 18934 - type: boolean 18935 - disableWaitForJobs: 18936 - description: |- 18937 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 18938 - upgrade has been performed. 18939 - type: boolean 18940 - force: 18941 - description: Force forces resource updates through a replacement strategy. 18942 - type: boolean 18943 - preserveValues: 18944 - description: |- 18945 - PreserveValues will make Helm reuse the last release's values and merge in 18946 - overrides from 'Values'. Setting this flag makes the HelmRelease 18947 - non-declarative. 18948 - type: boolean 18949 - remediation: 18950 - description: |- 18951 - Remediation holds the remediation configuration for when the Helm upgrade 18952 - action for the HelmRelease fails. The default is to not perform any action. 18953 - properties: 18954 - ignoreTestFailures: 18955 - description: |- 18956 - IgnoreTestFailures tells the controller to skip remediation when the Helm 18957 - tests are run after an upgrade action but fail. 18958 - Defaults to 'Test.IgnoreFailures'. 18959 - type: boolean 18960 - remediateLastFailure: 18961 - description: |- 18962 - RemediateLastFailure tells the controller to remediate the last failure, when 18963 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 18964 - type: boolean 18965 - retries: 18966 - description: |- 18967 - Retries is the number of retries that should be attempted on failures before 18968 - bailing. Remediation, using 'Strategy', is performed between each attempt. 18969 - Defaults to '0', a negative integer equals to unlimited retries. 18970 - type: integer 18971 - strategy: 18972 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 18973 - enum: 18974 - - rollback 18975 - - uninstall 18976 - type: string 18977 - type: object 18978 - timeout: 18979 - description: |- 18980 - Timeout is the time to wait for any individual Kubernetes operation (like 18981 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 18982 - 'HelmReleaseSpec.Timeout'. 18983 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18984 - type: string 18985 - type: object 18986 - values: 18987 - description: Values holds the values for this Helm release. 18988 - x-kubernetes-preserve-unknown-fields: true 18989 - valuesFrom: 18990 - description: |- 18991 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 18992 - and information about how they should be merged. 18993 - items: 18994 - description: |- 18995 - ValuesReference contains a reference to a resource containing Helm values, 18996 - and optionally the key they can be found at. 18997 - properties: 18998 - kind: 18999 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 19000 - enum: 19001 - - Secret 19002 - - ConfigMap 19003 - type: string 19004 - name: 19005 - description: |- 19006 - Name of the values referent. Should reside in the same namespace as the 19007 - referring resource. 19008 - maxLength: 253 19009 - minLength: 1 19010 - type: string 19011 - optional: 19012 - description: |- 19013 - Optional marks this ValuesReference as optional. When set, a not found error 19014 - for the values reference is ignored, but any ValuesKey, TargetPath or 19015 - transient error will still result in a reconciliation failure. 19016 - type: boolean 19017 - targetPath: 19018 - description: |- 19019 - TargetPath is the YAML dot notation path the value should be merged at. When 19020 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 19021 - which results in the values getting merged at the root. 19022 - maxLength: 250 19023 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 19024 - type: string 19025 - valuesKey: 19026 - description: |- 19027 - ValuesKey is the data key where the values.yaml or a specific value can be 19028 - found at. Defaults to 'values.yaml'. 19029 - maxLength: 253 19030 - pattern: ^[\-._a-zA-Z0-9]+$ 19031 - type: string 19032 - required: 19033 - - kind 19034 - - name 19035 - type: object 19036 - type: array 19037 - required: 19038 - - interval 19039 + Note: this field is provisional to the v2beta2 API, and not actively used 19040 + by v2beta1 HelmReleases. 19041 + type: string 19042 + upgradeFailures: 19043 + description: |- 19044 + UpgradeFailures is the upgrade failure count against the latest desired 19045 + state. It is reset after a successful reconciliation. 19046 + format: int64 19047 + type: integer 19048 + type: object 19049 + type: object 19050 + served: true 19051 + storage: false 19052 + subresources: 19053 + status: {} 19054 + - additionalPrinterColumns: 19055 + - jsonPath: .metadata.creationTimestamp 19056 + name: Age 19057 + type: date 19058 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 19059 + name: Ready 19060 + type: string 19061 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 19062 + name: Status 19063 + type: string 19064 + deprecated: true 19065 + deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 19066 + name: v2beta2 19067 + schema: 19068 + openAPIV3Schema: 19069 + description: HelmRelease is the Schema for the helmreleases API 19070 + properties: 19071 + apiVersion: 19072 + description: |- 19073 + APIVersion defines the versioned schema of this representation of an object. 19074 + Servers should convert recognized schemas to the latest internal value, and 19075 + may reject unrecognized values. 19076 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19077 + type: string 19078 + kind: 19079 + description: |- 19080 + Kind is a string value representing the REST resource this object represents. 19081 + Servers may infer this from the endpoint the client submits requests to. 19082 + Cannot be updated. 19083 + In CamelCase. 19084 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19085 + type: string 19086 + metadata: 19087 + type: object 19088 + spec: 19089 + description: HelmReleaseSpec defines the desired state of a Helm release. 19090 + properties: 19091 + chart: 19092 + description: |- 19093 + Chart defines the template of the v1beta2.HelmChart that should be created 19094 + for this HelmRelease. 19095 + properties: 19096 + metadata: 19097 + description: ObjectMeta holds the template for metadata like labels 19098 + and annotations. 19099 + properties: 19100 + annotations: 19101 + additionalProperties: 19102 + type: string 19103 + description: |- 19104 + Annotations is an unstructured key value map stored with a resource that may be 19105 + set by external tools to store and retrieve arbitrary metadata. They are not 19106 + queryable and should be preserved when modifying objects. 19107 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 19108 type: object 19109 - x-kubernetes-validations: 19110 - - message: either chart or chartRef must be set 19111 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 19112 - status: 19113 - default: 19114 - observedGeneration: -1 19115 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 19116 - properties: 19117 - conditions: 19118 - description: Conditions holds the conditions for the HelmRelease. 19119 - items: 19120 - description: Condition contains details for one aspect of the current state of this API 19121 - Resource. 19122 - properties: 19123 - lastTransitionTime: 19124 - description: |- 19125 - lastTransitionTime is the last time the condition transitioned from one status to another. 19126 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19127 - format: date-time 19128 - type: string 19129 - message: 19130 - description: |- 19131 - message is a human readable message indicating details about the transition. 19132 - This may be an empty string. 19133 - maxLength: 32768 19134 - type: string 19135 - observedGeneration: 19136 - description: |- 19137 - observedGeneration represents the .metadata.generation that the condition was set based upon. 19138 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19139 - with respect to the current state of the instance. 19140 - format: int64 19141 - minimum: 0 19142 - type: integer 19143 - reason: 19144 - description: |- 19145 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 19146 - Producers of specific condition types may define expected values and meanings for this field, 19147 - and whether the values are considered a guaranteed API. 19148 - The value should be a CamelCase string. 19149 - This field may not be empty. 19150 - maxLength: 1024 19151 - minLength: 1 19152 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19153 - type: string 19154 - status: 19155 - description: status of the condition, one of True, False, Unknown. 19156 - enum: 19157 - - "True" 19158 - - "False" 19159 - - Unknown 19160 - type: string 19161 - type: 19162 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 19163 - maxLength: 316 19164 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19165 - type: string 19166 - required: 19167 - - lastTransitionTime 19168 - - message 19169 - - reason 19170 - - status 19171 - - type 19172 - type: object 19173 - type: array 19174 - failures: 19175 - description: |- 19176 - Failures is the reconciliation failure count against the latest desired 19177 - state. It is reset after a successful reconciliation. 19178 - format: int64 19179 - type: integer 19180 - helmChart: 19181 - description: |- 19182 - HelmChart is the namespaced name of the HelmChart resource created by 19183 - the controller for the HelmRelease. 19184 - type: string 19185 - history: 19186 - description: |- 19187 - History holds the history of Helm releases performed for this HelmRelease 19188 - up to the last successfully completed release. 19189 - items: 19190 - description: |- 19191 - Snapshot captures a point-in-time copy of the status information for a Helm release, 19192 - as managed by the controller. 19193 - properties: 19194 - apiVersion: 19195 - description: |- 19196 - APIVersion is the API version of the Snapshot. 19197 - Provisional: when the calculation method of the Digest field is changed, 19198 - this field will be used to distinguish between the old and new methods. 19199 - type: string 19200 - appVersion: 19201 - description: AppVersion is the chart app version of the release object in storage. 19202 - type: string 19203 - chartName: 19204 - description: ChartName is the chart name of the release object in storage. 19205 - type: string 19206 - chartVersion: 19207 - description: |- 19208 - ChartVersion is the chart version of the release object in 19209 - storage. 19210 - type: string 19211 - configDigest: 19212 - description: |- 19213 - ConfigDigest is the checksum of the config (better known as 19214 - "values") of the release object in storage. 19215 - It has the format of `<algo>:<checksum>`. 19216 - type: string 19217 - deleted: 19218 - description: Deleted is when the release was deleted. 19219 - format: date-time 19220 - type: string 19221 - digest: 19222 - description: |- 19223 - Digest is the checksum of the release object in storage. 19224 - It has the format of `<algo>:<checksum>`. 19225 - type: string 19226 - firstDeployed: 19227 - description: FirstDeployed is when the release was first deployed. 19228 - format: date-time 19229 - type: string 19230 - lastDeployed: 19231 - description: LastDeployed is when the release was last deployed. 19232 - format: date-time 19233 - type: string 19234 - name: 19235 - description: Name is the name of the release. 19236 - type: string 19237 - namespace: 19238 - description: Namespace is the namespace the release is deployed to. 19239 - type: string 19240 - ociDigest: 19241 - description: OCIDigest is the digest of the OCI artifact associated with the release. 19242 - type: string 19243 - status: 19244 - description: Status is the current state of the release. 19245 - type: string 19246 - testHooks: 19247 - additionalProperties: 19248 - description: |- 19249 - TestHookStatus holds the status information for a test hook as observed 19250 - to be run by the controller. 19251 - properties: 19252 - lastCompleted: 19253 - description: LastCompleted is the time the test hook last completed. 19254 - format: date-time 19255 - type: string 19256 - lastStarted: 19257 - description: LastStarted is the time the test hook was last started. 19258 - format: date-time 19259 - type: string 19260 - phase: 19261 - description: Phase the test hook was observed to be in. 19262 - type: string 19263 - type: object 19264 - description: |- 19265 - TestHooks is the list of test hooks for the release as observed to be 19266 - run by the controller. 19267 - type: object 19268 - version: 19269 - description: Version is the version of the release object in storage. 19270 - type: integer 19271 - required: 19272 - - chartName 19273 - - chartVersion 19274 - - configDigest 19275 - - digest 19276 - - firstDeployed 19277 - - lastDeployed 19278 - - name 19279 - - namespace 19280 - - status 19281 - - version 19282 - type: object 19283 - type: array 19284 - installFailures: 19285 - description: |- 19286 - InstallFailures is the install failure count against the latest desired 19287 - state. It is reset after a successful reconciliation. 19288 - format: int64 19289 - type: integer 19290 - lastAppliedRevision: 19291 - description: |- 19292 - LastAppliedRevision is the revision of the last successfully applied 19293 - source. 19294 - Deprecated: the revision can now be found in the History. 19295 - type: string 19296 - lastAttemptedConfigDigest: 19297 - description: |- 19298 - LastAttemptedConfigDigest is the digest for the config (better known as 19299 - "values") of the last reconciliation attempt. 19300 - type: string 19301 - lastAttemptedGeneration: 19302 - description: |- 19303 - LastAttemptedGeneration is the last generation the controller attempted 19304 - to reconcile. 19305 - format: int64 19306 - type: integer 19307 - lastAttemptedReleaseAction: 19308 - description: |- 19309 - LastAttemptedReleaseAction is the last release action performed for this 19310 - HelmRelease. It is used to determine the active remediation strategy. 19311 - enum: 19312 - - install 19313 - - upgrade 19314 - type: string 19315 - lastAttemptedRevision: 19316 - description: |- 19317 - LastAttemptedRevision is the Source revision of the last reconciliation 19318 - attempt. For OCIRepository sources, the 12 first characters of the digest are 19319 - appended to the chart version e.g. "1.2.3+1234567890ab". 19320 - type: string 19321 - lastAttemptedRevisionDigest: 19322 - description: |- 19323 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 19324 - This is only set for OCIRepository sources. 19325 - type: string 19326 - lastAttemptedValuesChecksum: 19327 - description: |- 19328 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 19329 - reconciliation attempt. 19330 - Deprecated: Use LastAttemptedConfigDigest instead. 19331 - type: string 19332 - lastHandledForceAt: 19333 - description: |- 19334 - LastHandledForceAt holds the value of the most recent force request 19335 - value, so a change of the annotation value can be detected. 19336 - type: string 19337 - lastHandledReconcileAt: 19338 - description: |- 19339 - LastHandledReconcileAt holds the value of the most recent 19340 - reconcile request value, so a change of the annotation value 19341 - can be detected. 19342 - type: string 19343 - lastHandledResetAt: 19344 - description: |- 19345 - LastHandledResetAt holds the value of the most recent reset request 19346 - value, so a change of the annotation value can be detected. 19347 - type: string 19348 - lastReleaseRevision: 19349 - description: |- 19350 - LastReleaseRevision is the revision of the last successful Helm release. 19351 - Deprecated: Use History instead. 19352 - type: integer 19353 - observedGeneration: 19354 - description: ObservedGeneration is the last observed generation. 19355 - format: int64 19356 - type: integer 19357 - observedPostRenderersDigest: 19358 - description: |- 19359 - ObservedPostRenderersDigest is the digest for the post-renderers of 19360 - the last successful reconciliation attempt. 19361 - type: string 19362 - storageNamespace: 19363 - description: |- 19364 - StorageNamespace is the namespace of the Helm release storage for the 19365 - current release. 19366 - maxLength: 63 19367 - minLength: 1 19368 - type: string 19369 - upgradeFailures: 19370 - description: |- 19371 - UpgradeFailures is the upgrade failure count against the latest desired 19372 - state. It is reset after a successful reconciliation. 19373 - format: int64 19374 - type: integer 19375 + labels: 19376 + additionalProperties: 19377 + type: string 19378 + description: |- 19379 + Map of string keys and values that can be used to organize and categorize 19380 + (scope and select) objects. 19381 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 19382 type: object 19383 - type: object 19384 - served: true 19385 - storage: false 19386 - subresources: 19387 - status: {} 19388 ---- 19389 -apiVersion: v1 19390 -kind: ServiceAccount 19391 -metadata: 19392 - labels: 19393 - app.kubernetes.io/component: helm-controller 19394 - app.kubernetes.io/instance: flux-system 19395 - app.kubernetes.io/part-of: flux 19396 - app.kubernetes.io/version: v2.4.0 19397 - name: helm-controller 19398 - namespace: flux-system 19399 ---- 19400 -apiVersion: apps/v1 19401 -kind: Deployment 19402 -metadata: 19403 - labels: 19404 - app.kubernetes.io/component: helm-controller 19405 - app.kubernetes.io/instance: flux-system 19406 - app.kubernetes.io/part-of: flux 19407 - app.kubernetes.io/version: v2.4.0 19408 - control-plane: controller 19409 - name: helm-controller 19410 - namespace: flux-system 19411 -spec: 19412 - replicas: 1 19413 - selector: 19414 - matchLabels: 19415 - app: helm-controller 19416 - template: 19417 - metadata: 19418 - annotations: 19419 - prometheus.io/port: "8080" 19420 - prometheus.io/scrape: "true" 19421 - labels: 19422 - app: helm-controller 19423 - spec: 19424 - containers: 19425 - - args: 19426 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 19427 - - --watch-all-namespaces=true 19428 - - --log-level=info 19429 - - --log-encoding=json 19430 - - --enable-leader-election 19431 - env: 19432 - - name: RUNTIME_NAMESPACE 19433 - valueFrom: 19434 - fieldRef: 19435 - fieldPath: metadata.namespace 19436 - - name: GOMAXPROCS 19437 - valueFrom: 19438 - resourceFieldRef: 19439 - containerName: manager 19440 - resource: limits.cpu 19441 - - name: GOMEMLIMIT 19442 - valueFrom: 19443 - resourceFieldRef: 19444 - containerName: manager 19445 - resource: limits.memory 19446 - image: ghcr.io/fluxcd/helm-controller:v1.1.0 19447 - imagePullPolicy: IfNotPresent 19448 - livenessProbe: 19449 - httpGet: 19450 - path: /healthz 19451 - port: healthz 19452 - name: manager 19453 - ports: 19454 - - containerPort: 8080 19455 - name: http-prom 19456 - protocol: TCP 19457 - - containerPort: 9440 19458 - name: healthz 19459 - protocol: TCP 19460 - readinessProbe: 19461 - httpGet: 19462 - path: /readyz 19463 - port: healthz 19464 - resources: 19465 - limits: 19466 - cpu: 1000m 19467 - memory: 1Gi 19468 - requests: 19469 - cpu: 100m 19470 - memory: 64Mi 19471 - securityContext: 19472 - allowPrivilegeEscalation: false 19473 - capabilities: 19474 - drop: 19475 - - ALL 19476 - readOnlyRootFilesystem: true 19477 - runAsNonRoot: true 19478 - seccompProfile: 19479 - type: RuntimeDefault 19480 - volumeMounts: 19481 - - mountPath: /tmp 19482 - name: temp 19483 - nodeSelector: 19484 - kubernetes.io/os: linux 19485 - priorityClassName: system-cluster-critical 19486 - securityContext: 19487 - fsGroup: 1337 19488 - serviceAccountName: helm-controller 19489 - terminationGracePeriodSeconds: 600 19490 - volumes: 19491 - - emptyDir: {} 19492 - name: temp 19493 ---- 19494 -apiVersion: apiextensions.k8s.io/v1 19495 -kind: CustomResourceDefinition 19496 -metadata: 19497 - annotations: 19498 - controller-gen.kubebuilder.io/version: v0.16.1 19499 - labels: 19500 - app.kubernetes.io/component: notification-controller 19501 - app.kubernetes.io/instance: flux-system 19502 - app.kubernetes.io/part-of: flux 19503 - app.kubernetes.io/version: v2.4.0 19504 - name: alerts.notification.toolkit.fluxcd.io 19505 -spec: 19506 - group: notification.toolkit.fluxcd.io 19507 - names: 19508 - kind: Alert 19509 - listKind: AlertList 19510 - plural: alerts 19511 - singular: alert 19512 - scope: Namespaced 19513 - versions: 19514 - - additionalPrinterColumns: 19515 - - jsonPath: .metadata.creationTimestamp 19516 - name: Age 19517 - type: date 19518 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 19519 - name: Ready 19520 - type: string 19521 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 19522 - name: Status 19523 - type: string 19524 - deprecated: true 19525 - deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3 19526 - name: v1beta1 19527 - schema: 19528 - openAPIV3Schema: 19529 - description: Alert is the Schema for the alerts API 19530 - properties: 19531 - apiVersion: 19532 + type: object 19533 + spec: 19534 + description: Spec holds the template for the v1beta2.HelmChartSpec 19535 + for this HelmRelease. 19536 + properties: 19537 + chart: 19538 + description: The name or path the Helm chart is available 19539 + at in the SourceRef. 19540 + maxLength: 2048 19541 + minLength: 1 19542 + type: string 19543 + ignoreMissingValuesFiles: 19544 + description: IgnoreMissingValuesFiles controls whether to 19545 + silently ignore missing values files rather than failing. 19546 + type: boolean 19547 + interval: 19548 description: |- 19549 - APIVersion defines the versioned schema of this representation of an object. 19550 - Servers should convert recognized schemas to the latest internal value, and 19551 - may reject unrecognized values. 19552 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19553 + Interval at which to check the v1.Source for updates. Defaults to 19554 + 'HelmReleaseSpec.Interval'. 19555 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19556 type: string 19557 - kind: 19558 + reconcileStrategy: 19559 + default: ChartVersion 19560 description: |- 19561 - Kind is a string value representing the REST resource this object represents. 19562 - Servers may infer this from the endpoint the client submits requests to. 19563 - Cannot be updated. 19564 - In CamelCase. 19565 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19566 + Determines what enables the creation of a new artifact. Valid values are 19567 + ('ChartVersion', 'Revision'). 19568 + See the documentation of the values for an explanation on their behavior. 19569 + Defaults to ChartVersion when omitted. 19570 + enum: 19571 + - ChartVersion 19572 + - Revision 19573 type: string 19574 - metadata: 19575 - type: object 19576 - spec: 19577 - description: AlertSpec defines an alerting rule for events involving a list of objects 19578 + sourceRef: 19579 + description: The name and namespace of the v1.Source the chart 19580 + is available at. 19581 properties: 19582 - eventSeverity: 19583 - default: info 19584 - description: |- 19585 - Filter events based on severity, defaults to ('info'). 19586 - If set to 'info' no events will be filtered. 19587 - enum: 19588 - - info 19589 - - error 19590 - type: string 19591 - eventSources: 19592 - description: Filter events based on the involved objects. 19593 - items: 19594 - description: |- 19595 - CrossNamespaceObjectReference contains enough information to let you locate the 19596 - typed referenced object at cluster level 19597 - properties: 19598 - apiVersion: 19599 - description: API version of the referent 19600 - type: string 19601 - kind: 19602 - description: Kind of the referent 19603 - enum: 19604 - - Bucket 19605 - - GitRepository 19606 - - Kustomization 19607 - - HelmRelease 19608 - - HelmChart 19609 - - HelmRepository 19610 - - ImageRepository 19611 - - ImagePolicy 19612 - - ImageUpdateAutomation 19613 - - OCIRepository 19614 - type: string 19615 - matchLabels: 19616 - additionalProperties: 19617 - type: string 19618 - description: |- 19619 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 19620 - map is equivalent to an element of matchExpressions, whose key field is "key", the 19621 - operator is "In", and the values array contains only "value". The requirements are ANDed. 19622 - type: object 19623 - name: 19624 - description: Name of the referent 19625 - maxLength: 53 19626 - minLength: 1 19627 - type: string 19628 - namespace: 19629 - description: Namespace of the referent 19630 - maxLength: 53 19631 - minLength: 1 19632 - type: string 19633 - required: 19634 - - kind 19635 - - name 19636 - type: object 19637 - type: array 19638 - exclusionList: 19639 - description: A list of Golang regular expressions to be used for excluding messages. 19640 - items: 19641 - type: string 19642 - type: array 19643 - providerRef: 19644 - description: Send events using this provider. 19645 - properties: 19646 - name: 19647 - description: Name of the referent. 19648 - type: string 19649 - required: 19650 - - name 19651 - type: object 19652 - summary: 19653 - description: Short description of the impact and affected cluster. 19654 - type: string 19655 - suspend: 19656 - description: |- 19657 - This flag tells the controller to suspend subsequent events dispatching. 19658 - Defaults to false. 19659 - type: boolean 19660 + apiVersion: 19661 + description: APIVersion of the referent. 19662 + type: string 19663 + kind: 19664 + description: Kind of the referent. 19665 + enum: 19666 + - HelmRepository 19667 + - GitRepository 19668 + - Bucket 19669 + type: string 19670 + name: 19671 + description: Name of the referent. 19672 + maxLength: 253 19673 + minLength: 1 19674 + type: string 19675 + namespace: 19676 + description: Namespace of the referent. 19677 + maxLength: 63 19678 + minLength: 1 19679 + type: string 19680 required: 19681 - - eventSources 19682 - - providerRef 19683 + - kind 19684 + - name 19685 type: object 19686 - status: 19687 - default: 19688 - observedGeneration: -1 19689 - description: AlertStatus defines the observed state of Alert 19690 + valuesFile: 19691 + description: |- 19692 + Alternative values file to use as the default chart values, expected to 19693 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 19694 + for backwards compatibility the file defined here is merged before the 19695 + ValuesFiles items. Ignored when omitted. 19696 + type: string 19697 + valuesFiles: 19698 + description: |- 19699 + Alternative list of values files to use as the chart values (values.yaml 19700 + is not included by default), expected to be a relative path in the SourceRef. 19701 + Values files are merged in the order of this list with the last file overriding 19702 + the first. Ignored when omitted. 19703 + items: 19704 + type: string 19705 + type: array 19706 + verify: 19707 + description: |- 19708 + Verify contains the secret name containing the trusted public keys 19709 + used to verify the signature and specifies which provider to use to check 19710 + whether OCI image is authentic. 19711 + This field is only supported for OCI sources. 19712 + Chart dependencies, which are not bundled in the umbrella chart artifact, 19713 + are not verified. 19714 properties: 19715 - conditions: 19716 - items: 19717 - description: Condition contains details for one aspect of the current state of this API 19718 - Resource. 19719 - properties: 19720 - lastTransitionTime: 19721 - description: |- 19722 - lastTransitionTime is the last time the condition transitioned from one status to another. 19723 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19724 - format: date-time 19725 - type: string 19726 - message: 19727 - description: |- 19728 - message is a human readable message indicating details about the transition. 19729 - This may be an empty string. 19730 - maxLength: 32768 19731 - type: string 19732 - observedGeneration: 19733 - description: |- 19734 - observedGeneration represents the .metadata.generation that the condition was set based upon. 19735 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19736 - with respect to the current state of the instance. 19737 - format: int64 19738 - minimum: 0 19739 - type: integer 19740 - reason: 19741 - description: |- 19742 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 19743 - Producers of specific condition types may define expected values and meanings for this field, 19744 - and whether the values are considered a guaranteed API. 19745 - The value should be a CamelCase string. 19746 - This field may not be empty. 19747 - maxLength: 1024 19748 - minLength: 1 19749 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19750 - type: string 19751 - status: 19752 - description: status of the condition, one of True, False, Unknown. 19753 - enum: 19754 - - "True" 19755 - - "False" 19756 - - Unknown 19757 - type: string 19758 - type: 19759 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 19760 - maxLength: 316 19761 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19762 - type: string 19763 - required: 19764 - - lastTransitionTime 19765 - - message 19766 - - reason 19767 - - status 19768 - - type 19769 - type: object 19770 - type: array 19771 - observedGeneration: 19772 - description: ObservedGeneration is the last observed generation. 19773 - format: int64 19774 - type: integer 19775 + provider: 19776 + default: cosign 19777 + description: Provider specifies the technology used to 19778 + sign the OCI Helm chart. 19779 + enum: 19780 + - cosign 19781 + - notation 19782 + type: string 19783 + secretRef: 19784 + description: |- 19785 + SecretRef specifies the Kubernetes Secret containing the 19786 + trusted public keys. 19787 + properties: 19788 + name: 19789 + description: Name of the referent. 19790 + type: string 19791 + required: 19792 + - name 19793 + type: object 19794 + required: 19795 + - provider 19796 type: object 19797 + version: 19798 + default: '*' 19799 + description: |- 19800 + Version semver expression, ignored for charts from v1beta2.GitRepository and 19801 + v1beta2.Bucket sources. Defaults to latest when omitted. 19802 + type: string 19803 + required: 19804 + - chart 19805 + - sourceRef 19806 + type: object 19807 + required: 19808 + - spec 19809 type: object 19810 - served: true 19811 - storage: false 19812 - subresources: 19813 - status: {} 19814 - - additionalPrinterColumns: 19815 - - jsonPath: .metadata.creationTimestamp 19816 - name: Age 19817 - type: date 19818 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 19819 - name: Ready 19820 - type: string 19821 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 19822 - name: Status 19823 - type: string 19824 - deprecated: true 19825 - deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 19826 - name: v1beta2 19827 - schema: 19828 - openAPIV3Schema: 19829 - description: Alert is the Schema for the alerts API 19830 + chartRef: 19831 + description: |- 19832 + ChartRef holds a reference to a source controller resource containing the 19833 + Helm chart artifact. 19834 + 19835 + Note: this field is provisional to the v2 API, and not actively used 19836 + by v2beta2 HelmReleases. 19837 properties: 19838 - apiVersion: 19839 + apiVersion: 19840 + description: APIVersion of the referent. 19841 + type: string 19842 + kind: 19843 + description: Kind of the referent. 19844 + enum: 19845 + - OCIRepository 19846 + - HelmChart 19847 + type: string 19848 + name: 19849 + description: Name of the referent. 19850 + maxLength: 253 19851 + minLength: 1 19852 + type: string 19853 + namespace: 19854 + description: |- 19855 + Namespace of the referent, defaults to the namespace of the Kubernetes 19856 + resource object that contains the reference. 19857 + maxLength: 63 19858 + minLength: 1 19859 + type: string 19860 + required: 19861 + - kind 19862 + - name 19863 + type: object 19864 + dependsOn: 19865 + description: |- 19866 + DependsOn may contain a meta.NamespacedObjectReference slice with 19867 + references to HelmRelease resources that must be ready before this HelmRelease 19868 + can be reconciled. 19869 + items: 19870 + description: |- 19871 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 19872 + namespace. 19873 + properties: 19874 + name: 19875 + description: Name of the referent. 19876 + type: string 19877 + namespace: 19878 + description: Namespace of the referent, when not specified it 19879 + acts as LocalObjectReference. 19880 + type: string 19881 + required: 19882 + - name 19883 + type: object 19884 + type: array 19885 + driftDetection: 19886 + description: |- 19887 + DriftDetection holds the configuration for detecting and handling 19888 + differences between the manifest in the Helm storage and the resources 19889 + currently existing in the cluster. 19890 + properties: 19891 + ignore: 19892 + description: |- 19893 + Ignore contains a list of rules for specifying which changes to ignore 19894 + during diffing. 19895 + items: 19896 + description: |- 19897 + IgnoreRule defines a rule to selectively disregard specific changes during 19898 + the drift detection process. 19899 + properties: 19900 + paths: 19901 + description: |- 19902 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 19903 + consideration in a Kubernetes object. 19904 + items: 19905 + type: string 19906 + type: array 19907 + target: 19908 + description: |- 19909 + Target is a selector for specifying Kubernetes objects to which this 19910 + rule applies. 19911 + If Target is not set, the Paths will be ignored for all Kubernetes 19912 + objects within the manifest of the Helm release. 19913 + properties: 19914 + annotationSelector: 19915 + description: |- 19916 + AnnotationSelector is a string that follows the label selection expression 19917 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19918 + It matches with the resource annotations. 19919 + type: string 19920 + group: 19921 + description: |- 19922 + Group is the API group to select resources from. 19923 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 19924 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19925 + type: string 19926 + kind: 19927 + description: |- 19928 + Kind of the API Group to select resources from. 19929 + Together with Group and Version it is capable of unambiguously 19930 + identifying and/or selecting resources. 19931 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19932 + type: string 19933 + labelSelector: 19934 + description: |- 19935 + LabelSelector is a string that follows the label selection expression 19936 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19937 + It matches with the resource labels. 19938 + type: string 19939 + name: 19940 + description: Name to match resources with. 19941 + type: string 19942 + namespace: 19943 + description: Namespace to select resources from. 19944 + type: string 19945 + version: 19946 + description: |- 19947 + Version of the API Group to select resources from. 19948 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 19949 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19950 + type: string 19951 + type: object 19952 + required: 19953 + - paths 19954 + type: object 19955 + type: array 19956 + mode: 19957 + description: |- 19958 + Mode defines how differences should be handled between the Helm manifest 19959 + and the manifest currently applied to the cluster. 19960 + If not explicitly set, it defaults to DiffModeDisabled. 19961 + enum: 19962 + - enabled 19963 + - warn 19964 + - disabled 19965 + type: string 19966 + type: object 19967 + install: 19968 + description: Install holds the configuration for Helm install actions 19969 + for this HelmRelease. 19970 + properties: 19971 + crds: 19972 + description: |- 19973 + CRDs upgrade CRDs from the Helm Chart's crds directory according 19974 + to the CRD upgrade policy provided here. Valid values are `Skip`, 19975 + `Create` or `CreateReplace`. Default is `Create` and if omitted 19976 + CRDs are installed but not updated. 19977 + 19978 + Skip: do neither install nor replace (update) any CRDs. 19979 + 19980 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 19981 + 19982 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 19983 + but not deleted. 19984 + 19985 + By default, CRDs are applied (installed) during Helm install action. 19986 + With this option users can opt in to CRD replace existing CRDs on Helm 19987 + install actions, which is not (yet) natively supported by Helm. 19988 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 19989 + enum: 19990 + - Skip 19991 + - Create 19992 + - CreateReplace 19993 + type: string 19994 + createNamespace: 19995 + description: |- 19996 + CreateNamespace tells the Helm install action to create the 19997 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 19998 + On uninstall, the namespace will not be garbage collected. 19999 + type: boolean 20000 + disableHooks: 20001 + description: DisableHooks prevents hooks from running during the 20002 + Helm install action. 20003 + type: boolean 20004 + disableOpenAPIValidation: 20005 + description: |- 20006 + DisableOpenAPIValidation prevents the Helm install action from validating 20007 + rendered templates against the Kubernetes OpenAPI Schema. 20008 + type: boolean 20009 + disableWait: 20010 + description: |- 20011 + DisableWait disables the waiting for resources to be ready after a Helm 20012 + install has been performed. 20013 + type: boolean 20014 + disableWaitForJobs: 20015 + description: |- 20016 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20017 + install has been performed. 20018 + type: boolean 20019 + remediation: 20020 + description: |- 20021 + Remediation holds the remediation configuration for when the Helm install 20022 + action for the HelmRelease fails. The default is to not perform any action. 20023 + properties: 20024 + ignoreTestFailures: 20025 description: |- 20026 - APIVersion defines the versioned schema of this representation of an object. 20027 - Servers should convert recognized schemas to the latest internal value, and 20028 - may reject unrecognized values. 20029 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20030 - type: string 20031 - kind: 20032 + IgnoreTestFailures tells the controller to skip remediation when the Helm 20033 + tests are run after an install action but fail. Defaults to 20034 + 'Test.IgnoreFailures'. 20035 + type: boolean 20036 + remediateLastFailure: 20037 + description: |- 20038 + RemediateLastFailure tells the controller to remediate the last failure, when 20039 + no retries remain. Defaults to 'false'. 20040 + type: boolean 20041 + retries: 20042 description: |- 20043 - Kind is a string value representing the REST resource this object represents. 20044 - Servers may infer this from the endpoint the client submits requests to. 20045 - Cannot be updated. 20046 - In CamelCase. 20047 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20048 + Retries is the number of retries that should be attempted on failures before 20049 + bailing. Remediation, using an uninstall, is performed between each attempt. 20050 + Defaults to '0', a negative integer equals to unlimited retries. 20051 + type: integer 20052 + type: object 20053 + replace: 20054 + description: |- 20055 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 20056 + if that name is a deleted release which remains in the history. 20057 + type: boolean 20058 + skipCRDs: 20059 + description: |- 20060 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 20061 + CRDs are installed if not already present. 20062 + 20063 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 20064 + type: boolean 20065 + timeout: 20066 + description: |- 20067 + Timeout is the time to wait for any individual Kubernetes operation (like 20068 + Jobs for hooks) during the performance of a Helm install action. Defaults to 20069 + 'HelmReleaseSpec.Timeout'. 20070 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20071 + type: string 20072 + type: object 20073 + interval: 20074 + description: Interval at which to reconcile the Helm release. 20075 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20076 + type: string 20077 + kubeConfig: 20078 + description: |- 20079 + KubeConfig for reconciling the HelmRelease on a remote cluster. 20080 + When used in combination with HelmReleaseSpec.ServiceAccountName, 20081 + forces the controller to act on behalf of that Service Account at the 20082 + target cluster. 20083 + If the --default-service-account flag is set, its value will be used as 20084 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 20085 + is empty. 20086 + properties: 20087 + secretRef: 20088 + description: |- 20089 + SecretRef holds the name of a secret that contains a key with 20090 + the kubeconfig file as the value. If no key is set, the key will default 20091 + to 'value'. 20092 + It is recommended that the kubeconfig is self-contained, and the secret 20093 + is regularly updated if credentials such as a cloud-access-token expire. 20094 + Cloud specific `cmd-path` auth helpers will not function without adding 20095 + binaries and credentials to the Pod that is responsible for reconciling 20096 + Kubernetes resources. 20097 + properties: 20098 + key: 20099 + description: Key in the Secret, when not specified an implementation-specific 20100 + default key is used. 20101 type: string 20102 - metadata: 20103 - type: object 20104 - spec: 20105 - description: AlertSpec defines an alerting rule for events involving a list of objects. 20106 - properties: 20107 - eventMetadata: 20108 - additionalProperties: 20109 + name: 20110 + description: Name of the Secret. 20111 + type: string 20112 + required: 20113 + - name 20114 + type: object 20115 + required: 20116 + - secretRef 20117 + type: object 20118 + maxHistory: 20119 + description: |- 20120 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 20121 + Use '0' for an unlimited number of revisions; defaults to '5'. 20122 + type: integer 20123 + persistentClient: 20124 + description: |- 20125 + PersistentClient tells the controller to use a persistent Kubernetes 20126 + client for this release. When enabled, the client will be reused for the 20127 + duration of the reconciliation, instead of being created and destroyed 20128 + for each (step of a) Helm action. 20129 + 20130 + This can improve performance, but may cause issues with some Helm charts 20131 + that for example do create Custom Resource Definitions during installation 20132 + outside Helm's CRD lifecycle hooks, which are then not observed to be 20133 + available by e.g. post-install hooks. 20134 + 20135 + If not set, it defaults to true. 20136 + type: boolean 20137 + postRenderers: 20138 + description: |- 20139 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 20140 + of their definition. 20141 + items: 20142 + description: PostRenderer contains a Helm PostRenderer specification. 20143 + properties: 20144 + kustomize: 20145 + description: Kustomization to apply as PostRenderer. 20146 + properties: 20147 + images: 20148 + description: |- 20149 + Images is a list of (image name, new name, new tag or digest) 20150 + for changing image names, tags or digests. This can also be achieved with a 20151 + patch, but this operator is simpler to specify. 20152 + items: 20153 + description: Image contains an image name, a new name, 20154 + a new tag or digest, which will replace the original 20155 + name and tag. 20156 + properties: 20157 + digest: 20158 + description: |- 20159 + Digest is the value used to replace the original image tag. 20160 + If digest is present NewTag value is ignored. 20161 + type: string 20162 + name: 20163 + description: Name is a tag-less image name. 20164 + type: string 20165 + newName: 20166 + description: NewName is the value used to replace 20167 + the original name. 20168 + type: string 20169 + newTag: 20170 + description: NewTag is the value used to replace the 20171 + original tag. 20172 + type: string 20173 + required: 20174 + - name 20175 + type: object 20176 + type: array 20177 + patches: 20178 + description: |- 20179 + Strategic merge and JSON patches, defined as inline YAML objects, 20180 + capable of targeting objects based on kind, label and annotation selectors. 20181 + items: 20182 + description: |- 20183 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 20184 + be applied to. 20185 + properties: 20186 + patch: 20187 + description: |- 20188 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 20189 + an array of operation objects. 20190 + type: string 20191 + target: 20192 + description: Target points to the resources that the 20193 + patch document should be applied to. 20194 + properties: 20195 + annotationSelector: 20196 + description: |- 20197 + AnnotationSelector is a string that follows the label selection expression 20198 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20199 + It matches with the resource annotations. 20200 type: string 20201 - description: |- 20202 - EventMetadata is an optional field for adding metadata to events dispatched by the 20203 - controller. This can be used for enhancing the context of the event. If a field 20204 - would override one already present on the original event as generated by the emitter, 20205 - then the override doesn't happen, i.e. the original value is preserved, and an info 20206 - log is printed. 20207 - type: object 20208 - eventSeverity: 20209 - default: info 20210 - description: |- 20211 - EventSeverity specifies how to filter events based on severity. 20212 - If set to 'info' no events will be filtered. 20213 - enum: 20214 - - info 20215 - - error 20216 - type: string 20217 - eventSources: 20218 - description: |- 20219 - EventSources specifies how to filter events based 20220 - on the involved object kind, name and namespace. 20221 - items: 20222 + group: 20223 description: |- 20224 - CrossNamespaceObjectReference contains enough information to let you locate the 20225 - typed referenced object at cluster level 20226 - properties: 20227 - apiVersion: 20228 - description: API version of the referent 20229 - type: string 20230 - kind: 20231 - description: Kind of the referent 20232 - enum: 20233 - - Bucket 20234 - - GitRepository 20235 - - Kustomization 20236 - - HelmRelease 20237 - - HelmChart 20238 - - HelmRepository 20239 - - ImageRepository 20240 - - ImagePolicy 20241 - - ImageUpdateAutomation 20242 - - OCIRepository 20243 - type: string 20244 - matchLabels: 20245 - additionalProperties: 20246 - type: string 20247 - description: |- 20248 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 20249 - map is equivalent to an element of matchExpressions, whose key field is "key", the 20250 - operator is "In", and the values array contains only "value". The requirements are ANDed. 20251 - MatchLabels requires the name to be set to `*`. 20252 - type: object 20253 - name: 20254 - description: |- 20255 - Name of the referent 20256 - If multiple resources are targeted `*` may be set. 20257 - maxLength: 53 20258 - minLength: 1 20259 - type: string 20260 - namespace: 20261 - description: Namespace of the referent 20262 - maxLength: 53 20263 - minLength: 1 20264 - type: string 20265 - required: 20266 - - kind 20267 - - name 20268 - type: object 20269 - type: array 20270 - exclusionList: 20271 - description: |- 20272 - ExclusionList specifies a list of Golang regular expressions 20273 - to be used for excluding messages. 20274 - items: 20275 + Group is the API group to select resources from. 20276 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 20277 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20278 type: string 20279 - type: array 20280 - inclusionList: 20281 - description: |- 20282 - InclusionList specifies a list of Golang regular expressions 20283 - to be used for including messages. 20284 - items: 20285 + kind: 20286 + description: |- 20287 + Kind of the API Group to select resources from. 20288 + Together with Group and Version it is capable of unambiguously 20289 + identifying and/or selecting resources. 20290 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20291 + type: string 20292 + labelSelector: 20293 + description: |- 20294 + LabelSelector is a string that follows the label selection expression 20295 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20296 + It matches with the resource labels. 20297 + type: string 20298 + name: 20299 + description: Name to match resources with. 20300 + type: string 20301 + namespace: 20302 + description: Namespace to select resources from. 20303 + type: string 20304 + version: 20305 + description: |- 20306 + Version of the API Group to select resources from. 20307 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 20308 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20309 type: string 20310 - type: array 20311 - providerRef: 20312 - description: ProviderRef specifies which Provider this Alert should use. 20313 - properties: 20314 - name: 20315 - description: Name of the referent. 20316 - type: string 20317 - required: 20318 - - name 20319 type: object 20320 - summary: 20321 - description: Summary holds a short description of the impact and affected cluster. 20322 - maxLength: 255 20323 - type: string 20324 - suspend: 20325 - description: |- 20326 - Suspend tells the controller to suspend subsequent 20327 - events handling for this Alert. 20328 - type: boolean 20329 - required: 20330 - - eventSources 20331 - - providerRef 20332 - type: object 20333 - status: 20334 - default: 20335 - observedGeneration: -1 20336 - description: AlertStatus defines the observed state of the Alert. 20337 - properties: 20338 - conditions: 20339 - description: Conditions holds the conditions for the Alert. 20340 + required: 20341 + - patch 20342 + type: object 20343 + type: array 20344 + patchesJson6902: 20345 + description: |- 20346 + JSON 6902 patches, defined as inline YAML objects. 20347 + Deprecated: use Patches instead. 20348 + items: 20349 + description: JSON6902Patch contains a JSON6902 patch and 20350 + the target the patch should be applied to. 20351 + properties: 20352 + patch: 20353 + description: Patch contains the JSON6902 patch document 20354 + with an array of operation objects. 20355 items: 20356 - description: Condition contains details for one aspect of the current state of this API 20357 - Resource. 20358 - properties: 20359 - lastTransitionTime: 20360 - description: |- 20361 - lastTransitionTime is the last time the condition transitioned from one status to another. 20362 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20363 - format: date-time 20364 - type: string 20365 - message: 20366 - description: |- 20367 - message is a human readable message indicating details about the transition. 20368 - This may be an empty string. 20369 - maxLength: 32768 20370 - type: string 20371 - observedGeneration: 20372 - description: |- 20373 - observedGeneration represents the .metadata.generation that the condition was set based upon. 20374 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20375 - with respect to the current state of the instance. 20376 - format: int64 20377 - minimum: 0 20378 - type: integer 20379 - reason: 20380 - description: |- 20381 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 20382 - Producers of specific condition types may define expected values and meanings for this field, 20383 - and whether the values are considered a guaranteed API. 20384 - The value should be a CamelCase string. 20385 - This field may not be empty. 20386 - maxLength: 1024 20387 - minLength: 1 20388 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20389 - type: string 20390 - status: 20391 - description: status of the condition, one of True, False, Unknown. 20392 - enum: 20393 - - "True" 20394 - - "False" 20395 - - Unknown 20396 - type: string 20397 - type: 20398 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 20399 - maxLength: 316 20400 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 20401 - type: string 20402 - required: 20403 - - lastTransitionTime 20404 - - message 20405 - - reason 20406 - - status 20407 - - type 20408 - type: object 20409 + description: |- 20410 + JSON6902 is a JSON6902 operation object. 20411 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 20412 + properties: 20413 + from: 20414 + description: |- 20415 + From contains a JSON-pointer value that references a location within the target document where the operation is 20416 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 20417 + type: string 20418 + op: 20419 + description: |- 20420 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 20421 + "test". 20422 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 20423 + enum: 20424 + - test 20425 + - remove 20426 + - add 20427 + - replace 20428 + - move 20429 + - copy 20430 + type: string 20431 + path: 20432 + description: |- 20433 + Path contains the JSON-pointer value that references a location within the target document where the operation 20434 + is performed. The meaning of the value depends on the value of Op. 20435 + type: string 20436 + value: 20437 + description: |- 20438 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 20439 + account by all operations. 20440 + x-kubernetes-preserve-unknown-fields: true 20441 + required: 20442 + - op 20443 + - path 20444 + type: object 20445 type: array 20446 - lastHandledReconcileAt: 20447 - description: |- 20448 - LastHandledReconcileAt holds the value of the most recent 20449 - reconcile request value, so a change of the annotation value 20450 - can be detected. 20451 - type: string 20452 - observedGeneration: 20453 - description: ObservedGeneration is the last observed generation. 20454 - format: int64 20455 - type: integer 20456 - type: object 20457 + target: 20458 + description: Target points to the resources that the 20459 + patch document should be applied to. 20460 + properties: 20461 + annotationSelector: 20462 + description: |- 20463 + AnnotationSelector is a string that follows the label selection expression 20464 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20465 + It matches with the resource annotations. 20466 + type: string 20467 + group: 20468 + description: |- 20469 + Group is the API group to select resources from. 20470 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 20471 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20472 + type: string 20473 + kind: 20474 + description: |- 20475 + Kind of the API Group to select resources from. 20476 + Together with Group and Version it is capable of unambiguously 20477 + identifying and/or selecting resources. 20478 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20479 + type: string 20480 + labelSelector: 20481 + description: |- 20482 + LabelSelector is a string that follows the label selection expression 20483 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20484 + It matches with the resource labels. 20485 + type: string 20486 + name: 20487 + description: Name to match resources with. 20488 + type: string 20489 + namespace: 20490 + description: Namespace to select resources from. 20491 + type: string 20492 + version: 20493 + description: |- 20494 + Version of the API Group to select resources from. 20495 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 20496 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20497 + type: string 20498 + type: object 20499 + required: 20500 + - patch 20501 + - target 20502 + type: object 20503 + type: array 20504 + patchesStrategicMerge: 20505 + description: |- 20506 + Strategic merge patches, defined as inline YAML objects. 20507 + Deprecated: use Patches instead. 20508 + items: 20509 + x-kubernetes-preserve-unknown-fields: true 20510 + type: array 20511 + type: object 20512 + type: object 20513 + type: array 20514 + releaseName: 20515 + description: |- 20516 + ReleaseName used for the Helm release. Defaults to a composition of 20517 + '[TargetNamespace-]Name'. 20518 + maxLength: 53 20519 + minLength: 1 20520 + type: string 20521 + rollback: 20522 + description: Rollback holds the configuration for Helm rollback actions 20523 + for this HelmRelease. 20524 + properties: 20525 + cleanupOnFail: 20526 + description: |- 20527 + CleanupOnFail allows deletion of new resources created during the Helm 20528 + rollback action when it fails. 20529 + type: boolean 20530 + disableHooks: 20531 + description: DisableHooks prevents hooks from running during the 20532 + Helm rollback action. 20533 + type: boolean 20534 + disableWait: 20535 + description: |- 20536 + DisableWait disables the waiting for resources to be ready after a Helm 20537 + rollback has been performed. 20538 + type: boolean 20539 + disableWaitForJobs: 20540 + description: |- 20541 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20542 + rollback has been performed. 20543 + type: boolean 20544 + force: 20545 + description: Force forces resource updates through a replacement 20546 + strategy. 20547 + type: boolean 20548 + recreate: 20549 + description: Recreate performs pod restarts for the resource if 20550 + applicable. 20551 + type: boolean 20552 + timeout: 20553 + description: |- 20554 + Timeout is the time to wait for any individual Kubernetes operation (like 20555 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 20556 + 'HelmReleaseSpec.Timeout'. 20557 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20558 + type: string 20559 type: object 20560 - served: true 20561 - storage: false 20562 - subresources: 20563 - status: {} 20564 - - additionalPrinterColumns: 20565 - - jsonPath: .metadata.creationTimestamp 20566 - name: Age 20567 - type: date 20568 - name: v1beta3 20569 - schema: 20570 - openAPIV3Schema: 20571 - description: Alert is the Schema for the alerts API 20572 + serviceAccountName: 20573 + description: |- 20574 + The name of the Kubernetes service account to impersonate 20575 + when reconciling this HelmRelease. 20576 + maxLength: 253 20577 + minLength: 1 20578 + type: string 20579 + storageNamespace: 20580 + description: |- 20581 + StorageNamespace used for the Helm storage. 20582 + Defaults to the namespace of the HelmRelease. 20583 + maxLength: 63 20584 + minLength: 1 20585 + type: string 20586 + suspend: 20587 + description: |- 20588 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 20589 + it does not apply to already started reconciliations. Defaults to false. 20590 + type: boolean 20591 + targetNamespace: 20592 + description: |- 20593 + TargetNamespace to target when performing operations for the HelmRelease. 20594 + Defaults to the namespace of the HelmRelease. 20595 + maxLength: 63 20596 + minLength: 1 20597 + type: string 20598 + test: 20599 + description: Test holds the configuration for Helm test actions for 20600 + this HelmRelease. 20601 properties: 20602 - apiVersion: 20603 + enable: 20604 + description: |- 20605 + Enable enables Helm test actions for this HelmRelease after an Helm install 20606 + or upgrade action has been performed. 20607 + type: boolean 20608 + filters: 20609 + description: Filters is a list of tests to run or exclude from 20610 + running. 20611 + items: 20612 + description: Filter holds the configuration for individual Helm 20613 + test filters. 20614 + properties: 20615 + exclude: 20616 + description: Exclude specifies whether the named test should 20617 + be excluded. 20618 + type: boolean 20619 + name: 20620 + description: Name is the name of the test. 20621 + maxLength: 253 20622 + minLength: 1 20623 + type: string 20624 + required: 20625 + - name 20626 + type: object 20627 + type: array 20628 + ignoreFailures: 20629 + description: |- 20630 + IgnoreFailures tells the controller to skip remediation when the Helm tests 20631 + are run but fail. Can be overwritten for tests run after install or upgrade 20632 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 20633 + type: boolean 20634 + timeout: 20635 + description: |- 20636 + Timeout is the time to wait for any individual Kubernetes operation during 20637 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 20638 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20639 + type: string 20640 + type: object 20641 + timeout: 20642 + description: |- 20643 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 20644 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 20645 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20646 + type: string 20647 + uninstall: 20648 + description: Uninstall holds the configuration for Helm uninstall 20649 + actions for this HelmRelease. 20650 + properties: 20651 + deletionPropagation: 20652 + default: background 20653 + description: |- 20654 + DeletionPropagation specifies the deletion propagation policy when 20655 + a Helm uninstall is performed. 20656 + enum: 20657 + - background 20658 + - foreground 20659 + - orphan 20660 + type: string 20661 + disableHooks: 20662 + description: DisableHooks prevents hooks from running during the 20663 + Helm rollback action. 20664 + type: boolean 20665 + disableWait: 20666 + description: |- 20667 + DisableWait disables waiting for all the resources to be deleted after 20668 + a Helm uninstall is performed. 20669 + type: boolean 20670 + keepHistory: 20671 + description: |- 20672 + KeepHistory tells Helm to remove all associated resources and mark the 20673 + release as deleted, but retain the release history. 20674 + type: boolean 20675 + timeout: 20676 + description: |- 20677 + Timeout is the time to wait for any individual Kubernetes operation (like 20678 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 20679 + to 'HelmReleaseSpec.Timeout'. 20680 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20681 + type: string 20682 + type: object 20683 + upgrade: 20684 + description: Upgrade holds the configuration for Helm upgrade actions 20685 + for this HelmRelease. 20686 + properties: 20687 + cleanupOnFail: 20688 + description: |- 20689 + CleanupOnFail allows deletion of new resources created during the Helm 20690 + upgrade action when it fails. 20691 + type: boolean 20692 + crds: 20693 + description: |- 20694 + CRDs upgrade CRDs from the Helm Chart's crds directory according 20695 + to the CRD upgrade policy provided here. Valid values are `Skip`, 20696 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 20697 + CRDs are neither installed nor upgraded. 20698 + 20699 + Skip: do neither install nor replace (update) any CRDs. 20700 + 20701 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 20702 + 20703 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 20704 + but not deleted. 20705 + 20706 + By default, CRDs are not applied during Helm upgrade action. With this 20707 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 20708 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 20709 + enum: 20710 + - Skip 20711 + - Create 20712 + - CreateReplace 20713 + type: string 20714 + disableHooks: 20715 + description: DisableHooks prevents hooks from running during the 20716 + Helm upgrade action. 20717 + type: boolean 20718 + disableOpenAPIValidation: 20719 + description: |- 20720 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 20721 + rendered templates against the Kubernetes OpenAPI Schema. 20722 + type: boolean 20723 + disableWait: 20724 + description: |- 20725 + DisableWait disables the waiting for resources to be ready after a Helm 20726 + upgrade has been performed. 20727 + type: boolean 20728 + disableWaitForJobs: 20729 + description: |- 20730 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20731 + upgrade has been performed. 20732 + type: boolean 20733 + force: 20734 + description: Force forces resource updates through a replacement 20735 + strategy. 20736 + type: boolean 20737 + preserveValues: 20738 + description: |- 20739 + PreserveValues will make Helm reuse the last release's values and merge in 20740 + overrides from 'Values'. Setting this flag makes the HelmRelease 20741 + non-declarative. 20742 + type: boolean 20743 + remediation: 20744 + description: |- 20745 + Remediation holds the remediation configuration for when the Helm upgrade 20746 + action for the HelmRelease fails. The default is to not perform any action. 20747 + properties: 20748 + ignoreTestFailures: 20749 description: |- 20750 - APIVersion defines the versioned schema of this representation of an object. 20751 - Servers should convert recognized schemas to the latest internal value, and 20752 - may reject unrecognized values. 20753 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20754 + IgnoreTestFailures tells the controller to skip remediation when the Helm 20755 + tests are run after an upgrade action but fail. 20756 + Defaults to 'Test.IgnoreFailures'. 20757 + type: boolean 20758 + remediateLastFailure: 20759 + description: |- 20760 + RemediateLastFailure tells the controller to remediate the last failure, when 20761 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 20762 + type: boolean 20763 + retries: 20764 + description: |- 20765 + Retries is the number of retries that should be attempted on failures before 20766 + bailing. Remediation, using 'Strategy', is performed between each attempt. 20767 + Defaults to '0', a negative integer equals to unlimited retries. 20768 + type: integer 20769 + strategy: 20770 + description: Strategy to use for failure remediation. Defaults 20771 + to 'rollback'. 20772 + enum: 20773 + - rollback 20774 + - uninstall 20775 type: string 20776 + type: object 20777 + timeout: 20778 + description: |- 20779 + Timeout is the time to wait for any individual Kubernetes operation (like 20780 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 20781 + 'HelmReleaseSpec.Timeout'. 20782 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20783 + type: string 20784 + type: object 20785 + values: 20786 + description: Values holds the values for this Helm release. 20787 + x-kubernetes-preserve-unknown-fields: true 20788 + valuesFrom: 20789 + description: |- 20790 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 20791 + and information about how they should be merged. 20792 + items: 20793 + description: |- 20794 + ValuesReference contains a reference to a resource containing Helm values, 20795 + and optionally the key they can be found at. 20796 + properties: 20797 kind: 20798 + description: Kind of the values referent, valid values are ('Secret', 20799 + 'ConfigMap'). 20800 + enum: 20801 + - Secret 20802 + - ConfigMap 20803 + type: string 20804 + name: 20805 + description: |- 20806 + Name of the values referent. Should reside in the same namespace as the 20807 + referring resource. 20808 + maxLength: 253 20809 + minLength: 1 20810 + type: string 20811 + optional: 20812 + description: |- 20813 + Optional marks this ValuesReference as optional. When set, a not found error 20814 + for the values reference is ignored, but any ValuesKey, TargetPath or 20815 + transient error will still result in a reconciliation failure. 20816 + type: boolean 20817 + targetPath: 20818 + description: |- 20819 + TargetPath is the YAML dot notation path the value should be merged at. When 20820 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 20821 + which results in the values getting merged at the root. 20822 + maxLength: 250 20823 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 20824 + type: string 20825 + valuesKey: 20826 + description: |- 20827 + ValuesKey is the data key where the values.yaml or a specific value can be 20828 + found at. Defaults to 'values.yaml'. 20829 + maxLength: 253 20830 + pattern: ^[\-._a-zA-Z0-9]+$ 20831 + type: string 20832 + required: 20833 + - kind 20834 + - name 20835 + type: object 20836 + type: array 20837 + required: 20838 + - interval 20839 + type: object 20840 + x-kubernetes-validations: 20841 + - message: either chart or chartRef must be set 20842 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 20843 + && has(self.chartRef)) 20844 + status: 20845 + default: 20846 + observedGeneration: -1 20847 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 20848 + properties: 20849 + conditions: 20850 + description: Conditions holds the conditions for the HelmRelease. 20851 + items: 20852 + description: Condition contains details for one aspect of the current 20853 + state of this API Resource. 20854 + properties: 20855 + lastTransitionTime: 20856 + description: |- 20857 + lastTransitionTime is the last time the condition transitioned from one status to another. 20858 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20859 + format: date-time 20860 + type: string 20861 + message: 20862 + description: |- 20863 + message is a human readable message indicating details about the transition. 20864 + This may be an empty string. 20865 + maxLength: 32768 20866 + type: string 20867 + observedGeneration: 20868 + description: |- 20869 + observedGeneration represents the .metadata.generation that the condition was set based upon. 20870 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20871 + with respect to the current state of the instance. 20872 + format: int64 20873 + minimum: 0 20874 + type: integer 20875 + reason: 20876 + description: |- 20877 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 20878 + Producers of specific condition types may define expected values and meanings for this field, 20879 + and whether the values are considered a guaranteed API. 20880 + The value should be a CamelCase string. 20881 + This field may not be empty. 20882 + maxLength: 1024 20883 + minLength: 1 20884 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20885 + type: string 20886 + status: 20887 + description: status of the condition, one of True, False, Unknown. 20888 + enum: 20889 + - "True" 20890 + - "False" 20891 + - Unknown 20892 + type: string 20893 + type: 20894 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 20895 + maxLength: 316 20896 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 20897 + type: string 20898 + required: 20899 + - lastTransitionTime 20900 + - message 20901 + - reason 20902 + - status 20903 + - type 20904 + type: object 20905 + type: array 20906 + failures: 20907 + description: |- 20908 + Failures is the reconciliation failure count against the latest desired 20909 + state. It is reset after a successful reconciliation. 20910 + format: int64 20911 + type: integer 20912 + helmChart: 20913 + description: |- 20914 + HelmChart is the namespaced name of the HelmChart resource created by 20915 + the controller for the HelmRelease. 20916 + type: string 20917 + history: 20918 + description: |- 20919 + History holds the history of Helm releases performed for this HelmRelease 20920 + up to the last successfully completed release. 20921 + items: 20922 + description: |- 20923 + Snapshot captures a point-in-time copy of the status information for a Helm release, 20924 + as managed by the controller. 20925 + properties: 20926 + apiVersion: 20927 + description: |- 20928 + APIVersion is the API version of the Snapshot. 20929 + Provisional: when the calculation method of the Digest field is changed, 20930 + this field will be used to distinguish between the old and new methods. 20931 + type: string 20932 + appVersion: 20933 + description: AppVersion is the chart app version of the release 20934 + object in storage. 20935 + type: string 20936 + chartName: 20937 + description: ChartName is the chart name of the release object 20938 + in storage. 20939 + type: string 20940 + chartVersion: 20941 + description: |- 20942 + ChartVersion is the chart version of the release object in 20943 + storage. 20944 + type: string 20945 + configDigest: 20946 + description: |- 20947 + ConfigDigest is the checksum of the config (better known as 20948 + "values") of the release object in storage. 20949 + It has the format of `<algo>:<checksum>`. 20950 + type: string 20951 + deleted: 20952 + description: Deleted is when the release was deleted. 20953 + format: date-time 20954 + type: string 20955 + digest: 20956 + description: |- 20957 + Digest is the checksum of the release object in storage. 20958 + It has the format of `<algo>:<checksum>`. 20959 + type: string 20960 + firstDeployed: 20961 + description: FirstDeployed is when the release was first deployed. 20962 + format: date-time 20963 + type: string 20964 + lastDeployed: 20965 + description: LastDeployed is when the release was last deployed. 20966 + format: date-time 20967 + type: string 20968 + name: 20969 + description: Name is the name of the release. 20970 + type: string 20971 + namespace: 20972 + description: Namespace is the namespace the release is deployed 20973 + to. 20974 + type: string 20975 + ociDigest: 20976 + description: OCIDigest is the digest of the OCI artifact associated 20977 + with the release. 20978 + type: string 20979 + status: 20980 + description: Status is the current state of the release. 20981 + type: string 20982 + testHooks: 20983 + additionalProperties: 20984 description: |- 20985 - Kind is a string value representing the REST resource this object represents. 20986 - Servers may infer this from the endpoint the client submits requests to. 20987 - Cannot be updated. 20988 - In CamelCase. 20989 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20990 - type: string 20991 - metadata: 20992 - type: object 20993 - spec: 20994 - description: AlertSpec defines an alerting rule for events involving a list of objects. 20995 + TestHookStatus holds the status information for a test hook as observed 20996 + to be run by the controller. 20997 properties: 20998 - eventMetadata: 20999 - additionalProperties: 21000 - type: string 21001 - description: |- 21002 - EventMetadata is an optional field for adding metadata to events dispatched by the 21003 - controller. This can be used for enhancing the context of the event. If a field 21004 - would override one already present on the original event as generated by the emitter, 21005 - then the override doesn't happen, i.e. the original value is preserved, and an info 21006 - log is printed. 21007 - type: object 21008 - eventSeverity: 21009 - default: info 21010 - description: |- 21011 - EventSeverity specifies how to filter events based on severity. 21012 - If set to 'info' no events will be filtered. 21013 - enum: 21014 - - info 21015 - - error 21016 - type: string 21017 - eventSources: 21018 - description: |- 21019 - EventSources specifies how to filter events based 21020 - on the involved object kind, name and namespace. 21021 - items: 21022 - description: |- 21023 - CrossNamespaceObjectReference contains enough information to let you locate the 21024 - typed referenced object at cluster level 21025 - properties: 21026 - apiVersion: 21027 - description: API version of the referent 21028 - type: string 21029 - kind: 21030 - description: Kind of the referent 21031 - enum: 21032 - - Bucket 21033 - - GitRepository 21034 - - Kustomization 21035 - - HelmRelease 21036 - - HelmChart 21037 - - HelmRepository 21038 - - ImageRepository 21039 - - ImagePolicy 21040 - - ImageUpdateAutomation 21041 - - OCIRepository 21042 - type: string 21043 - matchLabels: 21044 - additionalProperties: 21045 - type: string 21046 - description: |- 21047 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21048 - map is equivalent to an element of matchExpressions, whose key field is "key", the 21049 - operator is "In", and the values array contains only "value". The requirements are ANDed. 21050 - MatchLabels requires the name to be set to `*`. 21051 - type: object 21052 - name: 21053 - description: |- 21054 - Name of the referent 21055 - If multiple resources are targeted `*` may be set. 21056 - maxLength: 53 21057 - minLength: 1 21058 - type: string 21059 - namespace: 21060 - description: Namespace of the referent 21061 - maxLength: 53 21062 - minLength: 1 21063 - type: string 21064 - required: 21065 - - kind 21066 - - name 21067 - type: object 21068 - type: array 21069 - exclusionList: 21070 - description: |- 21071 - ExclusionList specifies a list of Golang regular expressions 21072 - to be used for excluding messages. 21073 - items: 21074 - type: string 21075 - type: array 21076 - inclusionList: 21077 - description: |- 21078 - InclusionList specifies a list of Golang regular expressions 21079 - to be used for including messages. 21080 - items: 21081 - type: string 21082 - type: array 21083 - providerRef: 21084 - description: ProviderRef specifies which Provider this Alert should use. 21085 - properties: 21086 - name: 21087 - description: Name of the referent. 21088 - type: string 21089 - required: 21090 - - name 21091 - type: object 21092 - summary: 21093 - description: Summary holds a short description of the impact and affected cluster. 21094 - maxLength: 255 21095 - type: string 21096 - suspend: 21097 - description: |- 21098 - Suspend tells the controller to suspend subsequent 21099 - events handling for this Alert. 21100 - type: boolean 21101 - required: 21102 - - eventSources 21103 - - providerRef 21104 + lastCompleted: 21105 + description: LastCompleted is the time the test hook last 21106 + completed. 21107 + format: date-time 21108 + type: string 21109 + lastStarted: 21110 + description: LastStarted is the time the test hook was 21111 + last started. 21112 + format: date-time 21113 + type: string 21114 + phase: 21115 + description: Phase the test hook was observed to be in. 21116 + type: string 21117 type: object 21118 - type: object 21119 - served: true 21120 - storage: true 21121 - subresources: {} 21122 + description: |- 21123 + TestHooks is the list of test hooks for the release as observed to be 21124 + run by the controller. 21125 + type: object 21126 + version: 21127 + description: Version is the version of the release object in 21128 + storage. 21129 + type: integer 21130 + required: 21131 + - chartName 21132 + - chartVersion 21133 + - configDigest 21134 + - digest 21135 + - firstDeployed 21136 + - lastDeployed 21137 + - name 21138 + - namespace 21139 + - status 21140 + - version 21141 + type: object 21142 + type: array 21143 + installFailures: 21144 + description: |- 21145 + InstallFailures is the install failure count against the latest desired 21146 + state. It is reset after a successful reconciliation. 21147 + format: int64 21148 + type: integer 21149 + lastAppliedRevision: 21150 + description: |- 21151 + LastAppliedRevision is the revision of the last successfully applied 21152 + source. 21153 + Deprecated: the revision can now be found in the History. 21154 + type: string 21155 + lastAttemptedConfigDigest: 21156 + description: |- 21157 + LastAttemptedConfigDigest is the digest for the config (better known as 21158 + "values") of the last reconciliation attempt. 21159 + type: string 21160 + lastAttemptedGeneration: 21161 + description: |- 21162 + LastAttemptedGeneration is the last generation the controller attempted 21163 + to reconcile. 21164 + format: int64 21165 + type: integer 21166 + lastAttemptedReleaseAction: 21167 + description: |- 21168 + LastAttemptedReleaseAction is the last release action performed for this 21169 + HelmRelease. It is used to determine the active remediation strategy. 21170 + enum: 21171 + - install 21172 + - upgrade 21173 + type: string 21174 + lastAttemptedRevision: 21175 + description: |- 21176 + LastAttemptedRevision is the Source revision of the last reconciliation 21177 + attempt. For OCIRepository sources, the 12 first characters of the digest are 21178 + appended to the chart version e.g. "1.2.3+1234567890ab". 21179 + type: string 21180 + lastAttemptedRevisionDigest: 21181 + description: |- 21182 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 21183 + This is only set for OCIRepository sources. 21184 + type: string 21185 + lastAttemptedValuesChecksum: 21186 + description: |- 21187 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 21188 + reconciliation attempt. 21189 + Deprecated: Use LastAttemptedConfigDigest instead. 21190 + type: string 21191 + lastHandledForceAt: 21192 + description: |- 21193 + LastHandledForceAt holds the value of the most recent force request 21194 + value, so a change of the annotation value can be detected. 21195 + type: string 21196 + lastHandledReconcileAt: 21197 + description: |- 21198 + LastHandledReconcileAt holds the value of the most recent 21199 + reconcile request value, so a change of the annotation value 21200 + can be detected. 21201 + type: string 21202 + lastHandledResetAt: 21203 + description: |- 21204 + LastHandledResetAt holds the value of the most recent reset request 21205 + value, so a change of the annotation value can be detected. 21206 + type: string 21207 + lastReleaseRevision: 21208 + description: |- 21209 + LastReleaseRevision is the revision of the last successful Helm release. 21210 + Deprecated: Use History instead. 21211 + type: integer 21212 + observedGeneration: 21213 + description: ObservedGeneration is the last observed generation. 21214 + format: int64 21215 + type: integer 21216 + observedPostRenderersDigest: 21217 + description: |- 21218 + ObservedPostRenderersDigest is the digest for the post-renderers of 21219 + the last successful reconciliation attempt. 21220 + type: string 21221 + storageNamespace: 21222 + description: |- 21223 + StorageNamespace is the namespace of the Helm release storage for the 21224 + current release. 21225 + maxLength: 63 21226 + minLength: 1 21227 + type: string 21228 + upgradeFailures: 21229 + description: |- 21230 + UpgradeFailures is the upgrade failure count against the latest desired 21231 + state. It is reset after a successful reconciliation. 21232 + format: int64 21233 + type: integer 21234 + type: object 21235 + type: object 21236 + served: true 21237 + storage: false 21238 + subresources: 21239 + status: {} 21240 +--- 21241 +apiVersion: v1 21242 +kind: ServiceAccount 21243 +metadata: 21244 + labels: 21245 + app.kubernetes.io/component: helm-controller 21246 + app.kubernetes.io/instance: flux-system 21247 + app.kubernetes.io/part-of: flux 21248 + app.kubernetes.io/version: v2.5.1 21249 + name: helm-controller 21250 + namespace: flux-system 21251 +--- 21252 +apiVersion: apps/v1 21253 +kind: Deployment 21254 +metadata: 21255 + labels: 21256 + app.kubernetes.io/component: helm-controller 21257 + app.kubernetes.io/instance: flux-system 21258 + app.kubernetes.io/part-of: flux 21259 + app.kubernetes.io/version: v2.5.1 21260 + control-plane: controller 21261 + name: helm-controller 21262 + namespace: flux-system 21263 +spec: 21264 + replicas: 1 21265 + selector: 21266 + matchLabels: 21267 + app: helm-controller 21268 + template: 21269 + metadata: 21270 + annotations: 21271 + prometheus.io/port: "8080" 21272 + prometheus.io/scrape: "true" 21273 + labels: 21274 + app: helm-controller 21275 + spec: 21276 + containers: 21277 + - args: 21278 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 21279 + - --watch-all-namespaces=true 21280 + - --log-level=info 21281 + - --log-encoding=json 21282 + - --enable-leader-election 21283 + env: 21284 + - name: RUNTIME_NAMESPACE 21285 + valueFrom: 21286 + fieldRef: 21287 + fieldPath: metadata.namespace 21288 + - name: GOMAXPROCS 21289 + valueFrom: 21290 + resourceFieldRef: 21291 + containerName: manager 21292 + resource: limits.cpu 21293 + - name: GOMEMLIMIT 21294 + valueFrom: 21295 + resourceFieldRef: 21296 + containerName: manager 21297 + resource: limits.memory 21298 + image: ghcr.io/fluxcd/helm-controller:v1.2.0 21299 + imagePullPolicy: IfNotPresent 21300 + livenessProbe: 21301 + httpGet: 21302 + path: /healthz 21303 + port: healthz 21304 + name: manager 21305 + ports: 21306 + - containerPort: 8080 21307 + name: http-prom 21308 + protocol: TCP 21309 + - containerPort: 9440 21310 + name: healthz 21311 + protocol: TCP 21312 + readinessProbe: 21313 + httpGet: 21314 + path: /readyz 21315 + port: healthz 21316 + resources: 21317 + limits: 21318 + cpu: 1000m 21319 + memory: 1Gi 21320 + requests: 21321 + cpu: 100m 21322 + memory: 64Mi 21323 + securityContext: 21324 + allowPrivilegeEscalation: false 21325 + capabilities: 21326 + drop: 21327 + - ALL 21328 + readOnlyRootFilesystem: true 21329 + runAsNonRoot: true 21330 + seccompProfile: 21331 + type: RuntimeDefault 21332 + volumeMounts: 21333 + - mountPath: /tmp 21334 + name: temp 21335 + nodeSelector: 21336 + kubernetes.io/os: linux 21337 + priorityClassName: system-cluster-critical 21338 + securityContext: 21339 + fsGroup: 1337 21340 + serviceAccountName: helm-controller 21341 + terminationGracePeriodSeconds: 600 21342 + volumes: 21343 + - emptyDir: {} 21344 + name: temp 21345 --- 21346 apiVersion: apiextensions.k8s.io/v1 21347 kind: CustomResourceDefinition 21348 metadata: 21349 - annotations: 21350 - controller-gen.kubebuilder.io/version: v0.16.1 21351 - labels: 21352 - app.kubernetes.io/component: notification-controller 21353 - app.kubernetes.io/instance: flux-system 21354 - app.kubernetes.io/part-of: flux 21355 - app.kubernetes.io/version: v2.4.0 21356 - name: providers.notification.toolkit.fluxcd.io 21357 + annotations: 21358 + controller-gen.kubebuilder.io/version: v0.16.1 21359 + labels: 21360 + app.kubernetes.io/component: notification-controller 21361 + app.kubernetes.io/instance: flux-system 21362 + app.kubernetes.io/part-of: flux 21363 + app.kubernetes.io/version: v2.5.1 21364 + name: alerts.notification.toolkit.fluxcd.io 21365 spec: 21366 - group: notification.toolkit.fluxcd.io 21367 - names: 21368 - kind: Provider 21369 - listKind: ProviderList 21370 - plural: providers 21371 - singular: provider 21372 - scope: Namespaced 21373 - versions: 21374 - - additionalPrinterColumns: 21375 - - jsonPath: .metadata.creationTimestamp 21376 - name: Age 21377 - type: date 21378 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21379 - name: Ready 21380 - type: string 21381 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21382 - name: Status 21383 - type: string 21384 - deprecated: true 21385 - deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3 21386 - name: v1beta1 21387 - schema: 21388 - openAPIV3Schema: 21389 - description: Provider is the Schema for the providers API 21390 - properties: 21391 + group: notification.toolkit.fluxcd.io 21392 + names: 21393 + kind: Alert 21394 + listKind: AlertList 21395 + plural: alerts 21396 + singular: alert 21397 + scope: Namespaced 21398 + versions: 21399 + - additionalPrinterColumns: 21400 + - jsonPath: .metadata.creationTimestamp 21401 + name: Age 21402 + type: date 21403 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 21404 + name: Ready 21405 + type: string 21406 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 21407 + name: Status 21408 + type: string 21409 + deprecated: true 21410 + deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3 21411 + name: v1beta1 21412 + schema: 21413 + openAPIV3Schema: 21414 + description: Alert is the Schema for the alerts API 21415 + properties: 21416 + apiVersion: 21417 + description: |- 21418 + APIVersion defines the versioned schema of this representation of an object. 21419 + Servers should convert recognized schemas to the latest internal value, and 21420 + may reject unrecognized values. 21421 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21422 + type: string 21423 + kind: 21424 + description: |- 21425 + Kind is a string value representing the REST resource this object represents. 21426 + Servers may infer this from the endpoint the client submits requests to. 21427 + Cannot be updated. 21428 + In CamelCase. 21429 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21430 + type: string 21431 + metadata: 21432 + type: object 21433 + spec: 21434 + description: AlertSpec defines an alerting rule for events involving a 21435 + list of objects 21436 + properties: 21437 + eventSeverity: 21438 + default: info 21439 + description: |- 21440 + Filter events based on severity, defaults to ('info'). 21441 + If set to 'info' no events will be filtered. 21442 + enum: 21443 + - info 21444 + - error 21445 + type: string 21446 + eventSources: 21447 + description: Filter events based on the involved objects. 21448 + items: 21449 + description: |- 21450 + CrossNamespaceObjectReference contains enough information to let you locate the 21451 + typed referenced object at cluster level 21452 + properties: 21453 apiVersion: 21454 - description: |- 21455 - APIVersion defines the versioned schema of this representation of an object. 21456 - Servers should convert recognized schemas to the latest internal value, and 21457 - may reject unrecognized values. 21458 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21459 - type: string 21460 + description: API version of the referent 21461 + type: string 21462 kind: 21463 - description: |- 21464 - Kind is a string value representing the REST resource this object represents. 21465 - Servers may infer this from the endpoint the client submits requests to. 21466 - Cannot be updated. 21467 - In CamelCase. 21468 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21469 + description: Kind of the referent 21470 + enum: 21471 + - Bucket 21472 + - GitRepository 21473 + - Kustomization 21474 + - HelmRelease 21475 + - HelmChart 21476 + - HelmRepository 21477 + - ImageRepository 21478 + - ImagePolicy 21479 + - ImageUpdateAutomation 21480 + - OCIRepository 21481 + type: string 21482 + matchLabels: 21483 + additionalProperties: 21484 type: string 21485 - metadata: 21486 - type: object 21487 - spec: 21488 - description: ProviderSpec defines the desired state of Provider 21489 - properties: 21490 - address: 21491 - description: HTTP/S webhook address of this provider 21492 - pattern: ^(http|https):// 21493 - type: string 21494 - certSecretRef: 21495 - description: |- 21496 - CertSecretRef can be given the name of a secret containing 21497 - a PEM-encoded CA certificate (`caFile`) 21498 - properties: 21499 - name: 21500 - description: Name of the referent. 21501 - type: string 21502 - required: 21503 - - name 21504 - type: object 21505 - channel: 21506 - description: Alert channel for this provider 21507 - type: string 21508 - proxy: 21509 - description: HTTP/S address of the proxy 21510 - pattern: ^(http|https):// 21511 - type: string 21512 - secretRef: 21513 - description: |- 21514 - Secret reference containing the provider webhook URL 21515 - using "address" as data key 21516 - properties: 21517 - name: 21518 - description: Name of the referent. 21519 - type: string 21520 - required: 21521 - - name 21522 - type: object 21523 - suspend: 21524 - description: |- 21525 - This flag tells the controller to suspend subsequent events handling. 21526 - Defaults to false. 21527 - type: boolean 21528 - timeout: 21529 - description: Timeout for sending alerts to the provider. 21530 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 21531 - type: string 21532 - type: 21533 - description: Type of provider 21534 - enum: 21535 - - slack 21536 - - discord 21537 - - msteams 21538 - - rocket 21539 - - generic 21540 - - generic-hmac 21541 - - github 21542 - - gitlab 21543 - - bitbucket 21544 - - azuredevops 21545 - - googlechat 21546 - - webex 21547 - - sentry 21548 - - azureeventhub 21549 - - telegram 21550 - - lark 21551 - - matrix 21552 - - opsgenie 21553 - - alertmanager 21554 - - grafana 21555 - - githubdispatch 21556 - type: string 21557 - username: 21558 - description: Bot username for this provider 21559 - type: string 21560 - required: 21561 - - type 21562 - type: object 21563 + description: |- 21564 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21565 + map is equivalent to an element of matchExpressions, whose key field is "key", the 21566 + operator is "In", and the values array contains only "value". The requirements are ANDed. 21567 + type: object 21568 + name: 21569 + description: Name of the referent 21570 + maxLength: 53 21571 + minLength: 1 21572 + type: string 21573 + namespace: 21574 + description: Namespace of the referent 21575 + maxLength: 53 21576 + minLength: 1 21577 + type: string 21578 + required: 21579 + - kind 21580 + - name 21581 + type: object 21582 + type: array 21583 + exclusionList: 21584 + description: A list of Golang regular expressions to be used for excluding 21585 + messages. 21586 + items: 21587 + type: string 21588 + type: array 21589 + providerRef: 21590 + description: Send events using this provider. 21591 + properties: 21592 + name: 21593 + description: Name of the referent. 21594 + type: string 21595 + required: 21596 + - name 21597 + type: object 21598 + summary: 21599 + description: Short description of the impact and affected cluster. 21600 + type: string 21601 + suspend: 21602 + description: |- 21603 + This flag tells the controller to suspend subsequent events dispatching. 21604 + Defaults to false. 21605 + type: boolean 21606 + required: 21607 + - eventSources 21608 + - providerRef 21609 + type: object 21610 + status: 21611 + default: 21612 + observedGeneration: -1 21613 + description: AlertStatus defines the observed state of Alert 21614 + properties: 21615 + conditions: 21616 + items: 21617 + description: Condition contains details for one aspect of the current 21618 + state of this API Resource. 21619 + properties: 21620 + lastTransitionTime: 21621 + description: |- 21622 + lastTransitionTime is the last time the condition transitioned from one status to another. 21623 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21624 + format: date-time 21625 + type: string 21626 + message: 21627 + description: |- 21628 + message is a human readable message indicating details about the transition. 21629 + This may be an empty string. 21630 + maxLength: 32768 21631 + type: string 21632 + observedGeneration: 21633 + description: |- 21634 + observedGeneration represents the .metadata.generation that the condition was set based upon. 21635 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21636 + with respect to the current state of the instance. 21637 + format: int64 21638 + minimum: 0 21639 + type: integer 21640 + reason: 21641 + description: |- 21642 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 21643 + Producers of specific condition types may define expected values and meanings for this field, 21644 + and whether the values are considered a guaranteed API. 21645 + The value should be a CamelCase string. 21646 + This field may not be empty. 21647 + maxLength: 1024 21648 + minLength: 1 21649 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21650 + type: string 21651 status: 21652 - default: 21653 - observedGeneration: -1 21654 - description: ProviderStatus defines the observed state of Provider 21655 - properties: 21656 - conditions: 21657 - items: 21658 - description: Condition contains details for one aspect of the current state of this API 21659 - Resource. 21660 - properties: 21661 - lastTransitionTime: 21662 - description: |- 21663 - lastTransitionTime is the last time the condition transitioned from one status to another. 21664 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21665 - format: date-time 21666 - type: string 21667 - message: 21668 - description: |- 21669 - message is a human readable message indicating details about the transition. 21670 - This may be an empty string. 21671 - maxLength: 32768 21672 - type: string 21673 - observedGeneration: 21674 - description: |- 21675 - observedGeneration represents the .metadata.generation that the condition was set based upon. 21676 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21677 - with respect to the current state of the instance. 21678 - format: int64 21679 - minimum: 0 21680 - type: integer 21681 - reason: 21682 - description: |- 21683 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 21684 - Producers of specific condition types may define expected values and meanings for this field, 21685 - and whether the values are considered a guaranteed API. 21686 - The value should be a CamelCase string. 21687 - This field may not be empty. 21688 - maxLength: 1024 21689 - minLength: 1 21690 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21691 - type: string 21692 - status: 21693 - description: status of the condition, one of True, False, Unknown. 21694 - enum: 21695 - - "True" 21696 - - "False" 21697 - - Unknown 21698 - type: string 21699 - type: 21700 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 21701 - maxLength: 316 21702 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21703 - type: string 21704 - required: 21705 - - lastTransitionTime 21706 - - message 21707 - - reason 21708 - - status 21709 - - type 21710 - type: object 21711 - type: array 21712 - observedGeneration: 21713 - description: ObservedGeneration is the last reconciled generation. 21714 - format: int64 21715 - type: integer 21716 - type: object 21717 + description: status of the condition, one of True, False, Unknown. 21718 + enum: 21719 + - "True" 21720 + - "False" 21721 + - Unknown 21722 + type: string 21723 + type: 21724 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 21725 + maxLength: 316 21726 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21727 + type: string 21728 + required: 21729 + - lastTransitionTime 21730 + - message 21731 + - reason 21732 + - status 21733 + - type 21734 + type: object 21735 + type: array 21736 + observedGeneration: 21737 + description: ObservedGeneration is the last observed generation. 21738 + format: int64 21739 + type: integer 21740 + type: object 21741 + type: object 21742 + served: true 21743 + storage: false 21744 + subresources: 21745 + status: {} 21746 + - additionalPrinterColumns: 21747 + - jsonPath: .metadata.creationTimestamp 21748 + name: Age 21749 + type: date 21750 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 21751 + name: Ready 21752 + type: string 21753 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 21754 + name: Status 21755 + type: string 21756 + deprecated: true 21757 + deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 21758 + name: v1beta2 21759 + schema: 21760 + openAPIV3Schema: 21761 + description: Alert is the Schema for the alerts API 21762 + properties: 21763 + apiVersion: 21764 + description: |- 21765 + APIVersion defines the versioned schema of this representation of an object. 21766 + Servers should convert recognized schemas to the latest internal value, and 21767 + may reject unrecognized values. 21768 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21769 + type: string 21770 + kind: 21771 + description: |- 21772 + Kind is a string value representing the REST resource this object represents. 21773 + Servers may infer this from the endpoint the client submits requests to. 21774 + Cannot be updated. 21775 + In CamelCase. 21776 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21777 + type: string 21778 + metadata: 21779 + type: object 21780 + spec: 21781 + description: AlertSpec defines an alerting rule for events involving a 21782 + list of objects. 21783 + properties: 21784 + eventMetadata: 21785 + additionalProperties: 21786 + type: string 21787 + description: |- 21788 + EventMetadata is an optional field for adding metadata to events dispatched by the 21789 + controller. This can be used for enhancing the context of the event. If a field 21790 + would override one already present on the original event as generated by the emitter, 21791 + then the override doesn't happen, i.e. the original value is preserved, and an info 21792 + log is printed. 21793 type: object 21794 - served: true 21795 - storage: false 21796 - subresources: 21797 - status: {} 21798 - - additionalPrinterColumns: 21799 - - jsonPath: .metadata.creationTimestamp 21800 - name: Age 21801 - type: date 21802 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21803 - name: Ready 21804 - type: string 21805 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21806 - name: Status 21807 - type: string 21808 - deprecated: true 21809 - deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 21810 - name: v1beta2 21811 - schema: 21812 - openAPIV3Schema: 21813 - description: Provider is the Schema for the providers API. 21814 - properties: 21815 + eventSeverity: 21816 + default: info 21817 + description: |- 21818 + EventSeverity specifies how to filter events based on severity. 21819 + If set to 'info' no events will be filtered. 21820 + enum: 21821 + - info 21822 + - error 21823 + type: string 21824 + eventSources: 21825 + description: |- 21826 + EventSources specifies how to filter events based 21827 + on the involved object kind, name and namespace. 21828 + items: 21829 + description: |- 21830 + CrossNamespaceObjectReference contains enough information to let you locate the 21831 + typed referenced object at cluster level 21832 + properties: 21833 apiVersion: 21834 - description: |- 21835 - APIVersion defines the versioned schema of this representation of an object. 21836 - Servers should convert recognized schemas to the latest internal value, and 21837 - may reject unrecognized values. 21838 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21839 - type: string 21840 + description: API version of the referent 21841 + type: string 21842 kind: 21843 - description: |- 21844 - Kind is a string value representing the REST resource this object represents. 21845 - Servers may infer this from the endpoint the client submits requests to. 21846 - Cannot be updated. 21847 - In CamelCase. 21848 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21849 + description: Kind of the referent 21850 + enum: 21851 + - Bucket 21852 + - GitRepository 21853 + - Kustomization 21854 + - HelmRelease 21855 + - HelmChart 21856 + - HelmRepository 21857 + - ImageRepository 21858 + - ImagePolicy 21859 + - ImageUpdateAutomation 21860 + - OCIRepository 21861 + type: string 21862 + matchLabels: 21863 + additionalProperties: 21864 type: string 21865 - metadata: 21866 - type: object 21867 - spec: 21868 - description: ProviderSpec defines the desired state of the Provider. 21869 - properties: 21870 - address: 21871 - description: |- 21872 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 21873 - What kind of endpoint depends on the specific Provider type being used. 21874 - For the generic Provider, for example, this is an HTTP/S address. 21875 - For other Provider types this could be a project ID or a namespace. 21876 - maxLength: 2048 21877 - type: string 21878 - certSecretRef: 21879 - description: |- 21880 - CertSecretRef specifies the Secret containing 21881 - a PEM-encoded CA certificate (in the `ca.crt` key). 21882 - 21883 - Note: Support for the `caFile` key has 21884 - been deprecated. 21885 - properties: 21886 - name: 21887 - description: Name of the referent. 21888 - type: string 21889 - required: 21890 - - name 21891 - type: object 21892 - channel: 21893 - description: Channel specifies the destination channel where events should be posted. 21894 - maxLength: 2048 21895 - type: string 21896 - interval: 21897 - description: Interval at which to reconcile the Provider with its Secret references. 21898 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21899 - type: string 21900 - proxy: 21901 - description: Proxy the HTTP/S address of the proxy server. 21902 - maxLength: 2048 21903 - pattern: ^(http|https)://.*$ 21904 - type: string 21905 - secretRef: 21906 - description: |- 21907 - SecretRef specifies the Secret containing the authentication 21908 - credentials for this Provider. 21909 - properties: 21910 - name: 21911 - description: Name of the referent. 21912 - type: string 21913 - required: 21914 - - name 21915 - type: object 21916 - suspend: 21917 - description: |- 21918 - Suspend tells the controller to suspend subsequent 21919 - events handling for this Provider. 21920 - type: boolean 21921 - timeout: 21922 - description: Timeout for sending alerts to the Provider. 21923 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 21924 - type: string 21925 - type: 21926 - description: Type specifies which Provider implementation to use. 21927 - enum: 21928 - - slack 21929 - - discord 21930 - - msteams 21931 - - rocket 21932 - - generic 21933 - - generic-hmac 21934 - - github 21935 - - gitlab 21936 - - gitea 21937 - - bitbucketserver 21938 - - bitbucket 21939 - - azuredevops 21940 - - googlechat 21941 - - googlepubsub 21942 - - webex 21943 - - sentry 21944 - - azureeventhub 21945 - - telegram 21946 - - lark 21947 - - matrix 21948 - - opsgenie 21949 - - alertmanager 21950 - - grafana 21951 - - githubdispatch 21952 - - pagerduty 21953 - - datadog 21954 - type: string 21955 - username: 21956 - description: Username specifies the name under which events are posted. 21957 - maxLength: 2048 21958 - type: string 21959 - required: 21960 - - type 21961 - type: object 21962 + description: |- 21963 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21964 + map is equivalent to an element of matchExpressions, whose key field is "key", the 21965 + operator is "In", and the values array contains only "value". The requirements are ANDed. 21966 + MatchLabels requires the name to be set to `*`. 21967 + type: object 21968 + name: 21969 + description: |- 21970 + Name of the referent 21971 + If multiple resources are targeted `*` may be set. 21972 + maxLength: 53 21973 + minLength: 1 21974 + type: string 21975 + namespace: 21976 + description: Namespace of the referent 21977 + maxLength: 53 21978 + minLength: 1 21979 + type: string 21980 + required: 21981 + - kind 21982 + - name 21983 + type: object 21984 + type: array 21985 + exclusionList: 21986 + description: |- 21987 + ExclusionList specifies a list of Golang regular expressions 21988 + to be used for excluding messages. 21989 + items: 21990 + type: string 21991 + type: array 21992 + inclusionList: 21993 + description: |- 21994 + InclusionList specifies a list of Golang regular expressions 21995 + to be used for including messages. 21996 + items: 21997 + type: string 21998 + type: array 21999 + providerRef: 22000 + description: ProviderRef specifies which Provider this Alert should 22001 + use. 22002 + properties: 22003 + name: 22004 + description: Name of the referent. 22005 + type: string 22006 + required: 22007 + - name 22008 + type: object 22009 + summary: 22010 + description: Summary holds a short description of the impact and affected 22011 + cluster. 22012 + maxLength: 255 22013 + type: string 22014 + suspend: 22015 + description: |- 22016 + Suspend tells the controller to suspend subsequent 22017 + events handling for this Alert. 22018 + type: boolean 22019 + required: 22020 + - eventSources 22021 + - providerRef 22022 + type: object 22023 + status: 22024 + default: 22025 + observedGeneration: -1 22026 + description: AlertStatus defines the observed state of the Alert. 22027 + properties: 22028 + conditions: 22029 + description: Conditions holds the conditions for the Alert. 22030 + items: 22031 + description: Condition contains details for one aspect of the current 22032 + state of this API Resource. 22033 + properties: 22034 + lastTransitionTime: 22035 + description: |- 22036 + lastTransitionTime is the last time the condition transitioned from one status to another. 22037 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22038 + format: date-time 22039 + type: string 22040 + message: 22041 + description: |- 22042 + message is a human readable message indicating details about the transition. 22043 + This may be an empty string. 22044 + maxLength: 32768 22045 + type: string 22046 + observedGeneration: 22047 + description: |- 22048 + observedGeneration represents the .metadata.generation that the condition was set based upon. 22049 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22050 + with respect to the current state of the instance. 22051 + format: int64 22052 + minimum: 0 22053 + type: integer 22054 + reason: 22055 + description: |- 22056 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 22057 + Producers of specific condition types may define expected values and meanings for this field, 22058 + and whether the values are considered a guaranteed API. 22059 + The value should be a CamelCase string. 22060 + This field may not be empty. 22061 + maxLength: 1024 22062 + minLength: 1 22063 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22064 + type: string 22065 status: 22066 - default: 22067 - observedGeneration: -1 22068 - description: ProviderStatus defines the observed state of the Provider. 22069 - properties: 22070 - conditions: 22071 - description: Conditions holds the conditions for the Provider. 22072 - items: 22073 - description: Condition contains details for one aspect of the current state of this API 22074 - Resource. 22075 - properties: 22076 - lastTransitionTime: 22077 - description: |- 22078 - lastTransitionTime is the last time the condition transitioned from one status to another. 22079 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22080 - format: date-time 22081 - type: string 22082 - message: 22083 - description: |- 22084 - message is a human readable message indicating details about the transition. 22085 - This may be an empty string. 22086 - maxLength: 32768 22087 - type: string 22088 - observedGeneration: 22089 - description: |- 22090 - observedGeneration represents the .metadata.generation that the condition was set based upon. 22091 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22092 - with respect to the current state of the instance. 22093 - format: int64 22094 - minimum: 0 22095 - type: integer 22096 - reason: 22097 - description: |- 22098 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 22099 - Producers of specific condition types may define expected values and meanings for this field, 22100 - and whether the values are considered a guaranteed API. 22101 - The value should be a CamelCase string. 22102 - This field may not be empty. 22103 - maxLength: 1024 22104 - minLength: 1 22105 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22106 - type: string 22107 - status: 22108 - description: status of the condition, one of True, False, Unknown. 22109 - enum: 22110 - - "True" 22111 - - "False" 22112 - - Unknown 22113 - type: string 22114 - type: 22115 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 22116 - maxLength: 316 22117 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22118 - type: string 22119 - required: 22120 - - lastTransitionTime 22121 - - message 22122 - - reason 22123 - - status 22124 - - type 22125 - type: object 22126 - type: array 22127 - lastHandledReconcileAt: 22128 - description: |- 22129 - LastHandledReconcileAt holds the value of the most recent 22130 - reconcile request value, so a change of the annotation value 22131 - can be detected. 22132 - type: string 22133 - observedGeneration: 22134 - description: ObservedGeneration is the last reconciled generation. 22135 - format: int64 22136 - type: integer 22137 - type: object 22138 + description: status of the condition, one of True, False, Unknown. 22139 + enum: 22140 + - "True" 22141 + - "False" 22142 + - Unknown 22143 + type: string 22144 + type: 22145 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 22146 + maxLength: 316 22147 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22148 + type: string 22149 + required: 22150 + - lastTransitionTime 22151 + - message 22152 + - reason 22153 + - status 22154 + - type 22155 + type: object 22156 + type: array 22157 + lastHandledReconcileAt: 22158 + description: |- 22159 + LastHandledReconcileAt holds the value of the most recent 22160 + reconcile request value, so a change of the annotation value 22161 + can be detected. 22162 + type: string 22163 + observedGeneration: 22164 + description: ObservedGeneration is the last observed generation. 22165 + format: int64 22166 + type: integer 22167 + type: object 22168 + type: object 22169 + served: true 22170 + storage: false 22171 + subresources: 22172 + status: {} 22173 + - additionalPrinterColumns: 22174 + - jsonPath: .metadata.creationTimestamp 22175 + name: Age 22176 + type: date 22177 + name: v1beta3 22178 + schema: 22179 + openAPIV3Schema: 22180 + description: Alert is the Schema for the alerts API 22181 + properties: 22182 + apiVersion: 22183 + description: |- 22184 + APIVersion defines the versioned schema of this representation of an object. 22185 + Servers should convert recognized schemas to the latest internal value, and 22186 + may reject unrecognized values. 22187 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22188 + type: string 22189 + kind: 22190 + description: |- 22191 + Kind is a string value representing the REST resource this object represents. 22192 + Servers may infer this from the endpoint the client submits requests to. 22193 + Cannot be updated. 22194 + In CamelCase. 22195 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22196 + type: string 22197 + metadata: 22198 + type: object 22199 + spec: 22200 + description: AlertSpec defines an alerting rule for events involving a 22201 + list of objects. 22202 + properties: 22203 + eventMetadata: 22204 + additionalProperties: 22205 + type: string 22206 + description: |- 22207 + EventMetadata is an optional field for adding metadata to events dispatched by the 22208 + controller. This can be used for enhancing the context of the event. If a field 22209 + would override one already present on the original event as generated by the emitter, 22210 + then the override doesn't happen, i.e. the original value is preserved, and an info 22211 + log is printed. 22212 type: object 22213 - served: true 22214 - storage: false 22215 - subresources: 22216 - status: {} 22217 - - additionalPrinterColumns: 22218 - - jsonPath: .metadata.creationTimestamp 22219 - name: Age 22220 - type: date 22221 - name: v1beta3 22222 - schema: 22223 - openAPIV3Schema: 22224 - description: Provider is the Schema for the providers API 22225 - properties: 22226 + eventSeverity: 22227 + default: info 22228 + description: |- 22229 + EventSeverity specifies how to filter events based on severity. 22230 + If set to 'info' no events will be filtered. 22231 + enum: 22232 + - info 22233 + - error 22234 + type: string 22235 + eventSources: 22236 + description: |- 22237 + EventSources specifies how to filter events based 22238 + on the involved object kind, name and namespace. 22239 + items: 22240 + description: |- 22241 + CrossNamespaceObjectReference contains enough information to let you locate the 22242 + typed referenced object at cluster level 22243 + properties: 22244 apiVersion: 22245 - description: |- 22246 - APIVersion defines the versioned schema of this representation of an object. 22247 - Servers should convert recognized schemas to the latest internal value, and 22248 - may reject unrecognized values. 22249 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22250 - type: string 22251 + description: API version of the referent 22252 + type: string 22253 kind: 22254 - description: |- 22255 - Kind is a string value representing the REST resource this object represents. 22256 - Servers may infer this from the endpoint the client submits requests to. 22257 - Cannot be updated. 22258 - In CamelCase. 22259 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22260 + description: Kind of the referent 22261 + enum: 22262 + - Bucket 22263 + - GitRepository 22264 + - Kustomization 22265 + - HelmRelease 22266 + - HelmChart 22267 + - HelmRepository 22268 + - ImageRepository 22269 + - ImagePolicy 22270 + - ImageUpdateAutomation 22271 + - OCIRepository 22272 + type: string 22273 + matchLabels: 22274 + additionalProperties: 22275 type: string 22276 - metadata: 22277 - type: object 22278 - spec: 22279 - description: ProviderSpec defines the desired state of the Provider. 22280 - properties: 22281 - address: 22282 - description: |- 22283 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 22284 - What kind of endpoint depends on the specific Provider type being used. 22285 - For the generic Provider, for example, this is an HTTP/S address. 22286 - For other Provider types this could be a project ID or a namespace. 22287 - maxLength: 2048 22288 - type: string 22289 - certSecretRef: 22290 - description: |- 22291 - CertSecretRef specifies the Secret containing 22292 - a PEM-encoded CA certificate (in the `ca.crt` key). 22293 - 22294 - Note: Support for the `caFile` key has 22295 - been deprecated. 22296 - properties: 22297 - name: 22298 - description: Name of the referent. 22299 - type: string 22300 - required: 22301 - - name 22302 - type: object 22303 - channel: 22304 - description: Channel specifies the destination channel where events should be posted. 22305 - maxLength: 2048 22306 - type: string 22307 - interval: 22308 - description: |- 22309 - Interval at which to reconcile the Provider with its Secret references. 22310 - Deprecated and not used in v1beta3. 22311 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22312 - type: string 22313 - proxy: 22314 - description: Proxy the HTTP/S address of the proxy server. 22315 - maxLength: 2048 22316 - pattern: ^(http|https)://.*$ 22317 - type: string 22318 - secretRef: 22319 - description: |- 22320 - SecretRef specifies the Secret containing the authentication 22321 - credentials for this Provider. 22322 - properties: 22323 - name: 22324 - description: Name of the referent. 22325 - type: string 22326 - required: 22327 - - name 22328 - type: object 22329 - suspend: 22330 - description: |- 22331 - Suspend tells the controller to suspend subsequent 22332 - events handling for this Provider. 22333 - type: boolean 22334 - timeout: 22335 - description: Timeout for sending alerts to the Provider. 22336 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 22337 - type: string 22338 - type: 22339 - description: Type specifies which Provider implementation to use. 22340 - enum: 22341 - - slack 22342 - - discord 22343 - - msteams 22344 - - rocket 22345 - - generic 22346 - - generic-hmac 22347 - - github 22348 - - gitlab 22349 - - gitea 22350 - - bitbucketserver 22351 - - bitbucket 22352 - - azuredevops 22353 - - googlechat 22354 - - googlepubsub 22355 - - webex 22356 - - sentry 22357 - - azureeventhub 22358 - - telegram 22359 - - lark 22360 - - matrix 22361 - - opsgenie 22362 - - alertmanager 22363 - - grafana 22364 - - githubdispatch 22365 - - pagerduty 22366 - - datadog 22367 - - nats 22368 - type: string 22369 - username: 22370 - description: Username specifies the name under which events are posted. 22371 - maxLength: 2048 22372 - type: string 22373 - required: 22374 - - type 22375 - type: object 22376 + description: |- 22377 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 22378 + map is equivalent to an element of matchExpressions, whose key field is "key", the 22379 + operator is "In", and the values array contains only "value". The requirements are ANDed. 22380 + MatchLabels requires the name to be set to `*`. 22381 + type: object 22382 + name: 22383 + description: |- 22384 + Name of the referent 22385 + If multiple resources are targeted `*` may be set. 22386 + maxLength: 53 22387 + minLength: 1 22388 + type: string 22389 + namespace: 22390 + description: Namespace of the referent 22391 + maxLength: 53 22392 + minLength: 1 22393 + type: string 22394 + required: 22395 + - kind 22396 + - name 22397 + type: object 22398 + type: array 22399 + exclusionList: 22400 + description: |- 22401 + ExclusionList specifies a list of Golang regular expressions 22402 + to be used for excluding messages. 22403 + items: 22404 + type: string 22405 + type: array 22406 + inclusionList: 22407 + description: |- 22408 + InclusionList specifies a list of Golang regular expressions 22409 + to be used for including messages. 22410 + items: 22411 + type: string 22412 + type: array 22413 + providerRef: 22414 + description: ProviderRef specifies which Provider this Alert should 22415 + use. 22416 + properties: 22417 + name: 22418 + description: Name of the referent. 22419 + type: string 22420 + required: 22421 + - name 22422 type: object 22423 - served: true 22424 - storage: true 22425 - subresources: {} 22426 + summary: 22427 + description: |- 22428 + Summary holds a short description of the impact and affected cluster. 22429 + Deprecated: Use EventMetadata instead. 22430 + maxLength: 255 22431 + type: string 22432 + suspend: 22433 + description: |- 22434 + Suspend tells the controller to suspend subsequent 22435 + events handling for this Alert. 22436 + type: boolean 22437 + required: 22438 + - eventSources 22439 + - providerRef 22440 + type: object 22441 + type: object 22442 + served: true 22443 + storage: true 22444 + subresources: {} 22445 --- 22446 apiVersion: apiextensions.k8s.io/v1 22447 kind: CustomResourceDefinition 22448 metadata: 22449 - annotations: 22450 - controller-gen.kubebuilder.io/version: v0.16.1 22451 - labels: 22452 - app.kubernetes.io/component: notification-controller 22453 - app.kubernetes.io/instance: flux-system 22454 - app.kubernetes.io/part-of: flux 22455 - app.kubernetes.io/version: v2.4.0 22456 - name: receivers.notification.toolkit.fluxcd.io 22457 + annotations: 22458 + controller-gen.kubebuilder.io/version: v0.16.1 22459 + labels: 22460 + app.kubernetes.io/component: notification-controller 22461 + app.kubernetes.io/instance: flux-system 22462 + app.kubernetes.io/part-of: flux 22463 + app.kubernetes.io/version: v2.5.1 22464 + name: providers.notification.toolkit.fluxcd.io 22465 spec: 22466 - group: notification.toolkit.fluxcd.io 22467 - names: 22468 - kind: Receiver 22469 - listKind: ReceiverList 22470 - plural: receivers 22471 - singular: receiver 22472 - scope: Namespaced 22473 - versions: 22474 - - additionalPrinterColumns: 22475 - - jsonPath: .metadata.creationTimestamp 22476 - name: Age 22477 - type: date 22478 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 22479 - name: Ready 22480 - type: string 22481 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 22482 - name: Status 22483 - type: string 22484 - name: v1 22485 - schema: 22486 - openAPIV3Schema: 22487 - description: Receiver is the Schema for the receivers API. 22488 + group: notification.toolkit.fluxcd.io 22489 + names: 22490 + kind: Provider 22491 + listKind: ProviderList 22492 + plural: providers 22493 + singular: provider 22494 + scope: Namespaced 22495 + versions: 22496 + - additionalPrinterColumns: 22497 + - jsonPath: .metadata.creationTimestamp 22498 + name: Age 22499 + type: date 22500 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 22501 + name: Ready 22502 + type: string 22503 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 22504 + name: Status 22505 + type: string 22506 + deprecated: true 22507 + deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3 22508 + name: v1beta1 22509 + schema: 22510 + openAPIV3Schema: 22511 + description: Provider is the Schema for the providers API 22512 + properties: 22513 + apiVersion: 22514 + description: |- 22515 + APIVersion defines the versioned schema of this representation of an object. 22516 + Servers should convert recognized schemas to the latest internal value, and 22517 + may reject unrecognized values. 22518 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22519 + type: string 22520 + kind: 22521 + description: |- 22522 + Kind is a string value representing the REST resource this object represents. 22523 + Servers may infer this from the endpoint the client submits requests to. 22524 + Cannot be updated. 22525 + In CamelCase. 22526 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22527 + type: string 22528 + metadata: 22529 + type: object 22530 + spec: 22531 + description: ProviderSpec defines the desired state of Provider 22532 + properties: 22533 + address: 22534 + description: HTTP/S webhook address of this provider 22535 + pattern: ^(http|https):// 22536 + type: string 22537 + certSecretRef: 22538 + description: |- 22539 + CertSecretRef can be given the name of a secret containing 22540 + a PEM-encoded CA certificate (`caFile`) 22541 properties: 22542 - apiVersion: 22543 - description: |- 22544 - APIVersion defines the versioned schema of this representation of an object. 22545 - Servers should convert recognized schemas to the latest internal value, and 22546 - may reject unrecognized values. 22547 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22548 - type: string 22549 - kind: 22550 - description: |- 22551 - Kind is a string value representing the REST resource this object represents. 22552 - Servers may infer this from the endpoint the client submits requests to. 22553 - Cannot be updated. 22554 - In CamelCase. 22555 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22556 - type: string 22557 - metadata: 22558 - type: object 22559 - spec: 22560 - description: ReceiverSpec defines the desired state of the Receiver. 22561 - properties: 22562 - events: 22563 - description: |- 22564 - Events specifies the list of event types to handle, 22565 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 22566 - items: 22567 - type: string 22568 - type: array 22569 - interval: 22570 - default: 10m 22571 - description: Interval at which to reconcile the Receiver with its Secret references. 22572 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22573 - type: string 22574 - resources: 22575 - description: A list of resources to be notified about changes. 22576 - items: 22577 - description: |- 22578 - CrossNamespaceObjectReference contains enough information to let you locate the 22579 - typed referenced object at cluster level 22580 - properties: 22581 - apiVersion: 22582 - description: API version of the referent 22583 - type: string 22584 - kind: 22585 - description: Kind of the referent 22586 - enum: 22587 - - Bucket 22588 - - GitRepository 22589 - - Kustomization 22590 - - HelmRelease 22591 - - HelmChart 22592 - - HelmRepository 22593 - - ImageRepository 22594 - - ImagePolicy 22595 - - ImageUpdateAutomation 22596 - - OCIRepository 22597 - type: string 22598 - matchLabels: 22599 - additionalProperties: 22600 - type: string 22601 - description: |- 22602 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 22603 - map is equivalent to an element of matchExpressions, whose key field is "key", the 22604 - operator is "In", and the values array contains only "value". The requirements are ANDed. 22605 - MatchLabels requires the name to be set to `*`. 22606 - type: object 22607 - name: 22608 - description: |- 22609 - Name of the referent 22610 - If multiple resources are targeted `*` may be set. 22611 - maxLength: 53 22612 - minLength: 1 22613 - type: string 22614 - namespace: 22615 - description: Namespace of the referent 22616 - maxLength: 53 22617 - minLength: 1 22618 - type: string 22619 - required: 22620 - - kind 22621 - - name 22622 - type: object 22623 - type: array 22624 - secretRef: 22625 - description: |- 22626 - SecretRef specifies the Secret containing the token used 22627 - to validate the payload authenticity. 22628 - properties: 22629 - name: 22630 - description: Name of the referent. 22631 - type: string 22632 - required: 22633 - - name 22634 - type: object 22635 - suspend: 22636 - description: |- 22637 - Suspend tells the controller to suspend subsequent 22638 - events handling for this receiver. 22639 - type: boolean 22640 - type: 22641 - description: |- 22642 - Type of webhook sender, used to determine 22643 - the validation procedure and payload deserialization. 22644 - enum: 22645 - - generic 22646 - - generic-hmac 22647 - - github 22648 - - gitlab 22649 - - bitbucket 22650 - - harbor 22651 - - dockerhub 22652 - - quay 22653 - - gcr 22654 - - nexus 22655 - - acr 22656 - - cdevents 22657 - type: string 22658 - required: 22659 - - resources 22660 - - secretRef 22661 - - type 22662 - type: object 22663 + name: 22664 + description: Name of the referent. 22665 + type: string 22666 + required: 22667 + - name 22668 + type: object 22669 + channel: 22670 + description: Alert channel for this provider 22671 + type: string 22672 + proxy: 22673 + description: HTTP/S address of the proxy 22674 + pattern: ^(http|https):// 22675 + type: string 22676 + secretRef: 22677 + description: |- 22678 + Secret reference containing the provider webhook URL 22679 + using "address" as data key 22680 + properties: 22681 + name: 22682 + description: Name of the referent. 22683 + type: string 22684 + required: 22685 + - name 22686 + type: object 22687 + suspend: 22688 + description: |- 22689 + This flag tells the controller to suspend subsequent events handling. 22690 + Defaults to false. 22691 + type: boolean 22692 + timeout: 22693 + description: Timeout for sending alerts to the provider. 22694 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 22695 + type: string 22696 + type: 22697 + description: Type of provider 22698 + enum: 22699 + - slack 22700 + - discord 22701 + - msteams 22702 + - rocket 22703 + - generic 22704 + - generic-hmac 22705 + - github 22706 + - gitlab 22707 + - bitbucket 22708 + - azuredevops 22709 + - googlechat 22710 + - webex 22711 + - sentry 22712 + - azureeventhub 22713 + - telegram 22714 + - lark 22715 + - matrix 22716 + - opsgenie 22717 + - alertmanager 22718 + - grafana 22719 + - githubdispatch 22720 + type: string 22721 + username: 22722 + description: Bot username for this provider 22723 + type: string 22724 + required: 22725 + - type 22726 + type: object 22727 + status: 22728 + default: 22729 + observedGeneration: -1 22730 + description: ProviderStatus defines the observed state of Provider 22731 + properties: 22732 + conditions: 22733 + items: 22734 + description: Condition contains details for one aspect of the current 22735 + state of this API Resource. 22736 + properties: 22737 + lastTransitionTime: 22738 + description: |- 22739 + lastTransitionTime is the last time the condition transitioned from one status to another. 22740 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22741 + format: date-time 22742 + type: string 22743 + message: 22744 + description: |- 22745 + message is a human readable message indicating details about the transition. 22746 + This may be an empty string. 22747 + maxLength: 32768 22748 + type: string 22749 + observedGeneration: 22750 + description: |- 22751 + observedGeneration represents the .metadata.generation that the condition was set based upon. 22752 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22753 + with respect to the current state of the instance. 22754 + format: int64 22755 + minimum: 0 22756 + type: integer 22757 + reason: 22758 + description: |- 22759 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 22760 + Producers of specific condition types may define expected values and meanings for this field, 22761 + and whether the values are considered a guaranteed API. 22762 + The value should be a CamelCase string. 22763 + This field may not be empty. 22764 + maxLength: 1024 22765 + minLength: 1 22766 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22767 + type: string 22768 status: 22769 - default: 22770 - observedGeneration: -1 22771 - description: ReceiverStatus defines the observed state of the Receiver. 22772 - properties: 22773 - conditions: 22774 - description: Conditions holds the conditions for the Receiver. 22775 - items: 22776 - description: Condition contains details for one aspect of the current state of this API 22777 - Resource. 22778 - properties: 22779 - lastTransitionTime: 22780 - description: |- 22781 - lastTransitionTime is the last time the condition transitioned from one status to another. 22782 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22783 - format: date-time 22784 - type: string 22785 - message: 22786 - description: |- 22787 - message is a human readable message indicating details about the transition. 22788 - This may be an empty string. 22789 - maxLength: 32768 22790 - type: string 22791 - observedGeneration: 22792 - description: |- 22793 - observedGeneration represents the .metadata.generation that the condition was set based upon. 22794 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22795 - with respect to the current state of the instance. 22796 - format: int64 22797 - minimum: 0 22798 - type: integer 22799 - reason: 22800 - description: |- 22801 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 22802 - Producers of specific condition types may define expected values and meanings for this field, 22803 - and whether the values are considered a guaranteed API. 22804 - The value should be a CamelCase string. 22805 - This field may not be empty. 22806 - maxLength: 1024 22807 - minLength: 1 22808 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22809 - type: string 22810 - status: 22811 - description: status of the condition, one of True, False, Unknown. 22812 - enum: 22813 - - "True" 22814 - - "False" 22815 - - Unknown 22816 - type: string 22817 - type: 22818 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 22819 - maxLength: 316 22820 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22821 - type: string 22822 - required: 22823 - - lastTransitionTime 22824 - - message 22825 - - reason 22826 - - status 22827 - - type 22828 - type: object 22829 - type: array 22830 - lastHandledReconcileAt: 22831 - description: |- 22832 - LastHandledReconcileAt holds the value of the most recent 22833 - reconcile request value, so a change of the annotation value 22834 - can be detected. 22835 - type: string 22836 - observedGeneration: 22837 - description: ObservedGeneration is the last observed generation of the Receiver object. 22838 - format: int64 22839 - type: integer 22840 - webhookPath: 22841 - description: |- 22842 - WebhookPath is the generated incoming webhook address in the format 22843 - of '/hook/sha256sum(token+name+namespace)'. 22844 - type: string 22845 - type: object 22846 + description: status of the condition, one of True, False, Unknown. 22847 + enum: 22848 + - "True" 22849 + - "False" 22850 + - Unknown 22851 + type: string 22852 + type: 22853 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 22854 + maxLength: 316 22855 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22856 + type: string 22857 + required: 22858 + - lastTransitionTime 22859 + - message 22860 + - reason 22861 + - status 22862 + - type 22863 + type: object 22864 + type: array 22865 + observedGeneration: 22866 + description: ObservedGeneration is the last reconciled generation. 22867 + format: int64 22868 + type: integer 22869 + type: object 22870 + type: object 22871 + served: true 22872 + storage: false 22873 + subresources: 22874 + status: {} 22875 + - additionalPrinterColumns: 22876 + - jsonPath: .metadata.creationTimestamp 22877 + name: Age 22878 + type: date 22879 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 22880 + name: Ready 22881 + type: string 22882 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 22883 + name: Status 22884 + type: string 22885 + deprecated: true 22886 + deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 22887 + name: v1beta2 22888 + schema: 22889 + openAPIV3Schema: 22890 + description: Provider is the Schema for the providers API. 22891 + properties: 22892 + apiVersion: 22893 + description: |- 22894 + APIVersion defines the versioned schema of this representation of an object. 22895 + Servers should convert recognized schemas to the latest internal value, and 22896 + may reject unrecognized values. 22897 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22898 + type: string 22899 + kind: 22900 + description: |- 22901 + Kind is a string value representing the REST resource this object represents. 22902 + Servers may infer this from the endpoint the client submits requests to. 22903 + Cannot be updated. 22904 + In CamelCase. 22905 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22906 + type: string 22907 + metadata: 22908 + type: object 22909 + spec: 22910 + description: ProviderSpec defines the desired state of the Provider. 22911 + properties: 22912 + address: 22913 + description: |- 22914 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 22915 + What kind of endpoint depends on the specific Provider type being used. 22916 + For the generic Provider, for example, this is an HTTP/S address. 22917 + For other Provider types this could be a project ID or a namespace. 22918 + maxLength: 2048 22919 + type: string 22920 + certSecretRef: 22921 + description: |- 22922 + CertSecretRef specifies the Secret containing 22923 + a PEM-encoded CA certificate (in the `ca.crt` key). 22924 + 22925 + Note: Support for the `caFile` key has 22926 + been deprecated. 22927 + properties: 22928 + name: 22929 + description: Name of the referent. 22930 + type: string 22931 + required: 22932 + - name 22933 type: object 22934 - served: true 22935 - storage: true 22936 - subresources: 22937 - status: {} 22938 - - additionalPrinterColumns: 22939 - - jsonPath: .metadata.creationTimestamp 22940 - name: Age 22941 - type: date 22942 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 22943 - name: Ready 22944 - type: string 22945 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 22946 - name: Status 22947 - type: string 22948 - deprecated: true 22949 - deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1 22950 - name: v1beta1 22951 - schema: 22952 - openAPIV3Schema: 22953 - description: Receiver is the Schema for the receivers API 22954 + channel: 22955 + description: Channel specifies the destination channel where events 22956 + should be posted. 22957 + maxLength: 2048 22958 + type: string 22959 + interval: 22960 + description: Interval at which to reconcile the Provider with its 22961 + Secret references. 22962 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22963 + type: string 22964 + proxy: 22965 + description: Proxy the HTTP/S address of the proxy server. 22966 + maxLength: 2048 22967 + pattern: ^(http|https)://.*$ 22968 + type: string 22969 + secretRef: 22970 + description: |- 22971 + SecretRef specifies the Secret containing the authentication 22972 + credentials for this Provider. 22973 properties: 22974 - apiVersion: 22975 - description: |- 22976 - APIVersion defines the versioned schema of this representation of an object. 22977 - Servers should convert recognized schemas to the latest internal value, and 22978 - may reject unrecognized values. 22979 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22980 - type: string 22981 - kind: 22982 - description: |- 22983 - Kind is a string value representing the REST resource this object represents. 22984 - Servers may infer this from the endpoint the client submits requests to. 22985 - Cannot be updated. 22986 - In CamelCase. 22987 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22988 - type: string 22989 - metadata: 22990 - type: object 22991 - spec: 22992 - description: ReceiverSpec defines the desired state of Receiver 22993 - properties: 22994 - events: 22995 - description: |- 22996 - A list of events to handle, 22997 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 22998 - items: 22999 - type: string 23000 - type: array 23001 - resources: 23002 - description: A list of resources to be notified about changes. 23003 - items: 23004 - description: |- 23005 - CrossNamespaceObjectReference contains enough information to let you locate the 23006 - typed referenced object at cluster level 23007 - properties: 23008 - apiVersion: 23009 - description: API version of the referent 23010 - type: string 23011 - kind: 23012 - description: Kind of the referent 23013 - enum: 23014 - - Bucket 23015 - - GitRepository 23016 - - Kustomization 23017 - - HelmRelease 23018 - - HelmChart 23019 - - HelmRepository 23020 - - ImageRepository 23021 - - ImagePolicy 23022 - - ImageUpdateAutomation 23023 - - OCIRepository 23024 - type: string 23025 - matchLabels: 23026 - additionalProperties: 23027 - type: string 23028 - description: |- 23029 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23030 - map is equivalent to an element of matchExpressions, whose key field is "key", the 23031 - operator is "In", and the values array contains only "value". The requirements are ANDed. 23032 - type: object 23033 - name: 23034 - description: Name of the referent 23035 - maxLength: 53 23036 - minLength: 1 23037 - type: string 23038 - namespace: 23039 - description: Namespace of the referent 23040 - maxLength: 53 23041 - minLength: 1 23042 - type: string 23043 - required: 23044 - - kind 23045 - - name 23046 - type: object 23047 - type: array 23048 - secretRef: 23049 - description: |- 23050 - Secret reference containing the token used 23051 - to validate the payload authenticity 23052 - properties: 23053 - name: 23054 - description: Name of the referent. 23055 - type: string 23056 - required: 23057 - - name 23058 - type: object 23059 - suspend: 23060 - description: |- 23061 - This flag tells the controller to suspend subsequent events handling. 23062 - Defaults to false. 23063 - type: boolean 23064 - type: 23065 - description: |- 23066 - Type of webhook sender, used to determine 23067 - the validation procedure and payload deserialization. 23068 - enum: 23069 - - generic 23070 - - generic-hmac 23071 - - github 23072 - - gitlab 23073 - - bitbucket 23074 - - harbor 23075 - - dockerhub 23076 - - quay 23077 - - gcr 23078 - - nexus 23079 - - acr 23080 - type: string 23081 - required: 23082 - - resources 23083 - - secretRef 23084 - - type 23085 - type: object 23086 + name: 23087 + description: Name of the referent. 23088 + type: string 23089 + required: 23090 + - name 23091 + type: object 23092 + suspend: 23093 + description: |- 23094 + Suspend tells the controller to suspend subsequent 23095 + events handling for this Provider. 23096 + type: boolean 23097 + timeout: 23098 + description: Timeout for sending alerts to the Provider. 23099 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 23100 + type: string 23101 + type: 23102 + description: Type specifies which Provider implementation to use. 23103 + enum: 23104 + - slack 23105 + - discord 23106 + - msteams 23107 + - rocket 23108 + - generic 23109 + - generic-hmac 23110 + - github 23111 + - gitlab 23112 + - gitea 23113 + - bitbucketserver 23114 + - bitbucket 23115 + - azuredevops 23116 + - googlechat 23117 + - googlepubsub 23118 + - webex 23119 + - sentry 23120 + - azureeventhub 23121 + - telegram 23122 + - lark 23123 + - matrix 23124 + - opsgenie 23125 + - alertmanager 23126 + - grafana 23127 + - githubdispatch 23128 + - pagerduty 23129 + - datadog 23130 + type: string 23131 + username: 23132 + description: Username specifies the name under which events are posted. 23133 + maxLength: 2048 23134 + type: string 23135 + required: 23136 + - type 23137 + type: object 23138 + status: 23139 + default: 23140 + observedGeneration: -1 23141 + description: ProviderStatus defines the observed state of the Provider. 23142 + properties: 23143 + conditions: 23144 + description: Conditions holds the conditions for the Provider. 23145 + items: 23146 + description: Condition contains details for one aspect of the current 23147 + state of this API Resource. 23148 + properties: 23149 + lastTransitionTime: 23150 + description: |- 23151 + lastTransitionTime is the last time the condition transitioned from one status to another. 23152 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23153 + format: date-time 23154 + type: string 23155 + message: 23156 + description: |- 23157 + message is a human readable message indicating details about the transition. 23158 + This may be an empty string. 23159 + maxLength: 32768 23160 + type: string 23161 + observedGeneration: 23162 + description: |- 23163 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23164 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23165 + with respect to the current state of the instance. 23166 + format: int64 23167 + minimum: 0 23168 + type: integer 23169 + reason: 23170 + description: |- 23171 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23172 + Producers of specific condition types may define expected values and meanings for this field, 23173 + and whether the values are considered a guaranteed API. 23174 + The value should be a CamelCase string. 23175 + This field may not be empty. 23176 + maxLength: 1024 23177 + minLength: 1 23178 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23179 + type: string 23180 status: 23181 - default: 23182 - observedGeneration: -1 23183 - description: ReceiverStatus defines the observed state of Receiver 23184 - properties: 23185 - conditions: 23186 - items: 23187 - description: Condition contains details for one aspect of the current state of this API 23188 - Resource. 23189 - properties: 23190 - lastTransitionTime: 23191 - description: |- 23192 - lastTransitionTime is the last time the condition transitioned from one status to another. 23193 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23194 - format: date-time 23195 - type: string 23196 - message: 23197 - description: |- 23198 - message is a human readable message indicating details about the transition. 23199 - This may be an empty string. 23200 - maxLength: 32768 23201 - type: string 23202 - observedGeneration: 23203 - description: |- 23204 - observedGeneration represents the .metadata.generation that the condition was set based upon. 23205 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23206 - with respect to the current state of the instance. 23207 - format: int64 23208 - minimum: 0 23209 - type: integer 23210 - reason: 23211 - description: |- 23212 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 23213 - Producers of specific condition types may define expected values and meanings for this field, 23214 - and whether the values are considered a guaranteed API. 23215 - The value should be a CamelCase string. 23216 - This field may not be empty. 23217 - maxLength: 1024 23218 - minLength: 1 23219 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23220 - type: string 23221 - status: 23222 - description: status of the condition, one of True, False, Unknown. 23223 - enum: 23224 - - "True" 23225 - - "False" 23226 - - Unknown 23227 - type: string 23228 - type: 23229 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 23230 - maxLength: 316 23231 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23232 - type: string 23233 - required: 23234 - - lastTransitionTime 23235 - - message 23236 - - reason 23237 - - status 23238 - - type 23239 - type: object 23240 - type: array 23241 - observedGeneration: 23242 - description: ObservedGeneration is the last observed generation. 23243 - format: int64 23244 - type: integer 23245 - url: 23246 - description: |- 23247 - Generated webhook URL in the format 23248 - of '/hook/sha256sum(token+name+namespace)'. 23249 - type: string 23250 - type: object 23251 + description: status of the condition, one of True, False, Unknown. 23252 + enum: 23253 + - "True" 23254 + - "False" 23255 + - Unknown 23256 + type: string 23257 + type: 23258 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23259 + maxLength: 316 23260 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23261 + type: string 23262 + required: 23263 + - lastTransitionTime 23264 + - message 23265 + - reason 23266 + - status 23267 + - type 23268 + type: object 23269 + type: array 23270 + lastHandledReconcileAt: 23271 + description: |- 23272 + LastHandledReconcileAt holds the value of the most recent 23273 + reconcile request value, so a change of the annotation value 23274 + can be detected. 23275 + type: string 23276 + observedGeneration: 23277 + description: ObservedGeneration is the last reconciled generation. 23278 + format: int64 23279 + type: integer 23280 + type: object 23281 + type: object 23282 + served: true 23283 + storage: false 23284 + subresources: 23285 + status: {} 23286 + - additionalPrinterColumns: 23287 + - jsonPath: .metadata.creationTimestamp 23288 + name: Age 23289 + type: date 23290 + name: v1beta3 23291 + schema: 23292 + openAPIV3Schema: 23293 + description: Provider is the Schema for the providers API 23294 + properties: 23295 + apiVersion: 23296 + description: |- 23297 + APIVersion defines the versioned schema of this representation of an object. 23298 + Servers should convert recognized schemas to the latest internal value, and 23299 + may reject unrecognized values. 23300 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23301 + type: string 23302 + kind: 23303 + description: |- 23304 + Kind is a string value representing the REST resource this object represents. 23305 + Servers may infer this from the endpoint the client submits requests to. 23306 + Cannot be updated. 23307 + In CamelCase. 23308 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23309 + type: string 23310 + metadata: 23311 + type: object 23312 + spec: 23313 + description: ProviderSpec defines the desired state of the Provider. 23314 + properties: 23315 + address: 23316 + description: |- 23317 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 23318 + What kind of endpoint depends on the specific Provider type being used. 23319 + For the generic Provider, for example, this is an HTTP/S address. 23320 + For other Provider types this could be a project ID or a namespace. 23321 + maxLength: 2048 23322 + type: string 23323 + certSecretRef: 23324 + description: |- 23325 + CertSecretRef specifies the Secret containing 23326 + a PEM-encoded CA certificate (in the `ca.crt` key). 23327 + 23328 + Note: Support for the `caFile` key has 23329 + been deprecated. 23330 + properties: 23331 + name: 23332 + description: Name of the referent. 23333 + type: string 23334 + required: 23335 + - name 23336 type: object 23337 - served: true 23338 - storage: false 23339 - subresources: 23340 - status: {} 23341 - - additionalPrinterColumns: 23342 - - jsonPath: .metadata.creationTimestamp 23343 - name: Age 23344 - type: date 23345 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 23346 - name: Ready 23347 - type: string 23348 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 23349 - name: Status 23350 - type: string 23351 - deprecated: true 23352 - deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 23353 - name: v1beta2 23354 - schema: 23355 - openAPIV3Schema: 23356 - description: Receiver is the Schema for the receivers API. 23357 + channel: 23358 + description: Channel specifies the destination channel where events 23359 + should be posted. 23360 + maxLength: 2048 23361 + type: string 23362 + interval: 23363 + description: |- 23364 + Interval at which to reconcile the Provider with its Secret references. 23365 + Deprecated and not used in v1beta3. 23366 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23367 + type: string 23368 + proxy: 23369 + description: Proxy the HTTP/S address of the proxy server. 23370 + maxLength: 2048 23371 + pattern: ^(http|https)://.*$ 23372 + type: string 23373 + secretRef: 23374 + description: |- 23375 + SecretRef specifies the Secret containing the authentication 23376 + credentials for this Provider. 23377 properties: 23378 + name: 23379 + description: Name of the referent. 23380 + type: string 23381 + required: 23382 + - name 23383 + type: object 23384 + suspend: 23385 + description: |- 23386 + Suspend tells the controller to suspend subsequent 23387 + events handling for this Provider. 23388 + type: boolean 23389 + timeout: 23390 + description: Timeout for sending alerts to the Provider. 23391 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 23392 + type: string 23393 + type: 23394 + description: Type specifies which Provider implementation to use. 23395 + enum: 23396 + - slack 23397 + - discord 23398 + - msteams 23399 + - rocket 23400 + - generic 23401 + - generic-hmac 23402 + - github 23403 + - gitlab 23404 + - gitea 23405 + - bitbucketserver 23406 + - bitbucket 23407 + - azuredevops 23408 + - googlechat 23409 + - googlepubsub 23410 + - webex 23411 + - sentry 23412 + - azureeventhub 23413 + - telegram 23414 + - lark 23415 + - matrix 23416 + - opsgenie 23417 + - alertmanager 23418 + - grafana 23419 + - githubdispatch 23420 + - pagerduty 23421 + - datadog 23422 + - nats 23423 + type: string 23424 + username: 23425 + description: Username specifies the name under which events are posted. 23426 + maxLength: 2048 23427 + type: string 23428 + required: 23429 + - type 23430 + type: object 23431 + type: object 23432 + served: true 23433 + storage: true 23434 + subresources: {} 23435 +--- 23436 +apiVersion: apiextensions.k8s.io/v1 23437 +kind: CustomResourceDefinition 23438 +metadata: 23439 + annotations: 23440 + controller-gen.kubebuilder.io/version: v0.16.1 23441 + labels: 23442 + app.kubernetes.io/component: notification-controller 23443 + app.kubernetes.io/instance: flux-system 23444 + app.kubernetes.io/part-of: flux 23445 + app.kubernetes.io/version: v2.5.1 23446 + name: receivers.notification.toolkit.fluxcd.io 23447 +spec: 23448 + group: notification.toolkit.fluxcd.io 23449 + names: 23450 + kind: Receiver 23451 + listKind: ReceiverList 23452 + plural: receivers 23453 + singular: receiver 23454 + scope: Namespaced 23455 + versions: 23456 + - additionalPrinterColumns: 23457 + - jsonPath: .metadata.creationTimestamp 23458 + name: Age 23459 + type: date 23460 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23461 + name: Ready 23462 + type: string 23463 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23464 + name: Status 23465 + type: string 23466 + name: v1 23467 + schema: 23468 + openAPIV3Schema: 23469 + description: Receiver is the Schema for the receivers API. 23470 + properties: 23471 + apiVersion: 23472 + description: |- 23473 + APIVersion defines the versioned schema of this representation of an object. 23474 + Servers should convert recognized schemas to the latest internal value, and 23475 + may reject unrecognized values. 23476 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23477 + type: string 23478 + kind: 23479 + description: |- 23480 + Kind is a string value representing the REST resource this object represents. 23481 + Servers may infer this from the endpoint the client submits requests to. 23482 + Cannot be updated. 23483 + In CamelCase. 23484 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23485 + type: string 23486 + metadata: 23487 + type: object 23488 + spec: 23489 + description: ReceiverSpec defines the desired state of the Receiver. 23490 + properties: 23491 + events: 23492 + description: |- 23493 + Events specifies the list of event types to handle, 23494 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 23495 + items: 23496 + type: string 23497 + type: array 23498 + interval: 23499 + default: 10m 23500 + description: Interval at which to reconcile the Receiver with its 23501 + Secret references. 23502 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23503 + type: string 23504 + resourceFilter: 23505 + description: |- 23506 + ResourceFilter is a CEL expression expected to return a boolean that is 23507 + evaluated for each resource referenced in the Resources field when a 23508 + webhook is received. If the expression returns false then the controller 23509 + will not request a reconciliation for the resource. 23510 + When the expression is specified the controller will parse it and mark 23511 + the object as terminally failed if the expression is invalid or does not 23512 + return a boolean. 23513 + type: string 23514 + resources: 23515 + description: A list of resources to be notified about changes. 23516 + items: 23517 + description: |- 23518 + CrossNamespaceObjectReference contains enough information to let you locate the 23519 + typed referenced object at cluster level 23520 + properties: 23521 apiVersion: 23522 - description: |- 23523 - APIVersion defines the versioned schema of this representation of an object. 23524 - Servers should convert recognized schemas to the latest internal value, and 23525 - may reject unrecognized values. 23526 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23527 + description: API version of the referent 23528 + type: string 23529 + kind: 23530 + description: Kind of the referent 23531 + enum: 23532 + - Bucket 23533 + - GitRepository 23534 + - Kustomization 23535 + - HelmRelease 23536 + - HelmChart 23537 + - HelmRepository 23538 + - ImageRepository 23539 + - ImagePolicy 23540 + - ImageUpdateAutomation 23541 + - OCIRepository 23542 + type: string 23543 + matchLabels: 23544 + additionalProperties: 23545 type: string 23546 + description: |- 23547 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23548 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23549 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23550 + MatchLabels requires the name to be set to `*`. 23551 + type: object 23552 + name: 23553 + description: |- 23554 + Name of the referent 23555 + If multiple resources are targeted `*` may be set. 23556 + maxLength: 53 23557 + minLength: 1 23558 + type: string 23559 + namespace: 23560 + description: Namespace of the referent 23561 + maxLength: 53 23562 + minLength: 1 23563 + type: string 23564 + required: 23565 + - kind 23566 + - name 23567 + type: object 23568 + type: array 23569 + secretRef: 23570 + description: |- 23571 + SecretRef specifies the Secret containing the token used 23572 + to validate the payload authenticity. 23573 + properties: 23574 + name: 23575 + description: Name of the referent. 23576 + type: string 23577 + required: 23578 + - name 23579 + type: object 23580 + suspend: 23581 + description: |- 23582 + Suspend tells the controller to suspend subsequent 23583 + events handling for this receiver. 23584 + type: boolean 23585 + type: 23586 + description: |- 23587 + Type of webhook sender, used to determine 23588 + the validation procedure and payload deserialization. 23589 + enum: 23590 + - generic 23591 + - generic-hmac 23592 + - github 23593 + - gitlab 23594 + - bitbucket 23595 + - harbor 23596 + - dockerhub 23597 + - quay 23598 + - gcr 23599 + - nexus 23600 + - acr 23601 + - cdevents 23602 + type: string 23603 + required: 23604 + - resources 23605 + - secretRef 23606 + - type 23607 + type: object 23608 + status: 23609 + default: 23610 + observedGeneration: -1 23611 + description: ReceiverStatus defines the observed state of the Receiver. 23612 + properties: 23613 + conditions: 23614 + description: Conditions holds the conditions for the Receiver. 23615 + items: 23616 + description: Condition contains details for one aspect of the current 23617 + state of this API Resource. 23618 + properties: 23619 + lastTransitionTime: 23620 + description: |- 23621 + lastTransitionTime is the last time the condition transitioned from one status to another. 23622 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23623 + format: date-time 23624 + type: string 23625 + message: 23626 + description: |- 23627 + message is a human readable message indicating details about the transition. 23628 + This may be an empty string. 23629 + maxLength: 32768 23630 + type: string 23631 + observedGeneration: 23632 + description: |- 23633 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23634 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23635 + with respect to the current state of the instance. 23636 + format: int64 23637 + minimum: 0 23638 + type: integer 23639 + reason: 23640 + description: |- 23641 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23642 + Producers of specific condition types may define expected values and meanings for this field, 23643 + and whether the values are considered a guaranteed API. 23644 + The value should be a CamelCase string. 23645 + This field may not be empty. 23646 + maxLength: 1024 23647 + minLength: 1 23648 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23649 + type: string 23650 + status: 23651 + description: status of the condition, one of True, False, Unknown. 23652 + enum: 23653 + - "True" 23654 + - "False" 23655 + - Unknown 23656 + type: string 23657 + type: 23658 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23659 + maxLength: 316 23660 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23661 + type: string 23662 + required: 23663 + - lastTransitionTime 23664 + - message 23665 + - reason 23666 + - status 23667 + - type 23668 + type: object 23669 + type: array 23670 + lastHandledReconcileAt: 23671 + description: |- 23672 + LastHandledReconcileAt holds the value of the most recent 23673 + reconcile request value, so a change of the annotation value 23674 + can be detected. 23675 + type: string 23676 + observedGeneration: 23677 + description: ObservedGeneration is the last observed generation of 23678 + the Receiver object. 23679 + format: int64 23680 + type: integer 23681 + webhookPath: 23682 + description: |- 23683 + WebhookPath is the generated incoming webhook address in the format 23684 + of '/hook/sha256sum(token+name+namespace)'. 23685 + type: string 23686 + type: object 23687 + type: object 23688 + served: true 23689 + storage: true 23690 + subresources: 23691 + status: {} 23692 + - additionalPrinterColumns: 23693 + - jsonPath: .metadata.creationTimestamp 23694 + name: Age 23695 + type: date 23696 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23697 + name: Ready 23698 + type: string 23699 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23700 + name: Status 23701 + type: string 23702 + deprecated: true 23703 + deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1 23704 + name: v1beta1 23705 + schema: 23706 + openAPIV3Schema: 23707 + description: Receiver is the Schema for the receivers API 23708 + properties: 23709 + apiVersion: 23710 + description: |- 23711 + APIVersion defines the versioned schema of this representation of an object. 23712 + Servers should convert recognized schemas to the latest internal value, and 23713 + may reject unrecognized values. 23714 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23715 + type: string 23716 + kind: 23717 + description: |- 23718 + Kind is a string value representing the REST resource this object represents. 23719 + Servers may infer this from the endpoint the client submits requests to. 23720 + Cannot be updated. 23721 + In CamelCase. 23722 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23723 + type: string 23724 + metadata: 23725 + type: object 23726 + spec: 23727 + description: ReceiverSpec defines the desired state of Receiver 23728 + properties: 23729 + events: 23730 + description: |- 23731 + A list of events to handle, 23732 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 23733 + items: 23734 + type: string 23735 + type: array 23736 + resources: 23737 + description: A list of resources to be notified about changes. 23738 + items: 23739 + description: |- 23740 + CrossNamespaceObjectReference contains enough information to let you locate the 23741 + typed referenced object at cluster level 23742 + properties: 23743 + apiVersion: 23744 + description: API version of the referent 23745 + type: string 23746 kind: 23747 - description: |- 23748 - Kind is a string value representing the REST resource this object represents. 23749 - Servers may infer this from the endpoint the client submits requests to. 23750 - Cannot be updated. 23751 - In CamelCase. 23752 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23753 + description: Kind of the referent 23754 + enum: 23755 + - Bucket 23756 + - GitRepository 23757 + - Kustomization 23758 + - HelmRelease 23759 + - HelmChart 23760 + - HelmRepository 23761 + - ImageRepository 23762 + - ImagePolicy 23763 + - ImageUpdateAutomation 23764 + - OCIRepository 23765 + type: string 23766 + matchLabels: 23767 + additionalProperties: 23768 type: string 23769 - metadata: 23770 - type: object 23771 - spec: 23772 - description: ReceiverSpec defines the desired state of the Receiver. 23773 - properties: 23774 - events: 23775 - description: |- 23776 - Events specifies the list of event types to handle, 23777 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 23778 - items: 23779 - type: string 23780 - type: array 23781 - interval: 23782 - description: Interval at which to reconcile the Receiver with its Secret references. 23783 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23784 - type: string 23785 - resources: 23786 - description: A list of resources to be notified about changes. 23787 - items: 23788 - description: |- 23789 - CrossNamespaceObjectReference contains enough information to let you locate the 23790 - typed referenced object at cluster level 23791 - properties: 23792 - apiVersion: 23793 - description: API version of the referent 23794 - type: string 23795 - kind: 23796 - description: Kind of the referent 23797 - enum: 23798 - - Bucket 23799 - - GitRepository 23800 - - Kustomization 23801 - - HelmRelease 23802 - - HelmChart 23803 - - HelmRepository 23804 - - ImageRepository 23805 - - ImagePolicy 23806 - - ImageUpdateAutomation 23807 - - OCIRepository 23808 - type: string 23809 - matchLabels: 23810 - additionalProperties: 23811 - type: string 23812 - description: |- 23813 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23814 - map is equivalent to an element of matchExpressions, whose key field is "key", the 23815 - operator is "In", and the values array contains only "value". The requirements are ANDed. 23816 - MatchLabels requires the name to be set to `*`. 23817 - type: object 23818 - name: 23819 - description: |- 23820 - Name of the referent 23821 - If multiple resources are targeted `*` may be set. 23822 - maxLength: 53 23823 - minLength: 1 23824 - type: string 23825 - namespace: 23826 - description: Namespace of the referent 23827 - maxLength: 53 23828 - minLength: 1 23829 - type: string 23830 - required: 23831 - - kind 23832 - - name 23833 - type: object 23834 - type: array 23835 - secretRef: 23836 - description: |- 23837 - SecretRef specifies the Secret containing the token used 23838 - to validate the payload authenticity. 23839 - properties: 23840 - name: 23841 - description: Name of the referent. 23842 - type: string 23843 - required: 23844 - - name 23845 - type: object 23846 - suspend: 23847 - description: |- 23848 - Suspend tells the controller to suspend subsequent 23849 - events handling for this receiver. 23850 - type: boolean 23851 - type: 23852 - description: |- 23853 - Type of webhook sender, used to determine 23854 - the validation procedure and payload deserialization. 23855 - enum: 23856 - - generic 23857 - - generic-hmac 23858 - - github 23859 - - gitlab 23860 - - bitbucket 23861 - - harbor 23862 - - dockerhub 23863 - - quay 23864 - - gcr 23865 - - nexus 23866 - - acr 23867 - type: string 23868 - required: 23869 - - resources 23870 - - secretRef 23871 - - type 23872 - type: object 23873 + description: |- 23874 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23875 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23876 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23877 + type: object 23878 + name: 23879 + description: Name of the referent 23880 + maxLength: 53 23881 + minLength: 1 23882 + type: string 23883 + namespace: 23884 + description: Namespace of the referent 23885 + maxLength: 53 23886 + minLength: 1 23887 + type: string 23888 + required: 23889 + - kind 23890 + - name 23891 + type: object 23892 + type: array 23893 + secretRef: 23894 + description: |- 23895 + Secret reference containing the token used 23896 + to validate the payload authenticity 23897 + properties: 23898 + name: 23899 + description: Name of the referent. 23900 + type: string 23901 + required: 23902 + - name 23903 + type: object 23904 + suspend: 23905 + description: |- 23906 + This flag tells the controller to suspend subsequent events handling. 23907 + Defaults to false. 23908 + type: boolean 23909 + type: 23910 + description: |- 23911 + Type of webhook sender, used to determine 23912 + the validation procedure and payload deserialization. 23913 + enum: 23914 + - generic 23915 + - generic-hmac 23916 + - github 23917 + - gitlab 23918 + - bitbucket 23919 + - harbor 23920 + - dockerhub 23921 + - quay 23922 + - gcr 23923 + - nexus 23924 + - acr 23925 + type: string 23926 + required: 23927 + - resources 23928 + - secretRef 23929 + - type 23930 + type: object 23931 + status: 23932 + default: 23933 + observedGeneration: -1 23934 + description: ReceiverStatus defines the observed state of Receiver 23935 + properties: 23936 + conditions: 23937 + items: 23938 + description: Condition contains details for one aspect of the current 23939 + state of this API Resource. 23940 + properties: 23941 + lastTransitionTime: 23942 + description: |- 23943 + lastTransitionTime is the last time the condition transitioned from one status to another. 23944 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23945 + format: date-time 23946 + type: string 23947 + message: 23948 + description: |- 23949 + message is a human readable message indicating details about the transition. 23950 + This may be an empty string. 23951 + maxLength: 32768 23952 + type: string 23953 + observedGeneration: 23954 + description: |- 23955 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23956 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23957 + with respect to the current state of the instance. 23958 + format: int64 23959 + minimum: 0 23960 + type: integer 23961 + reason: 23962 + description: |- 23963 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23964 + Producers of specific condition types may define expected values and meanings for this field, 23965 + and whether the values are considered a guaranteed API. 23966 + The value should be a CamelCase string. 23967 + This field may not be empty. 23968 + maxLength: 1024 23969 + minLength: 1 23970 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23971 + type: string 23972 status: 23973 - default: 23974 - observedGeneration: -1 23975 - description: ReceiverStatus defines the observed state of the Receiver. 23976 - properties: 23977 - conditions: 23978 - description: Conditions holds the conditions for the Receiver. 23979 - items: 23980 - description: Condition contains details for one aspect of the current state of this API 23981 - Resource. 23982 - properties: 23983 - lastTransitionTime: 23984 - description: |- 23985 - lastTransitionTime is the last time the condition transitioned from one status to another. 23986 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23987 - format: date-time 23988 - type: string 23989 - message: 23990 - description: |- 23991 - message is a human readable message indicating details about the transition. 23992 - This may be an empty string. 23993 - maxLength: 32768 23994 - type: string 23995 - observedGeneration: 23996 - description: |- 23997 - observedGeneration represents the .metadata.generation that the condition was set based upon. 23998 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23999 - with respect to the current state of the instance. 24000 - format: int64 24001 - minimum: 0 24002 - type: integer 24003 - reason: 24004 - description: |- 24005 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 24006 - Producers of specific condition types may define expected values and meanings for this field, 24007 - and whether the values are considered a guaranteed API. 24008 - The value should be a CamelCase string. 24009 - This field may not be empty. 24010 - maxLength: 1024 24011 - minLength: 1 24012 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24013 - type: string 24014 - status: 24015 - description: status of the condition, one of True, False, Unknown. 24016 - enum: 24017 - - "True" 24018 - - "False" 24019 - - Unknown 24020 - type: string 24021 - type: 24022 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 24023 - maxLength: 316 24024 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24025 - type: string 24026 - required: 24027 - - lastTransitionTime 24028 - - message 24029 - - reason 24030 - - status 24031 - - type 24032 - type: object 24033 - type: array 24034 - lastHandledReconcileAt: 24035 - description: |- 24036 - LastHandledReconcileAt holds the value of the most recent 24037 - reconcile request value, so a change of the annotation value 24038 - can be detected. 24039 - type: string 24040 - observedGeneration: 24041 - description: ObservedGeneration is the last observed generation of the Receiver object. 24042 - format: int64 24043 - type: integer 24044 - url: 24045 - description: |- 24046 - URL is the generated incoming webhook address in the format 24047 - of '/hook/sha256sum(token+name+namespace)'. 24048 - Deprecated: Replaced by WebhookPath. 24049 - type: string 24050 - webhookPath: 24051 - description: |- 24052 - WebhookPath is the generated incoming webhook address in the format 24053 - of '/hook/sha256sum(token+name+namespace)'. 24054 - type: string 24055 - type: object 24056 + description: status of the condition, one of True, False, Unknown. 24057 + enum: 24058 + - "True" 24059 + - "False" 24060 + - Unknown 24061 + type: string 24062 + type: 24063 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24064 + maxLength: 316 24065 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24066 + type: string 24067 + required: 24068 + - lastTransitionTime 24069 + - message 24070 + - reason 24071 + - status 24072 + - type 24073 + type: object 24074 + type: array 24075 + observedGeneration: 24076 + description: ObservedGeneration is the last observed generation. 24077 + format: int64 24078 + type: integer 24079 + url: 24080 + description: |- 24081 + Generated webhook URL in the format 24082 + of '/hook/sha256sum(token+name+namespace)'. 24083 + type: string 24084 + type: object 24085 + type: object 24086 + served: true 24087 + storage: false 24088 + subresources: 24089 + status: {} 24090 + - additionalPrinterColumns: 24091 + - jsonPath: .metadata.creationTimestamp 24092 + name: Age 24093 + type: date 24094 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 24095 + name: Ready 24096 + type: string 24097 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 24098 + name: Status 24099 + type: string 24100 + deprecated: true 24101 + deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 24102 + name: v1beta2 24103 + schema: 24104 + openAPIV3Schema: 24105 + description: Receiver is the Schema for the receivers API. 24106 + properties: 24107 + apiVersion: 24108 + description: |- 24109 + APIVersion defines the versioned schema of this representation of an object. 24110 + Servers should convert recognized schemas to the latest internal value, and 24111 + may reject unrecognized values. 24112 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24113 + type: string 24114 + kind: 24115 + description: |- 24116 + Kind is a string value representing the REST resource this object represents. 24117 + Servers may infer this from the endpoint the client submits requests to. 24118 + Cannot be updated. 24119 + In CamelCase. 24120 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24121 + type: string 24122 + metadata: 24123 + type: object 24124 + spec: 24125 + description: ReceiverSpec defines the desired state of the Receiver. 24126 + properties: 24127 + events: 24128 + description: |- 24129 + Events specifies the list of event types to handle, 24130 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 24131 + items: 24132 + type: string 24133 + type: array 24134 + interval: 24135 + description: Interval at which to reconcile the Receiver with its 24136 + Secret references. 24137 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 24138 + type: string 24139 + resources: 24140 + description: A list of resources to be notified about changes. 24141 + items: 24142 + description: |- 24143 + CrossNamespaceObjectReference contains enough information to let you locate the 24144 + typed referenced object at cluster level 24145 + properties: 24146 + apiVersion: 24147 + description: API version of the referent 24148 + type: string 24149 + kind: 24150 + description: Kind of the referent 24151 + enum: 24152 + - Bucket 24153 + - GitRepository 24154 + - Kustomization 24155 + - HelmRelease 24156 + - HelmChart 24157 + - HelmRepository 24158 + - ImageRepository 24159 + - ImagePolicy 24160 + - ImageUpdateAutomation 24161 + - OCIRepository 24162 + type: string 24163 + matchLabels: 24164 + additionalProperties: 24165 + type: string 24166 + description: |- 24167 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 24168 + map is equivalent to an element of matchExpressions, whose key field is "key", the 24169 + operator is "In", and the values array contains only "value". The requirements are ANDed. 24170 + MatchLabels requires the name to be set to `*`. 24171 + type: object 24172 + name: 24173 + description: |- 24174 + Name of the referent 24175 + If multiple resources are targeted `*` may be set. 24176 + maxLength: 53 24177 + minLength: 1 24178 + type: string 24179 + namespace: 24180 + description: Namespace of the referent 24181 + maxLength: 53 24182 + minLength: 1 24183 + type: string 24184 + required: 24185 + - kind 24186 + - name 24187 + type: object 24188 + type: array 24189 + secretRef: 24190 + description: |- 24191 + SecretRef specifies the Secret containing the token used 24192 + to validate the payload authenticity. 24193 + properties: 24194 + name: 24195 + description: Name of the referent. 24196 + type: string 24197 + required: 24198 + - name 24199 type: object 24200 - served: true 24201 - storage: false 24202 - subresources: 24203 - status: {} 24204 + suspend: 24205 + description: |- 24206 + Suspend tells the controller to suspend subsequent 24207 + events handling for this receiver. 24208 + type: boolean 24209 + type: 24210 + description: |- 24211 + Type of webhook sender, used to determine 24212 + the validation procedure and payload deserialization. 24213 + enum: 24214 + - generic 24215 + - generic-hmac 24216 + - github 24217 + - gitlab 24218 + - bitbucket 24219 + - harbor 24220 + - dockerhub 24221 + - quay 24222 + - gcr 24223 + - nexus 24224 + - acr 24225 + type: string 24226 + required: 24227 + - resources 24228 + - secretRef 24229 + - type 24230 + type: object 24231 + status: 24232 + default: 24233 + observedGeneration: -1 24234 + description: ReceiverStatus defines the observed state of the Receiver. 24235 + properties: 24236 + conditions: 24237 + description: Conditions holds the conditions for the Receiver. 24238 + items: 24239 + description: Condition contains details for one aspect of the current 24240 + state of this API Resource. 24241 + properties: 24242 + lastTransitionTime: 24243 + description: |- 24244 + lastTransitionTime is the last time the condition transitioned from one status to another. 24245 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24246 + format: date-time 24247 + type: string 24248 + message: 24249 + description: |- 24250 + message is a human readable message indicating details about the transition. 24251 + This may be an empty string. 24252 + maxLength: 32768 24253 + type: string 24254 + observedGeneration: 24255 + description: |- 24256 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24257 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24258 + with respect to the current state of the instance. 24259 + format: int64 24260 + minimum: 0 24261 + type: integer 24262 + reason: 24263 + description: |- 24264 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24265 + Producers of specific condition types may define expected values and meanings for this field, 24266 + and whether the values are considered a guaranteed API. 24267 + The value should be a CamelCase string. 24268 + This field may not be empty. 24269 + maxLength: 1024 24270 + minLength: 1 24271 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24272 + type: string 24273 + status: 24274 + description: status of the condition, one of True, False, Unknown. 24275 + enum: 24276 + - "True" 24277 + - "False" 24278 + - Unknown 24279 + type: string 24280 + type: 24281 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24282 + maxLength: 316 24283 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24284 + type: string 24285 + required: 24286 + - lastTransitionTime 24287 + - message 24288 + - reason 24289 + - status 24290 + - type 24291 + type: object 24292 + type: array 24293 + lastHandledReconcileAt: 24294 + description: |- 24295 + LastHandledReconcileAt holds the value of the most recent 24296 + reconcile request value, so a change of the annotation value 24297 + can be detected. 24298 + type: string 24299 + observedGeneration: 24300 + description: ObservedGeneration is the last observed generation of 24301 + the Receiver object. 24302 + format: int64 24303 + type: integer 24304 + url: 24305 + description: |- 24306 + URL is the generated incoming webhook address in the format 24307 + of '/hook/sha256sum(token+name+namespace)'. 24308 + Deprecated: Replaced by WebhookPath. 24309 + type: string 24310 + webhookPath: 24311 + description: |- 24312 + WebhookPath is the generated incoming webhook address in the format 24313 + of '/hook/sha256sum(token+name+namespace)'. 24314 + type: string 24315 + type: object 24316 + type: object 24317 + served: true 24318 + storage: false 24319 + subresources: 24320 + status: {} 24321 --- 24322 apiVersion: v1 24323 kind: ServiceAccount 24324 metadata: 24325 - labels: 24326 - app.kubernetes.io/component: notification-controller 24327 - app.kubernetes.io/instance: flux-system 24328 - app.kubernetes.io/part-of: flux 24329 - app.kubernetes.io/version: v2.4.0 24330 - name: notification-controller 24331 - namespace: flux-system 24332 + labels: 24333 + app.kubernetes.io/component: notification-controller 24334 + app.kubernetes.io/instance: flux-system 24335 + app.kubernetes.io/part-of: flux 24336 + app.kubernetes.io/version: v2.5.1 24337 + name: notification-controller 24338 + namespace: flux-system 24339 --- 24340 apiVersion: v1 24341 kind: Service 24342 metadata: 24343 - labels: 24344 - app.kubernetes.io/component: notification-controller 24345 - app.kubernetes.io/instance: flux-system 24346 - app.kubernetes.io/part-of: flux 24347 - app.kubernetes.io/version: v2.4.0 24348 - control-plane: controller 24349 - name: notification-controller 24350 - namespace: flux-system 24351 + labels: 24352 + app.kubernetes.io/component: notification-controller 24353 + app.kubernetes.io/instance: flux-system 24354 + app.kubernetes.io/part-of: flux 24355 + app.kubernetes.io/version: v2.5.1 24356 + control-plane: controller 24357 + name: notification-controller 24358 + namespace: flux-system 24359 spec: 24360 - ports: 24361 - - name: http 24362 - port: 80 24363 - protocol: TCP 24364 - targetPort: http 24365 - selector: 24366 - app: notification-controller 24367 - type: ClusterIP 24368 + ports: 24369 + - name: http 24370 + port: 80 24371 + protocol: TCP 24372 + targetPort: http 24373 + selector: 24374 + app: notification-controller 24375 + type: ClusterIP 24376 --- 24377 apiVersion: v1 24378 kind: Service 24379 metadata: 24380 - labels: 24381 - app.kubernetes.io/component: notification-controller 24382 - app.kubernetes.io/instance: flux-system 24383 - app.kubernetes.io/part-of: flux 24384 - app.kubernetes.io/version: v2.4.0 24385 - control-plane: controller 24386 - name: webhook-receiver 24387 - namespace: flux-system 24388 + labels: 24389 + app.kubernetes.io/component: notification-controller 24390 + app.kubernetes.io/instance: flux-system 24391 + app.kubernetes.io/part-of: flux 24392 + app.kubernetes.io/version: v2.5.1 24393 + control-plane: controller 24394 + name: webhook-receiver 24395 + namespace: flux-system 24396 spec: 24397 - ports: 24398 - - name: http 24399 - port: 80 24400 - protocol: TCP 24401 - targetPort: http-webhook 24402 - selector: 24403 - app: notification-controller 24404 - type: ClusterIP 24405 + ports: 24406 + - name: http 24407 + port: 80 24408 + protocol: TCP 24409 + targetPort: http-webhook 24410 + selector: 24411 + app: notification-controller 24412 + type: ClusterIP 24413 --- 24414 apiVersion: apps/v1 24415 kind: Deployment 24416 metadata: 24417 - labels: 24418 - app.kubernetes.io/component: notification-controller 24419 - app.kubernetes.io/instance: flux-system 24420 - app.kubernetes.io/part-of: flux 24421 - app.kubernetes.io/version: v2.4.0 24422 - control-plane: controller 24423 - name: notification-controller 24424 - namespace: flux-system 24425 + labels: 24426 + app.kubernetes.io/component: notification-controller 24427 + app.kubernetes.io/instance: flux-system 24428 + app.kubernetes.io/part-of: flux 24429 + app.kubernetes.io/version: v2.5.1 24430 + control-plane: controller 24431 + name: notification-controller 24432 + namespace: flux-system 24433 spec: 24434 - replicas: 1 24435 - selector: 24436 - matchLabels: 24437 - app: notification-controller 24438 - template: 24439 - metadata: 24440 - annotations: 24441 - prometheus.io/port: "8080" 24442 - prometheus.io/scrape: "true" 24443 - labels: 24444 - app: notification-controller 24445 - spec: 24446 - containers: 24447 - - args: 24448 - - --watch-all-namespaces=true 24449 - - --log-level=info 24450 - - --log-encoding=json 24451 - - --enable-leader-election 24452 - env: 24453 - - name: RUNTIME_NAMESPACE 24454 - valueFrom: 24455 - fieldRef: 24456 - fieldPath: metadata.namespace 24457 - - name: GOMAXPROCS 24458 - valueFrom: 24459 - resourceFieldRef: 24460 - containerName: manager 24461 - resource: limits.cpu 24462 - - name: GOMEMLIMIT 24463 - valueFrom: 24464 - resourceFieldRef: 24465 - containerName: manager 24466 - resource: limits.memory 24467 - image: ghcr.io/fluxcd/notification-controller:v1.4.0 24468 - imagePullPolicy: IfNotPresent 24469 - livenessProbe: 24470 - httpGet: 24471 - path: /healthz 24472 - port: healthz 24473 - name: manager 24474 - ports: 24475 - - containerPort: 9090 24476 - name: http 24477 - protocol: TCP 24478 - - containerPort: 9292 24479 - name: http-webhook 24480 - protocol: TCP 24481 - - containerPort: 8080 24482 - name: http-prom 24483 - protocol: TCP 24484 - - containerPort: 9440 24485 - name: healthz 24486 - protocol: TCP 24487 - readinessProbe: 24488 - httpGet: 24489 - path: /readyz 24490 - port: healthz 24491 - resources: 24492 - limits: 24493 - cpu: 1000m 24494 - memory: 1Gi 24495 - requests: 24496 - cpu: 100m 24497 - memory: 64Mi 24498 - securityContext: 24499 - allowPrivilegeEscalation: false 24500 - capabilities: 24501 - drop: 24502 - - ALL 24503 - readOnlyRootFilesystem: true 24504 - runAsNonRoot: true 24505 - seccompProfile: 24506 - type: RuntimeDefault 24507 - volumeMounts: 24508 - - mountPath: /tmp 24509 - name: temp 24510 - nodeSelector: 24511 - kubernetes.io/os: linux 24512 - securityContext: 24513 - fsGroup: 1337 24514 - serviceAccountName: notification-controller 24515 - terminationGracePeriodSeconds: 10 24516 - volumes: 24517 - - emptyDir: {} 24518 - name: temp 24519 + replicas: 1 24520 + selector: 24521 + matchLabels: 24522 + app: notification-controller 24523 + template: 24524 + metadata: 24525 + annotations: 24526 + prometheus.io/port: "8080" 24527 + prometheus.io/scrape: "true" 24528 + labels: 24529 + app: notification-controller 24530 + spec: 24531 + containers: 24532 + - args: 24533 + - --watch-all-namespaces=true 24534 + - --log-level=info 24535 + - --log-encoding=json 24536 + - --enable-leader-election 24537 + env: 24538 + - name: RUNTIME_NAMESPACE 24539 + valueFrom: 24540 + fieldRef: 24541 + fieldPath: metadata.namespace 24542 + - name: GOMAXPROCS 24543 + valueFrom: 24544 + resourceFieldRef: 24545 + containerName: manager 24546 + resource: limits.cpu 24547 + - name: GOMEMLIMIT 24548 + valueFrom: 24549 + resourceFieldRef: 24550 + containerName: manager 24551 + resource: limits.memory 24552 + image: ghcr.io/fluxcd/notification-controller:v1.5.0 24553 + imagePullPolicy: IfNotPresent 24554 + livenessProbe: 24555 + httpGet: 24556 + path: /healthz 24557 + port: healthz 24558 + name: manager 24559 + ports: 24560 + - containerPort: 9090 24561 + name: http 24562 + protocol: TCP 24563 + - containerPort: 9292 24564 + name: http-webhook 24565 + protocol: TCP 24566 + - containerPort: 8080 24567 + name: http-prom 24568 + protocol: TCP 24569 + - containerPort: 9440 24570 + name: healthz 24571 + protocol: TCP 24572 + readinessProbe: 24573 + httpGet: 24574 + path: /readyz 24575 + port: healthz 24576 + resources: 24577 + limits: 24578 + cpu: 1000m 24579 + memory: 1Gi 24580 + requests: 24581 + cpu: 100m 24582 + memory: 64Mi 24583 + securityContext: 24584 + allowPrivilegeEscalation: false 24585 + capabilities: 24586 + drop: 24587 + - ALL 24588 + readOnlyRootFilesystem: true 24589 + runAsNonRoot: true 24590 + seccompProfile: 24591 + type: RuntimeDefault 24592 + volumeMounts: 24593 + - mountPath: /tmp 24594 + name: temp 24595 + nodeSelector: 24596 + kubernetes.io/os: linux 24597 + securityContext: 24598 + fsGroup: 1337 24599 + serviceAccountName: notification-controller 24600 + terminationGracePeriodSeconds: 10 24601 + volumes: 24602 + - emptyDir: {} 24603 + name: temp 24604 --- 24605 apiVersion: apiextensions.k8s.io/v1 24606 kind: CustomResourceDefinition 24607 metadata: 24608 - annotations: 24609 - controller-gen.kubebuilder.io/version: v0.16.1 24610 - labels: 24611 - app.kubernetes.io/component: image-reflector-controller 24612 - app.kubernetes.io/instance: flux-system 24613 - app.kubernetes.io/part-of: flux 24614 - app.kubernetes.io/version: v2.4.0 24615 - name: imagepolicies.image.toolkit.fluxcd.io 24616 + annotations: 24617 + controller-gen.kubebuilder.io/version: v0.16.1 24618 + labels: 24619 + app.kubernetes.io/component: image-reflector-controller 24620 + app.kubernetes.io/instance: flux-system 24621 + app.kubernetes.io/part-of: flux 24622 + app.kubernetes.io/version: v2.5.1 24623 + name: imagepolicies.image.toolkit.fluxcd.io 24624 spec: 24625 - group: image.toolkit.fluxcd.io 24626 - names: 24627 - kind: ImagePolicy 24628 - listKind: ImagePolicyList 24629 - plural: imagepolicies 24630 - singular: imagepolicy 24631 - scope: Namespaced 24632 - versions: 24633 - - additionalPrinterColumns: 24634 - - jsonPath: .status.latestImage 24635 - name: LatestImage 24636 - type: string 24637 - name: v1beta1 24638 - schema: 24639 - openAPIV3Schema: 24640 - description: ImagePolicy is the Schema for the imagepolicies API 24641 + group: image.toolkit.fluxcd.io 24642 + names: 24643 + kind: ImagePolicy 24644 + listKind: ImagePolicyList 24645 + plural: imagepolicies 24646 + singular: imagepolicy 24647 + scope: Namespaced 24648 + versions: 24649 + - additionalPrinterColumns: 24650 + - jsonPath: .status.latestImage 24651 + name: LatestImage 24652 + type: string 24653 + name: v1beta1 24654 + schema: 24655 + openAPIV3Schema: 24656 + description: ImagePolicy is the Schema for the imagepolicies API 24657 + properties: 24658 + apiVersion: 24659 + description: |- 24660 + APIVersion defines the versioned schema of this representation of an object. 24661 + Servers should convert recognized schemas to the latest internal value, and 24662 + may reject unrecognized values. 24663 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24664 + type: string 24665 + kind: 24666 + description: |- 24667 + Kind is a string value representing the REST resource this object represents. 24668 + Servers may infer this from the endpoint the client submits requests to. 24669 + Cannot be updated. 24670 + In CamelCase. 24671 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24672 + type: string 24673 + metadata: 24674 + type: object 24675 + spec: 24676 + description: |- 24677 + ImagePolicySpec defines the parameters for calculating the 24678 + ImagePolicy 24679 + properties: 24680 + filterTags: 24681 + description: |- 24682 + FilterTags enables filtering for only a subset of tags based on a set of 24683 + rules. If no rules are provided, all the tags from the repository will be 24684 + ordered and compared. 24685 properties: 24686 - apiVersion: 24687 - description: |- 24688 - APIVersion defines the versioned schema of this representation of an object. 24689 - Servers should convert recognized schemas to the latest internal value, and 24690 - may reject unrecognized values. 24691 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24692 - type: string 24693 - kind: 24694 - description: |- 24695 - Kind is a string value representing the REST resource this object represents. 24696 - Servers may infer this from the endpoint the client submits requests to. 24697 - Cannot be updated. 24698 - In CamelCase. 24699 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24700 - type: string 24701 - metadata: 24702 - type: object 24703 - spec: 24704 - description: |- 24705 - ImagePolicySpec defines the parameters for calculating the 24706 - ImagePolicy 24707 - properties: 24708 - filterTags: 24709 - description: |- 24710 - FilterTags enables filtering for only a subset of tags based on a set of 24711 - rules. If no rules are provided, all the tags from the repository will be 24712 - ordered and compared. 24713 - properties: 24714 - extract: 24715 - description: |- 24716 - Extract allows a capture group to be extracted from the specified regular 24717 - expression pattern, useful before tag evaluation. 24718 - type: string 24719 - pattern: 24720 - description: |- 24721 - Pattern specifies a regular expression pattern used to filter for image 24722 - tags. 24723 - type: string 24724 - type: object 24725 - imageRepositoryRef: 24726 - description: |- 24727 - ImageRepositoryRef points at the object specifying the image 24728 - being scanned 24729 - properties: 24730 - name: 24731 - description: Name of the referent. 24732 - type: string 24733 - namespace: 24734 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 24735 - type: string 24736 - required: 24737 - - name 24738 - type: object 24739 - policy: 24740 - description: |- 24741 - Policy gives the particulars of the policy to be followed in 24742 - selecting the most recent image 24743 - properties: 24744 - alphabetical: 24745 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 24746 - properties: 24747 - order: 24748 - default: asc 24749 - description: |- 24750 - Order specifies the sorting order of the tags. Given the letters of the 24751 - alphabet as tags, ascending order would select Z, and descending order 24752 - would select A. 24753 - enum: 24754 - - asc 24755 - - desc 24756 - type: string 24757 - type: object 24758 - numerical: 24759 - description: Numerical set of rules to use for numerical ordering of the tags. 24760 - properties: 24761 - order: 24762 - default: asc 24763 - description: |- 24764 - Order specifies the sorting order of the tags. Given the integer values 24765 - from 0 to 9 as tags, ascending order would select 9, and descending order 24766 - would select 0. 24767 - enum: 24768 - - asc 24769 - - desc 24770 - type: string 24771 - type: object 24772 - semver: 24773 - description: |- 24774 - SemVer gives a semantic version range to check against the tags 24775 - available. 24776 - properties: 24777 - range: 24778 - description: |- 24779 - Range gives a semver range for the image tag; the highest 24780 - version within the range that's a tag yields the latest image. 24781 - type: string 24782 - required: 24783 - - range 24784 - type: object 24785 - type: object 24786 - required: 24787 - - imageRepositoryRef 24788 - - policy 24789 - type: object 24790 - status: 24791 - default: 24792 - observedGeneration: -1 24793 - description: ImagePolicyStatus defines the observed state of ImagePolicy 24794 - properties: 24795 - conditions: 24796 - items: 24797 - description: Condition contains details for one aspect of the current state of this API 24798 - Resource. 24799 - properties: 24800 - lastTransitionTime: 24801 - description: |- 24802 - lastTransitionTime is the last time the condition transitioned from one status to another. 24803 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24804 - format: date-time 24805 - type: string 24806 - message: 24807 - description: |- 24808 - message is a human readable message indicating details about the transition. 24809 - This may be an empty string. 24810 - maxLength: 32768 24811 - type: string 24812 - observedGeneration: 24813 - description: |- 24814 - observedGeneration represents the .metadata.generation that the condition was set based upon. 24815 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24816 - with respect to the current state of the instance. 24817 - format: int64 24818 - minimum: 0 24819 - type: integer 24820 - reason: 24821 - description: |- 24822 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 24823 - Producers of specific condition types may define expected values and meanings for this field, 24824 - and whether the values are considered a guaranteed API. 24825 - The value should be a CamelCase string. 24826 - This field may not be empty. 24827 - maxLength: 1024 24828 - minLength: 1 24829 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24830 - type: string 24831 - status: 24832 - description: status of the condition, one of True, False, Unknown. 24833 - enum: 24834 - - "True" 24835 - - "False" 24836 - - Unknown 24837 - type: string 24838 - type: 24839 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 24840 - maxLength: 316 24841 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24842 - type: string 24843 - required: 24844 - - lastTransitionTime 24845 - - message 24846 - - reason 24847 - - status 24848 - - type 24849 - type: object 24850 - type: array 24851 - latestImage: 24852 - description: |- 24853 - LatestImage gives the first in the list of images scanned by 24854 - the image repository, when filtered and ordered according to 24855 - the policy. 24856 - type: string 24857 - observedGeneration: 24858 - format: int64 24859 - type: integer 24860 - type: object 24861 + extract: 24862 + description: |- 24863 + Extract allows a capture group to be extracted from the specified regular 24864 + expression pattern, useful before tag evaluation. 24865 + type: string 24866 + pattern: 24867 + description: |- 24868 + Pattern specifies a regular expression pattern used to filter for image 24869 + tags. 24870 + type: string 24871 + type: object 24872 + imageRepositoryRef: 24873 + description: |- 24874 + ImageRepositoryRef points at the object specifying the image 24875 + being scanned 24876 + properties: 24877 + name: 24878 + description: Name of the referent. 24879 + type: string 24880 + namespace: 24881 + description: Namespace of the referent, when not specified it 24882 + acts as LocalObjectReference. 24883 + type: string 24884 + required: 24885 + - name 24886 type: object 24887 - served: true 24888 - storage: false 24889 - subresources: 24890 - status: {} 24891 - - additionalPrinterColumns: 24892 - - jsonPath: .status.latestImage 24893 - name: LatestImage 24894 - type: string 24895 - name: v1beta2 24896 - schema: 24897 - openAPIV3Schema: 24898 - description: ImagePolicy is the Schema for the imagepolicies API 24899 + policy: 24900 + description: |- 24901 + Policy gives the particulars of the policy to be followed in 24902 + selecting the most recent image 24903 properties: 24904 - apiVersion: 24905 + alphabetical: 24906 + description: Alphabetical set of rules to use for alphabetical 24907 + ordering of the tags. 24908 + properties: 24909 + order: 24910 + default: asc 24911 description: |- 24912 - APIVersion defines the versioned schema of this representation of an object. 24913 - Servers should convert recognized schemas to the latest internal value, and 24914 - may reject unrecognized values. 24915 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24916 + Order specifies the sorting order of the tags. Given the letters of the 24917 + alphabet as tags, ascending order would select Z, and descending order 24918 + would select A. 24919 + enum: 24920 + - asc 24921 + - desc 24922 type: string 24923 - kind: 24924 + type: object 24925 + numerical: 24926 + description: Numerical set of rules to use for numerical ordering 24927 + of the tags. 24928 + properties: 24929 + order: 24930 + default: asc 24931 description: |- 24932 - Kind is a string value representing the REST resource this object represents. 24933 - Servers may infer this from the endpoint the client submits requests to. 24934 - Cannot be updated. 24935 - In CamelCase. 24936 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24937 + Order specifies the sorting order of the tags. Given the integer values 24938 + from 0 to 9 as tags, ascending order would select 9, and descending order 24939 + would select 0. 24940 + enum: 24941 + - asc 24942 + - desc 24943 type: string 24944 - metadata: 24945 - type: object 24946 - spec: 24947 + type: object 24948 + semver: 24949 + description: |- 24950 + SemVer gives a semantic version range to check against the tags 24951 + available. 24952 + properties: 24953 + range: 24954 description: |- 24955 - ImagePolicySpec defines the parameters for calculating the 24956 - ImagePolicy. 24957 - properties: 24958 - filterTags: 24959 - description: |- 24960 - FilterTags enables filtering for only a subset of tags based on a set of 24961 - rules. If no rules are provided, all the tags from the repository will be 24962 - ordered and compared. 24963 - properties: 24964 - extract: 24965 - description: |- 24966 - Extract allows a capture group to be extracted from the specified regular 24967 - expression pattern, useful before tag evaluation. 24968 - type: string 24969 - pattern: 24970 - description: |- 24971 - Pattern specifies a regular expression pattern used to filter for image 24972 - tags. 24973 - type: string 24974 - type: object 24975 - imageRepositoryRef: 24976 - description: |- 24977 - ImageRepositoryRef points at the object specifying the image 24978 - being scanned 24979 - properties: 24980 - name: 24981 - description: Name of the referent. 24982 - type: string 24983 - namespace: 24984 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 24985 - type: string 24986 - required: 24987 - - name 24988 - type: object 24989 - policy: 24990 - description: |- 24991 - Policy gives the particulars of the policy to be followed in 24992 - selecting the most recent image 24993 - properties: 24994 - alphabetical: 24995 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 24996 - properties: 24997 - order: 24998 - default: asc 24999 - description: |- 25000 - Order specifies the sorting order of the tags. Given the letters of the 25001 - alphabet as tags, ascending order would select Z, and descending order 25002 - would select A. 25003 - enum: 25004 - - asc 25005 - - desc 25006 - type: string 25007 - type: object 25008 - numerical: 25009 - description: Numerical set of rules to use for numerical ordering of the tags. 25010 - properties: 25011 - order: 25012 - default: asc 25013 - description: |- 25014 - Order specifies the sorting order of the tags. Given the integer values 25015 - from 0 to 9 as tags, ascending order would select 9, and descending order 25016 - would select 0. 25017 - enum: 25018 - - asc 25019 - - desc 25020 - type: string 25021 - type: object 25022 - semver: 25023 - description: |- 25024 - SemVer gives a semantic version range to check against the tags 25025 - available. 25026 - properties: 25027 - range: 25028 - description: |- 25029 - Range gives a semver range for the image tag; the highest 25030 - version within the range that's a tag yields the latest image. 25031 - type: string 25032 - required: 25033 - - range 25034 - type: object 25035 - type: object 25036 - required: 25037 - - imageRepositoryRef 25038 - - policy 25039 - type: object 25040 + Range gives a semver range for the image tag; the highest 25041 + version within the range that's a tag yields the latest image. 25042 + type: string 25043 + required: 25044 + - range 25045 + type: object 25046 + type: object 25047 + required: 25048 + - imageRepositoryRef 25049 + - policy 25050 + type: object 25051 + status: 25052 + default: 25053 + observedGeneration: -1 25054 + description: ImagePolicyStatus defines the observed state of ImagePolicy 25055 + properties: 25056 + conditions: 25057 + items: 25058 + description: Condition contains details for one aspect of the current 25059 + state of this API Resource. 25060 + properties: 25061 + lastTransitionTime: 25062 + description: |- 25063 + lastTransitionTime is the last time the condition transitioned from one status to another. 25064 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25065 + format: date-time 25066 + type: string 25067 + message: 25068 + description: |- 25069 + message is a human readable message indicating details about the transition. 25070 + This may be an empty string. 25071 + maxLength: 32768 25072 + type: string 25073 + observedGeneration: 25074 + description: |- 25075 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25076 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25077 + with respect to the current state of the instance. 25078 + format: int64 25079 + minimum: 0 25080 + type: integer 25081 + reason: 25082 + description: |- 25083 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25084 + Producers of specific condition types may define expected values and meanings for this field, 25085 + and whether the values are considered a guaranteed API. 25086 + The value should be a CamelCase string. 25087 + This field may not be empty. 25088 + maxLength: 1024 25089 + minLength: 1 25090 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25091 + type: string 25092 status: 25093 - default: 25094 - observedGeneration: -1 25095 - description: ImagePolicyStatus defines the observed state of ImagePolicy 25096 - properties: 25097 - conditions: 25098 - items: 25099 - description: Condition contains details for one aspect of the current state of this API 25100 - Resource. 25101 - properties: 25102 - lastTransitionTime: 25103 - description: |- 25104 - lastTransitionTime is the last time the condition transitioned from one status to another. 25105 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25106 - format: date-time 25107 - type: string 25108 - message: 25109 - description: |- 25110 - message is a human readable message indicating details about the transition. 25111 - This may be an empty string. 25112 - maxLength: 32768 25113 - type: string 25114 - observedGeneration: 25115 - description: |- 25116 - observedGeneration represents the .metadata.generation that the condition was set based upon. 25117 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25118 - with respect to the current state of the instance. 25119 - format: int64 25120 - minimum: 0 25121 - type: integer 25122 - reason: 25123 - description: |- 25124 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 25125 - Producers of specific condition types may define expected values and meanings for this field, 25126 - and whether the values are considered a guaranteed API. 25127 - The value should be a CamelCase string. 25128 - This field may not be empty. 25129 - maxLength: 1024 25130 - minLength: 1 25131 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25132 - type: string 25133 - status: 25134 - description: status of the condition, one of True, False, Unknown. 25135 - enum: 25136 - - "True" 25137 - - "False" 25138 - - Unknown 25139 - type: string 25140 - type: 25141 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 25142 - maxLength: 316 25143 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25144 - type: string 25145 - required: 25146 - - lastTransitionTime 25147 - - message 25148 - - reason 25149 - - status 25150 - - type 25151 - type: object 25152 - type: array 25153 - latestImage: 25154 - description: |- 25155 - LatestImage gives the first in the list of images scanned by 25156 - the image repository, when filtered and ordered according to 25157 - the policy. 25158 - type: string 25159 - observedGeneration: 25160 - format: int64 25161 - type: integer 25162 - observedPreviousImage: 25163 - description: |- 25164 - ObservedPreviousImage is the observed previous LatestImage. It is used 25165 - to keep track of the previous and current images. 25166 - type: string 25167 - type: object 25168 + description: status of the condition, one of True, False, Unknown. 25169 + enum: 25170 + - "True" 25171 + - "False" 25172 + - Unknown 25173 + type: string 25174 + type: 25175 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25176 + maxLength: 316 25177 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25178 + type: string 25179 + required: 25180 + - lastTransitionTime 25181 + - message 25182 + - reason 25183 + - status 25184 + - type 25185 + type: object 25186 + type: array 25187 + latestImage: 25188 + description: |- 25189 + LatestImage gives the first in the list of images scanned by 25190 + the image repository, when filtered and ordered according to 25191 + the policy. 25192 + type: string 25193 + observedGeneration: 25194 + format: int64 25195 + type: integer 25196 + type: object 25197 + type: object 25198 + served: true 25199 + storage: false 25200 + subresources: 25201 + status: {} 25202 + - additionalPrinterColumns: 25203 + - jsonPath: .status.latestImage 25204 + name: LatestImage 25205 + type: string 25206 + name: v1beta2 25207 + schema: 25208 + openAPIV3Schema: 25209 + description: ImagePolicy is the Schema for the imagepolicies API 25210 + properties: 25211 + apiVersion: 25212 + description: |- 25213 + APIVersion defines the versioned schema of this representation of an object. 25214 + Servers should convert recognized schemas to the latest internal value, and 25215 + may reject unrecognized values. 25216 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25217 + type: string 25218 + kind: 25219 + description: |- 25220 + Kind is a string value representing the REST resource this object represents. 25221 + Servers may infer this from the endpoint the client submits requests to. 25222 + Cannot be updated. 25223 + In CamelCase. 25224 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25225 + type: string 25226 + metadata: 25227 + type: object 25228 + spec: 25229 + description: |- 25230 + ImagePolicySpec defines the parameters for calculating the 25231 + ImagePolicy. 25232 + properties: 25233 + filterTags: 25234 + description: |- 25235 + FilterTags enables filtering for only a subset of tags based on a set of 25236 + rules. If no rules are provided, all the tags from the repository will be 25237 + ordered and compared. 25238 + properties: 25239 + extract: 25240 + description: |- 25241 + Extract allows a capture group to be extracted from the specified regular 25242 + expression pattern, useful before tag evaluation. 25243 + type: string 25244 + pattern: 25245 + description: |- 25246 + Pattern specifies a regular expression pattern used to filter for image 25247 + tags. 25248 + type: string 25249 type: object 25250 - served: true 25251 - storage: true 25252 - subresources: 25253 - status: {} 25254 ---- 25255 -apiVersion: apiextensions.k8s.io/v1 25256 -kind: CustomResourceDefinition 25257 -metadata: 25258 - annotations: 25259 - controller-gen.kubebuilder.io/version: v0.16.1 25260 - labels: 25261 - app.kubernetes.io/component: image-reflector-controller 25262 - app.kubernetes.io/instance: flux-system 25263 - app.kubernetes.io/part-of: flux 25264 - app.kubernetes.io/version: v2.4.0 25265 - name: imagerepositories.image.toolkit.fluxcd.io 25266 -spec: 25267 - group: image.toolkit.fluxcd.io 25268 - names: 25269 - kind: ImageRepository 25270 - listKind: ImageRepositoryList 25271 - plural: imagerepositories 25272 - singular: imagerepository 25273 - scope: Namespaced 25274 - versions: 25275 - - additionalPrinterColumns: 25276 - - jsonPath: .status.lastScanResult.scanTime 25277 - name: Last scan 25278 - type: string 25279 - - jsonPath: .status.lastScanResult.tagCount 25280 - name: Tags 25281 - type: string 25282 - name: v1beta1 25283 - schema: 25284 - openAPIV3Schema: 25285 - description: ImageRepository is the Schema for the imagerepositories API 25286 + imageRepositoryRef: 25287 + description: |- 25288 + ImageRepositoryRef points at the object specifying the image 25289 + being scanned 25290 properties: 25291 - apiVersion: 25292 + name: 25293 + description: Name of the referent. 25294 + type: string 25295 + namespace: 25296 + description: Namespace of the referent, when not specified it 25297 + acts as LocalObjectReference. 25298 + type: string 25299 + required: 25300 + - name 25301 + type: object 25302 + policy: 25303 + description: |- 25304 + Policy gives the particulars of the policy to be followed in 25305 + selecting the most recent image 25306 + properties: 25307 + alphabetical: 25308 + description: Alphabetical set of rules to use for alphabetical 25309 + ordering of the tags. 25310 + properties: 25311 + order: 25312 + default: asc 25313 description: |- 25314 - APIVersion defines the versioned schema of this representation of an object. 25315 - Servers should convert recognized schemas to the latest internal value, and 25316 - may reject unrecognized values. 25317 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25318 + Order specifies the sorting order of the tags. Given the letters of the 25319 + alphabet as tags, ascending order would select Z, and descending order 25320 + would select A. 25321 + enum: 25322 + - asc 25323 + - desc 25324 type: string 25325 - kind: 25326 + type: object 25327 + numerical: 25328 + description: Numerical set of rules to use for numerical ordering 25329 + of the tags. 25330 + properties: 25331 + order: 25332 + default: asc 25333 description: |- 25334 - Kind is a string value representing the REST resource this object represents. 25335 - Servers may infer this from the endpoint the client submits requests to. 25336 - Cannot be updated. 25337 - In CamelCase. 25338 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25339 + Order specifies the sorting order of the tags. Given the integer values 25340 + from 0 to 9 as tags, ascending order would select 9, and descending order 25341 + would select 0. 25342 + enum: 25343 + - asc 25344 + - desc 25345 type: string 25346 - metadata: 25347 - type: object 25348 - spec: 25349 + type: object 25350 + semver: 25351 + description: |- 25352 + SemVer gives a semantic version range to check against the tags 25353 + available. 25354 + properties: 25355 + range: 25356 description: |- 25357 - ImageRepositorySpec defines the parameters for scanning an image 25358 - repository, e.g., `fluxcd/flux`. 25359 - properties: 25360 - accessFrom: 25361 - description: |- 25362 - AccessFrom defines an ACL for allowing cross-namespace references 25363 - to the ImageRepository object based on the caller's namespace labels. 25364 - properties: 25365 - namespaceSelectors: 25366 - description: |- 25367 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25368 - Items in this list are evaluated using a logical OR operation. 25369 - items: 25370 - description: |- 25371 - NamespaceSelector selects the namespaces to which this ACL applies. 25372 - An empty map of MatchLabels matches all namespaces in a cluster. 25373 - properties: 25374 - matchLabels: 25375 - additionalProperties: 25376 - type: string 25377 - description: |- 25378 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25379 - map is equivalent to an element of matchExpressions, whose key field is "key", the 25380 - operator is "In", and the values array contains only "value". The requirements are ANDed. 25381 - type: object 25382 - type: object 25383 - type: array 25384 - required: 25385 - - namespaceSelectors 25386 - type: object 25387 - certSecretRef: 25388 - description: |- 25389 - CertSecretRef can be given the name of a secret containing 25390 - either or both of 25391 + Range gives a semver range for the image tag; the highest 25392 + version within the range that's a tag yields the latest image. 25393 + type: string 25394 + required: 25395 + - range 25396 + type: object 25397 + type: object 25398 + required: 25399 + - imageRepositoryRef 25400 + - policy 25401 + type: object 25402 + status: 25403 + default: 25404 + observedGeneration: -1 25405 + description: ImagePolicyStatus defines the observed state of ImagePolicy 25406 + properties: 25407 + conditions: 25408 + items: 25409 + description: Condition contains details for one aspect of the current 25410 + state of this API Resource. 25411 + properties: 25412 + lastTransitionTime: 25413 + description: |- 25414 + lastTransitionTime is the last time the condition transitioned from one status to another. 25415 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25416 + format: date-time 25417 + type: string 25418 + message: 25419 + description: |- 25420 + message is a human readable message indicating details about the transition. 25421 + This may be an empty string. 25422 + maxLength: 32768 25423 + type: string 25424 + observedGeneration: 25425 + description: |- 25426 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25427 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25428 + with respect to the current state of the instance. 25429 + format: int64 25430 + minimum: 0 25431 + type: integer 25432 + reason: 25433 + description: |- 25434 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25435 + Producers of specific condition types may define expected values and meanings for this field, 25436 + and whether the values are considered a guaranteed API. 25437 + The value should be a CamelCase string. 25438 + This field may not be empty. 25439 + maxLength: 1024 25440 + minLength: 1 25441 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25442 + type: string 25443 + status: 25444 + description: status of the condition, one of True, False, Unknown. 25445 + enum: 25446 + - "True" 25447 + - "False" 25448 + - Unknown 25449 + type: string 25450 + type: 25451 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25452 + maxLength: 316 25453 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25454 + type: string 25455 + required: 25456 + - lastTransitionTime 25457 + - message 25458 + - reason 25459 + - status 25460 + - type 25461 + type: object 25462 + type: array 25463 + latestImage: 25464 + description: |- 25465 + LatestImage gives the first in the list of images scanned by 25466 + the image repository, when filtered and ordered according to 25467 + the policy. 25468 + type: string 25469 + observedGeneration: 25470 + format: int64 25471 + type: integer 25472 + observedPreviousImage: 25473 + description: |- 25474 + ObservedPreviousImage is the observed previous LatestImage. It is used 25475 + to keep track of the previous and current images. 25476 + type: string 25477 + type: object 25478 + type: object 25479 + served: true 25480 + storage: true 25481 + subresources: 25482 + status: {} 25483 +--- 25484 +apiVersion: apiextensions.k8s.io/v1 25485 +kind: CustomResourceDefinition 25486 +metadata: 25487 + annotations: 25488 + controller-gen.kubebuilder.io/version: v0.16.1 25489 + labels: 25490 + app.kubernetes.io/component: image-reflector-controller 25491 + app.kubernetes.io/instance: flux-system 25492 + app.kubernetes.io/part-of: flux 25493 + app.kubernetes.io/version: v2.5.1 25494 + name: imagerepositories.image.toolkit.fluxcd.io 25495 +spec: 25496 + group: image.toolkit.fluxcd.io 25497 + names: 25498 + kind: ImageRepository 25499 + listKind: ImageRepositoryList 25500 + plural: imagerepositories 25501 + singular: imagerepository 25502 + scope: Namespaced 25503 + versions: 25504 + - additionalPrinterColumns: 25505 + - jsonPath: .status.lastScanResult.scanTime 25506 + name: Last scan 25507 + type: string 25508 + - jsonPath: .status.lastScanResult.tagCount 25509 + name: Tags 25510 + type: string 25511 + name: v1beta1 25512 + schema: 25513 + openAPIV3Schema: 25514 + description: ImageRepository is the Schema for the imagerepositories API 25515 + properties: 25516 + apiVersion: 25517 + description: |- 25518 + APIVersion defines the versioned schema of this representation of an object. 25519 + Servers should convert recognized schemas to the latest internal value, and 25520 + may reject unrecognized values. 25521 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25522 + type: string 25523 + kind: 25524 + description: |- 25525 + Kind is a string value representing the REST resource this object represents. 25526 + Servers may infer this from the endpoint the client submits requests to. 25527 + Cannot be updated. 25528 + In CamelCase. 25529 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25530 + type: string 25531 + metadata: 25532 + type: object 25533 + spec: 25534 + description: |- 25535 + ImageRepositorySpec defines the parameters for scanning an image 25536 + repository, e.g., `fluxcd/flux`. 25537 + properties: 25538 + accessFrom: 25539 + description: |- 25540 + AccessFrom defines an ACL for allowing cross-namespace references 25541 + to the ImageRepository object based on the caller's namespace labels. 25542 + properties: 25543 + namespaceSelectors: 25544 + description: |- 25545 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25546 + Items in this list are evaluated using a logical OR operation. 25547 + items: 25548 + description: |- 25549 + NamespaceSelector selects the namespaces to which this ACL applies. 25550 + An empty map of MatchLabels matches all namespaces in a cluster. 25551 + properties: 25552 + matchLabels: 25553 + additionalProperties: 25554 + type: string 25555 + description: |- 25556 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25557 + map is equivalent to an element of matchExpressions, whose key field is "key", the 25558 + operator is "In", and the values array contains only "value". The requirements are ANDed. 25559 + type: object 25560 + type: object 25561 + type: array 25562 + required: 25563 + - namespaceSelectors 25564 + type: object 25565 + certSecretRef: 25566 + description: |- 25567 + CertSecretRef can be given the name of a secret containing 25568 + either or both of 25569 25570 - - a PEM-encoded client certificate (`certFile`) and private 25571 - key (`keyFile`); 25572 - - a PEM-encoded CA certificate (`caFile`) 25573 + - a PEM-encoded client certificate (`certFile`) and private 25574 + key (`keyFile`); 25575 + - a PEM-encoded CA certificate (`caFile`) 25576 25577 - and whichever are supplied, will be used for connecting to the 25578 - registry. The client cert and key are useful if you are 25579 - authenticating with a certificate; the CA cert is useful if 25580 - you are using a self-signed server certificate. 25581 - properties: 25582 - name: 25583 - description: Name of the referent. 25584 - type: string 25585 - required: 25586 - - name 25587 - type: object 25588 - exclusionList: 25589 - description: |- 25590 - ExclusionList is a list of regex strings used to exclude certain tags 25591 - from being stored in the database. 25592 - items: 25593 - type: string 25594 - type: array 25595 - image: 25596 - description: Image is the name of the image repository 25597 - type: string 25598 - interval: 25599 - description: |- 25600 - Interval is the length of time to wait between 25601 - scans of the image repository. 25602 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25603 - type: string 25604 - secretRef: 25605 - description: |- 25606 - SecretRef can be given the name of a secret containing 25607 - credentials to use for the image registry. The secret should be 25608 - created with `kubectl create secret docker-registry`, or the 25609 - equivalent. 25610 - properties: 25611 - name: 25612 - description: Name of the referent. 25613 - type: string 25614 - required: 25615 - - name 25616 - type: object 25617 - serviceAccountName: 25618 - description: |- 25619 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 25620 - the image pull if the service account has attached pull secrets. 25621 - maxLength: 253 25622 - type: string 25623 - suspend: 25624 - description: |- 25625 - This flag tells the controller to suspend subsequent image scans. 25626 - It does not apply to already started scans. Defaults to false. 25627 - type: boolean 25628 - timeout: 25629 - description: |- 25630 - Timeout for image scanning. 25631 - Defaults to 'Interval' duration. 25632 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 25633 - type: string 25634 - required: 25635 - - image 25636 - - interval 25637 - type: object 25638 + and whichever are supplied, will be used for connecting to the 25639 + registry. The client cert and key are useful if you are 25640 + authenticating with a certificate; the CA cert is useful if 25641 + you are using a self-signed server certificate. 25642 + properties: 25643 + name: 25644 + description: Name of the referent. 25645 + type: string 25646 + required: 25647 + - name 25648 + type: object 25649 + exclusionList: 25650 + description: |- 25651 + ExclusionList is a list of regex strings used to exclude certain tags 25652 + from being stored in the database. 25653 + items: 25654 + type: string 25655 + type: array 25656 + image: 25657 + description: Image is the name of the image repository 25658 + type: string 25659 + interval: 25660 + description: |- 25661 + Interval is the length of time to wait between 25662 + scans of the image repository. 25663 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25664 + type: string 25665 + secretRef: 25666 + description: |- 25667 + SecretRef can be given the name of a secret containing 25668 + credentials to use for the image registry. The secret should be 25669 + created with `kubectl create secret docker-registry`, or the 25670 + equivalent. 25671 + properties: 25672 + name: 25673 + description: Name of the referent. 25674 + type: string 25675 + required: 25676 + - name 25677 + type: object 25678 + serviceAccountName: 25679 + description: |- 25680 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 25681 + the image pull if the service account has attached pull secrets. 25682 + maxLength: 253 25683 + type: string 25684 + suspend: 25685 + description: |- 25686 + This flag tells the controller to suspend subsequent image scans. 25687 + It does not apply to already started scans. Defaults to false. 25688 + type: boolean 25689 + timeout: 25690 + description: |- 25691 + Timeout for image scanning. 25692 + Defaults to 'Interval' duration. 25693 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 25694 + type: string 25695 + required: 25696 + - image 25697 + - interval 25698 + type: object 25699 + status: 25700 + default: 25701 + observedGeneration: -1 25702 + description: ImageRepositoryStatus defines the observed state of ImageRepository 25703 + properties: 25704 + canonicalImageName: 25705 + description: |- 25706 + CanonicalName is the name of the image repository with all the 25707 + implied bits made explicit; e.g., `docker.io/library/alpine` 25708 + rather than `alpine`. 25709 + type: string 25710 + conditions: 25711 + items: 25712 + description: Condition contains details for one aspect of the current 25713 + state of this API Resource. 25714 + properties: 25715 + lastTransitionTime: 25716 + description: |- 25717 + lastTransitionTime is the last time the condition transitioned from one status to another. 25718 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25719 + format: date-time 25720 + type: string 25721 + message: 25722 + description: |- 25723 + message is a human readable message indicating details about the transition. 25724 + This may be an empty string. 25725 + maxLength: 32768 25726 + type: string 25727 + observedGeneration: 25728 + description: |- 25729 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25730 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25731 + with respect to the current state of the instance. 25732 + format: int64 25733 + minimum: 0 25734 + type: integer 25735 + reason: 25736 + description: |- 25737 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25738 + Producers of specific condition types may define expected values and meanings for this field, 25739 + and whether the values are considered a guaranteed API. 25740 + The value should be a CamelCase string. 25741 + This field may not be empty. 25742 + maxLength: 1024 25743 + minLength: 1 25744 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25745 + type: string 25746 status: 25747 - default: 25748 - observedGeneration: -1 25749 - description: ImageRepositoryStatus defines the observed state of ImageRepository 25750 - properties: 25751 - canonicalImageName: 25752 - description: |- 25753 - CanonicalName is the name of the image repository with all the 25754 - implied bits made explicit; e.g., `docker.io/library/alpine` 25755 - rather than `alpine`. 25756 - type: string 25757 - conditions: 25758 - items: 25759 - description: Condition contains details for one aspect of the current state of this API 25760 - Resource. 25761 - properties: 25762 - lastTransitionTime: 25763 - description: |- 25764 - lastTransitionTime is the last time the condition transitioned from one status to another. 25765 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25766 - format: date-time 25767 - type: string 25768 - message: 25769 - description: |- 25770 - message is a human readable message indicating details about the transition. 25771 - This may be an empty string. 25772 - maxLength: 32768 25773 - type: string 25774 - observedGeneration: 25775 - description: |- 25776 - observedGeneration represents the .metadata.generation that the condition was set based upon. 25777 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25778 - with respect to the current state of the instance. 25779 - format: int64 25780 - minimum: 0 25781 - type: integer 25782 - reason: 25783 - description: |- 25784 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 25785 - Producers of specific condition types may define expected values and meanings for this field, 25786 - and whether the values are considered a guaranteed API. 25787 - The value should be a CamelCase string. 25788 - This field may not be empty. 25789 - maxLength: 1024 25790 - minLength: 1 25791 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25792 - type: string 25793 - status: 25794 - description: status of the condition, one of True, False, Unknown. 25795 - enum: 25796 - - "True" 25797 - - "False" 25798 - - Unknown 25799 - type: string 25800 - type: 25801 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 25802 - maxLength: 316 25803 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25804 - type: string 25805 - required: 25806 - - lastTransitionTime 25807 - - message 25808 - - reason 25809 - - status 25810 - - type 25811 - type: object 25812 - type: array 25813 - lastHandledReconcileAt: 25814 - description: |- 25815 - LastHandledReconcileAt holds the value of the most recent 25816 - reconcile request value, so a change of the annotation value 25817 - can be detected. 25818 - type: string 25819 - lastScanResult: 25820 - description: LastScanResult contains the number of fetched tags. 25821 - properties: 25822 - scanTime: 25823 - format: date-time 25824 - type: string 25825 - tagCount: 25826 - type: integer 25827 - required: 25828 - - tagCount 25829 - type: object 25830 - observedGeneration: 25831 - description: ObservedGeneration is the last reconciled generation. 25832 - format: int64 25833 - type: integer 25834 - type: object 25835 + description: status of the condition, one of True, False, Unknown. 25836 + enum: 25837 + - "True" 25838 + - "False" 25839 + - Unknown 25840 + type: string 25841 + type: 25842 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25843 + maxLength: 316 25844 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25845 + type: string 25846 + required: 25847 + - lastTransitionTime 25848 + - message 25849 + - reason 25850 + - status 25851 + - type 25852 + type: object 25853 + type: array 25854 + lastHandledReconcileAt: 25855 + description: |- 25856 + LastHandledReconcileAt holds the value of the most recent 25857 + reconcile request value, so a change of the annotation value 25858 + can be detected. 25859 + type: string 25860 + lastScanResult: 25861 + description: LastScanResult contains the number of fetched tags. 25862 + properties: 25863 + scanTime: 25864 + format: date-time 25865 + type: string 25866 + tagCount: 25867 + type: integer 25868 + required: 25869 + - tagCount 25870 type: object 25871 - served: true 25872 - storage: false 25873 - subresources: 25874 - status: {} 25875 - - additionalPrinterColumns: 25876 - - jsonPath: .status.lastScanResult.scanTime 25877 - name: Last scan 25878 - type: string 25879 - - jsonPath: .status.lastScanResult.tagCount 25880 - name: Tags 25881 - type: string 25882 - name: v1beta2 25883 - schema: 25884 - openAPIV3Schema: 25885 - description: ImageRepository is the Schema for the imagerepositories API 25886 + observedGeneration: 25887 + description: ObservedGeneration is the last reconciled generation. 25888 + format: int64 25889 + type: integer 25890 + type: object 25891 + type: object 25892 + served: true 25893 + storage: false 25894 + subresources: 25895 + status: {} 25896 + - additionalPrinterColumns: 25897 + - jsonPath: .status.lastScanResult.scanTime 25898 + name: Last scan 25899 + type: string 25900 + - jsonPath: .status.lastScanResult.tagCount 25901 + name: Tags 25902 + type: string 25903 + name: v1beta2 25904 + schema: 25905 + openAPIV3Schema: 25906 + description: ImageRepository is the Schema for the imagerepositories API 25907 + properties: 25908 + apiVersion: 25909 + description: |- 25910 + APIVersion defines the versioned schema of this representation of an object. 25911 + Servers should convert recognized schemas to the latest internal value, and 25912 + may reject unrecognized values. 25913 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25914 + type: string 25915 + kind: 25916 + description: |- 25917 + Kind is a string value representing the REST resource this object represents. 25918 + Servers may infer this from the endpoint the client submits requests to. 25919 + Cannot be updated. 25920 + In CamelCase. 25921 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25922 + type: string 25923 + metadata: 25924 + type: object 25925 + spec: 25926 + description: |- 25927 + ImageRepositorySpec defines the parameters for scanning an image 25928 + repository, e.g., `fluxcd/flux`. 25929 + properties: 25930 + accessFrom: 25931 + description: |- 25932 + AccessFrom defines an ACL for allowing cross-namespace references 25933 + to the ImageRepository object based on the caller's namespace labels. 25934 properties: 25935 - apiVersion: 25936 - description: |- 25937 - APIVersion defines the versioned schema of this representation of an object. 25938 - Servers should convert recognized schemas to the latest internal value, and 25939 - may reject unrecognized values. 25940 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25941 - type: string 25942 - kind: 25943 - description: |- 25944 - Kind is a string value representing the REST resource this object represents. 25945 - Servers may infer this from the endpoint the client submits requests to. 25946 - Cannot be updated. 25947 - In CamelCase. 25948 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25949 - type: string 25950 - metadata: 25951 - type: object 25952 - spec: 25953 - description: |- 25954 - ImageRepositorySpec defines the parameters for scanning an image 25955 - repository, e.g., `fluxcd/flux`. 25956 - properties: 25957 - accessFrom: 25958 - description: |- 25959 - AccessFrom defines an ACL for allowing cross-namespace references 25960 - to the ImageRepository object based on the caller's namespace labels. 25961 - properties: 25962 - namespaceSelectors: 25963 - description: |- 25964 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25965 - Items in this list are evaluated using a logical OR operation. 25966 - items: 25967 - description: |- 25968 - NamespaceSelector selects the namespaces to which this ACL applies. 25969 - An empty map of MatchLabels matches all namespaces in a cluster. 25970 - properties: 25971 - matchLabels: 25972 - additionalProperties: 25973 - type: string 25974 - description: |- 25975 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25976 - map is equivalent to an element of matchExpressions, whose key field is "key", the 25977 - operator is "In", and the values array contains only "value". The requirements are ANDed. 25978 - type: object 25979 - type: object 25980 - type: array 25981 - required: 25982 - - namespaceSelectors 25983 - type: object 25984 - certSecretRef: 25985 - description: |- 25986 - CertSecretRef can be given the name of a Secret containing 25987 - either or both of 25988 + namespaceSelectors: 25989 + description: |- 25990 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25991 + Items in this list are evaluated using a logical OR operation. 25992 + items: 25993 + description: |- 25994 + NamespaceSelector selects the namespaces to which this ACL applies. 25995 + An empty map of MatchLabels matches all namespaces in a cluster. 25996 + properties: 25997 + matchLabels: 25998 + additionalProperties: 25999 + type: string 26000 + description: |- 26001 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 26002 + map is equivalent to an element of matchExpressions, whose key field is "key", the 26003 + operator is "In", and the values array contains only "value". The requirements are ANDed. 26004 + type: object 26005 + type: object 26006 + type: array 26007 + required: 26008 + - namespaceSelectors 26009 + type: object 26010 + certSecretRef: 26011 + description: |- 26012 + CertSecretRef can be given the name of a Secret containing 26013 + either or both of 26014 26015 - - a PEM-encoded client certificate (`tls.crt`) and private 26016 - key (`tls.key`); 26017 - - a PEM-encoded CA certificate (`ca.crt`) 26018 + - a PEM-encoded client certificate (`tls.crt`) and private 26019 + key (`tls.key`); 26020 + - a PEM-encoded CA certificate (`ca.crt`) 26021 26022 - and whichever are supplied, will be used for connecting to the 26023 - registry. The client cert and key are useful if you are 26024 - authenticating with a certificate; the CA cert is useful if 26025 - you are using a self-signed server certificate. The Secret must 26026 - be of type `Opaque` or `kubernetes.io/tls`. 26027 + and whichever are supplied, will be used for connecting to the 26028 + registry. The client cert and key are useful if you are 26029 + authenticating with a certificate; the CA cert is useful if 26030 + you are using a self-signed server certificate. The Secret must 26031 + be of type `Opaque` or `kubernetes.io/tls`. 26032 26033 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 26034 - been deprecated. 26035 - properties: 26036 - name: 26037 - description: Name of the referent. 26038 - type: string 26039 - required: 26040 - - name 26041 - type: object 26042 - exclusionList: 26043 - default: 26044 - - ^.*\.sig$ 26045 - description: |- 26046 - ExclusionList is a list of regex strings used to exclude certain tags 26047 - from being stored in the database. 26048 - items: 26049 - type: string 26050 - maxItems: 25 26051 - type: array 26052 - image: 26053 - description: Image is the name of the image repository 26054 - type: string 26055 - insecure: 26056 - description: Insecure allows connecting to a non-TLS HTTP container registry. 26057 - type: boolean 26058 - interval: 26059 - description: |- 26060 - Interval is the length of time to wait between 26061 - scans of the image repository. 26062 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26063 - type: string 26064 - provider: 26065 - default: generic 26066 - description: |- 26067 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 26068 - When not specified, defaults to 'generic'. 26069 - enum: 26070 - - generic 26071 - - aws 26072 - - azure 26073 - - gcp 26074 - type: string 26075 - proxySecretRef: 26076 - description: |- 26077 - ProxySecretRef specifies the Secret containing the proxy configuration 26078 - to use while communicating with the container registry. 26079 - properties: 26080 - name: 26081 - description: Name of the referent. 26082 - type: string 26083 - required: 26084 - - name 26085 - type: object 26086 - secretRef: 26087 - description: |- 26088 - SecretRef can be given the name of a secret containing 26089 - credentials to use for the image registry. The secret should be 26090 - created with `kubectl create secret docker-registry`, or the 26091 - equivalent. 26092 - properties: 26093 - name: 26094 - description: Name of the referent. 26095 - type: string 26096 - required: 26097 - - name 26098 - type: object 26099 - serviceAccountName: 26100 - description: |- 26101 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 26102 - the image pull if the service account has attached pull secrets. 26103 - maxLength: 253 26104 - type: string 26105 - suspend: 26106 - description: |- 26107 - This flag tells the controller to suspend subsequent image scans. 26108 - It does not apply to already started scans. Defaults to false. 26109 - type: boolean 26110 - timeout: 26111 - description: |- 26112 - Timeout for image scanning. 26113 - Defaults to 'Interval' duration. 26114 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 26115 - type: string 26116 - required: 26117 - - image 26118 - - interval 26119 - type: object 26120 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 26121 + been deprecated. 26122 + properties: 26123 + name: 26124 + description: Name of the referent. 26125 + type: string 26126 + required: 26127 + - name 26128 + type: object 26129 + exclusionList: 26130 + default: 26131 + - ^.*\.sig$ 26132 + description: |- 26133 + ExclusionList is a list of regex strings used to exclude certain tags 26134 + from being stored in the database. 26135 + items: 26136 + type: string 26137 + maxItems: 25 26138 + type: array 26139 + image: 26140 + description: Image is the name of the image repository 26141 + type: string 26142 + insecure: 26143 + description: Insecure allows connecting to a non-TLS HTTP container 26144 + registry. 26145 + type: boolean 26146 + interval: 26147 + description: |- 26148 + Interval is the length of time to wait between 26149 + scans of the image repository. 26150 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26151 + type: string 26152 + provider: 26153 + default: generic 26154 + description: |- 26155 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 26156 + When not specified, defaults to 'generic'. 26157 + enum: 26158 + - generic 26159 + - aws 26160 + - azure 26161 + - gcp 26162 + type: string 26163 + proxySecretRef: 26164 + description: |- 26165 + ProxySecretRef specifies the Secret containing the proxy configuration 26166 + to use while communicating with the container registry. 26167 + properties: 26168 + name: 26169 + description: Name of the referent. 26170 + type: string 26171 + required: 26172 + - name 26173 + type: object 26174 + secretRef: 26175 + description: |- 26176 + SecretRef can be given the name of a secret containing 26177 + credentials to use for the image registry. The secret should be 26178 + created with `kubectl create secret docker-registry`, or the 26179 + equivalent. 26180 + properties: 26181 + name: 26182 + description: Name of the referent. 26183 + type: string 26184 + required: 26185 + - name 26186 + type: object 26187 + serviceAccountName: 26188 + description: |- 26189 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 26190 + the image pull if the service account has attached pull secrets. 26191 + maxLength: 253 26192 + type: string 26193 + suspend: 26194 + description: |- 26195 + This flag tells the controller to suspend subsequent image scans. 26196 + It does not apply to already started scans. Defaults to false. 26197 + type: boolean 26198 + timeout: 26199 + description: |- 26200 + Timeout for image scanning. 26201 + Defaults to 'Interval' duration. 26202 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 26203 + type: string 26204 + required: 26205 + - image 26206 + - interval 26207 + type: object 26208 + status: 26209 + default: 26210 + observedGeneration: -1 26211 + description: ImageRepositoryStatus defines the observed state of ImageRepository 26212 + properties: 26213 + canonicalImageName: 26214 + description: |- 26215 + CanonicalName is the name of the image repository with all the 26216 + implied bits made explicit; e.g., `docker.io/library/alpine` 26217 + rather than `alpine`. 26218 + type: string 26219 + conditions: 26220 + items: 26221 + description: Condition contains details for one aspect of the current 26222 + state of this API Resource. 26223 + properties: 26224 + lastTransitionTime: 26225 + description: |- 26226 + lastTransitionTime is the last time the condition transitioned from one status to another. 26227 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26228 + format: date-time 26229 + type: string 26230 + message: 26231 + description: |- 26232 + message is a human readable message indicating details about the transition. 26233 + This may be an empty string. 26234 + maxLength: 32768 26235 + type: string 26236 + observedGeneration: 26237 + description: |- 26238 + observedGeneration represents the .metadata.generation that the condition was set based upon. 26239 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26240 + with respect to the current state of the instance. 26241 + format: int64 26242 + minimum: 0 26243 + type: integer 26244 + reason: 26245 + description: |- 26246 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 26247 + Producers of specific condition types may define expected values and meanings for this field, 26248 + and whether the values are considered a guaranteed API. 26249 + The value should be a CamelCase string. 26250 + This field may not be empty. 26251 + maxLength: 1024 26252 + minLength: 1 26253 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26254 + type: string 26255 status: 26256 - default: 26257 - observedGeneration: -1 26258 - description: ImageRepositoryStatus defines the observed state of ImageRepository 26259 - properties: 26260 - canonicalImageName: 26261 - description: |- 26262 - CanonicalName is the name of the image repository with all the 26263 - implied bits made explicit; e.g., `docker.io/library/alpine` 26264 - rather than `alpine`. 26265 - type: string 26266 - conditions: 26267 - items: 26268 - description: Condition contains details for one aspect of the current state of this API 26269 - Resource. 26270 - properties: 26271 - lastTransitionTime: 26272 - description: |- 26273 - lastTransitionTime is the last time the condition transitioned from one status to another. 26274 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26275 - format: date-time 26276 - type: string 26277 - message: 26278 - description: |- 26279 - message is a human readable message indicating details about the transition. 26280 - This may be an empty string. 26281 - maxLength: 32768 26282 - type: string 26283 - observedGeneration: 26284 - description: |- 26285 - observedGeneration represents the .metadata.generation that the condition was set based upon. 26286 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26287 - with respect to the current state of the instance. 26288 - format: int64 26289 - minimum: 0 26290 - type: integer 26291 - reason: 26292 - description: |- 26293 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 26294 - Producers of specific condition types may define expected values and meanings for this field, 26295 - and whether the values are considered a guaranteed API. 26296 - The value should be a CamelCase string. 26297 - This field may not be empty. 26298 - maxLength: 1024 26299 - minLength: 1 26300 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26301 - type: string 26302 - status: 26303 - description: status of the condition, one of True, False, Unknown. 26304 - enum: 26305 - - "True" 26306 - - "False" 26307 - - Unknown 26308 - type: string 26309 - type: 26310 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 26311 - maxLength: 316 26312 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26313 - type: string 26314 - required: 26315 - - lastTransitionTime 26316 - - message 26317 - - reason 26318 - - status 26319 - - type 26320 - type: object 26321 - type: array 26322 - lastHandledReconcileAt: 26323 - description: |- 26324 - LastHandledReconcileAt holds the value of the most recent 26325 - reconcile request value, so a change of the annotation value 26326 - can be detected. 26327 - type: string 26328 - lastScanResult: 26329 - description: LastScanResult contains the number of fetched tags. 26330 - properties: 26331 - latestTags: 26332 - items: 26333 - type: string 26334 - type: array 26335 - scanTime: 26336 - format: date-time 26337 - type: string 26338 - tagCount: 26339 - type: integer 26340 - required: 26341 - - tagCount 26342 - type: object 26343 - observedExclusionList: 26344 - description: |- 26345 - ObservedExclusionList is a list of observed exclusion list. It reflects 26346 - the exclusion rules used for the observed scan result in 26347 - spec.lastScanResult. 26348 - items: 26349 - type: string 26350 - type: array 26351 - observedGeneration: 26352 - description: ObservedGeneration is the last reconciled generation. 26353 - format: int64 26354 - type: integer 26355 - type: object 26356 + description: status of the condition, one of True, False, Unknown. 26357 + enum: 26358 + - "True" 26359 + - "False" 26360 + - Unknown 26361 + type: string 26362 + type: 26363 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 26364 + maxLength: 316 26365 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26366 + type: string 26367 + required: 26368 + - lastTransitionTime 26369 + - message 26370 + - reason 26371 + - status 26372 + - type 26373 + type: object 26374 + type: array 26375 + lastHandledReconcileAt: 26376 + description: |- 26377 + LastHandledReconcileAt holds the value of the most recent 26378 + reconcile request value, so a change of the annotation value 26379 + can be detected. 26380 + type: string 26381 + lastScanResult: 26382 + description: LastScanResult contains the number of fetched tags. 26383 + properties: 26384 + latestTags: 26385 + items: 26386 + type: string 26387 + type: array 26388 + scanTime: 26389 + format: date-time 26390 + type: string 26391 + tagCount: 26392 + type: integer 26393 + required: 26394 + - tagCount 26395 type: object 26396 - served: true 26397 - storage: true 26398 - subresources: 26399 - status: {} 26400 + observedExclusionList: 26401 + description: |- 26402 + ObservedExclusionList is a list of observed exclusion list. It reflects 26403 + the exclusion rules used for the observed scan result in 26404 + spec.lastScanResult. 26405 + items: 26406 + type: string 26407 + type: array 26408 + observedGeneration: 26409 + description: ObservedGeneration is the last reconciled generation. 26410 + format: int64 26411 + type: integer 26412 + type: object 26413 + type: object 26414 + served: true 26415 + storage: true 26416 + subresources: 26417 + status: {} 26418 --- 26419 apiVersion: v1 26420 kind: ServiceAccount 26421 metadata: 26422 - labels: 26423 - app.kubernetes.io/component: image-reflector-controller 26424 - app.kubernetes.io/instance: flux-system 26425 - app.kubernetes.io/part-of: flux 26426 - app.kubernetes.io/version: v2.4.0 26427 - name: image-reflector-controller 26428 - namespace: flux-system 26429 + labels: 26430 + app.kubernetes.io/component: image-reflector-controller 26431 + app.kubernetes.io/instance: flux-system 26432 + app.kubernetes.io/part-of: flux 26433 + app.kubernetes.io/version: v2.5.1 26434 + name: image-reflector-controller 26435 + namespace: flux-system 26436 --- 26437 apiVersion: apps/v1 26438 kind: Deployment 26439 metadata: 26440 - labels: 26441 - app.kubernetes.io/component: image-reflector-controller 26442 - app.kubernetes.io/instance: flux-system 26443 - app.kubernetes.io/part-of: flux 26444 - app.kubernetes.io/version: v2.4.0 26445 - control-plane: controller 26446 - name: image-reflector-controller 26447 - namespace: flux-system 26448 + labels: 26449 + app.kubernetes.io/component: image-reflector-controller 26450 + app.kubernetes.io/instance: flux-system 26451 + app.kubernetes.io/part-of: flux 26452 + app.kubernetes.io/version: v2.5.1 26453 + control-plane: controller 26454 + name: image-reflector-controller 26455 + namespace: flux-system 26456 spec: 26457 - replicas: 1 26458 - selector: 26459 - matchLabels: 26460 - app: image-reflector-controller 26461 - template: 26462 - metadata: 26463 - annotations: 26464 - prometheus.io/port: "8080" 26465 - prometheus.io/scrape: "true" 26466 - labels: 26467 - app: image-reflector-controller 26468 - spec: 26469 - containers: 26470 - - args: 26471 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 26472 - - --watch-all-namespaces=true 26473 - - --log-level=info 26474 - - --log-encoding=json 26475 - - --enable-leader-election 26476 - env: 26477 - - name: RUNTIME_NAMESPACE 26478 - valueFrom: 26479 - fieldRef: 26480 - fieldPath: metadata.namespace 26481 - - name: GOMAXPROCS 26482 - valueFrom: 26483 - resourceFieldRef: 26484 - containerName: manager 26485 - resource: limits.cpu 26486 - - name: GOMEMLIMIT 26487 - valueFrom: 26488 - resourceFieldRef: 26489 - containerName: manager 26490 - resource: limits.memory 26491 - image: ghcr.io/fluxcd/image-reflector-controller:v0.33.0 26492 - imagePullPolicy: IfNotPresent 26493 - livenessProbe: 26494 - httpGet: 26495 - path: /healthz 26496 - port: healthz 26497 - name: manager 26498 - ports: 26499 - - containerPort: 8080 26500 - name: http-prom 26501 - protocol: TCP 26502 - - containerPort: 9440 26503 - name: healthz 26504 - protocol: TCP 26505 - readinessProbe: 26506 - httpGet: 26507 - path: /readyz 26508 - port: healthz 26509 - resources: 26510 - limits: 26511 - cpu: 1000m 26512 - memory: 1Gi 26513 - requests: 26514 - cpu: 100m 26515 - memory: 64Mi 26516 - securityContext: 26517 - allowPrivilegeEscalation: false 26518 - capabilities: 26519 - drop: 26520 - - ALL 26521 - readOnlyRootFilesystem: true 26522 - runAsNonRoot: true 26523 - seccompProfile: 26524 - type: RuntimeDefault 26525 - volumeMounts: 26526 - - mountPath: /tmp 26527 - name: temp 26528 - - mountPath: /data 26529 - name: data 26530 - nodeSelector: 26531 - kubernetes.io/os: linux 26532 - securityContext: 26533 - fsGroup: 1337 26534 - serviceAccountName: image-reflector-controller 26535 - terminationGracePeriodSeconds: 10 26536 - volumes: 26537 - - emptyDir: {} 26538 - name: temp 26539 - - emptyDir: {} 26540 - name: data 26541 + replicas: 1 26542 + selector: 26543 + matchLabels: 26544 + app: image-reflector-controller 26545 + template: 26546 + metadata: 26547 + annotations: 26548 + prometheus.io/port: "8080" 26549 + prometheus.io/scrape: "true" 26550 + labels: 26551 + app: image-reflector-controller 26552 + spec: 26553 + containers: 26554 + - args: 26555 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 26556 + - --watch-all-namespaces=true 26557 + - --log-level=info 26558 + - --log-encoding=json 26559 + - --enable-leader-election 26560 + env: 26561 + - name: RUNTIME_NAMESPACE 26562 + valueFrom: 26563 + fieldRef: 26564 + fieldPath: metadata.namespace 26565 + - name: GOMAXPROCS 26566 + valueFrom: 26567 + resourceFieldRef: 26568 + containerName: manager 26569 + resource: limits.cpu 26570 + - name: GOMEMLIMIT 26571 + valueFrom: 26572 + resourceFieldRef: 26573 + containerName: manager 26574 + resource: limits.memory 26575 + image: ghcr.io/fluxcd/image-reflector-controller:v0.34.0 26576 + imagePullPolicy: IfNotPresent 26577 + livenessProbe: 26578 + httpGet: 26579 + path: /healthz 26580 + port: healthz 26581 + name: manager 26582 + ports: 26583 + - containerPort: 8080 26584 + name: http-prom 26585 + protocol: TCP 26586 + - containerPort: 9440 26587 + name: healthz 26588 + protocol: TCP 26589 + readinessProbe: 26590 + httpGet: 26591 + path: /readyz 26592 + port: healthz 26593 + resources: 26594 + limits: 26595 + cpu: 1000m 26596 + memory: 1Gi 26597 + requests: 26598 + cpu: 100m 26599 + memory: 64Mi 26600 + securityContext: 26601 + allowPrivilegeEscalation: false 26602 + capabilities: 26603 + drop: 26604 + - ALL 26605 + readOnlyRootFilesystem: true 26606 + runAsNonRoot: true 26607 + seccompProfile: 26608 + type: RuntimeDefault 26609 + volumeMounts: 26610 + - mountPath: /tmp 26611 + name: temp 26612 + - mountPath: /data 26613 + name: data 26614 + nodeSelector: 26615 + kubernetes.io/os: linux 26616 + securityContext: 26617 + fsGroup: 1337 26618 + serviceAccountName: image-reflector-controller 26619 + terminationGracePeriodSeconds: 10 26620 + volumes: 26621 + - emptyDir: {} 26622 + name: temp 26623 + - emptyDir: {} 26624 + name: data 26625 --- 26626 apiVersion: apiextensions.k8s.io/v1 26627 kind: CustomResourceDefinition 26628 metadata: 26629 - annotations: 26630 - controller-gen.kubebuilder.io/version: v0.16.1 26631 - labels: 26632 - app.kubernetes.io/component: image-automation-controller 26633 - app.kubernetes.io/instance: flux-system 26634 - app.kubernetes.io/part-of: flux 26635 - app.kubernetes.io/version: v2.4.0 26636 - name: imageupdateautomations.image.toolkit.fluxcd.io 26637 + annotations: 26638 + controller-gen.kubebuilder.io/version: v0.16.1 26639 + labels: 26640 + app.kubernetes.io/component: image-automation-controller 26641 + app.kubernetes.io/instance: flux-system 26642 + app.kubernetes.io/part-of: flux 26643 + app.kubernetes.io/version: v2.5.1 26644 + name: imageupdateautomations.image.toolkit.fluxcd.io 26645 spec: 26646 - group: image.toolkit.fluxcd.io 26647 - names: 26648 - kind: ImageUpdateAutomation 26649 - listKind: ImageUpdateAutomationList 26650 - plural: imageupdateautomations 26651 - singular: imageupdateautomation 26652 - scope: Namespaced 26653 - versions: 26654 - - additionalPrinterColumns: 26655 - - jsonPath: .status.lastAutomationRunTime 26656 - name: Last run 26657 - type: string 26658 - deprecated: true 26659 - deprecationWarning: v1beta1 ImageUpdateAutomation is deprecated, upgrade to v1beta2 26660 - name: v1beta1 26661 - schema: 26662 - openAPIV3Schema: 26663 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 26664 + group: image.toolkit.fluxcd.io 26665 + names: 26666 + kind: ImageUpdateAutomation 26667 + listKind: ImageUpdateAutomationList 26668 + plural: imageupdateautomations 26669 + singular: imageupdateautomation 26670 + scope: Namespaced 26671 + versions: 26672 + - additionalPrinterColumns: 26673 + - jsonPath: .status.lastAutomationRunTime 26674 + name: Last run 26675 + type: string 26676 + deprecated: true 26677 + deprecationWarning: v1beta1 ImageUpdateAutomation is deprecated, upgrade to v1beta2 26678 + name: v1beta1 26679 + schema: 26680 + openAPIV3Schema: 26681 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 26682 + API 26683 + properties: 26684 + apiVersion: 26685 + description: |- 26686 + APIVersion defines the versioned schema of this representation of an object. 26687 + Servers should convert recognized schemas to the latest internal value, and 26688 + may reject unrecognized values. 26689 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26690 + type: string 26691 + kind: 26692 + description: |- 26693 + Kind is a string value representing the REST resource this object represents. 26694 + Servers may infer this from the endpoint the client submits requests to. 26695 + Cannot be updated. 26696 + In CamelCase. 26697 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26698 + type: string 26699 + metadata: 26700 + type: object 26701 + spec: 26702 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 26703 + properties: 26704 + git: 26705 + description: |- 26706 + GitSpec contains all the git-specific definitions. This is 26707 + technically optional, but in practice mandatory until there are 26708 + other kinds of source allowed. 26709 properties: 26710 - apiVersion: 26711 - description: |- 26712 - APIVersion defines the versioned schema of this representation of an object. 26713 - Servers should convert recognized schemas to the latest internal value, and 26714 - may reject unrecognized values. 26715 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26716 - type: string 26717 - kind: 26718 + checkout: 26719 + description: |- 26720 + Checkout gives the parameters for cloning the git repository, 26721 + ready to make changes. If not present, the `spec.ref` field from the 26722 + referenced `GitRepository` or its default will be used. 26723 + properties: 26724 + ref: 26725 description: |- 26726 - Kind is a string value representing the REST resource this object represents. 26727 - Servers may infer this from the endpoint the client submits requests to. 26728 - Cannot be updated. 26729 - In CamelCase. 26730 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26731 - type: string 26732 - metadata: 26733 - type: object 26734 - spec: 26735 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 26736 + Reference gives a branch, tag or commit to clone from the Git 26737 + repository. 26738 properties: 26739 - git: 26740 - description: |- 26741 - GitSpec contains all the git-specific definitions. This is 26742 - technically optional, but in practice mandatory until there are 26743 - other kinds of source allowed. 26744 - properties: 26745 - checkout: 26746 - description: |- 26747 - Checkout gives the parameters for cloning the git repository, 26748 - ready to make changes. If not present, the `spec.ref` field from the 26749 - referenced `GitRepository` or its default will be used. 26750 - properties: 26751 - ref: 26752 - description: |- 26753 - Reference gives a branch, tag or commit to clone from the Git 26754 - repository. 26755 - properties: 26756 - branch: 26757 - description: Branch to check out, defaults to 'master' if no other 26758 - field is defined. 26759 - type: string 26760 - commit: 26761 - description: |- 26762 - Commit SHA to check out, takes precedence over all reference fields. 26763 + branch: 26764 + description: Branch to check out, defaults to 'master' 26765 + if no other field is defined. 26766 + type: string 26767 + commit: 26768 + description: |- 26769 + Commit SHA to check out, takes precedence over all reference fields. 26770 26771 - This can be combined with Branch to shallow clone the branch, in which 26772 - the commit is expected to exist. 26773 - type: string 26774 - name: 26775 - description: |- 26776 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 26777 + This can be combined with Branch to shallow clone the branch, in which 26778 + the commit is expected to exist. 26779 + type: string 26780 + name: 26781 + description: |- 26782 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 26783 26784 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 26785 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 26786 - type: string 26787 - semver: 26788 - description: SemVer tag expression to check out, takes precedence 26789 - over Tag. 26790 - type: string 26791 - tag: 26792 - description: Tag to check out, takes precedence over Branch. 26793 - type: string 26794 - type: object 26795 - required: 26796 - - ref 26797 - type: object 26798 - commit: 26799 - description: Commit specifies how to commit to the git repository. 26800 - properties: 26801 - author: 26802 - description: |- 26803 - Author gives the email and optionally the name to use as the 26804 - author of commits. 26805 - properties: 26806 - email: 26807 - description: Email gives the email to provide when making a commit. 26808 - type: string 26809 - name: 26810 - description: Name gives the name to provide when making a commit. 26811 - type: string 26812 - required: 26813 - - email 26814 - type: object 26815 - messageTemplate: 26816 - description: |- 26817 - MessageTemplate provides a template for the commit message, 26818 - into which will be interpolated the details of the change made. 26819 - type: string 26820 - signingKey: 26821 - description: SigningKey provides the option to sign commits with a GPG key 26822 - properties: 26823 - secretRef: 26824 - description: |- 26825 - SecretRef holds the name to a secret that contains a 'git.asc' key 26826 - corresponding to the ASCII Armored file containing the GPG signing 26827 - keypair as the value. It must be in the same namespace as the 26828 - ImageUpdateAutomation. 26829 - properties: 26830 - name: 26831 - description: Name of the referent. 26832 - type: string 26833 - required: 26834 - - name 26835 - type: object 26836 - required: 26837 - - secretRef 26838 - type: object 26839 - required: 26840 - - author 26841 - type: object 26842 - push: 26843 - description: |- 26844 - Push specifies how and where to push commits made by the 26845 - automation. If missing, commits are pushed (back) to 26846 - `.spec.checkout.branch` or its default. 26847 - properties: 26848 - branch: 26849 - description: |- 26850 - Branch specifies that commits should be pushed to the branch 26851 - named. The branch is created using `.spec.checkout.branch` as the 26852 - starting point, if it doesn't already exist. 26853 - type: string 26854 - options: 26855 - additionalProperties: 26856 - type: string 26857 - description: |- 26858 - Options specifies the push options that are sent to the Git 26859 - server when performing a push operation. For details, see: 26860 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 26861 - type: object 26862 - refspec: 26863 - description: |- 26864 - Refspec specifies the Git Refspec to use for a push operation. 26865 - If both Branch and Refspec are provided, then the commit is pushed 26866 - to the branch and also using the specified refspec. 26867 - For more details about Git Refspecs, see: 26868 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 26869 - type: string 26870 - type: object 26871 - required: 26872 - - commit 26873 - type: object 26874 - interval: 26875 - description: |- 26876 - Interval gives an lower bound for how often the automation 26877 - run should be attempted. 26878 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26879 - type: string 26880 - sourceRef: 26881 - description: |- 26882 - SourceRef refers to the resource giving access details 26883 - to a git repository. 26884 - properties: 26885 - apiVersion: 26886 - description: API version of the referent. 26887 - type: string 26888 - kind: 26889 - default: GitRepository 26890 - description: Kind of the referent. 26891 - enum: 26892 - - GitRepository 26893 - type: string 26894 - name: 26895 - description: Name of the referent. 26896 - type: string 26897 - namespace: 26898 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 26899 - resource object that contains the reference. 26900 - type: string 26901 - required: 26902 - - kind 26903 - - name 26904 - type: object 26905 - suspend: 26906 - description: |- 26907 - Suspend tells the controller to not run this automation, until 26908 - it is unset (or set to false). Defaults to false. 26909 - type: boolean 26910 - update: 26911 - default: 26912 - strategy: Setters 26913 - description: |- 26914 - Update gives the specification for how to update the files in 26915 - the repository. This can be left empty, to use the default 26916 - value. 26917 - properties: 26918 - path: 26919 - description: |- 26920 - Path to the directory containing the manifests to be updated. 26921 - Defaults to 'None', which translates to the root path 26922 - of the GitRepositoryRef. 26923 - type: string 26924 - strategy: 26925 - default: Setters 26926 - description: Strategy names the strategy to be used. 26927 - enum: 26928 - - Setters 26929 - type: string 26930 - required: 26931 - - strategy 26932 - type: object 26933 - required: 26934 - - interval 26935 - - sourceRef 26936 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 26937 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 26938 + type: string 26939 + semver: 26940 + description: SemVer tag expression to check out, takes 26941 + precedence over Tag. 26942 + type: string 26943 + tag: 26944 + description: Tag to check out, takes precedence over Branch. 26945 + type: string 26946 type: object 26947 - status: 26948 - default: 26949 - observedGeneration: -1 26950 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 26951 + required: 26952 + - ref 26953 + type: object 26954 + commit: 26955 + description: Commit specifies how to commit to the git repository. 26956 + properties: 26957 + author: 26958 + description: |- 26959 + Author gives the email and optionally the name to use as the 26960 + author of commits. 26961 properties: 26962 - conditions: 26963 - items: 26964 - description: Condition contains details for one aspect of the current state of this API 26965 - Resource. 26966 - properties: 26967 - lastTransitionTime: 26968 - description: |- 26969 - lastTransitionTime is the last time the condition transitioned from one status to another. 26970 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26971 - format: date-time 26972 - type: string 26973 - message: 26974 - description: |- 26975 - message is a human readable message indicating details about the transition. 26976 - This may be an empty string. 26977 - maxLength: 32768 26978 - type: string 26979 - observedGeneration: 26980 - description: |- 26981 - observedGeneration represents the .metadata.generation that the condition was set based upon. 26982 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26983 - with respect to the current state of the instance. 26984 - format: int64 26985 - minimum: 0 26986 - type: integer 26987 - reason: 26988 - description: |- 26989 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 26990 - Producers of specific condition types may define expected values and meanings for this field, 26991 - and whether the values are considered a guaranteed API. 26992 - The value should be a CamelCase string. 26993 - This field may not be empty. 26994 - maxLength: 1024 26995 - minLength: 1 26996 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26997 - type: string 26998 - status: 26999 - description: status of the condition, one of True, False, Unknown. 27000 - enum: 27001 - - "True" 27002 - - "False" 27003 - - Unknown 27004 - type: string 27005 - type: 27006 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 27007 - maxLength: 316 27008 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27009 - type: string 27010 - required: 27011 - - lastTransitionTime 27012 - - message 27013 - - reason 27014 - - status 27015 - - type 27016 - type: object 27017 - type: array 27018 - lastAutomationRunTime: 27019 - description: |- 27020 - LastAutomationRunTime records the last time the controller ran 27021 - this automation through to completion (even if no updates were 27022 - made). 27023 - format: date-time 27024 - type: string 27025 - lastHandledReconcileAt: 27026 - description: |- 27027 - LastHandledReconcileAt holds the value of the most recent 27028 - reconcile request value, so a change of the annotation value 27029 - can be detected. 27030 - type: string 27031 - lastPushCommit: 27032 - description: |- 27033 - LastPushCommit records the SHA1 of the last commit made by the 27034 - controller, for this automation object 27035 - type: string 27036 - lastPushTime: 27037 - description: LastPushTime records the time of the last pushed change. 27038 - format: date-time 27039 - type: string 27040 - observedGeneration: 27041 - format: int64 27042 - type: integer 27043 + email: 27044 + description: Email gives the email to provide when making 27045 + a commit. 27046 + type: string 27047 + name: 27048 + description: Name gives the name to provide when making 27049 + a commit. 27050 + type: string 27051 + required: 27052 + - email 27053 type: object 27054 - type: object 27055 - served: true 27056 - storage: false 27057 - subresources: 27058 - status: {} 27059 - - additionalPrinterColumns: 27060 - - jsonPath: .status.lastAutomationRunTime 27061 - name: Last run 27062 - type: string 27063 - name: v1beta2 27064 - schema: 27065 - openAPIV3Schema: 27066 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 27067 - properties: 27068 - apiVersion: 27069 + messageTemplate: 27070 description: |- 27071 - APIVersion defines the versioned schema of this representation of an object. 27072 - Servers should convert recognized schemas to the latest internal value, and 27073 - may reject unrecognized values. 27074 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27075 + MessageTemplate provides a template for the commit message, 27076 + into which will be interpolated the details of the change made. 27077 type: string 27078 - kind: 27079 + signingKey: 27080 + description: SigningKey provides the option to sign commits 27081 + with a GPG key 27082 + properties: 27083 + secretRef: 27084 + description: |- 27085 + SecretRef holds the name to a secret that contains a 'git.asc' key 27086 + corresponding to the ASCII Armored file containing the GPG signing 27087 + keypair as the value. It must be in the same namespace as the 27088 + ImageUpdateAutomation. 27089 + properties: 27090 + name: 27091 + description: Name of the referent. 27092 + type: string 27093 + required: 27094 + - name 27095 + type: object 27096 + required: 27097 + - secretRef 27098 + type: object 27099 + required: 27100 + - author 27101 + type: object 27102 + push: 27103 + description: |- 27104 + Push specifies how and where to push commits made by the 27105 + automation. If missing, commits are pushed (back) to 27106 + `.spec.checkout.branch` or its default. 27107 + properties: 27108 + branch: 27109 description: |- 27110 - Kind is a string value representing the REST resource this object represents. 27111 - Servers may infer this from the endpoint the client submits requests to. 27112 - Cannot be updated. 27113 - In CamelCase. 27114 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27115 + Branch specifies that commits should be pushed to the branch 27116 + named. The branch is created using `.spec.checkout.branch` as the 27117 + starting point, if it doesn't already exist. 27118 type: string 27119 - metadata: 27120 + options: 27121 + additionalProperties: 27122 + type: string 27123 + description: |- 27124 + Options specifies the push options that are sent to the Git 27125 + server when performing a push operation. For details, see: 27126 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27127 type: object 27128 - spec: 27129 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27130 + refspec: 27131 + description: |- 27132 + Refspec specifies the Git Refspec to use for a push operation. 27133 + If both Branch and Refspec are provided, then the commit is pushed 27134 + to the branch and also using the specified refspec. 27135 + For more details about Git Refspecs, see: 27136 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27137 + type: string 27138 + type: object 27139 + required: 27140 + - commit 27141 + type: object 27142 + interval: 27143 + description: |- 27144 + Interval gives an lower bound for how often the automation 27145 + run should be attempted. 27146 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27147 + type: string 27148 + sourceRef: 27149 + description: |- 27150 + SourceRef refers to the resource giving access details 27151 + to a git repository. 27152 + properties: 27153 + apiVersion: 27154 + description: API version of the referent. 27155 + type: string 27156 + kind: 27157 + default: GitRepository 27158 + description: Kind of the referent. 27159 + enum: 27160 + - GitRepository 27161 + type: string 27162 + name: 27163 + description: Name of the referent. 27164 + type: string 27165 + namespace: 27166 + description: Namespace of the referent, defaults to the namespace 27167 + of the Kubernetes resource object that contains the reference. 27168 + type: string 27169 + required: 27170 + - kind 27171 + - name 27172 + type: object 27173 + suspend: 27174 + description: |- 27175 + Suspend tells the controller to not run this automation, until 27176 + it is unset (or set to false). Defaults to false. 27177 + type: boolean 27178 + update: 27179 + default: 27180 + strategy: Setters 27181 + description: |- 27182 + Update gives the specification for how to update the files in 27183 + the repository. This can be left empty, to use the default 27184 + value. 27185 + properties: 27186 + path: 27187 + description: |- 27188 + Path to the directory containing the manifests to be updated. 27189 + Defaults to 'None', which translates to the root path 27190 + of the GitRepositoryRef. 27191 + type: string 27192 + strategy: 27193 + default: Setters 27194 + description: Strategy names the strategy to be used. 27195 + enum: 27196 + - Setters 27197 + type: string 27198 + required: 27199 + - strategy 27200 + type: object 27201 + required: 27202 + - interval 27203 + - sourceRef 27204 + type: object 27205 + status: 27206 + default: 27207 + observedGeneration: -1 27208 + description: ImageUpdateAutomationStatus defines the observed state of 27209 + ImageUpdateAutomation 27210 + properties: 27211 + conditions: 27212 + items: 27213 + description: Condition contains details for one aspect of the current 27214 + state of this API Resource. 27215 + properties: 27216 + lastTransitionTime: 27217 + description: |- 27218 + lastTransitionTime is the last time the condition transitioned from one status to another. 27219 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27220 + format: date-time 27221 + type: string 27222 + message: 27223 + description: |- 27224 + message is a human readable message indicating details about the transition. 27225 + This may be an empty string. 27226 + maxLength: 32768 27227 + type: string 27228 + observedGeneration: 27229 + description: |- 27230 + observedGeneration represents the .metadata.generation that the condition was set based upon. 27231 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27232 + with respect to the current state of the instance. 27233 + format: int64 27234 + minimum: 0 27235 + type: integer 27236 + reason: 27237 + description: |- 27238 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 27239 + Producers of specific condition types may define expected values and meanings for this field, 27240 + and whether the values are considered a guaranteed API. 27241 + The value should be a CamelCase string. 27242 + This field may not be empty. 27243 + maxLength: 1024 27244 + minLength: 1 27245 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27246 + type: string 27247 + status: 27248 + description: status of the condition, one of True, False, Unknown. 27249 + enum: 27250 + - "True" 27251 + - "False" 27252 + - Unknown 27253 + type: string 27254 + type: 27255 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 27256 + maxLength: 316 27257 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27258 + type: string 27259 + required: 27260 + - lastTransitionTime 27261 + - message 27262 + - reason 27263 + - status 27264 + - type 27265 + type: object 27266 + type: array 27267 + lastAutomationRunTime: 27268 + description: |- 27269 + LastAutomationRunTime records the last time the controller ran 27270 + this automation through to completion (even if no updates were 27271 + made). 27272 + format: date-time 27273 + type: string 27274 + lastHandledReconcileAt: 27275 + description: |- 27276 + LastHandledReconcileAt holds the value of the most recent 27277 + reconcile request value, so a change of the annotation value 27278 + can be detected. 27279 + type: string 27280 + lastPushCommit: 27281 + description: |- 27282 + LastPushCommit records the SHA1 of the last commit made by the 27283 + controller, for this automation object 27284 + type: string 27285 + lastPushTime: 27286 + description: LastPushTime records the time of the last pushed change. 27287 + format: date-time 27288 + type: string 27289 + observedGeneration: 27290 + format: int64 27291 + type: integer 27292 + type: object 27293 + type: object 27294 + served: true 27295 + storage: false 27296 + subresources: 27297 + status: {} 27298 + - additionalPrinterColumns: 27299 + - jsonPath: .status.lastAutomationRunTime 27300 + name: Last run 27301 + type: string 27302 + name: v1beta2 27303 + schema: 27304 + openAPIV3Schema: 27305 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 27306 + API 27307 + properties: 27308 + apiVersion: 27309 + description: |- 27310 + APIVersion defines the versioned schema of this representation of an object. 27311 + Servers should convert recognized schemas to the latest internal value, and 27312 + may reject unrecognized values. 27313 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27314 + type: string 27315 + kind: 27316 + description: |- 27317 + Kind is a string value representing the REST resource this object represents. 27318 + Servers may infer this from the endpoint the client submits requests to. 27319 + Cannot be updated. 27320 + In CamelCase. 27321 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27322 + type: string 27323 + metadata: 27324 + type: object 27325 + spec: 27326 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27327 + properties: 27328 + git: 27329 + description: |- 27330 + GitSpec contains all the git-specific definitions. This is 27331 + technically optional, but in practice mandatory until there are 27332 + other kinds of source allowed. 27333 + properties: 27334 + checkout: 27335 + description: |- 27336 + Checkout gives the parameters for cloning the git repository, 27337 + ready to make changes. If not present, the `spec.ref` field from the 27338 + referenced `GitRepository` or its default will be used. 27339 + properties: 27340 + ref: 27341 + description: |- 27342 + Reference gives a branch, tag or commit to clone from the Git 27343 + repository. 27344 properties: 27345 - git: 27346 - description: |- 27347 - GitSpec contains all the git-specific definitions. This is 27348 - technically optional, but in practice mandatory until there are 27349 - other kinds of source allowed. 27350 - properties: 27351 - checkout: 27352 - description: |- 27353 - Checkout gives the parameters for cloning the git repository, 27354 - ready to make changes. If not present, the `spec.ref` field from the 27355 - referenced `GitRepository` or its default will be used. 27356 - properties: 27357 - ref: 27358 - description: |- 27359 - Reference gives a branch, tag or commit to clone from the Git 27360 - repository. 27361 - properties: 27362 - branch: 27363 - description: Branch to check out, defaults to 'master' if no other 27364 - field is defined. 27365 - type: string 27366 - commit: 27367 - description: |- 27368 - Commit SHA to check out, takes precedence over all reference fields. 27369 + branch: 27370 + description: Branch to check out, defaults to 'master' 27371 + if no other field is defined. 27372 + type: string 27373 + commit: 27374 + description: |- 27375 + Commit SHA to check out, takes precedence over all reference fields. 27376 27377 - This can be combined with Branch to shallow clone the branch, in which 27378 - the commit is expected to exist. 27379 - type: string 27380 - name: 27381 - description: |- 27382 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 27383 + This can be combined with Branch to shallow clone the branch, in which 27384 + the commit is expected to exist. 27385 + type: string 27386 + name: 27387 + description: |- 27388 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 27389 27390 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 27391 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 27392 - type: string 27393 - semver: 27394 - description: SemVer tag expression to check out, takes precedence 27395 - over Tag. 27396 - type: string 27397 - tag: 27398 - description: Tag to check out, takes precedence over Branch. 27399 - type: string 27400 - type: object 27401 - required: 27402 - - ref 27403 - type: object 27404 - commit: 27405 - description: Commit specifies how to commit to the git repository. 27406 - properties: 27407 - author: 27408 - description: |- 27409 - Author gives the email and optionally the name to use as the 27410 - author of commits. 27411 - properties: 27412 - email: 27413 - description: Email gives the email to provide when making a commit. 27414 - type: string 27415 - name: 27416 - description: Name gives the name to provide when making a commit. 27417 - type: string 27418 - required: 27419 - - email 27420 - type: object 27421 - messageTemplate: 27422 - description: |- 27423 - MessageTemplate provides a template for the commit message, 27424 - into which will be interpolated the details of the change made. 27425 - type: string 27426 - signingKey: 27427 - description: SigningKey provides the option to sign commits with a GPG key 27428 - properties: 27429 - secretRef: 27430 - description: |- 27431 - SecretRef holds the name to a secret that contains a 'git.asc' key 27432 - corresponding to the ASCII Armored file containing the GPG signing 27433 - keypair as the value. It must be in the same namespace as the 27434 - ImageUpdateAutomation. 27435 - properties: 27436 - name: 27437 - description: Name of the referent. 27438 - type: string 27439 - required: 27440 - - name 27441 - type: object 27442 - required: 27443 - - secretRef 27444 - type: object 27445 - required: 27446 - - author 27447 - type: object 27448 - push: 27449 - description: |- 27450 - Push specifies how and where to push commits made by the 27451 - automation. If missing, commits are pushed (back) to 27452 - `.spec.checkout.branch` or its default. 27453 - properties: 27454 - branch: 27455 - description: |- 27456 - Branch specifies that commits should be pushed to the branch 27457 - named. The branch is created using `.spec.checkout.branch` as the 27458 - starting point, if it doesn't already exist. 27459 - type: string 27460 - options: 27461 - additionalProperties: 27462 - type: string 27463 - description: |- 27464 - Options specifies the push options that are sent to the Git 27465 - server when performing a push operation. For details, see: 27466 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27467 - type: object 27468 - refspec: 27469 - description: |- 27470 - Refspec specifies the Git Refspec to use for a push operation. 27471 - If both Branch and Refspec are provided, then the commit is pushed 27472 - to the branch and also using the specified refspec. 27473 - For more details about Git Refspecs, see: 27474 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27475 - type: string 27476 - type: object 27477 - required: 27478 - - commit 27479 - type: object 27480 - interval: 27481 - description: |- 27482 - Interval gives an lower bound for how often the automation 27483 - run should be attempted. 27484 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27485 - type: string 27486 - policySelector: 27487 - description: |- 27488 - PolicySelector allows to filter applied policies based on labels. 27489 - By default includes all policies in namespace. 27490 - properties: 27491 - matchExpressions: 27492 - description: matchExpressions is a list of label selector requirements. The requirements 27493 - are ANDed. 27494 - items: 27495 - description: |- 27496 - A label selector requirement is a selector that contains values, a key, and an operator that 27497 - relates the key and values. 27498 - properties: 27499 - key: 27500 - description: key is the label key that the selector applies to. 27501 - type: string 27502 - operator: 27503 - description: |- 27504 - operator represents a key's relationship to a set of values. 27505 - Valid operators are In, NotIn, Exists and DoesNotExist. 27506 - type: string 27507 - values: 27508 - description: |- 27509 - values is an array of string values. If the operator is In or NotIn, 27510 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 27511 - the values array must be empty. This array is replaced during a strategic 27512 - merge patch. 27513 - items: 27514 - type: string 27515 - type: array 27516 - x-kubernetes-list-type: atomic 27517 - required: 27518 - - key 27519 - - operator 27520 - type: object 27521 - type: array 27522 - x-kubernetes-list-type: atomic 27523 - matchLabels: 27524 - additionalProperties: 27525 - type: string 27526 - description: |- 27527 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 27528 - map is equivalent to an element of matchExpressions, whose key field is "key", the 27529 - operator is "In", and the values array contains only "value". The requirements are ANDed. 27530 - type: object 27531 - type: object 27532 - x-kubernetes-map-type: atomic 27533 - sourceRef: 27534 - description: |- 27535 - SourceRef refers to the resource giving access details 27536 - to a git repository. 27537 - properties: 27538 - apiVersion: 27539 - description: API version of the referent. 27540 - type: string 27541 - kind: 27542 - default: GitRepository 27543 - description: Kind of the referent. 27544 - enum: 27545 - - GitRepository 27546 - type: string 27547 - name: 27548 - description: Name of the referent. 27549 - type: string 27550 - namespace: 27551 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 27552 - resource object that contains the reference. 27553 - type: string 27554 - required: 27555 - - kind 27556 - - name 27557 - type: object 27558 - suspend: 27559 - description: |- 27560 - Suspend tells the controller to not run this automation, until 27561 - it is unset (or set to false). Defaults to false. 27562 - type: boolean 27563 - update: 27564 - default: 27565 - strategy: Setters 27566 - description: |- 27567 - Update gives the specification for how to update the files in 27568 - the repository. This can be left empty, to use the default 27569 - value. 27570 - properties: 27571 - path: 27572 - description: |- 27573 - Path to the directory containing the manifests to be updated. 27574 - Defaults to 'None', which translates to the root path 27575 - of the GitRepositoryRef. 27576 - type: string 27577 - strategy: 27578 - default: Setters 27579 - description: Strategy names the strategy to be used. 27580 - enum: 27581 - - Setters 27582 - type: string 27583 - required: 27584 - - strategy 27585 - type: object 27586 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 27587 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 27588 + type: string 27589 + semver: 27590 + description: SemVer tag expression to check out, takes 27591 + precedence over Tag. 27592 + type: string 27593 + tag: 27594 + description: Tag to check out, takes precedence over Branch. 27595 + type: string 27596 + type: object 27597 + required: 27598 + - ref 27599 + type: object 27600 + commit: 27601 + description: Commit specifies how to commit to the git repository. 27602 + properties: 27603 + author: 27604 + description: |- 27605 + Author gives the email and optionally the name to use as the 27606 + author of commits. 27607 + properties: 27608 + email: 27609 + description: Email gives the email to provide when making 27610 + a commit. 27611 + type: string 27612 + name: 27613 + description: Name gives the name to provide when making 27614 + a commit. 27615 + type: string 27616 required: 27617 - - interval 27618 - - sourceRef 27619 + - email 27620 type: object 27621 - status: 27622 - default: 27623 - observedGeneration: -1 27624 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 27625 + messageTemplate: 27626 + description: |- 27627 + MessageTemplate provides a template for the commit message, 27628 + into which will be interpolated the details of the change made. 27629 + type: string 27630 + messageTemplateValues: 27631 + additionalProperties: 27632 + type: string 27633 + description: |- 27634 + MessageTemplateValues provides additional values to be available to the 27635 + templating rendering. 27636 + type: object 27637 + signingKey: 27638 + description: SigningKey provides the option to sign commits 27639 + with a GPG key 27640 properties: 27641 - conditions: 27642 - items: 27643 - description: Condition contains details for one aspect of the current state of this API 27644 - Resource. 27645 - properties: 27646 - lastTransitionTime: 27647 - description: |- 27648 - lastTransitionTime is the last time the condition transitioned from one status to another. 27649 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27650 - format: date-time 27651 - type: string 27652 - message: 27653 - description: |- 27654 - message is a human readable message indicating details about the transition. 27655 - This may be an empty string. 27656 - maxLength: 32768 27657 - type: string 27658 - observedGeneration: 27659 - description: |- 27660 - observedGeneration represents the .metadata.generation that the condition was set based upon. 27661 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27662 - with respect to the current state of the instance. 27663 - format: int64 27664 - minimum: 0 27665 - type: integer 27666 - reason: 27667 - description: |- 27668 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 27669 - Producers of specific condition types may define expected values and meanings for this field, 27670 - and whether the values are considered a guaranteed API. 27671 - The value should be a CamelCase string. 27672 - This field may not be empty. 27673 - maxLength: 1024 27674 - minLength: 1 27675 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27676 - type: string 27677 - status: 27678 - description: status of the condition, one of True, False, Unknown. 27679 - enum: 27680 - - "True" 27681 - - "False" 27682 - - Unknown 27683 - type: string 27684 - type: 27685 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 27686 - maxLength: 316 27687 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27688 - type: string 27689 - required: 27690 - - lastTransitionTime 27691 - - message 27692 - - reason 27693 - - status 27694 - - type 27695 - type: object 27696 - type: array 27697 - lastAutomationRunTime: 27698 - description: |- 27699 - LastAutomationRunTime records the last time the controller ran 27700 - this automation through to completion (even if no updates were 27701 - made). 27702 - format: date-time 27703 - type: string 27704 - lastHandledReconcileAt: 27705 - description: |- 27706 - LastHandledReconcileAt holds the value of the most recent 27707 - reconcile request value, so a change of the annotation value 27708 - can be detected. 27709 - type: string 27710 - lastPushCommit: 27711 - description: |- 27712 - LastPushCommit records the SHA1 of the last commit made by the 27713 - controller, for this automation object 27714 - type: string 27715 - lastPushTime: 27716 - description: LastPushTime records the time of the last pushed change. 27717 - format: date-time 27718 - type: string 27719 - observedGeneration: 27720 - format: int64 27721 - type: integer 27722 - observedPolicies: 27723 - additionalProperties: 27724 - description: ImageRef represents an image reference. 27725 - properties: 27726 - name: 27727 - description: Name is the bare image's name. 27728 - type: string 27729 - tag: 27730 - description: Tag is the image's tag. 27731 - type: string 27732 - required: 27733 - - name 27734 - - tag 27735 - type: object 27736 - description: |- 27737 - ObservedPolicies is the list of observed ImagePolicies that were 27738 - considered by the ImageUpdateAutomation update process. 27739 - type: object 27740 - observedSourceRevision: 27741 - description: |- 27742 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 27743 - ObservedSourceRevision is the last observed source revision. This can be 27744 - used to determine if the source has been updated since last observation. 27745 - type: string 27746 + secretRef: 27747 + description: |- 27748 + SecretRef holds the name to a secret that contains a 'git.asc' key 27749 + corresponding to the ASCII Armored file containing the GPG signing 27750 + keypair as the value. It must be in the same namespace as the 27751 + ImageUpdateAutomation. 27752 + properties: 27753 + name: 27754 + description: Name of the referent. 27755 + type: string 27756 + required: 27757 + - name 27758 + type: object 27759 + required: 27760 + - secretRef 27761 type: object 27762 + required: 27763 + - author 27764 + type: object 27765 + push: 27766 + description: |- 27767 + Push specifies how and where to push commits made by the 27768 + automation. If missing, commits are pushed (back) to 27769 + `.spec.checkout.branch` or its default. 27770 + properties: 27771 + branch: 27772 + description: |- 27773 + Branch specifies that commits should be pushed to the branch 27774 + named. The branch is created using `.spec.checkout.branch` as the 27775 + starting point, if it doesn't already exist. 27776 + type: string 27777 + options: 27778 + additionalProperties: 27779 + type: string 27780 + description: |- 27781 + Options specifies the push options that are sent to the Git 27782 + server when performing a push operation. For details, see: 27783 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27784 + type: object 27785 + refspec: 27786 + description: |- 27787 + Refspec specifies the Git Refspec to use for a push operation. 27788 + If both Branch and Refspec are provided, then the commit is pushed 27789 + to the branch and also using the specified refspec. 27790 + For more details about Git Refspecs, see: 27791 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27792 + type: string 27793 + type: object 27794 + required: 27795 + - commit 27796 + type: object 27797 + interval: 27798 + description: |- 27799 + Interval gives an lower bound for how often the automation 27800 + run should be attempted. 27801 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27802 + type: string 27803 + policySelector: 27804 + description: |- 27805 + PolicySelector allows to filter applied policies based on labels. 27806 + By default includes all policies in namespace. 27807 + properties: 27808 + matchExpressions: 27809 + description: matchExpressions is a list of label selector requirements. 27810 + The requirements are ANDed. 27811 + items: 27812 + description: |- 27813 + A label selector requirement is a selector that contains values, a key, and an operator that 27814 + relates the key and values. 27815 + properties: 27816 + key: 27817 + description: key is the label key that the selector applies 27818 + to. 27819 + type: string 27820 + operator: 27821 + description: |- 27822 + operator represents a key's relationship to a set of values. 27823 + Valid operators are In, NotIn, Exists and DoesNotExist. 27824 + type: string 27825 + values: 27826 + description: |- 27827 + values is an array of string values. If the operator is In or NotIn, 27828 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 27829 + the values array must be empty. This array is replaced during a strategic 27830 + merge patch. 27831 + items: 27832 + type: string 27833 + type: array 27834 + x-kubernetes-list-type: atomic 27835 + required: 27836 + - key 27837 + - operator 27838 + type: object 27839 + type: array 27840 + x-kubernetes-list-type: atomic 27841 + matchLabels: 27842 + additionalProperties: 27843 + type: string 27844 + description: |- 27845 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 27846 + map is equivalent to an element of matchExpressions, whose key field is "key", the 27847 + operator is "In", and the values array contains only "value". The requirements are ANDed. 27848 + type: object 27849 type: object 27850 - served: true 27851 - storage: true 27852 - subresources: 27853 - status: {} 27854 + x-kubernetes-map-type: atomic 27855 + sourceRef: 27856 + description: |- 27857 + SourceRef refers to the resource giving access details 27858 + to a git repository. 27859 + properties: 27860 + apiVersion: 27861 + description: API version of the referent. 27862 + type: string 27863 + kind: 27864 + default: GitRepository 27865 + description: Kind of the referent. 27866 + enum: 27867 + - GitRepository 27868 + type: string 27869 + name: 27870 + description: Name of the referent. 27871 + type: string 27872 + namespace: 27873 + description: Namespace of the referent, defaults to the namespace 27874 + of the Kubernetes resource object that contains the reference. 27875 + type: string 27876 + required: 27877 + - kind 27878 + - name 27879 + type: object 27880 + suspend: 27881 + description: |- 27882 + Suspend tells the controller to not run this automation, until 27883 + it is unset (or set to false). Defaults to false. 27884 + type: boolean 27885 + update: 27886 + default: 27887 + strategy: Setters 27888 + description: |- 27889 + Update gives the specification for how to update the files in 27890 + the repository. This can be left empty, to use the default 27891 + value. 27892 + properties: 27893 + path: 27894 + description: |- 27895 + Path to the directory containing the manifests to be updated. 27896 + Defaults to 'None', which translates to the root path 27897 + of the GitRepositoryRef. 27898 + type: string 27899 + strategy: 27900 + default: Setters 27901 + description: Strategy names the strategy to be used. 27902 + enum: 27903 + - Setters 27904 + type: string 27905 + required: 27906 + - strategy 27907 + type: object 27908 + required: 27909 + - interval 27910 + - sourceRef 27911 + type: object 27912 + status: 27913 + default: 27914 + observedGeneration: -1 27915 + description: ImageUpdateAutomationStatus defines the observed state of 27916 + ImageUpdateAutomation 27917 + properties: 27918 + conditions: 27919 + items: 27920 + description: Condition contains details for one aspect of the current 27921 + state of this API Resource. 27922 + properties: 27923 + lastTransitionTime: 27924 + description: |- 27925 + lastTransitionTime is the last time the condition transitioned from one status to another. 27926 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27927 + format: date-time 27928 + type: string 27929 + message: 27930 + description: |- 27931 + message is a human readable message indicating details about the transition. 27932 + This may be an empty string. 27933 + maxLength: 32768 27934 + type: string 27935 + observedGeneration: 27936 + description: |- 27937 + observedGeneration represents the .metadata.generation that the condition was set based upon. 27938 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27939 + with respect to the current state of the instance. 27940 + format: int64 27941 + minimum: 0 27942 + type: integer 27943 + reason: 27944 + description: |- 27945 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 27946 + Producers of specific condition types may define expected values and meanings for this field, 27947 + and whether the values are considered a guaranteed API. 27948 + The value should be a CamelCase string. 27949 + This field may not be empty. 27950 + maxLength: 1024 27951 + minLength: 1 27952 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27953 + type: string 27954 + status: 27955 + description: status of the condition, one of True, False, Unknown. 27956 + enum: 27957 + - "True" 27958 + - "False" 27959 + - Unknown 27960 + type: string 27961 + type: 27962 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 27963 + maxLength: 316 27964 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27965 + type: string 27966 + required: 27967 + - lastTransitionTime 27968 + - message 27969 + - reason 27970 + - status 27971 + - type 27972 + type: object 27973 + type: array 27974 + lastAutomationRunTime: 27975 + description: |- 27976 + LastAutomationRunTime records the last time the controller ran 27977 + this automation through to completion (even if no updates were 27978 + made). 27979 + format: date-time 27980 + type: string 27981 + lastHandledReconcileAt: 27982 + description: |- 27983 + LastHandledReconcileAt holds the value of the most recent 27984 + reconcile request value, so a change of the annotation value 27985 + can be detected. 27986 + type: string 27987 + lastPushCommit: 27988 + description: |- 27989 + LastPushCommit records the SHA1 of the last commit made by the 27990 + controller, for this automation object 27991 + type: string 27992 + lastPushTime: 27993 + description: LastPushTime records the time of the last pushed change. 27994 + format: date-time 27995 + type: string 27996 + observedGeneration: 27997 + format: int64 27998 + type: integer 27999 + observedPolicies: 28000 + additionalProperties: 28001 + description: ImageRef represents an image reference. 28002 + properties: 28003 + name: 28004 + description: Name is the bare image's name. 28005 + type: string 28006 + tag: 28007 + description: Tag is the image's tag. 28008 + type: string 28009 + required: 28010 + - name 28011 + - tag 28012 + type: object 28013 + description: |- 28014 + ObservedPolicies is the list of observed ImagePolicies that were 28015 + considered by the ImageUpdateAutomation update process. 28016 + type: object 28017 + observedSourceRevision: 28018 + description: |- 28019 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 28020 + ObservedSourceRevision is the last observed source revision. This can be 28021 + used to determine if the source has been updated since last observation. 28022 + type: string 28023 + type: object 28024 + type: object 28025 + served: true 28026 + storage: true 28027 + subresources: 28028 + status: {} 28029 --- 28030 apiVersion: v1 28031 kind: ServiceAccount 28032 metadata: 28033 - labels: 28034 - app.kubernetes.io/component: image-automation-controller 28035 - app.kubernetes.io/instance: flux-system 28036 - app.kubernetes.io/part-of: flux 28037 - app.kubernetes.io/version: v2.4.0 28038 - name: image-automation-controller 28039 - namespace: flux-system 28040 + labels: 28041 + app.kubernetes.io/component: image-automation-controller 28042 + app.kubernetes.io/instance: flux-system 28043 + app.kubernetes.io/part-of: flux 28044 + app.kubernetes.io/version: v2.5.1 28045 + name: image-automation-controller 28046 + namespace: flux-system 28047 --- 28048 apiVersion: apps/v1 28049 kind: Deployment 28050 metadata: 28051 - labels: 28052 - app.kubernetes.io/component: image-automation-controller 28053 - app.kubernetes.io/instance: flux-system 28054 - app.kubernetes.io/part-of: flux 28055 - app.kubernetes.io/version: v2.4.0 28056 - control-plane: controller 28057 - name: image-automation-controller 28058 - namespace: flux-system 28059 + labels: 28060 + app.kubernetes.io/component: image-automation-controller 28061 + app.kubernetes.io/instance: flux-system 28062 + app.kubernetes.io/part-of: flux 28063 + app.kubernetes.io/version: v2.5.1 28064 + control-plane: controller 28065 + name: image-automation-controller 28066 + namespace: flux-system 28067 spec: 28068 - replicas: 1 28069 - selector: 28070 - matchLabels: 28071 - app: image-automation-controller 28072 - template: 28073 - metadata: 28074 - annotations: 28075 - prometheus.io/port: "8080" 28076 - prometheus.io/scrape: "true" 28077 - labels: 28078 - app: image-automation-controller 28079 - spec: 28080 - containers: 28081 - - args: 28082 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 28083 - - --watch-all-namespaces=true 28084 - - --log-level=info 28085 - - --log-encoding=json 28086 - - --enable-leader-election 28087 - env: 28088 - - name: RUNTIME_NAMESPACE 28089 - valueFrom: 28090 - fieldRef: 28091 - fieldPath: metadata.namespace 28092 - - name: GOMAXPROCS 28093 - valueFrom: 28094 - resourceFieldRef: 28095 - containerName: manager 28096 - resource: limits.cpu 28097 - - name: GOMEMLIMIT 28098 - valueFrom: 28099 - resourceFieldRef: 28100 - containerName: manager 28101 - resource: limits.memory 28102 - image: ghcr.io/fluxcd/image-automation-controller:v0.39.0 28103 - imagePullPolicy: IfNotPresent 28104 - livenessProbe: 28105 - httpGet: 28106 - path: /healthz 28107 - port: healthz 28108 - name: manager 28109 - ports: 28110 - - containerPort: 8080 28111 - name: http-prom 28112 - protocol: TCP 28113 - - containerPort: 9440 28114 - name: healthz 28115 - protocol: TCP 28116 - readinessProbe: 28117 - httpGet: 28118 - path: /readyz 28119 - port: healthz 28120 - resources: 28121 - limits: 28122 - cpu: 1000m 28123 - memory: 1Gi 28124 - requests: 28125 - cpu: 100m 28126 - memory: 64Mi 28127 - securityContext: 28128 - allowPrivilegeEscalation: false 28129 - capabilities: 28130 - drop: 28131 - - ALL 28132 - readOnlyRootFilesystem: true 28133 - runAsNonRoot: true 28134 - seccompProfile: 28135 - type: RuntimeDefault 28136 - volumeMounts: 28137 - - mountPath: /tmp 28138 - name: temp 28139 - nodeSelector: 28140 - kubernetes.io/os: linux 28141 - securityContext: 28142 - fsGroup: 1337 28143 - serviceAccountName: image-automation-controller 28144 - terminationGracePeriodSeconds: 10 28145 - volumes: 28146 - - emptyDir: {} 28147 - name: temp 28148 + replicas: 1 28149 + selector: 28150 + matchLabels: 28151 + app: image-automation-controller 28152 + template: 28153 + metadata: 28154 + annotations: 28155 + prometheus.io/port: "8080" 28156 + prometheus.io/scrape: "true" 28157 + labels: 28158 + app: image-automation-controller 28159 + spec: 28160 + containers: 28161 + - args: 28162 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 28163 + - --watch-all-namespaces=true 28164 + - --log-level=info 28165 + - --log-encoding=json 28166 + - --enable-leader-election 28167 + env: 28168 + - name: RUNTIME_NAMESPACE 28169 + valueFrom: 28170 + fieldRef: 28171 + fieldPath: metadata.namespace 28172 + - name: GOMAXPROCS 28173 + valueFrom: 28174 + resourceFieldRef: 28175 + containerName: manager 28176 + resource: limits.cpu 28177 + - name: GOMEMLIMIT 28178 + valueFrom: 28179 + resourceFieldRef: 28180 + containerName: manager 28181 + resource: limits.memory 28182 + image: ghcr.io/fluxcd/image-automation-controller:v0.40.0 28183 + imagePullPolicy: IfNotPresent 28184 + livenessProbe: 28185 + httpGet: 28186 + path: /healthz 28187 + port: healthz 28188 + name: manager 28189 + ports: 28190 + - containerPort: 8080 28191 + name: http-prom 28192 + protocol: TCP 28193 + - containerPort: 9440 28194 + name: healthz 28195 + protocol: TCP 28196 + readinessProbe: 28197 + httpGet: 28198 + path: /readyz 28199 + port: healthz 28200 + resources: 28201 + limits: 28202 + cpu: 1000m 28203 + memory: 1Gi 28204 + requests: 28205 + cpu: 100m 28206 + memory: 64Mi 28207 + securityContext: 28208 + allowPrivilegeEscalation: false 28209 + capabilities: 28210 + drop: 28211 + - ALL 28212 + readOnlyRootFilesystem: true 28213 + runAsNonRoot: true 28214 + seccompProfile: 28215 + type: RuntimeDefault 28216 + volumeMounts: 28217 + - mountPath: /tmp 28218 + name: temp 28219 + nodeSelector: 28220 + kubernetes.io/os: linux 28221 + securityContext: 28222 + fsGroup: 1337 28223 + serviceAccountName: image-automation-controller 28224 + terminationGracePeriodSeconds: 10 28225 + volumes: 28226 + - emptyDir: {} 28227 + name: temp