15.diff (1624424B)
1 diff --git a/clusters/2024_cluster/flux-system/gotk-components.yaml b/clusters/2024_cluster/flux-system/gotk-components.yaml 2 index c5483092..a9cfa040 100644 3 --- a/clusters/2024_cluster/flux-system/gotk-components.yaml 4 +++ b/clusters/2024_cluster/flux-system/gotk-components.yaml 5 @@ -1,14228 +1,14975 @@ 6 +--- 7 # This manifest was generated by flux. DO NOT EDIT. 8 -# Flux Version: v2.5.1 9 +# Flux Version: v2.6.4 10 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller 11 apiVersion: v1 12 kind: Namespace 13 metadata: 14 - labels: 15 - app.kubernetes.io/instance: flux-system 16 - app.kubernetes.io/part-of: flux 17 - app.kubernetes.io/version: v2.5.1 18 - pod-security.kubernetes.io/warn: restricted 19 - pod-security.kubernetes.io/warn-version: latest 20 - name: flux-system 21 + labels: 22 + app.kubernetes.io/instance: flux-system 23 + app.kubernetes.io/part-of: flux 24 + app.kubernetes.io/version: v2.6.4 25 + pod-security.kubernetes.io/warn: restricted 26 + pod-security.kubernetes.io/warn-version: latest 27 + name: flux-system 28 --- 29 apiVersion: networking.k8s.io/v1 30 kind: NetworkPolicy 31 metadata: 32 - labels: 33 - app.kubernetes.io/instance: flux-system 34 - app.kubernetes.io/part-of: flux 35 - app.kubernetes.io/version: v2.5.1 36 - name: allow-egress 37 - namespace: flux-system 38 + labels: 39 + app.kubernetes.io/instance: flux-system 40 + app.kubernetes.io/part-of: flux 41 + app.kubernetes.io/version: v2.6.4 42 + name: allow-egress 43 + namespace: flux-system 44 spec: 45 - egress: 46 - - {} 47 - ingress: 48 - - from: 49 - - podSelector: {} 50 - podSelector: {} 51 - policyTypes: 52 - - Ingress 53 - - Egress 54 + egress: 55 + - {} 56 + ingress: 57 + - from: 58 + - podSelector: {} 59 + podSelector: {} 60 + policyTypes: 61 + - Ingress 62 + - Egress 63 --- 64 apiVersion: networking.k8s.io/v1 65 kind: NetworkPolicy 66 metadata: 67 - labels: 68 - app.kubernetes.io/instance: flux-system 69 - app.kubernetes.io/part-of: flux 70 - app.kubernetes.io/version: v2.5.1 71 - name: allow-scraping 72 - namespace: flux-system 73 + labels: 74 + app.kubernetes.io/instance: flux-system 75 + app.kubernetes.io/part-of: flux 76 + app.kubernetes.io/version: v2.6.4 77 + name: allow-scraping 78 + namespace: flux-system 79 spec: 80 - ingress: 81 - - from: 82 - - namespaceSelector: {} 83 - ports: 84 - - port: 8080 85 - protocol: TCP 86 - podSelector: {} 87 - policyTypes: 88 - - Ingress 89 + ingress: 90 + - from: 91 + - namespaceSelector: {} 92 + ports: 93 + - port: 8080 94 + protocol: TCP 95 + podSelector: {} 96 + policyTypes: 97 + - Ingress 98 --- 99 apiVersion: networking.k8s.io/v1 100 kind: NetworkPolicy 101 metadata: 102 - labels: 103 - app.kubernetes.io/instance: flux-system 104 - app.kubernetes.io/part-of: flux 105 - app.kubernetes.io/version: v2.5.1 106 - name: allow-webhooks 107 - namespace: flux-system 108 + labels: 109 + app.kubernetes.io/instance: flux-system 110 + app.kubernetes.io/part-of: flux 111 + app.kubernetes.io/version: v2.6.4 112 + name: allow-webhooks 113 + namespace: flux-system 114 spec: 115 - ingress: 116 - - from: 117 - - namespaceSelector: {} 118 - podSelector: 119 - matchLabels: 120 - app: notification-controller 121 - policyTypes: 122 - - Ingress 123 + ingress: 124 + - from: 125 + - namespaceSelector: {} 126 + podSelector: 127 + matchLabels: 128 + app: notification-controller 129 + policyTypes: 130 + - Ingress 131 --- 132 apiVersion: v1 133 kind: ResourceQuota 134 metadata: 135 - labels: 136 - app.kubernetes.io/instance: flux-system 137 - app.kubernetes.io/part-of: flux 138 - app.kubernetes.io/version: v2.5.1 139 - name: critical-pods-flux-system 140 - namespace: flux-system 141 + labels: 142 + app.kubernetes.io/instance: flux-system 143 + app.kubernetes.io/part-of: flux 144 + app.kubernetes.io/version: v2.6.4 145 + name: critical-pods-flux-system 146 + namespace: flux-system 147 spec: 148 - hard: 149 - pods: "1000" 150 - scopeSelector: 151 - matchExpressions: 152 - - operator: In 153 - scopeName: PriorityClass 154 - values: 155 - - system-node-critical 156 - - system-cluster-critical 157 + hard: 158 + pods: "1000" 159 + scopeSelector: 160 + matchExpressions: 161 + - operator: In 162 + scopeName: PriorityClass 163 + values: 164 + - system-node-critical 165 + - system-cluster-critical 166 --- 167 apiVersion: rbac.authorization.k8s.io/v1 168 kind: ClusterRole 169 metadata: 170 - labels: 171 - app.kubernetes.io/instance: flux-system 172 - app.kubernetes.io/part-of: flux 173 - app.kubernetes.io/version: v2.5.1 174 - name: crd-controller-flux-system 175 + labels: 176 + app.kubernetes.io/instance: flux-system 177 + app.kubernetes.io/part-of: flux 178 + app.kubernetes.io/version: v2.6.4 179 + name: crd-controller-flux-system 180 rules: 181 - - apiGroups: 182 - - source.toolkit.fluxcd.io 183 - resources: 184 - - '*' 185 - verbs: 186 - - '*' 187 - - apiGroups: 188 - - kustomize.toolkit.fluxcd.io 189 - resources: 190 - - '*' 191 - verbs: 192 - - '*' 193 - - apiGroups: 194 - - helm.toolkit.fluxcd.io 195 - resources: 196 - - '*' 197 - verbs: 198 - - '*' 199 - - apiGroups: 200 - - notification.toolkit.fluxcd.io 201 - resources: 202 - - '*' 203 - verbs: 204 - - '*' 205 - - apiGroups: 206 - - image.toolkit.fluxcd.io 207 - resources: 208 - - '*' 209 - verbs: 210 - - '*' 211 - - apiGroups: 212 - - "" 213 - resources: 214 - - namespaces 215 - - secrets 216 - - configmaps 217 - - serviceaccounts 218 - verbs: 219 - - get 220 - - list 221 - - watch 222 - - apiGroups: 223 - - "" 224 - resources: 225 - - events 226 - verbs: 227 - - create 228 - - patch 229 - - apiGroups: 230 - - "" 231 - resources: 232 - - configmaps 233 - verbs: 234 - - get 235 - - list 236 - - watch 237 - - create 238 - - update 239 - - patch 240 - - delete 241 - - apiGroups: 242 - - "" 243 - resources: 244 - - configmaps/status 245 - verbs: 246 - - get 247 - - update 248 - - patch 249 - - apiGroups: 250 - - coordination.k8s.io 251 - resources: 252 - - leases 253 - verbs: 254 - - get 255 - - list 256 - - watch 257 - - create 258 - - update 259 - - patch 260 - - delete 261 - - nonResourceURLs: 262 - - /livez/ping 263 - verbs: 264 - - head 265 +- apiGroups: 266 + - source.toolkit.fluxcd.io 267 + resources: 268 + - '*' 269 + verbs: 270 + - '*' 271 +- apiGroups: 272 + - kustomize.toolkit.fluxcd.io 273 + resources: 274 + - '*' 275 + verbs: 276 + - '*' 277 +- apiGroups: 278 + - helm.toolkit.fluxcd.io 279 + resources: 280 + - '*' 281 + verbs: 282 + - '*' 283 +- apiGroups: 284 + - notification.toolkit.fluxcd.io 285 + resources: 286 + - '*' 287 + verbs: 288 + - '*' 289 +- apiGroups: 290 + - image.toolkit.fluxcd.io 291 + resources: 292 + - '*' 293 + verbs: 294 + - '*' 295 +- apiGroups: 296 + - "" 297 + resources: 298 + - namespaces 299 + - secrets 300 + - configmaps 301 + - serviceaccounts 302 + verbs: 303 + - get 304 + - list 305 + - watch 306 +- apiGroups: 307 + - "" 308 + resources: 309 + - events 310 + verbs: 311 + - create 312 + - patch 313 +- apiGroups: 314 + - "" 315 + resources: 316 + - configmaps 317 + verbs: 318 + - get 319 + - list 320 + - watch 321 + - create 322 + - update 323 + - patch 324 + - delete 325 +- apiGroups: 326 + - "" 327 + resources: 328 + - configmaps/status 329 + verbs: 330 + - get 331 + - update 332 + - patch 333 +- apiGroups: 334 + - coordination.k8s.io 335 + resources: 336 + - leases 337 + verbs: 338 + - get 339 + - list 340 + - watch 341 + - create 342 + - update 343 + - patch 344 + - delete 345 +- apiGroups: 346 + - "" 347 + resources: 348 + - serviceaccounts/token 349 + verbs: 350 + - create 351 +- nonResourceURLs: 352 + - /livez/ping 353 + verbs: 354 + - head 355 --- 356 apiVersion: rbac.authorization.k8s.io/v1 357 kind: ClusterRole 358 metadata: 359 - labels: 360 - app.kubernetes.io/instance: flux-system 361 - app.kubernetes.io/part-of: flux 362 - app.kubernetes.io/version: v2.5.1 363 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 364 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 365 - name: flux-edit-flux-system 366 + labels: 367 + app.kubernetes.io/instance: flux-system 368 + app.kubernetes.io/part-of: flux 369 + app.kubernetes.io/version: v2.6.4 370 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 371 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 372 + name: flux-edit-flux-system 373 rules: 374 - - apiGroups: 375 - - notification.toolkit.fluxcd.io 376 - - source.toolkit.fluxcd.io 377 - - helm.toolkit.fluxcd.io 378 - - image.toolkit.fluxcd.io 379 - - kustomize.toolkit.fluxcd.io 380 - resources: 381 - - '*' 382 - verbs: 383 - - create 384 - - delete 385 - - deletecollection 386 - - patch 387 - - update 388 +- apiGroups: 389 + - notification.toolkit.fluxcd.io 390 + - source.toolkit.fluxcd.io 391 + - helm.toolkit.fluxcd.io 392 + - image.toolkit.fluxcd.io 393 + - kustomize.toolkit.fluxcd.io 394 + resources: 395 + - '*' 396 + verbs: 397 + - create 398 + - delete 399 + - deletecollection 400 + - patch 401 + - update 402 --- 403 apiVersion: rbac.authorization.k8s.io/v1 404 kind: ClusterRole 405 metadata: 406 - labels: 407 - app.kubernetes.io/instance: flux-system 408 - app.kubernetes.io/part-of: flux 409 - app.kubernetes.io/version: v2.5.1 410 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 411 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 412 - rbac.authorization.k8s.io/aggregate-to-view: "true" 413 - name: flux-view-flux-system 414 + labels: 415 + app.kubernetes.io/instance: flux-system 416 + app.kubernetes.io/part-of: flux 417 + app.kubernetes.io/version: v2.6.4 418 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 419 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 420 + rbac.authorization.k8s.io/aggregate-to-view: "true" 421 + name: flux-view-flux-system 422 rules: 423 - - apiGroups: 424 - - notification.toolkit.fluxcd.io 425 - - source.toolkit.fluxcd.io 426 - - helm.toolkit.fluxcd.io 427 - - image.toolkit.fluxcd.io 428 - - kustomize.toolkit.fluxcd.io 429 - resources: 430 - - '*' 431 - verbs: 432 - - get 433 - - list 434 - - watch 435 +- apiGroups: 436 + - notification.toolkit.fluxcd.io 437 + - source.toolkit.fluxcd.io 438 + - helm.toolkit.fluxcd.io 439 + - image.toolkit.fluxcd.io 440 + - kustomize.toolkit.fluxcd.io 441 + resources: 442 + - '*' 443 + verbs: 444 + - get 445 + - list 446 + - watch 447 --- 448 apiVersion: rbac.authorization.k8s.io/v1 449 kind: ClusterRoleBinding 450 metadata: 451 - labels: 452 - app.kubernetes.io/instance: flux-system 453 - app.kubernetes.io/part-of: flux 454 - app.kubernetes.io/version: v2.5.1 455 - name: cluster-reconciler-flux-system 456 + labels: 457 + app.kubernetes.io/instance: flux-system 458 + app.kubernetes.io/part-of: flux 459 + app.kubernetes.io/version: v2.6.4 460 + name: cluster-reconciler-flux-system 461 roleRef: 462 - apiGroup: rbac.authorization.k8s.io 463 - kind: ClusterRole 464 - name: cluster-admin 465 + apiGroup: rbac.authorization.k8s.io 466 + kind: ClusterRole 467 + name: cluster-admin 468 subjects: 469 - - kind: ServiceAccount 470 - name: kustomize-controller 471 - namespace: flux-system 472 - - kind: ServiceAccount 473 - name: helm-controller 474 - namespace: flux-system 475 +- kind: ServiceAccount 476 + name: kustomize-controller 477 + namespace: flux-system 478 +- kind: ServiceAccount 479 + name: helm-controller 480 + namespace: flux-system 481 --- 482 apiVersion: rbac.authorization.k8s.io/v1 483 kind: ClusterRoleBinding 484 metadata: 485 - labels: 486 - app.kubernetes.io/instance: flux-system 487 - app.kubernetes.io/part-of: flux 488 - app.kubernetes.io/version: v2.5.1 489 - name: crd-controller-flux-system 490 + labels: 491 + app.kubernetes.io/instance: flux-system 492 + app.kubernetes.io/part-of: flux 493 + app.kubernetes.io/version: v2.6.4 494 + name: crd-controller-flux-system 495 roleRef: 496 - apiGroup: rbac.authorization.k8s.io 497 - kind: ClusterRole 498 - name: crd-controller-flux-system 499 + apiGroup: rbac.authorization.k8s.io 500 + kind: ClusterRole 501 + name: crd-controller-flux-system 502 subjects: 503 - - kind: ServiceAccount 504 - name: kustomize-controller 505 - namespace: flux-system 506 - - kind: ServiceAccount 507 - name: helm-controller 508 - namespace: flux-system 509 - - kind: ServiceAccount 510 - name: source-controller 511 - namespace: flux-system 512 - - kind: ServiceAccount 513 - name: notification-controller 514 - namespace: flux-system 515 - - kind: ServiceAccount 516 - name: image-reflector-controller 517 - namespace: flux-system 518 - - kind: ServiceAccount 519 - name: image-automation-controller 520 - namespace: flux-system 521 +- kind: ServiceAccount 522 + name: kustomize-controller 523 + namespace: flux-system 524 +- kind: ServiceAccount 525 + name: helm-controller 526 + namespace: flux-system 527 +- kind: ServiceAccount 528 + name: source-controller 529 + namespace: flux-system 530 +- kind: ServiceAccount 531 + name: notification-controller 532 + namespace: flux-system 533 +- kind: ServiceAccount 534 + name: image-reflector-controller 535 + namespace: flux-system 536 +- kind: ServiceAccount 537 + name: image-automation-controller 538 + namespace: flux-system 539 --- 540 apiVersion: apiextensions.k8s.io/v1 541 kind: CustomResourceDefinition 542 metadata: 543 - annotations: 544 - controller-gen.kubebuilder.io/version: v0.16.1 545 - labels: 546 - app.kubernetes.io/component: source-controller 547 - app.kubernetes.io/instance: flux-system 548 - app.kubernetes.io/part-of: flux 549 - app.kubernetes.io/version: v2.5.1 550 - name: buckets.source.toolkit.fluxcd.io 551 + annotations: 552 + controller-gen.kubebuilder.io/version: v0.16.1 553 + labels: 554 + app.kubernetes.io/component: source-controller 555 + app.kubernetes.io/instance: flux-system 556 + app.kubernetes.io/part-of: flux 557 + app.kubernetes.io/version: v2.6.4 558 + name: buckets.source.toolkit.fluxcd.io 559 spec: 560 - group: source.toolkit.fluxcd.io 561 - names: 562 - kind: Bucket 563 - listKind: BucketList 564 - plural: buckets 565 - singular: bucket 566 - scope: Namespaced 567 - versions: 568 - - additionalPrinterColumns: 569 - - jsonPath: .spec.endpoint 570 - name: Endpoint 571 - type: string 572 - - jsonPath: .metadata.creationTimestamp 573 - name: Age 574 - type: date 575 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 576 - name: Ready 577 - type: string 578 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 579 - name: Status 580 - type: string 581 - name: v1 582 - schema: 583 - openAPIV3Schema: 584 - description: Bucket is the Schema for the buckets API. 585 - properties: 586 - apiVersion: 587 - description: |- 588 - APIVersion defines the versioned schema of this representation of an object. 589 - Servers should convert recognized schemas to the latest internal value, and 590 - may reject unrecognized values. 591 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 592 - type: string 593 - kind: 594 - description: |- 595 - Kind is a string value representing the REST resource this object represents. 596 - Servers may infer this from the endpoint the client submits requests to. 597 - Cannot be updated. 598 - In CamelCase. 599 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 600 - type: string 601 - metadata: 602 - type: object 603 - spec: 604 - description: |- 605 - BucketSpec specifies the required configuration to produce an Artifact for 606 - an object storage bucket. 607 - properties: 608 - bucketName: 609 - description: BucketName is the name of the object storage bucket. 610 - type: string 611 - certSecretRef: 612 - description: |- 613 - CertSecretRef can be given the name of a Secret containing 614 - either or both of 615 + group: source.toolkit.fluxcd.io 616 + names: 617 + kind: Bucket 618 + listKind: BucketList 619 + plural: buckets 620 + singular: bucket 621 + scope: Namespaced 622 + versions: 623 + - additionalPrinterColumns: 624 + - jsonPath: .spec.endpoint 625 + name: Endpoint 626 + type: string 627 + - jsonPath: .metadata.creationTimestamp 628 + name: Age 629 + type: date 630 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 631 + name: Ready 632 + type: string 633 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 634 + name: Status 635 + type: string 636 + name: v1 637 + schema: 638 + openAPIV3Schema: 639 + description: Bucket is the Schema for the buckets API. 640 + properties: 641 + apiVersion: 642 + description: |- 643 + APIVersion defines the versioned schema of this representation of an object. 644 + Servers should convert recognized schemas to the latest internal value, and 645 + may reject unrecognized values. 646 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 647 + type: string 648 + kind: 649 + description: |- 650 + Kind is a string value representing the REST resource this object represents. 651 + Servers may infer this from the endpoint the client submits requests to. 652 + Cannot be updated. 653 + In CamelCase. 654 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 655 + type: string 656 + metadata: 657 + type: object 658 + spec: 659 + description: |- 660 + BucketSpec specifies the required configuration to produce an Artifact for 661 + an object storage bucket. 662 + properties: 663 + bucketName: 664 + description: BucketName is the name of the object storage bucket. 665 + type: string 666 + certSecretRef: 667 + description: |- 668 + CertSecretRef can be given the name of a Secret containing 669 + either or both of 670 671 - - a PEM-encoded client certificate (`tls.crt`) and private 672 - key (`tls.key`); 673 - - a PEM-encoded CA certificate (`ca.crt`) 674 + - a PEM-encoded client certificate (`tls.crt`) and private 675 + key (`tls.key`); 676 + - a PEM-encoded CA certificate (`ca.crt`) 677 678 - and whichever are supplied, will be used for connecting to the 679 - bucket. The client cert and key are useful if you are 680 - authenticating with a certificate; the CA cert is useful if 681 - you are using a self-signed server certificate. The Secret must 682 - be of type `Opaque` or `kubernetes.io/tls`. 683 + and whichever are supplied, will be used for connecting to the 684 + bucket. The client cert and key are useful if you are 685 + authenticating with a certificate; the CA cert is useful if 686 + you are using a self-signed server certificate. The Secret must 687 + be of type `Opaque` or `kubernetes.io/tls`. 688 689 - This field is only supported for the `generic` provider. 690 - properties: 691 - name: 692 - description: Name of the referent. 693 - type: string 694 - required: 695 - - name 696 - type: object 697 - endpoint: 698 - description: Endpoint is the object storage address the BucketName is located at. 699 - type: string 700 - ignore: 701 - description: |- 702 - Ignore overrides the set of excluded patterns in the .sourceignore format 703 - (which is the same as .gitignore). If not provided, a default will be used, 704 - consult the documentation for your version to find out what those are. 705 - type: string 706 - insecure: 707 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 708 - type: boolean 709 - interval: 710 - description: |- 711 - Interval at which the Bucket Endpoint is checked for updates. 712 - This interval is approximate and may be subject to jitter to ensure 713 - efficient use of resources. 714 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 715 - type: string 716 - prefix: 717 - description: Prefix to use for server-side filtering of files in the Bucket. 718 - type: string 719 - provider: 720 - default: generic 721 - description: |- 722 - Provider of the object storage bucket. 723 - Defaults to 'generic', which expects an S3 (API) compatible object 724 - storage. 725 - enum: 726 - - generic 727 - - aws 728 - - gcp 729 - - azure 730 - type: string 731 - proxySecretRef: 732 - description: |- 733 - ProxySecretRef specifies the Secret containing the proxy configuration 734 - to use while communicating with the Bucket server. 735 - properties: 736 - name: 737 - description: Name of the referent. 738 - type: string 739 - required: 740 - - name 741 - type: object 742 - region: 743 - description: Region of the Endpoint where the BucketName is located in. 744 - type: string 745 - secretRef: 746 - description: |- 747 - SecretRef specifies the Secret containing authentication credentials 748 - for the Bucket. 749 - properties: 750 - name: 751 - description: Name of the referent. 752 - type: string 753 - required: 754 - - name 755 - type: object 756 - sts: 757 - description: |- 758 - STS specifies the required configuration to use a Security Token 759 - Service for fetching temporary credentials to authenticate in a 760 - Bucket provider. 761 + This field is only supported for the `generic` provider. 762 + properties: 763 + name: 764 + description: Name of the referent. 765 + type: string 766 + required: 767 + - name 768 + type: object 769 + endpoint: 770 + description: Endpoint is the object storage address the BucketName 771 + is located at. 772 + type: string 773 + ignore: 774 + description: |- 775 + Ignore overrides the set of excluded patterns in the .sourceignore format 776 + (which is the same as .gitignore). If not provided, a default will be used, 777 + consult the documentation for your version to find out what those are. 778 + type: string 779 + insecure: 780 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 781 + type: boolean 782 + interval: 783 + description: |- 784 + Interval at which the Bucket Endpoint is checked for updates. 785 + This interval is approximate and may be subject to jitter to ensure 786 + efficient use of resources. 787 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 788 + type: string 789 + prefix: 790 + description: Prefix to use for server-side filtering of files in the 791 + Bucket. 792 + type: string 793 + provider: 794 + default: generic 795 + description: |- 796 + Provider of the object storage bucket. 797 + Defaults to 'generic', which expects an S3 (API) compatible object 798 + storage. 799 + enum: 800 + - generic 801 + - aws 802 + - gcp 803 + - azure 804 + type: string 805 + proxySecretRef: 806 + description: |- 807 + ProxySecretRef specifies the Secret containing the proxy configuration 808 + to use while communicating with the Bucket server. 809 + properties: 810 + name: 811 + description: Name of the referent. 812 + type: string 813 + required: 814 + - name 815 + type: object 816 + region: 817 + description: Region of the Endpoint where the BucketName is located 818 + in. 819 + type: string 820 + secretRef: 821 + description: |- 822 + SecretRef specifies the Secret containing authentication credentials 823 + for the Bucket. 824 + properties: 825 + name: 826 + description: Name of the referent. 827 + type: string 828 + required: 829 + - name 830 + type: object 831 + sts: 832 + description: |- 833 + STS specifies the required configuration to use a Security Token 834 + Service for fetching temporary credentials to authenticate in a 835 + Bucket provider. 836 837 - This field is only supported for the `aws` and `generic` providers. 838 - properties: 839 - certSecretRef: 840 - description: |- 841 - CertSecretRef can be given the name of a Secret containing 842 - either or both of 843 + This field is only supported for the `aws` and `generic` providers. 844 + properties: 845 + certSecretRef: 846 + description: |- 847 + CertSecretRef can be given the name of a Secret containing 848 + either or both of 849 850 - - a PEM-encoded client certificate (`tls.crt`) and private 851 - key (`tls.key`); 852 - - a PEM-encoded CA certificate (`ca.crt`) 853 + - a PEM-encoded client certificate (`tls.crt`) and private 854 + key (`tls.key`); 855 + - a PEM-encoded CA certificate (`ca.crt`) 856 857 - and whichever are supplied, will be used for connecting to the 858 - STS endpoint. The client cert and key are useful if you are 859 - authenticating with a certificate; the CA cert is useful if 860 - you are using a self-signed server certificate. The Secret must 861 - be of type `Opaque` or `kubernetes.io/tls`. 862 + and whichever are supplied, will be used for connecting to the 863 + STS endpoint. The client cert and key are useful if you are 864 + authenticating with a certificate; the CA cert is useful if 865 + you are using a self-signed server certificate. The Secret must 866 + be of type `Opaque` or `kubernetes.io/tls`. 867 868 - This field is only supported for the `ldap` provider. 869 - properties: 870 - name: 871 - description: Name of the referent. 872 - type: string 873 - required: 874 - - name 875 - type: object 876 - endpoint: 877 - description: |- 878 - Endpoint is the HTTP/S endpoint of the Security Token Service from 879 - where temporary credentials will be fetched. 880 - pattern: ^(http|https)://.*$ 881 - type: string 882 - provider: 883 - description: Provider of the Security Token Service. 884 - enum: 885 - - aws 886 - - ldap 887 - type: string 888 - secretRef: 889 - description: |- 890 - SecretRef specifies the Secret containing authentication credentials 891 - for the STS endpoint. This Secret must contain the fields `username` 892 - and `password` and is supported only for the `ldap` provider. 893 - properties: 894 - name: 895 - description: Name of the referent. 896 - type: string 897 - required: 898 - - name 899 - type: object 900 - required: 901 - - endpoint 902 - - provider 903 - type: object 904 - suspend: 905 - description: |- 906 - Suspend tells the controller to suspend the reconciliation of this 907 - Bucket. 908 - type: boolean 909 - timeout: 910 - default: 60s 911 - description: Timeout for fetch operations, defaults to 60s. 912 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 913 - type: string 914 - required: 915 - - bucketName 916 - - endpoint 917 - - interval 918 - type: object 919 - x-kubernetes-validations: 920 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 921 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 922 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 923 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 924 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 925 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 926 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 927 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 928 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 929 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 930 - status: 931 - default: 932 - observedGeneration: -1 933 - description: BucketStatus records the observed state of a Bucket. 934 - properties: 935 - artifact: 936 - description: Artifact represents the last successful Bucket reconciliation. 937 - properties: 938 - digest: 939 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 940 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 941 - type: string 942 - lastUpdateTime: 943 - description: |- 944 - LastUpdateTime is the timestamp corresponding to the last update of the 945 - Artifact. 946 - format: date-time 947 - type: string 948 - metadata: 949 - additionalProperties: 950 - type: string 951 - description: Metadata holds upstream information such as OCI annotations. 952 - type: object 953 - path: 954 - description: |- 955 - Path is the relative file path of the Artifact. It can be used to locate 956 - the file in the root of the Artifact storage on the local file system of 957 - the controller managing the Source. 958 - type: string 959 - revision: 960 - description: |- 961 - Revision is a human-readable identifier traceable in the origin source 962 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 963 - type: string 964 - size: 965 - description: Size is the number of bytes in the file. 966 - format: int64 967 - type: integer 968 - url: 969 - description: |- 970 - URL is the HTTP address of the Artifact as exposed by the controller 971 - managing the Source. It can be used to retrieve the Artifact for 972 - consumption, e.g. by another controller applying the Artifact contents. 973 - type: string 974 - required: 975 - - lastUpdateTime 976 - - path 977 - - revision 978 - - url 979 - type: object 980 - conditions: 981 - description: Conditions holds the conditions for the Bucket. 982 - items: 983 - description: Condition contains details for one aspect of the current state of this API 984 - Resource. 985 - properties: 986 - lastTransitionTime: 987 - description: |- 988 - lastTransitionTime is the last time the condition transitioned from one status to another. 989 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 990 - format: date-time 991 - type: string 992 - message: 993 - description: |- 994 - message is a human readable message indicating details about the transition. 995 - This may be an empty string. 996 - maxLength: 32768 997 - type: string 998 - observedGeneration: 999 - description: |- 1000 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1001 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1002 - with respect to the current state of the instance. 1003 - format: int64 1004 - minimum: 0 1005 - type: integer 1006 - reason: 1007 - description: |- 1008 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1009 - Producers of specific condition types may define expected values and meanings for this field, 1010 - and whether the values are considered a guaranteed API. 1011 - The value should be a CamelCase string. 1012 - This field may not be empty. 1013 - maxLength: 1024 1014 - minLength: 1 1015 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1016 - type: string 1017 - status: 1018 - description: status of the condition, one of True, False, Unknown. 1019 - enum: 1020 - - "True" 1021 - - "False" 1022 - - Unknown 1023 - type: string 1024 - type: 1025 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1026 - maxLength: 316 1027 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1028 - type: string 1029 - required: 1030 - - lastTransitionTime 1031 - - message 1032 - - reason 1033 - - status 1034 - - type 1035 - type: object 1036 - type: array 1037 - lastHandledReconcileAt: 1038 - description: |- 1039 - LastHandledReconcileAt holds the value of the most recent 1040 - reconcile request value, so a change of the annotation value 1041 - can be detected. 1042 - type: string 1043 - observedGeneration: 1044 - description: ObservedGeneration is the last observed generation of the Bucket object. 1045 - format: int64 1046 - type: integer 1047 - observedIgnore: 1048 - description: |- 1049 - ObservedIgnore is the observed exclusion patterns used for constructing 1050 - the source artifact. 1051 - type: string 1052 - url: 1053 - description: |- 1054 - URL is the dynamic fetch link for the latest Artifact. 1055 - It is provided on a "best effort" basis, and using the precise 1056 - BucketStatus.Artifact data is recommended. 1057 - type: string 1058 - type: object 1059 - type: object 1060 - served: true 1061 - storage: true 1062 - subresources: 1063 - status: {} 1064 - - additionalPrinterColumns: 1065 - - jsonPath: .spec.endpoint 1066 - name: Endpoint 1067 - type: string 1068 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1069 - name: Ready 1070 - type: string 1071 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1072 - name: Status 1073 - type: string 1074 - - jsonPath: .metadata.creationTimestamp 1075 - name: Age 1076 - type: date 1077 - deprecated: true 1078 - deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1 1079 - name: v1beta1 1080 - schema: 1081 - openAPIV3Schema: 1082 - description: Bucket is the Schema for the buckets API 1083 - properties: 1084 - apiVersion: 1085 - description: |- 1086 - APIVersion defines the versioned schema of this representation of an object. 1087 - Servers should convert recognized schemas to the latest internal value, and 1088 - may reject unrecognized values. 1089 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1090 + This field is only supported for the `ldap` provider. 1091 + properties: 1092 + name: 1093 + description: Name of the referent. 1094 type: string 1095 - kind: 1096 - description: |- 1097 - Kind is a string value representing the REST resource this object represents. 1098 - Servers may infer this from the endpoint the client submits requests to. 1099 - Cannot be updated. 1100 - In CamelCase. 1101 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1102 + required: 1103 + - name 1104 + type: object 1105 + endpoint: 1106 + description: |- 1107 + Endpoint is the HTTP/S endpoint of the Security Token Service from 1108 + where temporary credentials will be fetched. 1109 + pattern: ^(http|https)://.*$ 1110 + type: string 1111 + provider: 1112 + description: Provider of the Security Token Service. 1113 + enum: 1114 + - aws 1115 + - ldap 1116 + type: string 1117 + secretRef: 1118 + description: |- 1119 + SecretRef specifies the Secret containing authentication credentials 1120 + for the STS endpoint. This Secret must contain the fields `username` 1121 + and `password` and is supported only for the `ldap` provider. 1122 + properties: 1123 + name: 1124 + description: Name of the referent. 1125 type: string 1126 - metadata: 1127 - type: object 1128 - spec: 1129 - description: BucketSpec defines the desired state of an S3 compatible bucket 1130 - properties: 1131 - accessFrom: 1132 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 1133 - to this object. 1134 - properties: 1135 - namespaceSelectors: 1136 - description: |- 1137 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1138 - Items in this list are evaluated using a logical OR operation. 1139 - items: 1140 - description: |- 1141 - NamespaceSelector selects the namespaces to which this ACL applies. 1142 - An empty map of MatchLabels matches all namespaces in a cluster. 1143 - properties: 1144 - matchLabels: 1145 - additionalProperties: 1146 - type: string 1147 - description: |- 1148 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1149 - map is equivalent to an element of matchExpressions, whose key field is "key", the 1150 - operator is "In", and the values array contains only "value". The requirements are ANDed. 1151 - type: object 1152 - type: object 1153 - type: array 1154 - required: 1155 - - namespaceSelectors 1156 - type: object 1157 - bucketName: 1158 - description: The bucket name. 1159 - type: string 1160 - endpoint: 1161 - description: The bucket endpoint address. 1162 - type: string 1163 - ignore: 1164 - description: |- 1165 - Ignore overrides the set of excluded patterns in the .sourceignore format 1166 - (which is the same as .gitignore). If not provided, a default will be used, 1167 - consult the documentation for your version to find out what those are. 1168 - type: string 1169 - insecure: 1170 - description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. 1171 - type: boolean 1172 - interval: 1173 - description: The interval at which to check for bucket updates. 1174 - type: string 1175 - provider: 1176 - default: generic 1177 - description: The S3 compatible storage provider name, default ('generic'). 1178 - enum: 1179 - - generic 1180 - - aws 1181 - - gcp 1182 - type: string 1183 - region: 1184 - description: The bucket region. 1185 - type: string 1186 - secretRef: 1187 - description: |- 1188 - The name of the secret containing authentication credentials 1189 - for the Bucket. 1190 - properties: 1191 - name: 1192 - description: Name of the referent. 1193 - type: string 1194 - required: 1195 - - name 1196 - type: object 1197 - suspend: 1198 - description: This flag tells the controller to suspend the reconciliation of this source. 1199 - type: boolean 1200 - timeout: 1201 - default: 60s 1202 - description: The timeout for download operations, defaults to 60s. 1203 - type: string 1204 - required: 1205 - - bucketName 1206 - - endpoint 1207 - - interval 1208 - type: object 1209 + required: 1210 + - name 1211 + type: object 1212 + required: 1213 + - endpoint 1214 + - provider 1215 + type: object 1216 + suspend: 1217 + description: |- 1218 + Suspend tells the controller to suspend the reconciliation of this 1219 + Bucket. 1220 + type: boolean 1221 + timeout: 1222 + default: 60s 1223 + description: Timeout for fetch operations, defaults to 60s. 1224 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1225 + type: string 1226 + required: 1227 + - bucketName 1228 + - endpoint 1229 + - interval 1230 + type: object 1231 + x-kubernetes-validations: 1232 + - message: STS configuration is only supported for the 'aws' and 'generic' 1233 + Bucket providers 1234 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 1235 + - message: '''aws'' is the only supported STS provider for the ''aws'' 1236 + Bucket provider' 1237 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 1238 + == 'aws' 1239 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 1240 + Bucket provider' 1241 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 1242 + == 'ldap' 1243 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 1244 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 1245 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 1246 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 1247 + status: 1248 + default: 1249 + observedGeneration: -1 1250 + description: BucketStatus records the observed state of a Bucket. 1251 + properties: 1252 + artifact: 1253 + description: Artifact represents the last successful Bucket reconciliation. 1254 + properties: 1255 + digest: 1256 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1257 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1258 + type: string 1259 + lastUpdateTime: 1260 + description: |- 1261 + LastUpdateTime is the timestamp corresponding to the last update of the 1262 + Artifact. 1263 + format: date-time 1264 + type: string 1265 + metadata: 1266 + additionalProperties: 1267 + type: string 1268 + description: Metadata holds upstream information such as OCI annotations. 1269 + type: object 1270 + path: 1271 + description: |- 1272 + Path is the relative file path of the Artifact. It can be used to locate 1273 + the file in the root of the Artifact storage on the local file system of 1274 + the controller managing the Source. 1275 + type: string 1276 + revision: 1277 + description: |- 1278 + Revision is a human-readable identifier traceable in the origin source 1279 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1280 + type: string 1281 + size: 1282 + description: Size is the number of bytes in the file. 1283 + format: int64 1284 + type: integer 1285 + url: 1286 + description: |- 1287 + URL is the HTTP address of the Artifact as exposed by the controller 1288 + managing the Source. It can be used to retrieve the Artifact for 1289 + consumption, e.g. by another controller applying the Artifact contents. 1290 + type: string 1291 + required: 1292 + - lastUpdateTime 1293 + - path 1294 + - revision 1295 + - url 1296 + type: object 1297 + conditions: 1298 + description: Conditions holds the conditions for the Bucket. 1299 + items: 1300 + description: Condition contains details for one aspect of the current 1301 + state of this API Resource. 1302 + properties: 1303 + lastTransitionTime: 1304 + description: |- 1305 + lastTransitionTime is the last time the condition transitioned from one status to another. 1306 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1307 + format: date-time 1308 + type: string 1309 + message: 1310 + description: |- 1311 + message is a human readable message indicating details about the transition. 1312 + This may be an empty string. 1313 + maxLength: 32768 1314 + type: string 1315 + observedGeneration: 1316 + description: |- 1317 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1318 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1319 + with respect to the current state of the instance. 1320 + format: int64 1321 + minimum: 0 1322 + type: integer 1323 + reason: 1324 + description: |- 1325 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1326 + Producers of specific condition types may define expected values and meanings for this field, 1327 + and whether the values are considered a guaranteed API. 1328 + The value should be a CamelCase string. 1329 + This field may not be empty. 1330 + maxLength: 1024 1331 + minLength: 1 1332 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1333 + type: string 1334 status: 1335 - default: 1336 - observedGeneration: -1 1337 - description: BucketStatus defines the observed state of a bucket 1338 - properties: 1339 - artifact: 1340 - description: Artifact represents the output of the last successful Bucket sync. 1341 - properties: 1342 - checksum: 1343 - description: Checksum is the SHA256 checksum of the artifact. 1344 - type: string 1345 - lastUpdateTime: 1346 - description: |- 1347 - LastUpdateTime is the timestamp corresponding to the last update of this 1348 - artifact. 1349 - format: date-time 1350 - type: string 1351 - path: 1352 - description: Path is the relative file path of this artifact. 1353 - type: string 1354 - revision: 1355 - description: |- 1356 - Revision is a human readable identifier traceable in the origin source 1357 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 1358 - chart version, etc. 1359 - type: string 1360 - url: 1361 - description: URL is the HTTP address of this artifact. 1362 - type: string 1363 - required: 1364 - - lastUpdateTime 1365 - - path 1366 - - url 1367 - type: object 1368 - conditions: 1369 - description: Conditions holds the conditions for the Bucket. 1370 - items: 1371 - description: Condition contains details for one aspect of the current state of this API 1372 - Resource. 1373 - properties: 1374 - lastTransitionTime: 1375 - description: |- 1376 - lastTransitionTime is the last time the condition transitioned from one status to another. 1377 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1378 - format: date-time 1379 - type: string 1380 - message: 1381 - description: |- 1382 - message is a human readable message indicating details about the transition. 1383 - This may be an empty string. 1384 - maxLength: 32768 1385 - type: string 1386 - observedGeneration: 1387 - description: |- 1388 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1389 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1390 - with respect to the current state of the instance. 1391 - format: int64 1392 - minimum: 0 1393 - type: integer 1394 - reason: 1395 - description: |- 1396 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1397 - Producers of specific condition types may define expected values and meanings for this field, 1398 - and whether the values are considered a guaranteed API. 1399 - The value should be a CamelCase string. 1400 - This field may not be empty. 1401 - maxLength: 1024 1402 - minLength: 1 1403 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1404 - type: string 1405 - status: 1406 - description: status of the condition, one of True, False, Unknown. 1407 - enum: 1408 - - "True" 1409 - - "False" 1410 - - Unknown 1411 - type: string 1412 - type: 1413 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1414 - maxLength: 316 1415 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1416 - type: string 1417 - required: 1418 - - lastTransitionTime 1419 - - message 1420 - - reason 1421 - - status 1422 - - type 1423 - type: object 1424 - type: array 1425 - lastHandledReconcileAt: 1426 - description: |- 1427 - LastHandledReconcileAt holds the value of the most recent 1428 - reconcile request value, so a change of the annotation value 1429 - can be detected. 1430 - type: string 1431 - observedGeneration: 1432 - description: ObservedGeneration is the last observed generation. 1433 - format: int64 1434 - type: integer 1435 - url: 1436 - description: URL is the download link for the artifact output of the last Bucket sync. 1437 - type: string 1438 - type: object 1439 + description: status of the condition, one of True, False, Unknown. 1440 + enum: 1441 + - "True" 1442 + - "False" 1443 + - Unknown 1444 + type: string 1445 + type: 1446 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1447 + maxLength: 316 1448 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1449 + type: string 1450 + required: 1451 + - lastTransitionTime 1452 + - message 1453 + - reason 1454 + - status 1455 + - type 1456 + type: object 1457 + type: array 1458 + lastHandledReconcileAt: 1459 + description: |- 1460 + LastHandledReconcileAt holds the value of the most recent 1461 + reconcile request value, so a change of the annotation value 1462 + can be detected. 1463 + type: string 1464 + observedGeneration: 1465 + description: ObservedGeneration is the last observed generation of 1466 + the Bucket object. 1467 + format: int64 1468 + type: integer 1469 + observedIgnore: 1470 + description: |- 1471 + ObservedIgnore is the observed exclusion patterns used for constructing 1472 + the source artifact. 1473 + type: string 1474 + url: 1475 + description: |- 1476 + URL is the dynamic fetch link for the latest Artifact. 1477 + It is provided on a "best effort" basis, and using the precise 1478 + BucketStatus.Artifact data is recommended. 1479 + type: string 1480 + type: object 1481 + type: object 1482 + served: true 1483 + storage: true 1484 + subresources: 1485 + status: {} 1486 + - additionalPrinterColumns: 1487 + - jsonPath: .spec.endpoint 1488 + name: Endpoint 1489 + type: string 1490 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1491 + name: Ready 1492 + type: string 1493 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1494 + name: Status 1495 + type: string 1496 + - jsonPath: .metadata.creationTimestamp 1497 + name: Age 1498 + type: date 1499 + deprecated: true 1500 + deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1 1501 + name: v1beta1 1502 + schema: 1503 + openAPIV3Schema: 1504 + description: Bucket is the Schema for the buckets API 1505 + properties: 1506 + apiVersion: 1507 + description: |- 1508 + APIVersion defines the versioned schema of this representation of an object. 1509 + Servers should convert recognized schemas to the latest internal value, and 1510 + may reject unrecognized values. 1511 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1512 + type: string 1513 + kind: 1514 + description: |- 1515 + Kind is a string value representing the REST resource this object represents. 1516 + Servers may infer this from the endpoint the client submits requests to. 1517 + Cannot be updated. 1518 + In CamelCase. 1519 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1520 + type: string 1521 + metadata: 1522 + type: object 1523 + spec: 1524 + description: BucketSpec defines the desired state of an S3 compatible 1525 + bucket 1526 + properties: 1527 + accessFrom: 1528 + description: AccessFrom defines an Access Control List for allowing 1529 + cross-namespace references to this object. 1530 + properties: 1531 + namespaceSelectors: 1532 + description: |- 1533 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1534 + Items in this list are evaluated using a logical OR operation. 1535 + items: 1536 + description: |- 1537 + NamespaceSelector selects the namespaces to which this ACL applies. 1538 + An empty map of MatchLabels matches all namespaces in a cluster. 1539 + properties: 1540 + matchLabels: 1541 + additionalProperties: 1542 + type: string 1543 + description: |- 1544 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1545 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1546 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1547 + type: object 1548 + type: object 1549 + type: array 1550 + required: 1551 + - namespaceSelectors 1552 type: object 1553 - served: true 1554 - storage: false 1555 - subresources: 1556 - status: {} 1557 - - additionalPrinterColumns: 1558 - - jsonPath: .spec.endpoint 1559 - name: Endpoint 1560 - type: string 1561 - - jsonPath: .metadata.creationTimestamp 1562 - name: Age 1563 - type: date 1564 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1565 - name: Ready 1566 - type: string 1567 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1568 - name: Status 1569 - type: string 1570 - deprecated: true 1571 - deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1572 - name: v1beta2 1573 - schema: 1574 - openAPIV3Schema: 1575 - description: Bucket is the Schema for the buckets API. 1576 + bucketName: 1577 + description: The bucket name. 1578 + type: string 1579 + endpoint: 1580 + description: The bucket endpoint address. 1581 + type: string 1582 + ignore: 1583 + description: |- 1584 + Ignore overrides the set of excluded patterns in the .sourceignore format 1585 + (which is the same as .gitignore). If not provided, a default will be used, 1586 + consult the documentation for your version to find out what those are. 1587 + type: string 1588 + insecure: 1589 + description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. 1590 + type: boolean 1591 + interval: 1592 + description: The interval at which to check for bucket updates. 1593 + type: string 1594 + provider: 1595 + default: generic 1596 + description: The S3 compatible storage provider name, default ('generic'). 1597 + enum: 1598 + - generic 1599 + - aws 1600 + - gcp 1601 + type: string 1602 + region: 1603 + description: The bucket region. 1604 + type: string 1605 + secretRef: 1606 + description: |- 1607 + The name of the secret containing authentication credentials 1608 + for the Bucket. 1609 properties: 1610 - apiVersion: 1611 - description: |- 1612 - APIVersion defines the versioned schema of this representation of an object. 1613 - Servers should convert recognized schemas to the latest internal value, and 1614 - may reject unrecognized values. 1615 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1616 - type: string 1617 - kind: 1618 - description: |- 1619 - Kind is a string value representing the REST resource this object represents. 1620 - Servers may infer this from the endpoint the client submits requests to. 1621 - Cannot be updated. 1622 - In CamelCase. 1623 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1624 - type: string 1625 - metadata: 1626 - type: object 1627 - spec: 1628 - description: |- 1629 - BucketSpec specifies the required configuration to produce an Artifact for 1630 - an object storage bucket. 1631 - properties: 1632 - accessFrom: 1633 - description: |- 1634 - AccessFrom specifies an Access Control List for allowing cross-namespace 1635 - references to this object. 1636 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1637 - properties: 1638 - namespaceSelectors: 1639 - description: |- 1640 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1641 - Items in this list are evaluated using a logical OR operation. 1642 - items: 1643 - description: |- 1644 - NamespaceSelector selects the namespaces to which this ACL applies. 1645 - An empty map of MatchLabels matches all namespaces in a cluster. 1646 - properties: 1647 - matchLabels: 1648 - additionalProperties: 1649 - type: string 1650 - description: |- 1651 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1652 - map is equivalent to an element of matchExpressions, whose key field is "key", the 1653 - operator is "In", and the values array contains only "value". The requirements are ANDed. 1654 - type: object 1655 - type: object 1656 - type: array 1657 - required: 1658 - - namespaceSelectors 1659 - type: object 1660 - bucketName: 1661 - description: BucketName is the name of the object storage bucket. 1662 - type: string 1663 - certSecretRef: 1664 - description: |- 1665 - CertSecretRef can be given the name of a Secret containing 1666 - either or both of 1667 + name: 1668 + description: Name of the referent. 1669 + type: string 1670 + required: 1671 + - name 1672 + type: object 1673 + suspend: 1674 + description: This flag tells the controller to suspend the reconciliation 1675 + of this source. 1676 + type: boolean 1677 + timeout: 1678 + default: 60s 1679 + description: The timeout for download operations, defaults to 60s. 1680 + type: string 1681 + required: 1682 + - bucketName 1683 + - endpoint 1684 + - interval 1685 + type: object 1686 + status: 1687 + default: 1688 + observedGeneration: -1 1689 + description: BucketStatus defines the observed state of a bucket 1690 + properties: 1691 + artifact: 1692 + description: Artifact represents the output of the last successful 1693 + Bucket sync. 1694 + properties: 1695 + checksum: 1696 + description: Checksum is the SHA256 checksum of the artifact. 1697 + type: string 1698 + lastUpdateTime: 1699 + description: |- 1700 + LastUpdateTime is the timestamp corresponding to the last update of this 1701 + artifact. 1702 + format: date-time 1703 + type: string 1704 + path: 1705 + description: Path is the relative file path of this artifact. 1706 + type: string 1707 + revision: 1708 + description: |- 1709 + Revision is a human readable identifier traceable in the origin source 1710 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 1711 + chart version, etc. 1712 + type: string 1713 + url: 1714 + description: URL is the HTTP address of this artifact. 1715 + type: string 1716 + required: 1717 + - lastUpdateTime 1718 + - path 1719 + - url 1720 + type: object 1721 + conditions: 1722 + description: Conditions holds the conditions for the Bucket. 1723 + items: 1724 + description: Condition contains details for one aspect of the current 1725 + state of this API Resource. 1726 + properties: 1727 + lastTransitionTime: 1728 + description: |- 1729 + lastTransitionTime is the last time the condition transitioned from one status to another. 1730 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1731 + format: date-time 1732 + type: string 1733 + message: 1734 + description: |- 1735 + message is a human readable message indicating details about the transition. 1736 + This may be an empty string. 1737 + maxLength: 32768 1738 + type: string 1739 + observedGeneration: 1740 + description: |- 1741 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1742 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1743 + with respect to the current state of the instance. 1744 + format: int64 1745 + minimum: 0 1746 + type: integer 1747 + reason: 1748 + description: |- 1749 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1750 + Producers of specific condition types may define expected values and meanings for this field, 1751 + and whether the values are considered a guaranteed API. 1752 + The value should be a CamelCase string. 1753 + This field may not be empty. 1754 + maxLength: 1024 1755 + minLength: 1 1756 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1757 + type: string 1758 + status: 1759 + description: status of the condition, one of True, False, Unknown. 1760 + enum: 1761 + - "True" 1762 + - "False" 1763 + - Unknown 1764 + type: string 1765 + type: 1766 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1767 + maxLength: 316 1768 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1769 + type: string 1770 + required: 1771 + - lastTransitionTime 1772 + - message 1773 + - reason 1774 + - status 1775 + - type 1776 + type: object 1777 + type: array 1778 + lastHandledReconcileAt: 1779 + description: |- 1780 + LastHandledReconcileAt holds the value of the most recent 1781 + reconcile request value, so a change of the annotation value 1782 + can be detected. 1783 + type: string 1784 + observedGeneration: 1785 + description: ObservedGeneration is the last observed generation. 1786 + format: int64 1787 + type: integer 1788 + url: 1789 + description: URL is the download link for the artifact output of the 1790 + last Bucket sync. 1791 + type: string 1792 + type: object 1793 + type: object 1794 + served: true 1795 + storage: false 1796 + subresources: 1797 + status: {} 1798 + - additionalPrinterColumns: 1799 + - jsonPath: .spec.endpoint 1800 + name: Endpoint 1801 + type: string 1802 + - jsonPath: .metadata.creationTimestamp 1803 + name: Age 1804 + type: date 1805 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1806 + name: Ready 1807 + type: string 1808 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1809 + name: Status 1810 + type: string 1811 + deprecated: true 1812 + deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1813 + name: v1beta2 1814 + schema: 1815 + openAPIV3Schema: 1816 + description: Bucket is the Schema for the buckets API. 1817 + properties: 1818 + apiVersion: 1819 + description: |- 1820 + APIVersion defines the versioned schema of this representation of an object. 1821 + Servers should convert recognized schemas to the latest internal value, and 1822 + may reject unrecognized values. 1823 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1824 + type: string 1825 + kind: 1826 + description: |- 1827 + Kind is a string value representing the REST resource this object represents. 1828 + Servers may infer this from the endpoint the client submits requests to. 1829 + Cannot be updated. 1830 + In CamelCase. 1831 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1832 + type: string 1833 + metadata: 1834 + type: object 1835 + spec: 1836 + description: |- 1837 + BucketSpec specifies the required configuration to produce an Artifact for 1838 + an object storage bucket. 1839 + properties: 1840 + accessFrom: 1841 + description: |- 1842 + AccessFrom specifies an Access Control List for allowing cross-namespace 1843 + references to this object. 1844 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1845 + properties: 1846 + namespaceSelectors: 1847 + description: |- 1848 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1849 + Items in this list are evaluated using a logical OR operation. 1850 + items: 1851 + description: |- 1852 + NamespaceSelector selects the namespaces to which this ACL applies. 1853 + An empty map of MatchLabels matches all namespaces in a cluster. 1854 + properties: 1855 + matchLabels: 1856 + additionalProperties: 1857 + type: string 1858 + description: |- 1859 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1860 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1861 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1862 + type: object 1863 + type: object 1864 + type: array 1865 + required: 1866 + - namespaceSelectors 1867 + type: object 1868 + bucketName: 1869 + description: BucketName is the name of the object storage bucket. 1870 + type: string 1871 + certSecretRef: 1872 + description: |- 1873 + CertSecretRef can be given the name of a Secret containing 1874 + either or both of 1875 1876 - - a PEM-encoded client certificate (`tls.crt`) and private 1877 - key (`tls.key`); 1878 - - a PEM-encoded CA certificate (`ca.crt`) 1879 + - a PEM-encoded client certificate (`tls.crt`) and private 1880 + key (`tls.key`); 1881 + - a PEM-encoded CA certificate (`ca.crt`) 1882 1883 - and whichever are supplied, will be used for connecting to the 1884 - bucket. The client cert and key are useful if you are 1885 - authenticating with a certificate; the CA cert is useful if 1886 - you are using a self-signed server certificate. The Secret must 1887 - be of type `Opaque` or `kubernetes.io/tls`. 1888 + and whichever are supplied, will be used for connecting to the 1889 + bucket. The client cert and key are useful if you are 1890 + authenticating with a certificate; the CA cert is useful if 1891 + you are using a self-signed server certificate. The Secret must 1892 + be of type `Opaque` or `kubernetes.io/tls`. 1893 1894 - This field is only supported for the `generic` provider. 1895 - properties: 1896 - name: 1897 - description: Name of the referent. 1898 - type: string 1899 - required: 1900 - - name 1901 - type: object 1902 - endpoint: 1903 - description: Endpoint is the object storage address the BucketName is located at. 1904 - type: string 1905 - ignore: 1906 - description: |- 1907 - Ignore overrides the set of excluded patterns in the .sourceignore format 1908 - (which is the same as .gitignore). If not provided, a default will be used, 1909 - consult the documentation for your version to find out what those are. 1910 - type: string 1911 - insecure: 1912 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1913 - type: boolean 1914 - interval: 1915 - description: |- 1916 - Interval at which the Bucket Endpoint is checked for updates. 1917 - This interval is approximate and may be subject to jitter to ensure 1918 - efficient use of resources. 1919 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1920 - type: string 1921 - prefix: 1922 - description: Prefix to use for server-side filtering of files in the Bucket. 1923 - type: string 1924 - provider: 1925 - default: generic 1926 - description: |- 1927 - Provider of the object storage bucket. 1928 - Defaults to 'generic', which expects an S3 (API) compatible object 1929 - storage. 1930 - enum: 1931 - - generic 1932 - - aws 1933 - - gcp 1934 - - azure 1935 - type: string 1936 - proxySecretRef: 1937 - description: |- 1938 - ProxySecretRef specifies the Secret containing the proxy configuration 1939 - to use while communicating with the Bucket server. 1940 - properties: 1941 - name: 1942 - description: Name of the referent. 1943 - type: string 1944 - required: 1945 - - name 1946 - type: object 1947 - region: 1948 - description: Region of the Endpoint where the BucketName is located in. 1949 - type: string 1950 - secretRef: 1951 - description: |- 1952 - SecretRef specifies the Secret containing authentication credentials 1953 - for the Bucket. 1954 - properties: 1955 - name: 1956 - description: Name of the referent. 1957 - type: string 1958 - required: 1959 - - name 1960 - type: object 1961 - sts: 1962 - description: |- 1963 - STS specifies the required configuration to use a Security Token 1964 - Service for fetching temporary credentials to authenticate in a 1965 - Bucket provider. 1966 + This field is only supported for the `generic` provider. 1967 + properties: 1968 + name: 1969 + description: Name of the referent. 1970 + type: string 1971 + required: 1972 + - name 1973 + type: object 1974 + endpoint: 1975 + description: Endpoint is the object storage address the BucketName 1976 + is located at. 1977 + type: string 1978 + ignore: 1979 + description: |- 1980 + Ignore overrides the set of excluded patterns in the .sourceignore format 1981 + (which is the same as .gitignore). If not provided, a default will be used, 1982 + consult the documentation for your version to find out what those are. 1983 + type: string 1984 + insecure: 1985 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1986 + type: boolean 1987 + interval: 1988 + description: |- 1989 + Interval at which the Bucket Endpoint is checked for updates. 1990 + This interval is approximate and may be subject to jitter to ensure 1991 + efficient use of resources. 1992 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1993 + type: string 1994 + prefix: 1995 + description: Prefix to use for server-side filtering of files in the 1996 + Bucket. 1997 + type: string 1998 + provider: 1999 + default: generic 2000 + description: |- 2001 + Provider of the object storage bucket. 2002 + Defaults to 'generic', which expects an S3 (API) compatible object 2003 + storage. 2004 + enum: 2005 + - generic 2006 + - aws 2007 + - gcp 2008 + - azure 2009 + type: string 2010 + proxySecretRef: 2011 + description: |- 2012 + ProxySecretRef specifies the Secret containing the proxy configuration 2013 + to use while communicating with the Bucket server. 2014 + properties: 2015 + name: 2016 + description: Name of the referent. 2017 + type: string 2018 + required: 2019 + - name 2020 + type: object 2021 + region: 2022 + description: Region of the Endpoint where the BucketName is located 2023 + in. 2024 + type: string 2025 + secretRef: 2026 + description: |- 2027 + SecretRef specifies the Secret containing authentication credentials 2028 + for the Bucket. 2029 + properties: 2030 + name: 2031 + description: Name of the referent. 2032 + type: string 2033 + required: 2034 + - name 2035 + type: object 2036 + sts: 2037 + description: |- 2038 + STS specifies the required configuration to use a Security Token 2039 + Service for fetching temporary credentials to authenticate in a 2040 + Bucket provider. 2041 2042 - This field is only supported for the `aws` and `generic` providers. 2043 - properties: 2044 - certSecretRef: 2045 - description: |- 2046 - CertSecretRef can be given the name of a Secret containing 2047 - either or both of 2048 + This field is only supported for the `aws` and `generic` providers. 2049 + properties: 2050 + certSecretRef: 2051 + description: |- 2052 + CertSecretRef can be given the name of a Secret containing 2053 + either or both of 2054 2055 - - a PEM-encoded client certificate (`tls.crt`) and private 2056 - key (`tls.key`); 2057 - - a PEM-encoded CA certificate (`ca.crt`) 2058 + - a PEM-encoded client certificate (`tls.crt`) and private 2059 + key (`tls.key`); 2060 + - a PEM-encoded CA certificate (`ca.crt`) 2061 2062 - and whichever are supplied, will be used for connecting to the 2063 - STS endpoint. The client cert and key are useful if you are 2064 - authenticating with a certificate; the CA cert is useful if 2065 - you are using a self-signed server certificate. The Secret must 2066 - be of type `Opaque` or `kubernetes.io/tls`. 2067 + and whichever are supplied, will be used for connecting to the 2068 + STS endpoint. The client cert and key are useful if you are 2069 + authenticating with a certificate; the CA cert is useful if 2070 + you are using a self-signed server certificate. The Secret must 2071 + be of type `Opaque` or `kubernetes.io/tls`. 2072 2073 - This field is only supported for the `ldap` provider. 2074 - properties: 2075 - name: 2076 - description: Name of the referent. 2077 - type: string 2078 - required: 2079 - - name 2080 - type: object 2081 - endpoint: 2082 - description: |- 2083 - Endpoint is the HTTP/S endpoint of the Security Token Service from 2084 - where temporary credentials will be fetched. 2085 - pattern: ^(http|https)://.*$ 2086 - type: string 2087 - provider: 2088 - description: Provider of the Security Token Service. 2089 - enum: 2090 - - aws 2091 - - ldap 2092 - type: string 2093 - secretRef: 2094 - description: |- 2095 - SecretRef specifies the Secret containing authentication credentials 2096 - for the STS endpoint. This Secret must contain the fields `username` 2097 - and `password` and is supported only for the `ldap` provider. 2098 - properties: 2099 - name: 2100 - description: Name of the referent. 2101 - type: string 2102 - required: 2103 - - name 2104 - type: object 2105 - required: 2106 - - endpoint 2107 - - provider 2108 - type: object 2109 - suspend: 2110 - description: |- 2111 - Suspend tells the controller to suspend the reconciliation of this 2112 - Bucket. 2113 - type: boolean 2114 - timeout: 2115 - default: 60s 2116 - description: Timeout for fetch operations, defaults to 60s. 2117 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2118 - type: string 2119 - required: 2120 - - bucketName 2121 - - endpoint 2122 - - interval 2123 - type: object 2124 - x-kubernetes-validations: 2125 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 2126 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 2127 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 2128 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 2129 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 2130 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 2131 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 2132 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 2133 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 2134 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 2135 - status: 2136 - default: 2137 - observedGeneration: -1 2138 - description: BucketStatus records the observed state of a Bucket. 2139 - properties: 2140 - artifact: 2141 - description: Artifact represents the last successful Bucket reconciliation. 2142 - properties: 2143 - digest: 2144 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2145 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2146 - type: string 2147 - lastUpdateTime: 2148 - description: |- 2149 - LastUpdateTime is the timestamp corresponding to the last update of the 2150 - Artifact. 2151 - format: date-time 2152 - type: string 2153 - metadata: 2154 - additionalProperties: 2155 - type: string 2156 - description: Metadata holds upstream information such as OCI annotations. 2157 - type: object 2158 - path: 2159 - description: |- 2160 - Path is the relative file path of the Artifact. It can be used to locate 2161 - the file in the root of the Artifact storage on the local file system of 2162 - the controller managing the Source. 2163 - type: string 2164 - revision: 2165 - description: |- 2166 - Revision is a human-readable identifier traceable in the origin source 2167 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2168 - type: string 2169 - size: 2170 - description: Size is the number of bytes in the file. 2171 - format: int64 2172 - type: integer 2173 - url: 2174 - description: |- 2175 - URL is the HTTP address of the Artifact as exposed by the controller 2176 - managing the Source. It can be used to retrieve the Artifact for 2177 - consumption, e.g. by another controller applying the Artifact contents. 2178 - type: string 2179 - required: 2180 - - lastUpdateTime 2181 - - path 2182 - - revision 2183 - - url 2184 - type: object 2185 - conditions: 2186 - description: Conditions holds the conditions for the Bucket. 2187 - items: 2188 - description: Condition contains details for one aspect of the current state of this API 2189 - Resource. 2190 - properties: 2191 - lastTransitionTime: 2192 - description: |- 2193 - lastTransitionTime is the last time the condition transitioned from one status to another. 2194 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2195 - format: date-time 2196 - type: string 2197 - message: 2198 - description: |- 2199 - message is a human readable message indicating details about the transition. 2200 - This may be an empty string. 2201 - maxLength: 32768 2202 - type: string 2203 - observedGeneration: 2204 - description: |- 2205 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2206 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2207 - with respect to the current state of the instance. 2208 - format: int64 2209 - minimum: 0 2210 - type: integer 2211 - reason: 2212 - description: |- 2213 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2214 - Producers of specific condition types may define expected values and meanings for this field, 2215 - and whether the values are considered a guaranteed API. 2216 - The value should be a CamelCase string. 2217 - This field may not be empty. 2218 - maxLength: 1024 2219 - minLength: 1 2220 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2221 - type: string 2222 - status: 2223 - description: status of the condition, one of True, False, Unknown. 2224 - enum: 2225 - - "True" 2226 - - "False" 2227 - - Unknown 2228 - type: string 2229 - type: 2230 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 2231 - maxLength: 316 2232 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2233 - type: string 2234 - required: 2235 - - lastTransitionTime 2236 - - message 2237 - - reason 2238 - - status 2239 - - type 2240 - type: object 2241 - type: array 2242 - lastHandledReconcileAt: 2243 - description: |- 2244 - LastHandledReconcileAt holds the value of the most recent 2245 - reconcile request value, so a change of the annotation value 2246 - can be detected. 2247 - type: string 2248 - observedGeneration: 2249 - description: ObservedGeneration is the last observed generation of the Bucket object. 2250 - format: int64 2251 - type: integer 2252 - observedIgnore: 2253 - description: |- 2254 - ObservedIgnore is the observed exclusion patterns used for constructing 2255 - the source artifact. 2256 - type: string 2257 - url: 2258 - description: |- 2259 - URL is the dynamic fetch link for the latest Artifact. 2260 - It is provided on a "best effort" basis, and using the precise 2261 - BucketStatus.Artifact data is recommended. 2262 - type: string 2263 - type: object 2264 + This field is only supported for the `ldap` provider. 2265 + properties: 2266 + name: 2267 + description: Name of the referent. 2268 + type: string 2269 + required: 2270 + - name 2271 + type: object 2272 + endpoint: 2273 + description: |- 2274 + Endpoint is the HTTP/S endpoint of the Security Token Service from 2275 + where temporary credentials will be fetched. 2276 + pattern: ^(http|https)://.*$ 2277 + type: string 2278 + provider: 2279 + description: Provider of the Security Token Service. 2280 + enum: 2281 + - aws 2282 + - ldap 2283 + type: string 2284 + secretRef: 2285 + description: |- 2286 + SecretRef specifies the Secret containing authentication credentials 2287 + for the STS endpoint. This Secret must contain the fields `username` 2288 + and `password` and is supported only for the `ldap` provider. 2289 + properties: 2290 + name: 2291 + description: Name of the referent. 2292 + type: string 2293 + required: 2294 + - name 2295 + type: object 2296 + required: 2297 + - endpoint 2298 + - provider 2299 + type: object 2300 + suspend: 2301 + description: |- 2302 + Suspend tells the controller to suspend the reconciliation of this 2303 + Bucket. 2304 + type: boolean 2305 + timeout: 2306 + default: 60s 2307 + description: Timeout for fetch operations, defaults to 60s. 2308 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2309 + type: string 2310 + required: 2311 + - bucketName 2312 + - endpoint 2313 + - interval 2314 + type: object 2315 + x-kubernetes-validations: 2316 + - message: STS configuration is only supported for the 'aws' and 'generic' 2317 + Bucket providers 2318 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 2319 + - message: '''aws'' is the only supported STS provider for the ''aws'' 2320 + Bucket provider' 2321 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 2322 + == 'aws' 2323 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 2324 + Bucket provider' 2325 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 2326 + == 'ldap' 2327 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 2328 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 2329 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 2330 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 2331 + status: 2332 + default: 2333 + observedGeneration: -1 2334 + description: BucketStatus records the observed state of a Bucket. 2335 + properties: 2336 + artifact: 2337 + description: Artifact represents the last successful Bucket reconciliation. 2338 + properties: 2339 + digest: 2340 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2341 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2342 + type: string 2343 + lastUpdateTime: 2344 + description: |- 2345 + LastUpdateTime is the timestamp corresponding to the last update of the 2346 + Artifact. 2347 + format: date-time 2348 + type: string 2349 + metadata: 2350 + additionalProperties: 2351 + type: string 2352 + description: Metadata holds upstream information such as OCI annotations. 2353 + type: object 2354 + path: 2355 + description: |- 2356 + Path is the relative file path of the Artifact. It can be used to locate 2357 + the file in the root of the Artifact storage on the local file system of 2358 + the controller managing the Source. 2359 + type: string 2360 + revision: 2361 + description: |- 2362 + Revision is a human-readable identifier traceable in the origin source 2363 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2364 + type: string 2365 + size: 2366 + description: Size is the number of bytes in the file. 2367 + format: int64 2368 + type: integer 2369 + url: 2370 + description: |- 2371 + URL is the HTTP address of the Artifact as exposed by the controller 2372 + managing the Source. It can be used to retrieve the Artifact for 2373 + consumption, e.g. by another controller applying the Artifact contents. 2374 + type: string 2375 + required: 2376 + - lastUpdateTime 2377 + - path 2378 + - revision 2379 + - url 2380 type: object 2381 - served: true 2382 - storage: false 2383 - subresources: 2384 - status: {} 2385 + conditions: 2386 + description: Conditions holds the conditions for the Bucket. 2387 + items: 2388 + description: Condition contains details for one aspect of the current 2389 + state of this API Resource. 2390 + properties: 2391 + lastTransitionTime: 2392 + description: |- 2393 + lastTransitionTime is the last time the condition transitioned from one status to another. 2394 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2395 + format: date-time 2396 + type: string 2397 + message: 2398 + description: |- 2399 + message is a human readable message indicating details about the transition. 2400 + This may be an empty string. 2401 + maxLength: 32768 2402 + type: string 2403 + observedGeneration: 2404 + description: |- 2405 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2406 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2407 + with respect to the current state of the instance. 2408 + format: int64 2409 + minimum: 0 2410 + type: integer 2411 + reason: 2412 + description: |- 2413 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2414 + Producers of specific condition types may define expected values and meanings for this field, 2415 + and whether the values are considered a guaranteed API. 2416 + The value should be a CamelCase string. 2417 + This field may not be empty. 2418 + maxLength: 1024 2419 + minLength: 1 2420 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2421 + type: string 2422 + status: 2423 + description: status of the condition, one of True, False, Unknown. 2424 + enum: 2425 + - "True" 2426 + - "False" 2427 + - Unknown 2428 + type: string 2429 + type: 2430 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2431 + maxLength: 316 2432 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2433 + type: string 2434 + required: 2435 + - lastTransitionTime 2436 + - message 2437 + - reason 2438 + - status 2439 + - type 2440 + type: object 2441 + type: array 2442 + lastHandledReconcileAt: 2443 + description: |- 2444 + LastHandledReconcileAt holds the value of the most recent 2445 + reconcile request value, so a change of the annotation value 2446 + can be detected. 2447 + type: string 2448 + observedGeneration: 2449 + description: ObservedGeneration is the last observed generation of 2450 + the Bucket object. 2451 + format: int64 2452 + type: integer 2453 + observedIgnore: 2454 + description: |- 2455 + ObservedIgnore is the observed exclusion patterns used for constructing 2456 + the source artifact. 2457 + type: string 2458 + url: 2459 + description: |- 2460 + URL is the dynamic fetch link for the latest Artifact. 2461 + It is provided on a "best effort" basis, and using the precise 2462 + BucketStatus.Artifact data is recommended. 2463 + type: string 2464 + type: object 2465 + type: object 2466 + served: true 2467 + storage: false 2468 + subresources: 2469 + status: {} 2470 --- 2471 apiVersion: apiextensions.k8s.io/v1 2472 kind: CustomResourceDefinition 2473 metadata: 2474 - annotations: 2475 - controller-gen.kubebuilder.io/version: v0.16.1 2476 - labels: 2477 - app.kubernetes.io/component: source-controller 2478 - app.kubernetes.io/instance: flux-system 2479 - app.kubernetes.io/part-of: flux 2480 - app.kubernetes.io/version: v2.5.1 2481 - name: gitrepositories.source.toolkit.fluxcd.io 2482 + annotations: 2483 + controller-gen.kubebuilder.io/version: v0.16.1 2484 + labels: 2485 + app.kubernetes.io/component: source-controller 2486 + app.kubernetes.io/instance: flux-system 2487 + app.kubernetes.io/part-of: flux 2488 + app.kubernetes.io/version: v2.6.4 2489 + name: gitrepositories.source.toolkit.fluxcd.io 2490 spec: 2491 - group: source.toolkit.fluxcd.io 2492 - names: 2493 - kind: GitRepository 2494 - listKind: GitRepositoryList 2495 - plural: gitrepositories 2496 - shortNames: 2497 - - gitrepo 2498 - singular: gitrepository 2499 - scope: Namespaced 2500 - versions: 2501 - - additionalPrinterColumns: 2502 - - jsonPath: .spec.url 2503 - name: URL 2504 - type: string 2505 - - jsonPath: .metadata.creationTimestamp 2506 - name: Age 2507 - type: date 2508 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2509 - name: Ready 2510 - type: string 2511 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2512 - name: Status 2513 - type: string 2514 - name: v1 2515 - schema: 2516 - openAPIV3Schema: 2517 - description: GitRepository is the Schema for the gitrepositories API. 2518 + group: source.toolkit.fluxcd.io 2519 + names: 2520 + kind: GitRepository 2521 + listKind: GitRepositoryList 2522 + plural: gitrepositories 2523 + shortNames: 2524 + - gitrepo 2525 + singular: gitrepository 2526 + scope: Namespaced 2527 + versions: 2528 + - additionalPrinterColumns: 2529 + - jsonPath: .spec.url 2530 + name: URL 2531 + type: string 2532 + - jsonPath: .metadata.creationTimestamp 2533 + name: Age 2534 + type: date 2535 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2536 + name: Ready 2537 + type: string 2538 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 2539 + name: Status 2540 + type: string 2541 + name: v1 2542 + schema: 2543 + openAPIV3Schema: 2544 + description: GitRepository is the Schema for the gitrepositories API. 2545 + properties: 2546 + apiVersion: 2547 + description: |- 2548 + APIVersion defines the versioned schema of this representation of an object. 2549 + Servers should convert recognized schemas to the latest internal value, and 2550 + may reject unrecognized values. 2551 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2552 + type: string 2553 + kind: 2554 + description: |- 2555 + Kind is a string value representing the REST resource this object represents. 2556 + Servers may infer this from the endpoint the client submits requests to. 2557 + Cannot be updated. 2558 + In CamelCase. 2559 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2560 + type: string 2561 + metadata: 2562 + type: object 2563 + spec: 2564 + description: |- 2565 + GitRepositorySpec specifies the required configuration to produce an 2566 + Artifact for a Git repository. 2567 + properties: 2568 + ignore: 2569 + description: |- 2570 + Ignore overrides the set of excluded patterns in the .sourceignore format 2571 + (which is the same as .gitignore). If not provided, a default will be used, 2572 + consult the documentation for your version to find out what those are. 2573 + type: string 2574 + include: 2575 + description: |- 2576 + Include specifies a list of GitRepository resources which Artifacts 2577 + should be included in the Artifact produced for this GitRepository. 2578 + items: 2579 + description: |- 2580 + GitRepositoryInclude specifies a local reference to a GitRepository which 2581 + Artifact (sub-)contents must be included, and where they should be placed. 2582 + properties: 2583 + fromPath: 2584 + description: |- 2585 + FromPath specifies the path to copy contents from, defaults to the root 2586 + of the Artifact. 2587 + type: string 2588 + repository: 2589 + description: |- 2590 + GitRepositoryRef specifies the GitRepository which Artifact contents 2591 + must be included. 2592 + properties: 2593 + name: 2594 + description: Name of the referent. 2595 + type: string 2596 + required: 2597 + - name 2598 + type: object 2599 + toPath: 2600 + description: |- 2601 + ToPath specifies the path to copy contents to, defaults to the name of 2602 + the GitRepositoryRef. 2603 + type: string 2604 + required: 2605 + - repository 2606 + type: object 2607 + type: array 2608 + interval: 2609 + description: |- 2610 + Interval at which the GitRepository URL is checked for updates. 2611 + This interval is approximate and may be subject to jitter to ensure 2612 + efficient use of resources. 2613 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2614 + type: string 2615 + provider: 2616 + description: |- 2617 + Provider used for authentication, can be 'azure', 'github', 'generic'. 2618 + When not specified, defaults to 'generic'. 2619 + enum: 2620 + - generic 2621 + - azure 2622 + - github 2623 + type: string 2624 + proxySecretRef: 2625 + description: |- 2626 + ProxySecretRef specifies the Secret containing the proxy configuration 2627 + to use while communicating with the Git server. 2628 properties: 2629 - apiVersion: 2630 - description: |- 2631 - APIVersion defines the versioned schema of this representation of an object. 2632 - Servers should convert recognized schemas to the latest internal value, and 2633 - may reject unrecognized values. 2634 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2635 - type: string 2636 - kind: 2637 - description: |- 2638 - Kind is a string value representing the REST resource this object represents. 2639 - Servers may infer this from the endpoint the client submits requests to. 2640 - Cannot be updated. 2641 - In CamelCase. 2642 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2643 - type: string 2644 - metadata: 2645 - type: object 2646 - spec: 2647 - description: |- 2648 - GitRepositorySpec specifies the required configuration to produce an 2649 - Artifact for a Git repository. 2650 - properties: 2651 - ignore: 2652 - description: |- 2653 - Ignore overrides the set of excluded patterns in the .sourceignore format 2654 - (which is the same as .gitignore). If not provided, a default will be used, 2655 - consult the documentation for your version to find out what those are. 2656 - type: string 2657 - include: 2658 - description: |- 2659 - Include specifies a list of GitRepository resources which Artifacts 2660 - should be included in the Artifact produced for this GitRepository. 2661 - items: 2662 - description: |- 2663 - GitRepositoryInclude specifies a local reference to a GitRepository which 2664 - Artifact (sub-)contents must be included, and where they should be placed. 2665 - properties: 2666 - fromPath: 2667 - description: |- 2668 - FromPath specifies the path to copy contents from, defaults to the root 2669 - of the Artifact. 2670 - type: string 2671 - repository: 2672 - description: |- 2673 - GitRepositoryRef specifies the GitRepository which Artifact contents 2674 - must be included. 2675 - properties: 2676 - name: 2677 - description: Name of the referent. 2678 - type: string 2679 - required: 2680 - - name 2681 - type: object 2682 - toPath: 2683 - description: |- 2684 - ToPath specifies the path to copy contents to, defaults to the name of 2685 - the GitRepositoryRef. 2686 - type: string 2687 - required: 2688 - - repository 2689 - type: object 2690 - type: array 2691 - interval: 2692 - description: |- 2693 - Interval at which the GitRepository URL is checked for updates. 2694 - This interval is approximate and may be subject to jitter to ensure 2695 - efficient use of resources. 2696 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2697 - type: string 2698 - provider: 2699 - description: |- 2700 - Provider used for authentication, can be 'azure', 'github', 'generic'. 2701 - When not specified, defaults to 'generic'. 2702 - enum: 2703 - - generic 2704 - - azure 2705 - - github 2706 - type: string 2707 - proxySecretRef: 2708 - description: |- 2709 - ProxySecretRef specifies the Secret containing the proxy configuration 2710 - to use while communicating with the Git server. 2711 - properties: 2712 - name: 2713 - description: Name of the referent. 2714 - type: string 2715 - required: 2716 - - name 2717 - type: object 2718 - recurseSubmodules: 2719 - description: |- 2720 - RecurseSubmodules enables the initialization of all submodules within 2721 - the GitRepository as cloned from the URL, using their default settings. 2722 - type: boolean 2723 - ref: 2724 - description: |- 2725 - Reference specifies the Git reference to resolve and monitor for 2726 - changes, defaults to the 'master' branch. 2727 - properties: 2728 - branch: 2729 - description: Branch to check out, defaults to 'master' if no other field is defined. 2730 - type: string 2731 - commit: 2732 - description: |- 2733 - Commit SHA to check out, takes precedence over all reference fields. 2734 + name: 2735 + description: Name of the referent. 2736 + type: string 2737 + required: 2738 + - name 2739 + type: object 2740 + recurseSubmodules: 2741 + description: |- 2742 + RecurseSubmodules enables the initialization of all submodules within 2743 + the GitRepository as cloned from the URL, using their default settings. 2744 + type: boolean 2745 + ref: 2746 + description: |- 2747 + Reference specifies the Git reference to resolve and monitor for 2748 + changes, defaults to the 'master' branch. 2749 + properties: 2750 + branch: 2751 + description: Branch to check out, defaults to 'master' if no other 2752 + field is defined. 2753 + type: string 2754 + commit: 2755 + description: |- 2756 + Commit SHA to check out, takes precedence over all reference fields. 2757 2758 - This can be combined with Branch to shallow clone the branch, in which 2759 - the commit is expected to exist. 2760 - type: string 2761 - name: 2762 - description: |- 2763 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2764 + This can be combined with Branch to shallow clone the branch, in which 2765 + the commit is expected to exist. 2766 + type: string 2767 + name: 2768 + description: |- 2769 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2770 2771 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2772 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2773 - type: string 2774 - semver: 2775 - description: SemVer tag expression to check out, takes precedence over Tag. 2776 - type: string 2777 - tag: 2778 - description: Tag to check out, takes precedence over Branch. 2779 - type: string 2780 - type: object 2781 - secretRef: 2782 - description: |- 2783 - SecretRef specifies the Secret containing authentication credentials for 2784 - the GitRepository. 2785 - For HTTPS repositories the Secret must contain 'username' and 'password' 2786 - fields for basic auth or 'bearerToken' field for token auth. 2787 - For SSH repositories the Secret must contain 'identity' 2788 - and 'known_hosts' fields. 2789 - properties: 2790 - name: 2791 - description: Name of the referent. 2792 - type: string 2793 - required: 2794 - - name 2795 - type: object 2796 - suspend: 2797 - description: |- 2798 - Suspend tells the controller to suspend the reconciliation of this 2799 - GitRepository. 2800 - type: boolean 2801 - timeout: 2802 - default: 60s 2803 - description: Timeout for Git operations like cloning, defaults to 60s. 2804 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2805 - type: string 2806 - url: 2807 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 2808 - pattern: ^(http|https|ssh)://.*$ 2809 - type: string 2810 - verify: 2811 - description: |- 2812 - Verification specifies the configuration to verify the Git commit 2813 - signature(s). 2814 - properties: 2815 - mode: 2816 - default: HEAD 2817 - description: |- 2818 - Mode specifies which Git object(s) should be verified. 2819 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2820 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2821 + type: string 2822 + semver: 2823 + description: SemVer tag expression to check out, takes precedence 2824 + over Tag. 2825 + type: string 2826 + tag: 2827 + description: Tag to check out, takes precedence over Branch. 2828 + type: string 2829 + type: object 2830 + secretRef: 2831 + description: |- 2832 + SecretRef specifies the Secret containing authentication credentials for 2833 + the GitRepository. 2834 + For HTTPS repositories the Secret must contain 'username' and 'password' 2835 + fields for basic auth or 'bearerToken' field for token auth. 2836 + For SSH repositories the Secret must contain 'identity' 2837 + and 'known_hosts' fields. 2838 + properties: 2839 + name: 2840 + description: Name of the referent. 2841 + type: string 2842 + required: 2843 + - name 2844 + type: object 2845 + sparseCheckout: 2846 + description: |- 2847 + SparseCheckout specifies a list of directories to checkout when cloning 2848 + the repository. If specified, only these directories are included in the 2849 + Artifact produced for this GitRepository. 2850 + items: 2851 + type: string 2852 + type: array 2853 + suspend: 2854 + description: |- 2855 + Suspend tells the controller to suspend the reconciliation of this 2856 + GitRepository. 2857 + type: boolean 2858 + timeout: 2859 + default: 60s 2860 + description: Timeout for Git operations like cloning, defaults to 2861 + 60s. 2862 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2863 + type: string 2864 + url: 2865 + description: URL specifies the Git repository URL, it can be an HTTP/S 2866 + or SSH address. 2867 + pattern: ^(http|https|ssh)://.*$ 2868 + type: string 2869 + verify: 2870 + description: |- 2871 + Verification specifies the configuration to verify the Git commit 2872 + signature(s). 2873 + properties: 2874 + mode: 2875 + default: HEAD 2876 + description: |- 2877 + Mode specifies which Git object(s) should be verified. 2878 2879 - The variants "head" and "HEAD" both imply the same thing, i.e. verify 2880 - the commit that the HEAD of the Git repository points to. The variant 2881 - "head" solely exists to ensure backwards compatibility. 2882 - enum: 2883 - - head 2884 - - HEAD 2885 - - Tag 2886 - - TagAndHEAD 2887 - type: string 2888 - secretRef: 2889 - description: |- 2890 - SecretRef specifies the Secret containing the public keys of trusted Git 2891 - authors. 2892 - properties: 2893 - name: 2894 - description: Name of the referent. 2895 - type: string 2896 - required: 2897 - - name 2898 - type: object 2899 - required: 2900 - - secretRef 2901 - type: object 2902 - required: 2903 - - interval 2904 - - url 2905 - type: object 2906 - status: 2907 - default: 2908 - observedGeneration: -1 2909 - description: GitRepositoryStatus records the observed state of a Git repository. 2910 - properties: 2911 - artifact: 2912 - description: Artifact represents the last successful GitRepository reconciliation. 2913 - properties: 2914 - digest: 2915 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2916 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2917 - type: string 2918 - lastUpdateTime: 2919 - description: |- 2920 - LastUpdateTime is the timestamp corresponding to the last update of the 2921 - Artifact. 2922 - format: date-time 2923 - type: string 2924 - metadata: 2925 - additionalProperties: 2926 - type: string 2927 - description: Metadata holds upstream information such as OCI annotations. 2928 - type: object 2929 - path: 2930 - description: |- 2931 - Path is the relative file path of the Artifact. It can be used to locate 2932 - the file in the root of the Artifact storage on the local file system of 2933 - the controller managing the Source. 2934 - type: string 2935 - revision: 2936 - description: |- 2937 - Revision is a human-readable identifier traceable in the origin source 2938 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2939 - type: string 2940 - size: 2941 - description: Size is the number of bytes in the file. 2942 - format: int64 2943 - type: integer 2944 - url: 2945 - description: |- 2946 - URL is the HTTP address of the Artifact as exposed by the controller 2947 - managing the Source. It can be used to retrieve the Artifact for 2948 - consumption, e.g. by another controller applying the Artifact contents. 2949 - type: string 2950 - required: 2951 - - lastUpdateTime 2952 - - path 2953 - - revision 2954 - - url 2955 - type: object 2956 - conditions: 2957 - description: Conditions holds the conditions for the GitRepository. 2958 - items: 2959 - description: Condition contains details for one aspect of the current state of this API 2960 - Resource. 2961 - properties: 2962 - lastTransitionTime: 2963 - description: |- 2964 - lastTransitionTime is the last time the condition transitioned from one status to another. 2965 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2966 - format: date-time 2967 - type: string 2968 - message: 2969 - description: |- 2970 - message is a human readable message indicating details about the transition. 2971 - This may be an empty string. 2972 - maxLength: 32768 2973 - type: string 2974 - observedGeneration: 2975 - description: |- 2976 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2977 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2978 - with respect to the current state of the instance. 2979 - format: int64 2980 - minimum: 0 2981 - type: integer 2982 - reason: 2983 - description: |- 2984 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2985 - Producers of specific condition types may define expected values and meanings for this field, 2986 - and whether the values are considered a guaranteed API. 2987 - The value should be a CamelCase string. 2988 - This field may not be empty. 2989 - maxLength: 1024 2990 - minLength: 1 2991 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2992 - type: string 2993 - status: 2994 - description: status of the condition, one of True, False, Unknown. 2995 - enum: 2996 - - "True" 2997 - - "False" 2998 - - Unknown 2999 - type: string 3000 - type: 3001 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 3002 - maxLength: 316 3003 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3004 - type: string 3005 - required: 3006 - - lastTransitionTime 3007 - - message 3008 - - reason 3009 - - status 3010 - - type 3011 - type: object 3012 - type: array 3013 - includedArtifacts: 3014 - description: |- 3015 - IncludedArtifacts contains a list of the last successfully included 3016 - Artifacts as instructed by GitRepositorySpec.Include. 3017 - items: 3018 - description: Artifact represents the output of a Source reconciliation. 3019 - properties: 3020 - digest: 3021 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3022 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3023 - type: string 3024 - lastUpdateTime: 3025 - description: |- 3026 - LastUpdateTime is the timestamp corresponding to the last update of the 3027 - Artifact. 3028 - format: date-time 3029 - type: string 3030 - metadata: 3031 - additionalProperties: 3032 - type: string 3033 - description: Metadata holds upstream information such as OCI annotations. 3034 - type: object 3035 - path: 3036 - description: |- 3037 - Path is the relative file path of the Artifact. It can be used to locate 3038 - the file in the root of the Artifact storage on the local file system of 3039 - the controller managing the Source. 3040 - type: string 3041 - revision: 3042 - description: |- 3043 - Revision is a human-readable identifier traceable in the origin source 3044 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3045 - type: string 3046 - size: 3047 - description: Size is the number of bytes in the file. 3048 - format: int64 3049 - type: integer 3050 - url: 3051 - description: |- 3052 - URL is the HTTP address of the Artifact as exposed by the controller 3053 - managing the Source. It can be used to retrieve the Artifact for 3054 - consumption, e.g. by another controller applying the Artifact contents. 3055 - type: string 3056 - required: 3057 - - lastUpdateTime 3058 - - path 3059 - - revision 3060 - - url 3061 - type: object 3062 - type: array 3063 - lastHandledReconcileAt: 3064 - description: |- 3065 - LastHandledReconcileAt holds the value of the most recent 3066 - reconcile request value, so a change of the annotation value 3067 - can be detected. 3068 - type: string 3069 - observedGeneration: 3070 - description: |- 3071 - ObservedGeneration is the last observed generation of the GitRepository 3072 - object. 3073 - format: int64 3074 - type: integer 3075 - observedIgnore: 3076 - description: |- 3077 - ObservedIgnore is the observed exclusion patterns used for constructing 3078 - the source artifact. 3079 - type: string 3080 - observedInclude: 3081 - description: |- 3082 - ObservedInclude is the observed list of GitRepository resources used to 3083 - produce the current Artifact. 3084 - items: 3085 - description: |- 3086 - GitRepositoryInclude specifies a local reference to a GitRepository which 3087 - Artifact (sub-)contents must be included, and where they should be placed. 3088 - properties: 3089 - fromPath: 3090 - description: |- 3091 - FromPath specifies the path to copy contents from, defaults to the root 3092 - of the Artifact. 3093 - type: string 3094 - repository: 3095 - description: |- 3096 - GitRepositoryRef specifies the GitRepository which Artifact contents 3097 - must be included. 3098 - properties: 3099 - name: 3100 - description: Name of the referent. 3101 - type: string 3102 - required: 3103 - - name 3104 - type: object 3105 - toPath: 3106 - description: |- 3107 - ToPath specifies the path to copy contents to, defaults to the name of 3108 - the GitRepositoryRef. 3109 - type: string 3110 - required: 3111 - - repository 3112 - type: object 3113 - type: array 3114 - observedRecurseSubmodules: 3115 - description: |- 3116 - ObservedRecurseSubmodules is the observed resource submodules 3117 - configuration used to produce the current Artifact. 3118 - type: boolean 3119 - sourceVerificationMode: 3120 - description: |- 3121 - SourceVerificationMode is the last used verification mode indicating 3122 - which Git object(s) have been verified. 3123 - type: string 3124 - type: object 3125 + The variants "head" and "HEAD" both imply the same thing, i.e. verify 3126 + the commit that the HEAD of the Git repository points to. The variant 3127 + "head" solely exists to ensure backwards compatibility. 3128 + enum: 3129 + - head 3130 + - HEAD 3131 + - Tag 3132 + - TagAndHEAD 3133 + type: string 3134 + secretRef: 3135 + description: |- 3136 + SecretRef specifies the Secret containing the public keys of trusted Git 3137 + authors. 3138 + properties: 3139 + name: 3140 + description: Name of the referent. 3141 + type: string 3142 + required: 3143 + - name 3144 + type: object 3145 + required: 3146 + - secretRef 3147 type: object 3148 - served: true 3149 - storage: true 3150 - subresources: 3151 - status: {} 3152 - - additionalPrinterColumns: 3153 - - jsonPath: .spec.url 3154 - name: URL 3155 - type: string 3156 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 3157 - name: Ready 3158 - type: string 3159 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 3160 - name: Status 3161 - type: string 3162 - - jsonPath: .metadata.creationTimestamp 3163 - name: Age 3164 - type: date 3165 - deprecated: true 3166 - deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1 3167 - name: v1beta1 3168 - schema: 3169 - openAPIV3Schema: 3170 - description: GitRepository is the Schema for the gitrepositories API 3171 + required: 3172 + - interval 3173 + - url 3174 + type: object 3175 + status: 3176 + default: 3177 + observedGeneration: -1 3178 + description: GitRepositoryStatus records the observed state of a Git repository. 3179 + properties: 3180 + artifact: 3181 + description: Artifact represents the last successful GitRepository 3182 + reconciliation. 3183 properties: 3184 - apiVersion: 3185 - description: |- 3186 - APIVersion defines the versioned schema of this representation of an object. 3187 - Servers should convert recognized schemas to the latest internal value, and 3188 - may reject unrecognized values. 3189 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3190 + digest: 3191 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3192 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3193 + type: string 3194 + lastUpdateTime: 3195 + description: |- 3196 + LastUpdateTime is the timestamp corresponding to the last update of the 3197 + Artifact. 3198 + format: date-time 3199 + type: string 3200 + metadata: 3201 + additionalProperties: 3202 + type: string 3203 + description: Metadata holds upstream information such as OCI annotations. 3204 + type: object 3205 + path: 3206 + description: |- 3207 + Path is the relative file path of the Artifact. It can be used to locate 3208 + the file in the root of the Artifact storage on the local file system of 3209 + the controller managing the Source. 3210 + type: string 3211 + revision: 3212 + description: |- 3213 + Revision is a human-readable identifier traceable in the origin source 3214 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3215 + type: string 3216 + size: 3217 + description: Size is the number of bytes in the file. 3218 + format: int64 3219 + type: integer 3220 + url: 3221 + description: |- 3222 + URL is the HTTP address of the Artifact as exposed by the controller 3223 + managing the Source. It can be used to retrieve the Artifact for 3224 + consumption, e.g. by another controller applying the Artifact contents. 3225 + type: string 3226 + required: 3227 + - lastUpdateTime 3228 + - path 3229 + - revision 3230 + - url 3231 + type: object 3232 + conditions: 3233 + description: Conditions holds the conditions for the GitRepository. 3234 + items: 3235 + description: Condition contains details for one aspect of the current 3236 + state of this API Resource. 3237 + properties: 3238 + lastTransitionTime: 3239 + description: |- 3240 + lastTransitionTime is the last time the condition transitioned from one status to another. 3241 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3242 + format: date-time 3243 + type: string 3244 + message: 3245 + description: |- 3246 + message is a human readable message indicating details about the transition. 3247 + This may be an empty string. 3248 + maxLength: 32768 3249 + type: string 3250 + observedGeneration: 3251 + description: |- 3252 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3253 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3254 + with respect to the current state of the instance. 3255 + format: int64 3256 + minimum: 0 3257 + type: integer 3258 + reason: 3259 + description: |- 3260 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3261 + Producers of specific condition types may define expected values and meanings for this field, 3262 + and whether the values are considered a guaranteed API. 3263 + The value should be a CamelCase string. 3264 + This field may not be empty. 3265 + maxLength: 1024 3266 + minLength: 1 3267 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3268 + type: string 3269 + status: 3270 + description: status of the condition, one of True, False, Unknown. 3271 + enum: 3272 + - "True" 3273 + - "False" 3274 + - Unknown 3275 + type: string 3276 + type: 3277 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3278 + maxLength: 316 3279 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3280 + type: string 3281 + required: 3282 + - lastTransitionTime 3283 + - message 3284 + - reason 3285 + - status 3286 + - type 3287 + type: object 3288 + type: array 3289 + includedArtifacts: 3290 + description: |- 3291 + IncludedArtifacts contains a list of the last successfully included 3292 + Artifacts as instructed by GitRepositorySpec.Include. 3293 + items: 3294 + description: Artifact represents the output of a Source reconciliation. 3295 + properties: 3296 + digest: 3297 + description: Digest is the digest of the file in the form of 3298 + '<algorithm>:<checksum>'. 3299 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3300 + type: string 3301 + lastUpdateTime: 3302 + description: |- 3303 + LastUpdateTime is the timestamp corresponding to the last update of the 3304 + Artifact. 3305 + format: date-time 3306 + type: string 3307 + metadata: 3308 + additionalProperties: 3309 type: string 3310 - kind: 3311 - description: |- 3312 - Kind is a string value representing the REST resource this object represents. 3313 - Servers may infer this from the endpoint the client submits requests to. 3314 - Cannot be updated. 3315 - In CamelCase. 3316 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3317 + description: Metadata holds upstream information such as OCI 3318 + annotations. 3319 + type: object 3320 + path: 3321 + description: |- 3322 + Path is the relative file path of the Artifact. It can be used to locate 3323 + the file in the root of the Artifact storage on the local file system of 3324 + the controller managing the Source. 3325 + type: string 3326 + revision: 3327 + description: |- 3328 + Revision is a human-readable identifier traceable in the origin source 3329 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3330 + type: string 3331 + size: 3332 + description: Size is the number of bytes in the file. 3333 + format: int64 3334 + type: integer 3335 + url: 3336 + description: |- 3337 + URL is the HTTP address of the Artifact as exposed by the controller 3338 + managing the Source. It can be used to retrieve the Artifact for 3339 + consumption, e.g. by another controller applying the Artifact contents. 3340 + type: string 3341 + required: 3342 + - lastUpdateTime 3343 + - path 3344 + - revision 3345 + - url 3346 + type: object 3347 + type: array 3348 + lastHandledReconcileAt: 3349 + description: |- 3350 + LastHandledReconcileAt holds the value of the most recent 3351 + reconcile request value, so a change of the annotation value 3352 + can be detected. 3353 + type: string 3354 + observedGeneration: 3355 + description: |- 3356 + ObservedGeneration is the last observed generation of the GitRepository 3357 + object. 3358 + format: int64 3359 + type: integer 3360 + observedIgnore: 3361 + description: |- 3362 + ObservedIgnore is the observed exclusion patterns used for constructing 3363 + the source artifact. 3364 + type: string 3365 + observedInclude: 3366 + description: |- 3367 + ObservedInclude is the observed list of GitRepository resources used to 3368 + produce the current Artifact. 3369 + items: 3370 + description: |- 3371 + GitRepositoryInclude specifies a local reference to a GitRepository which 3372 + Artifact (sub-)contents must be included, and where they should be placed. 3373 + properties: 3374 + fromPath: 3375 + description: |- 3376 + FromPath specifies the path to copy contents from, defaults to the root 3377 + of the Artifact. 3378 + type: string 3379 + repository: 3380 + description: |- 3381 + GitRepositoryRef specifies the GitRepository which Artifact contents 3382 + must be included. 3383 + properties: 3384 + name: 3385 + description: Name of the referent. 3386 + type: string 3387 + required: 3388 + - name 3389 + type: object 3390 + toPath: 3391 + description: |- 3392 + ToPath specifies the path to copy contents to, defaults to the name of 3393 + the GitRepositoryRef. 3394 + type: string 3395 + required: 3396 + - repository 3397 + type: object 3398 + type: array 3399 + observedRecurseSubmodules: 3400 + description: |- 3401 + ObservedRecurseSubmodules is the observed resource submodules 3402 + configuration used to produce the current Artifact. 3403 + type: boolean 3404 + observedSparseCheckout: 3405 + description: |- 3406 + ObservedSparseCheckout is the observed list of directories used to 3407 + produce the current Artifact. 3408 + items: 3409 + type: string 3410 + type: array 3411 + sourceVerificationMode: 3412 + description: |- 3413 + SourceVerificationMode is the last used verification mode indicating 3414 + which Git object(s) have been verified. 3415 + type: string 3416 + type: object 3417 + type: object 3418 + served: true 3419 + storage: true 3420 + subresources: 3421 + status: {} 3422 + - additionalPrinterColumns: 3423 + - jsonPath: .spec.url 3424 + name: URL 3425 + type: string 3426 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 3427 + name: Ready 3428 + type: string 3429 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3430 + name: Status 3431 + type: string 3432 + - jsonPath: .metadata.creationTimestamp 3433 + name: Age 3434 + type: date 3435 + deprecated: true 3436 + deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1 3437 + name: v1beta1 3438 + schema: 3439 + openAPIV3Schema: 3440 + description: GitRepository is the Schema for the gitrepositories API 3441 + properties: 3442 + apiVersion: 3443 + description: |- 3444 + APIVersion defines the versioned schema of this representation of an object. 3445 + Servers should convert recognized schemas to the latest internal value, and 3446 + may reject unrecognized values. 3447 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3448 + type: string 3449 + kind: 3450 + description: |- 3451 + Kind is a string value representing the REST resource this object represents. 3452 + Servers may infer this from the endpoint the client submits requests to. 3453 + Cannot be updated. 3454 + In CamelCase. 3455 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3456 + type: string 3457 + metadata: 3458 + type: object 3459 + spec: 3460 + description: GitRepositorySpec defines the desired state of a Git repository. 3461 + properties: 3462 + accessFrom: 3463 + description: AccessFrom defines an Access Control List for allowing 3464 + cross-namespace references to this object. 3465 + properties: 3466 + namespaceSelectors: 3467 + description: |- 3468 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3469 + Items in this list are evaluated using a logical OR operation. 3470 + items: 3471 + description: |- 3472 + NamespaceSelector selects the namespaces to which this ACL applies. 3473 + An empty map of MatchLabels matches all namespaces in a cluster. 3474 + properties: 3475 + matchLabels: 3476 + additionalProperties: 3477 + type: string 3478 + description: |- 3479 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3480 + map is equivalent to an element of matchExpressions, whose key field is "key", the 3481 + operator is "In", and the values array contains only "value". The requirements are ANDed. 3482 + type: object 3483 + type: object 3484 + type: array 3485 + required: 3486 + - namespaceSelectors 3487 + type: object 3488 + gitImplementation: 3489 + default: go-git 3490 + description: |- 3491 + Determines which git client library to use. 3492 + Defaults to go-git, valid values are ('go-git', 'libgit2'). 3493 + enum: 3494 + - go-git 3495 + - libgit2 3496 + type: string 3497 + ignore: 3498 + description: |- 3499 + Ignore overrides the set of excluded patterns in the .sourceignore format 3500 + (which is the same as .gitignore). If not provided, a default will be used, 3501 + consult the documentation for your version to find out what those are. 3502 + type: string 3503 + include: 3504 + description: Extra git repositories to map into the repository 3505 + items: 3506 + description: GitRepositoryInclude defines a source with a from and 3507 + to path. 3508 + properties: 3509 + fromPath: 3510 + description: The path to copy contents from, defaults to the 3511 + root directory. 3512 + type: string 3513 + repository: 3514 + description: Reference to a GitRepository to include. 3515 + properties: 3516 + name: 3517 + description: Name of the referent. 3518 + type: string 3519 + required: 3520 + - name 3521 + type: object 3522 + toPath: 3523 + description: The path to copy contents to, defaults to the name 3524 + of the source ref. 3525 + type: string 3526 + required: 3527 + - repository 3528 + type: object 3529 + type: array 3530 + interval: 3531 + description: The interval at which to check for repository updates. 3532 + type: string 3533 + recurseSubmodules: 3534 + description: |- 3535 + When enabled, after the clone is created, initializes all submodules within, 3536 + using their default settings. 3537 + This option is available only when using the 'go-git' GitImplementation. 3538 + type: boolean 3539 + ref: 3540 + description: |- 3541 + The Git reference to checkout and monitor for changes, defaults to 3542 + master branch. 3543 + properties: 3544 + branch: 3545 + description: The Git branch to checkout, defaults to master. 3546 + type: string 3547 + commit: 3548 + description: The Git commit SHA to checkout, if specified Tag 3549 + filters will be ignored. 3550 + type: string 3551 + semver: 3552 + description: The Git tag semver expression, takes precedence over 3553 + Tag. 3554 + type: string 3555 + tag: 3556 + description: The Git tag to checkout, takes precedence over Branch. 3557 + type: string 3558 + type: object 3559 + secretRef: 3560 + description: |- 3561 + The secret name containing the Git credentials. 3562 + For HTTPS repositories the secret must contain username and password 3563 + fields. 3564 + For SSH repositories the secret must contain identity and known_hosts 3565 + fields. 3566 + properties: 3567 + name: 3568 + description: Name of the referent. 3569 + type: string 3570 + required: 3571 + - name 3572 + type: object 3573 + suspend: 3574 + description: This flag tells the controller to suspend the reconciliation 3575 + of this source. 3576 + type: boolean 3577 + timeout: 3578 + default: 60s 3579 + description: The timeout for remote Git operations like cloning, defaults 3580 + to 60s. 3581 + type: string 3582 + url: 3583 + description: The repository URL, can be a HTTP/S or SSH address. 3584 + pattern: ^(http|https|ssh)://.*$ 3585 + type: string 3586 + verify: 3587 + description: Verify OpenPGP signature for the Git commit HEAD points 3588 + to. 3589 + properties: 3590 + mode: 3591 + description: Mode describes what git object should be verified, 3592 + currently ('head'). 3593 + enum: 3594 + - head 3595 + type: string 3596 + secretRef: 3597 + description: The secret name containing the public keys of all 3598 + trusted Git authors. 3599 + properties: 3600 + name: 3601 + description: Name of the referent. 3602 type: string 3603 - metadata: 3604 - type: object 3605 - spec: 3606 - description: GitRepositorySpec defines the desired state of a Git repository. 3607 - properties: 3608 - accessFrom: 3609 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 3610 - to this object. 3611 - properties: 3612 - namespaceSelectors: 3613 - description: |- 3614 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3615 - Items in this list are evaluated using a logical OR operation. 3616 - items: 3617 - description: |- 3618 - NamespaceSelector selects the namespaces to which this ACL applies. 3619 - An empty map of MatchLabels matches all namespaces in a cluster. 3620 - properties: 3621 - matchLabels: 3622 - additionalProperties: 3623 - type: string 3624 - description: |- 3625 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3626 - map is equivalent to an element of matchExpressions, whose key field is "key", the 3627 - operator is "In", and the values array contains only "value". The requirements are ANDed. 3628 - type: object 3629 - type: object 3630 - type: array 3631 - required: 3632 - - namespaceSelectors 3633 - type: object 3634 - gitImplementation: 3635 - default: go-git 3636 - description: |- 3637 - Determines which git client library to use. 3638 - Defaults to go-git, valid values are ('go-git', 'libgit2'). 3639 - enum: 3640 - - go-git 3641 - - libgit2 3642 - type: string 3643 - ignore: 3644 - description: |- 3645 - Ignore overrides the set of excluded patterns in the .sourceignore format 3646 - (which is the same as .gitignore). If not provided, a default will be used, 3647 - consult the documentation for your version to find out what those are. 3648 - type: string 3649 - include: 3650 - description: Extra git repositories to map into the repository 3651 - items: 3652 - description: GitRepositoryInclude defines a source with a from and to path. 3653 - properties: 3654 - fromPath: 3655 - description: The path to copy contents from, defaults to the root directory. 3656 - type: string 3657 - repository: 3658 - description: Reference to a GitRepository to include. 3659 - properties: 3660 - name: 3661 - description: Name of the referent. 3662 - type: string 3663 - required: 3664 - - name 3665 - type: object 3666 - toPath: 3667 - description: The path to copy contents to, defaults to the name of the source 3668 - ref. 3669 - type: string 3670 - required: 3671 - - repository 3672 - type: object 3673 - type: array 3674 - interval: 3675 - description: The interval at which to check for repository updates. 3676 - type: string 3677 - recurseSubmodules: 3678 - description: |- 3679 - When enabled, after the clone is created, initializes all submodules within, 3680 - using their default settings. 3681 - This option is available only when using the 'go-git' GitImplementation. 3682 - type: boolean 3683 - ref: 3684 - description: |- 3685 - The Git reference to checkout and monitor for changes, defaults to 3686 - master branch. 3687 - properties: 3688 - branch: 3689 - description: The Git branch to checkout, defaults to master. 3690 - type: string 3691 - commit: 3692 - description: The Git commit SHA to checkout, if specified Tag filters will be ignored. 3693 - type: string 3694 - semver: 3695 - description: The Git tag semver expression, takes precedence over Tag. 3696 - type: string 3697 - tag: 3698 - description: The Git tag to checkout, takes precedence over Branch. 3699 - type: string 3700 - type: object 3701 - secretRef: 3702 - description: |- 3703 - The secret name containing the Git credentials. 3704 - For HTTPS repositories the secret must contain username and password 3705 - fields. 3706 - For SSH repositories the secret must contain identity and known_hosts 3707 - fields. 3708 - properties: 3709 - name: 3710 - description: Name of the referent. 3711 - type: string 3712 - required: 3713 - - name 3714 - type: object 3715 - suspend: 3716 - description: This flag tells the controller to suspend the reconciliation of this source. 3717 - type: boolean 3718 - timeout: 3719 - default: 60s 3720 - description: The timeout for remote Git operations like cloning, defaults to 60s. 3721 - type: string 3722 - url: 3723 - description: The repository URL, can be a HTTP/S or SSH address. 3724 - pattern: ^(http|https|ssh)://.*$ 3725 - type: string 3726 - verify: 3727 - description: Verify OpenPGP signature for the Git commit HEAD points to. 3728 - properties: 3729 - mode: 3730 - description: Mode describes what git object should be verified, currently ('head'). 3731 - enum: 3732 - - head 3733 - type: string 3734 - secretRef: 3735 - description: The secret name containing the public keys of all trusted Git authors. 3736 - properties: 3737 - name: 3738 - description: Name of the referent. 3739 - type: string 3740 - required: 3741 - - name 3742 - type: object 3743 - required: 3744 - - mode 3745 - type: object 3746 - required: 3747 - - interval 3748 - - url 3749 - type: object 3750 + required: 3751 + - name 3752 + type: object 3753 + required: 3754 + - mode 3755 + type: object 3756 + required: 3757 + - interval 3758 + - url 3759 + type: object 3760 + status: 3761 + default: 3762 + observedGeneration: -1 3763 + description: GitRepositoryStatus defines the observed state of a Git repository. 3764 + properties: 3765 + artifact: 3766 + description: Artifact represents the output of the last successful 3767 + repository sync. 3768 + properties: 3769 + checksum: 3770 + description: Checksum is the SHA256 checksum of the artifact. 3771 + type: string 3772 + lastUpdateTime: 3773 + description: |- 3774 + LastUpdateTime is the timestamp corresponding to the last update of this 3775 + artifact. 3776 + format: date-time 3777 + type: string 3778 + path: 3779 + description: Path is the relative file path of this artifact. 3780 + type: string 3781 + revision: 3782 + description: |- 3783 + Revision is a human readable identifier traceable in the origin source 3784 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3785 + chart version, etc. 3786 + type: string 3787 + url: 3788 + description: URL is the HTTP address of this artifact. 3789 + type: string 3790 + required: 3791 + - lastUpdateTime 3792 + - path 3793 + - url 3794 + type: object 3795 + conditions: 3796 + description: Conditions holds the conditions for the GitRepository. 3797 + items: 3798 + description: Condition contains details for one aspect of the current 3799 + state of this API Resource. 3800 + properties: 3801 + lastTransitionTime: 3802 + description: |- 3803 + lastTransitionTime is the last time the condition transitioned from one status to another. 3804 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3805 + format: date-time 3806 + type: string 3807 + message: 3808 + description: |- 3809 + message is a human readable message indicating details about the transition. 3810 + This may be an empty string. 3811 + maxLength: 32768 3812 + type: string 3813 + observedGeneration: 3814 + description: |- 3815 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3816 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3817 + with respect to the current state of the instance. 3818 + format: int64 3819 + minimum: 0 3820 + type: integer 3821 + reason: 3822 + description: |- 3823 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3824 + Producers of specific condition types may define expected values and meanings for this field, 3825 + and whether the values are considered a guaranteed API. 3826 + The value should be a CamelCase string. 3827 + This field may not be empty. 3828 + maxLength: 1024 3829 + minLength: 1 3830 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3831 + type: string 3832 status: 3833 - default: 3834 - observedGeneration: -1 3835 - description: GitRepositoryStatus defines the observed state of a Git repository. 3836 - properties: 3837 - artifact: 3838 - description: Artifact represents the output of the last successful repository sync. 3839 - properties: 3840 - checksum: 3841 - description: Checksum is the SHA256 checksum of the artifact. 3842 - type: string 3843 - lastUpdateTime: 3844 - description: |- 3845 - LastUpdateTime is the timestamp corresponding to the last update of this 3846 - artifact. 3847 - format: date-time 3848 - type: string 3849 - path: 3850 - description: Path is the relative file path of this artifact. 3851 - type: string 3852 - revision: 3853 - description: |- 3854 - Revision is a human readable identifier traceable in the origin source 3855 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3856 - chart version, etc. 3857 - type: string 3858 - url: 3859 - description: URL is the HTTP address of this artifact. 3860 - type: string 3861 - required: 3862 - - lastUpdateTime 3863 - - path 3864 - - url 3865 - type: object 3866 - conditions: 3867 - description: Conditions holds the conditions for the GitRepository. 3868 - items: 3869 - description: Condition contains details for one aspect of the current state of this API 3870 - Resource. 3871 - properties: 3872 - lastTransitionTime: 3873 - description: |- 3874 - lastTransitionTime is the last time the condition transitioned from one status to another. 3875 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3876 - format: date-time 3877 - type: string 3878 - message: 3879 - description: |- 3880 - message is a human readable message indicating details about the transition. 3881 - This may be an empty string. 3882 - maxLength: 32768 3883 - type: string 3884 - observedGeneration: 3885 - description: |- 3886 - observedGeneration represents the .metadata.generation that the condition was set based upon. 3887 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3888 - with respect to the current state of the instance. 3889 - format: int64 3890 - minimum: 0 3891 - type: integer 3892 - reason: 3893 - description: |- 3894 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 3895 - Producers of specific condition types may define expected values and meanings for this field, 3896 - and whether the values are considered a guaranteed API. 3897 - The value should be a CamelCase string. 3898 - This field may not be empty. 3899 - maxLength: 1024 3900 - minLength: 1 3901 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3902 - type: string 3903 - status: 3904 - description: status of the condition, one of True, False, Unknown. 3905 - enum: 3906 - - "True" 3907 - - "False" 3908 - - Unknown 3909 - type: string 3910 - type: 3911 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 3912 - maxLength: 316 3913 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3914 - type: string 3915 - required: 3916 - - lastTransitionTime 3917 - - message 3918 - - reason 3919 - - status 3920 - - type 3921 - type: object 3922 - type: array 3923 - includedArtifacts: 3924 - description: IncludedArtifacts represents the included artifacts from the last successful 3925 - repository sync. 3926 - items: 3927 - description: Artifact represents the output of a source synchronisation. 3928 - properties: 3929 - checksum: 3930 - description: Checksum is the SHA256 checksum of the artifact. 3931 - type: string 3932 - lastUpdateTime: 3933 - description: |- 3934 - LastUpdateTime is the timestamp corresponding to the last update of this 3935 - artifact. 3936 - format: date-time 3937 - type: string 3938 - path: 3939 - description: Path is the relative file path of this artifact. 3940 - type: string 3941 - revision: 3942 - description: |- 3943 - Revision is a human readable identifier traceable in the origin source 3944 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3945 - chart version, etc. 3946 - type: string 3947 - url: 3948 - description: URL is the HTTP address of this artifact. 3949 - type: string 3950 - required: 3951 - - lastUpdateTime 3952 - - path 3953 - - url 3954 - type: object 3955 - type: array 3956 - lastHandledReconcileAt: 3957 - description: |- 3958 - LastHandledReconcileAt holds the value of the most recent 3959 - reconcile request value, so a change of the annotation value 3960 - can be detected. 3961 - type: string 3962 - observedGeneration: 3963 - description: ObservedGeneration is the last observed generation. 3964 - format: int64 3965 - type: integer 3966 - url: 3967 - description: |- 3968 - URL is the download link for the artifact output of the last repository 3969 - sync. 3970 - type: string 3971 - type: object 3972 + description: status of the condition, one of True, False, Unknown. 3973 + enum: 3974 + - "True" 3975 + - "False" 3976 + - Unknown 3977 + type: string 3978 + type: 3979 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3980 + maxLength: 316 3981 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3982 + type: string 3983 + required: 3984 + - lastTransitionTime 3985 + - message 3986 + - reason 3987 + - status 3988 + - type 3989 + type: object 3990 + type: array 3991 + includedArtifacts: 3992 + description: IncludedArtifacts represents the included artifacts from 3993 + the last successful repository sync. 3994 + items: 3995 + description: Artifact represents the output of a source synchronisation. 3996 + properties: 3997 + checksum: 3998 + description: Checksum is the SHA256 checksum of the artifact. 3999 + type: string 4000 + lastUpdateTime: 4001 + description: |- 4002 + LastUpdateTime is the timestamp corresponding to the last update of this 4003 + artifact. 4004 + format: date-time 4005 + type: string 4006 + path: 4007 + description: Path is the relative file path of this artifact. 4008 + type: string 4009 + revision: 4010 + description: |- 4011 + Revision is a human readable identifier traceable in the origin source 4012 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 4013 + chart version, etc. 4014 + type: string 4015 + url: 4016 + description: URL is the HTTP address of this artifact. 4017 + type: string 4018 + required: 4019 + - lastUpdateTime 4020 + - path 4021 + - url 4022 + type: object 4023 + type: array 4024 + lastHandledReconcileAt: 4025 + description: |- 4026 + LastHandledReconcileAt holds the value of the most recent 4027 + reconcile request value, so a change of the annotation value 4028 + can be detected. 4029 + type: string 4030 + observedGeneration: 4031 + description: ObservedGeneration is the last observed generation. 4032 + format: int64 4033 + type: integer 4034 + url: 4035 + description: |- 4036 + URL is the download link for the artifact output of the last repository 4037 + sync. 4038 + type: string 4039 + type: object 4040 + type: object 4041 + served: true 4042 + storage: false 4043 + subresources: 4044 + status: {} 4045 + - additionalPrinterColumns: 4046 + - jsonPath: .spec.url 4047 + name: URL 4048 + type: string 4049 + - jsonPath: .metadata.creationTimestamp 4050 + name: Age 4051 + type: date 4052 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 4053 + name: Ready 4054 + type: string 4055 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 4056 + name: Status 4057 + type: string 4058 + deprecated: true 4059 + deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 4060 + name: v1beta2 4061 + schema: 4062 + openAPIV3Schema: 4063 + description: GitRepository is the Schema for the gitrepositories API. 4064 + properties: 4065 + apiVersion: 4066 + description: |- 4067 + APIVersion defines the versioned schema of this representation of an object. 4068 + Servers should convert recognized schemas to the latest internal value, and 4069 + may reject unrecognized values. 4070 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4071 + type: string 4072 + kind: 4073 + description: |- 4074 + Kind is a string value representing the REST resource this object represents. 4075 + Servers may infer this from the endpoint the client submits requests to. 4076 + Cannot be updated. 4077 + In CamelCase. 4078 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4079 + type: string 4080 + metadata: 4081 + type: object 4082 + spec: 4083 + description: |- 4084 + GitRepositorySpec specifies the required configuration to produce an 4085 + Artifact for a Git repository. 4086 + properties: 4087 + accessFrom: 4088 + description: |- 4089 + AccessFrom specifies an Access Control List for allowing cross-namespace 4090 + references to this object. 4091 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 4092 + properties: 4093 + namespaceSelectors: 4094 + description: |- 4095 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 4096 + Items in this list are evaluated using a logical OR operation. 4097 + items: 4098 + description: |- 4099 + NamespaceSelector selects the namespaces to which this ACL applies. 4100 + An empty map of MatchLabels matches all namespaces in a cluster. 4101 + properties: 4102 + matchLabels: 4103 + additionalProperties: 4104 + type: string 4105 + description: |- 4106 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 4107 + map is equivalent to an element of matchExpressions, whose key field is "key", the 4108 + operator is "In", and the values array contains only "value". The requirements are ANDed. 4109 + type: object 4110 + type: object 4111 + type: array 4112 + required: 4113 + - namespaceSelectors 4114 type: object 4115 - served: true 4116 - storage: false 4117 - subresources: 4118 - status: {} 4119 - - additionalPrinterColumns: 4120 - - jsonPath: .spec.url 4121 - name: URL 4122 - type: string 4123 - - jsonPath: .metadata.creationTimestamp 4124 - name: Age 4125 - type: date 4126 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 4127 - name: Ready 4128 - type: string 4129 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 4130 - name: Status 4131 - type: string 4132 - deprecated: true 4133 - deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 4134 - name: v1beta2 4135 - schema: 4136 - openAPIV3Schema: 4137 - description: GitRepository is the Schema for the gitrepositories API. 4138 + gitImplementation: 4139 + default: go-git 4140 + description: |- 4141 + GitImplementation specifies which Git client library implementation to 4142 + use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 4143 + Deprecated: gitImplementation is deprecated now that 'go-git' is the 4144 + only supported implementation. 4145 + enum: 4146 + - go-git 4147 + - libgit2 4148 + type: string 4149 + ignore: 4150 + description: |- 4151 + Ignore overrides the set of excluded patterns in the .sourceignore format 4152 + (which is the same as .gitignore). If not provided, a default will be used, 4153 + consult the documentation for your version to find out what those are. 4154 + type: string 4155 + include: 4156 + description: |- 4157 + Include specifies a list of GitRepository resources which Artifacts 4158 + should be included in the Artifact produced for this GitRepository. 4159 + items: 4160 + description: |- 4161 + GitRepositoryInclude specifies a local reference to a GitRepository which 4162 + Artifact (sub-)contents must be included, and where they should be placed. 4163 + properties: 4164 + fromPath: 4165 + description: |- 4166 + FromPath specifies the path to copy contents from, defaults to the root 4167 + of the Artifact. 4168 + type: string 4169 + repository: 4170 + description: |- 4171 + GitRepositoryRef specifies the GitRepository which Artifact contents 4172 + must be included. 4173 + properties: 4174 + name: 4175 + description: Name of the referent. 4176 + type: string 4177 + required: 4178 + - name 4179 + type: object 4180 + toPath: 4181 + description: |- 4182 + ToPath specifies the path to copy contents to, defaults to the name of 4183 + the GitRepositoryRef. 4184 + type: string 4185 + required: 4186 + - repository 4187 + type: object 4188 + type: array 4189 + interval: 4190 + description: Interval at which to check the GitRepository for updates. 4191 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4192 + type: string 4193 + recurseSubmodules: 4194 + description: |- 4195 + RecurseSubmodules enables the initialization of all submodules within 4196 + the GitRepository as cloned from the URL, using their default settings. 4197 + type: boolean 4198 + ref: 4199 + description: |- 4200 + Reference specifies the Git reference to resolve and monitor for 4201 + changes, defaults to the 'master' branch. 4202 properties: 4203 - apiVersion: 4204 - description: |- 4205 - APIVersion defines the versioned schema of this representation of an object. 4206 - Servers should convert recognized schemas to the latest internal value, and 4207 - may reject unrecognized values. 4208 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4209 - type: string 4210 - kind: 4211 - description: |- 4212 - Kind is a string value representing the REST resource this object represents. 4213 - Servers may infer this from the endpoint the client submits requests to. 4214 - Cannot be updated. 4215 - In CamelCase. 4216 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4217 - type: string 4218 - metadata: 4219 - type: object 4220 - spec: 4221 - description: |- 4222 - GitRepositorySpec specifies the required configuration to produce an 4223 - Artifact for a Git repository. 4224 - properties: 4225 - accessFrom: 4226 - description: |- 4227 - AccessFrom specifies an Access Control List for allowing cross-namespace 4228 - references to this object. 4229 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 4230 - properties: 4231 - namespaceSelectors: 4232 - description: |- 4233 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 4234 - Items in this list are evaluated using a logical OR operation. 4235 - items: 4236 - description: |- 4237 - NamespaceSelector selects the namespaces to which this ACL applies. 4238 - An empty map of MatchLabels matches all namespaces in a cluster. 4239 - properties: 4240 - matchLabels: 4241 - additionalProperties: 4242 - type: string 4243 - description: |- 4244 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 4245 - map is equivalent to an element of matchExpressions, whose key field is "key", the 4246 - operator is "In", and the values array contains only "value". The requirements are ANDed. 4247 - type: object 4248 - type: object 4249 - type: array 4250 - required: 4251 - - namespaceSelectors 4252 - type: object 4253 - gitImplementation: 4254 - default: go-git 4255 - description: |- 4256 - GitImplementation specifies which Git client library implementation to 4257 - use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 4258 - Deprecated: gitImplementation is deprecated now that 'go-git' is the 4259 - only supported implementation. 4260 - enum: 4261 - - go-git 4262 - - libgit2 4263 - type: string 4264 - ignore: 4265 - description: |- 4266 - Ignore overrides the set of excluded patterns in the .sourceignore format 4267 - (which is the same as .gitignore). If not provided, a default will be used, 4268 - consult the documentation for your version to find out what those are. 4269 - type: string 4270 - include: 4271 - description: |- 4272 - Include specifies a list of GitRepository resources which Artifacts 4273 - should be included in the Artifact produced for this GitRepository. 4274 - items: 4275 - description: |- 4276 - GitRepositoryInclude specifies a local reference to a GitRepository which 4277 - Artifact (sub-)contents must be included, and where they should be placed. 4278 - properties: 4279 - fromPath: 4280 - description: |- 4281 - FromPath specifies the path to copy contents from, defaults to the root 4282 - of the Artifact. 4283 - type: string 4284 - repository: 4285 - description: |- 4286 - GitRepositoryRef specifies the GitRepository which Artifact contents 4287 - must be included. 4288 - properties: 4289 - name: 4290 - description: Name of the referent. 4291 - type: string 4292 - required: 4293 - - name 4294 - type: object 4295 - toPath: 4296 - description: |- 4297 - ToPath specifies the path to copy contents to, defaults to the name of 4298 - the GitRepositoryRef. 4299 - type: string 4300 - required: 4301 - - repository 4302 - type: object 4303 - type: array 4304 - interval: 4305 - description: Interval at which to check the GitRepository for updates. 4306 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4307 - type: string 4308 - recurseSubmodules: 4309 - description: |- 4310 - RecurseSubmodules enables the initialization of all submodules within 4311 - the GitRepository as cloned from the URL, using their default settings. 4312 - type: boolean 4313 - ref: 4314 - description: |- 4315 - Reference specifies the Git reference to resolve and monitor for 4316 - changes, defaults to the 'master' branch. 4317 - properties: 4318 - branch: 4319 - description: Branch to check out, defaults to 'master' if no other field is defined. 4320 - type: string 4321 - commit: 4322 - description: |- 4323 - Commit SHA to check out, takes precedence over all reference fields. 4324 + branch: 4325 + description: Branch to check out, defaults to 'master' if no other 4326 + field is defined. 4327 + type: string 4328 + commit: 4329 + description: |- 4330 + Commit SHA to check out, takes precedence over all reference fields. 4331 4332 - This can be combined with Branch to shallow clone the branch, in which 4333 - the commit is expected to exist. 4334 - type: string 4335 - name: 4336 - description: |- 4337 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 4338 + This can be combined with Branch to shallow clone the branch, in which 4339 + the commit is expected to exist. 4340 + type: string 4341 + name: 4342 + description: |- 4343 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 4344 4345 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 4346 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 4347 - type: string 4348 - semver: 4349 - description: SemVer tag expression to check out, takes precedence over Tag. 4350 - type: string 4351 - tag: 4352 - description: Tag to check out, takes precedence over Branch. 4353 - type: string 4354 - type: object 4355 - secretRef: 4356 - description: |- 4357 - SecretRef specifies the Secret containing authentication credentials for 4358 - the GitRepository. 4359 - For HTTPS repositories the Secret must contain 'username' and 'password' 4360 - fields for basic auth or 'bearerToken' field for token auth. 4361 - For SSH repositories the Secret must contain 'identity' 4362 - and 'known_hosts' fields. 4363 - properties: 4364 - name: 4365 - description: Name of the referent. 4366 - type: string 4367 - required: 4368 - - name 4369 - type: object 4370 - suspend: 4371 - description: |- 4372 - Suspend tells the controller to suspend the reconciliation of this 4373 - GitRepository. 4374 - type: boolean 4375 - timeout: 4376 - default: 60s 4377 - description: Timeout for Git operations like cloning, defaults to 60s. 4378 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 4379 - type: string 4380 - url: 4381 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 4382 - pattern: ^(http|https|ssh)://.*$ 4383 - type: string 4384 - verify: 4385 - description: |- 4386 - Verification specifies the configuration to verify the Git commit 4387 - signature(s). 4388 - properties: 4389 - mode: 4390 - description: Mode specifies what Git object should be verified, currently ('head'). 4391 - enum: 4392 - - head 4393 - type: string 4394 - secretRef: 4395 - description: |- 4396 - SecretRef specifies the Secret containing the public keys of trusted Git 4397 - authors. 4398 - properties: 4399 - name: 4400 - description: Name of the referent. 4401 - type: string 4402 - required: 4403 - - name 4404 - type: object 4405 - required: 4406 - - mode 4407 - - secretRef 4408 - type: object 4409 - required: 4410 - - interval 4411 - - url 4412 - type: object 4413 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 4414 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 4415 + type: string 4416 + semver: 4417 + description: SemVer tag expression to check out, takes precedence 4418 + over Tag. 4419 + type: string 4420 + tag: 4421 + description: Tag to check out, takes precedence over Branch. 4422 + type: string 4423 + type: object 4424 + secretRef: 4425 + description: |- 4426 + SecretRef specifies the Secret containing authentication credentials for 4427 + the GitRepository. 4428 + For HTTPS repositories the Secret must contain 'username' and 'password' 4429 + fields for basic auth or 'bearerToken' field for token auth. 4430 + For SSH repositories the Secret must contain 'identity' 4431 + and 'known_hosts' fields. 4432 + properties: 4433 + name: 4434 + description: Name of the referent. 4435 + type: string 4436 + required: 4437 + - name 4438 + type: object 4439 + suspend: 4440 + description: |- 4441 + Suspend tells the controller to suspend the reconciliation of this 4442 + GitRepository. 4443 + type: boolean 4444 + timeout: 4445 + default: 60s 4446 + description: Timeout for Git operations like cloning, defaults to 4447 + 60s. 4448 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 4449 + type: string 4450 + url: 4451 + description: URL specifies the Git repository URL, it can be an HTTP/S 4452 + or SSH address. 4453 + pattern: ^(http|https|ssh)://.*$ 4454 + type: string 4455 + verify: 4456 + description: |- 4457 + Verification specifies the configuration to verify the Git commit 4458 + signature(s). 4459 + properties: 4460 + mode: 4461 + description: Mode specifies what Git object should be verified, 4462 + currently ('head'). 4463 + enum: 4464 + - head 4465 + type: string 4466 + secretRef: 4467 + description: |- 4468 + SecretRef specifies the Secret containing the public keys of trusted Git 4469 + authors. 4470 + properties: 4471 + name: 4472 + description: Name of the referent. 4473 + type: string 4474 + required: 4475 + - name 4476 + type: object 4477 + required: 4478 + - mode 4479 + - secretRef 4480 + type: object 4481 + required: 4482 + - interval 4483 + - url 4484 + type: object 4485 + status: 4486 + default: 4487 + observedGeneration: -1 4488 + description: GitRepositoryStatus records the observed state of a Git repository. 4489 + properties: 4490 + artifact: 4491 + description: Artifact represents the last successful GitRepository 4492 + reconciliation. 4493 + properties: 4494 + digest: 4495 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4496 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4497 + type: string 4498 + lastUpdateTime: 4499 + description: |- 4500 + LastUpdateTime is the timestamp corresponding to the last update of the 4501 + Artifact. 4502 + format: date-time 4503 + type: string 4504 + metadata: 4505 + additionalProperties: 4506 + type: string 4507 + description: Metadata holds upstream information such as OCI annotations. 4508 + type: object 4509 + path: 4510 + description: |- 4511 + Path is the relative file path of the Artifact. It can be used to locate 4512 + the file in the root of the Artifact storage on the local file system of 4513 + the controller managing the Source. 4514 + type: string 4515 + revision: 4516 + description: |- 4517 + Revision is a human-readable identifier traceable in the origin source 4518 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4519 + type: string 4520 + size: 4521 + description: Size is the number of bytes in the file. 4522 + format: int64 4523 + type: integer 4524 + url: 4525 + description: |- 4526 + URL is the HTTP address of the Artifact as exposed by the controller 4527 + managing the Source. It can be used to retrieve the Artifact for 4528 + consumption, e.g. by another controller applying the Artifact contents. 4529 + type: string 4530 + required: 4531 + - lastUpdateTime 4532 + - path 4533 + - revision 4534 + - url 4535 + type: object 4536 + conditions: 4537 + description: Conditions holds the conditions for the GitRepository. 4538 + items: 4539 + description: Condition contains details for one aspect of the current 4540 + state of this API Resource. 4541 + properties: 4542 + lastTransitionTime: 4543 + description: |- 4544 + lastTransitionTime is the last time the condition transitioned from one status to another. 4545 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4546 + format: date-time 4547 + type: string 4548 + message: 4549 + description: |- 4550 + message is a human readable message indicating details about the transition. 4551 + This may be an empty string. 4552 + maxLength: 32768 4553 + type: string 4554 + observedGeneration: 4555 + description: |- 4556 + observedGeneration represents the .metadata.generation that the condition was set based upon. 4557 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4558 + with respect to the current state of the instance. 4559 + format: int64 4560 + minimum: 0 4561 + type: integer 4562 + reason: 4563 + description: |- 4564 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 4565 + Producers of specific condition types may define expected values and meanings for this field, 4566 + and whether the values are considered a guaranteed API. 4567 + The value should be a CamelCase string. 4568 + This field may not be empty. 4569 + maxLength: 1024 4570 + minLength: 1 4571 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4572 + type: string 4573 status: 4574 - default: 4575 - observedGeneration: -1 4576 - description: GitRepositoryStatus records the observed state of a Git repository. 4577 - properties: 4578 - artifact: 4579 - description: Artifact represents the last successful GitRepository reconciliation. 4580 - properties: 4581 - digest: 4582 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4583 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4584 - type: string 4585 - lastUpdateTime: 4586 - description: |- 4587 - LastUpdateTime is the timestamp corresponding to the last update of the 4588 - Artifact. 4589 - format: date-time 4590 - type: string 4591 - metadata: 4592 - additionalProperties: 4593 - type: string 4594 - description: Metadata holds upstream information such as OCI annotations. 4595 - type: object 4596 - path: 4597 - description: |- 4598 - Path is the relative file path of the Artifact. It can be used to locate 4599 - the file in the root of the Artifact storage on the local file system of 4600 - the controller managing the Source. 4601 - type: string 4602 - revision: 4603 - description: |- 4604 - Revision is a human-readable identifier traceable in the origin source 4605 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4606 - type: string 4607 - size: 4608 - description: Size is the number of bytes in the file. 4609 - format: int64 4610 - type: integer 4611 - url: 4612 - description: |- 4613 - URL is the HTTP address of the Artifact as exposed by the controller 4614 - managing the Source. It can be used to retrieve the Artifact for 4615 - consumption, e.g. by another controller applying the Artifact contents. 4616 - type: string 4617 - required: 4618 - - lastUpdateTime 4619 - - path 4620 - - revision 4621 - - url 4622 - type: object 4623 - conditions: 4624 - description: Conditions holds the conditions for the GitRepository. 4625 - items: 4626 - description: Condition contains details for one aspect of the current state of this API 4627 - Resource. 4628 - properties: 4629 - lastTransitionTime: 4630 - description: |- 4631 - lastTransitionTime is the last time the condition transitioned from one status to another. 4632 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4633 - format: date-time 4634 - type: string 4635 - message: 4636 - description: |- 4637 - message is a human readable message indicating details about the transition. 4638 - This may be an empty string. 4639 - maxLength: 32768 4640 - type: string 4641 - observedGeneration: 4642 - description: |- 4643 - observedGeneration represents the .metadata.generation that the condition was set based upon. 4644 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4645 - with respect to the current state of the instance. 4646 - format: int64 4647 - minimum: 0 4648 - type: integer 4649 - reason: 4650 - description: |- 4651 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 4652 - Producers of specific condition types may define expected values and meanings for this field, 4653 - and whether the values are considered a guaranteed API. 4654 - The value should be a CamelCase string. 4655 - This field may not be empty. 4656 - maxLength: 1024 4657 - minLength: 1 4658 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4659 - type: string 4660 - status: 4661 - description: status of the condition, one of True, False, Unknown. 4662 - enum: 4663 - - "True" 4664 - - "False" 4665 - - Unknown 4666 - type: string 4667 - type: 4668 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 4669 - maxLength: 316 4670 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4671 - type: string 4672 - required: 4673 - - lastTransitionTime 4674 - - message 4675 - - reason 4676 - - status 4677 - - type 4678 - type: object 4679 - type: array 4680 - contentConfigChecksum: 4681 - description: |- 4682 - ContentConfigChecksum is a checksum of all the configurations related to 4683 - the content of the source artifact: 4684 - - .spec.ignore 4685 - - .spec.recurseSubmodules 4686 - - .spec.included and the checksum of the included artifacts 4687 - observed in .status.observedGeneration version of the object. This can 4688 - be used to determine if the content of the included repository has 4689 - changed. 4690 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4691 + description: status of the condition, one of True, False, Unknown. 4692 + enum: 4693 + - "True" 4694 + - "False" 4695 + - Unknown 4696 + type: string 4697 + type: 4698 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 4699 + maxLength: 316 4700 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4701 + type: string 4702 + required: 4703 + - lastTransitionTime 4704 + - message 4705 + - reason 4706 + - status 4707 + - type 4708 + type: object 4709 + type: array 4710 + contentConfigChecksum: 4711 + description: |- 4712 + ContentConfigChecksum is a checksum of all the configurations related to 4713 + the content of the source artifact: 4714 + - .spec.ignore 4715 + - .spec.recurseSubmodules 4716 + - .spec.included and the checksum of the included artifacts 4717 + observed in .status.observedGeneration version of the object. This can 4718 + be used to determine if the content of the included repository has 4719 + changed. 4720 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4721 4722 - Deprecated: Replaced with explicit fields for observed artifact content 4723 - config in the status. 4724 - type: string 4725 - includedArtifacts: 4726 - description: |- 4727 - IncludedArtifacts contains a list of the last successfully included 4728 - Artifacts as instructed by GitRepositorySpec.Include. 4729 - items: 4730 - description: Artifact represents the output of a Source reconciliation. 4731 - properties: 4732 - digest: 4733 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4734 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4735 - type: string 4736 - lastUpdateTime: 4737 - description: |- 4738 - LastUpdateTime is the timestamp corresponding to the last update of the 4739 - Artifact. 4740 - format: date-time 4741 - type: string 4742 - metadata: 4743 - additionalProperties: 4744 - type: string 4745 - description: Metadata holds upstream information such as OCI annotations. 4746 - type: object 4747 - path: 4748 - description: |- 4749 - Path is the relative file path of the Artifact. It can be used to locate 4750 - the file in the root of the Artifact storage on the local file system of 4751 - the controller managing the Source. 4752 - type: string 4753 - revision: 4754 - description: |- 4755 - Revision is a human-readable identifier traceable in the origin source 4756 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4757 - type: string 4758 - size: 4759 - description: Size is the number of bytes in the file. 4760 - format: int64 4761 - type: integer 4762 - url: 4763 - description: |- 4764 - URL is the HTTP address of the Artifact as exposed by the controller 4765 - managing the Source. It can be used to retrieve the Artifact for 4766 - consumption, e.g. by another controller applying the Artifact contents. 4767 - type: string 4768 - required: 4769 - - lastUpdateTime 4770 - - path 4771 - - revision 4772 - - url 4773 - type: object 4774 - type: array 4775 - lastHandledReconcileAt: 4776 - description: |- 4777 - LastHandledReconcileAt holds the value of the most recent 4778 - reconcile request value, so a change of the annotation value 4779 - can be detected. 4780 - type: string 4781 - observedGeneration: 4782 - description: |- 4783 - ObservedGeneration is the last observed generation of the GitRepository 4784 - object. 4785 - format: int64 4786 - type: integer 4787 - observedIgnore: 4788 - description: |- 4789 - ObservedIgnore is the observed exclusion patterns used for constructing 4790 - the source artifact. 4791 - type: string 4792 - observedInclude: 4793 - description: |- 4794 - ObservedInclude is the observed list of GitRepository resources used to 4795 - to produce the current Artifact. 4796 - items: 4797 - description: |- 4798 - GitRepositoryInclude specifies a local reference to a GitRepository which 4799 - Artifact (sub-)contents must be included, and where they should be placed. 4800 - properties: 4801 - fromPath: 4802 - description: |- 4803 - FromPath specifies the path to copy contents from, defaults to the root 4804 - of the Artifact. 4805 - type: string 4806 - repository: 4807 - description: |- 4808 - GitRepositoryRef specifies the GitRepository which Artifact contents 4809 - must be included. 4810 - properties: 4811 - name: 4812 - description: Name of the referent. 4813 - type: string 4814 - required: 4815 - - name 4816 - type: object 4817 - toPath: 4818 - description: |- 4819 - ToPath specifies the path to copy contents to, defaults to the name of 4820 - the GitRepositoryRef. 4821 - type: string 4822 - required: 4823 - - repository 4824 - type: object 4825 - type: array 4826 - observedRecurseSubmodules: 4827 - description: |- 4828 - ObservedRecurseSubmodules is the observed resource submodules 4829 - configuration used to produce the current Artifact. 4830 - type: boolean 4831 - url: 4832 - description: |- 4833 - URL is the dynamic fetch link for the latest Artifact. 4834 - It is provided on a "best effort" basis, and using the precise 4835 - GitRepositoryStatus.Artifact data is recommended. 4836 - type: string 4837 - type: object 4838 - type: object 4839 - served: true 4840 - storage: false 4841 - subresources: 4842 - status: {} 4843 + Deprecated: Replaced with explicit fields for observed artifact content 4844 + config in the status. 4845 + type: string 4846 + includedArtifacts: 4847 + description: |- 4848 + IncludedArtifacts contains a list of the last successfully included 4849 + Artifacts as instructed by GitRepositorySpec.Include. 4850 + items: 4851 + description: Artifact represents the output of a Source reconciliation. 4852 + properties: 4853 + digest: 4854 + description: Digest is the digest of the file in the form of 4855 + '<algorithm>:<checksum>'. 4856 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4857 + type: string 4858 + lastUpdateTime: 4859 + description: |- 4860 + LastUpdateTime is the timestamp corresponding to the last update of the 4861 + Artifact. 4862 + format: date-time 4863 + type: string 4864 + metadata: 4865 + additionalProperties: 4866 + type: string 4867 + description: Metadata holds upstream information such as OCI 4868 + annotations. 4869 + type: object 4870 + path: 4871 + description: |- 4872 + Path is the relative file path of the Artifact. It can be used to locate 4873 + the file in the root of the Artifact storage on the local file system of 4874 + the controller managing the Source. 4875 + type: string 4876 + revision: 4877 + description: |- 4878 + Revision is a human-readable identifier traceable in the origin source 4879 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4880 + type: string 4881 + size: 4882 + description: Size is the number of bytes in the file. 4883 + format: int64 4884 + type: integer 4885 + url: 4886 + description: |- 4887 + URL is the HTTP address of the Artifact as exposed by the controller 4888 + managing the Source. It can be used to retrieve the Artifact for 4889 + consumption, e.g. by another controller applying the Artifact contents. 4890 + type: string 4891 + required: 4892 + - lastUpdateTime 4893 + - path 4894 + - revision 4895 + - url 4896 + type: object 4897 + type: array 4898 + lastHandledReconcileAt: 4899 + description: |- 4900 + LastHandledReconcileAt holds the value of the most recent 4901 + reconcile request value, so a change of the annotation value 4902 + can be detected. 4903 + type: string 4904 + observedGeneration: 4905 + description: |- 4906 + ObservedGeneration is the last observed generation of the GitRepository 4907 + object. 4908 + format: int64 4909 + type: integer 4910 + observedIgnore: 4911 + description: |- 4912 + ObservedIgnore is the observed exclusion patterns used for constructing 4913 + the source artifact. 4914 + type: string 4915 + observedInclude: 4916 + description: |- 4917 + ObservedInclude is the observed list of GitRepository resources used to 4918 + to produce the current Artifact. 4919 + items: 4920 + description: |- 4921 + GitRepositoryInclude specifies a local reference to a GitRepository which 4922 + Artifact (sub-)contents must be included, and where they should be placed. 4923 + properties: 4924 + fromPath: 4925 + description: |- 4926 + FromPath specifies the path to copy contents from, defaults to the root 4927 + of the Artifact. 4928 + type: string 4929 + repository: 4930 + description: |- 4931 + GitRepositoryRef specifies the GitRepository which Artifact contents 4932 + must be included. 4933 + properties: 4934 + name: 4935 + description: Name of the referent. 4936 + type: string 4937 + required: 4938 + - name 4939 + type: object 4940 + toPath: 4941 + description: |- 4942 + ToPath specifies the path to copy contents to, defaults to the name of 4943 + the GitRepositoryRef. 4944 + type: string 4945 + required: 4946 + - repository 4947 + type: object 4948 + type: array 4949 + observedRecurseSubmodules: 4950 + description: |- 4951 + ObservedRecurseSubmodules is the observed resource submodules 4952 + configuration used to produce the current Artifact. 4953 + type: boolean 4954 + url: 4955 + description: |- 4956 + URL is the dynamic fetch link for the latest Artifact. 4957 + It is provided on a "best effort" basis, and using the precise 4958 + GitRepositoryStatus.Artifact data is recommended. 4959 + type: string 4960 + type: object 4961 + type: object 4962 + served: true 4963 + storage: false 4964 + subresources: 4965 + status: {} 4966 --- 4967 apiVersion: apiextensions.k8s.io/v1 4968 kind: CustomResourceDefinition 4969 metadata: 4970 - annotations: 4971 - controller-gen.kubebuilder.io/version: v0.16.1 4972 - labels: 4973 - app.kubernetes.io/component: source-controller 4974 - app.kubernetes.io/instance: flux-system 4975 - app.kubernetes.io/part-of: flux 4976 - app.kubernetes.io/version: v2.5.1 4977 - name: helmcharts.source.toolkit.fluxcd.io 4978 + annotations: 4979 + controller-gen.kubebuilder.io/version: v0.16.1 4980 + labels: 4981 + app.kubernetes.io/component: source-controller 4982 + app.kubernetes.io/instance: flux-system 4983 + app.kubernetes.io/part-of: flux 4984 + app.kubernetes.io/version: v2.6.4 4985 + name: helmcharts.source.toolkit.fluxcd.io 4986 spec: 4987 - group: source.toolkit.fluxcd.io 4988 - names: 4989 - kind: HelmChart 4990 - listKind: HelmChartList 4991 - plural: helmcharts 4992 - shortNames: 4993 - - hc 4994 - singular: helmchart 4995 - scope: Namespaced 4996 - versions: 4997 - - additionalPrinterColumns: 4998 - - jsonPath: .spec.chart 4999 - name: Chart 5000 - type: string 5001 - - jsonPath: .spec.version 5002 - name: Version 5003 - type: string 5004 - - jsonPath: .spec.sourceRef.kind 5005 - name: Source Kind 5006 - type: string 5007 - - jsonPath: .spec.sourceRef.name 5008 - name: Source Name 5009 - type: string 5010 - - jsonPath: .metadata.creationTimestamp 5011 - name: Age 5012 - type: date 5013 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5014 - name: Ready 5015 - type: string 5016 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5017 - name: Status 5018 - type: string 5019 - name: v1 5020 - schema: 5021 - openAPIV3Schema: 5022 - description: HelmChart is the Schema for the helmcharts API. 5023 + group: source.toolkit.fluxcd.io 5024 + names: 5025 + kind: HelmChart 5026 + listKind: HelmChartList 5027 + plural: helmcharts 5028 + shortNames: 5029 + - hc 5030 + singular: helmchart 5031 + scope: Namespaced 5032 + versions: 5033 + - additionalPrinterColumns: 5034 + - jsonPath: .spec.chart 5035 + name: Chart 5036 + type: string 5037 + - jsonPath: .spec.version 5038 + name: Version 5039 + type: string 5040 + - jsonPath: .spec.sourceRef.kind 5041 + name: Source Kind 5042 + type: string 5043 + - jsonPath: .spec.sourceRef.name 5044 + name: Source Name 5045 + type: string 5046 + - jsonPath: .metadata.creationTimestamp 5047 + name: Age 5048 + type: date 5049 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5050 + name: Ready 5051 + type: string 5052 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5053 + name: Status 5054 + type: string 5055 + name: v1 5056 + schema: 5057 + openAPIV3Schema: 5058 + description: HelmChart is the Schema for the helmcharts API. 5059 + properties: 5060 + apiVersion: 5061 + description: |- 5062 + APIVersion defines the versioned schema of this representation of an object. 5063 + Servers should convert recognized schemas to the latest internal value, and 5064 + may reject unrecognized values. 5065 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5066 + type: string 5067 + kind: 5068 + description: |- 5069 + Kind is a string value representing the REST resource this object represents. 5070 + Servers may infer this from the endpoint the client submits requests to. 5071 + Cannot be updated. 5072 + In CamelCase. 5073 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5074 + type: string 5075 + metadata: 5076 + type: object 5077 + spec: 5078 + description: HelmChartSpec specifies the desired state of a Helm chart. 5079 + properties: 5080 + chart: 5081 + description: |- 5082 + Chart is the name or path the Helm chart is available at in the 5083 + SourceRef. 5084 + type: string 5085 + ignoreMissingValuesFiles: 5086 + description: |- 5087 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 5088 + files rather than failing. 5089 + type: boolean 5090 + interval: 5091 + description: |- 5092 + Interval at which the HelmChart SourceRef is checked for updates. 5093 + This interval is approximate and may be subject to jitter to ensure 5094 + efficient use of resources. 5095 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5096 + type: string 5097 + reconcileStrategy: 5098 + default: ChartVersion 5099 + description: |- 5100 + ReconcileStrategy determines what enables the creation of a new artifact. 5101 + Valid values are ('ChartVersion', 'Revision'). 5102 + See the documentation of the values for an explanation on their behavior. 5103 + Defaults to ChartVersion when omitted. 5104 + enum: 5105 + - ChartVersion 5106 + - Revision 5107 + type: string 5108 + sourceRef: 5109 + description: SourceRef is the reference to the Source the chart is 5110 + available at. 5111 properties: 5112 - apiVersion: 5113 - description: |- 5114 - APIVersion defines the versioned schema of this representation of an object. 5115 - Servers should convert recognized schemas to the latest internal value, and 5116 - may reject unrecognized values. 5117 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5118 - type: string 5119 - kind: 5120 - description: |- 5121 - Kind is a string value representing the REST resource this object represents. 5122 - Servers may infer this from the endpoint the client submits requests to. 5123 - Cannot be updated. 5124 - In CamelCase. 5125 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5126 + apiVersion: 5127 + description: APIVersion of the referent. 5128 + type: string 5129 + kind: 5130 + description: |- 5131 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5132 + 'Bucket'). 5133 + enum: 5134 + - HelmRepository 5135 + - GitRepository 5136 + - Bucket 5137 + type: string 5138 + name: 5139 + description: Name of the referent. 5140 + type: string 5141 + required: 5142 + - kind 5143 + - name 5144 + type: object 5145 + suspend: 5146 + description: |- 5147 + Suspend tells the controller to suspend the reconciliation of this 5148 + source. 5149 + type: boolean 5150 + valuesFiles: 5151 + description: |- 5152 + ValuesFiles is an alternative list of values files to use as the chart 5153 + values (values.yaml is not included by default), expected to be a 5154 + relative path in the SourceRef. 5155 + Values files are merged in the order of this list with the last file 5156 + overriding the first. Ignored when omitted. 5157 + items: 5158 + type: string 5159 + type: array 5160 + verify: 5161 + description: |- 5162 + Verify contains the secret name containing the trusted public keys 5163 + used to verify the signature and specifies which provider to use to check 5164 + whether OCI image is authentic. 5165 + This field is only supported when using HelmRepository source with spec.type 'oci'. 5166 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5167 + properties: 5168 + matchOIDCIdentity: 5169 + description: |- 5170 + MatchOIDCIdentity specifies the identity matching criteria to use 5171 + while verifying an OCI artifact which was signed using Cosign keyless 5172 + signing. The artifact's identity is deemed to be verified if any of the 5173 + specified matchers match against the identity. 5174 + items: 5175 + description: |- 5176 + OIDCIdentityMatch specifies options for verifying the certificate identity, 5177 + i.e. the issuer and the subject of the certificate. 5178 + properties: 5179 + issuer: 5180 + description: |- 5181 + Issuer specifies the regex pattern to match against to verify 5182 + the OIDC issuer in the Fulcio certificate. The pattern must be a 5183 + valid Go regular expression. 5184 + type: string 5185 + subject: 5186 + description: |- 5187 + Subject specifies the regex pattern to match against to verify 5188 + the identity subject in the Fulcio certificate. The pattern must 5189 + be a valid Go regular expression. 5190 + type: string 5191 + required: 5192 + - issuer 5193 + - subject 5194 + type: object 5195 + type: array 5196 + provider: 5197 + default: cosign 5198 + description: Provider specifies the technology used to sign the 5199 + OCI Artifact. 5200 + enum: 5201 + - cosign 5202 + - notation 5203 + type: string 5204 + secretRef: 5205 + description: |- 5206 + SecretRef specifies the Kubernetes Secret containing the 5207 + trusted public keys. 5208 + properties: 5209 + name: 5210 + description: Name of the referent. 5211 type: string 5212 - metadata: 5213 - type: object 5214 - spec: 5215 - description: HelmChartSpec specifies the desired state of a Helm chart. 5216 - properties: 5217 - chart: 5218 - description: |- 5219 - Chart is the name or path the Helm chart is available at in the 5220 - SourceRef. 5221 - type: string 5222 - ignoreMissingValuesFiles: 5223 - description: |- 5224 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 5225 - files rather than failing. 5226 - type: boolean 5227 - interval: 5228 - description: |- 5229 - Interval at which the HelmChart SourceRef is checked for updates. 5230 - This interval is approximate and may be subject to jitter to ensure 5231 - efficient use of resources. 5232 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5233 - type: string 5234 - reconcileStrategy: 5235 - default: ChartVersion 5236 - description: |- 5237 - ReconcileStrategy determines what enables the creation of a new artifact. 5238 - Valid values are ('ChartVersion', 'Revision'). 5239 - See the documentation of the values for an explanation on their behavior. 5240 - Defaults to ChartVersion when omitted. 5241 - enum: 5242 - - ChartVersion 5243 - - Revision 5244 - type: string 5245 - sourceRef: 5246 - description: SourceRef is the reference to the Source the chart is available at. 5247 - properties: 5248 - apiVersion: 5249 - description: APIVersion of the referent. 5250 - type: string 5251 - kind: 5252 - description: |- 5253 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5254 - 'Bucket'). 5255 - enum: 5256 - - HelmRepository 5257 - - GitRepository 5258 - - Bucket 5259 - type: string 5260 - name: 5261 - description: Name of the referent. 5262 - type: string 5263 - required: 5264 - - kind 5265 - - name 5266 - type: object 5267 - suspend: 5268 - description: |- 5269 - Suspend tells the controller to suspend the reconciliation of this 5270 - source. 5271 - type: boolean 5272 - valuesFiles: 5273 - description: |- 5274 - ValuesFiles is an alternative list of values files to use as the chart 5275 - values (values.yaml is not included by default), expected to be a 5276 - relative path in the SourceRef. 5277 - Values files are merged in the order of this list with the last file 5278 - overriding the first. Ignored when omitted. 5279 - items: 5280 - type: string 5281 - type: array 5282 - verify: 5283 - description: |- 5284 - Verify contains the secret name containing the trusted public keys 5285 - used to verify the signature and specifies which provider to use to check 5286 - whether OCI image is authentic. 5287 - This field is only supported when using HelmRepository source with spec.type 'oci'. 5288 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5289 - properties: 5290 - matchOIDCIdentity: 5291 - description: |- 5292 - MatchOIDCIdentity specifies the identity matching criteria to use 5293 - while verifying an OCI artifact which was signed using Cosign keyless 5294 - signing. The artifact's identity is deemed to be verified if any of the 5295 - specified matchers match against the identity. 5296 - items: 5297 - description: |- 5298 - OIDCIdentityMatch specifies options for verifying the certificate identity, 5299 - i.e. the issuer and the subject of the certificate. 5300 - properties: 5301 - issuer: 5302 - description: |- 5303 - Issuer specifies the regex pattern to match against to verify 5304 - the OIDC issuer in the Fulcio certificate. The pattern must be a 5305 - valid Go regular expression. 5306 - type: string 5307 - subject: 5308 - description: |- 5309 - Subject specifies the regex pattern to match against to verify 5310 - the identity subject in the Fulcio certificate. The pattern must 5311 - be a valid Go regular expression. 5312 - type: string 5313 - required: 5314 - - issuer 5315 - - subject 5316 - type: object 5317 - type: array 5318 - provider: 5319 - default: cosign 5320 - description: Provider specifies the technology used to sign the OCI Artifact. 5321 - enum: 5322 - - cosign 5323 - - notation 5324 - type: string 5325 - secretRef: 5326 - description: |- 5327 - SecretRef specifies the Kubernetes Secret containing the 5328 - trusted public keys. 5329 - properties: 5330 - name: 5331 - description: Name of the referent. 5332 - type: string 5333 - required: 5334 - - name 5335 - type: object 5336 - required: 5337 - - provider 5338 - type: object 5339 - version: 5340 - default: '*' 5341 - description: |- 5342 - Version is the chart version semver expression, ignored for charts from 5343 - GitRepository and Bucket sources. Defaults to latest when omitted. 5344 - type: string 5345 - required: 5346 - - chart 5347 - - interval 5348 - - sourceRef 5349 - type: object 5350 + required: 5351 + - name 5352 + type: object 5353 + required: 5354 + - provider 5355 + type: object 5356 + version: 5357 + default: '*' 5358 + description: |- 5359 + Version is the chart version semver expression, ignored for charts from 5360 + GitRepository and Bucket sources. Defaults to latest when omitted. 5361 + type: string 5362 + required: 5363 + - chart 5364 + - interval 5365 + - sourceRef 5366 + type: object 5367 + status: 5368 + default: 5369 + observedGeneration: -1 5370 + description: HelmChartStatus records the observed state of the HelmChart. 5371 + properties: 5372 + artifact: 5373 + description: Artifact represents the output of the last successful 5374 + reconciliation. 5375 + properties: 5376 + digest: 5377 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5378 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5379 + type: string 5380 + lastUpdateTime: 5381 + description: |- 5382 + LastUpdateTime is the timestamp corresponding to the last update of the 5383 + Artifact. 5384 + format: date-time 5385 + type: string 5386 + metadata: 5387 + additionalProperties: 5388 + type: string 5389 + description: Metadata holds upstream information such as OCI annotations. 5390 + type: object 5391 + path: 5392 + description: |- 5393 + Path is the relative file path of the Artifact. It can be used to locate 5394 + the file in the root of the Artifact storage on the local file system of 5395 + the controller managing the Source. 5396 + type: string 5397 + revision: 5398 + description: |- 5399 + Revision is a human-readable identifier traceable in the origin source 5400 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5401 + type: string 5402 + size: 5403 + description: Size is the number of bytes in the file. 5404 + format: int64 5405 + type: integer 5406 + url: 5407 + description: |- 5408 + URL is the HTTP address of the Artifact as exposed by the controller 5409 + managing the Source. It can be used to retrieve the Artifact for 5410 + consumption, e.g. by another controller applying the Artifact contents. 5411 + type: string 5412 + required: 5413 + - lastUpdateTime 5414 + - path 5415 + - revision 5416 + - url 5417 + type: object 5418 + conditions: 5419 + description: Conditions holds the conditions for the HelmChart. 5420 + items: 5421 + description: Condition contains details for one aspect of the current 5422 + state of this API Resource. 5423 + properties: 5424 + lastTransitionTime: 5425 + description: |- 5426 + lastTransitionTime is the last time the condition transitioned from one status to another. 5427 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5428 + format: date-time 5429 + type: string 5430 + message: 5431 + description: |- 5432 + message is a human readable message indicating details about the transition. 5433 + This may be an empty string. 5434 + maxLength: 32768 5435 + type: string 5436 + observedGeneration: 5437 + description: |- 5438 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5439 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5440 + with respect to the current state of the instance. 5441 + format: int64 5442 + minimum: 0 5443 + type: integer 5444 + reason: 5445 + description: |- 5446 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5447 + Producers of specific condition types may define expected values and meanings for this field, 5448 + and whether the values are considered a guaranteed API. 5449 + The value should be a CamelCase string. 5450 + This field may not be empty. 5451 + maxLength: 1024 5452 + minLength: 1 5453 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5454 + type: string 5455 status: 5456 - default: 5457 - observedGeneration: -1 5458 - description: HelmChartStatus records the observed state of the HelmChart. 5459 - properties: 5460 - artifact: 5461 - description: Artifact represents the output of the last successful reconciliation. 5462 - properties: 5463 - digest: 5464 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5465 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5466 - type: string 5467 - lastUpdateTime: 5468 - description: |- 5469 - LastUpdateTime is the timestamp corresponding to the last update of the 5470 - Artifact. 5471 - format: date-time 5472 - type: string 5473 - metadata: 5474 - additionalProperties: 5475 - type: string 5476 - description: Metadata holds upstream information such as OCI annotations. 5477 - type: object 5478 - path: 5479 - description: |- 5480 - Path is the relative file path of the Artifact. It can be used to locate 5481 - the file in the root of the Artifact storage on the local file system of 5482 - the controller managing the Source. 5483 - type: string 5484 - revision: 5485 - description: |- 5486 - Revision is a human-readable identifier traceable in the origin source 5487 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5488 - type: string 5489 - size: 5490 - description: Size is the number of bytes in the file. 5491 - format: int64 5492 - type: integer 5493 - url: 5494 - description: |- 5495 - URL is the HTTP address of the Artifact as exposed by the controller 5496 - managing the Source. It can be used to retrieve the Artifact for 5497 - consumption, e.g. by another controller applying the Artifact contents. 5498 - type: string 5499 - required: 5500 - - lastUpdateTime 5501 - - path 5502 - - revision 5503 - - url 5504 - type: object 5505 - conditions: 5506 - description: Conditions holds the conditions for the HelmChart. 5507 - items: 5508 - description: Condition contains details for one aspect of the current state of this API 5509 - Resource. 5510 - properties: 5511 - lastTransitionTime: 5512 - description: |- 5513 - lastTransitionTime is the last time the condition transitioned from one status to another. 5514 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5515 - format: date-time 5516 - type: string 5517 - message: 5518 - description: |- 5519 - message is a human readable message indicating details about the transition. 5520 - This may be an empty string. 5521 - maxLength: 32768 5522 - type: string 5523 - observedGeneration: 5524 - description: |- 5525 - observedGeneration represents the .metadata.generation that the condition was set based upon. 5526 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5527 - with respect to the current state of the instance. 5528 - format: int64 5529 - minimum: 0 5530 - type: integer 5531 - reason: 5532 - description: |- 5533 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 5534 - Producers of specific condition types may define expected values and meanings for this field, 5535 - and whether the values are considered a guaranteed API. 5536 - The value should be a CamelCase string. 5537 - This field may not be empty. 5538 - maxLength: 1024 5539 - minLength: 1 5540 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5541 - type: string 5542 - status: 5543 - description: status of the condition, one of True, False, Unknown. 5544 - enum: 5545 - - "True" 5546 - - "False" 5547 - - Unknown 5548 - type: string 5549 - type: 5550 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 5551 - maxLength: 316 5552 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5553 - type: string 5554 - required: 5555 - - lastTransitionTime 5556 - - message 5557 - - reason 5558 - - status 5559 - - type 5560 - type: object 5561 - type: array 5562 - lastHandledReconcileAt: 5563 - description: |- 5564 - LastHandledReconcileAt holds the value of the most recent 5565 - reconcile request value, so a change of the annotation value 5566 - can be detected. 5567 - type: string 5568 - observedChartName: 5569 - description: |- 5570 - ObservedChartName is the last observed chart name as specified by the 5571 - resolved chart reference. 5572 - type: string 5573 - observedGeneration: 5574 - description: |- 5575 - ObservedGeneration is the last observed generation of the HelmChart 5576 - object. 5577 - format: int64 5578 - type: integer 5579 - observedSourceArtifactRevision: 5580 - description: |- 5581 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 5582 - of the HelmChartSpec.SourceRef. 5583 - type: string 5584 - observedValuesFiles: 5585 - description: |- 5586 - ObservedValuesFiles are the observed value files of the last successful 5587 - reconciliation. 5588 - It matches the chart in the last successfully reconciled artifact. 5589 - items: 5590 - type: string 5591 - type: array 5592 - url: 5593 - description: |- 5594 - URL is the dynamic fetch link for the latest Artifact. 5595 - It is provided on a "best effort" basis, and using the precise 5596 - BucketStatus.Artifact data is recommended. 5597 - type: string 5598 - type: object 5599 + description: status of the condition, one of True, False, Unknown. 5600 + enum: 5601 + - "True" 5602 + - "False" 5603 + - Unknown 5604 + type: string 5605 + type: 5606 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 5607 + maxLength: 316 5608 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5609 + type: string 5610 + required: 5611 + - lastTransitionTime 5612 + - message 5613 + - reason 5614 + - status 5615 + - type 5616 + type: object 5617 + type: array 5618 + lastHandledReconcileAt: 5619 + description: |- 5620 + LastHandledReconcileAt holds the value of the most recent 5621 + reconcile request value, so a change of the annotation value 5622 + can be detected. 5623 + type: string 5624 + observedChartName: 5625 + description: |- 5626 + ObservedChartName is the last observed chart name as specified by the 5627 + resolved chart reference. 5628 + type: string 5629 + observedGeneration: 5630 + description: |- 5631 + ObservedGeneration is the last observed generation of the HelmChart 5632 + object. 5633 + format: int64 5634 + type: integer 5635 + observedSourceArtifactRevision: 5636 + description: |- 5637 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 5638 + of the HelmChartSpec.SourceRef. 5639 + type: string 5640 + observedValuesFiles: 5641 + description: |- 5642 + ObservedValuesFiles are the observed value files of the last successful 5643 + reconciliation. 5644 + It matches the chart in the last successfully reconciled artifact. 5645 + items: 5646 + type: string 5647 + type: array 5648 + url: 5649 + description: |- 5650 + URL is the dynamic fetch link for the latest Artifact. 5651 + It is provided on a "best effort" basis, and using the precise 5652 + BucketStatus.Artifact data is recommended. 5653 + type: string 5654 + type: object 5655 + type: object 5656 + served: true 5657 + storage: true 5658 + subresources: 5659 + status: {} 5660 + - additionalPrinterColumns: 5661 + - jsonPath: .spec.chart 5662 + name: Chart 5663 + type: string 5664 + - jsonPath: .spec.version 5665 + name: Version 5666 + type: string 5667 + - jsonPath: .spec.sourceRef.kind 5668 + name: Source Kind 5669 + type: string 5670 + - jsonPath: .spec.sourceRef.name 5671 + name: Source Name 5672 + type: string 5673 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5674 + name: Ready 5675 + type: string 5676 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5677 + name: Status 5678 + type: string 5679 + - jsonPath: .metadata.creationTimestamp 5680 + name: Age 5681 + type: date 5682 + deprecated: true 5683 + deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1 5684 + name: v1beta1 5685 + schema: 5686 + openAPIV3Schema: 5687 + description: HelmChart is the Schema for the helmcharts API 5688 + properties: 5689 + apiVersion: 5690 + description: |- 5691 + APIVersion defines the versioned schema of this representation of an object. 5692 + Servers should convert recognized schemas to the latest internal value, and 5693 + may reject unrecognized values. 5694 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5695 + type: string 5696 + kind: 5697 + description: |- 5698 + Kind is a string value representing the REST resource this object represents. 5699 + Servers may infer this from the endpoint the client submits requests to. 5700 + Cannot be updated. 5701 + In CamelCase. 5702 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5703 + type: string 5704 + metadata: 5705 + type: object 5706 + spec: 5707 + description: HelmChartSpec defines the desired state of a Helm chart. 5708 + properties: 5709 + accessFrom: 5710 + description: AccessFrom defines an Access Control List for allowing 5711 + cross-namespace references to this object. 5712 + properties: 5713 + namespaceSelectors: 5714 + description: |- 5715 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5716 + Items in this list are evaluated using a logical OR operation. 5717 + items: 5718 + description: |- 5719 + NamespaceSelector selects the namespaces to which this ACL applies. 5720 + An empty map of MatchLabels matches all namespaces in a cluster. 5721 + properties: 5722 + matchLabels: 5723 + additionalProperties: 5724 + type: string 5725 + description: |- 5726 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5727 + map is equivalent to an element of matchExpressions, whose key field is "key", the 5728 + operator is "In", and the values array contains only "value". The requirements are ANDed. 5729 + type: object 5730 + type: object 5731 + type: array 5732 + required: 5733 + - namespaceSelectors 5734 type: object 5735 - served: true 5736 - storage: true 5737 - subresources: 5738 - status: {} 5739 - - additionalPrinterColumns: 5740 - - jsonPath: .spec.chart 5741 - name: Chart 5742 - type: string 5743 - - jsonPath: .spec.version 5744 - name: Version 5745 - type: string 5746 - - jsonPath: .spec.sourceRef.kind 5747 - name: Source Kind 5748 - type: string 5749 - - jsonPath: .spec.sourceRef.name 5750 - name: Source Name 5751 - type: string 5752 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5753 - name: Ready 5754 - type: string 5755 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5756 - name: Status 5757 - type: string 5758 - - jsonPath: .metadata.creationTimestamp 5759 - name: Age 5760 - type: date 5761 - deprecated: true 5762 - deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1 5763 - name: v1beta1 5764 - schema: 5765 - openAPIV3Schema: 5766 - description: HelmChart is the Schema for the helmcharts API 5767 + chart: 5768 + description: The name or path the Helm chart is available at in the 5769 + SourceRef. 5770 + type: string 5771 + interval: 5772 + description: The interval at which to check the Source for updates. 5773 + type: string 5774 + reconcileStrategy: 5775 + default: ChartVersion 5776 + description: |- 5777 + Determines what enables the creation of a new artifact. Valid values are 5778 + ('ChartVersion', 'Revision'). 5779 + See the documentation of the values for an explanation on their behavior. 5780 + Defaults to ChartVersion when omitted. 5781 + enum: 5782 + - ChartVersion 5783 + - Revision 5784 + type: string 5785 + sourceRef: 5786 + description: The reference to the Source the chart is available at. 5787 properties: 5788 - apiVersion: 5789 - description: |- 5790 - APIVersion defines the versioned schema of this representation of an object. 5791 - Servers should convert recognized schemas to the latest internal value, and 5792 - may reject unrecognized values. 5793 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5794 - type: string 5795 - kind: 5796 - description: |- 5797 - Kind is a string value representing the REST resource this object represents. 5798 - Servers may infer this from the endpoint the client submits requests to. 5799 - Cannot be updated. 5800 - In CamelCase. 5801 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5802 - type: string 5803 - metadata: 5804 - type: object 5805 - spec: 5806 - description: HelmChartSpec defines the desired state of a Helm chart. 5807 - properties: 5808 - accessFrom: 5809 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 5810 - to this object. 5811 - properties: 5812 - namespaceSelectors: 5813 - description: |- 5814 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5815 - Items in this list are evaluated using a logical OR operation. 5816 - items: 5817 - description: |- 5818 - NamespaceSelector selects the namespaces to which this ACL applies. 5819 - An empty map of MatchLabels matches all namespaces in a cluster. 5820 - properties: 5821 - matchLabels: 5822 - additionalProperties: 5823 - type: string 5824 - description: |- 5825 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5826 - map is equivalent to an element of matchExpressions, whose key field is "key", the 5827 - operator is "In", and the values array contains only "value". The requirements are ANDed. 5828 - type: object 5829 - type: object 5830 - type: array 5831 - required: 5832 - - namespaceSelectors 5833 - type: object 5834 - chart: 5835 - description: The name or path the Helm chart is available at in the SourceRef. 5836 - type: string 5837 - interval: 5838 - description: The interval at which to check the Source for updates. 5839 - type: string 5840 - reconcileStrategy: 5841 - default: ChartVersion 5842 - description: |- 5843 - Determines what enables the creation of a new artifact. Valid values are 5844 - ('ChartVersion', 'Revision'). 5845 - See the documentation of the values for an explanation on their behavior. 5846 - Defaults to ChartVersion when omitted. 5847 - enum: 5848 - - ChartVersion 5849 - - Revision 5850 - type: string 5851 - sourceRef: 5852 - description: The reference to the Source the chart is available at. 5853 - properties: 5854 - apiVersion: 5855 - description: APIVersion of the referent. 5856 - type: string 5857 - kind: 5858 - description: |- 5859 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5860 - 'Bucket'). 5861 - enum: 5862 - - HelmRepository 5863 - - GitRepository 5864 - - Bucket 5865 - type: string 5866 - name: 5867 - description: Name of the referent. 5868 - type: string 5869 - required: 5870 - - kind 5871 - - name 5872 - type: object 5873 - suspend: 5874 - description: This flag tells the controller to suspend the reconciliation of this source. 5875 - type: boolean 5876 - valuesFile: 5877 - description: |- 5878 - Alternative values file to use as the default chart values, expected to 5879 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 5880 - for backwards compatibility the file defined here is merged before the 5881 - ValuesFiles items. Ignored when omitted. 5882 - type: string 5883 - valuesFiles: 5884 - description: |- 5885 - Alternative list of values files to use as the chart values (values.yaml 5886 - is not included by default), expected to be a relative path in the SourceRef. 5887 - Values files are merged in the order of this list with the last file overriding 5888 - the first. Ignored when omitted. 5889 - items: 5890 - type: string 5891 - type: array 5892 - version: 5893 - default: '*' 5894 - description: |- 5895 - The chart version semver expression, ignored for charts from GitRepository 5896 - and Bucket sources. Defaults to latest when omitted. 5897 - type: string 5898 - required: 5899 - - chart 5900 - - interval 5901 - - sourceRef 5902 - type: object 5903 + apiVersion: 5904 + description: APIVersion of the referent. 5905 + type: string 5906 + kind: 5907 + description: |- 5908 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5909 + 'Bucket'). 5910 + enum: 5911 + - HelmRepository 5912 + - GitRepository 5913 + - Bucket 5914 + type: string 5915 + name: 5916 + description: Name of the referent. 5917 + type: string 5918 + required: 5919 + - kind 5920 + - name 5921 + type: object 5922 + suspend: 5923 + description: This flag tells the controller to suspend the reconciliation 5924 + of this source. 5925 + type: boolean 5926 + valuesFile: 5927 + description: |- 5928 + Alternative values file to use as the default chart values, expected to 5929 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 5930 + for backwards compatibility the file defined here is merged before the 5931 + ValuesFiles items. Ignored when omitted. 5932 + type: string 5933 + valuesFiles: 5934 + description: |- 5935 + Alternative list of values files to use as the chart values (values.yaml 5936 + is not included by default), expected to be a relative path in the SourceRef. 5937 + Values files are merged in the order of this list with the last file overriding 5938 + the first. Ignored when omitted. 5939 + items: 5940 + type: string 5941 + type: array 5942 + version: 5943 + default: '*' 5944 + description: |- 5945 + The chart version semver expression, ignored for charts from GitRepository 5946 + and Bucket sources. Defaults to latest when omitted. 5947 + type: string 5948 + required: 5949 + - chart 5950 + - interval 5951 + - sourceRef 5952 + type: object 5953 + status: 5954 + default: 5955 + observedGeneration: -1 5956 + description: HelmChartStatus defines the observed state of the HelmChart. 5957 + properties: 5958 + artifact: 5959 + description: Artifact represents the output of the last successful 5960 + chart sync. 5961 + properties: 5962 + checksum: 5963 + description: Checksum is the SHA256 checksum of the artifact. 5964 + type: string 5965 + lastUpdateTime: 5966 + description: |- 5967 + LastUpdateTime is the timestamp corresponding to the last update of this 5968 + artifact. 5969 + format: date-time 5970 + type: string 5971 + path: 5972 + description: Path is the relative file path of this artifact. 5973 + type: string 5974 + revision: 5975 + description: |- 5976 + Revision is a human readable identifier traceable in the origin source 5977 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 5978 + chart version, etc. 5979 + type: string 5980 + url: 5981 + description: URL is the HTTP address of this artifact. 5982 + type: string 5983 + required: 5984 + - lastUpdateTime 5985 + - path 5986 + - url 5987 + type: object 5988 + conditions: 5989 + description: Conditions holds the conditions for the HelmChart. 5990 + items: 5991 + description: Condition contains details for one aspect of the current 5992 + state of this API Resource. 5993 + properties: 5994 + lastTransitionTime: 5995 + description: |- 5996 + lastTransitionTime is the last time the condition transitioned from one status to another. 5997 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5998 + format: date-time 5999 + type: string 6000 + message: 6001 + description: |- 6002 + message is a human readable message indicating details about the transition. 6003 + This may be an empty string. 6004 + maxLength: 32768 6005 + type: string 6006 + observedGeneration: 6007 + description: |- 6008 + observedGeneration represents the .metadata.generation that the condition was set based upon. 6009 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6010 + with respect to the current state of the instance. 6011 + format: int64 6012 + minimum: 0 6013 + type: integer 6014 + reason: 6015 + description: |- 6016 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 6017 + Producers of specific condition types may define expected values and meanings for this field, 6018 + and whether the values are considered a guaranteed API. 6019 + The value should be a CamelCase string. 6020 + This field may not be empty. 6021 + maxLength: 1024 6022 + minLength: 1 6023 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6024 + type: string 6025 status: 6026 - default: 6027 - observedGeneration: -1 6028 - description: HelmChartStatus defines the observed state of the HelmChart. 6029 - properties: 6030 - artifact: 6031 - description: Artifact represents the output of the last successful chart sync. 6032 - properties: 6033 - checksum: 6034 - description: Checksum is the SHA256 checksum of the artifact. 6035 - type: string 6036 - lastUpdateTime: 6037 - description: |- 6038 - LastUpdateTime is the timestamp corresponding to the last update of this 6039 - artifact. 6040 - format: date-time 6041 - type: string 6042 - path: 6043 - description: Path is the relative file path of this artifact. 6044 - type: string 6045 - revision: 6046 - description: |- 6047 - Revision is a human readable identifier traceable in the origin source 6048 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 6049 - chart version, etc. 6050 - type: string 6051 - url: 6052 - description: URL is the HTTP address of this artifact. 6053 - type: string 6054 - required: 6055 - - lastUpdateTime 6056 - - path 6057 - - url 6058 - type: object 6059 - conditions: 6060 - description: Conditions holds the conditions for the HelmChart. 6061 - items: 6062 - description: Condition contains details for one aspect of the current state of this API 6063 - Resource. 6064 - properties: 6065 - lastTransitionTime: 6066 - description: |- 6067 - lastTransitionTime is the last time the condition transitioned from one status to another. 6068 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6069 - format: date-time 6070 - type: string 6071 - message: 6072 - description: |- 6073 - message is a human readable message indicating details about the transition. 6074 - This may be an empty string. 6075 - maxLength: 32768 6076 - type: string 6077 - observedGeneration: 6078 - description: |- 6079 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6080 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6081 - with respect to the current state of the instance. 6082 - format: int64 6083 - minimum: 0 6084 - type: integer 6085 - reason: 6086 - description: |- 6087 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6088 - Producers of specific condition types may define expected values and meanings for this field, 6089 - and whether the values are considered a guaranteed API. 6090 - The value should be a CamelCase string. 6091 - This field may not be empty. 6092 - maxLength: 1024 6093 - minLength: 1 6094 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6095 - type: string 6096 - status: 6097 - description: status of the condition, one of True, False, Unknown. 6098 - enum: 6099 - - "True" 6100 - - "False" 6101 - - Unknown 6102 - type: string 6103 - type: 6104 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 6105 - maxLength: 316 6106 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6107 - type: string 6108 - required: 6109 - - lastTransitionTime 6110 - - message 6111 - - reason 6112 - - status 6113 - - type 6114 - type: object 6115 - type: array 6116 - lastHandledReconcileAt: 6117 - description: |- 6118 - LastHandledReconcileAt holds the value of the most recent 6119 - reconcile request value, so a change of the annotation value 6120 - can be detected. 6121 - type: string 6122 - observedGeneration: 6123 - description: ObservedGeneration is the last observed generation. 6124 - format: int64 6125 - type: integer 6126 - url: 6127 - description: URL is the download link for the last chart pulled. 6128 - type: string 6129 - type: object 6130 + description: status of the condition, one of True, False, Unknown. 6131 + enum: 6132 + - "True" 6133 + - "False" 6134 + - Unknown 6135 + type: string 6136 + type: 6137 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6138 + maxLength: 316 6139 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6140 + type: string 6141 + required: 6142 + - lastTransitionTime 6143 + - message 6144 + - reason 6145 + - status 6146 + - type 6147 + type: object 6148 + type: array 6149 + lastHandledReconcileAt: 6150 + description: |- 6151 + LastHandledReconcileAt holds the value of the most recent 6152 + reconcile request value, so a change of the annotation value 6153 + can be detected. 6154 + type: string 6155 + observedGeneration: 6156 + description: ObservedGeneration is the last observed generation. 6157 + format: int64 6158 + type: integer 6159 + url: 6160 + description: URL is the download link for the last chart pulled. 6161 + type: string 6162 + type: object 6163 + type: object 6164 + served: true 6165 + storage: false 6166 + subresources: 6167 + status: {} 6168 + - additionalPrinterColumns: 6169 + - jsonPath: .spec.chart 6170 + name: Chart 6171 + type: string 6172 + - jsonPath: .spec.version 6173 + name: Version 6174 + type: string 6175 + - jsonPath: .spec.sourceRef.kind 6176 + name: Source Kind 6177 + type: string 6178 + - jsonPath: .spec.sourceRef.name 6179 + name: Source Name 6180 + type: string 6181 + - jsonPath: .metadata.creationTimestamp 6182 + name: Age 6183 + type: date 6184 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 6185 + name: Ready 6186 + type: string 6187 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 6188 + name: Status 6189 + type: string 6190 + deprecated: true 6191 + deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 6192 + name: v1beta2 6193 + schema: 6194 + openAPIV3Schema: 6195 + description: HelmChart is the Schema for the helmcharts API. 6196 + properties: 6197 + apiVersion: 6198 + description: |- 6199 + APIVersion defines the versioned schema of this representation of an object. 6200 + Servers should convert recognized schemas to the latest internal value, and 6201 + may reject unrecognized values. 6202 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6203 + type: string 6204 + kind: 6205 + description: |- 6206 + Kind is a string value representing the REST resource this object represents. 6207 + Servers may infer this from the endpoint the client submits requests to. 6208 + Cannot be updated. 6209 + In CamelCase. 6210 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6211 + type: string 6212 + metadata: 6213 + type: object 6214 + spec: 6215 + description: HelmChartSpec specifies the desired state of a Helm chart. 6216 + properties: 6217 + accessFrom: 6218 + description: |- 6219 + AccessFrom specifies an Access Control List for allowing cross-namespace 6220 + references to this object. 6221 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6222 + properties: 6223 + namespaceSelectors: 6224 + description: |- 6225 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6226 + Items in this list are evaluated using a logical OR operation. 6227 + items: 6228 + description: |- 6229 + NamespaceSelector selects the namespaces to which this ACL applies. 6230 + An empty map of MatchLabels matches all namespaces in a cluster. 6231 + properties: 6232 + matchLabels: 6233 + additionalProperties: 6234 + type: string 6235 + description: |- 6236 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6237 + map is equivalent to an element of matchExpressions, whose key field is "key", the 6238 + operator is "In", and the values array contains only "value". The requirements are ANDed. 6239 + type: object 6240 + type: object 6241 + type: array 6242 + required: 6243 + - namespaceSelectors 6244 type: object 6245 - served: true 6246 - storage: false 6247 - subresources: 6248 - status: {} 6249 - - additionalPrinterColumns: 6250 - - jsonPath: .spec.chart 6251 - name: Chart 6252 - type: string 6253 - - jsonPath: .spec.version 6254 - name: Version 6255 - type: string 6256 - - jsonPath: .spec.sourceRef.kind 6257 - name: Source Kind 6258 - type: string 6259 - - jsonPath: .spec.sourceRef.name 6260 - name: Source Name 6261 - type: string 6262 - - jsonPath: .metadata.creationTimestamp 6263 - name: Age 6264 - type: date 6265 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6266 - name: Ready 6267 - type: string 6268 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6269 - name: Status 6270 - type: string 6271 - deprecated: true 6272 - deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 6273 - name: v1beta2 6274 - schema: 6275 - openAPIV3Schema: 6276 - description: HelmChart is the Schema for the helmcharts API. 6277 + chart: 6278 + description: |- 6279 + Chart is the name or path the Helm chart is available at in the 6280 + SourceRef. 6281 + type: string 6282 + ignoreMissingValuesFiles: 6283 + description: |- 6284 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 6285 + files rather than failing. 6286 + type: boolean 6287 + interval: 6288 + description: |- 6289 + Interval at which the HelmChart SourceRef is checked for updates. 6290 + This interval is approximate and may be subject to jitter to ensure 6291 + efficient use of resources. 6292 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6293 + type: string 6294 + reconcileStrategy: 6295 + default: ChartVersion 6296 + description: |- 6297 + ReconcileStrategy determines what enables the creation of a new artifact. 6298 + Valid values are ('ChartVersion', 'Revision'). 6299 + See the documentation of the values for an explanation on their behavior. 6300 + Defaults to ChartVersion when omitted. 6301 + enum: 6302 + - ChartVersion 6303 + - Revision 6304 + type: string 6305 + sourceRef: 6306 + description: SourceRef is the reference to the Source the chart is 6307 + available at. 6308 properties: 6309 - apiVersion: 6310 - description: |- 6311 - APIVersion defines the versioned schema of this representation of an object. 6312 - Servers should convert recognized schemas to the latest internal value, and 6313 - may reject unrecognized values. 6314 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6315 - type: string 6316 - kind: 6317 - description: |- 6318 - Kind is a string value representing the REST resource this object represents. 6319 - Servers may infer this from the endpoint the client submits requests to. 6320 - Cannot be updated. 6321 - In CamelCase. 6322 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6323 + apiVersion: 6324 + description: APIVersion of the referent. 6325 + type: string 6326 + kind: 6327 + description: |- 6328 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 6329 + 'Bucket'). 6330 + enum: 6331 + - HelmRepository 6332 + - GitRepository 6333 + - Bucket 6334 + type: string 6335 + name: 6336 + description: Name of the referent. 6337 + type: string 6338 + required: 6339 + - kind 6340 + - name 6341 + type: object 6342 + suspend: 6343 + description: |- 6344 + Suspend tells the controller to suspend the reconciliation of this 6345 + source. 6346 + type: boolean 6347 + valuesFile: 6348 + description: |- 6349 + ValuesFile is an alternative values file to use as the default chart 6350 + values, expected to be a relative path in the SourceRef. Deprecated in 6351 + favor of ValuesFiles, for backwards compatibility the file specified here 6352 + is merged before the ValuesFiles items. Ignored when omitted. 6353 + type: string 6354 + valuesFiles: 6355 + description: |- 6356 + ValuesFiles is an alternative list of values files to use as the chart 6357 + values (values.yaml is not included by default), expected to be a 6358 + relative path in the SourceRef. 6359 + Values files are merged in the order of this list with the last file 6360 + overriding the first. Ignored when omitted. 6361 + items: 6362 + type: string 6363 + type: array 6364 + verify: 6365 + description: |- 6366 + Verify contains the secret name containing the trusted public keys 6367 + used to verify the signature and specifies which provider to use to check 6368 + whether OCI image is authentic. 6369 + This field is only supported when using HelmRepository source with spec.type 'oci'. 6370 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 6371 + properties: 6372 + matchOIDCIdentity: 6373 + description: |- 6374 + MatchOIDCIdentity specifies the identity matching criteria to use 6375 + while verifying an OCI artifact which was signed using Cosign keyless 6376 + signing. The artifact's identity is deemed to be verified if any of the 6377 + specified matchers match against the identity. 6378 + items: 6379 + description: |- 6380 + OIDCIdentityMatch specifies options for verifying the certificate identity, 6381 + i.e. the issuer and the subject of the certificate. 6382 + properties: 6383 + issuer: 6384 + description: |- 6385 + Issuer specifies the regex pattern to match against to verify 6386 + the OIDC issuer in the Fulcio certificate. The pattern must be a 6387 + valid Go regular expression. 6388 + type: string 6389 + subject: 6390 + description: |- 6391 + Subject specifies the regex pattern to match against to verify 6392 + the identity subject in the Fulcio certificate. The pattern must 6393 + be a valid Go regular expression. 6394 + type: string 6395 + required: 6396 + - issuer 6397 + - subject 6398 + type: object 6399 + type: array 6400 + provider: 6401 + default: cosign 6402 + description: Provider specifies the technology used to sign the 6403 + OCI Artifact. 6404 + enum: 6405 + - cosign 6406 + - notation 6407 + type: string 6408 + secretRef: 6409 + description: |- 6410 + SecretRef specifies the Kubernetes Secret containing the 6411 + trusted public keys. 6412 + properties: 6413 + name: 6414 + description: Name of the referent. 6415 type: string 6416 - metadata: 6417 - type: object 6418 - spec: 6419 - description: HelmChartSpec specifies the desired state of a Helm chart. 6420 - properties: 6421 - accessFrom: 6422 - description: |- 6423 - AccessFrom specifies an Access Control List for allowing cross-namespace 6424 - references to this object. 6425 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6426 - properties: 6427 - namespaceSelectors: 6428 - description: |- 6429 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6430 - Items in this list are evaluated using a logical OR operation. 6431 - items: 6432 - description: |- 6433 - NamespaceSelector selects the namespaces to which this ACL applies. 6434 - An empty map of MatchLabels matches all namespaces in a cluster. 6435 - properties: 6436 - matchLabels: 6437 - additionalProperties: 6438 - type: string 6439 - description: |- 6440 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6441 - map is equivalent to an element of matchExpressions, whose key field is "key", the 6442 - operator is "In", and the values array contains only "value". The requirements are ANDed. 6443 - type: object 6444 - type: object 6445 - type: array 6446 - required: 6447 - - namespaceSelectors 6448 - type: object 6449 - chart: 6450 - description: |- 6451 - Chart is the name or path the Helm chart is available at in the 6452 - SourceRef. 6453 - type: string 6454 - ignoreMissingValuesFiles: 6455 - description: |- 6456 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 6457 - files rather than failing. 6458 - type: boolean 6459 - interval: 6460 - description: |- 6461 - Interval at which the HelmChart SourceRef is checked for updates. 6462 - This interval is approximate and may be subject to jitter to ensure 6463 - efficient use of resources. 6464 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6465 - type: string 6466 - reconcileStrategy: 6467 - default: ChartVersion 6468 - description: |- 6469 - ReconcileStrategy determines what enables the creation of a new artifact. 6470 - Valid values are ('ChartVersion', 'Revision'). 6471 - See the documentation of the values for an explanation on their behavior. 6472 - Defaults to ChartVersion when omitted. 6473 - enum: 6474 - - ChartVersion 6475 - - Revision 6476 - type: string 6477 - sourceRef: 6478 - description: SourceRef is the reference to the Source the chart is available at. 6479 - properties: 6480 - apiVersion: 6481 - description: APIVersion of the referent. 6482 - type: string 6483 - kind: 6484 - description: |- 6485 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 6486 - 'Bucket'). 6487 - enum: 6488 - - HelmRepository 6489 - - GitRepository 6490 - - Bucket 6491 - type: string 6492 - name: 6493 - description: Name of the referent. 6494 - type: string 6495 - required: 6496 - - kind 6497 - - name 6498 - type: object 6499 - suspend: 6500 - description: |- 6501 - Suspend tells the controller to suspend the reconciliation of this 6502 - source. 6503 - type: boolean 6504 - valuesFile: 6505 - description: |- 6506 - ValuesFile is an alternative values file to use as the default chart 6507 - values, expected to be a relative path in the SourceRef. Deprecated in 6508 - favor of ValuesFiles, for backwards compatibility the file specified here 6509 - is merged before the ValuesFiles items. Ignored when omitted. 6510 - type: string 6511 - valuesFiles: 6512 - description: |- 6513 - ValuesFiles is an alternative list of values files to use as the chart 6514 - values (values.yaml is not included by default), expected to be a 6515 - relative path in the SourceRef. 6516 - Values files are merged in the order of this list with the last file 6517 - overriding the first. Ignored when omitted. 6518 - items: 6519 - type: string 6520 - type: array 6521 - verify: 6522 - description: |- 6523 - Verify contains the secret name containing the trusted public keys 6524 - used to verify the signature and specifies which provider to use to check 6525 - whether OCI image is authentic. 6526 - This field is only supported when using HelmRepository source with spec.type 'oci'. 6527 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 6528 - properties: 6529 - matchOIDCIdentity: 6530 - description: |- 6531 - MatchOIDCIdentity specifies the identity matching criteria to use 6532 - while verifying an OCI artifact which was signed using Cosign keyless 6533 - signing. The artifact's identity is deemed to be verified if any of the 6534 - specified matchers match against the identity. 6535 - items: 6536 - description: |- 6537 - OIDCIdentityMatch specifies options for verifying the certificate identity, 6538 - i.e. the issuer and the subject of the certificate. 6539 - properties: 6540 - issuer: 6541 - description: |- 6542 - Issuer specifies the regex pattern to match against to verify 6543 - the OIDC issuer in the Fulcio certificate. The pattern must be a 6544 - valid Go regular expression. 6545 - type: string 6546 - subject: 6547 - description: |- 6548 - Subject specifies the regex pattern to match against to verify 6549 - the identity subject in the Fulcio certificate. The pattern must 6550 - be a valid Go regular expression. 6551 - type: string 6552 - required: 6553 - - issuer 6554 - - subject 6555 - type: object 6556 - type: array 6557 - provider: 6558 - default: cosign 6559 - description: Provider specifies the technology used to sign the OCI Artifact. 6560 - enum: 6561 - - cosign 6562 - - notation 6563 - type: string 6564 - secretRef: 6565 - description: |- 6566 - SecretRef specifies the Kubernetes Secret containing the 6567 - trusted public keys. 6568 - properties: 6569 - name: 6570 - description: Name of the referent. 6571 - type: string 6572 - required: 6573 - - name 6574 - type: object 6575 - required: 6576 - - provider 6577 - type: object 6578 - version: 6579 - default: '*' 6580 - description: |- 6581 - Version is the chart version semver expression, ignored for charts from 6582 - GitRepository and Bucket sources. Defaults to latest when omitted. 6583 - type: string 6584 - required: 6585 - - chart 6586 - - interval 6587 - - sourceRef 6588 - type: object 6589 + required: 6590 + - name 6591 + type: object 6592 + required: 6593 + - provider 6594 + type: object 6595 + version: 6596 + default: '*' 6597 + description: |- 6598 + Version is the chart version semver expression, ignored for charts from 6599 + GitRepository and Bucket sources. Defaults to latest when omitted. 6600 + type: string 6601 + required: 6602 + - chart 6603 + - interval 6604 + - sourceRef 6605 + type: object 6606 + status: 6607 + default: 6608 + observedGeneration: -1 6609 + description: HelmChartStatus records the observed state of the HelmChart. 6610 + properties: 6611 + artifact: 6612 + description: Artifact represents the output of the last successful 6613 + reconciliation. 6614 + properties: 6615 + digest: 6616 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6617 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6618 + type: string 6619 + lastUpdateTime: 6620 + description: |- 6621 + LastUpdateTime is the timestamp corresponding to the last update of the 6622 + Artifact. 6623 + format: date-time 6624 + type: string 6625 + metadata: 6626 + additionalProperties: 6627 + type: string 6628 + description: Metadata holds upstream information such as OCI annotations. 6629 + type: object 6630 + path: 6631 + description: |- 6632 + Path is the relative file path of the Artifact. It can be used to locate 6633 + the file in the root of the Artifact storage on the local file system of 6634 + the controller managing the Source. 6635 + type: string 6636 + revision: 6637 + description: |- 6638 + Revision is a human-readable identifier traceable in the origin source 6639 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6640 + type: string 6641 + size: 6642 + description: Size is the number of bytes in the file. 6643 + format: int64 6644 + type: integer 6645 + url: 6646 + description: |- 6647 + URL is the HTTP address of the Artifact as exposed by the controller 6648 + managing the Source. It can be used to retrieve the Artifact for 6649 + consumption, e.g. by another controller applying the Artifact contents. 6650 + type: string 6651 + required: 6652 + - lastUpdateTime 6653 + - path 6654 + - revision 6655 + - url 6656 + type: object 6657 + conditions: 6658 + description: Conditions holds the conditions for the HelmChart. 6659 + items: 6660 + description: Condition contains details for one aspect of the current 6661 + state of this API Resource. 6662 + properties: 6663 + lastTransitionTime: 6664 + description: |- 6665 + lastTransitionTime is the last time the condition transitioned from one status to another. 6666 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6667 + format: date-time 6668 + type: string 6669 + message: 6670 + description: |- 6671 + message is a human readable message indicating details about the transition. 6672 + This may be an empty string. 6673 + maxLength: 32768 6674 + type: string 6675 + observedGeneration: 6676 + description: |- 6677 + observedGeneration represents the .metadata.generation that the condition was set based upon. 6678 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6679 + with respect to the current state of the instance. 6680 + format: int64 6681 + minimum: 0 6682 + type: integer 6683 + reason: 6684 + description: |- 6685 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 6686 + Producers of specific condition types may define expected values and meanings for this field, 6687 + and whether the values are considered a guaranteed API. 6688 + The value should be a CamelCase string. 6689 + This field may not be empty. 6690 + maxLength: 1024 6691 + minLength: 1 6692 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6693 + type: string 6694 status: 6695 - default: 6696 - observedGeneration: -1 6697 - description: HelmChartStatus records the observed state of the HelmChart. 6698 - properties: 6699 - artifact: 6700 - description: Artifact represents the output of the last successful reconciliation. 6701 - properties: 6702 - digest: 6703 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6704 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6705 - type: string 6706 - lastUpdateTime: 6707 - description: |- 6708 - LastUpdateTime is the timestamp corresponding to the last update of the 6709 - Artifact. 6710 - format: date-time 6711 - type: string 6712 - metadata: 6713 - additionalProperties: 6714 - type: string 6715 - description: Metadata holds upstream information such as OCI annotations. 6716 - type: object 6717 - path: 6718 - description: |- 6719 - Path is the relative file path of the Artifact. It can be used to locate 6720 - the file in the root of the Artifact storage on the local file system of 6721 - the controller managing the Source. 6722 - type: string 6723 - revision: 6724 - description: |- 6725 - Revision is a human-readable identifier traceable in the origin source 6726 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6727 - type: string 6728 - size: 6729 - description: Size is the number of bytes in the file. 6730 - format: int64 6731 - type: integer 6732 - url: 6733 - description: |- 6734 - URL is the HTTP address of the Artifact as exposed by the controller 6735 - managing the Source. It can be used to retrieve the Artifact for 6736 - consumption, e.g. by another controller applying the Artifact contents. 6737 - type: string 6738 - required: 6739 - - lastUpdateTime 6740 - - path 6741 - - revision 6742 - - url 6743 - type: object 6744 - conditions: 6745 - description: Conditions holds the conditions for the HelmChart. 6746 - items: 6747 - description: Condition contains details for one aspect of the current state of this API 6748 - Resource. 6749 - properties: 6750 - lastTransitionTime: 6751 - description: |- 6752 - lastTransitionTime is the last time the condition transitioned from one status to another. 6753 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6754 - format: date-time 6755 - type: string 6756 - message: 6757 - description: |- 6758 - message is a human readable message indicating details about the transition. 6759 - This may be an empty string. 6760 - maxLength: 32768 6761 - type: string 6762 - observedGeneration: 6763 - description: |- 6764 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6765 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6766 - with respect to the current state of the instance. 6767 - format: int64 6768 - minimum: 0 6769 - type: integer 6770 - reason: 6771 - description: |- 6772 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6773 - Producers of specific condition types may define expected values and meanings for this field, 6774 - and whether the values are considered a guaranteed API. 6775 - The value should be a CamelCase string. 6776 - This field may not be empty. 6777 - maxLength: 1024 6778 - minLength: 1 6779 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6780 - type: string 6781 - status: 6782 - description: status of the condition, one of True, False, Unknown. 6783 - enum: 6784 - - "True" 6785 - - "False" 6786 - - Unknown 6787 - type: string 6788 - type: 6789 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 6790 - maxLength: 316 6791 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6792 - type: string 6793 - required: 6794 - - lastTransitionTime 6795 - - message 6796 - - reason 6797 - - status 6798 - - type 6799 - type: object 6800 - type: array 6801 - lastHandledReconcileAt: 6802 - description: |- 6803 - LastHandledReconcileAt holds the value of the most recent 6804 - reconcile request value, so a change of the annotation value 6805 - can be detected. 6806 - type: string 6807 - observedChartName: 6808 - description: |- 6809 - ObservedChartName is the last observed chart name as specified by the 6810 - resolved chart reference. 6811 - type: string 6812 - observedGeneration: 6813 - description: |- 6814 - ObservedGeneration is the last observed generation of the HelmChart 6815 - object. 6816 - format: int64 6817 - type: integer 6818 - observedSourceArtifactRevision: 6819 - description: |- 6820 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 6821 - of the HelmChartSpec.SourceRef. 6822 - type: string 6823 - observedValuesFiles: 6824 - description: |- 6825 - ObservedValuesFiles are the observed value files of the last successful 6826 - reconciliation. 6827 - It matches the chart in the last successfully reconciled artifact. 6828 - items: 6829 - type: string 6830 - type: array 6831 - url: 6832 - description: |- 6833 - URL is the dynamic fetch link for the latest Artifact. 6834 - It is provided on a "best effort" basis, and using the precise 6835 - BucketStatus.Artifact data is recommended. 6836 - type: string 6837 - type: object 6838 - type: object 6839 - served: true 6840 - storage: false 6841 - subresources: 6842 - status: {} 6843 + description: status of the condition, one of True, False, Unknown. 6844 + enum: 6845 + - "True" 6846 + - "False" 6847 + - Unknown 6848 + type: string 6849 + type: 6850 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6851 + maxLength: 316 6852 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6853 + type: string 6854 + required: 6855 + - lastTransitionTime 6856 + - message 6857 + - reason 6858 + - status 6859 + - type 6860 + type: object 6861 + type: array 6862 + lastHandledReconcileAt: 6863 + description: |- 6864 + LastHandledReconcileAt holds the value of the most recent 6865 + reconcile request value, so a change of the annotation value 6866 + can be detected. 6867 + type: string 6868 + observedChartName: 6869 + description: |- 6870 + ObservedChartName is the last observed chart name as specified by the 6871 + resolved chart reference. 6872 + type: string 6873 + observedGeneration: 6874 + description: |- 6875 + ObservedGeneration is the last observed generation of the HelmChart 6876 + object. 6877 + format: int64 6878 + type: integer 6879 + observedSourceArtifactRevision: 6880 + description: |- 6881 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 6882 + of the HelmChartSpec.SourceRef. 6883 + type: string 6884 + observedValuesFiles: 6885 + description: |- 6886 + ObservedValuesFiles are the observed value files of the last successful 6887 + reconciliation. 6888 + It matches the chart in the last successfully reconciled artifact. 6889 + items: 6890 + type: string 6891 + type: array 6892 + url: 6893 + description: |- 6894 + URL is the dynamic fetch link for the latest Artifact. 6895 + It is provided on a "best effort" basis, and using the precise 6896 + BucketStatus.Artifact data is recommended. 6897 + type: string 6898 + type: object 6899 + type: object 6900 + served: true 6901 + storage: false 6902 + subresources: 6903 + status: {} 6904 --- 6905 apiVersion: apiextensions.k8s.io/v1 6906 kind: CustomResourceDefinition 6907 metadata: 6908 - annotations: 6909 - controller-gen.kubebuilder.io/version: v0.16.1 6910 - labels: 6911 - app.kubernetes.io/component: source-controller 6912 - app.kubernetes.io/instance: flux-system 6913 - app.kubernetes.io/part-of: flux 6914 - app.kubernetes.io/version: v2.5.1 6915 - name: helmrepositories.source.toolkit.fluxcd.io 6916 + annotations: 6917 + controller-gen.kubebuilder.io/version: v0.16.1 6918 + labels: 6919 + app.kubernetes.io/component: source-controller 6920 + app.kubernetes.io/instance: flux-system 6921 + app.kubernetes.io/part-of: flux 6922 + app.kubernetes.io/version: v2.6.4 6923 + name: helmrepositories.source.toolkit.fluxcd.io 6924 spec: 6925 - group: source.toolkit.fluxcd.io 6926 - names: 6927 - kind: HelmRepository 6928 - listKind: HelmRepositoryList 6929 - plural: helmrepositories 6930 - shortNames: 6931 - - helmrepo 6932 - singular: helmrepository 6933 - scope: Namespaced 6934 - versions: 6935 - - additionalPrinterColumns: 6936 - - jsonPath: .spec.url 6937 - name: URL 6938 - type: string 6939 - - jsonPath: .metadata.creationTimestamp 6940 - name: Age 6941 - type: date 6942 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6943 - name: Ready 6944 - type: string 6945 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6946 - name: Status 6947 - type: string 6948 - name: v1 6949 - schema: 6950 - openAPIV3Schema: 6951 - description: HelmRepository is the Schema for the helmrepositories API. 6952 - properties: 6953 - apiVersion: 6954 - description: |- 6955 - APIVersion defines the versioned schema of this representation of an object. 6956 - Servers should convert recognized schemas to the latest internal value, and 6957 - may reject unrecognized values. 6958 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6959 - type: string 6960 - kind: 6961 - description: |- 6962 - Kind is a string value representing the REST resource this object represents. 6963 - Servers may infer this from the endpoint the client submits requests to. 6964 - Cannot be updated. 6965 - In CamelCase. 6966 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6967 - type: string 6968 - metadata: 6969 - type: object 6970 - spec: 6971 - description: |- 6972 - HelmRepositorySpec specifies the required configuration to produce an 6973 - Artifact for a Helm repository index YAML. 6974 - properties: 6975 - accessFrom: 6976 - description: |- 6977 - AccessFrom specifies an Access Control List for allowing cross-namespace 6978 - references to this object. 6979 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6980 - properties: 6981 - namespaceSelectors: 6982 - description: |- 6983 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6984 - Items in this list are evaluated using a logical OR operation. 6985 - items: 6986 - description: |- 6987 - NamespaceSelector selects the namespaces to which this ACL applies. 6988 - An empty map of MatchLabels matches all namespaces in a cluster. 6989 - properties: 6990 - matchLabels: 6991 - additionalProperties: 6992 - type: string 6993 - description: |- 6994 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6995 - map is equivalent to an element of matchExpressions, whose key field is "key", the 6996 - operator is "In", and the values array contains only "value". The requirements are ANDed. 6997 - type: object 6998 - type: object 6999 - type: array 7000 - required: 7001 - - namespaceSelectors 7002 - type: object 7003 - certSecretRef: 7004 - description: |- 7005 - CertSecretRef can be given the name of a Secret containing 7006 - either or both of 7007 - 7008 - - a PEM-encoded client certificate (`tls.crt`) and private 7009 - key (`tls.key`); 7010 - - a PEM-encoded CA certificate (`ca.crt`) 7011 - 7012 - and whichever are supplied, will be used for connecting to the 7013 - registry. The client cert and key are useful if you are 7014 - authenticating with a certificate; the CA cert is useful if 7015 - you are using a self-signed server certificate. The Secret must 7016 - be of type `Opaque` or `kubernetes.io/tls`. 7017 - 7018 - It takes precedence over the values specified in the Secret referred 7019 - to by `.spec.secretRef`. 7020 - properties: 7021 - name: 7022 - description: Name of the referent. 7023 - type: string 7024 - required: 7025 - - name 7026 - type: object 7027 - insecure: 7028 - description: |- 7029 - Insecure allows connecting to a non-TLS HTTP container registry. 7030 - This field is only taken into account if the .spec.type field is set to 'oci'. 7031 - type: boolean 7032 - interval: 7033 - description: |- 7034 - Interval at which the HelmRepository URL is checked for updates. 7035 - This interval is approximate and may be subject to jitter to ensure 7036 - efficient use of resources. 7037 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7038 - type: string 7039 - passCredentials: 7040 - description: |- 7041 - PassCredentials allows the credentials from the SecretRef to be passed 7042 - on to a host that does not match the host as defined in URL. 7043 - This may be required if the host of the advertised chart URLs in the 7044 - index differ from the defined URL. 7045 - Enabling this should be done with caution, as it can potentially result 7046 - in credentials getting stolen in a MITM-attack. 7047 - type: boolean 7048 - provider: 7049 - default: generic 7050 - description: |- 7051 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7052 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 7053 - When not specified, defaults to 'generic'. 7054 - enum: 7055 - - generic 7056 - - aws 7057 - - azure 7058 - - gcp 7059 - type: string 7060 - secretRef: 7061 - description: |- 7062 - SecretRef specifies the Secret containing authentication credentials 7063 - for the HelmRepository. 7064 - For HTTP/S basic auth the secret must contain 'username' and 'password' 7065 - fields. 7066 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 7067 - keys is deprecated. Please use `.spec.certSecretRef` instead. 7068 - properties: 7069 - name: 7070 - description: Name of the referent. 7071 - type: string 7072 - required: 7073 - - name 7074 - type: object 7075 - suspend: 7076 - description: |- 7077 - Suspend tells the controller to suspend the reconciliation of this 7078 - HelmRepository. 7079 - type: boolean 7080 - timeout: 7081 - description: |- 7082 - Timeout is used for the index fetch operation for an HTTPS helm repository, 7083 - and for remote OCI Repository operations like pulling for an OCI helm 7084 - chart by the associated HelmChart. 7085 - Its default value is 60s. 7086 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7087 - type: string 7088 - type: 7089 - description: |- 7090 - Type of the HelmRepository. 7091 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 7092 - enum: 7093 - - default 7094 - - oci 7095 - type: string 7096 - url: 7097 - description: |- 7098 - URL of the Helm repository, a valid URL contains at least a protocol and 7099 - host. 7100 - pattern: ^(http|https|oci)://.*$ 7101 - type: string 7102 - required: 7103 - - url 7104 - type: object 7105 - status: 7106 - default: 7107 - observedGeneration: -1 7108 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 7109 - properties: 7110 - artifact: 7111 - description: Artifact represents the last successful HelmRepository reconciliation. 7112 - properties: 7113 - digest: 7114 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7115 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7116 - type: string 7117 - lastUpdateTime: 7118 - description: |- 7119 - LastUpdateTime is the timestamp corresponding to the last update of the 7120 - Artifact. 7121 - format: date-time 7122 - type: string 7123 - metadata: 7124 - additionalProperties: 7125 - type: string 7126 - description: Metadata holds upstream information such as OCI annotations. 7127 - type: object 7128 - path: 7129 - description: |- 7130 - Path is the relative file path of the Artifact. It can be used to locate 7131 - the file in the root of the Artifact storage on the local file system of 7132 - the controller managing the Source. 7133 - type: string 7134 - revision: 7135 - description: |- 7136 - Revision is a human-readable identifier traceable in the origin source 7137 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7138 - type: string 7139 - size: 7140 - description: Size is the number of bytes in the file. 7141 - format: int64 7142 - type: integer 7143 - url: 7144 - description: |- 7145 - URL is the HTTP address of the Artifact as exposed by the controller 7146 - managing the Source. It can be used to retrieve the Artifact for 7147 - consumption, e.g. by another controller applying the Artifact contents. 7148 - type: string 7149 - required: 7150 - - lastUpdateTime 7151 - - path 7152 - - revision 7153 - - url 7154 - type: object 7155 - conditions: 7156 - description: Conditions holds the conditions for the HelmRepository. 7157 - items: 7158 - description: Condition contains details for one aspect of the current state of this API 7159 - Resource. 7160 - properties: 7161 - lastTransitionTime: 7162 - description: |- 7163 - lastTransitionTime is the last time the condition transitioned from one status to another. 7164 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7165 - format: date-time 7166 - type: string 7167 - message: 7168 - description: |- 7169 - message is a human readable message indicating details about the transition. 7170 - This may be an empty string. 7171 - maxLength: 32768 7172 - type: string 7173 - observedGeneration: 7174 - description: |- 7175 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7176 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7177 - with respect to the current state of the instance. 7178 - format: int64 7179 - minimum: 0 7180 - type: integer 7181 - reason: 7182 - description: |- 7183 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7184 - Producers of specific condition types may define expected values and meanings for this field, 7185 - and whether the values are considered a guaranteed API. 7186 - The value should be a CamelCase string. 7187 - This field may not be empty. 7188 - maxLength: 1024 7189 - minLength: 1 7190 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7191 - type: string 7192 - status: 7193 - description: status of the condition, one of True, False, Unknown. 7194 - enum: 7195 - - "True" 7196 - - "False" 7197 - - Unknown 7198 - type: string 7199 - type: 7200 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7201 - maxLength: 316 7202 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7203 - type: string 7204 - required: 7205 - - lastTransitionTime 7206 - - message 7207 - - reason 7208 - - status 7209 - - type 7210 - type: object 7211 - type: array 7212 - lastHandledReconcileAt: 7213 - description: |- 7214 - LastHandledReconcileAt holds the value of the most recent 7215 - reconcile request value, so a change of the annotation value 7216 - can be detected. 7217 - type: string 7218 - observedGeneration: 7219 - description: |- 7220 - ObservedGeneration is the last observed generation of the HelmRepository 7221 - object. 7222 - format: int64 7223 - type: integer 7224 - url: 7225 - description: |- 7226 - URL is the dynamic fetch link for the latest Artifact. 7227 - It is provided on a "best effort" basis, and using the precise 7228 - HelmRepositoryStatus.Artifact data is recommended. 7229 - type: string 7230 - type: object 7231 - type: object 7232 - served: true 7233 - storage: true 7234 - subresources: 7235 - status: {} 7236 - - additionalPrinterColumns: 7237 - - jsonPath: .spec.url 7238 - name: URL 7239 - type: string 7240 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7241 - name: Ready 7242 - type: string 7243 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7244 - name: Status 7245 - type: string 7246 - - jsonPath: .metadata.creationTimestamp 7247 - name: Age 7248 - type: date 7249 - deprecated: true 7250 - deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1 7251 - name: v1beta1 7252 - schema: 7253 - openAPIV3Schema: 7254 - description: HelmRepository is the Schema for the helmrepositories API 7255 + group: source.toolkit.fluxcd.io 7256 + names: 7257 + kind: HelmRepository 7258 + listKind: HelmRepositoryList 7259 + plural: helmrepositories 7260 + shortNames: 7261 + - helmrepo 7262 + singular: helmrepository 7263 + scope: Namespaced 7264 + versions: 7265 + - additionalPrinterColumns: 7266 + - jsonPath: .spec.url 7267 + name: URL 7268 + type: string 7269 + - jsonPath: .metadata.creationTimestamp 7270 + name: Age 7271 + type: date 7272 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 7273 + name: Ready 7274 + type: string 7275 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 7276 + name: Status 7277 + type: string 7278 + name: v1 7279 + schema: 7280 + openAPIV3Schema: 7281 + description: HelmRepository is the Schema for the helmrepositories API. 7282 + properties: 7283 + apiVersion: 7284 + description: |- 7285 + APIVersion defines the versioned schema of this representation of an object. 7286 + Servers should convert recognized schemas to the latest internal value, and 7287 + may reject unrecognized values. 7288 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7289 + type: string 7290 + kind: 7291 + description: |- 7292 + Kind is a string value representing the REST resource this object represents. 7293 + Servers may infer this from the endpoint the client submits requests to. 7294 + Cannot be updated. 7295 + In CamelCase. 7296 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7297 + type: string 7298 + metadata: 7299 + type: object 7300 + spec: 7301 + description: |- 7302 + HelmRepositorySpec specifies the required configuration to produce an 7303 + Artifact for a Helm repository index YAML. 7304 + properties: 7305 + accessFrom: 7306 + description: |- 7307 + AccessFrom specifies an Access Control List for allowing cross-namespace 7308 + references to this object. 7309 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 7310 properties: 7311 - apiVersion: 7312 - description: |- 7313 - APIVersion defines the versioned schema of this representation of an object. 7314 - Servers should convert recognized schemas to the latest internal value, and 7315 - may reject unrecognized values. 7316 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7317 - type: string 7318 - kind: 7319 - description: |- 7320 - Kind is a string value representing the REST resource this object represents. 7321 - Servers may infer this from the endpoint the client submits requests to. 7322 - Cannot be updated. 7323 - In CamelCase. 7324 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7325 - type: string 7326 - metadata: 7327 - type: object 7328 - spec: 7329 - description: HelmRepositorySpec defines the reference to a Helm repository. 7330 - properties: 7331 - accessFrom: 7332 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 7333 - to this object. 7334 - properties: 7335 - namespaceSelectors: 7336 - description: |- 7337 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7338 - Items in this list are evaluated using a logical OR operation. 7339 - items: 7340 - description: |- 7341 - NamespaceSelector selects the namespaces to which this ACL applies. 7342 - An empty map of MatchLabels matches all namespaces in a cluster. 7343 - properties: 7344 - matchLabels: 7345 - additionalProperties: 7346 - type: string 7347 - description: |- 7348 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7349 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7350 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7351 - type: object 7352 - type: object 7353 - type: array 7354 - required: 7355 - - namespaceSelectors 7356 - type: object 7357 - interval: 7358 - description: The interval at which to check the upstream for updates. 7359 - type: string 7360 - passCredentials: 7361 - description: |- 7362 - PassCredentials allows the credentials from the SecretRef to be passed on to 7363 - a host that does not match the host as defined in URL. 7364 - This may be required if the host of the advertised chart URLs in the index 7365 - differ from the defined URL. 7366 - Enabling this should be done with caution, as it can potentially result in 7367 - credentials getting stolen in a MITM-attack. 7368 - type: boolean 7369 - secretRef: 7370 - description: |- 7371 - The name of the secret containing authentication credentials for the Helm 7372 - repository. 7373 - For HTTP/S basic auth the secret must contain username and 7374 - password fields. 7375 - For TLS the secret must contain a certFile and keyFile, and/or 7376 - caFile fields. 7377 - properties: 7378 - name: 7379 - description: Name of the referent. 7380 - type: string 7381 - required: 7382 - - name 7383 - type: object 7384 - suspend: 7385 - description: This flag tells the controller to suspend the reconciliation of this source. 7386 - type: boolean 7387 - timeout: 7388 - default: 60s 7389 - description: The timeout of index downloading, defaults to 60s. 7390 - type: string 7391 - url: 7392 - description: The Helm repository URL, a valid URL contains at least a protocol and host. 7393 - type: string 7394 - required: 7395 - - interval 7396 - - url 7397 - type: object 7398 - status: 7399 - default: 7400 - observedGeneration: -1 7401 - description: HelmRepositoryStatus defines the observed state of the HelmRepository. 7402 - properties: 7403 - artifact: 7404 - description: Artifact represents the output of the last successful repository sync. 7405 - properties: 7406 - checksum: 7407 - description: Checksum is the SHA256 checksum of the artifact. 7408 - type: string 7409 - lastUpdateTime: 7410 - description: |- 7411 - LastUpdateTime is the timestamp corresponding to the last update of this 7412 - artifact. 7413 - format: date-time 7414 - type: string 7415 - path: 7416 - description: Path is the relative file path of this artifact. 7417 - type: string 7418 - revision: 7419 - description: |- 7420 - Revision is a human readable identifier traceable in the origin source 7421 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 7422 - chart version, etc. 7423 - type: string 7424 - url: 7425 - description: URL is the HTTP address of this artifact. 7426 - type: string 7427 - required: 7428 - - lastUpdateTime 7429 - - path 7430 - - url 7431 - type: object 7432 - conditions: 7433 - description: Conditions holds the conditions for the HelmRepository. 7434 - items: 7435 - description: Condition contains details for one aspect of the current state of this API 7436 - Resource. 7437 - properties: 7438 - lastTransitionTime: 7439 - description: |- 7440 - lastTransitionTime is the last time the condition transitioned from one status to another. 7441 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7442 - format: date-time 7443 - type: string 7444 - message: 7445 - description: |- 7446 - message is a human readable message indicating details about the transition. 7447 - This may be an empty string. 7448 - maxLength: 32768 7449 - type: string 7450 - observedGeneration: 7451 - description: |- 7452 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7453 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7454 - with respect to the current state of the instance. 7455 - format: int64 7456 - minimum: 0 7457 - type: integer 7458 - reason: 7459 - description: |- 7460 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7461 - Producers of specific condition types may define expected values and meanings for this field, 7462 - and whether the values are considered a guaranteed API. 7463 - The value should be a CamelCase string. 7464 - This field may not be empty. 7465 - maxLength: 1024 7466 - minLength: 1 7467 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7468 - type: string 7469 - status: 7470 - description: status of the condition, one of True, False, Unknown. 7471 - enum: 7472 - - "True" 7473 - - "False" 7474 - - Unknown 7475 - type: string 7476 - type: 7477 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7478 - maxLength: 316 7479 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7480 - type: string 7481 - required: 7482 - - lastTransitionTime 7483 - - message 7484 - - reason 7485 - - status 7486 - - type 7487 - type: object 7488 - type: array 7489 - lastHandledReconcileAt: 7490 - description: |- 7491 - LastHandledReconcileAt holds the value of the most recent 7492 - reconcile request value, so a change of the annotation value 7493 - can be detected. 7494 - type: string 7495 - observedGeneration: 7496 - description: ObservedGeneration is the last observed generation. 7497 - format: int64 7498 - type: integer 7499 - url: 7500 - description: URL is the download link for the last index fetched. 7501 - type: string 7502 - type: object 7503 + namespaceSelectors: 7504 + description: |- 7505 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7506 + Items in this list are evaluated using a logical OR operation. 7507 + items: 7508 + description: |- 7509 + NamespaceSelector selects the namespaces to which this ACL applies. 7510 + An empty map of MatchLabels matches all namespaces in a cluster. 7511 + properties: 7512 + matchLabels: 7513 + additionalProperties: 7514 + type: string 7515 + description: |- 7516 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7517 + map is equivalent to an element of matchExpressions, whose key field is "key", the 7518 + operator is "In", and the values array contains only "value". The requirements are ANDed. 7519 + type: object 7520 + type: object 7521 + type: array 7522 + required: 7523 + - namespaceSelectors 7524 type: object 7525 - served: true 7526 - storage: false 7527 - subresources: 7528 - status: {} 7529 - - additionalPrinterColumns: 7530 - - jsonPath: .spec.url 7531 - name: URL 7532 - type: string 7533 - - jsonPath: .metadata.creationTimestamp 7534 - name: Age 7535 - type: date 7536 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7537 - name: Ready 7538 - type: string 7539 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7540 - name: Status 7541 - type: string 7542 - deprecated: true 7543 - deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 7544 - name: v1beta2 7545 - schema: 7546 - openAPIV3Schema: 7547 - description: HelmRepository is the Schema for the helmrepositories API. 7548 - properties: 7549 - apiVersion: 7550 - description: |- 7551 - APIVersion defines the versioned schema of this representation of an object. 7552 - Servers should convert recognized schemas to the latest internal value, and 7553 - may reject unrecognized values. 7554 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7555 - type: string 7556 - kind: 7557 - description: |- 7558 - Kind is a string value representing the REST resource this object represents. 7559 - Servers may infer this from the endpoint the client submits requests to. 7560 - Cannot be updated. 7561 - In CamelCase. 7562 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7563 - type: string 7564 - metadata: 7565 - type: object 7566 - spec: 7567 - description: |- 7568 - HelmRepositorySpec specifies the required configuration to produce an 7569 - Artifact for a Helm repository index YAML. 7570 - properties: 7571 - accessFrom: 7572 - description: |- 7573 - AccessFrom specifies an Access Control List for allowing cross-namespace 7574 - references to this object. 7575 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 7576 - properties: 7577 - namespaceSelectors: 7578 - description: |- 7579 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7580 - Items in this list are evaluated using a logical OR operation. 7581 - items: 7582 - description: |- 7583 - NamespaceSelector selects the namespaces to which this ACL applies. 7584 - An empty map of MatchLabels matches all namespaces in a cluster. 7585 - properties: 7586 - matchLabels: 7587 - additionalProperties: 7588 - type: string 7589 - description: |- 7590 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7591 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7592 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7593 - type: object 7594 - type: object 7595 - type: array 7596 - required: 7597 - - namespaceSelectors 7598 - type: object 7599 - certSecretRef: 7600 - description: |- 7601 - CertSecretRef can be given the name of a Secret containing 7602 - either or both of 7603 + certSecretRef: 7604 + description: |- 7605 + CertSecretRef can be given the name of a Secret containing 7606 + either or both of 7607 7608 - - a PEM-encoded client certificate (`tls.crt`) and private 7609 - key (`tls.key`); 7610 - - a PEM-encoded CA certificate (`ca.crt`) 7611 + - a PEM-encoded client certificate (`tls.crt`) and private 7612 + key (`tls.key`); 7613 + - a PEM-encoded CA certificate (`ca.crt`) 7614 7615 - and whichever are supplied, will be used for connecting to the 7616 - registry. The client cert and key are useful if you are 7617 - authenticating with a certificate; the CA cert is useful if 7618 - you are using a self-signed server certificate. The Secret must 7619 - be of type `Opaque` or `kubernetes.io/tls`. 7620 + and whichever are supplied, will be used for connecting to the 7621 + registry. The client cert and key are useful if you are 7622 + authenticating with a certificate; the CA cert is useful if 7623 + you are using a self-signed server certificate. The Secret must 7624 + be of type `Opaque` or `kubernetes.io/tls`. 7625 7626 - It takes precedence over the values specified in the Secret referred 7627 - to by `.spec.secretRef`. 7628 - properties: 7629 - name: 7630 - description: Name of the referent. 7631 - type: string 7632 - required: 7633 - - name 7634 - type: object 7635 - insecure: 7636 - description: |- 7637 - Insecure allows connecting to a non-TLS HTTP container registry. 7638 - This field is only taken into account if the .spec.type field is set to 'oci'. 7639 - type: boolean 7640 - interval: 7641 - description: |- 7642 - Interval at which the HelmRepository URL is checked for updates. 7643 - This interval is approximate and may be subject to jitter to ensure 7644 - efficient use of resources. 7645 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7646 - type: string 7647 - passCredentials: 7648 - description: |- 7649 - PassCredentials allows the credentials from the SecretRef to be passed 7650 - on to a host that does not match the host as defined in URL. 7651 - This may be required if the host of the advertised chart URLs in the 7652 - index differ from the defined URL. 7653 - Enabling this should be done with caution, as it can potentially result 7654 - in credentials getting stolen in a MITM-attack. 7655 - type: boolean 7656 - provider: 7657 - default: generic 7658 - description: |- 7659 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7660 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 7661 - When not specified, defaults to 'generic'. 7662 - enum: 7663 - - generic 7664 - - aws 7665 - - azure 7666 - - gcp 7667 - type: string 7668 - secretRef: 7669 - description: |- 7670 - SecretRef specifies the Secret containing authentication credentials 7671 - for the HelmRepository. 7672 - For HTTP/S basic auth the secret must contain 'username' and 'password' 7673 - fields. 7674 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 7675 - keys is deprecated. Please use `.spec.certSecretRef` instead. 7676 - properties: 7677 - name: 7678 - description: Name of the referent. 7679 - type: string 7680 - required: 7681 - - name 7682 - type: object 7683 - suspend: 7684 - description: |- 7685 - Suspend tells the controller to suspend the reconciliation of this 7686 - HelmRepository. 7687 - type: boolean 7688 - timeout: 7689 - description: |- 7690 - Timeout is used for the index fetch operation for an HTTPS helm repository, 7691 - and for remote OCI Repository operations like pulling for an OCI helm 7692 - chart by the associated HelmChart. 7693 - Its default value is 60s. 7694 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7695 - type: string 7696 - type: 7697 - description: |- 7698 - Type of the HelmRepository. 7699 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 7700 - enum: 7701 - - default 7702 - - oci 7703 - type: string 7704 - url: 7705 - description: |- 7706 - URL of the Helm repository, a valid URL contains at least a protocol and 7707 - host. 7708 - pattern: ^(http|https|oci)://.*$ 7709 - type: string 7710 - required: 7711 - - url 7712 - type: object 7713 - status: 7714 - default: 7715 - observedGeneration: -1 7716 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 7717 - properties: 7718 - artifact: 7719 - description: Artifact represents the last successful HelmRepository reconciliation. 7720 - properties: 7721 - digest: 7722 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7723 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7724 - type: string 7725 - lastUpdateTime: 7726 - description: |- 7727 - LastUpdateTime is the timestamp corresponding to the last update of the 7728 - Artifact. 7729 - format: date-time 7730 - type: string 7731 - metadata: 7732 - additionalProperties: 7733 - type: string 7734 - description: Metadata holds upstream information such as OCI annotations. 7735 - type: object 7736 - path: 7737 - description: |- 7738 - Path is the relative file path of the Artifact. It can be used to locate 7739 - the file in the root of the Artifact storage on the local file system of 7740 - the controller managing the Source. 7741 - type: string 7742 - revision: 7743 - description: |- 7744 - Revision is a human-readable identifier traceable in the origin source 7745 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7746 - type: string 7747 - size: 7748 - description: Size is the number of bytes in the file. 7749 - format: int64 7750 - type: integer 7751 - url: 7752 - description: |- 7753 - URL is the HTTP address of the Artifact as exposed by the controller 7754 - managing the Source. It can be used to retrieve the Artifact for 7755 - consumption, e.g. by another controller applying the Artifact contents. 7756 - type: string 7757 - required: 7758 - - lastUpdateTime 7759 - - path 7760 - - revision 7761 - - url 7762 - type: object 7763 - conditions: 7764 - description: Conditions holds the conditions for the HelmRepository. 7765 - items: 7766 - description: Condition contains details for one aspect of the current state of this API 7767 - Resource. 7768 - properties: 7769 - lastTransitionTime: 7770 - description: |- 7771 - lastTransitionTime is the last time the condition transitioned from one status to another. 7772 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7773 - format: date-time 7774 - type: string 7775 - message: 7776 - description: |- 7777 - message is a human readable message indicating details about the transition. 7778 - This may be an empty string. 7779 - maxLength: 32768 7780 - type: string 7781 - observedGeneration: 7782 - description: |- 7783 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7784 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7785 - with respect to the current state of the instance. 7786 - format: int64 7787 - minimum: 0 7788 - type: integer 7789 - reason: 7790 - description: |- 7791 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7792 - Producers of specific condition types may define expected values and meanings for this field, 7793 - and whether the values are considered a guaranteed API. 7794 - The value should be a CamelCase string. 7795 - This field may not be empty. 7796 - maxLength: 1024 7797 - minLength: 1 7798 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7799 - type: string 7800 - status: 7801 - description: status of the condition, one of True, False, Unknown. 7802 - enum: 7803 - - "True" 7804 - - "False" 7805 - - Unknown 7806 - type: string 7807 - type: 7808 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7809 - maxLength: 316 7810 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7811 - type: string 7812 - required: 7813 - - lastTransitionTime 7814 - - message 7815 - - reason 7816 - - status 7817 - - type 7818 - type: object 7819 - type: array 7820 - lastHandledReconcileAt: 7821 - description: |- 7822 - LastHandledReconcileAt holds the value of the most recent 7823 - reconcile request value, so a change of the annotation value 7824 - can be detected. 7825 - type: string 7826 - observedGeneration: 7827 - description: |- 7828 - ObservedGeneration is the last observed generation of the HelmRepository 7829 - object. 7830 - format: int64 7831 - type: integer 7832 - url: 7833 - description: |- 7834 - URL is the dynamic fetch link for the latest Artifact. 7835 - It is provided on a "best effort" basis, and using the precise 7836 - HelmRepositoryStatus.Artifact data is recommended. 7837 - type: string 7838 - type: object 7839 - type: object 7840 - served: true 7841 - storage: false 7842 - subresources: 7843 - status: {} 7844 ---- 7845 -apiVersion: apiextensions.k8s.io/v1 7846 -kind: CustomResourceDefinition 7847 -metadata: 7848 - annotations: 7849 - controller-gen.kubebuilder.io/version: v0.16.1 7850 - labels: 7851 - app.kubernetes.io/component: source-controller 7852 - app.kubernetes.io/instance: flux-system 7853 - app.kubernetes.io/part-of: flux 7854 - app.kubernetes.io/version: v2.5.1 7855 - name: ocirepositories.source.toolkit.fluxcd.io 7856 -spec: 7857 - group: source.toolkit.fluxcd.io 7858 - names: 7859 - kind: OCIRepository 7860 - listKind: OCIRepositoryList 7861 - plural: ocirepositories 7862 - shortNames: 7863 - - ocirepo 7864 - singular: ocirepository 7865 - scope: Namespaced 7866 - versions: 7867 - - additionalPrinterColumns: 7868 - - jsonPath: .spec.url 7869 - name: URL 7870 - type: string 7871 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7872 - name: Ready 7873 - type: string 7874 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7875 - name: Status 7876 - type: string 7877 - - jsonPath: .metadata.creationTimestamp 7878 - name: Age 7879 - type: date 7880 - name: v1beta2 7881 - schema: 7882 - openAPIV3Schema: 7883 - description: OCIRepository is the Schema for the ocirepositories API 7884 + It takes precedence over the values specified in the Secret referred 7885 + to by `.spec.secretRef`. 7886 properties: 7887 - apiVersion: 7888 - description: |- 7889 - APIVersion defines the versioned schema of this representation of an object. 7890 - Servers should convert recognized schemas to the latest internal value, and 7891 - may reject unrecognized values. 7892 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7893 - type: string 7894 - kind: 7895 - description: |- 7896 - Kind is a string value representing the REST resource this object represents. 7897 - Servers may infer this from the endpoint the client submits requests to. 7898 - Cannot be updated. 7899 - In CamelCase. 7900 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7901 - type: string 7902 - metadata: 7903 - type: object 7904 - spec: 7905 - description: OCIRepositorySpec defines the desired state of OCIRepository 7906 - properties: 7907 - certSecretRef: 7908 - description: |- 7909 - CertSecretRef can be given the name of a Secret containing 7910 - either or both of 7911 - 7912 - - a PEM-encoded client certificate (`tls.crt`) and private 7913 - key (`tls.key`); 7914 - - a PEM-encoded CA certificate (`ca.crt`) 7915 - 7916 - and whichever are supplied, will be used for connecting to the 7917 - registry. The client cert and key are useful if you are 7918 - authenticating with a certificate; the CA cert is useful if 7919 - you are using a self-signed server certificate. The Secret must 7920 - be of type `Opaque` or `kubernetes.io/tls`. 7921 - 7922 - Note: Support for the `caFile`, `certFile` and `keyFile` keys have 7923 - been deprecated. 7924 - properties: 7925 - name: 7926 - description: Name of the referent. 7927 - type: string 7928 - required: 7929 - - name 7930 - type: object 7931 - ignore: 7932 - description: |- 7933 - Ignore overrides the set of excluded patterns in the .sourceignore format 7934 - (which is the same as .gitignore). If not provided, a default will be used, 7935 - consult the documentation for your version to find out what those are. 7936 - type: string 7937 - insecure: 7938 - description: Insecure allows connecting to a non-TLS HTTP container registry. 7939 - type: boolean 7940 - interval: 7941 - description: |- 7942 - Interval at which the OCIRepository URL is checked for updates. 7943 - This interval is approximate and may be subject to jitter to ensure 7944 - efficient use of resources. 7945 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7946 - type: string 7947 - layerSelector: 7948 - description: |- 7949 - LayerSelector specifies which layer should be extracted from the OCI artifact. 7950 - When not specified, the first layer found in the artifact is selected. 7951 - properties: 7952 - mediaType: 7953 - description: |- 7954 - MediaType specifies the OCI media type of the layer 7955 - which should be extracted from the OCI Artifact. The 7956 - first layer matching this type is selected. 7957 - type: string 7958 - operation: 7959 - description: |- 7960 - Operation specifies how the selected layer should be processed. 7961 - By default, the layer compressed content is extracted to storage. 7962 - When the operation is set to 'copy', the layer compressed content 7963 - is persisted to storage as it is. 7964 - enum: 7965 - - extract 7966 - - copy 7967 - type: string 7968 - type: object 7969 - provider: 7970 - default: generic 7971 - description: |- 7972 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7973 - When not specified, defaults to 'generic'. 7974 - enum: 7975 - - generic 7976 - - aws 7977 - - azure 7978 - - gcp 7979 - type: string 7980 - proxySecretRef: 7981 - description: |- 7982 - ProxySecretRef specifies the Secret containing the proxy configuration 7983 - to use while communicating with the container registry. 7984 - properties: 7985 - name: 7986 - description: Name of the referent. 7987 - type: string 7988 - required: 7989 - - name 7990 - type: object 7991 - ref: 7992 - description: |- 7993 - The OCI reference to pull and monitor for changes, 7994 - defaults to the latest tag. 7995 - properties: 7996 - digest: 7997 - description: |- 7998 - Digest is the image digest to pull, takes precedence over SemVer. 7999 - The value should be in the format 'sha256:<HASH>'. 8000 - type: string 8001 - semver: 8002 - description: |- 8003 - SemVer is the range of tags to pull selecting the latest within 8004 - the range, takes precedence over Tag. 8005 - type: string 8006 - semverFilter: 8007 - description: SemverFilter is a regex pattern to filter the tags within the SemVer 8008 - range. 8009 - type: string 8010 - tag: 8011 - description: Tag is the image tag to pull, defaults to latest. 8012 - type: string 8013 - type: object 8014 - secretRef: 8015 - description: |- 8016 - SecretRef contains the secret name containing the registry login 8017 - credentials to resolve image metadata. 8018 - The secret must be of type kubernetes.io/dockerconfigjson. 8019 - properties: 8020 - name: 8021 - description: Name of the referent. 8022 - type: string 8023 - required: 8024 - - name 8025 - type: object 8026 - serviceAccountName: 8027 - description: |- 8028 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 8029 - the image pull if the service account has attached pull secrets. For more information: 8030 - https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 8031 - type: string 8032 - suspend: 8033 - description: This flag tells the controller to suspend the reconciliation of this source. 8034 - type: boolean 8035 - timeout: 8036 - default: 60s 8037 - description: The timeout for remote OCI Repository operations like pulling, defaults to 60s. 8038 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 8039 - type: string 8040 - url: 8041 - description: |- 8042 - URL is a reference to an OCI artifact repository hosted 8043 - on a remote container registry. 8044 - pattern: ^oci://.*$ 8045 - type: string 8046 - verify: 8047 - description: |- 8048 - Verify contains the secret name containing the trusted public keys 8049 - used to verify the signature and specifies which provider to use to check 8050 - whether OCI image is authentic. 8051 - properties: 8052 - matchOIDCIdentity: 8053 - description: |- 8054 - MatchOIDCIdentity specifies the identity matching criteria to use 8055 - while verifying an OCI artifact which was signed using Cosign keyless 8056 - signing. The artifact's identity is deemed to be verified if any of the 8057 - specified matchers match against the identity. 8058 - items: 8059 - description: |- 8060 - OIDCIdentityMatch specifies options for verifying the certificate identity, 8061 - i.e. the issuer and the subject of the certificate. 8062 - properties: 8063 - issuer: 8064 - description: |- 8065 - Issuer specifies the regex pattern to match against to verify 8066 - the OIDC issuer in the Fulcio certificate. The pattern must be a 8067 - valid Go regular expression. 8068 - type: string 8069 - subject: 8070 - description: |- 8071 - Subject specifies the regex pattern to match against to verify 8072 - the identity subject in the Fulcio certificate. The pattern must 8073 - be a valid Go regular expression. 8074 - type: string 8075 - required: 8076 - - issuer 8077 - - subject 8078 - type: object 8079 - type: array 8080 - provider: 8081 - default: cosign 8082 - description: Provider specifies the technology used to sign the OCI Artifact. 8083 - enum: 8084 - - cosign 8085 - - notation 8086 - type: string 8087 - secretRef: 8088 - description: |- 8089 - SecretRef specifies the Kubernetes Secret containing the 8090 - trusted public keys. 8091 - properties: 8092 - name: 8093 - description: Name of the referent. 8094 - type: string 8095 - required: 8096 - - name 8097 - type: object 8098 - required: 8099 - - provider 8100 - type: object 8101 - required: 8102 - - interval 8103 - - url 8104 - type: object 8105 - status: 8106 - default: 8107 - observedGeneration: -1 8108 - description: OCIRepositoryStatus defines the observed state of OCIRepository 8109 - properties: 8110 - artifact: 8111 - description: Artifact represents the output of the last successful OCI Repository sync. 8112 - properties: 8113 - digest: 8114 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 8115 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 8116 - type: string 8117 - lastUpdateTime: 8118 - description: |- 8119 - LastUpdateTime is the timestamp corresponding to the last update of the 8120 - Artifact. 8121 - format: date-time 8122 - type: string 8123 - metadata: 8124 - additionalProperties: 8125 - type: string 8126 - description: Metadata holds upstream information such as OCI annotations. 8127 - type: object 8128 - path: 8129 - description: |- 8130 - Path is the relative file path of the Artifact. It can be used to locate 8131 - the file in the root of the Artifact storage on the local file system of 8132 - the controller managing the Source. 8133 - type: string 8134 - revision: 8135 - description: |- 8136 - Revision is a human-readable identifier traceable in the origin source 8137 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 8138 - type: string 8139 - size: 8140 - description: Size is the number of bytes in the file. 8141 - format: int64 8142 - type: integer 8143 - url: 8144 - description: |- 8145 - URL is the HTTP address of the Artifact as exposed by the controller 8146 - managing the Source. It can be used to retrieve the Artifact for 8147 - consumption, e.g. by another controller applying the Artifact contents. 8148 - type: string 8149 - required: 8150 - - lastUpdateTime 8151 - - path 8152 - - revision 8153 - - url 8154 - type: object 8155 - conditions: 8156 - description: Conditions holds the conditions for the OCIRepository. 8157 - items: 8158 - description: Condition contains details for one aspect of the current state of this API 8159 - Resource. 8160 - properties: 8161 - lastTransitionTime: 8162 - description: |- 8163 - lastTransitionTime is the last time the condition transitioned from one status to another. 8164 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8165 - format: date-time 8166 - type: string 8167 - message: 8168 - description: |- 8169 - message is a human readable message indicating details about the transition. 8170 - This may be an empty string. 8171 - maxLength: 32768 8172 - type: string 8173 - observedGeneration: 8174 - description: |- 8175 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8176 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8177 - with respect to the current state of the instance. 8178 - format: int64 8179 - minimum: 0 8180 - type: integer 8181 - reason: 8182 - description: |- 8183 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8184 - Producers of specific condition types may define expected values and meanings for this field, 8185 - and whether the values are considered a guaranteed API. 8186 - The value should be a CamelCase string. 8187 - This field may not be empty. 8188 - maxLength: 1024 8189 - minLength: 1 8190 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8191 - type: string 8192 - status: 8193 - description: status of the condition, one of True, False, Unknown. 8194 - enum: 8195 - - "True" 8196 - - "False" 8197 - - Unknown 8198 - type: string 8199 - type: 8200 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 8201 - maxLength: 316 8202 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8203 - type: string 8204 - required: 8205 - - lastTransitionTime 8206 - - message 8207 - - reason 8208 - - status 8209 - - type 8210 - type: object 8211 - type: array 8212 - contentConfigChecksum: 8213 - description: |- 8214 - ContentConfigChecksum is a checksum of all the configurations related to 8215 - the content of the source artifact: 8216 - - .spec.ignore 8217 - - .spec.layerSelector 8218 - observed in .status.observedGeneration version of the object. This can 8219 - be used to determine if the content configuration has changed and the 8220 - artifact needs to be rebuilt. 8221 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 8222 - 8223 - Deprecated: Replaced with explicit fields for observed artifact content 8224 - config in the status. 8225 - type: string 8226 - lastHandledReconcileAt: 8227 - description: |- 8228 - LastHandledReconcileAt holds the value of the most recent 8229 - reconcile request value, so a change of the annotation value 8230 - can be detected. 8231 - type: string 8232 - observedGeneration: 8233 - description: ObservedGeneration is the last observed generation. 8234 - format: int64 8235 - type: integer 8236 - observedIgnore: 8237 - description: |- 8238 - ObservedIgnore is the observed exclusion patterns used for constructing 8239 - the source artifact. 8240 - type: string 8241 - observedLayerSelector: 8242 - description: |- 8243 - ObservedLayerSelector is the observed layer selector used for constructing 8244 - the source artifact. 8245 - properties: 8246 - mediaType: 8247 - description: |- 8248 - MediaType specifies the OCI media type of the layer 8249 - which should be extracted from the OCI Artifact. The 8250 - first layer matching this type is selected. 8251 - type: string 8252 - operation: 8253 - description: |- 8254 - Operation specifies how the selected layer should be processed. 8255 - By default, the layer compressed content is extracted to storage. 8256 - When the operation is set to 'copy', the layer compressed content 8257 - is persisted to storage as it is. 8258 - enum: 8259 - - extract 8260 - - copy 8261 - type: string 8262 - type: object 8263 - url: 8264 - description: URL is the download link for the artifact output of the last OCI Repository sync. 8265 - type: string 8266 - type: object 8267 + name: 8268 + description: Name of the referent. 8269 + type: string 8270 + required: 8271 + - name 8272 type: object 8273 - served: true 8274 - storage: true 8275 - subresources: 8276 - status: {} 8277 ---- 8278 -apiVersion: v1 8279 -kind: ServiceAccount 8280 -metadata: 8281 - labels: 8282 - app.kubernetes.io/component: source-controller 8283 - app.kubernetes.io/instance: flux-system 8284 - app.kubernetes.io/part-of: flux 8285 - app.kubernetes.io/version: v2.5.1 8286 - name: source-controller 8287 - namespace: flux-system 8288 ---- 8289 -apiVersion: v1 8290 -kind: Service 8291 -metadata: 8292 - labels: 8293 - app.kubernetes.io/component: source-controller 8294 - app.kubernetes.io/instance: flux-system 8295 - app.kubernetes.io/part-of: flux 8296 - app.kubernetes.io/version: v2.5.1 8297 - control-plane: controller 8298 - name: source-controller 8299 - namespace: flux-system 8300 -spec: 8301 - ports: 8302 - - name: http 8303 - port: 80 8304 - protocol: TCP 8305 - targetPort: http 8306 - selector: 8307 - app: source-controller 8308 - type: ClusterIP 8309 ---- 8310 -apiVersion: apps/v1 8311 -kind: Deployment 8312 -metadata: 8313 - labels: 8314 - app.kubernetes.io/component: source-controller 8315 - app.kubernetes.io/instance: flux-system 8316 - app.kubernetes.io/part-of: flux 8317 - app.kubernetes.io/version: v2.5.1 8318 - control-plane: controller 8319 - name: source-controller 8320 - namespace: flux-system 8321 -spec: 8322 - replicas: 1 8323 - selector: 8324 - matchLabels: 8325 - app: source-controller 8326 - strategy: 8327 - type: Recreate 8328 - template: 8329 - metadata: 8330 - annotations: 8331 - prometheus.io/port: "8080" 8332 - prometheus.io/scrape: "true" 8333 - labels: 8334 - app: source-controller 8335 - spec: 8336 - containers: 8337 - - args: 8338 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 8339 - - --watch-all-namespaces=true 8340 - - --log-level=info 8341 - - --log-encoding=json 8342 - - --enable-leader-election 8343 - - --storage-path=/data 8344 - - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 8345 - env: 8346 - - name: RUNTIME_NAMESPACE 8347 - valueFrom: 8348 - fieldRef: 8349 - fieldPath: metadata.namespace 8350 - - name: TUF_ROOT 8351 - value: /tmp/.sigstore 8352 - - name: GOMAXPROCS 8353 - valueFrom: 8354 - resourceFieldRef: 8355 - containerName: manager 8356 - resource: limits.cpu 8357 - - name: GOMEMLIMIT 8358 - valueFrom: 8359 - resourceFieldRef: 8360 - containerName: manager 8361 - resource: limits.memory 8362 - image: ghcr.io/fluxcd/source-controller:v1.5.0 8363 - imagePullPolicy: IfNotPresent 8364 - livenessProbe: 8365 - httpGet: 8366 - path: /healthz 8367 - port: healthz 8368 - name: manager 8369 - ports: 8370 - - containerPort: 9090 8371 - name: http 8372 - protocol: TCP 8373 - - containerPort: 8080 8374 - name: http-prom 8375 - protocol: TCP 8376 - - containerPort: 9440 8377 - name: healthz 8378 - protocol: TCP 8379 - readinessProbe: 8380 - httpGet: 8381 - path: / 8382 - port: http 8383 - resources: 8384 - limits: 8385 - cpu: 1000m 8386 - memory: 1Gi 8387 - requests: 8388 - cpu: 50m 8389 - memory: 64Mi 8390 - securityContext: 8391 - allowPrivilegeEscalation: false 8392 - capabilities: 8393 - drop: 8394 - - ALL 8395 - readOnlyRootFilesystem: true 8396 - runAsNonRoot: true 8397 - seccompProfile: 8398 - type: RuntimeDefault 8399 - volumeMounts: 8400 - - mountPath: /data 8401 - name: data 8402 - - mountPath: /tmp 8403 - name: tmp 8404 - nodeSelector: 8405 - kubernetes.io/os: linux 8406 - priorityClassName: system-cluster-critical 8407 - securityContext: 8408 - fsGroup: 1337 8409 - serviceAccountName: source-controller 8410 - terminationGracePeriodSeconds: 10 8411 - volumes: 8412 - - emptyDir: {} 8413 - name: data 8414 - - emptyDir: {} 8415 - name: tmp 8416 ---- 8417 -apiVersion: apiextensions.k8s.io/v1 8418 -kind: CustomResourceDefinition 8419 -metadata: 8420 - annotations: 8421 - controller-gen.kubebuilder.io/version: v0.16.1 8422 - labels: 8423 - app.kubernetes.io/component: kustomize-controller 8424 - app.kubernetes.io/instance: flux-system 8425 - app.kubernetes.io/part-of: flux 8426 - app.kubernetes.io/version: v2.5.1 8427 - name: kustomizations.kustomize.toolkit.fluxcd.io 8428 -spec: 8429 - group: kustomize.toolkit.fluxcd.io 8430 - names: 8431 - kind: Kustomization 8432 - listKind: KustomizationList 8433 - plural: kustomizations 8434 - shortNames: 8435 - - ks 8436 - singular: kustomization 8437 - scope: Namespaced 8438 - versions: 8439 - - additionalPrinterColumns: 8440 - - jsonPath: .metadata.creationTimestamp 8441 - name: Age 8442 - type: date 8443 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 8444 - name: Ready 8445 - type: string 8446 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 8447 - name: Status 8448 - type: string 8449 - name: v1 8450 - schema: 8451 - openAPIV3Schema: 8452 - description: Kustomization is the Schema for the kustomizations API. 8453 - properties: 8454 - apiVersion: 8455 - description: |- 8456 - APIVersion defines the versioned schema of this representation of an object. 8457 - Servers should convert recognized schemas to the latest internal value, and 8458 - may reject unrecognized values. 8459 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 8460 - type: string 8461 - kind: 8462 - description: |- 8463 - Kind is a string value representing the REST resource this object represents. 8464 - Servers may infer this from the endpoint the client submits requests to. 8465 - Cannot be updated. 8466 - In CamelCase. 8467 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 8468 - type: string 8469 - metadata: 8470 - type: object 8471 - spec: 8472 - description: |- 8473 - KustomizationSpec defines the configuration to calculate the desired state 8474 - from a Source using Kustomize. 8475 - properties: 8476 - commonMetadata: 8477 - description: |- 8478 - CommonMetadata specifies the common labels and annotations that are 8479 - applied to all resources. Any existing label or annotation will be 8480 - overridden if its key matches a common one. 8481 - properties: 8482 - annotations: 8483 - additionalProperties: 8484 - type: string 8485 - description: Annotations to be added to the object's metadata. 8486 - type: object 8487 - labels: 8488 - additionalProperties: 8489 - type: string 8490 - description: Labels to be added to the object's metadata. 8491 - type: object 8492 - type: object 8493 - components: 8494 - description: Components specifies relative paths to specifications of other Components. 8495 - items: 8496 - type: string 8497 - type: array 8498 - decryption: 8499 - description: Decrypt Kubernetes secrets before applying them on the cluster. 8500 - properties: 8501 - provider: 8502 - description: Provider is the name of the decryption engine. 8503 - enum: 8504 - - sops 8505 - type: string 8506 - secretRef: 8507 - description: The secret name containing the private OpenPGP keys used for decryption. 8508 - properties: 8509 - name: 8510 - description: Name of the referent. 8511 - type: string 8512 - required: 8513 - - name 8514 - type: object 8515 - required: 8516 - - provider 8517 - type: object 8518 - deletionPolicy: 8519 - description: |- 8520 - DeletionPolicy can be used to control garbage collection when this 8521 - Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 8522 - 'Orphan'). 'MirrorPrune' mirrors the Prune field (orphan if false, 8523 - delete if true). Defaults to 'MirrorPrune'. 8524 - enum: 8525 - - MirrorPrune 8526 - - Delete 8527 - - Orphan 8528 - type: string 8529 - dependsOn: 8530 - description: |- 8531 - DependsOn may contain a meta.NamespacedObjectReference slice 8532 - with references to Kustomization resources that must be ready before this 8533 - Kustomization can be reconciled. 8534 - items: 8535 - description: |- 8536 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 8537 - namespace. 8538 - properties: 8539 - name: 8540 - description: Name of the referent. 8541 - type: string 8542 - namespace: 8543 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 8544 - type: string 8545 - required: 8546 - - name 8547 - type: object 8548 - type: array 8549 - force: 8550 - default: false 8551 - description: |- 8552 - Force instructs the controller to recreate resources 8553 - when patching fails due to an immutable field change. 8554 - type: boolean 8555 - healthCheckExprs: 8556 - description: |- 8557 - HealthCheckExprs is a list of healthcheck expressions for evaluating the 8558 - health of custom resources using Common Expression Language (CEL). 8559 - The expressions are evaluated only when Wait or HealthChecks are specified. 8560 - items: 8561 - description: CustomHealthCheck defines the health check for custom resources. 8562 - properties: 8563 - apiVersion: 8564 - description: APIVersion of the custom resource under evaluation. 8565 - type: string 8566 - current: 8567 - description: |- 8568 - Current is the CEL expression that determines if the status 8569 - of the custom resource has reached the desired state. 8570 - type: string 8571 - failed: 8572 - description: |- 8573 - Failed is the CEL expression that determines if the status 8574 - of the custom resource has failed to reach the desired state. 8575 - type: string 8576 - inProgress: 8577 - description: |- 8578 - InProgress is the CEL expression that determines if the status 8579 - of the custom resource has not yet reached the desired state. 8580 - type: string 8581 - kind: 8582 - description: Kind of the custom resource under evaluation. 8583 - type: string 8584 - required: 8585 - - apiVersion 8586 - - current 8587 - - kind 8588 - type: object 8589 - type: array 8590 - healthChecks: 8591 - description: A list of resources to be included in the health assessment. 8592 - items: 8593 - description: |- 8594 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 8595 - in any namespace. 8596 - properties: 8597 - apiVersion: 8598 - description: API version of the referent, if not specified the Kubernetes preferred 8599 - version will be used. 8600 - type: string 8601 - kind: 8602 - description: Kind of the referent. 8603 - type: string 8604 - name: 8605 - description: Name of the referent. 8606 - type: string 8607 - namespace: 8608 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 8609 - type: string 8610 - required: 8611 - - kind 8612 - - name 8613 - type: object 8614 - type: array 8615 - images: 8616 - description: |- 8617 - Images is a list of (image name, new name, new tag or digest) 8618 - for changing image names, tags or digests. This can also be achieved with a 8619 - patch, but this operator is simpler to specify. 8620 - items: 8621 - description: Image contains an image name, a new name, a new tag or digest, which will 8622 - replace the original name and tag. 8623 - properties: 8624 - digest: 8625 - description: |- 8626 - Digest is the value used to replace the original image tag. 8627 - If digest is present NewTag value is ignored. 8628 - type: string 8629 - name: 8630 - description: Name is a tag-less image name. 8631 - type: string 8632 - newName: 8633 - description: NewName is the value used to replace the original name. 8634 - type: string 8635 - newTag: 8636 - description: NewTag is the value used to replace the original tag. 8637 - type: string 8638 - required: 8639 - - name 8640 - type: object 8641 - type: array 8642 - interval: 8643 - description: |- 8644 - The interval at which to reconcile the Kustomization. 8645 - This interval is approximate and may be subject to jitter to ensure 8646 - efficient use of resources. 8647 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8648 - type: string 8649 - kubeConfig: 8650 - description: |- 8651 - The KubeConfig for reconciling the Kustomization on a remote cluster. 8652 - When used in combination with KustomizationSpec.ServiceAccountName, 8653 - forces the controller to act on behalf of that Service Account at the 8654 - target cluster. 8655 - If the --default-service-account flag is set, its value will be used as 8656 - a controller level fallback for when KustomizationSpec.ServiceAccountName 8657 - is empty. 8658 - properties: 8659 - secretRef: 8660 - description: |- 8661 - SecretRef holds the name of a secret that contains a key with 8662 - the kubeconfig file as the value. If no key is set, the key will default 8663 - to 'value'. 8664 - It is recommended that the kubeconfig is self-contained, and the secret 8665 - is regularly updated if credentials such as a cloud-access-token expire. 8666 - Cloud specific `cmd-path` auth helpers will not function without adding 8667 - binaries and credentials to the Pod that is responsible for reconciling 8668 - Kubernetes resources. 8669 - properties: 8670 - key: 8671 - description: Key in the Secret, when not specified an implementation-specific 8672 - default key is used. 8673 - type: string 8674 - name: 8675 - description: Name of the Secret. 8676 - type: string 8677 - required: 8678 - - name 8679 - type: object 8680 - required: 8681 - - secretRef 8682 - type: object 8683 - namePrefix: 8684 - description: NamePrefix will prefix the names of all managed resources. 8685 - maxLength: 200 8686 - minLength: 1 8687 - type: string 8688 - nameSuffix: 8689 - description: NameSuffix will suffix the names of all managed resources. 8690 - maxLength: 200 8691 - minLength: 1 8692 - type: string 8693 - patches: 8694 - description: |- 8695 - Strategic merge and JSON patches, defined as inline YAML objects, 8696 - capable of targeting objects based on kind, label and annotation selectors. 8697 - items: 8698 - description: |- 8699 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 8700 - be applied to. 8701 - properties: 8702 - patch: 8703 - description: |- 8704 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 8705 - an array of operation objects. 8706 - type: string 8707 - target: 8708 - description: Target points to the resources that the patch document should be 8709 - applied to. 8710 - properties: 8711 - annotationSelector: 8712 - description: |- 8713 - AnnotationSelector is a string that follows the label selection expression 8714 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8715 - It matches with the resource annotations. 8716 - type: string 8717 - group: 8718 - description: |- 8719 - Group is the API group to select resources from. 8720 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 8721 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8722 - type: string 8723 - kind: 8724 - description: |- 8725 - Kind of the API Group to select resources from. 8726 - Together with Group and Version it is capable of unambiguously 8727 - identifying and/or selecting resources. 8728 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8729 - type: string 8730 - labelSelector: 8731 - description: |- 8732 - LabelSelector is a string that follows the label selection expression 8733 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8734 - It matches with the resource labels. 8735 - type: string 8736 - name: 8737 - description: Name to match resources with. 8738 - type: string 8739 - namespace: 8740 - description: Namespace to select resources from. 8741 - type: string 8742 - version: 8743 - description: |- 8744 - Version of the API Group to select resources from. 8745 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 8746 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8747 - type: string 8748 - type: object 8749 - required: 8750 - - patch 8751 - type: object 8752 - type: array 8753 - path: 8754 - description: |- 8755 - Path to the directory containing the kustomization.yaml file, or the 8756 - set of plain YAMLs a kustomization.yaml should be generated for. 8757 - Defaults to 'None', which translates to the root path of the SourceRef. 8758 - type: string 8759 - postBuild: 8760 - description: |- 8761 - PostBuild describes which actions to perform on the YAML manifest 8762 - generated by building the kustomize overlay. 8763 - properties: 8764 - substitute: 8765 - additionalProperties: 8766 - type: string 8767 - description: |- 8768 - Substitute holds a map of key/value pairs. 8769 - The variables defined in your YAML manifests that match any of the keys 8770 - defined in the map will be substituted with the set value. 8771 - Includes support for bash string replacement functions 8772 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 8773 - type: object 8774 - substituteFrom: 8775 - description: |- 8776 - SubstituteFrom holds references to ConfigMaps and Secrets containing 8777 - the variables and their values to be substituted in the YAML manifests. 8778 - The ConfigMap and the Secret data keys represent the var names, and they 8779 - must match the vars declared in the manifests for the substitution to 8780 - happen. 8781 - items: 8782 - description: |- 8783 - SubstituteReference contains a reference to a resource containing 8784 - the variables name and value. 8785 - properties: 8786 - kind: 8787 - description: Kind of the values referent, valid values are ('Secret', 8788 - 'ConfigMap'). 8789 - enum: 8790 - - Secret 8791 - - ConfigMap 8792 - type: string 8793 - name: 8794 - description: |- 8795 - Name of the values referent. Should reside in the same namespace as the 8796 - referring resource. 8797 - maxLength: 253 8798 - minLength: 1 8799 - type: string 8800 - optional: 8801 - default: false 8802 - description: |- 8803 - Optional indicates whether the referenced resource must exist, or whether to 8804 - tolerate its absence. If true and the referenced resource is absent, proceed 8805 - as if the resource was present but empty, without any variables defined. 8806 - type: boolean 8807 - required: 8808 - - kind 8809 - - name 8810 - type: object 8811 - type: array 8812 - type: object 8813 - prune: 8814 - description: Prune enables garbage collection. 8815 - type: boolean 8816 - retryInterval: 8817 - description: |- 8818 - The interval at which to retry a previously failed reconciliation. 8819 - When not specified, the controller uses the KustomizationSpec.Interval 8820 - value to retry failures. 8821 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8822 - type: string 8823 - serviceAccountName: 8824 - description: |- 8825 - The name of the Kubernetes service account to impersonate 8826 - when reconciling this Kustomization. 8827 - type: string 8828 - sourceRef: 8829 - description: Reference of the source where the kustomization file is. 8830 - properties: 8831 - apiVersion: 8832 - description: API version of the referent. 8833 - type: string 8834 - kind: 8835 - description: Kind of the referent. 8836 - enum: 8837 - - OCIRepository 8838 - - GitRepository 8839 - - Bucket 8840 - type: string 8841 - name: 8842 - description: Name of the referent. 8843 - type: string 8844 - namespace: 8845 - description: |- 8846 - Namespace of the referent, defaults to the namespace of the Kubernetes 8847 - resource object that contains the reference. 8848 - type: string 8849 - required: 8850 - - kind 8851 - - name 8852 - type: object 8853 - suspend: 8854 - description: |- 8855 - This flag tells the controller to suspend subsequent kustomize executions, 8856 - it does not apply to already started executions. Defaults to false. 8857 - type: boolean 8858 - targetNamespace: 8859 - description: |- 8860 - TargetNamespace sets or overrides the namespace in the 8861 - kustomization.yaml file. 8862 - maxLength: 63 8863 - minLength: 1 8864 - type: string 8865 - timeout: 8866 - description: |- 8867 - Timeout for validation, apply and health checking operations. 8868 - Defaults to 'Interval' duration. 8869 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8870 - type: string 8871 - wait: 8872 - description: |- 8873 - Wait instructs the controller to check the health of all the reconciled 8874 - resources. When enabled, the HealthChecks are ignored. Defaults to false. 8875 - type: boolean 8876 - required: 8877 - - interval 8878 - - prune 8879 - - sourceRef 8880 - type: object 8881 - status: 8882 - default: 8883 - observedGeneration: -1 8884 - description: KustomizationStatus defines the observed state of a kustomization. 8885 - properties: 8886 - conditions: 8887 - items: 8888 - description: Condition contains details for one aspect of the current state of this API 8889 - Resource. 8890 - properties: 8891 - lastTransitionTime: 8892 - description: |- 8893 - lastTransitionTime is the last time the condition transitioned from one status to another. 8894 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8895 - format: date-time 8896 - type: string 8897 - message: 8898 - description: |- 8899 - message is a human readable message indicating details about the transition. 8900 - This may be an empty string. 8901 - maxLength: 32768 8902 - type: string 8903 - observedGeneration: 8904 - description: |- 8905 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8906 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8907 - with respect to the current state of the instance. 8908 - format: int64 8909 - minimum: 0 8910 - type: integer 8911 - reason: 8912 - description: |- 8913 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8914 - Producers of specific condition types may define expected values and meanings for this field, 8915 - and whether the values are considered a guaranteed API. 8916 - The value should be a CamelCase string. 8917 - This field may not be empty. 8918 - maxLength: 1024 8919 - minLength: 1 8920 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8921 - type: string 8922 - status: 8923 - description: status of the condition, one of True, False, Unknown. 8924 - enum: 8925 - - "True" 8926 - - "False" 8927 - - Unknown 8928 - type: string 8929 - type: 8930 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 8931 - maxLength: 316 8932 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8933 - type: string 8934 - required: 8935 - - lastTransitionTime 8936 - - message 8937 - - reason 8938 - - status 8939 - - type 8940 - type: object 8941 - type: array 8942 - inventory: 8943 - description: |- 8944 - Inventory contains the list of Kubernetes resource object references that 8945 - have been successfully applied. 8946 - properties: 8947 - entries: 8948 - description: Entries of Kubernetes resource object references. 8949 - items: 8950 - description: ResourceRef contains the information necessary to locate a resource 8951 - within a cluster. 8952 - properties: 8953 - id: 8954 - description: |- 8955 - ID is the string representation of the Kubernetes resource object's metadata, 8956 - in the format '<namespace>_<name>_<group>_<kind>'. 8957 - type: string 8958 - v: 8959 - description: Version is the API version of the Kubernetes resource object's 8960 - kind. 8961 - type: string 8962 - required: 8963 - - id 8964 - - v 8965 - type: object 8966 - type: array 8967 - required: 8968 - - entries 8969 - type: object 8970 - lastAppliedOriginRevision: 8971 - description: |- 8972 - The last successfully applied origin revision. 8973 - Equals the origin revision of the applied Artifact from the referenced Source. 8974 - Usually present on the Metadata of the applied Artifact and depends on the 8975 - Source type, e.g. for OCI it's the value associated with the key 8976 - "org.opencontainers.image.revision". 8977 - type: string 8978 - lastAppliedRevision: 8979 - description: |- 8980 - The last successfully applied revision. 8981 - Equals the Revision of the applied Artifact from the referenced Source. 8982 - type: string 8983 - lastAttemptedRevision: 8984 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 8985 - type: string 8986 - lastHandledReconcileAt: 8987 - description: |- 8988 - LastHandledReconcileAt holds the value of the most recent 8989 - reconcile request value, so a change of the annotation value 8990 - can be detected. 8991 - type: string 8992 - observedGeneration: 8993 - description: ObservedGeneration is the last reconciled generation. 8994 - format: int64 8995 - type: integer 8996 - type: object 8997 - type: object 8998 - served: true 8999 - storage: true 9000 - subresources: 9001 - status: {} 9002 - - additionalPrinterColumns: 9003 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9004 - name: Ready 9005 - type: string 9006 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9007 - name: Status 9008 - type: string 9009 - - jsonPath: .metadata.creationTimestamp 9010 - name: Age 9011 - type: date 9012 - deprecated: true 9013 - deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1 9014 - name: v1beta1 9015 - schema: 9016 - openAPIV3Schema: 9017 - description: Kustomization is the Schema for the kustomizations API. 9018 - properties: 9019 - apiVersion: 9020 - description: |- 9021 - APIVersion defines the versioned schema of this representation of an object. 9022 - Servers should convert recognized schemas to the latest internal value, and 9023 - may reject unrecognized values. 9024 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9025 - type: string 9026 - kind: 9027 - description: |- 9028 - Kind is a string value representing the REST resource this object represents. 9029 - Servers may infer this from the endpoint the client submits requests to. 9030 - Cannot be updated. 9031 - In CamelCase. 9032 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9033 - type: string 9034 - metadata: 9035 - type: object 9036 - spec: 9037 - description: KustomizationSpec defines the desired state of a kustomization. 9038 - properties: 9039 - decryption: 9040 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9041 - properties: 9042 - provider: 9043 - description: Provider is the name of the decryption engine. 9044 - enum: 9045 - - sops 9046 - type: string 9047 - secretRef: 9048 - description: The secret name containing the private OpenPGP keys used for decryption. 9049 - properties: 9050 - name: 9051 - description: Name of the referent. 9052 - type: string 9053 - required: 9054 - - name 9055 - type: object 9056 - required: 9057 - - provider 9058 - type: object 9059 - dependsOn: 9060 - description: |- 9061 - DependsOn may contain a meta.NamespacedObjectReference slice 9062 - with references to Kustomization resources that must be ready before this 9063 - Kustomization can be reconciled. 9064 - items: 9065 - description: |- 9066 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 9067 - namespace. 9068 - properties: 9069 - name: 9070 - description: Name of the referent. 9071 - type: string 9072 - namespace: 9073 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9074 - type: string 9075 - required: 9076 - - name 9077 - type: object 9078 - type: array 9079 - force: 9080 - default: false 9081 - description: |- 9082 - Force instructs the controller to recreate resources 9083 - when patching fails due to an immutable field change. 9084 - type: boolean 9085 - healthChecks: 9086 - description: A list of resources to be included in the health assessment. 9087 - items: 9088 - description: |- 9089 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9090 - in any namespace. 9091 - properties: 9092 - apiVersion: 9093 - description: API version of the referent, if not specified the Kubernetes preferred 9094 - version will be used. 9095 - type: string 9096 - kind: 9097 - description: Kind of the referent. 9098 - type: string 9099 - name: 9100 - description: Name of the referent. 9101 - type: string 9102 - namespace: 9103 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9104 - type: string 9105 - required: 9106 - - kind 9107 - - name 9108 - type: object 9109 - type: array 9110 - images: 9111 - description: |- 9112 - Images is a list of (image name, new name, new tag or digest) 9113 - for changing image names, tags or digests. This can also be achieved with a 9114 - patch, but this operator is simpler to specify. 9115 - items: 9116 - description: Image contains an image name, a new name, a new tag or digest, which will 9117 - replace the original name and tag. 9118 - properties: 9119 - digest: 9120 - description: |- 9121 - Digest is the value used to replace the original image tag. 9122 - If digest is present NewTag value is ignored. 9123 - type: string 9124 - name: 9125 - description: Name is a tag-less image name. 9126 - type: string 9127 - newName: 9128 - description: NewName is the value used to replace the original name. 9129 - type: string 9130 - newTag: 9131 - description: NewTag is the value used to replace the original tag. 9132 - type: string 9133 - required: 9134 - - name 9135 - type: object 9136 - type: array 9137 - interval: 9138 - description: The interval at which to reconcile the Kustomization. 9139 - type: string 9140 - kubeConfig: 9141 - description: |- 9142 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9143 - When specified, KubeConfig takes precedence over ServiceAccountName. 9144 - properties: 9145 - secretRef: 9146 - description: |- 9147 - SecretRef holds the name to a secret that contains a 'value' key with 9148 - the kubeconfig file as the value. It must be in the same namespace as 9149 - the Kustomization. 9150 - It is recommended that the kubeconfig is self-contained, and the secret 9151 - is regularly updated if credentials such as a cloud-access-token expire. 9152 - Cloud specific `cmd-path` auth helpers will not function without adding 9153 - binaries and credentials to the Pod that is responsible for reconciling 9154 - the Kustomization. 9155 - properties: 9156 - name: 9157 - description: Name of the referent. 9158 - type: string 9159 - required: 9160 - - name 9161 - type: object 9162 - required: 9163 - - secretRef 9164 - type: object 9165 - patches: 9166 - description: |- 9167 - Strategic merge and JSON patches, defined as inline YAML objects, 9168 - capable of targeting objects based on kind, label and annotation selectors. 9169 - items: 9170 - description: |- 9171 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9172 - be applied to. 9173 - properties: 9174 - patch: 9175 - description: |- 9176 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9177 - an array of operation objects. 9178 - type: string 9179 - target: 9180 - description: Target points to the resources that the patch document should be 9181 - applied to. 9182 - properties: 9183 - annotationSelector: 9184 - description: |- 9185 - AnnotationSelector is a string that follows the label selection expression 9186 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9187 - It matches with the resource annotations. 9188 - type: string 9189 - group: 9190 - description: |- 9191 - Group is the API group to select resources from. 9192 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9193 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9194 - type: string 9195 - kind: 9196 - description: |- 9197 - Kind of the API Group to select resources from. 9198 - Together with Group and Version it is capable of unambiguously 9199 - identifying and/or selecting resources. 9200 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9201 - type: string 9202 - labelSelector: 9203 - description: |- 9204 - LabelSelector is a string that follows the label selection expression 9205 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9206 - It matches with the resource labels. 9207 - type: string 9208 - name: 9209 - description: Name to match resources with. 9210 - type: string 9211 - namespace: 9212 - description: Namespace to select resources from. 9213 - type: string 9214 - version: 9215 - description: |- 9216 - Version of the API Group to select resources from. 9217 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9218 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9219 - type: string 9220 - type: object 9221 - required: 9222 - - patch 9223 - type: object 9224 - type: array 9225 - patchesJson6902: 9226 - description: JSON 6902 patches, defined as inline YAML objects. 9227 - items: 9228 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 9229 - applied to. 9230 - properties: 9231 - patch: 9232 - description: Patch contains the JSON6902 patch document with an array of operation 9233 - objects. 9234 - items: 9235 - description: |- 9236 - JSON6902 is a JSON6902 operation object. 9237 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9238 - properties: 9239 - from: 9240 - description: |- 9241 - From contains a JSON-pointer value that references a location within the target document where the operation is 9242 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 9243 - type: string 9244 - op: 9245 - description: |- 9246 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 9247 - "test". 9248 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9249 - enum: 9250 - - test 9251 - - remove 9252 - - add 9253 - - replace 9254 - - move 9255 - - copy 9256 - type: string 9257 - path: 9258 - description: |- 9259 - Path contains the JSON-pointer value that references a location within the target document where the operation 9260 - is performed. The meaning of the value depends on the value of Op. 9261 - type: string 9262 - value: 9263 - description: |- 9264 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 9265 - account by all operations. 9266 - x-kubernetes-preserve-unknown-fields: true 9267 - required: 9268 - - op 9269 - - path 9270 - type: object 9271 - type: array 9272 - target: 9273 - description: Target points to the resources that the patch document should be 9274 - applied to. 9275 - properties: 9276 - annotationSelector: 9277 - description: |- 9278 - AnnotationSelector is a string that follows the label selection expression 9279 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9280 - It matches with the resource annotations. 9281 - type: string 9282 - group: 9283 - description: |- 9284 - Group is the API group to select resources from. 9285 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9286 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9287 - type: string 9288 - kind: 9289 - description: |- 9290 - Kind of the API Group to select resources from. 9291 - Together with Group and Version it is capable of unambiguously 9292 - identifying and/or selecting resources. 9293 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9294 - type: string 9295 - labelSelector: 9296 - description: |- 9297 - LabelSelector is a string that follows the label selection expression 9298 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9299 - It matches with the resource labels. 9300 - type: string 9301 - name: 9302 - description: Name to match resources with. 9303 - type: string 9304 - namespace: 9305 - description: Namespace to select resources from. 9306 - type: string 9307 - version: 9308 - description: |- 9309 - Version of the API Group to select resources from. 9310 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9311 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9312 - type: string 9313 - type: object 9314 - required: 9315 - - patch 9316 - - target 9317 - type: object 9318 - type: array 9319 - patchesStrategicMerge: 9320 - description: Strategic merge patches, defined as inline YAML objects. 9321 - items: 9322 - x-kubernetes-preserve-unknown-fields: true 9323 - type: array 9324 - path: 9325 - description: |- 9326 - Path to the directory containing the kustomization.yaml file, or the 9327 - set of plain YAMLs a kustomization.yaml should be generated for. 9328 - Defaults to 'None', which translates to the root path of the SourceRef. 9329 - type: string 9330 - postBuild: 9331 - description: |- 9332 - PostBuild describes which actions to perform on the YAML manifest 9333 - generated by building the kustomize overlay. 9334 - properties: 9335 - substitute: 9336 - additionalProperties: 9337 - type: string 9338 - description: |- 9339 - Substitute holds a map of key/value pairs. 9340 - The variables defined in your YAML manifests 9341 - that match any of the keys defined in the map 9342 - will be substituted with the set value. 9343 - Includes support for bash string replacement functions 9344 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 9345 - type: object 9346 - substituteFrom: 9347 - description: |- 9348 - SubstituteFrom holds references to ConfigMaps and Secrets containing 9349 - the variables and their values to be substituted in the YAML manifests. 9350 - The ConfigMap and the Secret data keys represent the var names and they 9351 - must match the vars declared in the manifests for the substitution to happen. 9352 - items: 9353 - description: |- 9354 - SubstituteReference contains a reference to a resource containing 9355 - the variables name and value. 9356 - properties: 9357 - kind: 9358 - description: Kind of the values referent, valid values are ('Secret', 9359 - 'ConfigMap'). 9360 - enum: 9361 - - Secret 9362 - - ConfigMap 9363 - type: string 9364 - name: 9365 - description: |- 9366 - Name of the values referent. Should reside in the same namespace as the 9367 - referring resource. 9368 - maxLength: 253 9369 - minLength: 1 9370 - type: string 9371 - required: 9372 - - kind 9373 - - name 9374 - type: object 9375 - type: array 9376 - type: object 9377 - prune: 9378 - description: Prune enables garbage collection. 9379 - type: boolean 9380 - retryInterval: 9381 - description: |- 9382 - The interval at which to retry a previously failed reconciliation. 9383 - When not specified, the controller uses the KustomizationSpec.Interval 9384 - value to retry failures. 9385 - type: string 9386 - serviceAccountName: 9387 - description: |- 9388 - The name of the Kubernetes service account to impersonate 9389 - when reconciling this Kustomization. 9390 - type: string 9391 - sourceRef: 9392 - description: Reference of the source where the kustomization file is. 9393 - properties: 9394 - apiVersion: 9395 - description: API version of the referent 9396 - type: string 9397 - kind: 9398 - description: Kind of the referent 9399 - enum: 9400 - - GitRepository 9401 - - Bucket 9402 - type: string 9403 - name: 9404 - description: Name of the referent 9405 - type: string 9406 - namespace: 9407 - description: Namespace of the referent, defaults to the Kustomization namespace 9408 - type: string 9409 - required: 9410 - - kind 9411 - - name 9412 - type: object 9413 - suspend: 9414 - description: |- 9415 - This flag tells the controller to suspend subsequent kustomize executions, 9416 - it does not apply to already started executions. Defaults to false. 9417 - type: boolean 9418 - targetNamespace: 9419 - description: |- 9420 - TargetNamespace sets or overrides the namespace in the 9421 - kustomization.yaml file. 9422 - maxLength: 63 9423 - minLength: 1 9424 - type: string 9425 - timeout: 9426 - description: |- 9427 - Timeout for validation, apply and health checking operations. 9428 - Defaults to 'Interval' duration. 9429 - type: string 9430 - validation: 9431 - description: |- 9432 - Validate the Kubernetes objects before applying them on the cluster. 9433 - The validation strategy can be 'client' (local dry-run), 'server' 9434 - (APIServer dry-run) or 'none'. 9435 - When 'Force' is 'true', validation will fallback to 'client' if set to 9436 - 'server' because server-side validation is not supported in this scenario. 9437 - enum: 9438 - - none 9439 - - client 9440 - - server 9441 - type: string 9442 - required: 9443 - - interval 9444 - - prune 9445 - - sourceRef 9446 - type: object 9447 - status: 9448 - default: 9449 - observedGeneration: -1 9450 - description: KustomizationStatus defines the observed state of a kustomization. 9451 - properties: 9452 - conditions: 9453 - items: 9454 - description: Condition contains details for one aspect of the current state of this API 9455 - Resource. 9456 - properties: 9457 - lastTransitionTime: 9458 - description: |- 9459 - lastTransitionTime is the last time the condition transitioned from one status to another. 9460 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9461 - format: date-time 9462 - type: string 9463 - message: 9464 - description: |- 9465 - message is a human readable message indicating details about the transition. 9466 - This may be an empty string. 9467 - maxLength: 32768 9468 - type: string 9469 - observedGeneration: 9470 - description: |- 9471 - observedGeneration represents the .metadata.generation that the condition was set based upon. 9472 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9473 - with respect to the current state of the instance. 9474 - format: int64 9475 - minimum: 0 9476 - type: integer 9477 - reason: 9478 - description: |- 9479 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 9480 - Producers of specific condition types may define expected values and meanings for this field, 9481 - and whether the values are considered a guaranteed API. 9482 - The value should be a CamelCase string. 9483 - This field may not be empty. 9484 - maxLength: 1024 9485 - minLength: 1 9486 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9487 - type: string 9488 - status: 9489 - description: status of the condition, one of True, False, Unknown. 9490 - enum: 9491 - - "True" 9492 - - "False" 9493 - - Unknown 9494 - type: string 9495 - type: 9496 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 9497 - maxLength: 316 9498 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9499 - type: string 9500 - required: 9501 - - lastTransitionTime 9502 - - message 9503 - - reason 9504 - - status 9505 - - type 9506 - type: object 9507 - type: array 9508 - lastAppliedRevision: 9509 - description: |- 9510 - The last successfully applied revision. 9511 - The revision format for Git sources is <branch|tag>/<commit-sha>. 9512 - type: string 9513 - lastAttemptedRevision: 9514 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 9515 - type: string 9516 - lastHandledReconcileAt: 9517 - description: |- 9518 - LastHandledReconcileAt holds the value of the most recent 9519 - reconcile request value, so a change of the annotation value 9520 - can be detected. 9521 - type: string 9522 - observedGeneration: 9523 - description: ObservedGeneration is the last reconciled generation. 9524 - format: int64 9525 - type: integer 9526 - snapshot: 9527 - description: The last successfully applied revision metadata. 9528 - properties: 9529 - checksum: 9530 - description: The manifests sha1 checksum. 9531 - type: string 9532 - entries: 9533 - description: A list of Kubernetes kinds grouped by namespace. 9534 - items: 9535 - description: |- 9536 - Snapshot holds the metadata of namespaced 9537 - Kubernetes objects 9538 - properties: 9539 - kinds: 9540 - additionalProperties: 9541 - type: string 9542 - description: The list of Kubernetes kinds. 9543 - type: object 9544 - namespace: 9545 - description: The namespace of this entry. 9546 - type: string 9547 - required: 9548 - - kinds 9549 - type: object 9550 - type: array 9551 - required: 9552 - - checksum 9553 - - entries 9554 - type: object 9555 - type: object 9556 - type: object 9557 - served: true 9558 - storage: false 9559 - subresources: 9560 - status: {} 9561 - - additionalPrinterColumns: 9562 - - jsonPath: .metadata.creationTimestamp 9563 - name: Age 9564 - type: date 9565 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9566 - name: Ready 9567 - type: string 9568 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9569 - name: Status 9570 - type: string 9571 - deprecated: true 9572 - deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 9573 - name: v1beta2 9574 - schema: 9575 - openAPIV3Schema: 9576 - description: Kustomization is the Schema for the kustomizations API. 9577 - properties: 9578 - apiVersion: 9579 - description: |- 9580 - APIVersion defines the versioned schema of this representation of an object. 9581 - Servers should convert recognized schemas to the latest internal value, and 9582 - may reject unrecognized values. 9583 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9584 - type: string 9585 - kind: 9586 - description: |- 9587 - Kind is a string value representing the REST resource this object represents. 9588 - Servers may infer this from the endpoint the client submits requests to. 9589 - Cannot be updated. 9590 - In CamelCase. 9591 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9592 - type: string 9593 - metadata: 9594 - type: object 9595 - spec: 9596 - description: KustomizationSpec defines the configuration to calculate the desired state from a Source 9597 - using Kustomize. 9598 - properties: 9599 - commonMetadata: 9600 - description: |- 9601 - CommonMetadata specifies the common labels and annotations that are applied to all resources. 9602 - Any existing label or annotation will be overridden if its key matches a common one. 9603 - properties: 9604 - annotations: 9605 - additionalProperties: 9606 - type: string 9607 - description: Annotations to be added to the object's metadata. 9608 - type: object 9609 - labels: 9610 - additionalProperties: 9611 - type: string 9612 - description: Labels to be added to the object's metadata. 9613 - type: object 9614 - type: object 9615 - components: 9616 - description: Components specifies relative paths to specifications of other Components. 9617 - items: 9618 - type: string 9619 - type: array 9620 - decryption: 9621 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9622 - properties: 9623 - provider: 9624 - description: Provider is the name of the decryption engine. 9625 - enum: 9626 - - sops 9627 - type: string 9628 - secretRef: 9629 - description: The secret name containing the private OpenPGP keys used for decryption. 9630 - properties: 9631 - name: 9632 - description: Name of the referent. 9633 - type: string 9634 - required: 9635 - - name 9636 - type: object 9637 - required: 9638 - - provider 9639 - type: object 9640 - dependsOn: 9641 - description: |- 9642 - DependsOn may contain a meta.NamespacedObjectReference slice 9643 - with references to Kustomization resources that must be ready before this 9644 - Kustomization can be reconciled. 9645 - items: 9646 - description: |- 9647 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 9648 - namespace. 9649 - properties: 9650 - name: 9651 - description: Name of the referent. 9652 - type: string 9653 - namespace: 9654 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9655 - type: string 9656 - required: 9657 - - name 9658 - type: object 9659 - type: array 9660 - force: 9661 - default: false 9662 - description: |- 9663 - Force instructs the controller to recreate resources 9664 - when patching fails due to an immutable field change. 9665 - type: boolean 9666 - healthChecks: 9667 - description: A list of resources to be included in the health assessment. 9668 - items: 9669 - description: |- 9670 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9671 - in any namespace. 9672 - properties: 9673 - apiVersion: 9674 - description: API version of the referent, if not specified the Kubernetes preferred 9675 - version will be used. 9676 - type: string 9677 - kind: 9678 - description: Kind of the referent. 9679 - type: string 9680 - name: 9681 - description: Name of the referent. 9682 - type: string 9683 - namespace: 9684 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9685 - type: string 9686 - required: 9687 - - kind 9688 - - name 9689 - type: object 9690 - type: array 9691 - images: 9692 - description: |- 9693 - Images is a list of (image name, new name, new tag or digest) 9694 - for changing image names, tags or digests. This can also be achieved with a 9695 - patch, but this operator is simpler to specify. 9696 - items: 9697 - description: Image contains an image name, a new name, a new tag or digest, which will 9698 - replace the original name and tag. 9699 - properties: 9700 - digest: 9701 - description: |- 9702 - Digest is the value used to replace the original image tag. 9703 - If digest is present NewTag value is ignored. 9704 - type: string 9705 - name: 9706 - description: Name is a tag-less image name. 9707 - type: string 9708 - newName: 9709 - description: NewName is the value used to replace the original name. 9710 - type: string 9711 - newTag: 9712 - description: NewTag is the value used to replace the original tag. 9713 - type: string 9714 - required: 9715 - - name 9716 - type: object 9717 - type: array 9718 - interval: 9719 - description: The interval at which to reconcile the Kustomization. 9720 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9721 - type: string 9722 - kubeConfig: 9723 - description: |- 9724 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9725 - When used in combination with KustomizationSpec.ServiceAccountName, 9726 - forces the controller to act on behalf of that Service Account at the 9727 - target cluster. 9728 - If the --default-service-account flag is set, its value will be used as 9729 - a controller level fallback for when KustomizationSpec.ServiceAccountName 9730 - is empty. 9731 - properties: 9732 - secretRef: 9733 - description: |- 9734 - SecretRef holds the name of a secret that contains a key with 9735 - the kubeconfig file as the value. If no key is set, the key will default 9736 - to 'value'. 9737 - It is recommended that the kubeconfig is self-contained, and the secret 9738 - is regularly updated if credentials such as a cloud-access-token expire. 9739 - Cloud specific `cmd-path` auth helpers will not function without adding 9740 - binaries and credentials to the Pod that is responsible for reconciling 9741 - Kubernetes resources. 9742 - properties: 9743 - key: 9744 - description: Key in the Secret, when not specified an implementation-specific 9745 - default key is used. 9746 - type: string 9747 - name: 9748 - description: Name of the Secret. 9749 - type: string 9750 - required: 9751 - - name 9752 - type: object 9753 - required: 9754 - - secretRef 9755 - type: object 9756 - patches: 9757 - description: |- 9758 - Strategic merge and JSON patches, defined as inline YAML objects, 9759 - capable of targeting objects based on kind, label and annotation selectors. 9760 - items: 9761 - description: |- 9762 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9763 - be applied to. 9764 - properties: 9765 - patch: 9766 - description: |- 9767 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9768 - an array of operation objects. 9769 - type: string 9770 - target: 9771 - description: Target points to the resources that the patch document should be 9772 - applied to. 9773 - properties: 9774 - annotationSelector: 9775 - description: |- 9776 - AnnotationSelector is a string that follows the label selection expression 9777 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9778 - It matches with the resource annotations. 9779 - type: string 9780 - group: 9781 - description: |- 9782 - Group is the API group to select resources from. 9783 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9784 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9785 - type: string 9786 - kind: 9787 - description: |- 9788 - Kind of the API Group to select resources from. 9789 - Together with Group and Version it is capable of unambiguously 9790 - identifying and/or selecting resources. 9791 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9792 - type: string 9793 - labelSelector: 9794 - description: |- 9795 - LabelSelector is a string that follows the label selection expression 9796 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9797 - It matches with the resource labels. 9798 - type: string 9799 - name: 9800 - description: Name to match resources with. 9801 - type: string 9802 - namespace: 9803 - description: Namespace to select resources from. 9804 - type: string 9805 - version: 9806 - description: |- 9807 - Version of the API Group to select resources from. 9808 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9809 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9810 - type: string 9811 - type: object 9812 - required: 9813 - - patch 9814 - type: object 9815 - type: array 9816 - patchesJson6902: 9817 - description: |- 9818 - JSON 6902 patches, defined as inline YAML objects. 9819 - Deprecated: Use Patches instead. 9820 - items: 9821 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 9822 - applied to. 9823 - properties: 9824 - patch: 9825 - description: Patch contains the JSON6902 patch document with an array of operation 9826 - objects. 9827 - items: 9828 - description: |- 9829 - JSON6902 is a JSON6902 operation object. 9830 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9831 - properties: 9832 - from: 9833 - description: |- 9834 - From contains a JSON-pointer value that references a location within the target document where the operation is 9835 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 9836 - type: string 9837 - op: 9838 - description: |- 9839 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 9840 - "test". 9841 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9842 - enum: 9843 - - test 9844 - - remove 9845 - - add 9846 - - replace 9847 - - move 9848 - - copy 9849 - type: string 9850 - path: 9851 - description: |- 9852 - Path contains the JSON-pointer value that references a location within the target document where the operation 9853 - is performed. The meaning of the value depends on the value of Op. 9854 - type: string 9855 - value: 9856 - description: |- 9857 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 9858 - account by all operations. 9859 - x-kubernetes-preserve-unknown-fields: true 9860 - required: 9861 - - op 9862 - - path 9863 - type: object 9864 - type: array 9865 - target: 9866 - description: Target points to the resources that the patch document should be 9867 - applied to. 9868 - properties: 9869 - annotationSelector: 9870 - description: |- 9871 - AnnotationSelector is a string that follows the label selection expression 9872 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9873 - It matches with the resource annotations. 9874 - type: string 9875 - group: 9876 - description: |- 9877 - Group is the API group to select resources from. 9878 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9879 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9880 - type: string 9881 - kind: 9882 - description: |- 9883 - Kind of the API Group to select resources from. 9884 - Together with Group and Version it is capable of unambiguously 9885 - identifying and/or selecting resources. 9886 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9887 - type: string 9888 - labelSelector: 9889 - description: |- 9890 - LabelSelector is a string that follows the label selection expression 9891 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9892 - It matches with the resource labels. 9893 - type: string 9894 - name: 9895 - description: Name to match resources with. 9896 - type: string 9897 - namespace: 9898 - description: Namespace to select resources from. 9899 - type: string 9900 - version: 9901 - description: |- 9902 - Version of the API Group to select resources from. 9903 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9904 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9905 - type: string 9906 - type: object 9907 - required: 9908 - - patch 9909 - - target 9910 - type: object 9911 - type: array 9912 - patchesStrategicMerge: 9913 - description: |- 9914 - Strategic merge patches, defined as inline YAML objects. 9915 - Deprecated: Use Patches instead. 9916 - items: 9917 - x-kubernetes-preserve-unknown-fields: true 9918 - type: array 9919 - path: 9920 - description: |- 9921 - Path to the directory containing the kustomization.yaml file, or the 9922 - set of plain YAMLs a kustomization.yaml should be generated for. 9923 - Defaults to 'None', which translates to the root path of the SourceRef. 9924 - type: string 9925 - postBuild: 9926 - description: |- 9927 - PostBuild describes which actions to perform on the YAML manifest 9928 - generated by building the kustomize overlay. 9929 - properties: 9930 - substitute: 9931 - additionalProperties: 9932 - type: string 9933 - description: |- 9934 - Substitute holds a map of key/value pairs. 9935 - The variables defined in your YAML manifests 9936 - that match any of the keys defined in the map 9937 - will be substituted with the set value. 9938 - Includes support for bash string replacement functions 9939 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 9940 - type: object 9941 - substituteFrom: 9942 - description: |- 9943 - SubstituteFrom holds references to ConfigMaps and Secrets containing 9944 - the variables and their values to be substituted in the YAML manifests. 9945 - The ConfigMap and the Secret data keys represent the var names and they 9946 - must match the vars declared in the manifests for the substitution to happen. 9947 - items: 9948 - description: |- 9949 - SubstituteReference contains a reference to a resource containing 9950 - the variables name and value. 9951 - properties: 9952 - kind: 9953 - description: Kind of the values referent, valid values are ('Secret', 9954 - 'ConfigMap'). 9955 - enum: 9956 - - Secret 9957 - - ConfigMap 9958 - type: string 9959 - name: 9960 - description: |- 9961 - Name of the values referent. Should reside in the same namespace as the 9962 - referring resource. 9963 - maxLength: 253 9964 - minLength: 1 9965 - type: string 9966 - optional: 9967 - default: false 9968 - description: |- 9969 - Optional indicates whether the referenced resource must exist, or whether to 9970 - tolerate its absence. If true and the referenced resource is absent, proceed 9971 - as if the resource was present but empty, without any variables defined. 9972 - type: boolean 9973 - required: 9974 - - kind 9975 - - name 9976 - type: object 9977 - type: array 9978 - type: object 9979 - prune: 9980 - description: Prune enables garbage collection. 9981 - type: boolean 9982 - retryInterval: 9983 - description: |- 9984 - The interval at which to retry a previously failed reconciliation. 9985 - When not specified, the controller uses the KustomizationSpec.Interval 9986 - value to retry failures. 9987 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9988 - type: string 9989 - serviceAccountName: 9990 - description: |- 9991 - The name of the Kubernetes service account to impersonate 9992 - when reconciling this Kustomization. 9993 - type: string 9994 - sourceRef: 9995 - description: Reference of the source where the kustomization file is. 9996 - properties: 9997 - apiVersion: 9998 - description: API version of the referent. 9999 - type: string 10000 - kind: 10001 - description: Kind of the referent. 10002 - enum: 10003 - - OCIRepository 10004 - - GitRepository 10005 - - Bucket 10006 - type: string 10007 - name: 10008 - description: Name of the referent. 10009 - type: string 10010 - namespace: 10011 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 10012 - resource object that contains the reference. 10013 - type: string 10014 - required: 10015 - - kind 10016 - - name 10017 - type: object 10018 - suspend: 10019 - description: |- 10020 - This flag tells the controller to suspend subsequent kustomize executions, 10021 - it does not apply to already started executions. Defaults to false. 10022 - type: boolean 10023 - targetNamespace: 10024 - description: |- 10025 - TargetNamespace sets or overrides the namespace in the 10026 - kustomization.yaml file. 10027 - maxLength: 63 10028 - minLength: 1 10029 - type: string 10030 - timeout: 10031 - description: |- 10032 - Timeout for validation, apply and health checking operations. 10033 - Defaults to 'Interval' duration. 10034 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10035 - type: string 10036 - validation: 10037 - description: 'Deprecated: Not used in v1beta2.' 10038 - enum: 10039 - - none 10040 - - client 10041 - - server 10042 - type: string 10043 - wait: 10044 - description: |- 10045 - Wait instructs the controller to check the health of all the reconciled resources. 10046 - When enabled, the HealthChecks are ignored. Defaults to false. 10047 - type: boolean 10048 - required: 10049 - - interval 10050 - - prune 10051 - - sourceRef 10052 - type: object 10053 - status: 10054 - default: 10055 - observedGeneration: -1 10056 - description: KustomizationStatus defines the observed state of a kustomization. 10057 - properties: 10058 - conditions: 10059 - items: 10060 - description: Condition contains details for one aspect of the current state of this API 10061 - Resource. 10062 - properties: 10063 - lastTransitionTime: 10064 - description: |- 10065 - lastTransitionTime is the last time the condition transitioned from one status to another. 10066 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 10067 - format: date-time 10068 - type: string 10069 - message: 10070 - description: |- 10071 - message is a human readable message indicating details about the transition. 10072 - This may be an empty string. 10073 - maxLength: 32768 10074 - type: string 10075 - observedGeneration: 10076 - description: |- 10077 - observedGeneration represents the .metadata.generation that the condition was set based upon. 10078 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10079 - with respect to the current state of the instance. 10080 - format: int64 10081 - minimum: 0 10082 - type: integer 10083 - reason: 10084 - description: |- 10085 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 10086 - Producers of specific condition types may define expected values and meanings for this field, 10087 - and whether the values are considered a guaranteed API. 10088 - The value should be a CamelCase string. 10089 - This field may not be empty. 10090 - maxLength: 1024 10091 - minLength: 1 10092 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10093 - type: string 10094 - status: 10095 - description: status of the condition, one of True, False, Unknown. 10096 - enum: 10097 - - "True" 10098 - - "False" 10099 - - Unknown 10100 - type: string 10101 - type: 10102 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 10103 - maxLength: 316 10104 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10105 - type: string 10106 - required: 10107 - - lastTransitionTime 10108 - - message 10109 - - reason 10110 - - status 10111 - - type 10112 - type: object 10113 - type: array 10114 - inventory: 10115 - description: Inventory contains the list of Kubernetes resource object references that have 10116 - been successfully applied. 10117 - properties: 10118 - entries: 10119 - description: Entries of Kubernetes resource object references. 10120 - items: 10121 - description: ResourceRef contains the information necessary to locate a resource 10122 - within a cluster. 10123 - properties: 10124 - id: 10125 - description: |- 10126 - ID is the string representation of the Kubernetes resource object's metadata, 10127 - in the format '<namespace>_<name>_<group>_<kind>'. 10128 - type: string 10129 - v: 10130 - description: Version is the API version of the Kubernetes resource object's 10131 - kind. 10132 - type: string 10133 - required: 10134 - - id 10135 - - v 10136 - type: object 10137 - type: array 10138 - required: 10139 - - entries 10140 - type: object 10141 - lastAppliedRevision: 10142 - description: |- 10143 - The last successfully applied revision. 10144 - Equals the Revision of the applied Artifact from the referenced Source. 10145 - type: string 10146 - lastAttemptedRevision: 10147 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 10148 - type: string 10149 - lastHandledReconcileAt: 10150 - description: |- 10151 - LastHandledReconcileAt holds the value of the most recent 10152 - reconcile request value, so a change of the annotation value 10153 - can be detected. 10154 - type: string 10155 - observedGeneration: 10156 - description: ObservedGeneration is the last reconciled generation. 10157 - format: int64 10158 - type: integer 10159 - type: object 10160 - type: object 10161 - served: true 10162 - storage: false 10163 - subresources: 10164 - status: {} 10165 ---- 10166 -apiVersion: v1 10167 -kind: ServiceAccount 10168 -metadata: 10169 - labels: 10170 - app.kubernetes.io/component: kustomize-controller 10171 - app.kubernetes.io/instance: flux-system 10172 - app.kubernetes.io/part-of: flux 10173 - app.kubernetes.io/version: v2.5.1 10174 - name: kustomize-controller 10175 - namespace: flux-system 10176 ---- 10177 -apiVersion: apps/v1 10178 -kind: Deployment 10179 -metadata: 10180 - labels: 10181 - app.kubernetes.io/component: kustomize-controller 10182 - app.kubernetes.io/instance: flux-system 10183 - app.kubernetes.io/part-of: flux 10184 - app.kubernetes.io/version: v2.5.1 10185 - control-plane: controller 10186 - name: kustomize-controller 10187 - namespace: flux-system 10188 -spec: 10189 - replicas: 1 10190 - selector: 10191 - matchLabels: 10192 - app: kustomize-controller 10193 - template: 10194 - metadata: 10195 - annotations: 10196 - prometheus.io/port: "8080" 10197 - prometheus.io/scrape: "true" 10198 - labels: 10199 - app: kustomize-controller 10200 - spec: 10201 - containers: 10202 - - args: 10203 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 10204 - - --watch-all-namespaces=true 10205 - - --log-level=info 10206 - - --log-encoding=json 10207 - - --enable-leader-election 10208 - env: 10209 - - name: RUNTIME_NAMESPACE 10210 - valueFrom: 10211 - fieldRef: 10212 - fieldPath: metadata.namespace 10213 - - name: GOMAXPROCS 10214 - valueFrom: 10215 - resourceFieldRef: 10216 - containerName: manager 10217 - resource: limits.cpu 10218 - - name: GOMEMLIMIT 10219 - valueFrom: 10220 - resourceFieldRef: 10221 - containerName: manager 10222 - resource: limits.memory 10223 - image: ghcr.io/fluxcd/kustomize-controller:v1.5.1 10224 - imagePullPolicy: IfNotPresent 10225 - livenessProbe: 10226 - httpGet: 10227 - path: /healthz 10228 - port: healthz 10229 - name: manager 10230 - ports: 10231 - - containerPort: 8080 10232 - name: http-prom 10233 - protocol: TCP 10234 - - containerPort: 9440 10235 - name: healthz 10236 - protocol: TCP 10237 - readinessProbe: 10238 - httpGet: 10239 - path: /readyz 10240 - port: healthz 10241 - resources: 10242 - limits: 10243 - cpu: 1000m 10244 - memory: 1Gi 10245 - requests: 10246 - cpu: 100m 10247 - memory: 64Mi 10248 - securityContext: 10249 - allowPrivilegeEscalation: false 10250 - capabilities: 10251 - drop: 10252 - - ALL 10253 - readOnlyRootFilesystem: true 10254 - runAsNonRoot: true 10255 - seccompProfile: 10256 - type: RuntimeDefault 10257 - volumeMounts: 10258 - - mountPath: /tmp 10259 - name: temp 10260 - nodeSelector: 10261 - kubernetes.io/os: linux 10262 - priorityClassName: system-cluster-critical 10263 - securityContext: 10264 - fsGroup: 1337 10265 - serviceAccountName: kustomize-controller 10266 - terminationGracePeriodSeconds: 60 10267 - volumes: 10268 - - emptyDir: {} 10269 - name: temp 10270 ---- 10271 -apiVersion: apiextensions.k8s.io/v1 10272 -kind: CustomResourceDefinition 10273 -metadata: 10274 - annotations: 10275 - controller-gen.kubebuilder.io/version: v0.16.1 10276 - labels: 10277 - app.kubernetes.io/component: helm-controller 10278 - app.kubernetes.io/instance: flux-system 10279 - app.kubernetes.io/part-of: flux 10280 - app.kubernetes.io/version: v2.5.1 10281 - name: helmreleases.helm.toolkit.fluxcd.io 10282 -spec: 10283 - group: helm.toolkit.fluxcd.io 10284 - names: 10285 - kind: HelmRelease 10286 - listKind: HelmReleaseList 10287 - plural: helmreleases 10288 - shortNames: 10289 - - hr 10290 - singular: helmrelease 10291 - scope: Namespaced 10292 - versions: 10293 - - additionalPrinterColumns: 10294 - - jsonPath: .metadata.creationTimestamp 10295 - name: Age 10296 - type: date 10297 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 10298 - name: Ready 10299 - type: string 10300 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 10301 - name: Status 10302 - type: string 10303 - name: v2 10304 - schema: 10305 - openAPIV3Schema: 10306 - description: HelmRelease is the Schema for the helmreleases API 10307 - properties: 10308 - apiVersion: 10309 - description: |- 10310 - APIVersion defines the versioned schema of this representation of an object. 10311 - Servers should convert recognized schemas to the latest internal value, and 10312 - may reject unrecognized values. 10313 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10314 - type: string 10315 - kind: 10316 - description: |- 10317 - Kind is a string value representing the REST resource this object represents. 10318 - Servers may infer this from the endpoint the client submits requests to. 10319 - Cannot be updated. 10320 - In CamelCase. 10321 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10322 - type: string 10323 - metadata: 10324 - type: object 10325 - spec: 10326 - description: HelmReleaseSpec defines the desired state of a Helm release. 10327 - properties: 10328 - chart: 10329 - description: |- 10330 - Chart defines the template of the v1.HelmChart that should be created 10331 - for this HelmRelease. 10332 - properties: 10333 - metadata: 10334 - description: ObjectMeta holds the template for metadata like labels and annotations. 10335 - properties: 10336 - annotations: 10337 - additionalProperties: 10338 - type: string 10339 - description: |- 10340 - Annotations is an unstructured key value map stored with a resource that may be 10341 - set by external tools to store and retrieve arbitrary metadata. They are not 10342 - queryable and should be preserved when modifying objects. 10343 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 10344 - type: object 10345 - labels: 10346 - additionalProperties: 10347 - type: string 10348 - description: |- 10349 - Map of string keys and values that can be used to organize and categorize 10350 - (scope and select) objects. 10351 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 10352 - type: object 10353 - type: object 10354 - spec: 10355 - description: Spec holds the template for the v1.HelmChartSpec for this HelmRelease. 10356 - properties: 10357 - chart: 10358 - description: The name or path the Helm chart is available at in the SourceRef. 10359 - maxLength: 2048 10360 - minLength: 1 10361 - type: string 10362 - ignoreMissingValuesFiles: 10363 - description: IgnoreMissingValuesFiles controls whether to silently ignore 10364 - missing values files rather than failing. 10365 - type: boolean 10366 - interval: 10367 - description: |- 10368 - Interval at which to check the v1.Source for updates. Defaults to 10369 - 'HelmReleaseSpec.Interval'. 10370 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10371 - type: string 10372 - reconcileStrategy: 10373 - default: ChartVersion 10374 - description: |- 10375 - Determines what enables the creation of a new artifact. Valid values are 10376 - ('ChartVersion', 'Revision'). 10377 - See the documentation of the values for an explanation on their behavior. 10378 - Defaults to ChartVersion when omitted. 10379 - enum: 10380 - - ChartVersion 10381 - - Revision 10382 - type: string 10383 - sourceRef: 10384 - description: The name and namespace of the v1.Source the chart is available 10385 - at. 10386 - properties: 10387 - apiVersion: 10388 - description: APIVersion of the referent. 10389 - type: string 10390 - kind: 10391 - description: Kind of the referent. 10392 - enum: 10393 - - HelmRepository 10394 - - GitRepository 10395 - - Bucket 10396 - type: string 10397 - name: 10398 - description: Name of the referent. 10399 - maxLength: 253 10400 - minLength: 1 10401 - type: string 10402 - namespace: 10403 - description: Namespace of the referent. 10404 - maxLength: 63 10405 - minLength: 1 10406 - type: string 10407 - required: 10408 - - kind 10409 - - name 10410 - type: object 10411 - valuesFiles: 10412 - description: |- 10413 - Alternative list of values files to use as the chart values (values.yaml 10414 - is not included by default), expected to be a relative path in the SourceRef. 10415 - Values files are merged in the order of this list with the last file overriding 10416 - the first. Ignored when omitted. 10417 - items: 10418 - type: string 10419 - type: array 10420 - verify: 10421 - description: |- 10422 - Verify contains the secret name containing the trusted public keys 10423 - used to verify the signature and specifies which provider to use to check 10424 - whether OCI image is authentic. 10425 - This field is only supported for OCI sources. 10426 - Chart dependencies, which are not bundled in the umbrella chart artifact, 10427 - are not verified. 10428 - properties: 10429 - provider: 10430 - default: cosign 10431 - description: Provider specifies the technology used to sign the OCI 10432 - Helm chart. 10433 - enum: 10434 - - cosign 10435 - - notation 10436 - type: string 10437 - secretRef: 10438 - description: |- 10439 - SecretRef specifies the Kubernetes Secret containing the 10440 - trusted public keys. 10441 - properties: 10442 - name: 10443 - description: Name of the referent. 10444 - type: string 10445 - required: 10446 - - name 10447 - type: object 10448 - required: 10449 - - provider 10450 - type: object 10451 - version: 10452 - default: '*' 10453 - description: |- 10454 - Version semver expression, ignored for charts from v1.GitRepository and 10455 - v1beta2.Bucket sources. Defaults to latest when omitted. 10456 - type: string 10457 - required: 10458 - - chart 10459 - - sourceRef 10460 - type: object 10461 - required: 10462 - - spec 10463 - type: object 10464 - chartRef: 10465 - description: |- 10466 - ChartRef holds a reference to a source controller resource containing the 10467 - Helm chart artifact. 10468 - properties: 10469 - apiVersion: 10470 - description: APIVersion of the referent. 10471 - type: string 10472 - kind: 10473 - description: Kind of the referent. 10474 - enum: 10475 - - OCIRepository 10476 - - HelmChart 10477 - type: string 10478 - name: 10479 - description: Name of the referent. 10480 - maxLength: 253 10481 - minLength: 1 10482 - type: string 10483 - namespace: 10484 - description: |- 10485 - Namespace of the referent, defaults to the namespace of the Kubernetes 10486 - resource object that contains the reference. 10487 - maxLength: 63 10488 - minLength: 1 10489 - type: string 10490 - required: 10491 - - kind 10492 - - name 10493 - type: object 10494 - dependsOn: 10495 - description: |- 10496 - DependsOn may contain a meta.NamespacedObjectReference slice with 10497 - references to HelmRelease resources that must be ready before this HelmRelease 10498 - can be reconciled. 10499 - items: 10500 - description: |- 10501 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 10502 - namespace. 10503 - properties: 10504 - name: 10505 - description: Name of the referent. 10506 - type: string 10507 - namespace: 10508 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 10509 - type: string 10510 - required: 10511 - - name 10512 - type: object 10513 - type: array 10514 - driftDetection: 10515 - description: |- 10516 - DriftDetection holds the configuration for detecting and handling 10517 - differences between the manifest in the Helm storage and the resources 10518 - currently existing in the cluster. 10519 - properties: 10520 - ignore: 10521 - description: |- 10522 - Ignore contains a list of rules for specifying which changes to ignore 10523 - during diffing. 10524 - items: 10525 - description: |- 10526 - IgnoreRule defines a rule to selectively disregard specific changes during 10527 - the drift detection process. 10528 - properties: 10529 - paths: 10530 - description: |- 10531 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 10532 - consideration in a Kubernetes object. 10533 - items: 10534 - type: string 10535 - type: array 10536 - target: 10537 - description: |- 10538 - Target is a selector for specifying Kubernetes objects to which this 10539 - rule applies. 10540 - If Target is not set, the Paths will be ignored for all Kubernetes 10541 - objects within the manifest of the Helm release. 10542 - properties: 10543 - annotationSelector: 10544 - description: |- 10545 - AnnotationSelector is a string that follows the label selection expression 10546 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10547 - It matches with the resource annotations. 10548 - type: string 10549 - group: 10550 - description: |- 10551 - Group is the API group to select resources from. 10552 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10553 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10554 - type: string 10555 - kind: 10556 - description: |- 10557 - Kind of the API Group to select resources from. 10558 - Together with Group and Version it is capable of unambiguously 10559 - identifying and/or selecting resources. 10560 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10561 - type: string 10562 - labelSelector: 10563 - description: |- 10564 - LabelSelector is a string that follows the label selection expression 10565 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10566 - It matches with the resource labels. 10567 - type: string 10568 - name: 10569 - description: Name to match resources with. 10570 - type: string 10571 - namespace: 10572 - description: Namespace to select resources from. 10573 - type: string 10574 - version: 10575 - description: |- 10576 - Version of the API Group to select resources from. 10577 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10578 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10579 - type: string 10580 - type: object 10581 - required: 10582 - - paths 10583 - type: object 10584 - type: array 10585 - mode: 10586 - description: |- 10587 - Mode defines how differences should be handled between the Helm manifest 10588 - and the manifest currently applied to the cluster. 10589 - If not explicitly set, it defaults to DiffModeDisabled. 10590 - enum: 10591 - - enabled 10592 - - warn 10593 - - disabled 10594 - type: string 10595 - type: object 10596 - install: 10597 - description: Install holds the configuration for Helm install actions for this HelmRelease. 10598 - properties: 10599 - crds: 10600 - description: |- 10601 - CRDs upgrade CRDs from the Helm Chart's crds directory according 10602 - to the CRD upgrade policy provided here. Valid values are `Skip`, 10603 - `Create` or `CreateReplace`. Default is `Create` and if omitted 10604 - CRDs are installed but not updated. 10605 - 10606 - Skip: do neither install nor replace (update) any CRDs. 10607 - 10608 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 10609 - 10610 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 10611 - but not deleted. 10612 - 10613 - By default, CRDs are applied (installed) during Helm install action. 10614 - With this option users can opt in to CRD replace existing CRDs on Helm 10615 - install actions, which is not (yet) natively supported by Helm. 10616 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 10617 - enum: 10618 - - Skip 10619 - - Create 10620 - - CreateReplace 10621 - type: string 10622 - createNamespace: 10623 - description: |- 10624 - CreateNamespace tells the Helm install action to create the 10625 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 10626 - On uninstall, the namespace will not be garbage collected. 10627 - type: boolean 10628 - disableHooks: 10629 - description: DisableHooks prevents hooks from running during the Helm install action. 10630 - type: boolean 10631 - disableOpenAPIValidation: 10632 - description: |- 10633 - DisableOpenAPIValidation prevents the Helm install action from validating 10634 - rendered templates against the Kubernetes OpenAPI Schema. 10635 - type: boolean 10636 - disableSchemaValidation: 10637 - description: |- 10638 - DisableSchemaValidation prevents the Helm install action from validating 10639 - the values against the JSON Schema. 10640 - type: boolean 10641 - disableTakeOwnership: 10642 - description: |- 10643 - DisableTakeOwnership disables taking ownership of existing resources 10644 - during the Helm install action. Defaults to false. 10645 - type: boolean 10646 - disableWait: 10647 - description: |- 10648 - DisableWait disables the waiting for resources to be ready after a Helm 10649 - install has been performed. 10650 - type: boolean 10651 - disableWaitForJobs: 10652 - description: |- 10653 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 10654 - install has been performed. 10655 - type: boolean 10656 - remediation: 10657 - description: |- 10658 - Remediation holds the remediation configuration for when the Helm install 10659 - action for the HelmRelease fails. The default is to not perform any action. 10660 - properties: 10661 - ignoreTestFailures: 10662 - description: |- 10663 - IgnoreTestFailures tells the controller to skip remediation when the Helm 10664 - tests are run after an install action but fail. Defaults to 10665 - 'Test.IgnoreFailures'. 10666 - type: boolean 10667 - remediateLastFailure: 10668 - description: |- 10669 - RemediateLastFailure tells the controller to remediate the last failure, when 10670 - no retries remain. Defaults to 'false'. 10671 - type: boolean 10672 - retries: 10673 - description: |- 10674 - Retries is the number of retries that should be attempted on failures before 10675 - bailing. Remediation, using an uninstall, is performed between each attempt. 10676 - Defaults to '0', a negative integer equals to unlimited retries. 10677 - type: integer 10678 - type: object 10679 - replace: 10680 - description: |- 10681 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 10682 - if that name is a deleted release which remains in the history. 10683 - type: boolean 10684 - skipCRDs: 10685 - description: |- 10686 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 10687 - CRDs are installed if not already present. 10688 - 10689 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 10690 - type: boolean 10691 - timeout: 10692 - description: |- 10693 - Timeout is the time to wait for any individual Kubernetes operation (like 10694 - Jobs for hooks) during the performance of a Helm install action. Defaults to 10695 - 'HelmReleaseSpec.Timeout'. 10696 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10697 - type: string 10698 - type: object 10699 - interval: 10700 - description: Interval at which to reconcile the Helm release. 10701 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10702 - type: string 10703 - kubeConfig: 10704 - description: |- 10705 - KubeConfig for reconciling the HelmRelease on a remote cluster. 10706 - When used in combination with HelmReleaseSpec.ServiceAccountName, 10707 - forces the controller to act on behalf of that Service Account at the 10708 - target cluster. 10709 - If the --default-service-account flag is set, its value will be used as 10710 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 10711 - is empty. 10712 - properties: 10713 - secretRef: 10714 - description: |- 10715 - SecretRef holds the name of a secret that contains a key with 10716 - the kubeconfig file as the value. If no key is set, the key will default 10717 - to 'value'. 10718 - It is recommended that the kubeconfig is self-contained, and the secret 10719 - is regularly updated if credentials such as a cloud-access-token expire. 10720 - Cloud specific `cmd-path` auth helpers will not function without adding 10721 - binaries and credentials to the Pod that is responsible for reconciling 10722 - Kubernetes resources. 10723 - properties: 10724 - key: 10725 - description: Key in the Secret, when not specified an implementation-specific 10726 - default key is used. 10727 - type: string 10728 - name: 10729 - description: Name of the Secret. 10730 - type: string 10731 - required: 10732 - - name 10733 - type: object 10734 - required: 10735 - - secretRef 10736 - type: object 10737 - maxHistory: 10738 - description: |- 10739 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 10740 - Use '0' for an unlimited number of revisions; defaults to '5'. 10741 - type: integer 10742 - persistentClient: 10743 - description: |- 10744 - PersistentClient tells the controller to use a persistent Kubernetes 10745 - client for this release. When enabled, the client will be reused for the 10746 - duration of the reconciliation, instead of being created and destroyed 10747 - for each (step of a) Helm action. 10748 - 10749 - This can improve performance, but may cause issues with some Helm charts 10750 - that for example do create Custom Resource Definitions during installation 10751 - outside Helm's CRD lifecycle hooks, which are then not observed to be 10752 - available by e.g. post-install hooks. 10753 - 10754 - If not set, it defaults to true. 10755 - type: boolean 10756 - postRenderers: 10757 - description: |- 10758 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 10759 - of their definition. 10760 - items: 10761 - description: PostRenderer contains a Helm PostRenderer specification. 10762 - properties: 10763 - kustomize: 10764 - description: Kustomization to apply as PostRenderer. 10765 - properties: 10766 - images: 10767 - description: |- 10768 - Images is a list of (image name, new name, new tag or digest) 10769 - for changing image names, tags or digests. This can also be achieved with a 10770 - patch, but this operator is simpler to specify. 10771 - items: 10772 - description: Image contains an image name, a new name, a new tag or 10773 - digest, which will replace the original name and tag. 10774 - properties: 10775 - digest: 10776 - description: |- 10777 - Digest is the value used to replace the original image tag. 10778 - If digest is present NewTag value is ignored. 10779 - type: string 10780 - name: 10781 - description: Name is a tag-less image name. 10782 - type: string 10783 - newName: 10784 - description: NewName is the value used to replace the original 10785 - name. 10786 - type: string 10787 - newTag: 10788 - description: NewTag is the value used to replace the original 10789 - tag. 10790 - type: string 10791 - required: 10792 - - name 10793 - type: object 10794 - type: array 10795 - patches: 10796 - description: |- 10797 - Strategic merge and JSON patches, defined as inline YAML objects, 10798 - capable of targeting objects based on kind, label and annotation selectors. 10799 - items: 10800 - description: |- 10801 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 10802 - be applied to. 10803 - properties: 10804 - patch: 10805 - description: |- 10806 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 10807 - an array of operation objects. 10808 - type: string 10809 - target: 10810 - description: Target points to the resources that the patch 10811 - document should be applied to. 10812 - properties: 10813 - annotationSelector: 10814 - description: |- 10815 - AnnotationSelector is a string that follows the label selection expression 10816 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10817 - It matches with the resource annotations. 10818 - type: string 10819 - group: 10820 - description: |- 10821 - Group is the API group to select resources from. 10822 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10823 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10824 - type: string 10825 - kind: 10826 - description: |- 10827 - Kind of the API Group to select resources from. 10828 - Together with Group and Version it is capable of unambiguously 10829 - identifying and/or selecting resources. 10830 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10831 - type: string 10832 - labelSelector: 10833 - description: |- 10834 - LabelSelector is a string that follows the label selection expression 10835 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10836 - It matches with the resource labels. 10837 - type: string 10838 - name: 10839 - description: Name to match resources with. 10840 - type: string 10841 - namespace: 10842 - description: Namespace to select resources from. 10843 - type: string 10844 - version: 10845 - description: |- 10846 - Version of the API Group to select resources from. 10847 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10848 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10849 - type: string 10850 - type: object 10851 - required: 10852 - - patch 10853 - type: object 10854 - type: array 10855 - type: object 10856 - type: object 10857 - type: array 10858 - releaseName: 10859 - description: |- 10860 - ReleaseName used for the Helm release. Defaults to a composition of 10861 - '[TargetNamespace-]Name'. 10862 - maxLength: 53 10863 - minLength: 1 10864 - type: string 10865 - rollback: 10866 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 10867 - properties: 10868 - cleanupOnFail: 10869 - description: |- 10870 - CleanupOnFail allows deletion of new resources created during the Helm 10871 - rollback action when it fails. 10872 - type: boolean 10873 - disableHooks: 10874 - description: DisableHooks prevents hooks from running during the Helm rollback action. 10875 - type: boolean 10876 - disableWait: 10877 - description: |- 10878 - DisableWait disables the waiting for resources to be ready after a Helm 10879 - rollback has been performed. 10880 - type: boolean 10881 - disableWaitForJobs: 10882 - description: |- 10883 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 10884 - rollback has been performed. 10885 - type: boolean 10886 - force: 10887 - description: Force forces resource updates through a replacement strategy. 10888 - type: boolean 10889 - recreate: 10890 - description: Recreate performs pod restarts for the resource if applicable. 10891 - type: boolean 10892 - timeout: 10893 - description: |- 10894 - Timeout is the time to wait for any individual Kubernetes operation (like 10895 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 10896 - 'HelmReleaseSpec.Timeout'. 10897 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10898 - type: string 10899 - type: object 10900 - serviceAccountName: 10901 - description: |- 10902 - The name of the Kubernetes service account to impersonate 10903 - when reconciling this HelmRelease. 10904 - maxLength: 253 10905 - minLength: 1 10906 - type: string 10907 - storageNamespace: 10908 - description: |- 10909 - StorageNamespace used for the Helm storage. 10910 - Defaults to the namespace of the HelmRelease. 10911 - maxLength: 63 10912 - minLength: 1 10913 - type: string 10914 - suspend: 10915 - description: |- 10916 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 10917 - it does not apply to already started reconciliations. Defaults to false. 10918 - type: boolean 10919 - targetNamespace: 10920 - description: |- 10921 - TargetNamespace to target when performing operations for the HelmRelease. 10922 - Defaults to the namespace of the HelmRelease. 10923 - maxLength: 63 10924 - minLength: 1 10925 - type: string 10926 - test: 10927 - description: Test holds the configuration for Helm test actions for this HelmRelease. 10928 - properties: 10929 - enable: 10930 - description: |- 10931 - Enable enables Helm test actions for this HelmRelease after an Helm install 10932 - or upgrade action has been performed. 10933 - type: boolean 10934 - filters: 10935 - description: Filters is a list of tests to run or exclude from running. 10936 - items: 10937 - description: Filter holds the configuration for individual Helm test filters. 10938 - properties: 10939 - exclude: 10940 - description: Exclude specifies whether the named test should be excluded. 10941 - type: boolean 10942 - name: 10943 - description: Name is the name of the test. 10944 - maxLength: 253 10945 - minLength: 1 10946 - type: string 10947 - required: 10948 - - name 10949 - type: object 10950 - type: array 10951 - ignoreFailures: 10952 - description: |- 10953 - IgnoreFailures tells the controller to skip remediation when the Helm tests 10954 - are run but fail. Can be overwritten for tests run after install or upgrade 10955 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 10956 - type: boolean 10957 - timeout: 10958 - description: |- 10959 - Timeout is the time to wait for any individual Kubernetes operation during 10960 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 10961 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10962 - type: string 10963 - type: object 10964 - timeout: 10965 - description: |- 10966 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 10967 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 10968 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10969 - type: string 10970 - uninstall: 10971 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 10972 - properties: 10973 - deletionPropagation: 10974 - default: background 10975 - description: |- 10976 - DeletionPropagation specifies the deletion propagation policy when 10977 - a Helm uninstall is performed. 10978 - enum: 10979 - - background 10980 - - foreground 10981 - - orphan 10982 - type: string 10983 - disableHooks: 10984 - description: DisableHooks prevents hooks from running during the Helm rollback action. 10985 - type: boolean 10986 - disableWait: 10987 - description: |- 10988 - DisableWait disables waiting for all the resources to be deleted after 10989 - a Helm uninstall is performed. 10990 - type: boolean 10991 - keepHistory: 10992 - description: |- 10993 - KeepHistory tells Helm to remove all associated resources and mark the 10994 - release as deleted, but retain the release history. 10995 - type: boolean 10996 - timeout: 10997 - description: |- 10998 - Timeout is the time to wait for any individual Kubernetes operation (like 10999 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 11000 - to 'HelmReleaseSpec.Timeout'. 11001 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11002 - type: string 11003 - type: object 11004 - upgrade: 11005 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 11006 - properties: 11007 - cleanupOnFail: 11008 - description: |- 11009 - CleanupOnFail allows deletion of new resources created during the Helm 11010 - upgrade action when it fails. 11011 - type: boolean 11012 - crds: 11013 - description: |- 11014 - CRDs upgrade CRDs from the Helm Chart's crds directory according 11015 - to the CRD upgrade policy provided here. Valid values are `Skip`, 11016 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 11017 - CRDs are neither installed nor upgraded. 11018 - 11019 - Skip: do neither install nor replace (update) any CRDs. 11020 - 11021 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 11022 - 11023 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 11024 - but not deleted. 11025 - 11026 - By default, CRDs are not applied during Helm upgrade action. With this 11027 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 11028 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 11029 - enum: 11030 - - Skip 11031 - - Create 11032 - - CreateReplace 11033 - type: string 11034 - disableHooks: 11035 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 11036 - type: boolean 11037 - disableOpenAPIValidation: 11038 - description: |- 11039 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 11040 - rendered templates against the Kubernetes OpenAPI Schema. 11041 - type: boolean 11042 - disableSchemaValidation: 11043 - description: |- 11044 - DisableSchemaValidation prevents the Helm upgrade action from validating 11045 - the values against the JSON Schema. 11046 - type: boolean 11047 - disableTakeOwnership: 11048 - description: |- 11049 - DisableTakeOwnership disables taking ownership of existing resources 11050 - during the Helm upgrade action. Defaults to false. 11051 - type: boolean 11052 - disableWait: 11053 - description: |- 11054 - DisableWait disables the waiting for resources to be ready after a Helm 11055 - upgrade has been performed. 11056 - type: boolean 11057 - disableWaitForJobs: 11058 - description: |- 11059 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 11060 - upgrade has been performed. 11061 - type: boolean 11062 - force: 11063 - description: Force forces resource updates through a replacement strategy. 11064 - type: boolean 11065 - preserveValues: 11066 - description: |- 11067 - PreserveValues will make Helm reuse the last release's values and merge in 11068 - overrides from 'Values'. Setting this flag makes the HelmRelease 11069 - non-declarative. 11070 - type: boolean 11071 - remediation: 11072 - description: |- 11073 - Remediation holds the remediation configuration for when the Helm upgrade 11074 - action for the HelmRelease fails. The default is to not perform any action. 11075 - properties: 11076 - ignoreTestFailures: 11077 - description: |- 11078 - IgnoreTestFailures tells the controller to skip remediation when the Helm 11079 - tests are run after an upgrade action but fail. 11080 - Defaults to 'Test.IgnoreFailures'. 11081 - type: boolean 11082 - remediateLastFailure: 11083 - description: |- 11084 - RemediateLastFailure tells the controller to remediate the last failure, when 11085 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 11086 - type: boolean 11087 - retries: 11088 - description: |- 11089 - Retries is the number of retries that should be attempted on failures before 11090 - bailing. Remediation, using 'Strategy', is performed between each attempt. 11091 - Defaults to '0', a negative integer equals to unlimited retries. 11092 - type: integer 11093 - strategy: 11094 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 11095 - enum: 11096 - - rollback 11097 - - uninstall 11098 - type: string 11099 - type: object 11100 - timeout: 11101 - description: |- 11102 - Timeout is the time to wait for any individual Kubernetes operation (like 11103 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 11104 - 'HelmReleaseSpec.Timeout'. 11105 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11106 - type: string 11107 - type: object 11108 - values: 11109 - description: Values holds the values for this Helm release. 11110 - x-kubernetes-preserve-unknown-fields: true 11111 - valuesFrom: 11112 - description: |- 11113 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 11114 - and information about how they should be merged. 11115 - items: 11116 - description: |- 11117 - ValuesReference contains a reference to a resource containing Helm values, 11118 - and optionally the key they can be found at. 11119 - properties: 11120 - kind: 11121 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 11122 - enum: 11123 - - Secret 11124 - - ConfigMap 11125 - type: string 11126 - name: 11127 - description: |- 11128 - Name of the values referent. Should reside in the same namespace as the 11129 - referring resource. 11130 - maxLength: 253 11131 - minLength: 1 11132 - type: string 11133 - optional: 11134 - description: |- 11135 - Optional marks this ValuesReference as optional. When set, a not found error 11136 - for the values reference is ignored, but any ValuesKey, TargetPath or 11137 - transient error will still result in a reconciliation failure. 11138 - type: boolean 11139 - targetPath: 11140 - description: |- 11141 - TargetPath is the YAML dot notation path the value should be merged at. When 11142 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 11143 - which results in the values getting merged at the root. 11144 - maxLength: 250 11145 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 11146 - type: string 11147 - valuesKey: 11148 - description: |- 11149 - ValuesKey is the data key where the values.yaml or a specific value can be 11150 - found at. Defaults to 'values.yaml'. 11151 - maxLength: 253 11152 - pattern: ^[\-._a-zA-Z0-9]+$ 11153 - type: string 11154 - required: 11155 - - kind 11156 - - name 11157 - type: object 11158 - type: array 11159 - required: 11160 - - interval 11161 - type: object 11162 - x-kubernetes-validations: 11163 - - message: either chart or chartRef must be set 11164 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 11165 - status: 11166 - default: 11167 - observedGeneration: -1 11168 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 11169 - properties: 11170 - conditions: 11171 - description: Conditions holds the conditions for the HelmRelease. 11172 - items: 11173 - description: Condition contains details for one aspect of the current state of this API 11174 - Resource. 11175 - properties: 11176 - lastTransitionTime: 11177 - description: |- 11178 - lastTransitionTime is the last time the condition transitioned from one status to another. 11179 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11180 - format: date-time 11181 - type: string 11182 - message: 11183 - description: |- 11184 - message is a human readable message indicating details about the transition. 11185 - This may be an empty string. 11186 - maxLength: 32768 11187 - type: string 11188 - observedGeneration: 11189 - description: |- 11190 - observedGeneration represents the .metadata.generation that the condition was set based upon. 11191 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11192 - with respect to the current state of the instance. 11193 - format: int64 11194 - minimum: 0 11195 - type: integer 11196 - reason: 11197 - description: |- 11198 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 11199 - Producers of specific condition types may define expected values and meanings for this field, 11200 - and whether the values are considered a guaranteed API. 11201 - The value should be a CamelCase string. 11202 - This field may not be empty. 11203 - maxLength: 1024 11204 - minLength: 1 11205 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11206 - type: string 11207 - status: 11208 - description: status of the condition, one of True, False, Unknown. 11209 - enum: 11210 - - "True" 11211 - - "False" 11212 - - Unknown 11213 - type: string 11214 - type: 11215 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 11216 - maxLength: 316 11217 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11218 - type: string 11219 - required: 11220 - - lastTransitionTime 11221 - - message 11222 - - reason 11223 - - status 11224 - - type 11225 - type: object 11226 - type: array 11227 - failures: 11228 - description: |- 11229 - Failures is the reconciliation failure count against the latest desired 11230 - state. It is reset after a successful reconciliation. 11231 - format: int64 11232 - type: integer 11233 - helmChart: 11234 - description: |- 11235 - HelmChart is the namespaced name of the HelmChart resource created by 11236 - the controller for the HelmRelease. 11237 - type: string 11238 - history: 11239 - description: |- 11240 - History holds the history of Helm releases performed for this HelmRelease 11241 - up to the last successfully completed release. 11242 - items: 11243 - description: |- 11244 - Snapshot captures a point-in-time copy of the status information for a Helm release, 11245 - as managed by the controller. 11246 - properties: 11247 - apiVersion: 11248 - description: |- 11249 - APIVersion is the API version of the Snapshot. 11250 - Provisional: when the calculation method of the Digest field is changed, 11251 - this field will be used to distinguish between the old and new methods. 11252 - type: string 11253 - appVersion: 11254 - description: AppVersion is the chart app version of the release object in storage. 11255 - type: string 11256 - chartName: 11257 - description: ChartName is the chart name of the release object in storage. 11258 - type: string 11259 - chartVersion: 11260 - description: |- 11261 - ChartVersion is the chart version of the release object in 11262 - storage. 11263 - type: string 11264 - configDigest: 11265 - description: |- 11266 - ConfigDigest is the checksum of the config (better known as 11267 - "values") of the release object in storage. 11268 - It has the format of `<algo>:<checksum>`. 11269 - type: string 11270 - deleted: 11271 - description: Deleted is when the release was deleted. 11272 - format: date-time 11273 - type: string 11274 - digest: 11275 - description: |- 11276 - Digest is the checksum of the release object in storage. 11277 - It has the format of `<algo>:<checksum>`. 11278 - type: string 11279 - firstDeployed: 11280 - description: FirstDeployed is when the release was first deployed. 11281 - format: date-time 11282 - type: string 11283 - lastDeployed: 11284 - description: LastDeployed is when the release was last deployed. 11285 - format: date-time 11286 - type: string 11287 - name: 11288 - description: Name is the name of the release. 11289 - type: string 11290 - namespace: 11291 - description: Namespace is the namespace the release is deployed to. 11292 - type: string 11293 - ociDigest: 11294 - description: OCIDigest is the digest of the OCI artifact associated with the release. 11295 - type: string 11296 - status: 11297 - description: Status is the current state of the release. 11298 - type: string 11299 - testHooks: 11300 - additionalProperties: 11301 - description: |- 11302 - TestHookStatus holds the status information for a test hook as observed 11303 - to be run by the controller. 11304 - properties: 11305 - lastCompleted: 11306 - description: LastCompleted is the time the test hook last completed. 11307 - format: date-time 11308 - type: string 11309 - lastStarted: 11310 - description: LastStarted is the time the test hook was last started. 11311 - format: date-time 11312 - type: string 11313 - phase: 11314 - description: Phase the test hook was observed to be in. 11315 - type: string 11316 - type: object 11317 - description: |- 11318 - TestHooks is the list of test hooks for the release as observed to be 11319 - run by the controller. 11320 - type: object 11321 - version: 11322 - description: Version is the version of the release object in storage. 11323 - type: integer 11324 - required: 11325 - - chartName 11326 - - chartVersion 11327 - - configDigest 11328 - - digest 11329 - - firstDeployed 11330 - - lastDeployed 11331 - - name 11332 - - namespace 11333 - - status 11334 - - version 11335 - type: object 11336 - type: array 11337 - installFailures: 11338 - description: |- 11339 - InstallFailures is the install failure count against the latest desired 11340 - state. It is reset after a successful reconciliation. 11341 - format: int64 11342 - type: integer 11343 - lastAttemptedConfigDigest: 11344 - description: |- 11345 - LastAttemptedConfigDigest is the digest for the config (better known as 11346 - "values") of the last reconciliation attempt. 11347 - type: string 11348 - lastAttemptedGeneration: 11349 - description: |- 11350 - LastAttemptedGeneration is the last generation the controller attempted 11351 - to reconcile. 11352 - format: int64 11353 - type: integer 11354 - lastAttemptedReleaseAction: 11355 - description: |- 11356 - LastAttemptedReleaseAction is the last release action performed for this 11357 - HelmRelease. It is used to determine the active remediation strategy. 11358 - enum: 11359 - - install 11360 - - upgrade 11361 - type: string 11362 - lastAttemptedRevision: 11363 - description: |- 11364 - LastAttemptedRevision is the Source revision of the last reconciliation 11365 - attempt. For OCIRepository sources, the 12 first characters of the digest are 11366 - appended to the chart version e.g. "1.2.3+1234567890ab". 11367 - type: string 11368 - lastAttemptedRevisionDigest: 11369 - description: |- 11370 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 11371 - This is only set for OCIRepository sources. 11372 - type: string 11373 - lastAttemptedValuesChecksum: 11374 - description: |- 11375 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 11376 - reconciliation attempt. 11377 - Deprecated: Use LastAttemptedConfigDigest instead. 11378 - type: string 11379 - lastHandledForceAt: 11380 - description: |- 11381 - LastHandledForceAt holds the value of the most recent force request 11382 - value, so a change of the annotation value can be detected. 11383 - type: string 11384 - lastHandledReconcileAt: 11385 - description: |- 11386 - LastHandledReconcileAt holds the value of the most recent 11387 - reconcile request value, so a change of the annotation value 11388 - can be detected. 11389 - type: string 11390 - lastHandledResetAt: 11391 - description: |- 11392 - LastHandledResetAt holds the value of the most recent reset request 11393 - value, so a change of the annotation value can be detected. 11394 - type: string 11395 - lastReleaseRevision: 11396 - description: |- 11397 - LastReleaseRevision is the revision of the last successful Helm release. 11398 - Deprecated: Use History instead. 11399 - type: integer 11400 - observedGeneration: 11401 - description: ObservedGeneration is the last observed generation. 11402 - format: int64 11403 - type: integer 11404 - observedPostRenderersDigest: 11405 - description: |- 11406 - ObservedPostRenderersDigest is the digest for the post-renderers of 11407 - the last successful reconciliation attempt. 11408 - type: string 11409 - storageNamespace: 11410 - description: |- 11411 - StorageNamespace is the namespace of the Helm release storage for the 11412 - current release. 11413 - maxLength: 63 11414 - minLength: 1 11415 - type: string 11416 - upgradeFailures: 11417 - description: |- 11418 - UpgradeFailures is the upgrade failure count against the latest desired 11419 - state. It is reset after a successful reconciliation. 11420 - format: int64 11421 - type: integer 11422 - type: object 11423 - type: object 11424 - served: true 11425 - storage: true 11426 - subresources: 11427 - status: {} 11428 - - additionalPrinterColumns: 11429 - - jsonPath: .metadata.creationTimestamp 11430 - name: Age 11431 - type: date 11432 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 11433 - name: Ready 11434 - type: string 11435 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 11436 - name: Status 11437 - type: string 11438 - deprecated: true 11439 - deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2 11440 - name: v2beta1 11441 - schema: 11442 - openAPIV3Schema: 11443 - description: HelmRelease is the Schema for the helmreleases API 11444 - properties: 11445 - apiVersion: 11446 - description: |- 11447 - APIVersion defines the versioned schema of this representation of an object. 11448 - Servers should convert recognized schemas to the latest internal value, and 11449 - may reject unrecognized values. 11450 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11451 - type: string 11452 - kind: 11453 - description: |- 11454 - Kind is a string value representing the REST resource this object represents. 11455 - Servers may infer this from the endpoint the client submits requests to. 11456 - Cannot be updated. 11457 - In CamelCase. 11458 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11459 - type: string 11460 - metadata: 11461 - type: object 11462 - spec: 11463 - description: HelmReleaseSpec defines the desired state of a Helm release. 11464 - properties: 11465 - chart: 11466 - description: |- 11467 - Chart defines the template of the v1beta2.HelmChart that should be created 11468 - for this HelmRelease. 11469 - properties: 11470 - metadata: 11471 - description: ObjectMeta holds the template for metadata like labels and annotations. 11472 - properties: 11473 - annotations: 11474 - additionalProperties: 11475 - type: string 11476 - description: |- 11477 - Annotations is an unstructured key value map stored with a resource that may be 11478 - set by external tools to store and retrieve arbitrary metadata. They are not 11479 - queryable and should be preserved when modifying objects. 11480 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 11481 - type: object 11482 - labels: 11483 - additionalProperties: 11484 - type: string 11485 - description: |- 11486 - Map of string keys and values that can be used to organize and categorize 11487 - (scope and select) objects. 11488 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 11489 - type: object 11490 - type: object 11491 - spec: 11492 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 11493 - properties: 11494 - chart: 11495 - description: The name or path the Helm chart is available at in the SourceRef. 11496 - type: string 11497 - interval: 11498 - description: |- 11499 - Interval at which to check the v1beta2.Source for updates. Defaults to 11500 - 'HelmReleaseSpec.Interval'. 11501 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11502 - type: string 11503 - reconcileStrategy: 11504 - default: ChartVersion 11505 - description: |- 11506 - Determines what enables the creation of a new artifact. Valid values are 11507 - ('ChartVersion', 'Revision'). 11508 - See the documentation of the values for an explanation on their behavior. 11509 - Defaults to ChartVersion when omitted. 11510 - enum: 11511 - - ChartVersion 11512 - - Revision 11513 - type: string 11514 - sourceRef: 11515 - description: The name and namespace of the v1beta2.Source the chart is available 11516 - at. 11517 - properties: 11518 - apiVersion: 11519 - description: APIVersion of the referent. 11520 - type: string 11521 - kind: 11522 - description: Kind of the referent. 11523 - enum: 11524 - - HelmRepository 11525 - - GitRepository 11526 - - Bucket 11527 - type: string 11528 - name: 11529 - description: Name of the referent. 11530 - maxLength: 253 11531 - minLength: 1 11532 - type: string 11533 - namespace: 11534 - description: Namespace of the referent. 11535 - maxLength: 63 11536 - minLength: 1 11537 - type: string 11538 - required: 11539 - - kind 11540 - - name 11541 - type: object 11542 - valuesFile: 11543 - description: |- 11544 - Alternative values file to use as the default chart values, expected to 11545 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 11546 - for backwards compatibility the file defined here is merged before the 11547 - ValuesFiles items. Ignored when omitted. 11548 - type: string 11549 - valuesFiles: 11550 - description: |- 11551 - Alternative list of values files to use as the chart values (values.yaml 11552 - is not included by default), expected to be a relative path in the SourceRef. 11553 - Values files are merged in the order of this list with the last file overriding 11554 - the first. Ignored when omitted. 11555 - items: 11556 - type: string 11557 - type: array 11558 - verify: 11559 - description: |- 11560 - Verify contains the secret name containing the trusted public keys 11561 - used to verify the signature and specifies which provider to use to check 11562 - whether OCI image is authentic. 11563 - This field is only supported for OCI sources. 11564 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 11565 - properties: 11566 - provider: 11567 - default: cosign 11568 - description: Provider specifies the technology used to sign the OCI 11569 - Helm chart. 11570 - enum: 11571 - - cosign 11572 - type: string 11573 - secretRef: 11574 - description: |- 11575 - SecretRef specifies the Kubernetes Secret containing the 11576 - trusted public keys. 11577 - properties: 11578 - name: 11579 - description: Name of the referent. 11580 - type: string 11581 - required: 11582 - - name 11583 - type: object 11584 - required: 11585 - - provider 11586 - type: object 11587 - version: 11588 - default: '*' 11589 - description: |- 11590 - Version semver expression, ignored for charts from v1beta2.GitRepository and 11591 - v1beta2.Bucket sources. Defaults to latest when omitted. 11592 - type: string 11593 - required: 11594 - - chart 11595 - - sourceRef 11596 - type: object 11597 - required: 11598 - - spec 11599 - type: object 11600 - chartRef: 11601 - description: |- 11602 - ChartRef holds a reference to a source controller resource containing the 11603 - Helm chart artifact. 11604 - 11605 - Note: this field is provisional to the v2 API, and not actively used 11606 - by v2beta1 HelmReleases. 11607 - properties: 11608 - apiVersion: 11609 - description: APIVersion of the referent. 11610 - type: string 11611 - kind: 11612 - description: Kind of the referent. 11613 - enum: 11614 - - OCIRepository 11615 - - HelmChart 11616 - type: string 11617 - name: 11618 - description: Name of the referent. 11619 - maxLength: 253 11620 - minLength: 1 11621 - type: string 11622 - namespace: 11623 - description: |- 11624 - Namespace of the referent, defaults to the namespace of the Kubernetes 11625 - resource object that contains the reference. 11626 - maxLength: 63 11627 - minLength: 1 11628 - type: string 11629 - required: 11630 - - kind 11631 - - name 11632 - type: object 11633 - dependsOn: 11634 - description: |- 11635 - DependsOn may contain a meta.NamespacedObjectReference slice with 11636 - references to HelmRelease resources that must be ready before this HelmRelease 11637 - can be reconciled. 11638 - items: 11639 - description: |- 11640 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 11641 - namespace. 11642 - properties: 11643 - name: 11644 - description: Name of the referent. 11645 - type: string 11646 - namespace: 11647 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 11648 - type: string 11649 - required: 11650 - - name 11651 - type: object 11652 - type: array 11653 - driftDetection: 11654 - description: |- 11655 - DriftDetection holds the configuration for detecting and handling 11656 - differences between the manifest in the Helm storage and the resources 11657 - currently existing in the cluster. 11658 - 11659 - Note: this field is provisional to the v2beta2 API, and not actively used 11660 - by v2beta1 HelmReleases. 11661 - properties: 11662 - ignore: 11663 - description: |- 11664 - Ignore contains a list of rules for specifying which changes to ignore 11665 - during diffing. 11666 - items: 11667 - description: |- 11668 - IgnoreRule defines a rule to selectively disregard specific changes during 11669 - the drift detection process. 11670 - properties: 11671 - paths: 11672 - description: |- 11673 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 11674 - consideration in a Kubernetes object. 11675 - items: 11676 - type: string 11677 - type: array 11678 - target: 11679 - description: |- 11680 - Target is a selector for specifying Kubernetes objects to which this 11681 - rule applies. 11682 - If Target is not set, the Paths will be ignored for all Kubernetes 11683 - objects within the manifest of the Helm release. 11684 - properties: 11685 - annotationSelector: 11686 - description: |- 11687 - AnnotationSelector is a string that follows the label selection expression 11688 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11689 - It matches with the resource annotations. 11690 - type: string 11691 - group: 11692 - description: |- 11693 - Group is the API group to select resources from. 11694 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 11695 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11696 - type: string 11697 - kind: 11698 - description: |- 11699 - Kind of the API Group to select resources from. 11700 - Together with Group and Version it is capable of unambiguously 11701 - identifying and/or selecting resources. 11702 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11703 - type: string 11704 - labelSelector: 11705 - description: |- 11706 - LabelSelector is a string that follows the label selection expression 11707 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11708 - It matches with the resource labels. 11709 - type: string 11710 - name: 11711 - description: Name to match resources with. 11712 - type: string 11713 - namespace: 11714 - description: Namespace to select resources from. 11715 - type: string 11716 - version: 11717 - description: |- 11718 - Version of the API Group to select resources from. 11719 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 11720 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11721 - type: string 11722 - type: object 11723 - required: 11724 - - paths 11725 - type: object 11726 - type: array 11727 - mode: 11728 - description: |- 11729 - Mode defines how differences should be handled between the Helm manifest 11730 - and the manifest currently applied to the cluster. 11731 - If not explicitly set, it defaults to DiffModeDisabled. 11732 - enum: 11733 - - enabled 11734 - - warn 11735 - - disabled 11736 - type: string 11737 - type: object 11738 - install: 11739 - description: Install holds the configuration for Helm install actions for this HelmRelease. 11740 - properties: 11741 - crds: 11742 - description: |- 11743 - CRDs upgrade CRDs from the Helm Chart's crds directory according 11744 - to the CRD upgrade policy provided here. Valid values are `Skip`, 11745 - `Create` or `CreateReplace`. Default is `Create` and if omitted 11746 - CRDs are installed but not updated. 11747 - 11748 - Skip: do neither install nor replace (update) any CRDs. 11749 - 11750 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 11751 - 11752 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 11753 - but not deleted. 11754 - 11755 - By default, CRDs are applied (installed) during Helm install action. 11756 - With this option users can opt-in to CRD replace existing CRDs on Helm 11757 - install actions, which is not (yet) natively supported by Helm. 11758 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 11759 - enum: 11760 - - Skip 11761 - - Create 11762 - - CreateReplace 11763 - type: string 11764 - createNamespace: 11765 - description: |- 11766 - CreateNamespace tells the Helm install action to create the 11767 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 11768 - On uninstall, the namespace will not be garbage collected. 11769 - type: boolean 11770 - disableHooks: 11771 - description: DisableHooks prevents hooks from running during the Helm install action. 11772 - type: boolean 11773 - disableOpenAPIValidation: 11774 - description: |- 11775 - DisableOpenAPIValidation prevents the Helm install action from validating 11776 - rendered templates against the Kubernetes OpenAPI Schema. 11777 - type: boolean 11778 - disableWait: 11779 - description: |- 11780 - DisableWait disables the waiting for resources to be ready after a Helm 11781 - install has been performed. 11782 - type: boolean 11783 - disableWaitForJobs: 11784 - description: |- 11785 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 11786 - install has been performed. 11787 - type: boolean 11788 - remediation: 11789 - description: |- 11790 - Remediation holds the remediation configuration for when the Helm install 11791 - action for the HelmRelease fails. The default is to not perform any action. 11792 - properties: 11793 - ignoreTestFailures: 11794 - description: |- 11795 - IgnoreTestFailures tells the controller to skip remediation when the Helm 11796 - tests are run after an install action but fail. Defaults to 11797 - 'Test.IgnoreFailures'. 11798 - type: boolean 11799 - remediateLastFailure: 11800 - description: |- 11801 - RemediateLastFailure tells the controller to remediate the last failure, when 11802 - no retries remain. Defaults to 'false'. 11803 - type: boolean 11804 - retries: 11805 - description: |- 11806 - Retries is the number of retries that should be attempted on failures before 11807 - bailing. Remediation, using an uninstall, is performed between each attempt. 11808 - Defaults to '0', a negative integer equals to unlimited retries. 11809 - type: integer 11810 - type: object 11811 - replace: 11812 - description: |- 11813 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 11814 - if that name is a deleted release which remains in the history. 11815 - type: boolean 11816 - skipCRDs: 11817 - description: |- 11818 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 11819 - CRDs are installed if not already present. 11820 - 11821 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 11822 - type: boolean 11823 - timeout: 11824 - description: |- 11825 - Timeout is the time to wait for any individual Kubernetes operation (like 11826 - Jobs for hooks) during the performance of a Helm install action. Defaults to 11827 - 'HelmReleaseSpec.Timeout'. 11828 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11829 - type: string 11830 - type: object 11831 - interval: 11832 - description: |- 11833 - Interval at which to reconcile the Helm release. 11834 - This interval is approximate and may be subject to jitter to ensure 11835 - efficient use of resources. 11836 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11837 - type: string 11838 - kubeConfig: 11839 - description: |- 11840 - KubeConfig for reconciling the HelmRelease on a remote cluster. 11841 - When used in combination with HelmReleaseSpec.ServiceAccountName, 11842 - forces the controller to act on behalf of that Service Account at the 11843 - target cluster. 11844 - If the --default-service-account flag is set, its value will be used as 11845 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 11846 - is empty. 11847 - properties: 11848 - secretRef: 11849 - description: |- 11850 - SecretRef holds the name of a secret that contains a key with 11851 - the kubeconfig file as the value. If no key is set, the key will default 11852 - to 'value'. 11853 - It is recommended that the kubeconfig is self-contained, and the secret 11854 - is regularly updated if credentials such as a cloud-access-token expire. 11855 - Cloud specific `cmd-path` auth helpers will not function without adding 11856 - binaries and credentials to the Pod that is responsible for reconciling 11857 - Kubernetes resources. 11858 - properties: 11859 - key: 11860 - description: Key in the Secret, when not specified an implementation-specific 11861 - default key is used. 11862 - type: string 11863 - name: 11864 - description: Name of the Secret. 11865 - type: string 11866 - required: 11867 - - name 11868 - type: object 11869 - required: 11870 - - secretRef 11871 - type: object 11872 - maxHistory: 11873 - description: |- 11874 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 11875 - Use '0' for an unlimited number of revisions; defaults to '10'. 11876 - type: integer 11877 - persistentClient: 11878 - description: |- 11879 - PersistentClient tells the controller to use a persistent Kubernetes 11880 - client for this release. When enabled, the client will be reused for the 11881 - duration of the reconciliation, instead of being created and destroyed 11882 - for each (step of a) Helm action. 11883 - 11884 - This can improve performance, but may cause issues with some Helm charts 11885 - that for example do create Custom Resource Definitions during installation 11886 - outside Helm's CRD lifecycle hooks, which are then not observed to be 11887 - available by e.g. post-install hooks. 11888 - 11889 - If not set, it defaults to true. 11890 - type: boolean 11891 - postRenderers: 11892 - description: |- 11893 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 11894 - of their definition. 11895 - items: 11896 - description: PostRenderer contains a Helm PostRenderer specification. 11897 - properties: 11898 - kustomize: 11899 - description: Kustomization to apply as PostRenderer. 11900 - properties: 11901 - images: 11902 - description: |- 11903 - Images is a list of (image name, new name, new tag or digest) 11904 - for changing image names, tags or digests. This can also be achieved with a 11905 - patch, but this operator is simpler to specify. 11906 - items: 11907 - description: Image contains an image name, a new name, a new tag or 11908 - digest, which will replace the original name and tag. 11909 - properties: 11910 - digest: 11911 - description: |- 11912 - Digest is the value used to replace the original image tag. 11913 - If digest is present NewTag value is ignored. 11914 - type: string 11915 - name: 11916 - description: Name is a tag-less image name. 11917 - type: string 11918 - newName: 11919 - description: NewName is the value used to replace the original 11920 - name. 11921 - type: string 11922 - newTag: 11923 - description: NewTag is the value used to replace the original 11924 - tag. 11925 - type: string 11926 - required: 11927 - - name 11928 - type: object 11929 - type: array 11930 - patches: 11931 - description: |- 11932 - Strategic merge and JSON patches, defined as inline YAML objects, 11933 - capable of targeting objects based on kind, label and annotation selectors. 11934 - items: 11935 - description: |- 11936 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 11937 - be applied to. 11938 - properties: 11939 - patch: 11940 - description: |- 11941 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 11942 - an array of operation objects. 11943 - type: string 11944 - target: 11945 - description: Target points to the resources that the patch 11946 - document should be applied to. 11947 - properties: 11948 - annotationSelector: 11949 - description: |- 11950 - AnnotationSelector is a string that follows the label selection expression 11951 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11952 - It matches with the resource annotations. 11953 - type: string 11954 - group: 11955 - description: |- 11956 - Group is the API group to select resources from. 11957 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 11958 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11959 - type: string 11960 - kind: 11961 - description: |- 11962 - Kind of the API Group to select resources from. 11963 - Together with Group and Version it is capable of unambiguously 11964 - identifying and/or selecting resources. 11965 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11966 - type: string 11967 - labelSelector: 11968 - description: |- 11969 - LabelSelector is a string that follows the label selection expression 11970 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11971 - It matches with the resource labels. 11972 - type: string 11973 - name: 11974 - description: Name to match resources with. 11975 - type: string 11976 - namespace: 11977 - description: Namespace to select resources from. 11978 - type: string 11979 - version: 11980 - description: |- 11981 - Version of the API Group to select resources from. 11982 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 11983 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11984 - type: string 11985 - type: object 11986 - required: 11987 - - patch 11988 - type: object 11989 - type: array 11990 - patchesJson6902: 11991 - description: JSON 6902 patches, defined as inline YAML objects. 11992 - items: 11993 - description: JSON6902Patch contains a JSON6902 patch and the target 11994 - the patch should be applied to. 11995 - properties: 11996 - patch: 11997 - description: Patch contains the JSON6902 patch document with 11998 - an array of operation objects. 11999 - items: 12000 - description: |- 12001 - JSON6902 is a JSON6902 operation object. 12002 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 12003 - properties: 12004 - from: 12005 - description: |- 12006 - From contains a JSON-pointer value that references a location within the target document where the operation is 12007 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 12008 - type: string 12009 - op: 12010 - description: |- 12011 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 12012 - "test". 12013 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 12014 - enum: 12015 - - test 12016 - - remove 12017 - - add 12018 - - replace 12019 - - move 12020 - - copy 12021 - type: string 12022 - path: 12023 - description: |- 12024 - Path contains the JSON-pointer value that references a location within the target document where the operation 12025 - is performed. The meaning of the value depends on the value of Op. 12026 - type: string 12027 - value: 12028 - description: |- 12029 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 12030 - account by all operations. 12031 - x-kubernetes-preserve-unknown-fields: true 12032 - required: 12033 - - op 12034 - - path 12035 - type: object 12036 - type: array 12037 - target: 12038 - description: Target points to the resources that the patch 12039 - document should be applied to. 12040 - properties: 12041 - annotationSelector: 12042 - description: |- 12043 - AnnotationSelector is a string that follows the label selection expression 12044 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12045 - It matches with the resource annotations. 12046 - type: string 12047 - group: 12048 - description: |- 12049 - Group is the API group to select resources from. 12050 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12051 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12052 - type: string 12053 - kind: 12054 - description: |- 12055 - Kind of the API Group to select resources from. 12056 - Together with Group and Version it is capable of unambiguously 12057 - identifying and/or selecting resources. 12058 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12059 - type: string 12060 - labelSelector: 12061 - description: |- 12062 - LabelSelector is a string that follows the label selection expression 12063 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12064 - It matches with the resource labels. 12065 - type: string 12066 - name: 12067 - description: Name to match resources with. 12068 - type: string 12069 - namespace: 12070 - description: Namespace to select resources from. 12071 - type: string 12072 - version: 12073 - description: |- 12074 - Version of the API Group to select resources from. 12075 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12076 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12077 - type: string 12078 - type: object 12079 - required: 12080 - - patch 12081 - - target 12082 - type: object 12083 - type: array 12084 - patchesStrategicMerge: 12085 - description: Strategic merge patches, defined as inline YAML objects. 12086 - items: 12087 - x-kubernetes-preserve-unknown-fields: true 12088 - type: array 12089 - type: object 12090 - type: object 12091 - type: array 12092 - releaseName: 12093 - description: |- 12094 - ReleaseName used for the Helm release. Defaults to a composition of 12095 - '[TargetNamespace-]Name'. 12096 - maxLength: 53 12097 - minLength: 1 12098 - type: string 12099 - rollback: 12100 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 12101 - properties: 12102 - cleanupOnFail: 12103 - description: |- 12104 - CleanupOnFail allows deletion of new resources created during the Helm 12105 - rollback action when it fails. 12106 - type: boolean 12107 - disableHooks: 12108 - description: DisableHooks prevents hooks from running during the Helm rollback action. 12109 - type: boolean 12110 - disableWait: 12111 - description: |- 12112 - DisableWait disables the waiting for resources to be ready after a Helm 12113 - rollback has been performed. 12114 - type: boolean 12115 - disableWaitForJobs: 12116 - description: |- 12117 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12118 - rollback has been performed. 12119 - type: boolean 12120 - force: 12121 - description: Force forces resource updates through a replacement strategy. 12122 - type: boolean 12123 - recreate: 12124 - description: Recreate performs pod restarts for the resource if applicable. 12125 - type: boolean 12126 - timeout: 12127 - description: |- 12128 - Timeout is the time to wait for any individual Kubernetes operation (like 12129 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 12130 - 'HelmReleaseSpec.Timeout'. 12131 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12132 - type: string 12133 - type: object 12134 - serviceAccountName: 12135 - description: |- 12136 - The name of the Kubernetes service account to impersonate 12137 - when reconciling this HelmRelease. 12138 - type: string 12139 - storageNamespace: 12140 - description: |- 12141 - StorageNamespace used for the Helm storage. 12142 - Defaults to the namespace of the HelmRelease. 12143 - maxLength: 63 12144 - minLength: 1 12145 - type: string 12146 - suspend: 12147 - description: |- 12148 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 12149 - it does not apply to already started reconciliations. Defaults to false. 12150 - type: boolean 12151 - targetNamespace: 12152 - description: |- 12153 - TargetNamespace to target when performing operations for the HelmRelease. 12154 - Defaults to the namespace of the HelmRelease. 12155 - maxLength: 63 12156 - minLength: 1 12157 - type: string 12158 - test: 12159 - description: Test holds the configuration for Helm test actions for this HelmRelease. 12160 - properties: 12161 - enable: 12162 - description: |- 12163 - Enable enables Helm test actions for this HelmRelease after an Helm install 12164 - or upgrade action has been performed. 12165 - type: boolean 12166 - ignoreFailures: 12167 - description: |- 12168 - IgnoreFailures tells the controller to skip remediation when the Helm tests 12169 - are run but fail. Can be overwritten for tests run after install or upgrade 12170 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 12171 - type: boolean 12172 - timeout: 12173 - description: |- 12174 - Timeout is the time to wait for any individual Kubernetes operation during 12175 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 12176 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12177 - type: string 12178 - type: object 12179 - timeout: 12180 - description: |- 12181 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 12182 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 12183 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12184 - type: string 12185 - uninstall: 12186 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 12187 - properties: 12188 - deletionPropagation: 12189 - default: background 12190 - description: |- 12191 - DeletionPropagation specifies the deletion propagation policy when 12192 - a Helm uninstall is performed. 12193 - enum: 12194 - - background 12195 - - foreground 12196 - - orphan 12197 - type: string 12198 - disableHooks: 12199 - description: DisableHooks prevents hooks from running during the Helm rollback action. 12200 - type: boolean 12201 - disableWait: 12202 - description: |- 12203 - DisableWait disables waiting for all the resources to be deleted after 12204 - a Helm uninstall is performed. 12205 - type: boolean 12206 - keepHistory: 12207 - description: |- 12208 - KeepHistory tells Helm to remove all associated resources and mark the 12209 - release as deleted, but retain the release history. 12210 - type: boolean 12211 - timeout: 12212 - description: |- 12213 - Timeout is the time to wait for any individual Kubernetes operation (like 12214 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 12215 - to 'HelmReleaseSpec.Timeout'. 12216 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12217 - type: string 12218 - type: object 12219 - upgrade: 12220 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 12221 - properties: 12222 - cleanupOnFail: 12223 - description: |- 12224 - CleanupOnFail allows deletion of new resources created during the Helm 12225 - upgrade action when it fails. 12226 - type: boolean 12227 - crds: 12228 - description: |- 12229 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12230 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12231 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 12232 - CRDs are neither installed nor upgraded. 12233 - 12234 - Skip: do neither install nor replace (update) any CRDs. 12235 - 12236 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12237 - 12238 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12239 - but not deleted. 12240 - 12241 - By default, CRDs are not applied during Helm upgrade action. With this 12242 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 12243 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12244 - enum: 12245 - - Skip 12246 - - Create 12247 - - CreateReplace 12248 - type: string 12249 - disableHooks: 12250 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 12251 - type: boolean 12252 - disableOpenAPIValidation: 12253 - description: |- 12254 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 12255 - rendered templates against the Kubernetes OpenAPI Schema. 12256 - type: boolean 12257 - disableWait: 12258 - description: |- 12259 - DisableWait disables the waiting for resources to be ready after a Helm 12260 - upgrade has been performed. 12261 - type: boolean 12262 - disableWaitForJobs: 12263 - description: |- 12264 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12265 - upgrade has been performed. 12266 - type: boolean 12267 - force: 12268 - description: Force forces resource updates through a replacement strategy. 12269 - type: boolean 12270 - preserveValues: 12271 - description: |- 12272 - PreserveValues will make Helm reuse the last release's values and merge in 12273 - overrides from 'Values'. Setting this flag makes the HelmRelease 12274 - non-declarative. 12275 - type: boolean 12276 - remediation: 12277 - description: |- 12278 - Remediation holds the remediation configuration for when the Helm upgrade 12279 - action for the HelmRelease fails. The default is to not perform any action. 12280 - properties: 12281 - ignoreTestFailures: 12282 - description: |- 12283 - IgnoreTestFailures tells the controller to skip remediation when the Helm 12284 - tests are run after an upgrade action but fail. 12285 - Defaults to 'Test.IgnoreFailures'. 12286 - type: boolean 12287 - remediateLastFailure: 12288 - description: |- 12289 - RemediateLastFailure tells the controller to remediate the last failure, when 12290 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 12291 - type: boolean 12292 - retries: 12293 - description: |- 12294 - Retries is the number of retries that should be attempted on failures before 12295 - bailing. Remediation, using 'Strategy', is performed between each attempt. 12296 - Defaults to '0', a negative integer equals to unlimited retries. 12297 - type: integer 12298 - strategy: 12299 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 12300 - enum: 12301 - - rollback 12302 - - uninstall 12303 - type: string 12304 - type: object 12305 - timeout: 12306 - description: |- 12307 - Timeout is the time to wait for any individual Kubernetes operation (like 12308 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 12309 - 'HelmReleaseSpec.Timeout'. 12310 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12311 - type: string 12312 - type: object 12313 - values: 12314 - description: Values holds the values for this Helm release. 12315 - x-kubernetes-preserve-unknown-fields: true 12316 - valuesFrom: 12317 - description: |- 12318 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 12319 - and information about how they should be merged. 12320 - items: 12321 - description: |- 12322 - ValuesReference contains a reference to a resource containing Helm values, 12323 - and optionally the key they can be found at. 12324 - properties: 12325 - kind: 12326 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 12327 - enum: 12328 - - Secret 12329 - - ConfigMap 12330 - type: string 12331 - name: 12332 - description: |- 12333 - Name of the values referent. Should reside in the same namespace as the 12334 - referring resource. 12335 - maxLength: 253 12336 - minLength: 1 12337 - type: string 12338 - optional: 12339 - description: |- 12340 - Optional marks this ValuesReference as optional. When set, a not found error 12341 - for the values reference is ignored, but any ValuesKey, TargetPath or 12342 - transient error will still result in a reconciliation failure. 12343 - type: boolean 12344 - targetPath: 12345 - description: |- 12346 - TargetPath is the YAML dot notation path the value should be merged at. When 12347 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 12348 - which results in the values getting merged at the root. 12349 - maxLength: 250 12350 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 12351 - type: string 12352 - valuesKey: 12353 - description: |- 12354 - ValuesKey is the data key where the values.yaml or a specific value can be 12355 - found at. Defaults to 'values.yaml'. 12356 - When set, must be a valid Data Key, consisting of alphanumeric characters, 12357 - '-', '_' or '.'. 12358 - maxLength: 253 12359 - pattern: ^[\-._a-zA-Z0-9]+$ 12360 - type: string 12361 - required: 12362 - - kind 12363 - - name 12364 - type: object 12365 - type: array 12366 - required: 12367 - - chart 12368 - - interval 12369 - type: object 12370 - status: 12371 - default: 12372 - observedGeneration: -1 12373 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 12374 - properties: 12375 - conditions: 12376 - description: Conditions holds the conditions for the HelmRelease. 12377 - items: 12378 - description: Condition contains details for one aspect of the current state of this API 12379 - Resource. 12380 - properties: 12381 - lastTransitionTime: 12382 - description: |- 12383 - lastTransitionTime is the last time the condition transitioned from one status to another. 12384 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12385 - format: date-time 12386 - type: string 12387 - message: 12388 - description: |- 12389 - message is a human readable message indicating details about the transition. 12390 - This may be an empty string. 12391 - maxLength: 32768 12392 - type: string 12393 - observedGeneration: 12394 - description: |- 12395 - observedGeneration represents the .metadata.generation that the condition was set based upon. 12396 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12397 - with respect to the current state of the instance. 12398 - format: int64 12399 - minimum: 0 12400 - type: integer 12401 - reason: 12402 - description: |- 12403 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 12404 - Producers of specific condition types may define expected values and meanings for this field, 12405 - and whether the values are considered a guaranteed API. 12406 - The value should be a CamelCase string. 12407 - This field may not be empty. 12408 - maxLength: 1024 12409 - minLength: 1 12410 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12411 - type: string 12412 - status: 12413 - description: status of the condition, one of True, False, Unknown. 12414 - enum: 12415 - - "True" 12416 - - "False" 12417 - - Unknown 12418 - type: string 12419 - type: 12420 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 12421 - maxLength: 316 12422 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12423 - type: string 12424 - required: 12425 - - lastTransitionTime 12426 - - message 12427 - - reason 12428 - - status 12429 - - type 12430 - type: object 12431 - type: array 12432 - failures: 12433 - description: |- 12434 - Failures is the reconciliation failure count against the latest desired 12435 - state. It is reset after a successful reconciliation. 12436 - format: int64 12437 - type: integer 12438 - helmChart: 12439 - description: |- 12440 - HelmChart is the namespaced name of the HelmChart resource created by 12441 - the controller for the HelmRelease. 12442 - type: string 12443 - history: 12444 - description: |- 12445 - History holds the history of Helm releases performed for this HelmRelease 12446 - up to the last successfully completed release. 12447 - 12448 - Note: this field is provisional to the v2beta2 API, and not actively used 12449 - by v2beta1 HelmReleases. 12450 - items: 12451 - description: |- 12452 - Snapshot captures a point-in-time copy of the status information for a Helm release, 12453 - as managed by the controller. 12454 - properties: 12455 - apiVersion: 12456 - description: |- 12457 - APIVersion is the API version of the Snapshot. 12458 - Provisional: when the calculation method of the Digest field is changed, 12459 - this field will be used to distinguish between the old and new methods. 12460 - type: string 12461 - appVersion: 12462 - description: AppVersion is the chart app version of the release object in storage. 12463 - type: string 12464 - chartName: 12465 - description: ChartName is the chart name of the release object in storage. 12466 - type: string 12467 - chartVersion: 12468 - description: |- 12469 - ChartVersion is the chart version of the release object in 12470 - storage. 12471 - type: string 12472 - configDigest: 12473 - description: |- 12474 - ConfigDigest is the checksum of the config (better known as 12475 - "values") of the release object in storage. 12476 - It has the format of `<algo>:<checksum>`. 12477 - type: string 12478 - deleted: 12479 - description: Deleted is when the release was deleted. 12480 - format: date-time 12481 - type: string 12482 - digest: 12483 - description: |- 12484 - Digest is the checksum of the release object in storage. 12485 - It has the format of `<algo>:<checksum>`. 12486 - type: string 12487 - firstDeployed: 12488 - description: FirstDeployed is when the release was first deployed. 12489 - format: date-time 12490 - type: string 12491 - lastDeployed: 12492 - description: LastDeployed is when the release was last deployed. 12493 - format: date-time 12494 - type: string 12495 - name: 12496 - description: Name is the name of the release. 12497 - type: string 12498 - namespace: 12499 - description: Namespace is the namespace the release is deployed to. 12500 - type: string 12501 - ociDigest: 12502 - description: OCIDigest is the digest of the OCI artifact associated with the release. 12503 - type: string 12504 - status: 12505 - description: Status is the current state of the release. 12506 - type: string 12507 - testHooks: 12508 - additionalProperties: 12509 - description: |- 12510 - TestHookStatus holds the status information for a test hook as observed 12511 - to be run by the controller. 12512 - properties: 12513 - lastCompleted: 12514 - description: LastCompleted is the time the test hook last completed. 12515 - format: date-time 12516 - type: string 12517 - lastStarted: 12518 - description: LastStarted is the time the test hook was last started. 12519 - format: date-time 12520 - type: string 12521 - phase: 12522 - description: Phase the test hook was observed to be in. 12523 - type: string 12524 - type: object 12525 - description: |- 12526 - TestHooks is the list of test hooks for the release as observed to be 12527 - run by the controller. 12528 - type: object 12529 - version: 12530 - description: Version is the version of the release object in storage. 12531 - type: integer 12532 - required: 12533 - - chartName 12534 - - chartVersion 12535 - - configDigest 12536 - - digest 12537 - - firstDeployed 12538 - - lastDeployed 12539 - - name 12540 - - namespace 12541 - - status 12542 - - version 12543 - type: object 12544 - type: array 12545 - installFailures: 12546 - description: |- 12547 - InstallFailures is the install failure count against the latest desired 12548 - state. It is reset after a successful reconciliation. 12549 - format: int64 12550 - type: integer 12551 - lastAppliedRevision: 12552 - description: LastAppliedRevision is the revision of the last successfully applied source. 12553 - type: string 12554 - lastAttemptedConfigDigest: 12555 - description: |- 12556 - LastAttemptedConfigDigest is the digest for the config (better known as 12557 - "values") of the last reconciliation attempt. 12558 - 12559 - Note: this field is provisional to the v2beta2 API, and not actively used 12560 - by v2beta1 HelmReleases. 12561 - type: string 12562 - lastAttemptedGeneration: 12563 - description: |- 12564 - LastAttemptedGeneration is the last generation the controller attempted 12565 - to reconcile. 12566 - 12567 - Note: this field is provisional to the v2beta2 API, and not actively used 12568 - by v2beta1 HelmReleases. 12569 - format: int64 12570 - type: integer 12571 - lastAttemptedReleaseAction: 12572 - description: |- 12573 - LastAttemptedReleaseAction is the last release action performed for this 12574 - HelmRelease. It is used to determine the active remediation strategy. 12575 - 12576 - Note: this field is provisional to the v2beta2 API, and not actively used 12577 - by v2beta1 HelmReleases. 12578 - type: string 12579 - lastAttemptedRevision: 12580 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 12581 - type: string 12582 - lastAttemptedValuesChecksum: 12583 - description: |- 12584 - LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last 12585 - reconciliation attempt. 12586 - type: string 12587 - lastHandledForceAt: 12588 - description: |- 12589 - LastHandledForceAt holds the value of the most recent force request 12590 - value, so a change of the annotation value can be detected. 12591 - 12592 - Note: this field is provisional to the v2beta2 API, and not actively used 12593 - by v2beta1 HelmReleases. 12594 - type: string 12595 - lastHandledReconcileAt: 12596 - description: |- 12597 - LastHandledReconcileAt holds the value of the most recent 12598 - reconcile request value, so a change of the annotation value 12599 - can be detected. 12600 - type: string 12601 - lastHandledResetAt: 12602 - description: |- 12603 - LastHandledResetAt holds the value of the most recent reset request 12604 - value, so a change of the annotation value can be detected. 12605 - 12606 - Note: this field is provisional to the v2beta2 API, and not actively used 12607 - by v2beta1 HelmReleases. 12608 - type: string 12609 - lastReleaseRevision: 12610 - description: LastReleaseRevision is the revision of the last successful Helm release. 12611 - type: integer 12612 - observedGeneration: 12613 - description: ObservedGeneration is the last observed generation. 12614 - format: int64 12615 - type: integer 12616 - observedPostRenderersDigest: 12617 - description: |- 12618 - ObservedPostRenderersDigest is the digest for the post-renderers of 12619 - the last successful reconciliation attempt. 12620 - type: string 12621 - storageNamespace: 12622 - description: |- 12623 - StorageNamespace is the namespace of the Helm release storage for the 12624 - current release. 12625 - 12626 - Note: this field is provisional to the v2beta2 API, and not actively used 12627 - by v2beta1 HelmReleases. 12628 - type: string 12629 - upgradeFailures: 12630 - description: |- 12631 - UpgradeFailures is the upgrade failure count against the latest desired 12632 - state. It is reset after a successful reconciliation. 12633 - format: int64 12634 - type: integer 12635 - type: object 12636 - type: object 12637 - served: true 12638 - storage: false 12639 - subresources: 12640 - status: {} 12641 - - additionalPrinterColumns: 12642 - - jsonPath: .metadata.creationTimestamp 12643 - name: Age 12644 - type: date 12645 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 12646 - name: Ready 12647 - type: string 12648 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 12649 - name: Status 12650 - type: string 12651 - deprecated: true 12652 - deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 12653 - name: v2beta2 12654 - schema: 12655 - openAPIV3Schema: 12656 - description: HelmRelease is the Schema for the helmreleases API 12657 - properties: 12658 - apiVersion: 12659 - description: |- 12660 - APIVersion defines the versioned schema of this representation of an object. 12661 - Servers should convert recognized schemas to the latest internal value, and 12662 - may reject unrecognized values. 12663 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 12664 - type: string 12665 - kind: 12666 - description: |- 12667 - Kind is a string value representing the REST resource this object represents. 12668 - Servers may infer this from the endpoint the client submits requests to. 12669 - Cannot be updated. 12670 - In CamelCase. 12671 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 12672 - type: string 12673 - metadata: 12674 - type: object 12675 - spec: 12676 - description: HelmReleaseSpec defines the desired state of a Helm release. 12677 - properties: 12678 - chart: 12679 - description: |- 12680 - Chart defines the template of the v1beta2.HelmChart that should be created 12681 - for this HelmRelease. 12682 - properties: 12683 - metadata: 12684 - description: ObjectMeta holds the template for metadata like labels and annotations. 12685 - properties: 12686 - annotations: 12687 - additionalProperties: 12688 - type: string 12689 - description: |- 12690 - Annotations is an unstructured key value map stored with a resource that may be 12691 - set by external tools to store and retrieve arbitrary metadata. They are not 12692 - queryable and should be preserved when modifying objects. 12693 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 12694 - type: object 12695 - labels: 12696 - additionalProperties: 12697 - type: string 12698 - description: |- 12699 - Map of string keys and values that can be used to organize and categorize 12700 - (scope and select) objects. 12701 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 12702 - type: object 12703 - type: object 12704 - spec: 12705 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 12706 - properties: 12707 - chart: 12708 - description: The name or path the Helm chart is available at in the SourceRef. 12709 - maxLength: 2048 12710 - minLength: 1 12711 - type: string 12712 - ignoreMissingValuesFiles: 12713 - description: IgnoreMissingValuesFiles controls whether to silently ignore 12714 - missing values files rather than failing. 12715 - type: boolean 12716 - interval: 12717 - description: |- 12718 - Interval at which to check the v1.Source for updates. Defaults to 12719 - 'HelmReleaseSpec.Interval'. 12720 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12721 - type: string 12722 - reconcileStrategy: 12723 - default: ChartVersion 12724 - description: |- 12725 - Determines what enables the creation of a new artifact. Valid values are 12726 - ('ChartVersion', 'Revision'). 12727 - See the documentation of the values for an explanation on their behavior. 12728 - Defaults to ChartVersion when omitted. 12729 - enum: 12730 - - ChartVersion 12731 - - Revision 12732 - type: string 12733 - sourceRef: 12734 - description: The name and namespace of the v1.Source the chart is available 12735 - at. 12736 - properties: 12737 - apiVersion: 12738 - description: APIVersion of the referent. 12739 - type: string 12740 - kind: 12741 - description: Kind of the referent. 12742 - enum: 12743 - - HelmRepository 12744 - - GitRepository 12745 - - Bucket 12746 - type: string 12747 - name: 12748 - description: Name of the referent. 12749 - maxLength: 253 12750 - minLength: 1 12751 - type: string 12752 - namespace: 12753 - description: Namespace of the referent. 12754 - maxLength: 63 12755 - minLength: 1 12756 - type: string 12757 - required: 12758 - - kind 12759 - - name 12760 - type: object 12761 - valuesFile: 12762 - description: |- 12763 - Alternative values file to use as the default chart values, expected to 12764 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 12765 - for backwards compatibility the file defined here is merged before the 12766 - ValuesFiles items. Ignored when omitted. 12767 - type: string 12768 - valuesFiles: 12769 - description: |- 12770 - Alternative list of values files to use as the chart values (values.yaml 12771 - is not included by default), expected to be a relative path in the SourceRef. 12772 - Values files are merged in the order of this list with the last file overriding 12773 - the first. Ignored when omitted. 12774 - items: 12775 - type: string 12776 - type: array 12777 - verify: 12778 - description: |- 12779 - Verify contains the secret name containing the trusted public keys 12780 - used to verify the signature and specifies which provider to use to check 12781 - whether OCI image is authentic. 12782 - This field is only supported for OCI sources. 12783 - Chart dependencies, which are not bundled in the umbrella chart artifact, 12784 - are not verified. 12785 - properties: 12786 - provider: 12787 - default: cosign 12788 - description: Provider specifies the technology used to sign the OCI 12789 - Helm chart. 12790 - enum: 12791 - - cosign 12792 - - notation 12793 - type: string 12794 - secretRef: 12795 - description: |- 12796 - SecretRef specifies the Kubernetes Secret containing the 12797 - trusted public keys. 12798 - properties: 12799 - name: 12800 - description: Name of the referent. 12801 - type: string 12802 - required: 12803 - - name 12804 - type: object 12805 - required: 12806 - - provider 12807 - type: object 12808 - version: 12809 - default: '*' 12810 - description: |- 12811 - Version semver expression, ignored for charts from v1beta2.GitRepository and 12812 - v1beta2.Bucket sources. Defaults to latest when omitted. 12813 - type: string 12814 - required: 12815 - - chart 12816 - - sourceRef 12817 - type: object 12818 - required: 12819 - - spec 12820 - type: object 12821 - chartRef: 12822 - description: |- 12823 - ChartRef holds a reference to a source controller resource containing the 12824 - Helm chart artifact. 12825 - 12826 - Note: this field is provisional to the v2 API, and not actively used 12827 - by v2beta2 HelmReleases. 12828 - properties: 12829 - apiVersion: 12830 - description: APIVersion of the referent. 12831 - type: string 12832 - kind: 12833 - description: Kind of the referent. 12834 - enum: 12835 - - OCIRepository 12836 - - HelmChart 12837 - type: string 12838 - name: 12839 - description: Name of the referent. 12840 - maxLength: 253 12841 - minLength: 1 12842 - type: string 12843 - namespace: 12844 - description: |- 12845 - Namespace of the referent, defaults to the namespace of the Kubernetes 12846 - resource object that contains the reference. 12847 - maxLength: 63 12848 - minLength: 1 12849 - type: string 12850 - required: 12851 - - kind 12852 - - name 12853 - type: object 12854 - dependsOn: 12855 - description: |- 12856 - DependsOn may contain a meta.NamespacedObjectReference slice with 12857 - references to HelmRelease resources that must be ready before this HelmRelease 12858 - can be reconciled. 12859 - items: 12860 - description: |- 12861 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 12862 - namespace. 12863 - properties: 12864 - name: 12865 - description: Name of the referent. 12866 - type: string 12867 - namespace: 12868 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 12869 - type: string 12870 - required: 12871 - - name 12872 - type: object 12873 - type: array 12874 - driftDetection: 12875 - description: |- 12876 - DriftDetection holds the configuration for detecting and handling 12877 - differences between the manifest in the Helm storage and the resources 12878 - currently existing in the cluster. 12879 - properties: 12880 - ignore: 12881 - description: |- 12882 - Ignore contains a list of rules for specifying which changes to ignore 12883 - during diffing. 12884 - items: 12885 - description: |- 12886 - IgnoreRule defines a rule to selectively disregard specific changes during 12887 - the drift detection process. 12888 - properties: 12889 - paths: 12890 - description: |- 12891 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 12892 - consideration in a Kubernetes object. 12893 - items: 12894 - type: string 12895 - type: array 12896 - target: 12897 - description: |- 12898 - Target is a selector for specifying Kubernetes objects to which this 12899 - rule applies. 12900 - If Target is not set, the Paths will be ignored for all Kubernetes 12901 - objects within the manifest of the Helm release. 12902 - properties: 12903 - annotationSelector: 12904 - description: |- 12905 - AnnotationSelector is a string that follows the label selection expression 12906 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12907 - It matches with the resource annotations. 12908 - type: string 12909 - group: 12910 - description: |- 12911 - Group is the API group to select resources from. 12912 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12913 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12914 - type: string 12915 - kind: 12916 - description: |- 12917 - Kind of the API Group to select resources from. 12918 - Together with Group and Version it is capable of unambiguously 12919 - identifying and/or selecting resources. 12920 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12921 - type: string 12922 - labelSelector: 12923 - description: |- 12924 - LabelSelector is a string that follows the label selection expression 12925 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12926 - It matches with the resource labels. 12927 - type: string 12928 - name: 12929 - description: Name to match resources with. 12930 - type: string 12931 - namespace: 12932 - description: Namespace to select resources from. 12933 - type: string 12934 - version: 12935 - description: |- 12936 - Version of the API Group to select resources from. 12937 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12938 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12939 - type: string 12940 - type: object 12941 - required: 12942 - - paths 12943 - type: object 12944 - type: array 12945 - mode: 12946 - description: |- 12947 - Mode defines how differences should be handled between the Helm manifest 12948 - and the manifest currently applied to the cluster. 12949 - If not explicitly set, it defaults to DiffModeDisabled. 12950 - enum: 12951 - - enabled 12952 - - warn 12953 - - disabled 12954 - type: string 12955 - type: object 12956 - install: 12957 - description: Install holds the configuration for Helm install actions for this HelmRelease. 12958 - properties: 12959 - crds: 12960 - description: |- 12961 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12962 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12963 - `Create` or `CreateReplace`. Default is `Create` and if omitted 12964 - CRDs are installed but not updated. 12965 - 12966 - Skip: do neither install nor replace (update) any CRDs. 12967 - 12968 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12969 - 12970 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12971 - but not deleted. 12972 + insecure: 12973 + description: |- 12974 + Insecure allows connecting to a non-TLS HTTP container registry. 12975 + This field is only taken into account if the .spec.type field is set to 'oci'. 12976 + type: boolean 12977 + interval: 12978 + description: |- 12979 + Interval at which the HelmRepository URL is checked for updates. 12980 + This interval is approximate and may be subject to jitter to ensure 12981 + efficient use of resources. 12982 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12983 + type: string 12984 + passCredentials: 12985 + description: |- 12986 + PassCredentials allows the credentials from the SecretRef to be passed 12987 + on to a host that does not match the host as defined in URL. 12988 + This may be required if the host of the advertised chart URLs in the 12989 + index differ from the defined URL. 12990 + Enabling this should be done with caution, as it can potentially result 12991 + in credentials getting stolen in a MITM-attack. 12992 + type: boolean 12993 + provider: 12994 + default: generic 12995 + description: |- 12996 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 12997 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 12998 + When not specified, defaults to 'generic'. 12999 + enum: 13000 + - generic 13001 + - aws 13002 + - azure 13003 + - gcp 13004 + type: string 13005 + secretRef: 13006 + description: |- 13007 + SecretRef specifies the Secret containing authentication credentials 13008 + for the HelmRepository. 13009 + For HTTP/S basic auth the secret must contain 'username' and 'password' 13010 + fields. 13011 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 13012 + keys is deprecated. Please use `.spec.certSecretRef` instead. 13013 + properties: 13014 + name: 13015 + description: Name of the referent. 13016 + type: string 13017 + required: 13018 + - name 13019 + type: object 13020 + suspend: 13021 + description: |- 13022 + Suspend tells the controller to suspend the reconciliation of this 13023 + HelmRepository. 13024 + type: boolean 13025 + timeout: 13026 + description: |- 13027 + Timeout is used for the index fetch operation for an HTTPS helm repository, 13028 + and for remote OCI Repository operations like pulling for an OCI helm 13029 + chart by the associated HelmChart. 13030 + Its default value is 60s. 13031 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 13032 + type: string 13033 + type: 13034 + description: |- 13035 + Type of the HelmRepository. 13036 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 13037 + enum: 13038 + - default 13039 + - oci 13040 + type: string 13041 + url: 13042 + description: |- 13043 + URL of the Helm repository, a valid URL contains at least a protocol and 13044 + host. 13045 + pattern: ^(http|https|oci)://.*$ 13046 + type: string 13047 + required: 13048 + - url 13049 + type: object 13050 + status: 13051 + default: 13052 + observedGeneration: -1 13053 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 13054 + properties: 13055 + artifact: 13056 + description: Artifact represents the last successful HelmRepository 13057 + reconciliation. 13058 + properties: 13059 + digest: 13060 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 13061 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 13062 + type: string 13063 + lastUpdateTime: 13064 + description: |- 13065 + LastUpdateTime is the timestamp corresponding to the last update of the 13066 + Artifact. 13067 + format: date-time 13068 + type: string 13069 + metadata: 13070 + additionalProperties: 13071 + type: string 13072 + description: Metadata holds upstream information such as OCI annotations. 13073 + type: object 13074 + path: 13075 + description: |- 13076 + Path is the relative file path of the Artifact. It can be used to locate 13077 + the file in the root of the Artifact storage on the local file system of 13078 + the controller managing the Source. 13079 + type: string 13080 + revision: 13081 + description: |- 13082 + Revision is a human-readable identifier traceable in the origin source 13083 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 13084 + type: string 13085 + size: 13086 + description: Size is the number of bytes in the file. 13087 + format: int64 13088 + type: integer 13089 + url: 13090 + description: |- 13091 + URL is the HTTP address of the Artifact as exposed by the controller 13092 + managing the Source. It can be used to retrieve the Artifact for 13093 + consumption, e.g. by another controller applying the Artifact contents. 13094 + type: string 13095 + required: 13096 + - lastUpdateTime 13097 + - path 13098 + - revision 13099 + - url 13100 + type: object 13101 + conditions: 13102 + description: Conditions holds the conditions for the HelmRepository. 13103 + items: 13104 + description: Condition contains details for one aspect of the current 13105 + state of this API Resource. 13106 + properties: 13107 + lastTransitionTime: 13108 + description: |- 13109 + lastTransitionTime is the last time the condition transitioned from one status to another. 13110 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13111 + format: date-time 13112 + type: string 13113 + message: 13114 + description: |- 13115 + message is a human readable message indicating details about the transition. 13116 + This may be an empty string. 13117 + maxLength: 32768 13118 + type: string 13119 + observedGeneration: 13120 + description: |- 13121 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13122 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13123 + with respect to the current state of the instance. 13124 + format: int64 13125 + minimum: 0 13126 + type: integer 13127 + reason: 13128 + description: |- 13129 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13130 + Producers of specific condition types may define expected values and meanings for this field, 13131 + and whether the values are considered a guaranteed API. 13132 + The value should be a CamelCase string. 13133 + This field may not be empty. 13134 + maxLength: 1024 13135 + minLength: 1 13136 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13137 + type: string 13138 + status: 13139 + description: status of the condition, one of True, False, Unknown. 13140 + enum: 13141 + - "True" 13142 + - "False" 13143 + - Unknown 13144 + type: string 13145 + type: 13146 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13147 + maxLength: 316 13148 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13149 + type: string 13150 + required: 13151 + - lastTransitionTime 13152 + - message 13153 + - reason 13154 + - status 13155 + - type 13156 + type: object 13157 + type: array 13158 + lastHandledReconcileAt: 13159 + description: |- 13160 + LastHandledReconcileAt holds the value of the most recent 13161 + reconcile request value, so a change of the annotation value 13162 + can be detected. 13163 + type: string 13164 + observedGeneration: 13165 + description: |- 13166 + ObservedGeneration is the last observed generation of the HelmRepository 13167 + object. 13168 + format: int64 13169 + type: integer 13170 + url: 13171 + description: |- 13172 + URL is the dynamic fetch link for the latest Artifact. 13173 + It is provided on a "best effort" basis, and using the precise 13174 + HelmRepositoryStatus.Artifact data is recommended. 13175 + type: string 13176 + type: object 13177 + type: object 13178 + served: true 13179 + storage: true 13180 + subresources: 13181 + status: {} 13182 + - additionalPrinterColumns: 13183 + - jsonPath: .spec.url 13184 + name: URL 13185 + type: string 13186 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13187 + name: Ready 13188 + type: string 13189 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13190 + name: Status 13191 + type: string 13192 + - jsonPath: .metadata.creationTimestamp 13193 + name: Age 13194 + type: date 13195 + deprecated: true 13196 + deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1 13197 + name: v1beta1 13198 + schema: 13199 + openAPIV3Schema: 13200 + description: HelmRepository is the Schema for the helmrepositories API 13201 + properties: 13202 + apiVersion: 13203 + description: |- 13204 + APIVersion defines the versioned schema of this representation of an object. 13205 + Servers should convert recognized schemas to the latest internal value, and 13206 + may reject unrecognized values. 13207 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13208 + type: string 13209 + kind: 13210 + description: |- 13211 + Kind is a string value representing the REST resource this object represents. 13212 + Servers may infer this from the endpoint the client submits requests to. 13213 + Cannot be updated. 13214 + In CamelCase. 13215 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13216 + type: string 13217 + metadata: 13218 + type: object 13219 + spec: 13220 + description: HelmRepositorySpec defines the reference to a Helm repository. 13221 + properties: 13222 + accessFrom: 13223 + description: AccessFrom defines an Access Control List for allowing 13224 + cross-namespace references to this object. 13225 + properties: 13226 + namespaceSelectors: 13227 + description: |- 13228 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 13229 + Items in this list are evaluated using a logical OR operation. 13230 + items: 13231 + description: |- 13232 + NamespaceSelector selects the namespaces to which this ACL applies. 13233 + An empty map of MatchLabels matches all namespaces in a cluster. 13234 + properties: 13235 + matchLabels: 13236 + additionalProperties: 13237 + type: string 13238 + description: |- 13239 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 13240 + map is equivalent to an element of matchExpressions, whose key field is "key", the 13241 + operator is "In", and the values array contains only "value". The requirements are ANDed. 13242 + type: object 13243 + type: object 13244 + type: array 13245 + required: 13246 + - namespaceSelectors 13247 + type: object 13248 + interval: 13249 + description: The interval at which to check the upstream for updates. 13250 + type: string 13251 + passCredentials: 13252 + description: |- 13253 + PassCredentials allows the credentials from the SecretRef to be passed on to 13254 + a host that does not match the host as defined in URL. 13255 + This may be required if the host of the advertised chart URLs in the index 13256 + differ from the defined URL. 13257 + Enabling this should be done with caution, as it can potentially result in 13258 + credentials getting stolen in a MITM-attack. 13259 + type: boolean 13260 + secretRef: 13261 + description: |- 13262 + The name of the secret containing authentication credentials for the Helm 13263 + repository. 13264 + For HTTP/S basic auth the secret must contain username and 13265 + password fields. 13266 + For TLS the secret must contain a certFile and keyFile, and/or 13267 + caFile fields. 13268 + properties: 13269 + name: 13270 + description: Name of the referent. 13271 + type: string 13272 + required: 13273 + - name 13274 + type: object 13275 + suspend: 13276 + description: This flag tells the controller to suspend the reconciliation 13277 + of this source. 13278 + type: boolean 13279 + timeout: 13280 + default: 60s 13281 + description: The timeout of index downloading, defaults to 60s. 13282 + type: string 13283 + url: 13284 + description: The Helm repository URL, a valid URL contains at least 13285 + a protocol and host. 13286 + type: string 13287 + required: 13288 + - interval 13289 + - url 13290 + type: object 13291 + status: 13292 + default: 13293 + observedGeneration: -1 13294 + description: HelmRepositoryStatus defines the observed state of the HelmRepository. 13295 + properties: 13296 + artifact: 13297 + description: Artifact represents the output of the last successful 13298 + repository sync. 13299 + properties: 13300 + checksum: 13301 + description: Checksum is the SHA256 checksum of the artifact. 13302 + type: string 13303 + lastUpdateTime: 13304 + description: |- 13305 + LastUpdateTime is the timestamp corresponding to the last update of this 13306 + artifact. 13307 + format: date-time 13308 + type: string 13309 + path: 13310 + description: Path is the relative file path of this artifact. 13311 + type: string 13312 + revision: 13313 + description: |- 13314 + Revision is a human readable identifier traceable in the origin source 13315 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 13316 + chart version, etc. 13317 + type: string 13318 + url: 13319 + description: URL is the HTTP address of this artifact. 13320 + type: string 13321 + required: 13322 + - lastUpdateTime 13323 + - path 13324 + - url 13325 + type: object 13326 + conditions: 13327 + description: Conditions holds the conditions for the HelmRepository. 13328 + items: 13329 + description: Condition contains details for one aspect of the current 13330 + state of this API Resource. 13331 + properties: 13332 + lastTransitionTime: 13333 + description: |- 13334 + lastTransitionTime is the last time the condition transitioned from one status to another. 13335 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13336 + format: date-time 13337 + type: string 13338 + message: 13339 + description: |- 13340 + message is a human readable message indicating details about the transition. 13341 + This may be an empty string. 13342 + maxLength: 32768 13343 + type: string 13344 + observedGeneration: 13345 + description: |- 13346 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13347 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13348 + with respect to the current state of the instance. 13349 + format: int64 13350 + minimum: 0 13351 + type: integer 13352 + reason: 13353 + description: |- 13354 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13355 + Producers of specific condition types may define expected values and meanings for this field, 13356 + and whether the values are considered a guaranteed API. 13357 + The value should be a CamelCase string. 13358 + This field may not be empty. 13359 + maxLength: 1024 13360 + minLength: 1 13361 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13362 + type: string 13363 + status: 13364 + description: status of the condition, one of True, False, Unknown. 13365 + enum: 13366 + - "True" 13367 + - "False" 13368 + - Unknown 13369 + type: string 13370 + type: 13371 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13372 + maxLength: 316 13373 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13374 + type: string 13375 + required: 13376 + - lastTransitionTime 13377 + - message 13378 + - reason 13379 + - status 13380 + - type 13381 + type: object 13382 + type: array 13383 + lastHandledReconcileAt: 13384 + description: |- 13385 + LastHandledReconcileAt holds the value of the most recent 13386 + reconcile request value, so a change of the annotation value 13387 + can be detected. 13388 + type: string 13389 + observedGeneration: 13390 + description: ObservedGeneration is the last observed generation. 13391 + format: int64 13392 + type: integer 13393 + url: 13394 + description: URL is the download link for the last index fetched. 13395 + type: string 13396 + type: object 13397 + type: object 13398 + served: true 13399 + storage: false 13400 + subresources: 13401 + status: {} 13402 + - additionalPrinterColumns: 13403 + - jsonPath: .spec.url 13404 + name: URL 13405 + type: string 13406 + - jsonPath: .metadata.creationTimestamp 13407 + name: Age 13408 + type: date 13409 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13410 + name: Ready 13411 + type: string 13412 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13413 + name: Status 13414 + type: string 13415 + deprecated: true 13416 + deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 13417 + name: v1beta2 13418 + schema: 13419 + openAPIV3Schema: 13420 + description: HelmRepository is the Schema for the helmrepositories API. 13421 + properties: 13422 + apiVersion: 13423 + description: |- 13424 + APIVersion defines the versioned schema of this representation of an object. 13425 + Servers should convert recognized schemas to the latest internal value, and 13426 + may reject unrecognized values. 13427 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13428 + type: string 13429 + kind: 13430 + description: |- 13431 + Kind is a string value representing the REST resource this object represents. 13432 + Servers may infer this from the endpoint the client submits requests to. 13433 + Cannot be updated. 13434 + In CamelCase. 13435 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13436 + type: string 13437 + metadata: 13438 + type: object 13439 + spec: 13440 + description: |- 13441 + HelmRepositorySpec specifies the required configuration to produce an 13442 + Artifact for a Helm repository index YAML. 13443 + properties: 13444 + accessFrom: 13445 + description: |- 13446 + AccessFrom specifies an Access Control List for allowing cross-namespace 13447 + references to this object. 13448 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 13449 + properties: 13450 + namespaceSelectors: 13451 + description: |- 13452 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 13453 + Items in this list are evaluated using a logical OR operation. 13454 + items: 13455 + description: |- 13456 + NamespaceSelector selects the namespaces to which this ACL applies. 13457 + An empty map of MatchLabels matches all namespaces in a cluster. 13458 + properties: 13459 + matchLabels: 13460 + additionalProperties: 13461 + type: string 13462 + description: |- 13463 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 13464 + map is equivalent to an element of matchExpressions, whose key field is "key", the 13465 + operator is "In", and the values array contains only "value". The requirements are ANDed. 13466 + type: object 13467 + type: object 13468 + type: array 13469 + required: 13470 + - namespaceSelectors 13471 + type: object 13472 + certSecretRef: 13473 + description: |- 13474 + CertSecretRef can be given the name of a Secret containing 13475 + either or both of 13476 13477 - By default, CRDs are applied (installed) during Helm install action. 13478 - With this option users can opt in to CRD replace existing CRDs on Helm 13479 - install actions, which is not (yet) natively supported by Helm. 13480 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 13481 - enum: 13482 - - Skip 13483 - - Create 13484 - - CreateReplace 13485 - type: string 13486 - createNamespace: 13487 - description: |- 13488 - CreateNamespace tells the Helm install action to create the 13489 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 13490 - On uninstall, the namespace will not be garbage collected. 13491 - type: boolean 13492 - disableHooks: 13493 - description: DisableHooks prevents hooks from running during the Helm install action. 13494 - type: boolean 13495 - disableOpenAPIValidation: 13496 - description: |- 13497 - DisableOpenAPIValidation prevents the Helm install action from validating 13498 - rendered templates against the Kubernetes OpenAPI Schema. 13499 - type: boolean 13500 - disableWait: 13501 - description: |- 13502 - DisableWait disables the waiting for resources to be ready after a Helm 13503 - install has been performed. 13504 - type: boolean 13505 - disableWaitForJobs: 13506 - description: |- 13507 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 13508 - install has been performed. 13509 - type: boolean 13510 - remediation: 13511 - description: |- 13512 - Remediation holds the remediation configuration for when the Helm install 13513 - action for the HelmRelease fails. The default is to not perform any action. 13514 - properties: 13515 - ignoreTestFailures: 13516 - description: |- 13517 - IgnoreTestFailures tells the controller to skip remediation when the Helm 13518 - tests are run after an install action but fail. Defaults to 13519 - 'Test.IgnoreFailures'. 13520 - type: boolean 13521 - remediateLastFailure: 13522 - description: |- 13523 - RemediateLastFailure tells the controller to remediate the last failure, when 13524 - no retries remain. Defaults to 'false'. 13525 - type: boolean 13526 - retries: 13527 - description: |- 13528 - Retries is the number of retries that should be attempted on failures before 13529 - bailing. Remediation, using an uninstall, is performed between each attempt. 13530 - Defaults to '0', a negative integer equals to unlimited retries. 13531 - type: integer 13532 - type: object 13533 - replace: 13534 - description: |- 13535 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 13536 - if that name is a deleted release which remains in the history. 13537 - type: boolean 13538 - skipCRDs: 13539 - description: |- 13540 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 13541 - CRDs are installed if not already present. 13542 + - a PEM-encoded client certificate (`tls.crt`) and private 13543 + key (`tls.key`); 13544 + - a PEM-encoded CA certificate (`ca.crt`) 13545 13546 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 13547 - type: boolean 13548 - timeout: 13549 - description: |- 13550 - Timeout is the time to wait for any individual Kubernetes operation (like 13551 - Jobs for hooks) during the performance of a Helm install action. Defaults to 13552 - 'HelmReleaseSpec.Timeout'. 13553 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13554 - type: string 13555 - type: object 13556 - interval: 13557 - description: Interval at which to reconcile the Helm release. 13558 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13559 - type: string 13560 - kubeConfig: 13561 - description: |- 13562 - KubeConfig for reconciling the HelmRelease on a remote cluster. 13563 - When used in combination with HelmReleaseSpec.ServiceAccountName, 13564 - forces the controller to act on behalf of that Service Account at the 13565 - target cluster. 13566 - If the --default-service-account flag is set, its value will be used as 13567 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 13568 - is empty. 13569 - properties: 13570 - secretRef: 13571 - description: |- 13572 - SecretRef holds the name of a secret that contains a key with 13573 - the kubeconfig file as the value. If no key is set, the key will default 13574 - to 'value'. 13575 - It is recommended that the kubeconfig is self-contained, and the secret 13576 - is regularly updated if credentials such as a cloud-access-token expire. 13577 - Cloud specific `cmd-path` auth helpers will not function without adding 13578 - binaries and credentials to the Pod that is responsible for reconciling 13579 - Kubernetes resources. 13580 - properties: 13581 - key: 13582 - description: Key in the Secret, when not specified an implementation-specific 13583 - default key is used. 13584 - type: string 13585 - name: 13586 - description: Name of the Secret. 13587 - type: string 13588 - required: 13589 - - name 13590 - type: object 13591 - required: 13592 - - secretRef 13593 - type: object 13594 - maxHistory: 13595 - description: |- 13596 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 13597 - Use '0' for an unlimited number of revisions; defaults to '5'. 13598 - type: integer 13599 - persistentClient: 13600 - description: |- 13601 - PersistentClient tells the controller to use a persistent Kubernetes 13602 - client for this release. When enabled, the client will be reused for the 13603 - duration of the reconciliation, instead of being created and destroyed 13604 - for each (step of a) Helm action. 13605 + and whichever are supplied, will be used for connecting to the 13606 + registry. The client cert and key are useful if you are 13607 + authenticating with a certificate; the CA cert is useful if 13608 + you are using a self-signed server certificate. The Secret must 13609 + be of type `Opaque` or `kubernetes.io/tls`. 13610 13611 - This can improve performance, but may cause issues with some Helm charts 13612 - that for example do create Custom Resource Definitions during installation 13613 - outside Helm's CRD lifecycle hooks, which are then not observed to be 13614 - available by e.g. post-install hooks. 13615 + It takes precedence over the values specified in the Secret referred 13616 + to by `.spec.secretRef`. 13617 + properties: 13618 + name: 13619 + description: Name of the referent. 13620 + type: string 13621 + required: 13622 + - name 13623 + type: object 13624 + insecure: 13625 + description: |- 13626 + Insecure allows connecting to a non-TLS HTTP container registry. 13627 + This field is only taken into account if the .spec.type field is set to 'oci'. 13628 + type: boolean 13629 + interval: 13630 + description: |- 13631 + Interval at which the HelmRepository URL is checked for updates. 13632 + This interval is approximate and may be subject to jitter to ensure 13633 + efficient use of resources. 13634 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13635 + type: string 13636 + passCredentials: 13637 + description: |- 13638 + PassCredentials allows the credentials from the SecretRef to be passed 13639 + on to a host that does not match the host as defined in URL. 13640 + This may be required if the host of the advertised chart URLs in the 13641 + index differ from the defined URL. 13642 + Enabling this should be done with caution, as it can potentially result 13643 + in credentials getting stolen in a MITM-attack. 13644 + type: boolean 13645 + provider: 13646 + default: generic 13647 + description: |- 13648 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 13649 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 13650 + When not specified, defaults to 'generic'. 13651 + enum: 13652 + - generic 13653 + - aws 13654 + - azure 13655 + - gcp 13656 + type: string 13657 + secretRef: 13658 + description: |- 13659 + SecretRef specifies the Secret containing authentication credentials 13660 + for the HelmRepository. 13661 + For HTTP/S basic auth the secret must contain 'username' and 'password' 13662 + fields. 13663 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 13664 + keys is deprecated. Please use `.spec.certSecretRef` instead. 13665 + properties: 13666 + name: 13667 + description: Name of the referent. 13668 + type: string 13669 + required: 13670 + - name 13671 + type: object 13672 + suspend: 13673 + description: |- 13674 + Suspend tells the controller to suspend the reconciliation of this 13675 + HelmRepository. 13676 + type: boolean 13677 + timeout: 13678 + description: |- 13679 + Timeout is used for the index fetch operation for an HTTPS helm repository, 13680 + and for remote OCI Repository operations like pulling for an OCI helm 13681 + chart by the associated HelmChart. 13682 + Its default value is 60s. 13683 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 13684 + type: string 13685 + type: 13686 + description: |- 13687 + Type of the HelmRepository. 13688 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 13689 + enum: 13690 + - default 13691 + - oci 13692 + type: string 13693 + url: 13694 + description: |- 13695 + URL of the Helm repository, a valid URL contains at least a protocol and 13696 + host. 13697 + pattern: ^(http|https|oci)://.*$ 13698 + type: string 13699 + required: 13700 + - url 13701 + type: object 13702 + status: 13703 + default: 13704 + observedGeneration: -1 13705 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 13706 + properties: 13707 + artifact: 13708 + description: Artifact represents the last successful HelmRepository 13709 + reconciliation. 13710 + properties: 13711 + digest: 13712 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 13713 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 13714 + type: string 13715 + lastUpdateTime: 13716 + description: |- 13717 + LastUpdateTime is the timestamp corresponding to the last update of the 13718 + Artifact. 13719 + format: date-time 13720 + type: string 13721 + metadata: 13722 + additionalProperties: 13723 + type: string 13724 + description: Metadata holds upstream information such as OCI annotations. 13725 + type: object 13726 + path: 13727 + description: |- 13728 + Path is the relative file path of the Artifact. It can be used to locate 13729 + the file in the root of the Artifact storage on the local file system of 13730 + the controller managing the Source. 13731 + type: string 13732 + revision: 13733 + description: |- 13734 + Revision is a human-readable identifier traceable in the origin source 13735 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 13736 + type: string 13737 + size: 13738 + description: Size is the number of bytes in the file. 13739 + format: int64 13740 + type: integer 13741 + url: 13742 + description: |- 13743 + URL is the HTTP address of the Artifact as exposed by the controller 13744 + managing the Source. It can be used to retrieve the Artifact for 13745 + consumption, e.g. by another controller applying the Artifact contents. 13746 + type: string 13747 + required: 13748 + - lastUpdateTime 13749 + - path 13750 + - revision 13751 + - url 13752 + type: object 13753 + conditions: 13754 + description: Conditions holds the conditions for the HelmRepository. 13755 + items: 13756 + description: Condition contains details for one aspect of the current 13757 + state of this API Resource. 13758 + properties: 13759 + lastTransitionTime: 13760 + description: |- 13761 + lastTransitionTime is the last time the condition transitioned from one status to another. 13762 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13763 + format: date-time 13764 + type: string 13765 + message: 13766 + description: |- 13767 + message is a human readable message indicating details about the transition. 13768 + This may be an empty string. 13769 + maxLength: 32768 13770 + type: string 13771 + observedGeneration: 13772 + description: |- 13773 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13774 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13775 + with respect to the current state of the instance. 13776 + format: int64 13777 + minimum: 0 13778 + type: integer 13779 + reason: 13780 + description: |- 13781 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13782 + Producers of specific condition types may define expected values and meanings for this field, 13783 + and whether the values are considered a guaranteed API. 13784 + The value should be a CamelCase string. 13785 + This field may not be empty. 13786 + maxLength: 1024 13787 + minLength: 1 13788 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13789 + type: string 13790 + status: 13791 + description: status of the condition, one of True, False, Unknown. 13792 + enum: 13793 + - "True" 13794 + - "False" 13795 + - Unknown 13796 + type: string 13797 + type: 13798 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13799 + maxLength: 316 13800 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13801 + type: string 13802 + required: 13803 + - lastTransitionTime 13804 + - message 13805 + - reason 13806 + - status 13807 + - type 13808 + type: object 13809 + type: array 13810 + lastHandledReconcileAt: 13811 + description: |- 13812 + LastHandledReconcileAt holds the value of the most recent 13813 + reconcile request value, so a change of the annotation value 13814 + can be detected. 13815 + type: string 13816 + observedGeneration: 13817 + description: |- 13818 + ObservedGeneration is the last observed generation of the HelmRepository 13819 + object. 13820 + format: int64 13821 + type: integer 13822 + url: 13823 + description: |- 13824 + URL is the dynamic fetch link for the latest Artifact. 13825 + It is provided on a "best effort" basis, and using the precise 13826 + HelmRepositoryStatus.Artifact data is recommended. 13827 + type: string 13828 + type: object 13829 + type: object 13830 + served: true 13831 + storage: false 13832 + subresources: 13833 + status: {} 13834 +--- 13835 +apiVersion: apiextensions.k8s.io/v1 13836 +kind: CustomResourceDefinition 13837 +metadata: 13838 + annotations: 13839 + controller-gen.kubebuilder.io/version: v0.16.1 13840 + labels: 13841 + app.kubernetes.io/component: source-controller 13842 + app.kubernetes.io/instance: flux-system 13843 + app.kubernetes.io/part-of: flux 13844 + app.kubernetes.io/version: v2.6.4 13845 + name: ocirepositories.source.toolkit.fluxcd.io 13846 +spec: 13847 + group: source.toolkit.fluxcd.io 13848 + names: 13849 + kind: OCIRepository 13850 + listKind: OCIRepositoryList 13851 + plural: ocirepositories 13852 + shortNames: 13853 + - ocirepo 13854 + singular: ocirepository 13855 + scope: Namespaced 13856 + versions: 13857 + - additionalPrinterColumns: 13858 + - jsonPath: .spec.url 13859 + name: URL 13860 + type: string 13861 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13862 + name: Ready 13863 + type: string 13864 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13865 + name: Status 13866 + type: string 13867 + - jsonPath: .metadata.creationTimestamp 13868 + name: Age 13869 + type: date 13870 + name: v1 13871 + schema: 13872 + openAPIV3Schema: 13873 + description: OCIRepository is the Schema for the ocirepositories API 13874 + properties: 13875 + apiVersion: 13876 + description: |- 13877 + APIVersion defines the versioned schema of this representation of an object. 13878 + Servers should convert recognized schemas to the latest internal value, and 13879 + may reject unrecognized values. 13880 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13881 + type: string 13882 + kind: 13883 + description: |- 13884 + Kind is a string value representing the REST resource this object represents. 13885 + Servers may infer this from the endpoint the client submits requests to. 13886 + Cannot be updated. 13887 + In CamelCase. 13888 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13889 + type: string 13890 + metadata: 13891 + type: object 13892 + spec: 13893 + description: OCIRepositorySpec defines the desired state of OCIRepository 13894 + properties: 13895 + certSecretRef: 13896 + description: |- 13897 + CertSecretRef can be given the name of a Secret containing 13898 + either or both of 13899 13900 - If not set, it defaults to true. 13901 - type: boolean 13902 - postRenderers: 13903 - description: |- 13904 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 13905 - of their definition. 13906 - items: 13907 - description: PostRenderer contains a Helm PostRenderer specification. 13908 - properties: 13909 - kustomize: 13910 - description: Kustomization to apply as PostRenderer. 13911 - properties: 13912 - images: 13913 - description: |- 13914 - Images is a list of (image name, new name, new tag or digest) 13915 - for changing image names, tags or digests. This can also be achieved with a 13916 - patch, but this operator is simpler to specify. 13917 - items: 13918 - description: Image contains an image name, a new name, a new tag or 13919 - digest, which will replace the original name and tag. 13920 - properties: 13921 - digest: 13922 - description: |- 13923 - Digest is the value used to replace the original image tag. 13924 - If digest is present NewTag value is ignored. 13925 - type: string 13926 - name: 13927 - description: Name is a tag-less image name. 13928 - type: string 13929 - newName: 13930 - description: NewName is the value used to replace the original 13931 - name. 13932 - type: string 13933 - newTag: 13934 - description: NewTag is the value used to replace the original 13935 - tag. 13936 - type: string 13937 - required: 13938 - - name 13939 - type: object 13940 - type: array 13941 - patches: 13942 - description: |- 13943 - Strategic merge and JSON patches, defined as inline YAML objects, 13944 - capable of targeting objects based on kind, label and annotation selectors. 13945 - items: 13946 - description: |- 13947 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 13948 - be applied to. 13949 - properties: 13950 - patch: 13951 - description: |- 13952 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 13953 - an array of operation objects. 13954 - type: string 13955 - target: 13956 - description: Target points to the resources that the patch 13957 - document should be applied to. 13958 - properties: 13959 - annotationSelector: 13960 - description: |- 13961 - AnnotationSelector is a string that follows the label selection expression 13962 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13963 - It matches with the resource annotations. 13964 - type: string 13965 - group: 13966 - description: |- 13967 - Group is the API group to select resources from. 13968 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 13969 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13970 - type: string 13971 - kind: 13972 - description: |- 13973 - Kind of the API Group to select resources from. 13974 - Together with Group and Version it is capable of unambiguously 13975 - identifying and/or selecting resources. 13976 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13977 - type: string 13978 - labelSelector: 13979 - description: |- 13980 - LabelSelector is a string that follows the label selection expression 13981 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13982 - It matches with the resource labels. 13983 - type: string 13984 - name: 13985 - description: Name to match resources with. 13986 - type: string 13987 - namespace: 13988 - description: Namespace to select resources from. 13989 - type: string 13990 - version: 13991 - description: |- 13992 - Version of the API Group to select resources from. 13993 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 13994 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13995 - type: string 13996 - type: object 13997 - required: 13998 - - patch 13999 - type: object 14000 - type: array 14001 - patchesJson6902: 14002 - description: |- 14003 - JSON 6902 patches, defined as inline YAML objects. 14004 - Deprecated: use Patches instead. 14005 - items: 14006 - description: JSON6902Patch contains a JSON6902 patch and the target 14007 - the patch should be applied to. 14008 - properties: 14009 - patch: 14010 - description: Patch contains the JSON6902 patch document with 14011 - an array of operation objects. 14012 - items: 14013 - description: |- 14014 - JSON6902 is a JSON6902 operation object. 14015 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 14016 - properties: 14017 - from: 14018 - description: |- 14019 - From contains a JSON-pointer value that references a location within the target document where the operation is 14020 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 14021 - type: string 14022 - op: 14023 - description: |- 14024 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 14025 - "test". 14026 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 14027 - enum: 14028 - - test 14029 - - remove 14030 - - add 14031 - - replace 14032 - - move 14033 - - copy 14034 - type: string 14035 - path: 14036 - description: |- 14037 - Path contains the JSON-pointer value that references a location within the target document where the operation 14038 - is performed. The meaning of the value depends on the value of Op. 14039 - type: string 14040 - value: 14041 - description: |- 14042 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 14043 - account by all operations. 14044 - x-kubernetes-preserve-unknown-fields: true 14045 - required: 14046 - - op 14047 - - path 14048 - type: object 14049 - type: array 14050 - target: 14051 - description: Target points to the resources that the patch 14052 - document should be applied to. 14053 - properties: 14054 - annotationSelector: 14055 - description: |- 14056 - AnnotationSelector is a string that follows the label selection expression 14057 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14058 - It matches with the resource annotations. 14059 - type: string 14060 - group: 14061 - description: |- 14062 - Group is the API group to select resources from. 14063 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14064 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14065 - type: string 14066 - kind: 14067 - description: |- 14068 - Kind of the API Group to select resources from. 14069 - Together with Group and Version it is capable of unambiguously 14070 - identifying and/or selecting resources. 14071 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14072 - type: string 14073 - labelSelector: 14074 - description: |- 14075 - LabelSelector is a string that follows the label selection expression 14076 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14077 - It matches with the resource labels. 14078 - type: string 14079 - name: 14080 - description: Name to match resources with. 14081 - type: string 14082 - namespace: 14083 - description: Namespace to select resources from. 14084 - type: string 14085 - version: 14086 - description: |- 14087 - Version of the API Group to select resources from. 14088 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14089 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14090 - type: string 14091 - type: object 14092 - required: 14093 - - patch 14094 - - target 14095 - type: object 14096 - type: array 14097 - patchesStrategicMerge: 14098 - description: |- 14099 - Strategic merge patches, defined as inline YAML objects. 14100 - Deprecated: use Patches instead. 14101 - items: 14102 - x-kubernetes-preserve-unknown-fields: true 14103 - type: array 14104 - type: object 14105 - type: object 14106 - type: array 14107 - releaseName: 14108 - description: |- 14109 - ReleaseName used for the Helm release. Defaults to a composition of 14110 - '[TargetNamespace-]Name'. 14111 - maxLength: 53 14112 - minLength: 1 14113 - type: string 14114 - rollback: 14115 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 14116 - properties: 14117 - cleanupOnFail: 14118 - description: |- 14119 - CleanupOnFail allows deletion of new resources created during the Helm 14120 - rollback action when it fails. 14121 - type: boolean 14122 - disableHooks: 14123 - description: DisableHooks prevents hooks from running during the Helm rollback action. 14124 - type: boolean 14125 - disableWait: 14126 - description: |- 14127 - DisableWait disables the waiting for resources to be ready after a Helm 14128 - rollback has been performed. 14129 - type: boolean 14130 - disableWaitForJobs: 14131 - description: |- 14132 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 14133 - rollback has been performed. 14134 - type: boolean 14135 - force: 14136 - description: Force forces resource updates through a replacement strategy. 14137 - type: boolean 14138 - recreate: 14139 - description: Recreate performs pod restarts for the resource if applicable. 14140 - type: boolean 14141 - timeout: 14142 - description: |- 14143 - Timeout is the time to wait for any individual Kubernetes operation (like 14144 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 14145 - 'HelmReleaseSpec.Timeout'. 14146 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14147 - type: string 14148 - type: object 14149 - serviceAccountName: 14150 - description: |- 14151 - The name of the Kubernetes service account to impersonate 14152 - when reconciling this HelmRelease. 14153 - maxLength: 253 14154 - minLength: 1 14155 - type: string 14156 - storageNamespace: 14157 - description: |- 14158 - StorageNamespace used for the Helm storage. 14159 - Defaults to the namespace of the HelmRelease. 14160 - maxLength: 63 14161 - minLength: 1 14162 - type: string 14163 - suspend: 14164 - description: |- 14165 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 14166 - it does not apply to already started reconciliations. Defaults to false. 14167 - type: boolean 14168 - targetNamespace: 14169 - description: |- 14170 - TargetNamespace to target when performing operations for the HelmRelease. 14171 - Defaults to the namespace of the HelmRelease. 14172 - maxLength: 63 14173 - minLength: 1 14174 - type: string 14175 - test: 14176 - description: Test holds the configuration for Helm test actions for this HelmRelease. 14177 - properties: 14178 - enable: 14179 - description: |- 14180 - Enable enables Helm test actions for this HelmRelease after an Helm install 14181 - or upgrade action has been performed. 14182 - type: boolean 14183 - filters: 14184 - description: Filters is a list of tests to run or exclude from running. 14185 - items: 14186 - description: Filter holds the configuration for individual Helm test filters. 14187 - properties: 14188 - exclude: 14189 - description: Exclude specifies whether the named test should be excluded. 14190 - type: boolean 14191 - name: 14192 - description: Name is the name of the test. 14193 - maxLength: 253 14194 - minLength: 1 14195 - type: string 14196 - required: 14197 - - name 14198 - type: object 14199 - type: array 14200 - ignoreFailures: 14201 - description: |- 14202 - IgnoreFailures tells the controller to skip remediation when the Helm tests 14203 - are run but fail. Can be overwritten for tests run after install or upgrade 14204 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 14205 - type: boolean 14206 - timeout: 14207 - description: |- 14208 - Timeout is the time to wait for any individual Kubernetes operation during 14209 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 14210 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14211 - type: string 14212 - type: object 14213 - timeout: 14214 - description: |- 14215 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 14216 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 14217 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14218 - type: string 14219 - uninstall: 14220 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 14221 - properties: 14222 - deletionPropagation: 14223 - default: background 14224 - description: |- 14225 - DeletionPropagation specifies the deletion propagation policy when 14226 - a Helm uninstall is performed. 14227 - enum: 14228 - - background 14229 - - foreground 14230 - - orphan 14231 - type: string 14232 - disableHooks: 14233 - description: DisableHooks prevents hooks from running during the Helm rollback action. 14234 - type: boolean 14235 - disableWait: 14236 - description: |- 14237 - DisableWait disables waiting for all the resources to be deleted after 14238 - a Helm uninstall is performed. 14239 - type: boolean 14240 - keepHistory: 14241 - description: |- 14242 - KeepHistory tells Helm to remove all associated resources and mark the 14243 - release as deleted, but retain the release history. 14244 - type: boolean 14245 - timeout: 14246 - description: |- 14247 - Timeout is the time to wait for any individual Kubernetes operation (like 14248 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 14249 - to 'HelmReleaseSpec.Timeout'. 14250 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14251 - type: string 14252 - type: object 14253 - upgrade: 14254 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 14255 - properties: 14256 - cleanupOnFail: 14257 - description: |- 14258 - CleanupOnFail allows deletion of new resources created during the Helm 14259 - upgrade action when it fails. 14260 - type: boolean 14261 - crds: 14262 - description: |- 14263 - CRDs upgrade CRDs from the Helm Chart's crds directory according 14264 - to the CRD upgrade policy provided here. Valid values are `Skip`, 14265 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 14266 - CRDs are neither installed nor upgraded. 14267 + - a PEM-encoded client certificate (`tls.crt`) and private 14268 + key (`tls.key`); 14269 + - a PEM-encoded CA certificate (`ca.crt`) 14270 14271 - Skip: do neither install nor replace (update) any CRDs. 14272 + and whichever are supplied, will be used for connecting to the 14273 + registry. The client cert and key are useful if you are 14274 + authenticating with a certificate; the CA cert is useful if 14275 + you are using a self-signed server certificate. The Secret must 14276 + be of type `Opaque` or `kubernetes.io/tls`. 14277 + properties: 14278 + name: 14279 + description: Name of the referent. 14280 + type: string 14281 + required: 14282 + - name 14283 + type: object 14284 + ignore: 14285 + description: |- 14286 + Ignore overrides the set of excluded patterns in the .sourceignore format 14287 + (which is the same as .gitignore). If not provided, a default will be used, 14288 + consult the documentation for your version to find out what those are. 14289 + type: string 14290 + insecure: 14291 + description: Insecure allows connecting to a non-TLS HTTP container 14292 + registry. 14293 + type: boolean 14294 + interval: 14295 + description: |- 14296 + Interval at which the OCIRepository URL is checked for updates. 14297 + This interval is approximate and may be subject to jitter to ensure 14298 + efficient use of resources. 14299 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14300 + type: string 14301 + layerSelector: 14302 + description: |- 14303 + LayerSelector specifies which layer should be extracted from the OCI artifact. 14304 + When not specified, the first layer found in the artifact is selected. 14305 + properties: 14306 + mediaType: 14307 + description: |- 14308 + MediaType specifies the OCI media type of the layer 14309 + which should be extracted from the OCI Artifact. The 14310 + first layer matching this type is selected. 14311 + type: string 14312 + operation: 14313 + description: |- 14314 + Operation specifies how the selected layer should be processed. 14315 + By default, the layer compressed content is extracted to storage. 14316 + When the operation is set to 'copy', the layer compressed content 14317 + is persisted to storage as it is. 14318 + enum: 14319 + - extract 14320 + - copy 14321 + type: string 14322 + type: object 14323 + provider: 14324 + default: generic 14325 + description: |- 14326 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 14327 + When not specified, defaults to 'generic'. 14328 + enum: 14329 + - generic 14330 + - aws 14331 + - azure 14332 + - gcp 14333 + type: string 14334 + proxySecretRef: 14335 + description: |- 14336 + ProxySecretRef specifies the Secret containing the proxy configuration 14337 + to use while communicating with the container registry. 14338 + properties: 14339 + name: 14340 + description: Name of the referent. 14341 + type: string 14342 + required: 14343 + - name 14344 + type: object 14345 + ref: 14346 + description: |- 14347 + The OCI reference to pull and monitor for changes, 14348 + defaults to the latest tag. 14349 + properties: 14350 + digest: 14351 + description: |- 14352 + Digest is the image digest to pull, takes precedence over SemVer. 14353 + The value should be in the format 'sha256:<HASH>'. 14354 + type: string 14355 + semver: 14356 + description: |- 14357 + SemVer is the range of tags to pull selecting the latest within 14358 + the range, takes precedence over Tag. 14359 + type: string 14360 + semverFilter: 14361 + description: SemverFilter is a regex pattern to filter the tags 14362 + within the SemVer range. 14363 + type: string 14364 + tag: 14365 + description: Tag is the image tag to pull, defaults to latest. 14366 + type: string 14367 + type: object 14368 + secretRef: 14369 + description: |- 14370 + SecretRef contains the secret name containing the registry login 14371 + credentials to resolve image metadata. 14372 + The secret must be of type kubernetes.io/dockerconfigjson. 14373 + properties: 14374 + name: 14375 + description: Name of the referent. 14376 + type: string 14377 + required: 14378 + - name 14379 + type: object 14380 + serviceAccountName: 14381 + description: |- 14382 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 14383 + the image pull if the service account has attached pull secrets. For more information: 14384 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 14385 + type: string 14386 + suspend: 14387 + description: This flag tells the controller to suspend the reconciliation 14388 + of this source. 14389 + type: boolean 14390 + timeout: 14391 + default: 60s 14392 + description: The timeout for remote OCI Repository operations like 14393 + pulling, defaults to 60s. 14394 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 14395 + type: string 14396 + url: 14397 + description: |- 14398 + URL is a reference to an OCI artifact repository hosted 14399 + on a remote container registry. 14400 + pattern: ^oci://.*$ 14401 + type: string 14402 + verify: 14403 + description: |- 14404 + Verify contains the secret name containing the trusted public keys 14405 + used to verify the signature and specifies which provider to use to check 14406 + whether OCI image is authentic. 14407 + properties: 14408 + matchOIDCIdentity: 14409 + description: |- 14410 + MatchOIDCIdentity specifies the identity matching criteria to use 14411 + while verifying an OCI artifact which was signed using Cosign keyless 14412 + signing. The artifact's identity is deemed to be verified if any of the 14413 + specified matchers match against the identity. 14414 + items: 14415 + description: |- 14416 + OIDCIdentityMatch specifies options for verifying the certificate identity, 14417 + i.e. the issuer and the subject of the certificate. 14418 + properties: 14419 + issuer: 14420 + description: |- 14421 + Issuer specifies the regex pattern to match against to verify 14422 + the OIDC issuer in the Fulcio certificate. The pattern must be a 14423 + valid Go regular expression. 14424 + type: string 14425 + subject: 14426 + description: |- 14427 + Subject specifies the regex pattern to match against to verify 14428 + the identity subject in the Fulcio certificate. The pattern must 14429 + be a valid Go regular expression. 14430 + type: string 14431 + required: 14432 + - issuer 14433 + - subject 14434 + type: object 14435 + type: array 14436 + provider: 14437 + default: cosign 14438 + description: Provider specifies the technology used to sign the 14439 + OCI Artifact. 14440 + enum: 14441 + - cosign 14442 + - notation 14443 + type: string 14444 + secretRef: 14445 + description: |- 14446 + SecretRef specifies the Kubernetes Secret containing the 14447 + trusted public keys. 14448 + properties: 14449 + name: 14450 + description: Name of the referent. 14451 + type: string 14452 + required: 14453 + - name 14454 + type: object 14455 + required: 14456 + - provider 14457 + type: object 14458 + required: 14459 + - interval 14460 + - url 14461 + type: object 14462 + status: 14463 + default: 14464 + observedGeneration: -1 14465 + description: OCIRepositoryStatus defines the observed state of OCIRepository 14466 + properties: 14467 + artifact: 14468 + description: Artifact represents the output of the last successful 14469 + OCI Repository sync. 14470 + properties: 14471 + digest: 14472 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 14473 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 14474 + type: string 14475 + lastUpdateTime: 14476 + description: |- 14477 + LastUpdateTime is the timestamp corresponding to the last update of the 14478 + Artifact. 14479 + format: date-time 14480 + type: string 14481 + metadata: 14482 + additionalProperties: 14483 + type: string 14484 + description: Metadata holds upstream information such as OCI annotations. 14485 + type: object 14486 + path: 14487 + description: |- 14488 + Path is the relative file path of the Artifact. It can be used to locate 14489 + the file in the root of the Artifact storage on the local file system of 14490 + the controller managing the Source. 14491 + type: string 14492 + revision: 14493 + description: |- 14494 + Revision is a human-readable identifier traceable in the origin source 14495 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 14496 + type: string 14497 + size: 14498 + description: Size is the number of bytes in the file. 14499 + format: int64 14500 + type: integer 14501 + url: 14502 + description: |- 14503 + URL is the HTTP address of the Artifact as exposed by the controller 14504 + managing the Source. It can be used to retrieve the Artifact for 14505 + consumption, e.g. by another controller applying the Artifact contents. 14506 + type: string 14507 + required: 14508 + - lastUpdateTime 14509 + - path 14510 + - revision 14511 + - url 14512 + type: object 14513 + conditions: 14514 + description: Conditions holds the conditions for the OCIRepository. 14515 + items: 14516 + description: Condition contains details for one aspect of the current 14517 + state of this API Resource. 14518 + properties: 14519 + lastTransitionTime: 14520 + description: |- 14521 + lastTransitionTime is the last time the condition transitioned from one status to another. 14522 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 14523 + format: date-time 14524 + type: string 14525 + message: 14526 + description: |- 14527 + message is a human readable message indicating details about the transition. 14528 + This may be an empty string. 14529 + maxLength: 32768 14530 + type: string 14531 + observedGeneration: 14532 + description: |- 14533 + observedGeneration represents the .metadata.generation that the condition was set based upon. 14534 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 14535 + with respect to the current state of the instance. 14536 + format: int64 14537 + minimum: 0 14538 + type: integer 14539 + reason: 14540 + description: |- 14541 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 14542 + Producers of specific condition types may define expected values and meanings for this field, 14543 + and whether the values are considered a guaranteed API. 14544 + The value should be a CamelCase string. 14545 + This field may not be empty. 14546 + maxLength: 1024 14547 + minLength: 1 14548 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 14549 + type: string 14550 + status: 14551 + description: status of the condition, one of True, False, Unknown. 14552 + enum: 14553 + - "True" 14554 + - "False" 14555 + - Unknown 14556 + type: string 14557 + type: 14558 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 14559 + maxLength: 316 14560 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 14561 + type: string 14562 + required: 14563 + - lastTransitionTime 14564 + - message 14565 + - reason 14566 + - status 14567 + - type 14568 + type: object 14569 + type: array 14570 + lastHandledReconcileAt: 14571 + description: |- 14572 + LastHandledReconcileAt holds the value of the most recent 14573 + reconcile request value, so a change of the annotation value 14574 + can be detected. 14575 + type: string 14576 + observedGeneration: 14577 + description: ObservedGeneration is the last observed generation. 14578 + format: int64 14579 + type: integer 14580 + observedIgnore: 14581 + description: |- 14582 + ObservedIgnore is the observed exclusion patterns used for constructing 14583 + the source artifact. 14584 + type: string 14585 + observedLayerSelector: 14586 + description: |- 14587 + ObservedLayerSelector is the observed layer selector used for constructing 14588 + the source artifact. 14589 + properties: 14590 + mediaType: 14591 + description: |- 14592 + MediaType specifies the OCI media type of the layer 14593 + which should be extracted from the OCI Artifact. The 14594 + first layer matching this type is selected. 14595 + type: string 14596 + operation: 14597 + description: |- 14598 + Operation specifies how the selected layer should be processed. 14599 + By default, the layer compressed content is extracted to storage. 14600 + When the operation is set to 'copy', the layer compressed content 14601 + is persisted to storage as it is. 14602 + enum: 14603 + - extract 14604 + - copy 14605 + type: string 14606 + type: object 14607 + url: 14608 + description: URL is the download link for the artifact output of the 14609 + last OCI Repository sync. 14610 + type: string 14611 + type: object 14612 + type: object 14613 + served: true 14614 + storage: true 14615 + subresources: 14616 + status: {} 14617 + - additionalPrinterColumns: 14618 + - jsonPath: .spec.url 14619 + name: URL 14620 + type: string 14621 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 14622 + name: Ready 14623 + type: string 14624 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 14625 + name: Status 14626 + type: string 14627 + - jsonPath: .metadata.creationTimestamp 14628 + name: Age 14629 + type: date 14630 + deprecated: true 14631 + deprecationWarning: v1beta2 OCIRepository is deprecated, upgrade to v1 14632 + name: v1beta2 14633 + schema: 14634 + openAPIV3Schema: 14635 + description: OCIRepository is the Schema for the ocirepositories API 14636 + properties: 14637 + apiVersion: 14638 + description: |- 14639 + APIVersion defines the versioned schema of this representation of an object. 14640 + Servers should convert recognized schemas to the latest internal value, and 14641 + may reject unrecognized values. 14642 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14643 + type: string 14644 + kind: 14645 + description: |- 14646 + Kind is a string value representing the REST resource this object represents. 14647 + Servers may infer this from the endpoint the client submits requests to. 14648 + Cannot be updated. 14649 + In CamelCase. 14650 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14651 + type: string 14652 + metadata: 14653 + type: object 14654 + spec: 14655 + description: OCIRepositorySpec defines the desired state of OCIRepository 14656 + properties: 14657 + certSecretRef: 14658 + description: |- 14659 + CertSecretRef can be given the name of a Secret containing 14660 + either or both of 14661 14662 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 14663 + - a PEM-encoded client certificate (`tls.crt`) and private 14664 + key (`tls.key`); 14665 + - a PEM-encoded CA certificate (`ca.crt`) 14666 14667 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 14668 - but not deleted. 14669 + and whichever are supplied, will be used for connecting to the 14670 + registry. The client cert and key are useful if you are 14671 + authenticating with a certificate; the CA cert is useful if 14672 + you are using a self-signed server certificate. The Secret must 14673 + be of type `Opaque` or `kubernetes.io/tls`. 14674 14675 - By default, CRDs are not applied during Helm upgrade action. With this 14676 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 14677 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 14678 - enum: 14679 - - Skip 14680 - - Create 14681 - - CreateReplace 14682 - type: string 14683 - disableHooks: 14684 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 14685 - type: boolean 14686 - disableOpenAPIValidation: 14687 - description: |- 14688 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 14689 - rendered templates against the Kubernetes OpenAPI Schema. 14690 - type: boolean 14691 - disableWait: 14692 - description: |- 14693 - DisableWait disables the waiting for resources to be ready after a Helm 14694 - upgrade has been performed. 14695 - type: boolean 14696 - disableWaitForJobs: 14697 - description: |- 14698 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 14699 - upgrade has been performed. 14700 - type: boolean 14701 - force: 14702 - description: Force forces resource updates through a replacement strategy. 14703 - type: boolean 14704 - preserveValues: 14705 - description: |- 14706 - PreserveValues will make Helm reuse the last release's values and merge in 14707 - overrides from 'Values'. Setting this flag makes the HelmRelease 14708 - non-declarative. 14709 - type: boolean 14710 - remediation: 14711 - description: |- 14712 - Remediation holds the remediation configuration for when the Helm upgrade 14713 - action for the HelmRelease fails. The default is to not perform any action. 14714 - properties: 14715 - ignoreTestFailures: 14716 - description: |- 14717 - IgnoreTestFailures tells the controller to skip remediation when the Helm 14718 - tests are run after an upgrade action but fail. 14719 - Defaults to 'Test.IgnoreFailures'. 14720 - type: boolean 14721 - remediateLastFailure: 14722 - description: |- 14723 - RemediateLastFailure tells the controller to remediate the last failure, when 14724 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 14725 - type: boolean 14726 - retries: 14727 - description: |- 14728 - Retries is the number of retries that should be attempted on failures before 14729 - bailing. Remediation, using 'Strategy', is performed between each attempt. 14730 - Defaults to '0', a negative integer equals to unlimited retries. 14731 - type: integer 14732 - strategy: 14733 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 14734 - enum: 14735 - - rollback 14736 - - uninstall 14737 - type: string 14738 - type: object 14739 - timeout: 14740 - description: |- 14741 - Timeout is the time to wait for any individual Kubernetes operation (like 14742 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 14743 - 'HelmReleaseSpec.Timeout'. 14744 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14745 - type: string 14746 - type: object 14747 - values: 14748 - description: Values holds the values for this Helm release. 14749 - x-kubernetes-preserve-unknown-fields: true 14750 - valuesFrom: 14751 - description: |- 14752 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 14753 - and information about how they should be merged. 14754 - items: 14755 - description: |- 14756 - ValuesReference contains a reference to a resource containing Helm values, 14757 - and optionally the key they can be found at. 14758 - properties: 14759 - kind: 14760 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 14761 - enum: 14762 - - Secret 14763 - - ConfigMap 14764 - type: string 14765 - name: 14766 - description: |- 14767 - Name of the values referent. Should reside in the same namespace as the 14768 - referring resource. 14769 - maxLength: 253 14770 - minLength: 1 14771 - type: string 14772 - optional: 14773 - description: |- 14774 - Optional marks this ValuesReference as optional. When set, a not found error 14775 - for the values reference is ignored, but any ValuesKey, TargetPath or 14776 - transient error will still result in a reconciliation failure. 14777 - type: boolean 14778 - targetPath: 14779 - description: |- 14780 - TargetPath is the YAML dot notation path the value should be merged at. When 14781 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 14782 - which results in the values getting merged at the root. 14783 - maxLength: 250 14784 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 14785 - type: string 14786 - valuesKey: 14787 - description: |- 14788 - ValuesKey is the data key where the values.yaml or a specific value can be 14789 - found at. Defaults to 'values.yaml'. 14790 - maxLength: 253 14791 - pattern: ^[\-._a-zA-Z0-9]+$ 14792 - type: string 14793 - required: 14794 - - kind 14795 - - name 14796 - type: object 14797 - type: array 14798 - required: 14799 - - interval 14800 - type: object 14801 - x-kubernetes-validations: 14802 - - message: either chart or chartRef must be set 14803 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 14804 + Note: Support for the `caFile`, `certFile` and `keyFile` keys have 14805 + been deprecated. 14806 + properties: 14807 + name: 14808 + description: Name of the referent. 14809 + type: string 14810 + required: 14811 + - name 14812 + type: object 14813 + ignore: 14814 + description: |- 14815 + Ignore overrides the set of excluded patterns in the .sourceignore format 14816 + (which is the same as .gitignore). If not provided, a default will be used, 14817 + consult the documentation for your version to find out what those are. 14818 + type: string 14819 + insecure: 14820 + description: Insecure allows connecting to a non-TLS HTTP container 14821 + registry. 14822 + type: boolean 14823 + interval: 14824 + description: |- 14825 + Interval at which the OCIRepository URL is checked for updates. 14826 + This interval is approximate and may be subject to jitter to ensure 14827 + efficient use of resources. 14828 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14829 + type: string 14830 + layerSelector: 14831 + description: |- 14832 + LayerSelector specifies which layer should be extracted from the OCI artifact. 14833 + When not specified, the first layer found in the artifact is selected. 14834 + properties: 14835 + mediaType: 14836 + description: |- 14837 + MediaType specifies the OCI media type of the layer 14838 + which should be extracted from the OCI Artifact. The 14839 + first layer matching this type is selected. 14840 + type: string 14841 + operation: 14842 + description: |- 14843 + Operation specifies how the selected layer should be processed. 14844 + By default, the layer compressed content is extracted to storage. 14845 + When the operation is set to 'copy', the layer compressed content 14846 + is persisted to storage as it is. 14847 + enum: 14848 + - extract 14849 + - copy 14850 + type: string 14851 + type: object 14852 + provider: 14853 + default: generic 14854 + description: |- 14855 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 14856 + When not specified, defaults to 'generic'. 14857 + enum: 14858 + - generic 14859 + - aws 14860 + - azure 14861 + - gcp 14862 + type: string 14863 + proxySecretRef: 14864 + description: |- 14865 + ProxySecretRef specifies the Secret containing the proxy configuration 14866 + to use while communicating with the container registry. 14867 + properties: 14868 + name: 14869 + description: Name of the referent. 14870 + type: string 14871 + required: 14872 + - name 14873 + type: object 14874 + ref: 14875 + description: |- 14876 + The OCI reference to pull and monitor for changes, 14877 + defaults to the latest tag. 14878 + properties: 14879 + digest: 14880 + description: |- 14881 + Digest is the image digest to pull, takes precedence over SemVer. 14882 + The value should be in the format 'sha256:<HASH>'. 14883 + type: string 14884 + semver: 14885 + description: |- 14886 + SemVer is the range of tags to pull selecting the latest within 14887 + the range, takes precedence over Tag. 14888 + type: string 14889 + semverFilter: 14890 + description: SemverFilter is a regex pattern to filter the tags 14891 + within the SemVer range. 14892 + type: string 14893 + tag: 14894 + description: Tag is the image tag to pull, defaults to latest. 14895 + type: string 14896 + type: object 14897 + secretRef: 14898 + description: |- 14899 + SecretRef contains the secret name containing the registry login 14900 + credentials to resolve image metadata. 14901 + The secret must be of type kubernetes.io/dockerconfigjson. 14902 + properties: 14903 + name: 14904 + description: Name of the referent. 14905 + type: string 14906 + required: 14907 + - name 14908 + type: object 14909 + serviceAccountName: 14910 + description: |- 14911 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 14912 + the image pull if the service account has attached pull secrets. For more information: 14913 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 14914 + type: string 14915 + suspend: 14916 + description: This flag tells the controller to suspend the reconciliation 14917 + of this source. 14918 + type: boolean 14919 + timeout: 14920 + default: 60s 14921 + description: The timeout for remote OCI Repository operations like 14922 + pulling, defaults to 60s. 14923 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 14924 + type: string 14925 + url: 14926 + description: |- 14927 + URL is a reference to an OCI artifact repository hosted 14928 + on a remote container registry. 14929 + pattern: ^oci://.*$ 14930 + type: string 14931 + verify: 14932 + description: |- 14933 + Verify contains the secret name containing the trusted public keys 14934 + used to verify the signature and specifies which provider to use to check 14935 + whether OCI image is authentic. 14936 + properties: 14937 + matchOIDCIdentity: 14938 + description: |- 14939 + MatchOIDCIdentity specifies the identity matching criteria to use 14940 + while verifying an OCI artifact which was signed using Cosign keyless 14941 + signing. The artifact's identity is deemed to be verified if any of the 14942 + specified matchers match against the identity. 14943 + items: 14944 + description: |- 14945 + OIDCIdentityMatch specifies options for verifying the certificate identity, 14946 + i.e. the issuer and the subject of the certificate. 14947 + properties: 14948 + issuer: 14949 + description: |- 14950 + Issuer specifies the regex pattern to match against to verify 14951 + the OIDC issuer in the Fulcio certificate. The pattern must be a 14952 + valid Go regular expression. 14953 + type: string 14954 + subject: 14955 + description: |- 14956 + Subject specifies the regex pattern to match against to verify 14957 + the identity subject in the Fulcio certificate. The pattern must 14958 + be a valid Go regular expression. 14959 + type: string 14960 + required: 14961 + - issuer 14962 + - subject 14963 + type: object 14964 + type: array 14965 + provider: 14966 + default: cosign 14967 + description: Provider specifies the technology used to sign the 14968 + OCI Artifact. 14969 + enum: 14970 + - cosign 14971 + - notation 14972 + type: string 14973 + secretRef: 14974 + description: |- 14975 + SecretRef specifies the Kubernetes Secret containing the 14976 + trusted public keys. 14977 + properties: 14978 + name: 14979 + description: Name of the referent. 14980 + type: string 14981 + required: 14982 + - name 14983 + type: object 14984 + required: 14985 + - provider 14986 + type: object 14987 + required: 14988 + - interval 14989 + - url 14990 + type: object 14991 + status: 14992 + default: 14993 + observedGeneration: -1 14994 + description: OCIRepositoryStatus defines the observed state of OCIRepository 14995 + properties: 14996 + artifact: 14997 + description: Artifact represents the output of the last successful 14998 + OCI Repository sync. 14999 + properties: 15000 + digest: 15001 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 15002 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 15003 + type: string 15004 + lastUpdateTime: 15005 + description: |- 15006 + LastUpdateTime is the timestamp corresponding to the last update of the 15007 + Artifact. 15008 + format: date-time 15009 + type: string 15010 + metadata: 15011 + additionalProperties: 15012 + type: string 15013 + description: Metadata holds upstream information such as OCI annotations. 15014 + type: object 15015 + path: 15016 + description: |- 15017 + Path is the relative file path of the Artifact. It can be used to locate 15018 + the file in the root of the Artifact storage on the local file system of 15019 + the controller managing the Source. 15020 + type: string 15021 + revision: 15022 + description: |- 15023 + Revision is a human-readable identifier traceable in the origin source 15024 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 15025 + type: string 15026 + size: 15027 + description: Size is the number of bytes in the file. 15028 + format: int64 15029 + type: integer 15030 + url: 15031 + description: |- 15032 + URL is the HTTP address of the Artifact as exposed by the controller 15033 + managing the Source. It can be used to retrieve the Artifact for 15034 + consumption, e.g. by another controller applying the Artifact contents. 15035 + type: string 15036 + required: 15037 + - lastUpdateTime 15038 + - path 15039 + - revision 15040 + - url 15041 + type: object 15042 + conditions: 15043 + description: Conditions holds the conditions for the OCIRepository. 15044 + items: 15045 + description: Condition contains details for one aspect of the current 15046 + state of this API Resource. 15047 + properties: 15048 + lastTransitionTime: 15049 + description: |- 15050 + lastTransitionTime is the last time the condition transitioned from one status to another. 15051 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 15052 + format: date-time 15053 + type: string 15054 + message: 15055 + description: |- 15056 + message is a human readable message indicating details about the transition. 15057 + This may be an empty string. 15058 + maxLength: 32768 15059 + type: string 15060 + observedGeneration: 15061 + description: |- 15062 + observedGeneration represents the .metadata.generation that the condition was set based upon. 15063 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 15064 + with respect to the current state of the instance. 15065 + format: int64 15066 + minimum: 0 15067 + type: integer 15068 + reason: 15069 + description: |- 15070 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 15071 + Producers of specific condition types may define expected values and meanings for this field, 15072 + and whether the values are considered a guaranteed API. 15073 + The value should be a CamelCase string. 15074 + This field may not be empty. 15075 + maxLength: 1024 15076 + minLength: 1 15077 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 15078 + type: string 15079 status: 15080 - default: 15081 - observedGeneration: -1 15082 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 15083 - properties: 15084 - conditions: 15085 - description: Conditions holds the conditions for the HelmRelease. 15086 - items: 15087 - description: Condition contains details for one aspect of the current state of this API 15088 - Resource. 15089 - properties: 15090 - lastTransitionTime: 15091 - description: |- 15092 - lastTransitionTime is the last time the condition transitioned from one status to another. 15093 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 15094 - format: date-time 15095 - type: string 15096 - message: 15097 - description: |- 15098 - message is a human readable message indicating details about the transition. 15099 - This may be an empty string. 15100 - maxLength: 32768 15101 - type: string 15102 - observedGeneration: 15103 - description: |- 15104 - observedGeneration represents the .metadata.generation that the condition was set based upon. 15105 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 15106 - with respect to the current state of the instance. 15107 - format: int64 15108 - minimum: 0 15109 - type: integer 15110 - reason: 15111 - description: |- 15112 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 15113 - Producers of specific condition types may define expected values and meanings for this field, 15114 - and whether the values are considered a guaranteed API. 15115 - The value should be a CamelCase string. 15116 - This field may not be empty. 15117 - maxLength: 1024 15118 - minLength: 1 15119 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 15120 - type: string 15121 - status: 15122 - description: status of the condition, one of True, False, Unknown. 15123 - enum: 15124 - - "True" 15125 - - "False" 15126 - - Unknown 15127 - type: string 15128 - type: 15129 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 15130 - maxLength: 316 15131 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 15132 - type: string 15133 - required: 15134 - - lastTransitionTime 15135 - - message 15136 - - reason 15137 - - status 15138 - - type 15139 - type: object 15140 - type: array 15141 - failures: 15142 - description: |- 15143 - Failures is the reconciliation failure count against the latest desired 15144 - state. It is reset after a successful reconciliation. 15145 - format: int64 15146 - type: integer 15147 - helmChart: 15148 - description: |- 15149 - HelmChart is the namespaced name of the HelmChart resource created by 15150 - the controller for the HelmRelease. 15151 - type: string 15152 - history: 15153 - description: |- 15154 - History holds the history of Helm releases performed for this HelmRelease 15155 - up to the last successfully completed release. 15156 - items: 15157 - description: |- 15158 - Snapshot captures a point-in-time copy of the status information for a Helm release, 15159 - as managed by the controller. 15160 - properties: 15161 - apiVersion: 15162 - description: |- 15163 - APIVersion is the API version of the Snapshot. 15164 - Provisional: when the calculation method of the Digest field is changed, 15165 - this field will be used to distinguish between the old and new methods. 15166 - type: string 15167 - appVersion: 15168 - description: AppVersion is the chart app version of the release object in storage. 15169 - type: string 15170 - chartName: 15171 - description: ChartName is the chart name of the release object in storage. 15172 - type: string 15173 - chartVersion: 15174 - description: |- 15175 - ChartVersion is the chart version of the release object in 15176 - storage. 15177 - type: string 15178 - configDigest: 15179 - description: |- 15180 - ConfigDigest is the checksum of the config (better known as 15181 - "values") of the release object in storage. 15182 - It has the format of `<algo>:<checksum>`. 15183 - type: string 15184 - deleted: 15185 - description: Deleted is when the release was deleted. 15186 - format: date-time 15187 - type: string 15188 - digest: 15189 - description: |- 15190 - Digest is the checksum of the release object in storage. 15191 - It has the format of `<algo>:<checksum>`. 15192 - type: string 15193 - firstDeployed: 15194 - description: FirstDeployed is when the release was first deployed. 15195 - format: date-time 15196 - type: string 15197 - lastDeployed: 15198 - description: LastDeployed is when the release was last deployed. 15199 - format: date-time 15200 - type: string 15201 - name: 15202 - description: Name is the name of the release. 15203 - type: string 15204 - namespace: 15205 - description: Namespace is the namespace the release is deployed to. 15206 - type: string 15207 - ociDigest: 15208 - description: OCIDigest is the digest of the OCI artifact associated with the release. 15209 - type: string 15210 - status: 15211 - description: Status is the current state of the release. 15212 - type: string 15213 - testHooks: 15214 - additionalProperties: 15215 - description: |- 15216 - TestHookStatus holds the status information for a test hook as observed 15217 - to be run by the controller. 15218 - properties: 15219 - lastCompleted: 15220 - description: LastCompleted is the time the test hook last completed. 15221 - format: date-time 15222 - type: string 15223 - lastStarted: 15224 - description: LastStarted is the time the test hook was last started. 15225 - format: date-time 15226 - type: string 15227 - phase: 15228 - description: Phase the test hook was observed to be in. 15229 - type: string 15230 - type: object 15231 - description: |- 15232 - TestHooks is the list of test hooks for the release as observed to be 15233 - run by the controller. 15234 - type: object 15235 - version: 15236 - description: Version is the version of the release object in storage. 15237 - type: integer 15238 - required: 15239 - - chartName 15240 - - chartVersion 15241 - - configDigest 15242 - - digest 15243 - - firstDeployed 15244 - - lastDeployed 15245 - - name 15246 - - namespace 15247 - - status 15248 - - version 15249 - type: object 15250 - type: array 15251 - installFailures: 15252 - description: |- 15253 - InstallFailures is the install failure count against the latest desired 15254 - state. It is reset after a successful reconciliation. 15255 - format: int64 15256 - type: integer 15257 - lastAppliedRevision: 15258 - description: |- 15259 - LastAppliedRevision is the revision of the last successfully applied 15260 - source. 15261 - Deprecated: the revision can now be found in the History. 15262 - type: string 15263 - lastAttemptedConfigDigest: 15264 - description: |- 15265 - LastAttemptedConfigDigest is the digest for the config (better known as 15266 - "values") of the last reconciliation attempt. 15267 - type: string 15268 - lastAttemptedGeneration: 15269 - description: |- 15270 - LastAttemptedGeneration is the last generation the controller attempted 15271 - to reconcile. 15272 - format: int64 15273 - type: integer 15274 - lastAttemptedReleaseAction: 15275 - description: |- 15276 - LastAttemptedReleaseAction is the last release action performed for this 15277 - HelmRelease. It is used to determine the active remediation strategy. 15278 - enum: 15279 - - install 15280 - - upgrade 15281 - type: string 15282 - lastAttemptedRevision: 15283 - description: |- 15284 - LastAttemptedRevision is the Source revision of the last reconciliation 15285 - attempt. For OCIRepository sources, the 12 first characters of the digest are 15286 - appended to the chart version e.g. "1.2.3+1234567890ab". 15287 - type: string 15288 - lastAttemptedRevisionDigest: 15289 - description: |- 15290 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 15291 - This is only set for OCIRepository sources. 15292 - type: string 15293 - lastAttemptedValuesChecksum: 15294 - description: |- 15295 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 15296 - reconciliation attempt. 15297 - Deprecated: Use LastAttemptedConfigDigest instead. 15298 - type: string 15299 - lastHandledForceAt: 15300 - description: |- 15301 - LastHandledForceAt holds the value of the most recent force request 15302 - value, so a change of the annotation value can be detected. 15303 - type: string 15304 - lastHandledReconcileAt: 15305 - description: |- 15306 - LastHandledReconcileAt holds the value of the most recent 15307 - reconcile request value, so a change of the annotation value 15308 - can be detected. 15309 - type: string 15310 - lastHandledResetAt: 15311 - description: |- 15312 - LastHandledResetAt holds the value of the most recent reset request 15313 - value, so a change of the annotation value can be detected. 15314 - type: string 15315 - lastReleaseRevision: 15316 - description: |- 15317 - LastReleaseRevision is the revision of the last successful Helm release. 15318 - Deprecated: Use History instead. 15319 - type: integer 15320 - observedGeneration: 15321 - description: ObservedGeneration is the last observed generation. 15322 - format: int64 15323 - type: integer 15324 - observedPostRenderersDigest: 15325 - description: |- 15326 - ObservedPostRenderersDigest is the digest for the post-renderers of 15327 - the last successful reconciliation attempt. 15328 - type: string 15329 - storageNamespace: 15330 - description: |- 15331 - StorageNamespace is the namespace of the Helm release storage for the 15332 - current release. 15333 - maxLength: 63 15334 - minLength: 1 15335 - type: string 15336 - upgradeFailures: 15337 - description: |- 15338 - UpgradeFailures is the upgrade failure count against the latest desired 15339 - state. It is reset after a successful reconciliation. 15340 - format: int64 15341 - type: integer 15342 - type: object 15343 + description: status of the condition, one of True, False, Unknown. 15344 + enum: 15345 + - "True" 15346 + - "False" 15347 + - Unknown 15348 + type: string 15349 + type: 15350 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 15351 + maxLength: 316 15352 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 15353 + type: string 15354 + required: 15355 + - lastTransitionTime 15356 + - message 15357 + - reason 15358 + - status 15359 + - type 15360 + type: object 15361 + type: array 15362 + contentConfigChecksum: 15363 + description: |- 15364 + ContentConfigChecksum is a checksum of all the configurations related to 15365 + the content of the source artifact: 15366 + - .spec.ignore 15367 + - .spec.layerSelector 15368 + observed in .status.observedGeneration version of the object. This can 15369 + be used to determine if the content configuration has changed and the 15370 + artifact needs to be rebuilt. 15371 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 15372 + 15373 + Deprecated: Replaced with explicit fields for observed artifact content 15374 + config in the status. 15375 + type: string 15376 + lastHandledReconcileAt: 15377 + description: |- 15378 + LastHandledReconcileAt holds the value of the most recent 15379 + reconcile request value, so a change of the annotation value 15380 + can be detected. 15381 + type: string 15382 + observedGeneration: 15383 + description: ObservedGeneration is the last observed generation. 15384 + format: int64 15385 + type: integer 15386 + observedIgnore: 15387 + description: |- 15388 + ObservedIgnore is the observed exclusion patterns used for constructing 15389 + the source artifact. 15390 + type: string 15391 + observedLayerSelector: 15392 + description: |- 15393 + ObservedLayerSelector is the observed layer selector used for constructing 15394 + the source artifact. 15395 + properties: 15396 + mediaType: 15397 + description: |- 15398 + MediaType specifies the OCI media type of the layer 15399 + which should be extracted from the OCI Artifact. The 15400 + first layer matching this type is selected. 15401 + type: string 15402 + operation: 15403 + description: |- 15404 + Operation specifies how the selected layer should be processed. 15405 + By default, the layer compressed content is extracted to storage. 15406 + When the operation is set to 'copy', the layer compressed content 15407 + is persisted to storage as it is. 15408 + enum: 15409 + - extract 15410 + - copy 15411 + type: string 15412 type: object 15413 - served: true 15414 - storage: false 15415 - subresources: 15416 - status: {} 15417 + url: 15418 + description: URL is the download link for the artifact output of the 15419 + last OCI Repository sync. 15420 + type: string 15421 + type: object 15422 + type: object 15423 + served: true 15424 + storage: false 15425 + subresources: 15426 + status: {} 15427 --- 15428 apiVersion: v1 15429 kind: ServiceAccount 15430 metadata: 15431 - labels: 15432 - app.kubernetes.io/component: helm-controller 15433 - app.kubernetes.io/instance: flux-system 15434 - app.kubernetes.io/part-of: flux 15435 - app.kubernetes.io/version: v2.5.1 15436 - name: helm-controller 15437 - namespace: flux-system 15438 + labels: 15439 + app.kubernetes.io/component: source-controller 15440 + app.kubernetes.io/instance: flux-system 15441 + app.kubernetes.io/part-of: flux 15442 + app.kubernetes.io/version: v2.6.4 15443 + name: source-controller 15444 + namespace: flux-system 15445 +--- 15446 +apiVersion: v1 15447 +kind: Service 15448 +metadata: 15449 + labels: 15450 + app.kubernetes.io/component: source-controller 15451 + app.kubernetes.io/instance: flux-system 15452 + app.kubernetes.io/part-of: flux 15453 + app.kubernetes.io/version: v2.6.4 15454 + control-plane: controller 15455 + name: source-controller 15456 + namespace: flux-system 15457 +spec: 15458 + ports: 15459 + - name: http 15460 + port: 80 15461 + protocol: TCP 15462 + targetPort: http 15463 + selector: 15464 + app: source-controller 15465 + type: ClusterIP 15466 --- 15467 apiVersion: apps/v1 15468 kind: Deployment 15469 metadata: 15470 - labels: 15471 - app.kubernetes.io/component: helm-controller 15472 - app.kubernetes.io/instance: flux-system 15473 - app.kubernetes.io/part-of: flux 15474 - app.kubernetes.io/version: v2.5.1 15475 - control-plane: controller 15476 - name: helm-controller 15477 - namespace: flux-system 15478 + labels: 15479 + app.kubernetes.io/component: source-controller 15480 + app.kubernetes.io/instance: flux-system 15481 + app.kubernetes.io/part-of: flux 15482 + app.kubernetes.io/version: v2.6.4 15483 + control-plane: controller 15484 + name: source-controller 15485 + namespace: flux-system 15486 spec: 15487 - replicas: 1 15488 - selector: 15489 - matchLabels: 15490 - app: helm-controller 15491 - template: 15492 - metadata: 15493 - annotations: 15494 - prometheus.io/port: "8080" 15495 - prometheus.io/scrape: "true" 15496 - labels: 15497 - app: helm-controller 15498 - spec: 15499 - containers: 15500 - - args: 15501 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 15502 - - --watch-all-namespaces=true 15503 - - --log-level=info 15504 - - --log-encoding=json 15505 - - --enable-leader-election 15506 - env: 15507 - - name: RUNTIME_NAMESPACE 15508 - valueFrom: 15509 - fieldRef: 15510 - fieldPath: metadata.namespace 15511 - - name: GOMAXPROCS 15512 - valueFrom: 15513 - resourceFieldRef: 15514 - containerName: manager 15515 - resource: limits.cpu 15516 - - name: GOMEMLIMIT 15517 - valueFrom: 15518 - resourceFieldRef: 15519 - containerName: manager 15520 - resource: limits.memory 15521 - image: ghcr.io/fluxcd/helm-controller:v1.2.0 15522 - imagePullPolicy: IfNotPresent 15523 - livenessProbe: 15524 - httpGet: 15525 - path: /healthz 15526 - port: healthz 15527 - name: manager 15528 - ports: 15529 - - containerPort: 8080 15530 - name: http-prom 15531 - protocol: TCP 15532 - - containerPort: 9440 15533 - name: healthz 15534 - protocol: TCP 15535 - readinessProbe: 15536 - httpGet: 15537 - path: /readyz 15538 - port: healthz 15539 - resources: 15540 - limits: 15541 - cpu: 1000m 15542 - memory: 1Gi 15543 - requests: 15544 - cpu: 100m 15545 - memory: 64Mi 15546 - securityContext: 15547 - allowPrivilegeEscalation: false 15548 - capabilities: 15549 - drop: 15550 - - ALL 15551 - readOnlyRootFilesystem: true 15552 - runAsNonRoot: true 15553 - seccompProfile: 15554 - type: RuntimeDefault 15555 - volumeMounts: 15556 - - mountPath: /tmp 15557 - name: temp 15558 - nodeSelector: 15559 - kubernetes.io/os: linux 15560 - priorityClassName: system-cluster-critical 15561 - securityContext: 15562 - fsGroup: 1337 15563 - serviceAccountName: helm-controller 15564 - terminationGracePeriodSeconds: 600 15565 - volumes: 15566 - - emptyDir: {} 15567 - name: temp 15568 + replicas: 1 15569 + selector: 15570 + matchLabels: 15571 + app: source-controller 15572 + strategy: 15573 + type: Recreate 15574 + template: 15575 + metadata: 15576 + annotations: 15577 + prometheus.io/port: "8080" 15578 + prometheus.io/scrape: "true" 15579 + labels: 15580 + app: source-controller 15581 + spec: 15582 + containers: 15583 + - args: 15584 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 15585 + - --watch-all-namespaces=true 15586 + - --log-level=info 15587 + - --log-encoding=json 15588 + - --enable-leader-election 15589 + - --storage-path=/data 15590 + - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 15591 + env: 15592 + - name: RUNTIME_NAMESPACE 15593 + valueFrom: 15594 + fieldRef: 15595 + fieldPath: metadata.namespace 15596 + - name: TUF_ROOT 15597 + value: /tmp/.sigstore 15598 + - name: GOMAXPROCS 15599 + valueFrom: 15600 + resourceFieldRef: 15601 + containerName: manager 15602 + resource: limits.cpu 15603 + - name: GOMEMLIMIT 15604 + valueFrom: 15605 + resourceFieldRef: 15606 + containerName: manager 15607 + resource: limits.memory 15608 + image: ghcr.io/fluxcd/source-controller:v1.6.2 15609 + imagePullPolicy: IfNotPresent 15610 + livenessProbe: 15611 + httpGet: 15612 + path: /healthz 15613 + port: healthz 15614 + name: manager 15615 + ports: 15616 + - containerPort: 9090 15617 + name: http 15618 + protocol: TCP 15619 + - containerPort: 8080 15620 + name: http-prom 15621 + protocol: TCP 15622 + - containerPort: 9440 15623 + name: healthz 15624 + protocol: TCP 15625 + readinessProbe: 15626 + httpGet: 15627 + path: / 15628 + port: http 15629 + resources: 15630 + limits: 15631 + cpu: 1000m 15632 + memory: 1Gi 15633 + requests: 15634 + cpu: 50m 15635 + memory: 64Mi 15636 + securityContext: 15637 + allowPrivilegeEscalation: false 15638 + capabilities: 15639 + drop: 15640 + - ALL 15641 + readOnlyRootFilesystem: true 15642 + runAsNonRoot: true 15643 + seccompProfile: 15644 + type: RuntimeDefault 15645 + volumeMounts: 15646 + - mountPath: /data 15647 + name: data 15648 + - mountPath: /tmp 15649 + name: tmp 15650 + nodeSelector: 15651 + kubernetes.io/os: linux 15652 + priorityClassName: system-cluster-critical 15653 + securityContext: 15654 + fsGroup: 1337 15655 + serviceAccountName: source-controller 15656 + terminationGracePeriodSeconds: 10 15657 + volumes: 15658 + - emptyDir: {} 15659 + name: data 15660 + - emptyDir: {} 15661 + name: tmp 15662 --- 15663 apiVersion: apiextensions.k8s.io/v1 15664 kind: CustomResourceDefinition 15665 metadata: 15666 - annotations: 15667 - controller-gen.kubebuilder.io/version: v0.16.1 15668 - labels: 15669 - app.kubernetes.io/component: notification-controller 15670 - app.kubernetes.io/instance: flux-system 15671 - app.kubernetes.io/part-of: flux 15672 - app.kubernetes.io/version: v2.5.1 15673 - name: alerts.notification.toolkit.fluxcd.io 15674 + annotations: 15675 + controller-gen.kubebuilder.io/version: v0.16.1 15676 + labels: 15677 + app.kubernetes.io/component: kustomize-controller 15678 + app.kubernetes.io/instance: flux-system 15679 + app.kubernetes.io/part-of: flux 15680 + app.kubernetes.io/version: v2.6.4 15681 + name: kustomizations.kustomize.toolkit.fluxcd.io 15682 spec: 15683 - group: notification.toolkit.fluxcd.io 15684 - names: 15685 - kind: Alert 15686 - listKind: AlertList 15687 - plural: alerts 15688 - singular: alert 15689 - scope: Namespaced 15690 - versions: 15691 - - additionalPrinterColumns: 15692 - - jsonPath: .metadata.creationTimestamp 15693 - name: Age 15694 - type: date 15695 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 15696 - name: Ready 15697 - type: string 15698 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 15699 - name: Status 15700 - type: string 15701 - deprecated: true 15702 - deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3 15703 - name: v1beta1 15704 - schema: 15705 - openAPIV3Schema: 15706 - description: Alert is the Schema for the alerts API 15707 + group: kustomize.toolkit.fluxcd.io 15708 + names: 15709 + kind: Kustomization 15710 + listKind: KustomizationList 15711 + plural: kustomizations 15712 + shortNames: 15713 + - ks 15714 + singular: kustomization 15715 + scope: Namespaced 15716 + versions: 15717 + - additionalPrinterColumns: 15718 + - jsonPath: .metadata.creationTimestamp 15719 + name: Age 15720 + type: date 15721 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 15722 + name: Ready 15723 + type: string 15724 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 15725 + name: Status 15726 + type: string 15727 + name: v1 15728 + schema: 15729 + openAPIV3Schema: 15730 + description: Kustomization is the Schema for the kustomizations API. 15731 + properties: 15732 + apiVersion: 15733 + description: |- 15734 + APIVersion defines the versioned schema of this representation of an object. 15735 + Servers should convert recognized schemas to the latest internal value, and 15736 + may reject unrecognized values. 15737 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 15738 + type: string 15739 + kind: 15740 + description: |- 15741 + Kind is a string value representing the REST resource this object represents. 15742 + Servers may infer this from the endpoint the client submits requests to. 15743 + Cannot be updated. 15744 + In CamelCase. 15745 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 15746 + type: string 15747 + metadata: 15748 + type: object 15749 + spec: 15750 + description: |- 15751 + KustomizationSpec defines the configuration to calculate the desired state 15752 + from a Source using Kustomize. 15753 + properties: 15754 + commonMetadata: 15755 + description: |- 15756 + CommonMetadata specifies the common labels and annotations that are 15757 + applied to all resources. Any existing label or annotation will be 15758 + overridden if its key matches a common one. 15759 properties: 15760 - apiVersion: 15761 - description: |- 15762 - APIVersion defines the versioned schema of this representation of an object. 15763 - Servers should convert recognized schemas to the latest internal value, and 15764 - may reject unrecognized values. 15765 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 15766 + annotations: 15767 + additionalProperties: 15768 + type: string 15769 + description: Annotations to be added to the object's metadata. 15770 + type: object 15771 + labels: 15772 + additionalProperties: 15773 + type: string 15774 + description: Labels to be added to the object's metadata. 15775 + type: object 15776 + type: object 15777 + components: 15778 + description: Components specifies relative paths to specifications 15779 + of other Components. 15780 + items: 15781 + type: string 15782 + type: array 15783 + decryption: 15784 + description: Decrypt Kubernetes secrets before applying them on the 15785 + cluster. 15786 + properties: 15787 + provider: 15788 + description: Provider is the name of the decryption engine. 15789 + enum: 15790 + - sops 15791 + type: string 15792 + secretRef: 15793 + description: |- 15794 + The secret name containing the private OpenPGP keys used for decryption. 15795 + A static credential for a cloud provider defined inside the Secret 15796 + takes priority to secret-less authentication with the ServiceAccountName 15797 + field. 15798 + properties: 15799 + name: 15800 + description: Name of the referent. 15801 type: string 15802 + required: 15803 + - name 15804 + type: object 15805 + serviceAccountName: 15806 + description: |- 15807 + ServiceAccountName is the name of the service account used to 15808 + authenticate with KMS services from cloud providers. If a 15809 + static credential for a given cloud provider is defined 15810 + inside the Secret referenced by SecretRef, that static 15811 + credential takes priority. 15812 + type: string 15813 + required: 15814 + - provider 15815 + type: object 15816 + deletionPolicy: 15817 + description: |- 15818 + DeletionPolicy can be used to control garbage collection when this 15819 + Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 15820 + 'WaitForTermination', 'Orphan'). 'MirrorPrune' mirrors the Prune field 15821 + (orphan if false, delete if true). Defaults to 'MirrorPrune'. 15822 + enum: 15823 + - MirrorPrune 15824 + - Delete 15825 + - WaitForTermination 15826 + - Orphan 15827 + type: string 15828 + dependsOn: 15829 + description: |- 15830 + DependsOn may contain a meta.NamespacedObjectReference slice 15831 + with references to Kustomization resources that must be ready before this 15832 + Kustomization can be reconciled. 15833 + items: 15834 + description: |- 15835 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 15836 + namespace. 15837 + properties: 15838 + name: 15839 + description: Name of the referent. 15840 + type: string 15841 + namespace: 15842 + description: Namespace of the referent, when not specified it 15843 + acts as LocalObjectReference. 15844 + type: string 15845 + required: 15846 + - name 15847 + type: object 15848 + type: array 15849 + force: 15850 + default: false 15851 + description: |- 15852 + Force instructs the controller to recreate resources 15853 + when patching fails due to an immutable field change. 15854 + type: boolean 15855 + healthCheckExprs: 15856 + description: |- 15857 + HealthCheckExprs is a list of healthcheck expressions for evaluating the 15858 + health of custom resources using Common Expression Language (CEL). 15859 + The expressions are evaluated only when Wait or HealthChecks are specified. 15860 + items: 15861 + description: CustomHealthCheck defines the health check for custom 15862 + resources. 15863 + properties: 15864 + apiVersion: 15865 + description: APIVersion of the custom resource under evaluation. 15866 + type: string 15867 + current: 15868 + description: |- 15869 + Current is the CEL expression that determines if the status 15870 + of the custom resource has reached the desired state. 15871 + type: string 15872 + failed: 15873 + description: |- 15874 + Failed is the CEL expression that determines if the status 15875 + of the custom resource has failed to reach the desired state. 15876 + type: string 15877 + inProgress: 15878 + description: |- 15879 + InProgress is the CEL expression that determines if the status 15880 + of the custom resource has not yet reached the desired state. 15881 + type: string 15882 kind: 15883 - description: |- 15884 - Kind is a string value representing the REST resource this object represents. 15885 - Servers may infer this from the endpoint the client submits requests to. 15886 - Cannot be updated. 15887 - In CamelCase. 15888 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 15889 + description: Kind of the custom resource under evaluation. 15890 + type: string 15891 + required: 15892 + - apiVersion 15893 + - current 15894 + - kind 15895 + type: object 15896 + type: array 15897 + healthChecks: 15898 + description: A list of resources to be included in the health assessment. 15899 + items: 15900 + description: |- 15901 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 15902 + in any namespace. 15903 + properties: 15904 + apiVersion: 15905 + description: API version of the referent, if not specified the 15906 + Kubernetes preferred version will be used. 15907 + type: string 15908 + kind: 15909 + description: Kind of the referent. 15910 + type: string 15911 + name: 15912 + description: Name of the referent. 15913 + type: string 15914 + namespace: 15915 + description: Namespace of the referent, when not specified it 15916 + acts as LocalObjectReference. 15917 + type: string 15918 + required: 15919 + - kind 15920 + - name 15921 + type: object 15922 + type: array 15923 + images: 15924 + description: |- 15925 + Images is a list of (image name, new name, new tag or digest) 15926 + for changing image names, tags or digests. This can also be achieved with a 15927 + patch, but this operator is simpler to specify. 15928 + items: 15929 + description: Image contains an image name, a new name, a new tag 15930 + or digest, which will replace the original name and tag. 15931 + properties: 15932 + digest: 15933 + description: |- 15934 + Digest is the value used to replace the original image tag. 15935 + If digest is present NewTag value is ignored. 15936 + type: string 15937 + name: 15938 + description: Name is a tag-less image name. 15939 + type: string 15940 + newName: 15941 + description: NewName is the value used to replace the original 15942 + name. 15943 + type: string 15944 + newTag: 15945 + description: NewTag is the value used to replace the original 15946 + tag. 15947 + type: string 15948 + required: 15949 + - name 15950 + type: object 15951 + type: array 15952 + interval: 15953 + description: |- 15954 + The interval at which to reconcile the Kustomization. 15955 + This interval is approximate and may be subject to jitter to ensure 15956 + efficient use of resources. 15957 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15958 + type: string 15959 + kubeConfig: 15960 + description: |- 15961 + The KubeConfig for reconciling the Kustomization on a remote cluster. 15962 + When used in combination with KustomizationSpec.ServiceAccountName, 15963 + forces the controller to act on behalf of that Service Account at the 15964 + target cluster. 15965 + If the --default-service-account flag is set, its value will be used as 15966 + a controller level fallback for when KustomizationSpec.ServiceAccountName 15967 + is empty. 15968 + properties: 15969 + secretRef: 15970 + description: |- 15971 + SecretRef holds the name of a secret that contains a key with 15972 + the kubeconfig file as the value. If no key is set, the key will default 15973 + to 'value'. 15974 + It is recommended that the kubeconfig is self-contained, and the secret 15975 + is regularly updated if credentials such as a cloud-access-token expire. 15976 + Cloud specific `cmd-path` auth helpers will not function without adding 15977 + binaries and credentials to the Pod that is responsible for reconciling 15978 + Kubernetes resources. 15979 + properties: 15980 + key: 15981 + description: Key in the Secret, when not specified an implementation-specific 15982 + default key is used. 15983 type: string 15984 - metadata: 15985 - type: object 15986 - spec: 15987 - description: AlertSpec defines an alerting rule for events involving a list of objects 15988 - properties: 15989 - eventSeverity: 15990 - default: info 15991 - description: |- 15992 - Filter events based on severity, defaults to ('info'). 15993 - If set to 'info' no events will be filtered. 15994 - enum: 15995 - - info 15996 - - error 15997 - type: string 15998 - eventSources: 15999 - description: Filter events based on the involved objects. 16000 - items: 16001 - description: |- 16002 - CrossNamespaceObjectReference contains enough information to let you locate the 16003 - typed referenced object at cluster level 16004 - properties: 16005 - apiVersion: 16006 - description: API version of the referent 16007 - type: string 16008 - kind: 16009 - description: Kind of the referent 16010 - enum: 16011 - - Bucket 16012 - - GitRepository 16013 - - Kustomization 16014 - - HelmRelease 16015 - - HelmChart 16016 - - HelmRepository 16017 - - ImageRepository 16018 - - ImagePolicy 16019 - - ImageUpdateAutomation 16020 - - OCIRepository 16021 - type: string 16022 - matchLabels: 16023 - additionalProperties: 16024 - type: string 16025 - description: |- 16026 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 16027 - map is equivalent to an element of matchExpressions, whose key field is "key", the 16028 - operator is "In", and the values array contains only "value". The requirements are ANDed. 16029 - type: object 16030 - name: 16031 - description: Name of the referent 16032 - maxLength: 53 16033 - minLength: 1 16034 - type: string 16035 - namespace: 16036 - description: Namespace of the referent 16037 - maxLength: 53 16038 - minLength: 1 16039 - type: string 16040 - required: 16041 - - kind 16042 - - name 16043 - type: object 16044 - type: array 16045 - exclusionList: 16046 - description: A list of Golang regular expressions to be used for excluding messages. 16047 - items: 16048 - type: string 16049 - type: array 16050 - providerRef: 16051 - description: Send events using this provider. 16052 - properties: 16053 - name: 16054 - description: Name of the referent. 16055 - type: string 16056 - required: 16057 - - name 16058 - type: object 16059 - summary: 16060 - description: Short description of the impact and affected cluster. 16061 - type: string 16062 - suspend: 16063 - description: |- 16064 - This flag tells the controller to suspend subsequent events dispatching. 16065 - Defaults to false. 16066 - type: boolean 16067 - required: 16068 - - eventSources 16069 - - providerRef 16070 - type: object 16071 + name: 16072 + description: Name of the Secret. 16073 + type: string 16074 + required: 16075 + - name 16076 + type: object 16077 + required: 16078 + - secretRef 16079 + type: object 16080 + namePrefix: 16081 + description: NamePrefix will prefix the names of all managed resources. 16082 + maxLength: 200 16083 + minLength: 1 16084 + type: string 16085 + nameSuffix: 16086 + description: NameSuffix will suffix the names of all managed resources. 16087 + maxLength: 200 16088 + minLength: 1 16089 + type: string 16090 + patches: 16091 + description: |- 16092 + Strategic merge and JSON patches, defined as inline YAML objects, 16093 + capable of targeting objects based on kind, label and annotation selectors. 16094 + items: 16095 + description: |- 16096 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 16097 + be applied to. 16098 + properties: 16099 + patch: 16100 + description: |- 16101 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 16102 + an array of operation objects. 16103 + type: string 16104 + target: 16105 + description: Target points to the resources that the patch document 16106 + should be applied to. 16107 + properties: 16108 + annotationSelector: 16109 + description: |- 16110 + AnnotationSelector is a string that follows the label selection expression 16111 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16112 + It matches with the resource annotations. 16113 + type: string 16114 + group: 16115 + description: |- 16116 + Group is the API group to select resources from. 16117 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 16118 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16119 + type: string 16120 + kind: 16121 + description: |- 16122 + Kind of the API Group to select resources from. 16123 + Together with Group and Version it is capable of unambiguously 16124 + identifying and/or selecting resources. 16125 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16126 + type: string 16127 + labelSelector: 16128 + description: |- 16129 + LabelSelector is a string that follows the label selection expression 16130 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16131 + It matches with the resource labels. 16132 + type: string 16133 + name: 16134 + description: Name to match resources with. 16135 + type: string 16136 + namespace: 16137 + description: Namespace to select resources from. 16138 + type: string 16139 + version: 16140 + description: |- 16141 + Version of the API Group to select resources from. 16142 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 16143 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16144 + type: string 16145 + type: object 16146 + required: 16147 + - patch 16148 + type: object 16149 + type: array 16150 + path: 16151 + description: |- 16152 + Path to the directory containing the kustomization.yaml file, or the 16153 + set of plain YAMLs a kustomization.yaml should be generated for. 16154 + Defaults to 'None', which translates to the root path of the SourceRef. 16155 + type: string 16156 + postBuild: 16157 + description: |- 16158 + PostBuild describes which actions to perform on the YAML manifest 16159 + generated by building the kustomize overlay. 16160 + properties: 16161 + substitute: 16162 + additionalProperties: 16163 + type: string 16164 + description: |- 16165 + Substitute holds a map of key/value pairs. 16166 + The variables defined in your YAML manifests that match any of the keys 16167 + defined in the map will be substituted with the set value. 16168 + Includes support for bash string replacement functions 16169 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 16170 + type: object 16171 + substituteFrom: 16172 + description: |- 16173 + SubstituteFrom holds references to ConfigMaps and Secrets containing 16174 + the variables and their values to be substituted in the YAML manifests. 16175 + The ConfigMap and the Secret data keys represent the var names, and they 16176 + must match the vars declared in the manifests for the substitution to 16177 + happen. 16178 + items: 16179 + description: |- 16180 + SubstituteReference contains a reference to a resource containing 16181 + the variables name and value. 16182 + properties: 16183 + kind: 16184 + description: Kind of the values referent, valid values are 16185 + ('Secret', 'ConfigMap'). 16186 + enum: 16187 + - Secret 16188 + - ConfigMap 16189 + type: string 16190 + name: 16191 + description: |- 16192 + Name of the values referent. Should reside in the same namespace as the 16193 + referring resource. 16194 + maxLength: 253 16195 + minLength: 1 16196 + type: string 16197 + optional: 16198 + default: false 16199 + description: |- 16200 + Optional indicates whether the referenced resource must exist, or whether to 16201 + tolerate its absence. If true and the referenced resource is absent, proceed 16202 + as if the resource was present but empty, without any variables defined. 16203 + type: boolean 16204 + required: 16205 + - kind 16206 + - name 16207 + type: object 16208 + type: array 16209 + type: object 16210 + prune: 16211 + description: Prune enables garbage collection. 16212 + type: boolean 16213 + retryInterval: 16214 + description: |- 16215 + The interval at which to retry a previously failed reconciliation. 16216 + When not specified, the controller uses the KustomizationSpec.Interval 16217 + value to retry failures. 16218 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16219 + type: string 16220 + serviceAccountName: 16221 + description: |- 16222 + The name of the Kubernetes service account to impersonate 16223 + when reconciling this Kustomization. 16224 + type: string 16225 + sourceRef: 16226 + description: Reference of the source where the kustomization file 16227 + is. 16228 + properties: 16229 + apiVersion: 16230 + description: API version of the referent. 16231 + type: string 16232 + kind: 16233 + description: Kind of the referent. 16234 + enum: 16235 + - OCIRepository 16236 + - GitRepository 16237 + - Bucket 16238 + type: string 16239 + name: 16240 + description: Name of the referent. 16241 + type: string 16242 + namespace: 16243 + description: |- 16244 + Namespace of the referent, defaults to the namespace of the Kubernetes 16245 + resource object that contains the reference. 16246 + type: string 16247 + required: 16248 + - kind 16249 + - name 16250 + type: object 16251 + suspend: 16252 + description: |- 16253 + This flag tells the controller to suspend subsequent kustomize executions, 16254 + it does not apply to already started executions. Defaults to false. 16255 + type: boolean 16256 + targetNamespace: 16257 + description: |- 16258 + TargetNamespace sets or overrides the namespace in the 16259 + kustomization.yaml file. 16260 + maxLength: 63 16261 + minLength: 1 16262 + type: string 16263 + timeout: 16264 + description: |- 16265 + Timeout for validation, apply and health checking operations. 16266 + Defaults to 'Interval' duration. 16267 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16268 + type: string 16269 + wait: 16270 + description: |- 16271 + Wait instructs the controller to check the health of all the reconciled 16272 + resources. When enabled, the HealthChecks are ignored. Defaults to false. 16273 + type: boolean 16274 + required: 16275 + - interval 16276 + - prune 16277 + - sourceRef 16278 + type: object 16279 + status: 16280 + default: 16281 + observedGeneration: -1 16282 + description: KustomizationStatus defines the observed state of a kustomization. 16283 + properties: 16284 + conditions: 16285 + items: 16286 + description: Condition contains details for one aspect of the current 16287 + state of this API Resource. 16288 + properties: 16289 + lastTransitionTime: 16290 + description: |- 16291 + lastTransitionTime is the last time the condition transitioned from one status to another. 16292 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16293 + format: date-time 16294 + type: string 16295 + message: 16296 + description: |- 16297 + message is a human readable message indicating details about the transition. 16298 + This may be an empty string. 16299 + maxLength: 32768 16300 + type: string 16301 + observedGeneration: 16302 + description: |- 16303 + observedGeneration represents the .metadata.generation that the condition was set based upon. 16304 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16305 + with respect to the current state of the instance. 16306 + format: int64 16307 + minimum: 0 16308 + type: integer 16309 + reason: 16310 + description: |- 16311 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 16312 + Producers of specific condition types may define expected values and meanings for this field, 16313 + and whether the values are considered a guaranteed API. 16314 + The value should be a CamelCase string. 16315 + This field may not be empty. 16316 + maxLength: 1024 16317 + minLength: 1 16318 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16319 + type: string 16320 status: 16321 - default: 16322 - observedGeneration: -1 16323 - description: AlertStatus defines the observed state of Alert 16324 - properties: 16325 - conditions: 16326 - items: 16327 - description: Condition contains details for one aspect of the current state of this API 16328 - Resource. 16329 - properties: 16330 - lastTransitionTime: 16331 - description: |- 16332 - lastTransitionTime is the last time the condition transitioned from one status to another. 16333 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16334 - format: date-time 16335 - type: string 16336 - message: 16337 - description: |- 16338 - message is a human readable message indicating details about the transition. 16339 - This may be an empty string. 16340 - maxLength: 32768 16341 - type: string 16342 - observedGeneration: 16343 - description: |- 16344 - observedGeneration represents the .metadata.generation that the condition was set based upon. 16345 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16346 - with respect to the current state of the instance. 16347 - format: int64 16348 - minimum: 0 16349 - type: integer 16350 - reason: 16351 - description: |- 16352 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 16353 - Producers of specific condition types may define expected values and meanings for this field, 16354 - and whether the values are considered a guaranteed API. 16355 - The value should be a CamelCase string. 16356 - This field may not be empty. 16357 - maxLength: 1024 16358 - minLength: 1 16359 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16360 - type: string 16361 - status: 16362 - description: status of the condition, one of True, False, Unknown. 16363 - enum: 16364 - - "True" 16365 - - "False" 16366 - - Unknown 16367 - type: string 16368 - type: 16369 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 16370 - maxLength: 316 16371 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16372 - type: string 16373 - required: 16374 - - lastTransitionTime 16375 - - message 16376 - - reason 16377 - - status 16378 - - type 16379 - type: object 16380 - type: array 16381 - observedGeneration: 16382 - description: ObservedGeneration is the last observed generation. 16383 - format: int64 16384 - type: integer 16385 - type: object 16386 + description: status of the condition, one of True, False, Unknown. 16387 + enum: 16388 + - "True" 16389 + - "False" 16390 + - Unknown 16391 + type: string 16392 + type: 16393 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 16394 + maxLength: 316 16395 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16396 + type: string 16397 + required: 16398 + - lastTransitionTime 16399 + - message 16400 + - reason 16401 + - status 16402 + - type 16403 + type: object 16404 + type: array 16405 + inventory: 16406 + description: |- 16407 + Inventory contains the list of Kubernetes resource object references that 16408 + have been successfully applied. 16409 + properties: 16410 + entries: 16411 + description: Entries of Kubernetes resource object references. 16412 + items: 16413 + description: ResourceRef contains the information necessary 16414 + to locate a resource within a cluster. 16415 + properties: 16416 + id: 16417 + description: |- 16418 + ID is the string representation of the Kubernetes resource object's metadata, 16419 + in the format '<namespace>_<name>_<group>_<kind>'. 16420 + type: string 16421 + v: 16422 + description: Version is the API version of the Kubernetes 16423 + resource object's kind. 16424 + type: string 16425 + required: 16426 + - id 16427 + - v 16428 + type: object 16429 + type: array 16430 + required: 16431 + - entries 16432 type: object 16433 - served: true 16434 - storage: false 16435 - subresources: 16436 - status: {} 16437 - - additionalPrinterColumns: 16438 - - jsonPath: .metadata.creationTimestamp 16439 - name: Age 16440 - type: date 16441 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 16442 - name: Ready 16443 - type: string 16444 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 16445 - name: Status 16446 - type: string 16447 - deprecated: true 16448 - deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 16449 - name: v1beta2 16450 - schema: 16451 - openAPIV3Schema: 16452 - description: Alert is the Schema for the alerts API 16453 + lastAppliedOriginRevision: 16454 + description: |- 16455 + The last successfully applied origin revision. 16456 + Equals the origin revision of the applied Artifact from the referenced Source. 16457 + Usually present on the Metadata of the applied Artifact and depends on the 16458 + Source type, e.g. for OCI it's the value associated with the key 16459 + "org.opencontainers.image.revision". 16460 + type: string 16461 + lastAppliedRevision: 16462 + description: |- 16463 + The last successfully applied revision. 16464 + Equals the Revision of the applied Artifact from the referenced Source. 16465 + type: string 16466 + lastAttemptedRevision: 16467 + description: LastAttemptedRevision is the revision of the last reconciliation 16468 + attempt. 16469 + type: string 16470 + lastHandledReconcileAt: 16471 + description: |- 16472 + LastHandledReconcileAt holds the value of the most recent 16473 + reconcile request value, so a change of the annotation value 16474 + can be detected. 16475 + type: string 16476 + observedGeneration: 16477 + description: ObservedGeneration is the last reconciled generation. 16478 + format: int64 16479 + type: integer 16480 + type: object 16481 + type: object 16482 + served: true 16483 + storage: true 16484 + subresources: 16485 + status: {} 16486 + - additionalPrinterColumns: 16487 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 16488 + name: Ready 16489 + type: string 16490 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 16491 + name: Status 16492 + type: string 16493 + - jsonPath: .metadata.creationTimestamp 16494 + name: Age 16495 + type: date 16496 + deprecated: true 16497 + deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1 16498 + name: v1beta1 16499 + schema: 16500 + openAPIV3Schema: 16501 + description: Kustomization is the Schema for the kustomizations API. 16502 + properties: 16503 + apiVersion: 16504 + description: |- 16505 + APIVersion defines the versioned schema of this representation of an object. 16506 + Servers should convert recognized schemas to the latest internal value, and 16507 + may reject unrecognized values. 16508 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 16509 + type: string 16510 + kind: 16511 + description: |- 16512 + Kind is a string value representing the REST resource this object represents. 16513 + Servers may infer this from the endpoint the client submits requests to. 16514 + Cannot be updated. 16515 + In CamelCase. 16516 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 16517 + type: string 16518 + metadata: 16519 + type: object 16520 + spec: 16521 + description: KustomizationSpec defines the desired state of a kustomization. 16522 + properties: 16523 + decryption: 16524 + description: Decrypt Kubernetes secrets before applying them on the 16525 + cluster. 16526 properties: 16527 - apiVersion: 16528 - description: |- 16529 - APIVersion defines the versioned schema of this representation of an object. 16530 - Servers should convert recognized schemas to the latest internal value, and 16531 - may reject unrecognized values. 16532 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 16533 + provider: 16534 + description: Provider is the name of the decryption engine. 16535 + enum: 16536 + - sops 16537 + type: string 16538 + secretRef: 16539 + description: The secret name containing the private OpenPGP keys 16540 + used for decryption. 16541 + properties: 16542 + name: 16543 + description: Name of the referent. 16544 type: string 16545 + required: 16546 + - name 16547 + type: object 16548 + required: 16549 + - provider 16550 + type: object 16551 + dependsOn: 16552 + description: |- 16553 + DependsOn may contain a meta.NamespacedObjectReference slice 16554 + with references to Kustomization resources that must be ready before this 16555 + Kustomization can be reconciled. 16556 + items: 16557 + description: |- 16558 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 16559 + namespace. 16560 + properties: 16561 + name: 16562 + description: Name of the referent. 16563 + type: string 16564 + namespace: 16565 + description: Namespace of the referent, when not specified it 16566 + acts as LocalObjectReference. 16567 + type: string 16568 + required: 16569 + - name 16570 + type: object 16571 + type: array 16572 + force: 16573 + default: false 16574 + description: |- 16575 + Force instructs the controller to recreate resources 16576 + when patching fails due to an immutable field change. 16577 + type: boolean 16578 + healthChecks: 16579 + description: A list of resources to be included in the health assessment. 16580 + items: 16581 + description: |- 16582 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 16583 + in any namespace. 16584 + properties: 16585 + apiVersion: 16586 + description: API version of the referent, if not specified the 16587 + Kubernetes preferred version will be used. 16588 + type: string 16589 kind: 16590 - description: |- 16591 - Kind is a string value representing the REST resource this object represents. 16592 - Servers may infer this from the endpoint the client submits requests to. 16593 - Cannot be updated. 16594 - In CamelCase. 16595 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 16596 + description: Kind of the referent. 16597 + type: string 16598 + name: 16599 + description: Name of the referent. 16600 + type: string 16601 + namespace: 16602 + description: Namespace of the referent, when not specified it 16603 + acts as LocalObjectReference. 16604 + type: string 16605 + required: 16606 + - kind 16607 + - name 16608 + type: object 16609 + type: array 16610 + images: 16611 + description: |- 16612 + Images is a list of (image name, new name, new tag or digest) 16613 + for changing image names, tags or digests. This can also be achieved with a 16614 + patch, but this operator is simpler to specify. 16615 + items: 16616 + description: Image contains an image name, a new name, a new tag 16617 + or digest, which will replace the original name and tag. 16618 + properties: 16619 + digest: 16620 + description: |- 16621 + Digest is the value used to replace the original image tag. 16622 + If digest is present NewTag value is ignored. 16623 + type: string 16624 + name: 16625 + description: Name is a tag-less image name. 16626 + type: string 16627 + newName: 16628 + description: NewName is the value used to replace the original 16629 + name. 16630 + type: string 16631 + newTag: 16632 + description: NewTag is the value used to replace the original 16633 + tag. 16634 + type: string 16635 + required: 16636 + - name 16637 + type: object 16638 + type: array 16639 + interval: 16640 + description: The interval at which to reconcile the Kustomization. 16641 + type: string 16642 + kubeConfig: 16643 + description: |- 16644 + The KubeConfig for reconciling the Kustomization on a remote cluster. 16645 + When specified, KubeConfig takes precedence over ServiceAccountName. 16646 + properties: 16647 + secretRef: 16648 + description: |- 16649 + SecretRef holds the name to a secret that contains a 'value' key with 16650 + the kubeconfig file as the value. It must be in the same namespace as 16651 + the Kustomization. 16652 + It is recommended that the kubeconfig is self-contained, and the secret 16653 + is regularly updated if credentials such as a cloud-access-token expire. 16654 + Cloud specific `cmd-path` auth helpers will not function without adding 16655 + binaries and credentials to the Pod that is responsible for reconciling 16656 + the Kustomization. 16657 + properties: 16658 + name: 16659 + description: Name of the referent. 16660 type: string 16661 - metadata: 16662 - type: object 16663 - spec: 16664 - description: AlertSpec defines an alerting rule for events involving a list of objects. 16665 + required: 16666 + - name 16667 + type: object 16668 + required: 16669 + - secretRef 16670 + type: object 16671 + patches: 16672 + description: |- 16673 + Strategic merge and JSON patches, defined as inline YAML objects, 16674 + capable of targeting objects based on kind, label and annotation selectors. 16675 + items: 16676 + description: |- 16677 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 16678 + be applied to. 16679 + properties: 16680 + patch: 16681 + description: |- 16682 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 16683 + an array of operation objects. 16684 + type: string 16685 + target: 16686 + description: Target points to the resources that the patch document 16687 + should be applied to. 16688 + properties: 16689 + annotationSelector: 16690 + description: |- 16691 + AnnotationSelector is a string that follows the label selection expression 16692 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16693 + It matches with the resource annotations. 16694 + type: string 16695 + group: 16696 + description: |- 16697 + Group is the API group to select resources from. 16698 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 16699 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16700 + type: string 16701 + kind: 16702 + description: |- 16703 + Kind of the API Group to select resources from. 16704 + Together with Group and Version it is capable of unambiguously 16705 + identifying and/or selecting resources. 16706 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16707 + type: string 16708 + labelSelector: 16709 + description: |- 16710 + LabelSelector is a string that follows the label selection expression 16711 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16712 + It matches with the resource labels. 16713 + type: string 16714 + name: 16715 + description: Name to match resources with. 16716 + type: string 16717 + namespace: 16718 + description: Namespace to select resources from. 16719 + type: string 16720 + version: 16721 + description: |- 16722 + Version of the API Group to select resources from. 16723 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 16724 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16725 + type: string 16726 + type: object 16727 + required: 16728 + - patch 16729 + type: object 16730 + type: array 16731 + patchesJson6902: 16732 + description: JSON 6902 patches, defined as inline YAML objects. 16733 + items: 16734 + description: JSON6902Patch contains a JSON6902 patch and the target 16735 + the patch should be applied to. 16736 + properties: 16737 + patch: 16738 + description: Patch contains the JSON6902 patch document with 16739 + an array of operation objects. 16740 + items: 16741 + description: |- 16742 + JSON6902 is a JSON6902 operation object. 16743 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 16744 properties: 16745 - eventMetadata: 16746 - additionalProperties: 16747 - type: string 16748 - description: |- 16749 - EventMetadata is an optional field for adding metadata to events dispatched by the 16750 - controller. This can be used for enhancing the context of the event. If a field 16751 - would override one already present on the original event as generated by the emitter, 16752 - then the override doesn't happen, i.e. the original value is preserved, and an info 16753 - log is printed. 16754 - type: object 16755 - eventSeverity: 16756 - default: info 16757 - description: |- 16758 - EventSeverity specifies how to filter events based on severity. 16759 - If set to 'info' no events will be filtered. 16760 - enum: 16761 - - info 16762 - - error 16763 - type: string 16764 - eventSources: 16765 - description: |- 16766 - EventSources specifies how to filter events based 16767 - on the involved object kind, name and namespace. 16768 - items: 16769 - description: |- 16770 - CrossNamespaceObjectReference contains enough information to let you locate the 16771 - typed referenced object at cluster level 16772 - properties: 16773 - apiVersion: 16774 - description: API version of the referent 16775 - type: string 16776 - kind: 16777 - description: Kind of the referent 16778 - enum: 16779 - - Bucket 16780 - - GitRepository 16781 - - Kustomization 16782 - - HelmRelease 16783 - - HelmChart 16784 - - HelmRepository 16785 - - ImageRepository 16786 - - ImagePolicy 16787 - - ImageUpdateAutomation 16788 - - OCIRepository 16789 - type: string 16790 - matchLabels: 16791 - additionalProperties: 16792 - type: string 16793 - description: |- 16794 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 16795 - map is equivalent to an element of matchExpressions, whose key field is "key", the 16796 - operator is "In", and the values array contains only "value". The requirements are ANDed. 16797 - MatchLabels requires the name to be set to `*`. 16798 - type: object 16799 - name: 16800 - description: |- 16801 - Name of the referent 16802 - If multiple resources are targeted `*` may be set. 16803 - maxLength: 53 16804 - minLength: 1 16805 - type: string 16806 - namespace: 16807 - description: Namespace of the referent 16808 - maxLength: 53 16809 - minLength: 1 16810 - type: string 16811 - required: 16812 - - kind 16813 - - name 16814 - type: object 16815 - type: array 16816 - exclusionList: 16817 - description: |- 16818 - ExclusionList specifies a list of Golang regular expressions 16819 - to be used for excluding messages. 16820 - items: 16821 - type: string 16822 - type: array 16823 - inclusionList: 16824 - description: |- 16825 - InclusionList specifies a list of Golang regular expressions 16826 - to be used for including messages. 16827 - items: 16828 - type: string 16829 - type: array 16830 - providerRef: 16831 - description: ProviderRef specifies which Provider this Alert should use. 16832 - properties: 16833 - name: 16834 - description: Name of the referent. 16835 - type: string 16836 - required: 16837 - - name 16838 - type: object 16839 - summary: 16840 - description: Summary holds a short description of the impact and affected cluster. 16841 - maxLength: 255 16842 - type: string 16843 - suspend: 16844 - description: |- 16845 - Suspend tells the controller to suspend subsequent 16846 - events handling for this Alert. 16847 - type: boolean 16848 + from: 16849 + description: |- 16850 + From contains a JSON-pointer value that references a location within the target document where the operation is 16851 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 16852 + type: string 16853 + op: 16854 + description: |- 16855 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 16856 + "test". 16857 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 16858 + enum: 16859 + - test 16860 + - remove 16861 + - add 16862 + - replace 16863 + - move 16864 + - copy 16865 + type: string 16866 + path: 16867 + description: |- 16868 + Path contains the JSON-pointer value that references a location within the target document where the operation 16869 + is performed. The meaning of the value depends on the value of Op. 16870 + type: string 16871 + value: 16872 + description: |- 16873 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 16874 + account by all operations. 16875 + x-kubernetes-preserve-unknown-fields: true 16876 required: 16877 - - eventSources 16878 - - providerRef 16879 + - op 16880 + - path 16881 type: object 16882 + type: array 16883 + target: 16884 + description: Target points to the resources that the patch document 16885 + should be applied to. 16886 + properties: 16887 + annotationSelector: 16888 + description: |- 16889 + AnnotationSelector is a string that follows the label selection expression 16890 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16891 + It matches with the resource annotations. 16892 + type: string 16893 + group: 16894 + description: |- 16895 + Group is the API group to select resources from. 16896 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 16897 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16898 + type: string 16899 + kind: 16900 + description: |- 16901 + Kind of the API Group to select resources from. 16902 + Together with Group and Version it is capable of unambiguously 16903 + identifying and/or selecting resources. 16904 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16905 + type: string 16906 + labelSelector: 16907 + description: |- 16908 + LabelSelector is a string that follows the label selection expression 16909 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16910 + It matches with the resource labels. 16911 + type: string 16912 + name: 16913 + description: Name to match resources with. 16914 + type: string 16915 + namespace: 16916 + description: Namespace to select resources from. 16917 + type: string 16918 + version: 16919 + description: |- 16920 + Version of the API Group to select resources from. 16921 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 16922 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16923 + type: string 16924 + type: object 16925 + required: 16926 + - patch 16927 + - target 16928 + type: object 16929 + type: array 16930 + patchesStrategicMerge: 16931 + description: Strategic merge patches, defined as inline YAML objects. 16932 + items: 16933 + x-kubernetes-preserve-unknown-fields: true 16934 + type: array 16935 + path: 16936 + description: |- 16937 + Path to the directory containing the kustomization.yaml file, or the 16938 + set of plain YAMLs a kustomization.yaml should be generated for. 16939 + Defaults to 'None', which translates to the root path of the SourceRef. 16940 + type: string 16941 + postBuild: 16942 + description: |- 16943 + PostBuild describes which actions to perform on the YAML manifest 16944 + generated by building the kustomize overlay. 16945 + properties: 16946 + substitute: 16947 + additionalProperties: 16948 + type: string 16949 + description: |- 16950 + Substitute holds a map of key/value pairs. 16951 + The variables defined in your YAML manifests 16952 + that match any of the keys defined in the map 16953 + will be substituted with the set value. 16954 + Includes support for bash string replacement functions 16955 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 16956 + type: object 16957 + substituteFrom: 16958 + description: |- 16959 + SubstituteFrom holds references to ConfigMaps and Secrets containing 16960 + the variables and their values to be substituted in the YAML manifests. 16961 + The ConfigMap and the Secret data keys represent the var names and they 16962 + must match the vars declared in the manifests for the substitution to happen. 16963 + items: 16964 + description: |- 16965 + SubstituteReference contains a reference to a resource containing 16966 + the variables name and value. 16967 + properties: 16968 + kind: 16969 + description: Kind of the values referent, valid values are 16970 + ('Secret', 'ConfigMap'). 16971 + enum: 16972 + - Secret 16973 + - ConfigMap 16974 + type: string 16975 + name: 16976 + description: |- 16977 + Name of the values referent. Should reside in the same namespace as the 16978 + referring resource. 16979 + maxLength: 253 16980 + minLength: 1 16981 + type: string 16982 + required: 16983 + - kind 16984 + - name 16985 + type: object 16986 + type: array 16987 + type: object 16988 + prune: 16989 + description: Prune enables garbage collection. 16990 + type: boolean 16991 + retryInterval: 16992 + description: |- 16993 + The interval at which to retry a previously failed reconciliation. 16994 + When not specified, the controller uses the KustomizationSpec.Interval 16995 + value to retry failures. 16996 + type: string 16997 + serviceAccountName: 16998 + description: |- 16999 + The name of the Kubernetes service account to impersonate 17000 + when reconciling this Kustomization. 17001 + type: string 17002 + sourceRef: 17003 + description: Reference of the source where the kustomization file 17004 + is. 17005 + properties: 17006 + apiVersion: 17007 + description: API version of the referent 17008 + type: string 17009 + kind: 17010 + description: Kind of the referent 17011 + enum: 17012 + - GitRepository 17013 + - Bucket 17014 + type: string 17015 + name: 17016 + description: Name of the referent 17017 + type: string 17018 + namespace: 17019 + description: Namespace of the referent, defaults to the Kustomization 17020 + namespace 17021 + type: string 17022 + required: 17023 + - kind 17024 + - name 17025 + type: object 17026 + suspend: 17027 + description: |- 17028 + This flag tells the controller to suspend subsequent kustomize executions, 17029 + it does not apply to already started executions. Defaults to false. 17030 + type: boolean 17031 + targetNamespace: 17032 + description: |- 17033 + TargetNamespace sets or overrides the namespace in the 17034 + kustomization.yaml file. 17035 + maxLength: 63 17036 + minLength: 1 17037 + type: string 17038 + timeout: 17039 + description: |- 17040 + Timeout for validation, apply and health checking operations. 17041 + Defaults to 'Interval' duration. 17042 + type: string 17043 + validation: 17044 + description: |- 17045 + Validate the Kubernetes objects before applying them on the cluster. 17046 + The validation strategy can be 'client' (local dry-run), 'server' 17047 + (APIServer dry-run) or 'none'. 17048 + When 'Force' is 'true', validation will fallback to 'client' if set to 17049 + 'server' because server-side validation is not supported in this scenario. 17050 + enum: 17051 + - none 17052 + - client 17053 + - server 17054 + type: string 17055 + required: 17056 + - interval 17057 + - prune 17058 + - sourceRef 17059 + type: object 17060 + status: 17061 + default: 17062 + observedGeneration: -1 17063 + description: KustomizationStatus defines the observed state of a kustomization. 17064 + properties: 17065 + conditions: 17066 + items: 17067 + description: Condition contains details for one aspect of the current 17068 + state of this API Resource. 17069 + properties: 17070 + lastTransitionTime: 17071 + description: |- 17072 + lastTransitionTime is the last time the condition transitioned from one status to another. 17073 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17074 + format: date-time 17075 + type: string 17076 + message: 17077 + description: |- 17078 + message is a human readable message indicating details about the transition. 17079 + This may be an empty string. 17080 + maxLength: 32768 17081 + type: string 17082 + observedGeneration: 17083 + description: |- 17084 + observedGeneration represents the .metadata.generation that the condition was set based upon. 17085 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17086 + with respect to the current state of the instance. 17087 + format: int64 17088 + minimum: 0 17089 + type: integer 17090 + reason: 17091 + description: |- 17092 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 17093 + Producers of specific condition types may define expected values and meanings for this field, 17094 + and whether the values are considered a guaranteed API. 17095 + The value should be a CamelCase string. 17096 + This field may not be empty. 17097 + maxLength: 1024 17098 + minLength: 1 17099 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17100 + type: string 17101 status: 17102 - default: 17103 - observedGeneration: -1 17104 - description: AlertStatus defines the observed state of the Alert. 17105 - properties: 17106 - conditions: 17107 - description: Conditions holds the conditions for the Alert. 17108 - items: 17109 - description: Condition contains details for one aspect of the current state of this API 17110 - Resource. 17111 - properties: 17112 - lastTransitionTime: 17113 - description: |- 17114 - lastTransitionTime is the last time the condition transitioned from one status to another. 17115 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17116 - format: date-time 17117 - type: string 17118 - message: 17119 - description: |- 17120 - message is a human readable message indicating details about the transition. 17121 - This may be an empty string. 17122 - maxLength: 32768 17123 - type: string 17124 - observedGeneration: 17125 - description: |- 17126 - observedGeneration represents the .metadata.generation that the condition was set based upon. 17127 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17128 - with respect to the current state of the instance. 17129 - format: int64 17130 - minimum: 0 17131 - type: integer 17132 - reason: 17133 - description: |- 17134 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 17135 - Producers of specific condition types may define expected values and meanings for this field, 17136 - and whether the values are considered a guaranteed API. 17137 - The value should be a CamelCase string. 17138 - This field may not be empty. 17139 - maxLength: 1024 17140 - minLength: 1 17141 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17142 - type: string 17143 - status: 17144 - description: status of the condition, one of True, False, Unknown. 17145 - enum: 17146 - - "True" 17147 - - "False" 17148 - - Unknown 17149 - type: string 17150 - type: 17151 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 17152 - maxLength: 316 17153 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17154 - type: string 17155 - required: 17156 - - lastTransitionTime 17157 - - message 17158 - - reason 17159 - - status 17160 - - type 17161 - type: object 17162 - type: array 17163 - lastHandledReconcileAt: 17164 - description: |- 17165 - LastHandledReconcileAt holds the value of the most recent 17166 - reconcile request value, so a change of the annotation value 17167 - can be detected. 17168 - type: string 17169 - observedGeneration: 17170 - description: ObservedGeneration is the last observed generation. 17171 - format: int64 17172 - type: integer 17173 - type: object 17174 + description: status of the condition, one of True, False, Unknown. 17175 + enum: 17176 + - "True" 17177 + - "False" 17178 + - Unknown 17179 + type: string 17180 + type: 17181 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 17182 + maxLength: 316 17183 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17184 + type: string 17185 + required: 17186 + - lastTransitionTime 17187 + - message 17188 + - reason 17189 + - status 17190 + - type 17191 + type: object 17192 + type: array 17193 + lastAppliedRevision: 17194 + description: |- 17195 + The last successfully applied revision. 17196 + The revision format for Git sources is <branch|tag>/<commit-sha>. 17197 + type: string 17198 + lastAttemptedRevision: 17199 + description: LastAttemptedRevision is the revision of the last reconciliation 17200 + attempt. 17201 + type: string 17202 + lastHandledReconcileAt: 17203 + description: |- 17204 + LastHandledReconcileAt holds the value of the most recent 17205 + reconcile request value, so a change of the annotation value 17206 + can be detected. 17207 + type: string 17208 + observedGeneration: 17209 + description: ObservedGeneration is the last reconciled generation. 17210 + format: int64 17211 + type: integer 17212 + snapshot: 17213 + description: The last successfully applied revision metadata. 17214 + properties: 17215 + checksum: 17216 + description: The manifests sha1 checksum. 17217 + type: string 17218 + entries: 17219 + description: A list of Kubernetes kinds grouped by namespace. 17220 + items: 17221 + description: |- 17222 + Snapshot holds the metadata of namespaced 17223 + Kubernetes objects 17224 + properties: 17225 + kinds: 17226 + additionalProperties: 17227 + type: string 17228 + description: The list of Kubernetes kinds. 17229 + type: object 17230 + namespace: 17231 + description: The namespace of this entry. 17232 + type: string 17233 + required: 17234 + - kinds 17235 + type: object 17236 + type: array 17237 + required: 17238 + - checksum 17239 + - entries 17240 type: object 17241 - served: true 17242 - storage: false 17243 - subresources: 17244 - status: {} 17245 - - additionalPrinterColumns: 17246 - - jsonPath: .metadata.creationTimestamp 17247 - name: Age 17248 - type: date 17249 - name: v1beta3 17250 - schema: 17251 - openAPIV3Schema: 17252 - description: Alert is the Schema for the alerts API 17253 + type: object 17254 + type: object 17255 + served: true 17256 + storage: false 17257 + subresources: 17258 + status: {} 17259 + - additionalPrinterColumns: 17260 + - jsonPath: .metadata.creationTimestamp 17261 + name: Age 17262 + type: date 17263 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 17264 + name: Ready 17265 + type: string 17266 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 17267 + name: Status 17268 + type: string 17269 + deprecated: true 17270 + deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 17271 + name: v1beta2 17272 + schema: 17273 + openAPIV3Schema: 17274 + description: Kustomization is the Schema for the kustomizations API. 17275 + properties: 17276 + apiVersion: 17277 + description: |- 17278 + APIVersion defines the versioned schema of this representation of an object. 17279 + Servers should convert recognized schemas to the latest internal value, and 17280 + may reject unrecognized values. 17281 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17282 + type: string 17283 + kind: 17284 + description: |- 17285 + Kind is a string value representing the REST resource this object represents. 17286 + Servers may infer this from the endpoint the client submits requests to. 17287 + Cannot be updated. 17288 + In CamelCase. 17289 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17290 + type: string 17291 + metadata: 17292 + type: object 17293 + spec: 17294 + description: KustomizationSpec defines the configuration to calculate 17295 + the desired state from a Source using Kustomize. 17296 + properties: 17297 + commonMetadata: 17298 + description: |- 17299 + CommonMetadata specifies the common labels and annotations that are applied to all resources. 17300 + Any existing label or annotation will be overridden if its key matches a common one. 17301 properties: 17302 - apiVersion: 17303 - description: |- 17304 - APIVersion defines the versioned schema of this representation of an object. 17305 - Servers should convert recognized schemas to the latest internal value, and 17306 - may reject unrecognized values. 17307 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17308 + annotations: 17309 + additionalProperties: 17310 + type: string 17311 + description: Annotations to be added to the object's metadata. 17312 + type: object 17313 + labels: 17314 + additionalProperties: 17315 + type: string 17316 + description: Labels to be added to the object's metadata. 17317 + type: object 17318 + type: object 17319 + components: 17320 + description: Components specifies relative paths to specifications 17321 + of other Components. 17322 + items: 17323 + type: string 17324 + type: array 17325 + decryption: 17326 + description: Decrypt Kubernetes secrets before applying them on the 17327 + cluster. 17328 + properties: 17329 + provider: 17330 + description: Provider is the name of the decryption engine. 17331 + enum: 17332 + - sops 17333 + type: string 17334 + secretRef: 17335 + description: The secret name containing the private OpenPGP keys 17336 + used for decryption. 17337 + properties: 17338 + name: 17339 + description: Name of the referent. 17340 type: string 17341 + required: 17342 + - name 17343 + type: object 17344 + required: 17345 + - provider 17346 + type: object 17347 + dependsOn: 17348 + description: |- 17349 + DependsOn may contain a meta.NamespacedObjectReference slice 17350 + with references to Kustomization resources that must be ready before this 17351 + Kustomization can be reconciled. 17352 + items: 17353 + description: |- 17354 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 17355 + namespace. 17356 + properties: 17357 + name: 17358 + description: Name of the referent. 17359 + type: string 17360 + namespace: 17361 + description: Namespace of the referent, when not specified it 17362 + acts as LocalObjectReference. 17363 + type: string 17364 + required: 17365 + - name 17366 + type: object 17367 + type: array 17368 + force: 17369 + default: false 17370 + description: |- 17371 + Force instructs the controller to recreate resources 17372 + when patching fails due to an immutable field change. 17373 + type: boolean 17374 + healthChecks: 17375 + description: A list of resources to be included in the health assessment. 17376 + items: 17377 + description: |- 17378 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 17379 + in any namespace. 17380 + properties: 17381 + apiVersion: 17382 + description: API version of the referent, if not specified the 17383 + Kubernetes preferred version will be used. 17384 + type: string 17385 kind: 17386 - description: |- 17387 - Kind is a string value representing the REST resource this object represents. 17388 - Servers may infer this from the endpoint the client submits requests to. 17389 - Cannot be updated. 17390 - In CamelCase. 17391 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17392 + description: Kind of the referent. 17393 + type: string 17394 + name: 17395 + description: Name of the referent. 17396 + type: string 17397 + namespace: 17398 + description: Namespace of the referent, when not specified it 17399 + acts as LocalObjectReference. 17400 + type: string 17401 + required: 17402 + - kind 17403 + - name 17404 + type: object 17405 + type: array 17406 + images: 17407 + description: |- 17408 + Images is a list of (image name, new name, new tag or digest) 17409 + for changing image names, tags or digests. This can also be achieved with a 17410 + patch, but this operator is simpler to specify. 17411 + items: 17412 + description: Image contains an image name, a new name, a new tag 17413 + or digest, which will replace the original name and tag. 17414 + properties: 17415 + digest: 17416 + description: |- 17417 + Digest is the value used to replace the original image tag. 17418 + If digest is present NewTag value is ignored. 17419 + type: string 17420 + name: 17421 + description: Name is a tag-less image name. 17422 + type: string 17423 + newName: 17424 + description: NewName is the value used to replace the original 17425 + name. 17426 + type: string 17427 + newTag: 17428 + description: NewTag is the value used to replace the original 17429 + tag. 17430 + type: string 17431 + required: 17432 + - name 17433 + type: object 17434 + type: array 17435 + interval: 17436 + description: The interval at which to reconcile the Kustomization. 17437 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17438 + type: string 17439 + kubeConfig: 17440 + description: |- 17441 + The KubeConfig for reconciling the Kustomization on a remote cluster. 17442 + When used in combination with KustomizationSpec.ServiceAccountName, 17443 + forces the controller to act on behalf of that Service Account at the 17444 + target cluster. 17445 + If the --default-service-account flag is set, its value will be used as 17446 + a controller level fallback for when KustomizationSpec.ServiceAccountName 17447 + is empty. 17448 + properties: 17449 + secretRef: 17450 + description: |- 17451 + SecretRef holds the name of a secret that contains a key with 17452 + the kubeconfig file as the value. If no key is set, the key will default 17453 + to 'value'. 17454 + It is recommended that the kubeconfig is self-contained, and the secret 17455 + is regularly updated if credentials such as a cloud-access-token expire. 17456 + Cloud specific `cmd-path` auth helpers will not function without adding 17457 + binaries and credentials to the Pod that is responsible for reconciling 17458 + Kubernetes resources. 17459 + properties: 17460 + key: 17461 + description: Key in the Secret, when not specified an implementation-specific 17462 + default key is used. 17463 type: string 17464 - metadata: 17465 - type: object 17466 - spec: 17467 - description: AlertSpec defines an alerting rule for events involving a list of objects. 17468 - properties: 17469 - eventMetadata: 17470 - additionalProperties: 17471 - type: string 17472 - description: |- 17473 - EventMetadata is an optional field for adding metadata to events dispatched by the 17474 - controller. This can be used for enhancing the context of the event. If a field 17475 - would override one already present on the original event as generated by the emitter, 17476 - then the override doesn't happen, i.e. the original value is preserved, and an info 17477 - log is printed. 17478 - type: object 17479 - eventSeverity: 17480 - default: info 17481 - description: |- 17482 - EventSeverity specifies how to filter events based on severity. 17483 - If set to 'info' no events will be filtered. 17484 - enum: 17485 - - info 17486 - - error 17487 - type: string 17488 - eventSources: 17489 - description: |- 17490 - EventSources specifies how to filter events based 17491 - on the involved object kind, name and namespace. 17492 - items: 17493 - description: |- 17494 - CrossNamespaceObjectReference contains enough information to let you locate the 17495 - typed referenced object at cluster level 17496 - properties: 17497 - apiVersion: 17498 - description: API version of the referent 17499 - type: string 17500 - kind: 17501 - description: Kind of the referent 17502 - enum: 17503 - - Bucket 17504 - - GitRepository 17505 - - Kustomization 17506 - - HelmRelease 17507 - - HelmChart 17508 - - HelmRepository 17509 - - ImageRepository 17510 - - ImagePolicy 17511 - - ImageUpdateAutomation 17512 - - OCIRepository 17513 - type: string 17514 - matchLabels: 17515 - additionalProperties: 17516 - type: string 17517 - description: |- 17518 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 17519 - map is equivalent to an element of matchExpressions, whose key field is "key", the 17520 - operator is "In", and the values array contains only "value". The requirements are ANDed. 17521 - MatchLabels requires the name to be set to `*`. 17522 - type: object 17523 - name: 17524 - description: |- 17525 - Name of the referent 17526 - If multiple resources are targeted `*` may be set. 17527 - maxLength: 53 17528 - minLength: 1 17529 - type: string 17530 - namespace: 17531 - description: Namespace of the referent 17532 - maxLength: 53 17533 - minLength: 1 17534 - type: string 17535 - required: 17536 - - kind 17537 - - name 17538 - type: object 17539 - type: array 17540 - exclusionList: 17541 - description: |- 17542 - ExclusionList specifies a list of Golang regular expressions 17543 - to be used for excluding messages. 17544 - items: 17545 - type: string 17546 - type: array 17547 - inclusionList: 17548 - description: |- 17549 - InclusionList specifies a list of Golang regular expressions 17550 - to be used for including messages. 17551 - items: 17552 - type: string 17553 - type: array 17554 - providerRef: 17555 - description: ProviderRef specifies which Provider this Alert should use. 17556 - properties: 17557 - name: 17558 - description: Name of the referent. 17559 - type: string 17560 - required: 17561 - - name 17562 - type: object 17563 - summary: 17564 - description: |- 17565 - Summary holds a short description of the impact and affected cluster. 17566 - Deprecated: Use EventMetadata instead. 17567 - maxLength: 255 17568 - type: string 17569 - suspend: 17570 - description: |- 17571 - Suspend tells the controller to suspend subsequent 17572 - events handling for this Alert. 17573 - type: boolean 17574 + name: 17575 + description: Name of the Secret. 17576 + type: string 17577 + required: 17578 + - name 17579 + type: object 17580 + required: 17581 + - secretRef 17582 + type: object 17583 + patches: 17584 + description: |- 17585 + Strategic merge and JSON patches, defined as inline YAML objects, 17586 + capable of targeting objects based on kind, label and annotation selectors. 17587 + items: 17588 + description: |- 17589 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 17590 + be applied to. 17591 + properties: 17592 + patch: 17593 + description: |- 17594 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 17595 + an array of operation objects. 17596 + type: string 17597 + target: 17598 + description: Target points to the resources that the patch document 17599 + should be applied to. 17600 + properties: 17601 + annotationSelector: 17602 + description: |- 17603 + AnnotationSelector is a string that follows the label selection expression 17604 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17605 + It matches with the resource annotations. 17606 + type: string 17607 + group: 17608 + description: |- 17609 + Group is the API group to select resources from. 17610 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17611 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17612 + type: string 17613 + kind: 17614 + description: |- 17615 + Kind of the API Group to select resources from. 17616 + Together with Group and Version it is capable of unambiguously 17617 + identifying and/or selecting resources. 17618 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17619 + type: string 17620 + labelSelector: 17621 + description: |- 17622 + LabelSelector is a string that follows the label selection expression 17623 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17624 + It matches with the resource labels. 17625 + type: string 17626 + name: 17627 + description: Name to match resources with. 17628 + type: string 17629 + namespace: 17630 + description: Namespace to select resources from. 17631 + type: string 17632 + version: 17633 + description: |- 17634 + Version of the API Group to select resources from. 17635 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17636 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17637 + type: string 17638 + type: object 17639 + required: 17640 + - patch 17641 + type: object 17642 + type: array 17643 + patchesJson6902: 17644 + description: |- 17645 + JSON 6902 patches, defined as inline YAML objects. 17646 + Deprecated: Use Patches instead. 17647 + items: 17648 + description: JSON6902Patch contains a JSON6902 patch and the target 17649 + the patch should be applied to. 17650 + properties: 17651 + patch: 17652 + description: Patch contains the JSON6902 patch document with 17653 + an array of operation objects. 17654 + items: 17655 + description: |- 17656 + JSON6902 is a JSON6902 operation object. 17657 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 17658 + properties: 17659 + from: 17660 + description: |- 17661 + From contains a JSON-pointer value that references a location within the target document where the operation is 17662 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 17663 + type: string 17664 + op: 17665 + description: |- 17666 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 17667 + "test". 17668 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 17669 + enum: 17670 + - test 17671 + - remove 17672 + - add 17673 + - replace 17674 + - move 17675 + - copy 17676 + type: string 17677 + path: 17678 + description: |- 17679 + Path contains the JSON-pointer value that references a location within the target document where the operation 17680 + is performed. The meaning of the value depends on the value of Op. 17681 + type: string 17682 + value: 17683 + description: |- 17684 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 17685 + account by all operations. 17686 + x-kubernetes-preserve-unknown-fields: true 17687 required: 17688 - - eventSources 17689 - - providerRef 17690 + - op 17691 + - path 17692 type: object 17693 + type: array 17694 + target: 17695 + description: Target points to the resources that the patch document 17696 + should be applied to. 17697 + properties: 17698 + annotationSelector: 17699 + description: |- 17700 + AnnotationSelector is a string that follows the label selection expression 17701 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17702 + It matches with the resource annotations. 17703 + type: string 17704 + group: 17705 + description: |- 17706 + Group is the API group to select resources from. 17707 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17708 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17709 + type: string 17710 + kind: 17711 + description: |- 17712 + Kind of the API Group to select resources from. 17713 + Together with Group and Version it is capable of unambiguously 17714 + identifying and/or selecting resources. 17715 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17716 + type: string 17717 + labelSelector: 17718 + description: |- 17719 + LabelSelector is a string that follows the label selection expression 17720 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17721 + It matches with the resource labels. 17722 + type: string 17723 + name: 17724 + description: Name to match resources with. 17725 + type: string 17726 + namespace: 17727 + description: Namespace to select resources from. 17728 + type: string 17729 + version: 17730 + description: |- 17731 + Version of the API Group to select resources from. 17732 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17733 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17734 + type: string 17735 + type: object 17736 + required: 17737 + - patch 17738 + - target 17739 + type: object 17740 + type: array 17741 + patchesStrategicMerge: 17742 + description: |- 17743 + Strategic merge patches, defined as inline YAML objects. 17744 + Deprecated: Use Patches instead. 17745 + items: 17746 + x-kubernetes-preserve-unknown-fields: true 17747 + type: array 17748 + path: 17749 + description: |- 17750 + Path to the directory containing the kustomization.yaml file, or the 17751 + set of plain YAMLs a kustomization.yaml should be generated for. 17752 + Defaults to 'None', which translates to the root path of the SourceRef. 17753 + type: string 17754 + postBuild: 17755 + description: |- 17756 + PostBuild describes which actions to perform on the YAML manifest 17757 + generated by building the kustomize overlay. 17758 + properties: 17759 + substitute: 17760 + additionalProperties: 17761 + type: string 17762 + description: |- 17763 + Substitute holds a map of key/value pairs. 17764 + The variables defined in your YAML manifests 17765 + that match any of the keys defined in the map 17766 + will be substituted with the set value. 17767 + Includes support for bash string replacement functions 17768 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 17769 + type: object 17770 + substituteFrom: 17771 + description: |- 17772 + SubstituteFrom holds references to ConfigMaps and Secrets containing 17773 + the variables and their values to be substituted in the YAML manifests. 17774 + The ConfigMap and the Secret data keys represent the var names and they 17775 + must match the vars declared in the manifests for the substitution to happen. 17776 + items: 17777 + description: |- 17778 + SubstituteReference contains a reference to a resource containing 17779 + the variables name and value. 17780 + properties: 17781 + kind: 17782 + description: Kind of the values referent, valid values are 17783 + ('Secret', 'ConfigMap'). 17784 + enum: 17785 + - Secret 17786 + - ConfigMap 17787 + type: string 17788 + name: 17789 + description: |- 17790 + Name of the values referent. Should reside in the same namespace as the 17791 + referring resource. 17792 + maxLength: 253 17793 + minLength: 1 17794 + type: string 17795 + optional: 17796 + default: false 17797 + description: |- 17798 + Optional indicates whether the referenced resource must exist, or whether to 17799 + tolerate its absence. If true and the referenced resource is absent, proceed 17800 + as if the resource was present but empty, without any variables defined. 17801 + type: boolean 17802 + required: 17803 + - kind 17804 + - name 17805 + type: object 17806 + type: array 17807 + type: object 17808 + prune: 17809 + description: Prune enables garbage collection. 17810 + type: boolean 17811 + retryInterval: 17812 + description: |- 17813 + The interval at which to retry a previously failed reconciliation. 17814 + When not specified, the controller uses the KustomizationSpec.Interval 17815 + value to retry failures. 17816 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17817 + type: string 17818 + serviceAccountName: 17819 + description: |- 17820 + The name of the Kubernetes service account to impersonate 17821 + when reconciling this Kustomization. 17822 + type: string 17823 + sourceRef: 17824 + description: Reference of the source where the kustomization file 17825 + is. 17826 + properties: 17827 + apiVersion: 17828 + description: API version of the referent. 17829 + type: string 17830 + kind: 17831 + description: Kind of the referent. 17832 + enum: 17833 + - OCIRepository 17834 + - GitRepository 17835 + - Bucket 17836 + type: string 17837 + name: 17838 + description: Name of the referent. 17839 + type: string 17840 + namespace: 17841 + description: Namespace of the referent, defaults to the namespace 17842 + of the Kubernetes resource object that contains the reference. 17843 + type: string 17844 + required: 17845 + - kind 17846 + - name 17847 + type: object 17848 + suspend: 17849 + description: |- 17850 + This flag tells the controller to suspend subsequent kustomize executions, 17851 + it does not apply to already started executions. Defaults to false. 17852 + type: boolean 17853 + targetNamespace: 17854 + description: |- 17855 + TargetNamespace sets or overrides the namespace in the 17856 + kustomization.yaml file. 17857 + maxLength: 63 17858 + minLength: 1 17859 + type: string 17860 + timeout: 17861 + description: |- 17862 + Timeout for validation, apply and health checking operations. 17863 + Defaults to 'Interval' duration. 17864 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17865 + type: string 17866 + validation: 17867 + description: 'Deprecated: Not used in v1beta2.' 17868 + enum: 17869 + - none 17870 + - client 17871 + - server 17872 + type: string 17873 + wait: 17874 + description: |- 17875 + Wait instructs the controller to check the health of all the reconciled resources. 17876 + When enabled, the HealthChecks are ignored. Defaults to false. 17877 + type: boolean 17878 + required: 17879 + - interval 17880 + - prune 17881 + - sourceRef 17882 + type: object 17883 + status: 17884 + default: 17885 + observedGeneration: -1 17886 + description: KustomizationStatus defines the observed state of a kustomization. 17887 + properties: 17888 + conditions: 17889 + items: 17890 + description: Condition contains details for one aspect of the current 17891 + state of this API Resource. 17892 + properties: 17893 + lastTransitionTime: 17894 + description: |- 17895 + lastTransitionTime is the last time the condition transitioned from one status to another. 17896 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17897 + format: date-time 17898 + type: string 17899 + message: 17900 + description: |- 17901 + message is a human readable message indicating details about the transition. 17902 + This may be an empty string. 17903 + maxLength: 32768 17904 + type: string 17905 + observedGeneration: 17906 + description: |- 17907 + observedGeneration represents the .metadata.generation that the condition was set based upon. 17908 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17909 + with respect to the current state of the instance. 17910 + format: int64 17911 + minimum: 0 17912 + type: integer 17913 + reason: 17914 + description: |- 17915 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 17916 + Producers of specific condition types may define expected values and meanings for this field, 17917 + and whether the values are considered a guaranteed API. 17918 + The value should be a CamelCase string. 17919 + This field may not be empty. 17920 + maxLength: 1024 17921 + minLength: 1 17922 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17923 + type: string 17924 + status: 17925 + description: status of the condition, one of True, False, Unknown. 17926 + enum: 17927 + - "True" 17928 + - "False" 17929 + - Unknown 17930 + type: string 17931 + type: 17932 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 17933 + maxLength: 316 17934 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17935 + type: string 17936 + required: 17937 + - lastTransitionTime 17938 + - message 17939 + - reason 17940 + - status 17941 + - type 17942 + type: object 17943 + type: array 17944 + inventory: 17945 + description: Inventory contains the list of Kubernetes resource object 17946 + references that have been successfully applied. 17947 + properties: 17948 + entries: 17949 + description: Entries of Kubernetes resource object references. 17950 + items: 17951 + description: ResourceRef contains the information necessary 17952 + to locate a resource within a cluster. 17953 + properties: 17954 + id: 17955 + description: |- 17956 + ID is the string representation of the Kubernetes resource object's metadata, 17957 + in the format '<namespace>_<name>_<group>_<kind>'. 17958 + type: string 17959 + v: 17960 + description: Version is the API version of the Kubernetes 17961 + resource object's kind. 17962 + type: string 17963 + required: 17964 + - id 17965 + - v 17966 + type: object 17967 + type: array 17968 + required: 17969 + - entries 17970 type: object 17971 - served: true 17972 - storage: true 17973 - subresources: {} 17974 + lastAppliedRevision: 17975 + description: |- 17976 + The last successfully applied revision. 17977 + Equals the Revision of the applied Artifact from the referenced Source. 17978 + type: string 17979 + lastAttemptedRevision: 17980 + description: LastAttemptedRevision is the revision of the last reconciliation 17981 + attempt. 17982 + type: string 17983 + lastHandledReconcileAt: 17984 + description: |- 17985 + LastHandledReconcileAt holds the value of the most recent 17986 + reconcile request value, so a change of the annotation value 17987 + can be detected. 17988 + type: string 17989 + observedGeneration: 17990 + description: ObservedGeneration is the last reconciled generation. 17991 + format: int64 17992 + type: integer 17993 + type: object 17994 + type: object 17995 + served: true 17996 + storage: false 17997 + subresources: 17998 + status: {} 17999 +--- 18000 +apiVersion: v1 18001 +kind: ServiceAccount 18002 +metadata: 18003 + labels: 18004 + app.kubernetes.io/component: kustomize-controller 18005 + app.kubernetes.io/instance: flux-system 18006 + app.kubernetes.io/part-of: flux 18007 + app.kubernetes.io/version: v2.6.4 18008 + name: kustomize-controller 18009 + namespace: flux-system 18010 +--- 18011 +apiVersion: apps/v1 18012 +kind: Deployment 18013 +metadata: 18014 + labels: 18015 + app.kubernetes.io/component: kustomize-controller 18016 + app.kubernetes.io/instance: flux-system 18017 + app.kubernetes.io/part-of: flux 18018 + app.kubernetes.io/version: v2.6.4 18019 + control-plane: controller 18020 + name: kustomize-controller 18021 + namespace: flux-system 18022 +spec: 18023 + replicas: 1 18024 + selector: 18025 + matchLabels: 18026 + app: kustomize-controller 18027 + template: 18028 + metadata: 18029 + annotations: 18030 + prometheus.io/port: "8080" 18031 + prometheus.io/scrape: "true" 18032 + labels: 18033 + app: kustomize-controller 18034 + spec: 18035 + containers: 18036 + - args: 18037 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 18038 + - --watch-all-namespaces=true 18039 + - --log-level=info 18040 + - --log-encoding=json 18041 + - --enable-leader-election 18042 + env: 18043 + - name: RUNTIME_NAMESPACE 18044 + valueFrom: 18045 + fieldRef: 18046 + fieldPath: metadata.namespace 18047 + - name: GOMAXPROCS 18048 + valueFrom: 18049 + resourceFieldRef: 18050 + containerName: manager 18051 + resource: limits.cpu 18052 + - name: GOMEMLIMIT 18053 + valueFrom: 18054 + resourceFieldRef: 18055 + containerName: manager 18056 + resource: limits.memory 18057 + image: ghcr.io/fluxcd/kustomize-controller:v1.6.1 18058 + imagePullPolicy: IfNotPresent 18059 + livenessProbe: 18060 + httpGet: 18061 + path: /healthz 18062 + port: healthz 18063 + name: manager 18064 + ports: 18065 + - containerPort: 8080 18066 + name: http-prom 18067 + protocol: TCP 18068 + - containerPort: 9440 18069 + name: healthz 18070 + protocol: TCP 18071 + readinessProbe: 18072 + httpGet: 18073 + path: /readyz 18074 + port: healthz 18075 + resources: 18076 + limits: 18077 + cpu: 1000m 18078 + memory: 1Gi 18079 + requests: 18080 + cpu: 100m 18081 + memory: 64Mi 18082 + securityContext: 18083 + allowPrivilegeEscalation: false 18084 + capabilities: 18085 + drop: 18086 + - ALL 18087 + readOnlyRootFilesystem: true 18088 + runAsNonRoot: true 18089 + seccompProfile: 18090 + type: RuntimeDefault 18091 + volumeMounts: 18092 + - mountPath: /tmp 18093 + name: temp 18094 + nodeSelector: 18095 + kubernetes.io/os: linux 18096 + priorityClassName: system-cluster-critical 18097 + securityContext: 18098 + fsGroup: 1337 18099 + serviceAccountName: kustomize-controller 18100 + terminationGracePeriodSeconds: 60 18101 + volumes: 18102 + - emptyDir: {} 18103 + name: temp 18104 --- 18105 apiVersion: apiextensions.k8s.io/v1 18106 kind: CustomResourceDefinition 18107 metadata: 18108 - annotations: 18109 - controller-gen.kubebuilder.io/version: v0.16.1 18110 - labels: 18111 - app.kubernetes.io/component: notification-controller 18112 - app.kubernetes.io/instance: flux-system 18113 - app.kubernetes.io/part-of: flux 18114 - app.kubernetes.io/version: v2.5.1 18115 - name: providers.notification.toolkit.fluxcd.io 18116 + annotations: 18117 + controller-gen.kubebuilder.io/version: v0.16.1 18118 + labels: 18119 + app.kubernetes.io/component: helm-controller 18120 + app.kubernetes.io/instance: flux-system 18121 + app.kubernetes.io/part-of: flux 18122 + app.kubernetes.io/version: v2.6.4 18123 + name: helmreleases.helm.toolkit.fluxcd.io 18124 spec: 18125 - group: notification.toolkit.fluxcd.io 18126 - names: 18127 - kind: Provider 18128 - listKind: ProviderList 18129 - plural: providers 18130 - singular: provider 18131 - scope: Namespaced 18132 - versions: 18133 - - additionalPrinterColumns: 18134 - - jsonPath: .metadata.creationTimestamp 18135 - name: Age 18136 - type: date 18137 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 18138 - name: Ready 18139 - type: string 18140 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 18141 - name: Status 18142 - type: string 18143 - deprecated: true 18144 - deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3 18145 - name: v1beta1 18146 - schema: 18147 - openAPIV3Schema: 18148 - description: Provider is the Schema for the providers API 18149 + group: helm.toolkit.fluxcd.io 18150 + names: 18151 + kind: HelmRelease 18152 + listKind: HelmReleaseList 18153 + plural: helmreleases 18154 + shortNames: 18155 + - hr 18156 + singular: helmrelease 18157 + scope: Namespaced 18158 + versions: 18159 + - additionalPrinterColumns: 18160 + - jsonPath: .metadata.creationTimestamp 18161 + name: Age 18162 + type: date 18163 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 18164 + name: Ready 18165 + type: string 18166 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 18167 + name: Status 18168 + type: string 18169 + name: v2 18170 + schema: 18171 + openAPIV3Schema: 18172 + description: HelmRelease is the Schema for the helmreleases API 18173 + properties: 18174 + apiVersion: 18175 + description: |- 18176 + APIVersion defines the versioned schema of this representation of an object. 18177 + Servers should convert recognized schemas to the latest internal value, and 18178 + may reject unrecognized values. 18179 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18180 + type: string 18181 + kind: 18182 + description: |- 18183 + Kind is a string value representing the REST resource this object represents. 18184 + Servers may infer this from the endpoint the client submits requests to. 18185 + Cannot be updated. 18186 + In CamelCase. 18187 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18188 + type: string 18189 + metadata: 18190 + type: object 18191 + spec: 18192 + description: HelmReleaseSpec defines the desired state of a Helm release. 18193 + properties: 18194 + chart: 18195 + description: |- 18196 + Chart defines the template of the v1.HelmChart that should be created 18197 + for this HelmRelease. 18198 properties: 18199 - apiVersion: 18200 + metadata: 18201 + description: ObjectMeta holds the template for metadata like labels 18202 + and annotations. 18203 + properties: 18204 + annotations: 18205 + additionalProperties: 18206 + type: string 18207 + description: |- 18208 + Annotations is an unstructured key value map stored with a resource that may be 18209 + set by external tools to store and retrieve arbitrary metadata. They are not 18210 + queryable and should be preserved when modifying objects. 18211 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 18212 + type: object 18213 + labels: 18214 + additionalProperties: 18215 + type: string 18216 + description: |- 18217 + Map of string keys and values that can be used to organize and categorize 18218 + (scope and select) objects. 18219 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 18220 + type: object 18221 + type: object 18222 + spec: 18223 + description: Spec holds the template for the v1.HelmChartSpec 18224 + for this HelmRelease. 18225 + properties: 18226 + chart: 18227 + description: The name or path the Helm chart is available 18228 + at in the SourceRef. 18229 + maxLength: 2048 18230 + minLength: 1 18231 + type: string 18232 + ignoreMissingValuesFiles: 18233 + description: IgnoreMissingValuesFiles controls whether to 18234 + silently ignore missing values files rather than failing. 18235 + type: boolean 18236 + interval: 18237 description: |- 18238 - APIVersion defines the versioned schema of this representation of an object. 18239 - Servers should convert recognized schemas to the latest internal value, and 18240 - may reject unrecognized values. 18241 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18242 + Interval at which to check the v1.Source for updates. Defaults to 18243 + 'HelmReleaseSpec.Interval'. 18244 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18245 type: string 18246 - kind: 18247 + reconcileStrategy: 18248 + default: ChartVersion 18249 description: |- 18250 - Kind is a string value representing the REST resource this object represents. 18251 - Servers may infer this from the endpoint the client submits requests to. 18252 - Cannot be updated. 18253 - In CamelCase. 18254 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18255 + Determines what enables the creation of a new artifact. Valid values are 18256 + ('ChartVersion', 'Revision'). 18257 + See the documentation of the values for an explanation on their behavior. 18258 + Defaults to ChartVersion when omitted. 18259 + enum: 18260 + - ChartVersion 18261 + - Revision 18262 type: string 18263 - metadata: 18264 - type: object 18265 - spec: 18266 - description: ProviderSpec defines the desired state of Provider 18267 + sourceRef: 18268 + description: The name and namespace of the v1.Source the chart 18269 + is available at. 18270 properties: 18271 - address: 18272 - description: HTTP/S webhook address of this provider 18273 - pattern: ^(http|https):// 18274 - type: string 18275 - certSecretRef: 18276 - description: |- 18277 - CertSecretRef can be given the name of a secret containing 18278 - a PEM-encoded CA certificate (`caFile`) 18279 - properties: 18280 - name: 18281 - description: Name of the referent. 18282 - type: string 18283 - required: 18284 - - name 18285 - type: object 18286 - channel: 18287 - description: Alert channel for this provider 18288 - type: string 18289 - proxy: 18290 - description: HTTP/S address of the proxy 18291 - pattern: ^(http|https):// 18292 - type: string 18293 - secretRef: 18294 - description: |- 18295 - Secret reference containing the provider webhook URL 18296 - using "address" as data key 18297 - properties: 18298 - name: 18299 - description: Name of the referent. 18300 - type: string 18301 - required: 18302 - - name 18303 - type: object 18304 - suspend: 18305 - description: |- 18306 - This flag tells the controller to suspend subsequent events handling. 18307 - Defaults to false. 18308 - type: boolean 18309 - timeout: 18310 - description: Timeout for sending alerts to the provider. 18311 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 18312 - type: string 18313 - type: 18314 - description: Type of provider 18315 - enum: 18316 - - slack 18317 - - discord 18318 - - msteams 18319 - - rocket 18320 - - generic 18321 - - generic-hmac 18322 - - github 18323 - - gitlab 18324 - - bitbucket 18325 - - azuredevops 18326 - - googlechat 18327 - - webex 18328 - - sentry 18329 - - azureeventhub 18330 - - telegram 18331 - - lark 18332 - - matrix 18333 - - opsgenie 18334 - - alertmanager 18335 - - grafana 18336 - - githubdispatch 18337 - type: string 18338 - username: 18339 - description: Bot username for this provider 18340 - type: string 18341 + apiVersion: 18342 + description: APIVersion of the referent. 18343 + type: string 18344 + kind: 18345 + description: Kind of the referent. 18346 + enum: 18347 + - HelmRepository 18348 + - GitRepository 18349 + - Bucket 18350 + type: string 18351 + name: 18352 + description: Name of the referent. 18353 + maxLength: 253 18354 + minLength: 1 18355 + type: string 18356 + namespace: 18357 + description: Namespace of the referent. 18358 + maxLength: 63 18359 + minLength: 1 18360 + type: string 18361 required: 18362 - - type 18363 + - kind 18364 + - name 18365 type: object 18366 - status: 18367 - default: 18368 - observedGeneration: -1 18369 - description: ProviderStatus defines the observed state of Provider 18370 + valuesFiles: 18371 + description: |- 18372 + Alternative list of values files to use as the chart values (values.yaml 18373 + is not included by default), expected to be a relative path in the SourceRef. 18374 + Values files are merged in the order of this list with the last file overriding 18375 + the first. Ignored when omitted. 18376 + items: 18377 + type: string 18378 + type: array 18379 + verify: 18380 + description: |- 18381 + Verify contains the secret name containing the trusted public keys 18382 + used to verify the signature and specifies which provider to use to check 18383 + whether OCI image is authentic. 18384 + This field is only supported for OCI sources. 18385 + Chart dependencies, which are not bundled in the umbrella chart artifact, 18386 + are not verified. 18387 properties: 18388 - conditions: 18389 - items: 18390 - description: Condition contains details for one aspect of the current state of this API 18391 - Resource. 18392 - properties: 18393 - lastTransitionTime: 18394 - description: |- 18395 - lastTransitionTime is the last time the condition transitioned from one status to another. 18396 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 18397 - format: date-time 18398 - type: string 18399 - message: 18400 - description: |- 18401 - message is a human readable message indicating details about the transition. 18402 - This may be an empty string. 18403 - maxLength: 32768 18404 - type: string 18405 - observedGeneration: 18406 - description: |- 18407 - observedGeneration represents the .metadata.generation that the condition was set based upon. 18408 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 18409 - with respect to the current state of the instance. 18410 - format: int64 18411 - minimum: 0 18412 - type: integer 18413 - reason: 18414 - description: |- 18415 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 18416 - Producers of specific condition types may define expected values and meanings for this field, 18417 - and whether the values are considered a guaranteed API. 18418 - The value should be a CamelCase string. 18419 - This field may not be empty. 18420 - maxLength: 1024 18421 - minLength: 1 18422 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 18423 - type: string 18424 - status: 18425 - description: status of the condition, one of True, False, Unknown. 18426 - enum: 18427 - - "True" 18428 - - "False" 18429 - - Unknown 18430 - type: string 18431 - type: 18432 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 18433 - maxLength: 316 18434 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 18435 - type: string 18436 - required: 18437 - - lastTransitionTime 18438 - - message 18439 - - reason 18440 - - status 18441 - - type 18442 - type: object 18443 - type: array 18444 - observedGeneration: 18445 - description: ObservedGeneration is the last reconciled generation. 18446 - format: int64 18447 - type: integer 18448 + provider: 18449 + default: cosign 18450 + description: Provider specifies the technology used to 18451 + sign the OCI Helm chart. 18452 + enum: 18453 + - cosign 18454 + - notation 18455 + type: string 18456 + secretRef: 18457 + description: |- 18458 + SecretRef specifies the Kubernetes Secret containing the 18459 + trusted public keys. 18460 + properties: 18461 + name: 18462 + description: Name of the referent. 18463 + type: string 18464 + required: 18465 + - name 18466 + type: object 18467 + required: 18468 + - provider 18469 type: object 18470 + version: 18471 + default: '*' 18472 + description: |- 18473 + Version semver expression, ignored for charts from v1.GitRepository and 18474 + v1beta2.Bucket sources. Defaults to latest when omitted. 18475 + type: string 18476 + required: 18477 + - chart 18478 + - sourceRef 18479 + type: object 18480 + required: 18481 + - spec 18482 type: object 18483 - served: true 18484 - storage: false 18485 - subresources: 18486 - status: {} 18487 - - additionalPrinterColumns: 18488 - - jsonPath: .metadata.creationTimestamp 18489 - name: Age 18490 - type: date 18491 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 18492 - name: Ready 18493 - type: string 18494 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 18495 - name: Status 18496 - type: string 18497 - deprecated: true 18498 - deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 18499 - name: v1beta2 18500 - schema: 18501 - openAPIV3Schema: 18502 - description: Provider is the Schema for the providers API. 18503 + chartRef: 18504 + description: |- 18505 + ChartRef holds a reference to a source controller resource containing the 18506 + Helm chart artifact. 18507 properties: 18508 - apiVersion: 18509 + apiVersion: 18510 + description: APIVersion of the referent. 18511 + type: string 18512 + kind: 18513 + description: Kind of the referent. 18514 + enum: 18515 + - OCIRepository 18516 + - HelmChart 18517 + type: string 18518 + name: 18519 + description: Name of the referent. 18520 + maxLength: 253 18521 + minLength: 1 18522 + type: string 18523 + namespace: 18524 + description: |- 18525 + Namespace of the referent, defaults to the namespace of the Kubernetes 18526 + resource object that contains the reference. 18527 + maxLength: 63 18528 + minLength: 1 18529 + type: string 18530 + required: 18531 + - kind 18532 + - name 18533 + type: object 18534 + dependsOn: 18535 + description: |- 18536 + DependsOn may contain a meta.NamespacedObjectReference slice with 18537 + references to HelmRelease resources that must be ready before this HelmRelease 18538 + can be reconciled. 18539 + items: 18540 + description: |- 18541 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 18542 + namespace. 18543 + properties: 18544 + name: 18545 + description: Name of the referent. 18546 + type: string 18547 + namespace: 18548 + description: Namespace of the referent, when not specified it 18549 + acts as LocalObjectReference. 18550 + type: string 18551 + required: 18552 + - name 18553 + type: object 18554 + type: array 18555 + driftDetection: 18556 + description: |- 18557 + DriftDetection holds the configuration for detecting and handling 18558 + differences between the manifest in the Helm storage and the resources 18559 + currently existing in the cluster. 18560 + properties: 18561 + ignore: 18562 + description: |- 18563 + Ignore contains a list of rules for specifying which changes to ignore 18564 + during diffing. 18565 + items: 18566 + description: |- 18567 + IgnoreRule defines a rule to selectively disregard specific changes during 18568 + the drift detection process. 18569 + properties: 18570 + paths: 18571 + description: |- 18572 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 18573 + consideration in a Kubernetes object. 18574 + items: 18575 + type: string 18576 + type: array 18577 + target: 18578 + description: |- 18579 + Target is a selector for specifying Kubernetes objects to which this 18580 + rule applies. 18581 + If Target is not set, the Paths will be ignored for all Kubernetes 18582 + objects within the manifest of the Helm release. 18583 + properties: 18584 + annotationSelector: 18585 + description: |- 18586 + AnnotationSelector is a string that follows the label selection expression 18587 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18588 + It matches with the resource annotations. 18589 + type: string 18590 + group: 18591 + description: |- 18592 + Group is the API group to select resources from. 18593 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 18594 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18595 + type: string 18596 + kind: 18597 + description: |- 18598 + Kind of the API Group to select resources from. 18599 + Together with Group and Version it is capable of unambiguously 18600 + identifying and/or selecting resources. 18601 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18602 + type: string 18603 + labelSelector: 18604 + description: |- 18605 + LabelSelector is a string that follows the label selection expression 18606 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18607 + It matches with the resource labels. 18608 + type: string 18609 + name: 18610 + description: Name to match resources with. 18611 + type: string 18612 + namespace: 18613 + description: Namespace to select resources from. 18614 + type: string 18615 + version: 18616 + description: |- 18617 + Version of the API Group to select resources from. 18618 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 18619 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18620 + type: string 18621 + type: object 18622 + required: 18623 + - paths 18624 + type: object 18625 + type: array 18626 + mode: 18627 + description: |- 18628 + Mode defines how differences should be handled between the Helm manifest 18629 + and the manifest currently applied to the cluster. 18630 + If not explicitly set, it defaults to DiffModeDisabled. 18631 + enum: 18632 + - enabled 18633 + - warn 18634 + - disabled 18635 + type: string 18636 + type: object 18637 + install: 18638 + description: Install holds the configuration for Helm install actions 18639 + for this HelmRelease. 18640 + properties: 18641 + crds: 18642 + description: |- 18643 + CRDs upgrade CRDs from the Helm Chart's crds directory according 18644 + to the CRD upgrade policy provided here. Valid values are `Skip`, 18645 + `Create` or `CreateReplace`. Default is `Create` and if omitted 18646 + CRDs are installed but not updated. 18647 + 18648 + Skip: do neither install nor replace (update) any CRDs. 18649 + 18650 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 18651 + 18652 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 18653 + but not deleted. 18654 + 18655 + By default, CRDs are applied (installed) during Helm install action. 18656 + With this option users can opt in to CRD replace existing CRDs on Helm 18657 + install actions, which is not (yet) natively supported by Helm. 18658 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 18659 + enum: 18660 + - Skip 18661 + - Create 18662 + - CreateReplace 18663 + type: string 18664 + createNamespace: 18665 + description: |- 18666 + CreateNamespace tells the Helm install action to create the 18667 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 18668 + On uninstall, the namespace will not be garbage collected. 18669 + type: boolean 18670 + disableHooks: 18671 + description: DisableHooks prevents hooks from running during the 18672 + Helm install action. 18673 + type: boolean 18674 + disableOpenAPIValidation: 18675 + description: |- 18676 + DisableOpenAPIValidation prevents the Helm install action from validating 18677 + rendered templates against the Kubernetes OpenAPI Schema. 18678 + type: boolean 18679 + disableSchemaValidation: 18680 + description: |- 18681 + DisableSchemaValidation prevents the Helm install action from validating 18682 + the values against the JSON Schema. 18683 + type: boolean 18684 + disableTakeOwnership: 18685 + description: |- 18686 + DisableTakeOwnership disables taking ownership of existing resources 18687 + during the Helm install action. Defaults to false. 18688 + type: boolean 18689 + disableWait: 18690 + description: |- 18691 + DisableWait disables the waiting for resources to be ready after a Helm 18692 + install has been performed. 18693 + type: boolean 18694 + disableWaitForJobs: 18695 + description: |- 18696 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 18697 + install has been performed. 18698 + type: boolean 18699 + remediation: 18700 + description: |- 18701 + Remediation holds the remediation configuration for when the Helm install 18702 + action for the HelmRelease fails. The default is to not perform any action. 18703 + properties: 18704 + ignoreTestFailures: 18705 description: |- 18706 - APIVersion defines the versioned schema of this representation of an object. 18707 - Servers should convert recognized schemas to the latest internal value, and 18708 - may reject unrecognized values. 18709 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18710 - type: string 18711 - kind: 18712 + IgnoreTestFailures tells the controller to skip remediation when the Helm 18713 + tests are run after an install action but fail. Defaults to 18714 + 'Test.IgnoreFailures'. 18715 + type: boolean 18716 + remediateLastFailure: 18717 description: |- 18718 - Kind is a string value representing the REST resource this object represents. 18719 - Servers may infer this from the endpoint the client submits requests to. 18720 - Cannot be updated. 18721 - In CamelCase. 18722 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18723 + RemediateLastFailure tells the controller to remediate the last failure, when 18724 + no retries remain. Defaults to 'false'. 18725 + type: boolean 18726 + retries: 18727 + description: |- 18728 + Retries is the number of retries that should be attempted on failures before 18729 + bailing. Remediation, using an uninstall, is performed between each attempt. 18730 + Defaults to '0', a negative integer equals to unlimited retries. 18731 + type: integer 18732 + type: object 18733 + replace: 18734 + description: |- 18735 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 18736 + if that name is a deleted release which remains in the history. 18737 + type: boolean 18738 + skipCRDs: 18739 + description: |- 18740 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 18741 + CRDs are installed if not already present. 18742 + 18743 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 18744 + type: boolean 18745 + timeout: 18746 + description: |- 18747 + Timeout is the time to wait for any individual Kubernetes operation (like 18748 + Jobs for hooks) during the performance of a Helm install action. Defaults to 18749 + 'HelmReleaseSpec.Timeout'. 18750 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18751 + type: string 18752 + type: object 18753 + interval: 18754 + description: Interval at which to reconcile the Helm release. 18755 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18756 + type: string 18757 + kubeConfig: 18758 + description: |- 18759 + KubeConfig for reconciling the HelmRelease on a remote cluster. 18760 + When used in combination with HelmReleaseSpec.ServiceAccountName, 18761 + forces the controller to act on behalf of that Service Account at the 18762 + target cluster. 18763 + If the --default-service-account flag is set, its value will be used as 18764 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 18765 + is empty. 18766 + properties: 18767 + secretRef: 18768 + description: |- 18769 + SecretRef holds the name of a secret that contains a key with 18770 + the kubeconfig file as the value. If no key is set, the key will default 18771 + to 'value'. 18772 + It is recommended that the kubeconfig is self-contained, and the secret 18773 + is regularly updated if credentials such as a cloud-access-token expire. 18774 + Cloud specific `cmd-path` auth helpers will not function without adding 18775 + binaries and credentials to the Pod that is responsible for reconciling 18776 + Kubernetes resources. 18777 + properties: 18778 + key: 18779 + description: Key in the Secret, when not specified an implementation-specific 18780 + default key is used. 18781 type: string 18782 - metadata: 18783 - type: object 18784 - spec: 18785 - description: ProviderSpec defines the desired state of the Provider. 18786 - properties: 18787 - address: 18788 - description: |- 18789 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 18790 - What kind of endpoint depends on the specific Provider type being used. 18791 - For the generic Provider, for example, this is an HTTP/S address. 18792 - For other Provider types this could be a project ID or a namespace. 18793 - maxLength: 2048 18794 - type: string 18795 - certSecretRef: 18796 - description: |- 18797 - CertSecretRef specifies the Secret containing 18798 - a PEM-encoded CA certificate (in the `ca.crt` key). 18799 + name: 18800 + description: Name of the Secret. 18801 + type: string 18802 + required: 18803 + - name 18804 + type: object 18805 + required: 18806 + - secretRef 18807 + type: object 18808 + maxHistory: 18809 + description: |- 18810 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 18811 + Use '0' for an unlimited number of revisions; defaults to '5'. 18812 + type: integer 18813 + persistentClient: 18814 + description: |- 18815 + PersistentClient tells the controller to use a persistent Kubernetes 18816 + client for this release. When enabled, the client will be reused for the 18817 + duration of the reconciliation, instead of being created and destroyed 18818 + for each (step of a) Helm action. 18819 18820 - Note: Support for the `caFile` key has 18821 - been deprecated. 18822 - properties: 18823 - name: 18824 - description: Name of the referent. 18825 - type: string 18826 - required: 18827 - - name 18828 - type: object 18829 - channel: 18830 - description: Channel specifies the destination channel where events should be posted. 18831 - maxLength: 2048 18832 - type: string 18833 - interval: 18834 - description: Interval at which to reconcile the Provider with its Secret references. 18835 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18836 - type: string 18837 - proxy: 18838 - description: Proxy the HTTP/S address of the proxy server. 18839 - maxLength: 2048 18840 - pattern: ^(http|https)://.*$ 18841 - type: string 18842 - secretRef: 18843 - description: |- 18844 - SecretRef specifies the Secret containing the authentication 18845 - credentials for this Provider. 18846 - properties: 18847 - name: 18848 - description: Name of the referent. 18849 - type: string 18850 - required: 18851 - - name 18852 + This can improve performance, but may cause issues with some Helm charts 18853 + that for example do create Custom Resource Definitions during installation 18854 + outside Helm's CRD lifecycle hooks, which are then not observed to be 18855 + available by e.g. post-install hooks. 18856 + 18857 + If not set, it defaults to true. 18858 + type: boolean 18859 + postRenderers: 18860 + description: |- 18861 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 18862 + of their definition. 18863 + items: 18864 + description: PostRenderer contains a Helm PostRenderer specification. 18865 + properties: 18866 + kustomize: 18867 + description: Kustomization to apply as PostRenderer. 18868 + properties: 18869 + images: 18870 + description: |- 18871 + Images is a list of (image name, new name, new tag or digest) 18872 + for changing image names, tags or digests. This can also be achieved with a 18873 + patch, but this operator is simpler to specify. 18874 + items: 18875 + description: Image contains an image name, a new name, 18876 + a new tag or digest, which will replace the original 18877 + name and tag. 18878 + properties: 18879 + digest: 18880 + description: |- 18881 + Digest is the value used to replace the original image tag. 18882 + If digest is present NewTag value is ignored. 18883 + type: string 18884 + name: 18885 + description: Name is a tag-less image name. 18886 + type: string 18887 + newName: 18888 + description: NewName is the value used to replace 18889 + the original name. 18890 + type: string 18891 + newTag: 18892 + description: NewTag is the value used to replace the 18893 + original tag. 18894 + type: string 18895 + required: 18896 + - name 18897 + type: object 18898 + type: array 18899 + patches: 18900 + description: |- 18901 + Strategic merge and JSON patches, defined as inline YAML objects, 18902 + capable of targeting objects based on kind, label and annotation selectors. 18903 + items: 18904 + description: |- 18905 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 18906 + be applied to. 18907 + properties: 18908 + patch: 18909 + description: |- 18910 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 18911 + an array of operation objects. 18912 + type: string 18913 + target: 18914 + description: Target points to the resources that the 18915 + patch document should be applied to. 18916 + properties: 18917 + annotationSelector: 18918 + description: |- 18919 + AnnotationSelector is a string that follows the label selection expression 18920 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18921 + It matches with the resource annotations. 18922 + type: string 18923 + group: 18924 + description: |- 18925 + Group is the API group to select resources from. 18926 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 18927 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18928 + type: string 18929 + kind: 18930 + description: |- 18931 + Kind of the API Group to select resources from. 18932 + Together with Group and Version it is capable of unambiguously 18933 + identifying and/or selecting resources. 18934 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18935 + type: string 18936 + labelSelector: 18937 + description: |- 18938 + LabelSelector is a string that follows the label selection expression 18939 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 18940 + It matches with the resource labels. 18941 + type: string 18942 + name: 18943 + description: Name to match resources with. 18944 + type: string 18945 + namespace: 18946 + description: Namespace to select resources from. 18947 + type: string 18948 + version: 18949 + description: |- 18950 + Version of the API Group to select resources from. 18951 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 18952 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 18953 + type: string 18954 type: object 18955 - suspend: 18956 - description: |- 18957 - Suspend tells the controller to suspend subsequent 18958 - events handling for this Provider. 18959 - type: boolean 18960 - timeout: 18961 - description: Timeout for sending alerts to the Provider. 18962 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 18963 - type: string 18964 - type: 18965 - description: Type specifies which Provider implementation to use. 18966 - enum: 18967 - - slack 18968 - - discord 18969 - - msteams 18970 - - rocket 18971 - - generic 18972 - - generic-hmac 18973 - - github 18974 - - gitlab 18975 - - gitea 18976 - - bitbucketserver 18977 - - bitbucket 18978 - - azuredevops 18979 - - googlechat 18980 - - googlepubsub 18981 - - webex 18982 - - sentry 18983 - - azureeventhub 18984 - - telegram 18985 - - lark 18986 - - matrix 18987 - - opsgenie 18988 - - alertmanager 18989 - - grafana 18990 - - githubdispatch 18991 - - pagerduty 18992 - - datadog 18993 - type: string 18994 - username: 18995 - description: Username specifies the name under which events are posted. 18996 - maxLength: 2048 18997 - type: string 18998 - required: 18999 - - type 19000 - type: object 19001 + required: 19002 + - patch 19003 + type: object 19004 + type: array 19005 + type: object 19006 + type: object 19007 + type: array 19008 + releaseName: 19009 + description: |- 19010 + ReleaseName used for the Helm release. Defaults to a composition of 19011 + '[TargetNamespace-]Name'. 19012 + maxLength: 53 19013 + minLength: 1 19014 + type: string 19015 + rollback: 19016 + description: Rollback holds the configuration for Helm rollback actions 19017 + for this HelmRelease. 19018 + properties: 19019 + cleanupOnFail: 19020 + description: |- 19021 + CleanupOnFail allows deletion of new resources created during the Helm 19022 + rollback action when it fails. 19023 + type: boolean 19024 + disableHooks: 19025 + description: DisableHooks prevents hooks from running during the 19026 + Helm rollback action. 19027 + type: boolean 19028 + disableWait: 19029 + description: |- 19030 + DisableWait disables the waiting for resources to be ready after a Helm 19031 + rollback has been performed. 19032 + type: boolean 19033 + disableWaitForJobs: 19034 + description: |- 19035 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 19036 + rollback has been performed. 19037 + type: boolean 19038 + force: 19039 + description: Force forces resource updates through a replacement 19040 + strategy. 19041 + type: boolean 19042 + recreate: 19043 + description: Recreate performs pod restarts for the resource if 19044 + applicable. 19045 + type: boolean 19046 + timeout: 19047 + description: |- 19048 + Timeout is the time to wait for any individual Kubernetes operation (like 19049 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 19050 + 'HelmReleaseSpec.Timeout'. 19051 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19052 + type: string 19053 + type: object 19054 + serviceAccountName: 19055 + description: |- 19056 + The name of the Kubernetes service account to impersonate 19057 + when reconciling this HelmRelease. 19058 + maxLength: 253 19059 + minLength: 1 19060 + type: string 19061 + storageNamespace: 19062 + description: |- 19063 + StorageNamespace used for the Helm storage. 19064 + Defaults to the namespace of the HelmRelease. 19065 + maxLength: 63 19066 + minLength: 1 19067 + type: string 19068 + suspend: 19069 + description: |- 19070 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 19071 + it does not apply to already started reconciliations. Defaults to false. 19072 + type: boolean 19073 + targetNamespace: 19074 + description: |- 19075 + TargetNamespace to target when performing operations for the HelmRelease. 19076 + Defaults to the namespace of the HelmRelease. 19077 + maxLength: 63 19078 + minLength: 1 19079 + type: string 19080 + test: 19081 + description: Test holds the configuration for Helm test actions for 19082 + this HelmRelease. 19083 + properties: 19084 + enable: 19085 + description: |- 19086 + Enable enables Helm test actions for this HelmRelease after an Helm install 19087 + or upgrade action has been performed. 19088 + type: boolean 19089 + filters: 19090 + description: Filters is a list of tests to run or exclude from 19091 + running. 19092 + items: 19093 + description: Filter holds the configuration for individual Helm 19094 + test filters. 19095 + properties: 19096 + exclude: 19097 + description: Exclude specifies whether the named test should 19098 + be excluded. 19099 + type: boolean 19100 + name: 19101 + description: Name is the name of the test. 19102 + maxLength: 253 19103 + minLength: 1 19104 + type: string 19105 + required: 19106 + - name 19107 + type: object 19108 + type: array 19109 + ignoreFailures: 19110 + description: |- 19111 + IgnoreFailures tells the controller to skip remediation when the Helm tests 19112 + are run but fail. Can be overwritten for tests run after install or upgrade 19113 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 19114 + type: boolean 19115 + timeout: 19116 + description: |- 19117 + Timeout is the time to wait for any individual Kubernetes operation during 19118 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 19119 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19120 + type: string 19121 + type: object 19122 + timeout: 19123 + description: |- 19124 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 19125 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 19126 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19127 + type: string 19128 + uninstall: 19129 + description: Uninstall holds the configuration for Helm uninstall 19130 + actions for this HelmRelease. 19131 + properties: 19132 + deletionPropagation: 19133 + default: background 19134 + description: |- 19135 + DeletionPropagation specifies the deletion propagation policy when 19136 + a Helm uninstall is performed. 19137 + enum: 19138 + - background 19139 + - foreground 19140 + - orphan 19141 + type: string 19142 + disableHooks: 19143 + description: DisableHooks prevents hooks from running during the 19144 + Helm rollback action. 19145 + type: boolean 19146 + disableWait: 19147 + description: |- 19148 + DisableWait disables waiting for all the resources to be deleted after 19149 + a Helm uninstall is performed. 19150 + type: boolean 19151 + keepHistory: 19152 + description: |- 19153 + KeepHistory tells Helm to remove all associated resources and mark the 19154 + release as deleted, but retain the release history. 19155 + type: boolean 19156 + timeout: 19157 + description: |- 19158 + Timeout is the time to wait for any individual Kubernetes operation (like 19159 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 19160 + to 'HelmReleaseSpec.Timeout'. 19161 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19162 + type: string 19163 + type: object 19164 + upgrade: 19165 + description: Upgrade holds the configuration for Helm upgrade actions 19166 + for this HelmRelease. 19167 + properties: 19168 + cleanupOnFail: 19169 + description: |- 19170 + CleanupOnFail allows deletion of new resources created during the Helm 19171 + upgrade action when it fails. 19172 + type: boolean 19173 + crds: 19174 + description: |- 19175 + CRDs upgrade CRDs from the Helm Chart's crds directory according 19176 + to the CRD upgrade policy provided here. Valid values are `Skip`, 19177 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 19178 + CRDs are neither installed nor upgraded. 19179 + 19180 + Skip: do neither install nor replace (update) any CRDs. 19181 + 19182 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 19183 + 19184 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 19185 + but not deleted. 19186 + 19187 + By default, CRDs are not applied during Helm upgrade action. With this 19188 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 19189 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 19190 + enum: 19191 + - Skip 19192 + - Create 19193 + - CreateReplace 19194 + type: string 19195 + disableHooks: 19196 + description: DisableHooks prevents hooks from running during the 19197 + Helm upgrade action. 19198 + type: boolean 19199 + disableOpenAPIValidation: 19200 + description: |- 19201 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 19202 + rendered templates against the Kubernetes OpenAPI Schema. 19203 + type: boolean 19204 + disableSchemaValidation: 19205 + description: |- 19206 + DisableSchemaValidation prevents the Helm upgrade action from validating 19207 + the values against the JSON Schema. 19208 + type: boolean 19209 + disableTakeOwnership: 19210 + description: |- 19211 + DisableTakeOwnership disables taking ownership of existing resources 19212 + during the Helm upgrade action. Defaults to false. 19213 + type: boolean 19214 + disableWait: 19215 + description: |- 19216 + DisableWait disables the waiting for resources to be ready after a Helm 19217 + upgrade has been performed. 19218 + type: boolean 19219 + disableWaitForJobs: 19220 + description: |- 19221 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 19222 + upgrade has been performed. 19223 + type: boolean 19224 + force: 19225 + description: Force forces resource updates through a replacement 19226 + strategy. 19227 + type: boolean 19228 + preserveValues: 19229 + description: |- 19230 + PreserveValues will make Helm reuse the last release's values and merge in 19231 + overrides from 'Values'. Setting this flag makes the HelmRelease 19232 + non-declarative. 19233 + type: boolean 19234 + remediation: 19235 + description: |- 19236 + Remediation holds the remediation configuration for when the Helm upgrade 19237 + action for the HelmRelease fails. The default is to not perform any action. 19238 + properties: 19239 + ignoreTestFailures: 19240 + description: |- 19241 + IgnoreTestFailures tells the controller to skip remediation when the Helm 19242 + tests are run after an upgrade action but fail. 19243 + Defaults to 'Test.IgnoreFailures'. 19244 + type: boolean 19245 + remediateLastFailure: 19246 + description: |- 19247 + RemediateLastFailure tells the controller to remediate the last failure, when 19248 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 19249 + type: boolean 19250 + retries: 19251 + description: |- 19252 + Retries is the number of retries that should be attempted on failures before 19253 + bailing. Remediation, using 'Strategy', is performed between each attempt. 19254 + Defaults to '0', a negative integer equals to unlimited retries. 19255 + type: integer 19256 + strategy: 19257 + description: Strategy to use for failure remediation. Defaults 19258 + to 'rollback'. 19259 + enum: 19260 + - rollback 19261 + - uninstall 19262 + type: string 19263 + type: object 19264 + timeout: 19265 + description: |- 19266 + Timeout is the time to wait for any individual Kubernetes operation (like 19267 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 19268 + 'HelmReleaseSpec.Timeout'. 19269 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19270 + type: string 19271 + type: object 19272 + values: 19273 + description: Values holds the values for this Helm release. 19274 + x-kubernetes-preserve-unknown-fields: true 19275 + valuesFrom: 19276 + description: |- 19277 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 19278 + and information about how they should be merged. 19279 + items: 19280 + description: |- 19281 + ValuesReference contains a reference to a resource containing Helm values, 19282 + and optionally the key they can be found at. 19283 + properties: 19284 + kind: 19285 + description: Kind of the values referent, valid values are ('Secret', 19286 + 'ConfigMap'). 19287 + enum: 19288 + - Secret 19289 + - ConfigMap 19290 + type: string 19291 + name: 19292 + description: |- 19293 + Name of the values referent. Should reside in the same namespace as the 19294 + referring resource. 19295 + maxLength: 253 19296 + minLength: 1 19297 + type: string 19298 + optional: 19299 + description: |- 19300 + Optional marks this ValuesReference as optional. When set, a not found error 19301 + for the values reference is ignored, but any ValuesKey, TargetPath or 19302 + transient error will still result in a reconciliation failure. 19303 + type: boolean 19304 + targetPath: 19305 + description: |- 19306 + TargetPath is the YAML dot notation path the value should be merged at. When 19307 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 19308 + which results in the values getting merged at the root. 19309 + maxLength: 250 19310 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 19311 + type: string 19312 + valuesKey: 19313 + description: |- 19314 + ValuesKey is the data key where the values.yaml or a specific value can be 19315 + found at. Defaults to 'values.yaml'. 19316 + maxLength: 253 19317 + pattern: ^[\-._a-zA-Z0-9]+$ 19318 + type: string 19319 + required: 19320 + - kind 19321 + - name 19322 + type: object 19323 + type: array 19324 + required: 19325 + - interval 19326 + type: object 19327 + x-kubernetes-validations: 19328 + - message: either chart or chartRef must be set 19329 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 19330 + && has(self.chartRef)) 19331 + status: 19332 + default: 19333 + observedGeneration: -1 19334 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 19335 + properties: 19336 + conditions: 19337 + description: Conditions holds the conditions for the HelmRelease. 19338 + items: 19339 + description: Condition contains details for one aspect of the current 19340 + state of this API Resource. 19341 + properties: 19342 + lastTransitionTime: 19343 + description: |- 19344 + lastTransitionTime is the last time the condition transitioned from one status to another. 19345 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19346 + format: date-time 19347 + type: string 19348 + message: 19349 + description: |- 19350 + message is a human readable message indicating details about the transition. 19351 + This may be an empty string. 19352 + maxLength: 32768 19353 + type: string 19354 + observedGeneration: 19355 + description: |- 19356 + observedGeneration represents the .metadata.generation that the condition was set based upon. 19357 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19358 + with respect to the current state of the instance. 19359 + format: int64 19360 + minimum: 0 19361 + type: integer 19362 + reason: 19363 + description: |- 19364 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 19365 + Producers of specific condition types may define expected values and meanings for this field, 19366 + and whether the values are considered a guaranteed API. 19367 + The value should be a CamelCase string. 19368 + This field may not be empty. 19369 + maxLength: 1024 19370 + minLength: 1 19371 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19372 + type: string 19373 + status: 19374 + description: status of the condition, one of True, False, Unknown. 19375 + enum: 19376 + - "True" 19377 + - "False" 19378 + - Unknown 19379 + type: string 19380 + type: 19381 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 19382 + maxLength: 316 19383 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19384 + type: string 19385 + required: 19386 + - lastTransitionTime 19387 + - message 19388 + - reason 19389 + - status 19390 + - type 19391 + type: object 19392 + type: array 19393 + failures: 19394 + description: |- 19395 + Failures is the reconciliation failure count against the latest desired 19396 + state. It is reset after a successful reconciliation. 19397 + format: int64 19398 + type: integer 19399 + helmChart: 19400 + description: |- 19401 + HelmChart is the namespaced name of the HelmChart resource created by 19402 + the controller for the HelmRelease. 19403 + type: string 19404 + history: 19405 + description: |- 19406 + History holds the history of Helm releases performed for this HelmRelease 19407 + up to the last successfully completed release. 19408 + items: 19409 + description: |- 19410 + Snapshot captures a point-in-time copy of the status information for a Helm release, 19411 + as managed by the controller. 19412 + properties: 19413 + apiVersion: 19414 + description: |- 19415 + APIVersion is the API version of the Snapshot. 19416 + Provisional: when the calculation method of the Digest field is changed, 19417 + this field will be used to distinguish between the old and new methods. 19418 + type: string 19419 + appVersion: 19420 + description: AppVersion is the chart app version of the release 19421 + object in storage. 19422 + type: string 19423 + chartName: 19424 + description: ChartName is the chart name of the release object 19425 + in storage. 19426 + type: string 19427 + chartVersion: 19428 + description: |- 19429 + ChartVersion is the chart version of the release object in 19430 + storage. 19431 + type: string 19432 + configDigest: 19433 + description: |- 19434 + ConfigDigest is the checksum of the config (better known as 19435 + "values") of the release object in storage. 19436 + It has the format of `<algo>:<checksum>`. 19437 + type: string 19438 + deleted: 19439 + description: Deleted is when the release was deleted. 19440 + format: date-time 19441 + type: string 19442 + digest: 19443 + description: |- 19444 + Digest is the checksum of the release object in storage. 19445 + It has the format of `<algo>:<checksum>`. 19446 + type: string 19447 + firstDeployed: 19448 + description: FirstDeployed is when the release was first deployed. 19449 + format: date-time 19450 + type: string 19451 + lastDeployed: 19452 + description: LastDeployed is when the release was last deployed. 19453 + format: date-time 19454 + type: string 19455 + name: 19456 + description: Name is the name of the release. 19457 + type: string 19458 + namespace: 19459 + description: Namespace is the namespace the release is deployed 19460 + to. 19461 + type: string 19462 + ociDigest: 19463 + description: OCIDigest is the digest of the OCI artifact associated 19464 + with the release. 19465 + type: string 19466 status: 19467 - default: 19468 - observedGeneration: -1 19469 - description: ProviderStatus defines the observed state of the Provider. 19470 + description: Status is the current state of the release. 19471 + type: string 19472 + testHooks: 19473 + additionalProperties: 19474 + description: |- 19475 + TestHookStatus holds the status information for a test hook as observed 19476 + to be run by the controller. 19477 properties: 19478 - conditions: 19479 - description: Conditions holds the conditions for the Provider. 19480 - items: 19481 - description: Condition contains details for one aspect of the current state of this API 19482 - Resource. 19483 - properties: 19484 - lastTransitionTime: 19485 - description: |- 19486 - lastTransitionTime is the last time the condition transitioned from one status to another. 19487 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19488 - format: date-time 19489 - type: string 19490 - message: 19491 - description: |- 19492 - message is a human readable message indicating details about the transition. 19493 - This may be an empty string. 19494 - maxLength: 32768 19495 - type: string 19496 - observedGeneration: 19497 - description: |- 19498 - observedGeneration represents the .metadata.generation that the condition was set based upon. 19499 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19500 - with respect to the current state of the instance. 19501 - format: int64 19502 - minimum: 0 19503 - type: integer 19504 - reason: 19505 - description: |- 19506 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 19507 - Producers of specific condition types may define expected values and meanings for this field, 19508 - and whether the values are considered a guaranteed API. 19509 - The value should be a CamelCase string. 19510 - This field may not be empty. 19511 - maxLength: 1024 19512 - minLength: 1 19513 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19514 - type: string 19515 - status: 19516 - description: status of the condition, one of True, False, Unknown. 19517 - enum: 19518 - - "True" 19519 - - "False" 19520 - - Unknown 19521 - type: string 19522 - type: 19523 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 19524 - maxLength: 316 19525 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19526 - type: string 19527 - required: 19528 - - lastTransitionTime 19529 - - message 19530 - - reason 19531 - - status 19532 - - type 19533 - type: object 19534 - type: array 19535 - lastHandledReconcileAt: 19536 - description: |- 19537 - LastHandledReconcileAt holds the value of the most recent 19538 - reconcile request value, so a change of the annotation value 19539 - can be detected. 19540 - type: string 19541 - observedGeneration: 19542 - description: ObservedGeneration is the last reconciled generation. 19543 - format: int64 19544 - type: integer 19545 + lastCompleted: 19546 + description: LastCompleted is the time the test hook last 19547 + completed. 19548 + format: date-time 19549 + type: string 19550 + lastStarted: 19551 + description: LastStarted is the time the test hook was 19552 + last started. 19553 + format: date-time 19554 + type: string 19555 + phase: 19556 + description: Phase the test hook was observed to be in. 19557 + type: string 19558 type: object 19559 - type: object 19560 - served: true 19561 - storage: false 19562 - subresources: 19563 - status: {} 19564 - - additionalPrinterColumns: 19565 - - jsonPath: .metadata.creationTimestamp 19566 - name: Age 19567 - type: date 19568 - name: v1beta3 19569 - schema: 19570 - openAPIV3Schema: 19571 - description: Provider is the Schema for the providers API 19572 + description: |- 19573 + TestHooks is the list of test hooks for the release as observed to be 19574 + run by the controller. 19575 + type: object 19576 + version: 19577 + description: Version is the version of the release object in 19578 + storage. 19579 + type: integer 19580 + required: 19581 + - chartName 19582 + - chartVersion 19583 + - configDigest 19584 + - digest 19585 + - firstDeployed 19586 + - lastDeployed 19587 + - name 19588 + - namespace 19589 + - status 19590 + - version 19591 + type: object 19592 + type: array 19593 + installFailures: 19594 + description: |- 19595 + InstallFailures is the install failure count against the latest desired 19596 + state. It is reset after a successful reconciliation. 19597 + format: int64 19598 + type: integer 19599 + lastAttemptedConfigDigest: 19600 + description: |- 19601 + LastAttemptedConfigDigest is the digest for the config (better known as 19602 + "values") of the last reconciliation attempt. 19603 + type: string 19604 + lastAttemptedGeneration: 19605 + description: |- 19606 + LastAttemptedGeneration is the last generation the controller attempted 19607 + to reconcile. 19608 + format: int64 19609 + type: integer 19610 + lastAttemptedReleaseAction: 19611 + description: |- 19612 + LastAttemptedReleaseAction is the last release action performed for this 19613 + HelmRelease. It is used to determine the active remediation strategy. 19614 + enum: 19615 + - install 19616 + - upgrade 19617 + type: string 19618 + lastAttemptedRevision: 19619 + description: |- 19620 + LastAttemptedRevision is the Source revision of the last reconciliation 19621 + attempt. For OCIRepository sources, the 12 first characters of the digest are 19622 + appended to the chart version e.g. "1.2.3+1234567890ab". 19623 + type: string 19624 + lastAttemptedRevisionDigest: 19625 + description: |- 19626 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 19627 + This is only set for OCIRepository sources. 19628 + type: string 19629 + lastAttemptedValuesChecksum: 19630 + description: |- 19631 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 19632 + reconciliation attempt. 19633 + Deprecated: Use LastAttemptedConfigDigest instead. 19634 + type: string 19635 + lastHandledForceAt: 19636 + description: |- 19637 + LastHandledForceAt holds the value of the most recent force request 19638 + value, so a change of the annotation value can be detected. 19639 + type: string 19640 + lastHandledReconcileAt: 19641 + description: |- 19642 + LastHandledReconcileAt holds the value of the most recent 19643 + reconcile request value, so a change of the annotation value 19644 + can be detected. 19645 + type: string 19646 + lastHandledResetAt: 19647 + description: |- 19648 + LastHandledResetAt holds the value of the most recent reset request 19649 + value, so a change of the annotation value can be detected. 19650 + type: string 19651 + lastReleaseRevision: 19652 + description: |- 19653 + LastReleaseRevision is the revision of the last successful Helm release. 19654 + Deprecated: Use History instead. 19655 + type: integer 19656 + observedGeneration: 19657 + description: ObservedGeneration is the last observed generation. 19658 + format: int64 19659 + type: integer 19660 + observedPostRenderersDigest: 19661 + description: |- 19662 + ObservedPostRenderersDigest is the digest for the post-renderers of 19663 + the last successful reconciliation attempt. 19664 + type: string 19665 + storageNamespace: 19666 + description: |- 19667 + StorageNamespace is the namespace of the Helm release storage for the 19668 + current release. 19669 + maxLength: 63 19670 + minLength: 1 19671 + type: string 19672 + upgradeFailures: 19673 + description: |- 19674 + UpgradeFailures is the upgrade failure count against the latest desired 19675 + state. It is reset after a successful reconciliation. 19676 + format: int64 19677 + type: integer 19678 + type: object 19679 + type: object 19680 + served: true 19681 + storage: true 19682 + subresources: 19683 + status: {} 19684 + - additionalPrinterColumns: 19685 + - jsonPath: .metadata.creationTimestamp 19686 + name: Age 19687 + type: date 19688 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 19689 + name: Ready 19690 + type: string 19691 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 19692 + name: Status 19693 + type: string 19694 + deprecated: true 19695 + deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2 19696 + name: v2beta1 19697 + schema: 19698 + openAPIV3Schema: 19699 + description: HelmRelease is the Schema for the helmreleases API 19700 + properties: 19701 + apiVersion: 19702 + description: |- 19703 + APIVersion defines the versioned schema of this representation of an object. 19704 + Servers should convert recognized schemas to the latest internal value, and 19705 + may reject unrecognized values. 19706 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19707 + type: string 19708 + kind: 19709 + description: |- 19710 + Kind is a string value representing the REST resource this object represents. 19711 + Servers may infer this from the endpoint the client submits requests to. 19712 + Cannot be updated. 19713 + In CamelCase. 19714 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19715 + type: string 19716 + metadata: 19717 + type: object 19718 + spec: 19719 + description: HelmReleaseSpec defines the desired state of a Helm release. 19720 + properties: 19721 + chart: 19722 + description: |- 19723 + Chart defines the template of the v1beta2.HelmChart that should be created 19724 + for this HelmRelease. 19725 properties: 19726 - apiVersion: 19727 + metadata: 19728 + description: ObjectMeta holds the template for metadata like labels 19729 + and annotations. 19730 + properties: 19731 + annotations: 19732 + additionalProperties: 19733 + type: string 19734 + description: |- 19735 + Annotations is an unstructured key value map stored with a resource that may be 19736 + set by external tools to store and retrieve arbitrary metadata. They are not 19737 + queryable and should be preserved when modifying objects. 19738 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 19739 + type: object 19740 + labels: 19741 + additionalProperties: 19742 + type: string 19743 description: |- 19744 - APIVersion defines the versioned schema of this representation of an object. 19745 - Servers should convert recognized schemas to the latest internal value, and 19746 - may reject unrecognized values. 19747 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19748 + Map of string keys and values that can be used to organize and categorize 19749 + (scope and select) objects. 19750 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 19751 + type: object 19752 + type: object 19753 + spec: 19754 + description: Spec holds the template for the v1beta2.HelmChartSpec 19755 + for this HelmRelease. 19756 + properties: 19757 + chart: 19758 + description: The name or path the Helm chart is available 19759 + at in the SourceRef. 19760 type: string 19761 - kind: 19762 + interval: 19763 description: |- 19764 - Kind is a string value representing the REST resource this object represents. 19765 - Servers may infer this from the endpoint the client submits requests to. 19766 - Cannot be updated. 19767 - In CamelCase. 19768 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19769 + Interval at which to check the v1beta2.Source for updates. Defaults to 19770 + 'HelmReleaseSpec.Interval'. 19771 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19772 type: string 19773 - metadata: 19774 + reconcileStrategy: 19775 + default: ChartVersion 19776 + description: |- 19777 + Determines what enables the creation of a new artifact. Valid values are 19778 + ('ChartVersion', 'Revision'). 19779 + See the documentation of the values for an explanation on their behavior. 19780 + Defaults to ChartVersion when omitted. 19781 + enum: 19782 + - ChartVersion 19783 + - Revision 19784 + type: string 19785 + sourceRef: 19786 + description: The name and namespace of the v1beta2.Source 19787 + the chart is available at. 19788 + properties: 19789 + apiVersion: 19790 + description: APIVersion of the referent. 19791 + type: string 19792 + kind: 19793 + description: Kind of the referent. 19794 + enum: 19795 + - HelmRepository 19796 + - GitRepository 19797 + - Bucket 19798 + type: string 19799 + name: 19800 + description: Name of the referent. 19801 + maxLength: 253 19802 + minLength: 1 19803 + type: string 19804 + namespace: 19805 + description: Namespace of the referent. 19806 + maxLength: 63 19807 + minLength: 1 19808 + type: string 19809 + required: 19810 + - kind 19811 + - name 19812 type: object 19813 - spec: 19814 - description: ProviderSpec defines the desired state of the Provider. 19815 + valuesFile: 19816 + description: |- 19817 + Alternative values file to use as the default chart values, expected to 19818 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 19819 + for backwards compatibility the file defined here is merged before the 19820 + ValuesFiles items. Ignored when omitted. 19821 + type: string 19822 + valuesFiles: 19823 + description: |- 19824 + Alternative list of values files to use as the chart values (values.yaml 19825 + is not included by default), expected to be a relative path in the SourceRef. 19826 + Values files are merged in the order of this list with the last file overriding 19827 + the first. Ignored when omitted. 19828 + items: 19829 + type: string 19830 + type: array 19831 + verify: 19832 + description: |- 19833 + Verify contains the secret name containing the trusted public keys 19834 + used to verify the signature and specifies which provider to use to check 19835 + whether OCI image is authentic. 19836 + This field is only supported for OCI sources. 19837 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 19838 properties: 19839 - address: 19840 - description: |- 19841 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 19842 - What kind of endpoint depends on the specific Provider type being used. 19843 - For the generic Provider, for example, this is an HTTP/S address. 19844 - For other Provider types this could be a project ID or a namespace. 19845 - maxLength: 2048 19846 - type: string 19847 - certSecretRef: 19848 - description: |- 19849 - CertSecretRef specifies the Secret containing 19850 - a PEM-encoded CA certificate (in the `ca.crt` key). 19851 - 19852 - Note: Support for the `caFile` key has 19853 - been deprecated. 19854 - properties: 19855 - name: 19856 - description: Name of the referent. 19857 - type: string 19858 - required: 19859 - - name 19860 - type: object 19861 - channel: 19862 - description: Channel specifies the destination channel where events should be posted. 19863 - maxLength: 2048 19864 - type: string 19865 - interval: 19866 - description: |- 19867 - Interval at which to reconcile the Provider with its Secret references. 19868 - Deprecated and not used in v1beta3. 19869 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19870 - type: string 19871 - proxy: 19872 - description: Proxy the HTTP/S address of the proxy server. 19873 - maxLength: 2048 19874 - pattern: ^(http|https)://.*$ 19875 - type: string 19876 - secretRef: 19877 - description: |- 19878 - SecretRef specifies the Secret containing the authentication 19879 - credentials for this Provider. 19880 - properties: 19881 - name: 19882 - description: Name of the referent. 19883 - type: string 19884 - required: 19885 - - name 19886 - type: object 19887 - suspend: 19888 - description: |- 19889 - Suspend tells the controller to suspend subsequent 19890 - events handling for this Provider. 19891 - type: boolean 19892 - timeout: 19893 - description: Timeout for sending alerts to the Provider. 19894 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 19895 - type: string 19896 - type: 19897 - description: Type specifies which Provider implementation to use. 19898 - enum: 19899 - - slack 19900 - - discord 19901 - - msteams 19902 - - rocket 19903 - - generic 19904 - - generic-hmac 19905 - - github 19906 - - gitlab 19907 - - gitea 19908 - - bitbucketserver 19909 - - bitbucket 19910 - - azuredevops 19911 - - googlechat 19912 - - googlepubsub 19913 - - webex 19914 - - sentry 19915 - - azureeventhub 19916 - - telegram 19917 - - lark 19918 - - matrix 19919 - - opsgenie 19920 - - alertmanager 19921 - - grafana 19922 - - githubdispatch 19923 - - pagerduty 19924 - - datadog 19925 - - nats 19926 - type: string 19927 - username: 19928 - description: Username specifies the name under which events are posted. 19929 - maxLength: 2048 19930 - type: string 19931 + provider: 19932 + default: cosign 19933 + description: Provider specifies the technology used to 19934 + sign the OCI Helm chart. 19935 + enum: 19936 + - cosign 19937 + type: string 19938 + secretRef: 19939 + description: |- 19940 + SecretRef specifies the Kubernetes Secret containing the 19941 + trusted public keys. 19942 + properties: 19943 + name: 19944 + description: Name of the referent. 19945 + type: string 19946 + required: 19947 + - name 19948 + type: object 19949 required: 19950 - - type 19951 + - provider 19952 type: object 19953 + version: 19954 + default: '*' 19955 + description: |- 19956 + Version semver expression, ignored for charts from v1beta2.GitRepository and 19957 + v1beta2.Bucket sources. Defaults to latest when omitted. 19958 + type: string 19959 + required: 19960 + - chart 19961 + - sourceRef 19962 + type: object 19963 + required: 19964 + - spec 19965 type: object 19966 - served: true 19967 - storage: true 19968 - subresources: {} 19969 ---- 19970 -apiVersion: apiextensions.k8s.io/v1 19971 -kind: CustomResourceDefinition 19972 -metadata: 19973 - annotations: 19974 - controller-gen.kubebuilder.io/version: v0.16.1 19975 - labels: 19976 - app.kubernetes.io/component: notification-controller 19977 - app.kubernetes.io/instance: flux-system 19978 - app.kubernetes.io/part-of: flux 19979 - app.kubernetes.io/version: v2.5.1 19980 - name: receivers.notification.toolkit.fluxcd.io 19981 -spec: 19982 - group: notification.toolkit.fluxcd.io 19983 - names: 19984 - kind: Receiver 19985 - listKind: ReceiverList 19986 - plural: receivers 19987 - singular: receiver 19988 - scope: Namespaced 19989 - versions: 19990 - - additionalPrinterColumns: 19991 - - jsonPath: .metadata.creationTimestamp 19992 - name: Age 19993 - type: date 19994 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 19995 - name: Ready 19996 - type: string 19997 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 19998 - name: Status 19999 - type: string 20000 - name: v1 20001 - schema: 20002 - openAPIV3Schema: 20003 - description: Receiver is the Schema for the receivers API. 20004 + chartRef: 20005 + description: |- 20006 + ChartRef holds a reference to a source controller resource containing the 20007 + Helm chart artifact. 20008 + 20009 + Note: this field is provisional to the v2 API, and not actively used 20010 + by v2beta1 HelmReleases. 20011 properties: 20012 - apiVersion: 20013 + apiVersion: 20014 + description: APIVersion of the referent. 20015 + type: string 20016 + kind: 20017 + description: Kind of the referent. 20018 + enum: 20019 + - OCIRepository 20020 + - HelmChart 20021 + type: string 20022 + name: 20023 + description: Name of the referent. 20024 + maxLength: 253 20025 + minLength: 1 20026 + type: string 20027 + namespace: 20028 + description: |- 20029 + Namespace of the referent, defaults to the namespace of the Kubernetes 20030 + resource object that contains the reference. 20031 + maxLength: 63 20032 + minLength: 1 20033 + type: string 20034 + required: 20035 + - kind 20036 + - name 20037 + type: object 20038 + dependsOn: 20039 + description: |- 20040 + DependsOn may contain a meta.NamespacedObjectReference slice with 20041 + references to HelmRelease resources that must be ready before this HelmRelease 20042 + can be reconciled. 20043 + items: 20044 + description: |- 20045 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 20046 + namespace. 20047 + properties: 20048 + name: 20049 + description: Name of the referent. 20050 + type: string 20051 + namespace: 20052 + description: Namespace of the referent, when not specified it 20053 + acts as LocalObjectReference. 20054 + type: string 20055 + required: 20056 + - name 20057 + type: object 20058 + type: array 20059 + driftDetection: 20060 + description: |- 20061 + DriftDetection holds the configuration for detecting and handling 20062 + differences between the manifest in the Helm storage and the resources 20063 + currently existing in the cluster. 20064 + 20065 + Note: this field is provisional to the v2beta2 API, and not actively used 20066 + by v2beta1 HelmReleases. 20067 + properties: 20068 + ignore: 20069 + description: |- 20070 + Ignore contains a list of rules for specifying which changes to ignore 20071 + during diffing. 20072 + items: 20073 + description: |- 20074 + IgnoreRule defines a rule to selectively disregard specific changes during 20075 + the drift detection process. 20076 + properties: 20077 + paths: 20078 + description: |- 20079 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 20080 + consideration in a Kubernetes object. 20081 + items: 20082 + type: string 20083 + type: array 20084 + target: 20085 + description: |- 20086 + Target is a selector for specifying Kubernetes objects to which this 20087 + rule applies. 20088 + If Target is not set, the Paths will be ignored for all Kubernetes 20089 + objects within the manifest of the Helm release. 20090 + properties: 20091 + annotationSelector: 20092 + description: |- 20093 + AnnotationSelector is a string that follows the label selection expression 20094 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20095 + It matches with the resource annotations. 20096 + type: string 20097 + group: 20098 + description: |- 20099 + Group is the API group to select resources from. 20100 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 20101 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20102 + type: string 20103 + kind: 20104 + description: |- 20105 + Kind of the API Group to select resources from. 20106 + Together with Group and Version it is capable of unambiguously 20107 + identifying and/or selecting resources. 20108 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20109 + type: string 20110 + labelSelector: 20111 + description: |- 20112 + LabelSelector is a string that follows the label selection expression 20113 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20114 + It matches with the resource labels. 20115 + type: string 20116 + name: 20117 + description: Name to match resources with. 20118 + type: string 20119 + namespace: 20120 + description: Namespace to select resources from. 20121 + type: string 20122 + version: 20123 + description: |- 20124 + Version of the API Group to select resources from. 20125 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 20126 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20127 + type: string 20128 + type: object 20129 + required: 20130 + - paths 20131 + type: object 20132 + type: array 20133 + mode: 20134 + description: |- 20135 + Mode defines how differences should be handled between the Helm manifest 20136 + and the manifest currently applied to the cluster. 20137 + If not explicitly set, it defaults to DiffModeDisabled. 20138 + enum: 20139 + - enabled 20140 + - warn 20141 + - disabled 20142 + type: string 20143 + type: object 20144 + install: 20145 + description: Install holds the configuration for Helm install actions 20146 + for this HelmRelease. 20147 + properties: 20148 + crds: 20149 + description: |- 20150 + CRDs upgrade CRDs from the Helm Chart's crds directory according 20151 + to the CRD upgrade policy provided here. Valid values are `Skip`, 20152 + `Create` or `CreateReplace`. Default is `Create` and if omitted 20153 + CRDs are installed but not updated. 20154 + 20155 + Skip: do neither install nor replace (update) any CRDs. 20156 + 20157 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 20158 + 20159 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 20160 + but not deleted. 20161 + 20162 + By default, CRDs are applied (installed) during Helm install action. 20163 + With this option users can opt-in to CRD replace existing CRDs on Helm 20164 + install actions, which is not (yet) natively supported by Helm. 20165 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 20166 + enum: 20167 + - Skip 20168 + - Create 20169 + - CreateReplace 20170 + type: string 20171 + createNamespace: 20172 + description: |- 20173 + CreateNamespace tells the Helm install action to create the 20174 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 20175 + On uninstall, the namespace will not be garbage collected. 20176 + type: boolean 20177 + disableHooks: 20178 + description: DisableHooks prevents hooks from running during the 20179 + Helm install action. 20180 + type: boolean 20181 + disableOpenAPIValidation: 20182 + description: |- 20183 + DisableOpenAPIValidation prevents the Helm install action from validating 20184 + rendered templates against the Kubernetes OpenAPI Schema. 20185 + type: boolean 20186 + disableWait: 20187 + description: |- 20188 + DisableWait disables the waiting for resources to be ready after a Helm 20189 + install has been performed. 20190 + type: boolean 20191 + disableWaitForJobs: 20192 + description: |- 20193 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20194 + install has been performed. 20195 + type: boolean 20196 + remediation: 20197 + description: |- 20198 + Remediation holds the remediation configuration for when the Helm install 20199 + action for the HelmRelease fails. The default is to not perform any action. 20200 + properties: 20201 + ignoreTestFailures: 20202 description: |- 20203 - APIVersion defines the versioned schema of this representation of an object. 20204 - Servers should convert recognized schemas to the latest internal value, and 20205 - may reject unrecognized values. 20206 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20207 - type: string 20208 - kind: 20209 + IgnoreTestFailures tells the controller to skip remediation when the Helm 20210 + tests are run after an install action but fail. Defaults to 20211 + 'Test.IgnoreFailures'. 20212 + type: boolean 20213 + remediateLastFailure: 20214 description: |- 20215 - Kind is a string value representing the REST resource this object represents. 20216 - Servers may infer this from the endpoint the client submits requests to. 20217 - Cannot be updated. 20218 - In CamelCase. 20219 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20220 + RemediateLastFailure tells the controller to remediate the last failure, when 20221 + no retries remain. Defaults to 'false'. 20222 + type: boolean 20223 + retries: 20224 + description: |- 20225 + Retries is the number of retries that should be attempted on failures before 20226 + bailing. Remediation, using an uninstall, is performed between each attempt. 20227 + Defaults to '0', a negative integer equals to unlimited retries. 20228 + type: integer 20229 + type: object 20230 + replace: 20231 + description: |- 20232 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 20233 + if that name is a deleted release which remains in the history. 20234 + type: boolean 20235 + skipCRDs: 20236 + description: |- 20237 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 20238 + CRDs are installed if not already present. 20239 + 20240 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 20241 + type: boolean 20242 + timeout: 20243 + description: |- 20244 + Timeout is the time to wait for any individual Kubernetes operation (like 20245 + Jobs for hooks) during the performance of a Helm install action. Defaults to 20246 + 'HelmReleaseSpec.Timeout'. 20247 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20248 + type: string 20249 + type: object 20250 + interval: 20251 + description: |- 20252 + Interval at which to reconcile the Helm release. 20253 + This interval is approximate and may be subject to jitter to ensure 20254 + efficient use of resources. 20255 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20256 + type: string 20257 + kubeConfig: 20258 + description: |- 20259 + KubeConfig for reconciling the HelmRelease on a remote cluster. 20260 + When used in combination with HelmReleaseSpec.ServiceAccountName, 20261 + forces the controller to act on behalf of that Service Account at the 20262 + target cluster. 20263 + If the --default-service-account flag is set, its value will be used as 20264 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 20265 + is empty. 20266 + properties: 20267 + secretRef: 20268 + description: |- 20269 + SecretRef holds the name of a secret that contains a key with 20270 + the kubeconfig file as the value. If no key is set, the key will default 20271 + to 'value'. 20272 + It is recommended that the kubeconfig is self-contained, and the secret 20273 + is regularly updated if credentials such as a cloud-access-token expire. 20274 + Cloud specific `cmd-path` auth helpers will not function without adding 20275 + binaries and credentials to the Pod that is responsible for reconciling 20276 + Kubernetes resources. 20277 + properties: 20278 + key: 20279 + description: Key in the Secret, when not specified an implementation-specific 20280 + default key is used. 20281 type: string 20282 - metadata: 20283 - type: object 20284 - spec: 20285 - description: ReceiverSpec defines the desired state of the Receiver. 20286 - properties: 20287 - events: 20288 - description: |- 20289 - Events specifies the list of event types to handle, 20290 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 20291 - items: 20292 + name: 20293 + description: Name of the Secret. 20294 + type: string 20295 + required: 20296 + - name 20297 + type: object 20298 + required: 20299 + - secretRef 20300 + type: object 20301 + maxHistory: 20302 + description: |- 20303 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 20304 + Use '0' for an unlimited number of revisions; defaults to '10'. 20305 + type: integer 20306 + persistentClient: 20307 + description: |- 20308 + PersistentClient tells the controller to use a persistent Kubernetes 20309 + client for this release. When enabled, the client will be reused for the 20310 + duration of the reconciliation, instead of being created and destroyed 20311 + for each (step of a) Helm action. 20312 + 20313 + This can improve performance, but may cause issues with some Helm charts 20314 + that for example do create Custom Resource Definitions during installation 20315 + outside Helm's CRD lifecycle hooks, which are then not observed to be 20316 + available by e.g. post-install hooks. 20317 + 20318 + If not set, it defaults to true. 20319 + type: boolean 20320 + postRenderers: 20321 + description: |- 20322 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 20323 + of their definition. 20324 + items: 20325 + description: PostRenderer contains a Helm PostRenderer specification. 20326 + properties: 20327 + kustomize: 20328 + description: Kustomization to apply as PostRenderer. 20329 + properties: 20330 + images: 20331 + description: |- 20332 + Images is a list of (image name, new name, new tag or digest) 20333 + for changing image names, tags or digests. This can also be achieved with a 20334 + patch, but this operator is simpler to specify. 20335 + items: 20336 + description: Image contains an image name, a new name, 20337 + a new tag or digest, which will replace the original 20338 + name and tag. 20339 + properties: 20340 + digest: 20341 + description: |- 20342 + Digest is the value used to replace the original image tag. 20343 + If digest is present NewTag value is ignored. 20344 + type: string 20345 + name: 20346 + description: Name is a tag-less image name. 20347 + type: string 20348 + newName: 20349 + description: NewName is the value used to replace 20350 + the original name. 20351 + type: string 20352 + newTag: 20353 + description: NewTag is the value used to replace the 20354 + original tag. 20355 + type: string 20356 + required: 20357 + - name 20358 + type: object 20359 + type: array 20360 + patches: 20361 + description: |- 20362 + Strategic merge and JSON patches, defined as inline YAML objects, 20363 + capable of targeting objects based on kind, label and annotation selectors. 20364 + items: 20365 + description: |- 20366 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 20367 + be applied to. 20368 + properties: 20369 + patch: 20370 + description: |- 20371 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 20372 + an array of operation objects. 20373 + type: string 20374 + target: 20375 + description: Target points to the resources that the 20376 + patch document should be applied to. 20377 + properties: 20378 + annotationSelector: 20379 + description: |- 20380 + AnnotationSelector is a string that follows the label selection expression 20381 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20382 + It matches with the resource annotations. 20383 type: string 20384 - type: array 20385 - interval: 20386 - default: 10m 20387 - description: Interval at which to reconcile the Receiver with its Secret references. 20388 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20389 - type: string 20390 - resourceFilter: 20391 - description: |- 20392 - ResourceFilter is a CEL expression expected to return a boolean that is 20393 - evaluated for each resource referenced in the Resources field when a 20394 - webhook is received. If the expression returns false then the controller 20395 - will not request a reconciliation for the resource. 20396 - When the expression is specified the controller will parse it and mark 20397 - the object as terminally failed if the expression is invalid or does not 20398 - return a boolean. 20399 - type: string 20400 - resources: 20401 - description: A list of resources to be notified about changes. 20402 - items: 20403 + group: 20404 + description: |- 20405 + Group is the API group to select resources from. 20406 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 20407 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20408 + type: string 20409 + kind: 20410 + description: |- 20411 + Kind of the API Group to select resources from. 20412 + Together with Group and Version it is capable of unambiguously 20413 + identifying and/or selecting resources. 20414 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20415 + type: string 20416 + labelSelector: 20417 + description: |- 20418 + LabelSelector is a string that follows the label selection expression 20419 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20420 + It matches with the resource labels. 20421 + type: string 20422 + name: 20423 + description: Name to match resources with. 20424 + type: string 20425 + namespace: 20426 + description: Namespace to select resources from. 20427 + type: string 20428 + version: 20429 description: |- 20430 - CrossNamespaceObjectReference contains enough information to let you locate the 20431 - typed referenced object at cluster level 20432 - properties: 20433 - apiVersion: 20434 - description: API version of the referent 20435 - type: string 20436 - kind: 20437 - description: Kind of the referent 20438 - enum: 20439 - - Bucket 20440 - - GitRepository 20441 - - Kustomization 20442 - - HelmRelease 20443 - - HelmChart 20444 - - HelmRepository 20445 - - ImageRepository 20446 - - ImagePolicy 20447 - - ImageUpdateAutomation 20448 - - OCIRepository 20449 - type: string 20450 - matchLabels: 20451 - additionalProperties: 20452 - type: string 20453 - description: |- 20454 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 20455 - map is equivalent to an element of matchExpressions, whose key field is "key", the 20456 - operator is "In", and the values array contains only "value". The requirements are ANDed. 20457 - MatchLabels requires the name to be set to `*`. 20458 - type: object 20459 - name: 20460 - description: |- 20461 - Name of the referent 20462 - If multiple resources are targeted `*` may be set. 20463 - maxLength: 53 20464 - minLength: 1 20465 - type: string 20466 - namespace: 20467 - description: Namespace of the referent 20468 - maxLength: 53 20469 - minLength: 1 20470 - type: string 20471 - required: 20472 - - kind 20473 - - name 20474 - type: object 20475 + Version of the API Group to select resources from. 20476 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 20477 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20478 + type: string 20479 + type: object 20480 + required: 20481 + - patch 20482 + type: object 20483 + type: array 20484 + patchesJson6902: 20485 + description: JSON 6902 patches, defined as inline YAML objects. 20486 + items: 20487 + description: JSON6902Patch contains a JSON6902 patch and 20488 + the target the patch should be applied to. 20489 + properties: 20490 + patch: 20491 + description: Patch contains the JSON6902 patch document 20492 + with an array of operation objects. 20493 + items: 20494 + description: |- 20495 + JSON6902 is a JSON6902 operation object. 20496 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 20497 + properties: 20498 + from: 20499 + description: |- 20500 + From contains a JSON-pointer value that references a location within the target document where the operation is 20501 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 20502 + type: string 20503 + op: 20504 + description: |- 20505 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 20506 + "test". 20507 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 20508 + enum: 20509 + - test 20510 + - remove 20511 + - add 20512 + - replace 20513 + - move 20514 + - copy 20515 + type: string 20516 + path: 20517 + description: |- 20518 + Path contains the JSON-pointer value that references a location within the target document where the operation 20519 + is performed. The meaning of the value depends on the value of Op. 20520 + type: string 20521 + value: 20522 + description: |- 20523 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 20524 + account by all operations. 20525 + x-kubernetes-preserve-unknown-fields: true 20526 + required: 20527 + - op 20528 + - path 20529 + type: object 20530 type: array 20531 - secretRef: 20532 - description: |- 20533 - SecretRef specifies the Secret containing the token used 20534 - to validate the payload authenticity. 20535 + target: 20536 + description: Target points to the resources that the 20537 + patch document should be applied to. 20538 properties: 20539 - name: 20540 - description: Name of the referent. 20541 - type: string 20542 - required: 20543 - - name 20544 + annotationSelector: 20545 + description: |- 20546 + AnnotationSelector is a string that follows the label selection expression 20547 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20548 + It matches with the resource annotations. 20549 + type: string 20550 + group: 20551 + description: |- 20552 + Group is the API group to select resources from. 20553 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 20554 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20555 + type: string 20556 + kind: 20557 + description: |- 20558 + Kind of the API Group to select resources from. 20559 + Together with Group and Version it is capable of unambiguously 20560 + identifying and/or selecting resources. 20561 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20562 + type: string 20563 + labelSelector: 20564 + description: |- 20565 + LabelSelector is a string that follows the label selection expression 20566 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20567 + It matches with the resource labels. 20568 + type: string 20569 + name: 20570 + description: Name to match resources with. 20571 + type: string 20572 + namespace: 20573 + description: Namespace to select resources from. 20574 + type: string 20575 + version: 20576 + description: |- 20577 + Version of the API Group to select resources from. 20578 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 20579 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20580 + type: string 20581 type: object 20582 - suspend: 20583 - description: |- 20584 - Suspend tells the controller to suspend subsequent 20585 - events handling for this receiver. 20586 - type: boolean 20587 - type: 20588 - description: |- 20589 - Type of webhook sender, used to determine 20590 - the validation procedure and payload deserialization. 20591 - enum: 20592 - - generic 20593 - - generic-hmac 20594 - - github 20595 - - gitlab 20596 - - bitbucket 20597 - - harbor 20598 - - dockerhub 20599 - - quay 20600 - - gcr 20601 - - nexus 20602 - - acr 20603 - - cdevents 20604 - type: string 20605 - required: 20606 - - resources 20607 - - secretRef 20608 - - type 20609 - type: object 20610 + required: 20611 + - patch 20612 + - target 20613 + type: object 20614 + type: array 20615 + patchesStrategicMerge: 20616 + description: Strategic merge patches, defined as inline 20617 + YAML objects. 20618 + items: 20619 + x-kubernetes-preserve-unknown-fields: true 20620 + type: array 20621 + type: object 20622 + type: object 20623 + type: array 20624 + releaseName: 20625 + description: |- 20626 + ReleaseName used for the Helm release. Defaults to a composition of 20627 + '[TargetNamespace-]Name'. 20628 + maxLength: 53 20629 + minLength: 1 20630 + type: string 20631 + rollback: 20632 + description: Rollback holds the configuration for Helm rollback actions 20633 + for this HelmRelease. 20634 + properties: 20635 + cleanupOnFail: 20636 + description: |- 20637 + CleanupOnFail allows deletion of new resources created during the Helm 20638 + rollback action when it fails. 20639 + type: boolean 20640 + disableHooks: 20641 + description: DisableHooks prevents hooks from running during the 20642 + Helm rollback action. 20643 + type: boolean 20644 + disableWait: 20645 + description: |- 20646 + DisableWait disables the waiting for resources to be ready after a Helm 20647 + rollback has been performed. 20648 + type: boolean 20649 + disableWaitForJobs: 20650 + description: |- 20651 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20652 + rollback has been performed. 20653 + type: boolean 20654 + force: 20655 + description: Force forces resource updates through a replacement 20656 + strategy. 20657 + type: boolean 20658 + recreate: 20659 + description: Recreate performs pod restarts for the resource if 20660 + applicable. 20661 + type: boolean 20662 + timeout: 20663 + description: |- 20664 + Timeout is the time to wait for any individual Kubernetes operation (like 20665 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 20666 + 'HelmReleaseSpec.Timeout'. 20667 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20668 + type: string 20669 + type: object 20670 + serviceAccountName: 20671 + description: |- 20672 + The name of the Kubernetes service account to impersonate 20673 + when reconciling this HelmRelease. 20674 + type: string 20675 + storageNamespace: 20676 + description: |- 20677 + StorageNamespace used for the Helm storage. 20678 + Defaults to the namespace of the HelmRelease. 20679 + maxLength: 63 20680 + minLength: 1 20681 + type: string 20682 + suspend: 20683 + description: |- 20684 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 20685 + it does not apply to already started reconciliations. Defaults to false. 20686 + type: boolean 20687 + targetNamespace: 20688 + description: |- 20689 + TargetNamespace to target when performing operations for the HelmRelease. 20690 + Defaults to the namespace of the HelmRelease. 20691 + maxLength: 63 20692 + minLength: 1 20693 + type: string 20694 + test: 20695 + description: Test holds the configuration for Helm test actions for 20696 + this HelmRelease. 20697 + properties: 20698 + enable: 20699 + description: |- 20700 + Enable enables Helm test actions for this HelmRelease after an Helm install 20701 + or upgrade action has been performed. 20702 + type: boolean 20703 + ignoreFailures: 20704 + description: |- 20705 + IgnoreFailures tells the controller to skip remediation when the Helm tests 20706 + are run but fail. Can be overwritten for tests run after install or upgrade 20707 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 20708 + type: boolean 20709 + timeout: 20710 + description: |- 20711 + Timeout is the time to wait for any individual Kubernetes operation during 20712 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 20713 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20714 + type: string 20715 + type: object 20716 + timeout: 20717 + description: |- 20718 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 20719 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 20720 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20721 + type: string 20722 + uninstall: 20723 + description: Uninstall holds the configuration for Helm uninstall 20724 + actions for this HelmRelease. 20725 + properties: 20726 + deletionPropagation: 20727 + default: background 20728 + description: |- 20729 + DeletionPropagation specifies the deletion propagation policy when 20730 + a Helm uninstall is performed. 20731 + enum: 20732 + - background 20733 + - foreground 20734 + - orphan 20735 + type: string 20736 + disableHooks: 20737 + description: DisableHooks prevents hooks from running during the 20738 + Helm rollback action. 20739 + type: boolean 20740 + disableWait: 20741 + description: |- 20742 + DisableWait disables waiting for all the resources to be deleted after 20743 + a Helm uninstall is performed. 20744 + type: boolean 20745 + keepHistory: 20746 + description: |- 20747 + KeepHistory tells Helm to remove all associated resources and mark the 20748 + release as deleted, but retain the release history. 20749 + type: boolean 20750 + timeout: 20751 + description: |- 20752 + Timeout is the time to wait for any individual Kubernetes operation (like 20753 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 20754 + to 'HelmReleaseSpec.Timeout'. 20755 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20756 + type: string 20757 + type: object 20758 + upgrade: 20759 + description: Upgrade holds the configuration for Helm upgrade actions 20760 + for this HelmRelease. 20761 + properties: 20762 + cleanupOnFail: 20763 + description: |- 20764 + CleanupOnFail allows deletion of new resources created during the Helm 20765 + upgrade action when it fails. 20766 + type: boolean 20767 + crds: 20768 + description: |- 20769 + CRDs upgrade CRDs from the Helm Chart's crds directory according 20770 + to the CRD upgrade policy provided here. Valid values are `Skip`, 20771 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 20772 + CRDs are neither installed nor upgraded. 20773 + 20774 + Skip: do neither install nor replace (update) any CRDs. 20775 + 20776 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 20777 + 20778 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 20779 + but not deleted. 20780 + 20781 + By default, CRDs are not applied during Helm upgrade action. With this 20782 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 20783 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 20784 + enum: 20785 + - Skip 20786 + - Create 20787 + - CreateReplace 20788 + type: string 20789 + disableHooks: 20790 + description: DisableHooks prevents hooks from running during the 20791 + Helm upgrade action. 20792 + type: boolean 20793 + disableOpenAPIValidation: 20794 + description: |- 20795 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 20796 + rendered templates against the Kubernetes OpenAPI Schema. 20797 + type: boolean 20798 + disableWait: 20799 + description: |- 20800 + DisableWait disables the waiting for resources to be ready after a Helm 20801 + upgrade has been performed. 20802 + type: boolean 20803 + disableWaitForJobs: 20804 + description: |- 20805 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20806 + upgrade has been performed. 20807 + type: boolean 20808 + force: 20809 + description: Force forces resource updates through a replacement 20810 + strategy. 20811 + type: boolean 20812 + preserveValues: 20813 + description: |- 20814 + PreserveValues will make Helm reuse the last release's values and merge in 20815 + overrides from 'Values'. Setting this flag makes the HelmRelease 20816 + non-declarative. 20817 + type: boolean 20818 + remediation: 20819 + description: |- 20820 + Remediation holds the remediation configuration for when the Helm upgrade 20821 + action for the HelmRelease fails. The default is to not perform any action. 20822 + properties: 20823 + ignoreTestFailures: 20824 + description: |- 20825 + IgnoreTestFailures tells the controller to skip remediation when the Helm 20826 + tests are run after an upgrade action but fail. 20827 + Defaults to 'Test.IgnoreFailures'. 20828 + type: boolean 20829 + remediateLastFailure: 20830 + description: |- 20831 + RemediateLastFailure tells the controller to remediate the last failure, when 20832 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 20833 + type: boolean 20834 + retries: 20835 + description: |- 20836 + Retries is the number of retries that should be attempted on failures before 20837 + bailing. Remediation, using 'Strategy', is performed between each attempt. 20838 + Defaults to '0', a negative integer equals to unlimited retries. 20839 + type: integer 20840 + strategy: 20841 + description: Strategy to use for failure remediation. Defaults 20842 + to 'rollback'. 20843 + enum: 20844 + - rollback 20845 + - uninstall 20846 + type: string 20847 + type: object 20848 + timeout: 20849 + description: |- 20850 + Timeout is the time to wait for any individual Kubernetes operation (like 20851 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 20852 + 'HelmReleaseSpec.Timeout'. 20853 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20854 + type: string 20855 + type: object 20856 + values: 20857 + description: Values holds the values for this Helm release. 20858 + x-kubernetes-preserve-unknown-fields: true 20859 + valuesFrom: 20860 + description: |- 20861 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 20862 + and information about how they should be merged. 20863 + items: 20864 + description: |- 20865 + ValuesReference contains a reference to a resource containing Helm values, 20866 + and optionally the key they can be found at. 20867 + properties: 20868 + kind: 20869 + description: Kind of the values referent, valid values are ('Secret', 20870 + 'ConfigMap'). 20871 + enum: 20872 + - Secret 20873 + - ConfigMap 20874 + type: string 20875 + name: 20876 + description: |- 20877 + Name of the values referent. Should reside in the same namespace as the 20878 + referring resource. 20879 + maxLength: 253 20880 + minLength: 1 20881 + type: string 20882 + optional: 20883 + description: |- 20884 + Optional marks this ValuesReference as optional. When set, a not found error 20885 + for the values reference is ignored, but any ValuesKey, TargetPath or 20886 + transient error will still result in a reconciliation failure. 20887 + type: boolean 20888 + targetPath: 20889 + description: |- 20890 + TargetPath is the YAML dot notation path the value should be merged at. When 20891 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 20892 + which results in the values getting merged at the root. 20893 + maxLength: 250 20894 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 20895 + type: string 20896 + valuesKey: 20897 + description: |- 20898 + ValuesKey is the data key where the values.yaml or a specific value can be 20899 + found at. Defaults to 'values.yaml'. 20900 + When set, must be a valid Data Key, consisting of alphanumeric characters, 20901 + '-', '_' or '.'. 20902 + maxLength: 253 20903 + pattern: ^[\-._a-zA-Z0-9]+$ 20904 + type: string 20905 + required: 20906 + - kind 20907 + - name 20908 + type: object 20909 + type: array 20910 + required: 20911 + - chart 20912 + - interval 20913 + type: object 20914 + status: 20915 + default: 20916 + observedGeneration: -1 20917 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 20918 + properties: 20919 + conditions: 20920 + description: Conditions holds the conditions for the HelmRelease. 20921 + items: 20922 + description: Condition contains details for one aspect of the current 20923 + state of this API Resource. 20924 + properties: 20925 + lastTransitionTime: 20926 + description: |- 20927 + lastTransitionTime is the last time the condition transitioned from one status to another. 20928 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20929 + format: date-time 20930 + type: string 20931 + message: 20932 + description: |- 20933 + message is a human readable message indicating details about the transition. 20934 + This may be an empty string. 20935 + maxLength: 32768 20936 + type: string 20937 + observedGeneration: 20938 + description: |- 20939 + observedGeneration represents the .metadata.generation that the condition was set based upon. 20940 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20941 + with respect to the current state of the instance. 20942 + format: int64 20943 + minimum: 0 20944 + type: integer 20945 + reason: 20946 + description: |- 20947 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 20948 + Producers of specific condition types may define expected values and meanings for this field, 20949 + and whether the values are considered a guaranteed API. 20950 + The value should be a CamelCase string. 20951 + This field may not be empty. 20952 + maxLength: 1024 20953 + minLength: 1 20954 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20955 + type: string 20956 status: 20957 - default: 20958 - observedGeneration: -1 20959 - description: ReceiverStatus defines the observed state of the Receiver. 20960 - properties: 20961 - conditions: 20962 - description: Conditions holds the conditions for the Receiver. 20963 - items: 20964 - description: Condition contains details for one aspect of the current state of this API 20965 - Resource. 20966 - properties: 20967 - lastTransitionTime: 20968 - description: |- 20969 - lastTransitionTime is the last time the condition transitioned from one status to another. 20970 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20971 - format: date-time 20972 - type: string 20973 - message: 20974 - description: |- 20975 - message is a human readable message indicating details about the transition. 20976 - This may be an empty string. 20977 - maxLength: 32768 20978 - type: string 20979 - observedGeneration: 20980 - description: |- 20981 - observedGeneration represents the .metadata.generation that the condition was set based upon. 20982 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20983 - with respect to the current state of the instance. 20984 - format: int64 20985 - minimum: 0 20986 - type: integer 20987 - reason: 20988 - description: |- 20989 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 20990 - Producers of specific condition types may define expected values and meanings for this field, 20991 - and whether the values are considered a guaranteed API. 20992 - The value should be a CamelCase string. 20993 - This field may not be empty. 20994 - maxLength: 1024 20995 - minLength: 1 20996 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20997 - type: string 20998 - status: 20999 - description: status of the condition, one of True, False, Unknown. 21000 - enum: 21001 - - "True" 21002 - - "False" 21003 - - Unknown 21004 - type: string 21005 - type: 21006 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 21007 - maxLength: 316 21008 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21009 - type: string 21010 - required: 21011 - - lastTransitionTime 21012 - - message 21013 - - reason 21014 - - status 21015 - - type 21016 - type: object 21017 - type: array 21018 - lastHandledReconcileAt: 21019 - description: |- 21020 - LastHandledReconcileAt holds the value of the most recent 21021 - reconcile request value, so a change of the annotation value 21022 - can be detected. 21023 - type: string 21024 - observedGeneration: 21025 - description: ObservedGeneration is the last observed generation of the Receiver object. 21026 - format: int64 21027 - type: integer 21028 - webhookPath: 21029 - description: |- 21030 - WebhookPath is the generated incoming webhook address in the format 21031 - of '/hook/sha256sum(token+name+namespace)'. 21032 - type: string 21033 + description: status of the condition, one of True, False, Unknown. 21034 + enum: 21035 + - "True" 21036 + - "False" 21037 + - Unknown 21038 + type: string 21039 + type: 21040 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 21041 + maxLength: 316 21042 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21043 + type: string 21044 + required: 21045 + - lastTransitionTime 21046 + - message 21047 + - reason 21048 + - status 21049 + - type 21050 + type: object 21051 + type: array 21052 + failures: 21053 + description: |- 21054 + Failures is the reconciliation failure count against the latest desired 21055 + state. It is reset after a successful reconciliation. 21056 + format: int64 21057 + type: integer 21058 + helmChart: 21059 + description: |- 21060 + HelmChart is the namespaced name of the HelmChart resource created by 21061 + the controller for the HelmRelease. 21062 + type: string 21063 + history: 21064 + description: |- 21065 + History holds the history of Helm releases performed for this HelmRelease 21066 + up to the last successfully completed release. 21067 + 21068 + Note: this field is provisional to the v2beta2 API, and not actively used 21069 + by v2beta1 HelmReleases. 21070 + items: 21071 + description: |- 21072 + Snapshot captures a point-in-time copy of the status information for a Helm release, 21073 + as managed by the controller. 21074 + properties: 21075 + apiVersion: 21076 + description: |- 21077 + APIVersion is the API version of the Snapshot. 21078 + Provisional: when the calculation method of the Digest field is changed, 21079 + this field will be used to distinguish between the old and new methods. 21080 + type: string 21081 + appVersion: 21082 + description: AppVersion is the chart app version of the release 21083 + object in storage. 21084 + type: string 21085 + chartName: 21086 + description: ChartName is the chart name of the release object 21087 + in storage. 21088 + type: string 21089 + chartVersion: 21090 + description: |- 21091 + ChartVersion is the chart version of the release object in 21092 + storage. 21093 + type: string 21094 + configDigest: 21095 + description: |- 21096 + ConfigDigest is the checksum of the config (better known as 21097 + "values") of the release object in storage. 21098 + It has the format of `<algo>:<checksum>`. 21099 + type: string 21100 + deleted: 21101 + description: Deleted is when the release was deleted. 21102 + format: date-time 21103 + type: string 21104 + digest: 21105 + description: |- 21106 + Digest is the checksum of the release object in storage. 21107 + It has the format of `<algo>:<checksum>`. 21108 + type: string 21109 + firstDeployed: 21110 + description: FirstDeployed is when the release was first deployed. 21111 + format: date-time 21112 + type: string 21113 + lastDeployed: 21114 + description: LastDeployed is when the release was last deployed. 21115 + format: date-time 21116 + type: string 21117 + name: 21118 + description: Name is the name of the release. 21119 + type: string 21120 + namespace: 21121 + description: Namespace is the namespace the release is deployed 21122 + to. 21123 + type: string 21124 + ociDigest: 21125 + description: OCIDigest is the digest of the OCI artifact associated 21126 + with the release. 21127 + type: string 21128 + status: 21129 + description: Status is the current state of the release. 21130 + type: string 21131 + testHooks: 21132 + additionalProperties: 21133 + description: |- 21134 + TestHookStatus holds the status information for a test hook as observed 21135 + to be run by the controller. 21136 + properties: 21137 + lastCompleted: 21138 + description: LastCompleted is the time the test hook last 21139 + completed. 21140 + format: date-time 21141 + type: string 21142 + lastStarted: 21143 + description: LastStarted is the time the test hook was 21144 + last started. 21145 + format: date-time 21146 + type: string 21147 + phase: 21148 + description: Phase the test hook was observed to be in. 21149 + type: string 21150 type: object 21151 - type: object 21152 - served: true 21153 - storage: true 21154 - subresources: 21155 - status: {} 21156 - - additionalPrinterColumns: 21157 - - jsonPath: .metadata.creationTimestamp 21158 - name: Age 21159 - type: date 21160 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21161 - name: Ready 21162 - type: string 21163 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21164 - name: Status 21165 - type: string 21166 - deprecated: true 21167 - deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1 21168 - name: v1beta1 21169 - schema: 21170 - openAPIV3Schema: 21171 - description: Receiver is the Schema for the receivers API 21172 + description: |- 21173 + TestHooks is the list of test hooks for the release as observed to be 21174 + run by the controller. 21175 + type: object 21176 + version: 21177 + description: Version is the version of the release object in 21178 + storage. 21179 + type: integer 21180 + required: 21181 + - chartName 21182 + - chartVersion 21183 + - configDigest 21184 + - digest 21185 + - firstDeployed 21186 + - lastDeployed 21187 + - name 21188 + - namespace 21189 + - status 21190 + - version 21191 + type: object 21192 + type: array 21193 + installFailures: 21194 + description: |- 21195 + InstallFailures is the install failure count against the latest desired 21196 + state. It is reset after a successful reconciliation. 21197 + format: int64 21198 + type: integer 21199 + lastAppliedRevision: 21200 + description: LastAppliedRevision is the revision of the last successfully 21201 + applied source. 21202 + type: string 21203 + lastAttemptedConfigDigest: 21204 + description: |- 21205 + LastAttemptedConfigDigest is the digest for the config (better known as 21206 + "values") of the last reconciliation attempt. 21207 + 21208 + Note: this field is provisional to the v2beta2 API, and not actively used 21209 + by v2beta1 HelmReleases. 21210 + type: string 21211 + lastAttemptedGeneration: 21212 + description: |- 21213 + LastAttemptedGeneration is the last generation the controller attempted 21214 + to reconcile. 21215 + 21216 + Note: this field is provisional to the v2beta2 API, and not actively used 21217 + by v2beta1 HelmReleases. 21218 + format: int64 21219 + type: integer 21220 + lastAttemptedReleaseAction: 21221 + description: |- 21222 + LastAttemptedReleaseAction is the last release action performed for this 21223 + HelmRelease. It is used to determine the active remediation strategy. 21224 + 21225 + Note: this field is provisional to the v2beta2 API, and not actively used 21226 + by v2beta1 HelmReleases. 21227 + type: string 21228 + lastAttemptedRevision: 21229 + description: LastAttemptedRevision is the revision of the last reconciliation 21230 + attempt. 21231 + type: string 21232 + lastAttemptedValuesChecksum: 21233 + description: |- 21234 + LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last 21235 + reconciliation attempt. 21236 + type: string 21237 + lastHandledForceAt: 21238 + description: |- 21239 + LastHandledForceAt holds the value of the most recent force request 21240 + value, so a change of the annotation value can be detected. 21241 + 21242 + Note: this field is provisional to the v2beta2 API, and not actively used 21243 + by v2beta1 HelmReleases. 21244 + type: string 21245 + lastHandledReconcileAt: 21246 + description: |- 21247 + LastHandledReconcileAt holds the value of the most recent 21248 + reconcile request value, so a change of the annotation value 21249 + can be detected. 21250 + type: string 21251 + lastHandledResetAt: 21252 + description: |- 21253 + LastHandledResetAt holds the value of the most recent reset request 21254 + value, so a change of the annotation value can be detected. 21255 + 21256 + Note: this field is provisional to the v2beta2 API, and not actively used 21257 + by v2beta1 HelmReleases. 21258 + type: string 21259 + lastReleaseRevision: 21260 + description: LastReleaseRevision is the revision of the last successful 21261 + Helm release. 21262 + type: integer 21263 + observedGeneration: 21264 + description: ObservedGeneration is the last observed generation. 21265 + format: int64 21266 + type: integer 21267 + observedPostRenderersDigest: 21268 + description: |- 21269 + ObservedPostRenderersDigest is the digest for the post-renderers of 21270 + the last successful reconciliation attempt. 21271 + type: string 21272 + storageNamespace: 21273 + description: |- 21274 + StorageNamespace is the namespace of the Helm release storage for the 21275 + current release. 21276 + 21277 + Note: this field is provisional to the v2beta2 API, and not actively used 21278 + by v2beta1 HelmReleases. 21279 + type: string 21280 + upgradeFailures: 21281 + description: |- 21282 + UpgradeFailures is the upgrade failure count against the latest desired 21283 + state. It is reset after a successful reconciliation. 21284 + format: int64 21285 + type: integer 21286 + type: object 21287 + type: object 21288 + served: true 21289 + storage: false 21290 + subresources: 21291 + status: {} 21292 + - additionalPrinterColumns: 21293 + - jsonPath: .metadata.creationTimestamp 21294 + name: Age 21295 + type: date 21296 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 21297 + name: Ready 21298 + type: string 21299 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 21300 + name: Status 21301 + type: string 21302 + deprecated: true 21303 + deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 21304 + name: v2beta2 21305 + schema: 21306 + openAPIV3Schema: 21307 + description: HelmRelease is the Schema for the helmreleases API 21308 + properties: 21309 + apiVersion: 21310 + description: |- 21311 + APIVersion defines the versioned schema of this representation of an object. 21312 + Servers should convert recognized schemas to the latest internal value, and 21313 + may reject unrecognized values. 21314 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21315 + type: string 21316 + kind: 21317 + description: |- 21318 + Kind is a string value representing the REST resource this object represents. 21319 + Servers may infer this from the endpoint the client submits requests to. 21320 + Cannot be updated. 21321 + In CamelCase. 21322 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21323 + type: string 21324 + metadata: 21325 + type: object 21326 + spec: 21327 + description: HelmReleaseSpec defines the desired state of a Helm release. 21328 + properties: 21329 + chart: 21330 + description: |- 21331 + Chart defines the template of the v1beta2.HelmChart that should be created 21332 + for this HelmRelease. 21333 properties: 21334 - apiVersion: 21335 + metadata: 21336 + description: ObjectMeta holds the template for metadata like labels 21337 + and annotations. 21338 + properties: 21339 + annotations: 21340 + additionalProperties: 21341 + type: string 21342 + description: |- 21343 + Annotations is an unstructured key value map stored with a resource that may be 21344 + set by external tools to store and retrieve arbitrary metadata. They are not 21345 + queryable and should be preserved when modifying objects. 21346 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 21347 + type: object 21348 + labels: 21349 + additionalProperties: 21350 + type: string 21351 description: |- 21352 - APIVersion defines the versioned schema of this representation of an object. 21353 - Servers should convert recognized schemas to the latest internal value, and 21354 - may reject unrecognized values. 21355 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21356 + Map of string keys and values that can be used to organize and categorize 21357 + (scope and select) objects. 21358 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 21359 + type: object 21360 + type: object 21361 + spec: 21362 + description: Spec holds the template for the v1beta2.HelmChartSpec 21363 + for this HelmRelease. 21364 + properties: 21365 + chart: 21366 + description: The name or path the Helm chart is available 21367 + at in the SourceRef. 21368 + maxLength: 2048 21369 + minLength: 1 21370 type: string 21371 - kind: 21372 + ignoreMissingValuesFiles: 21373 + description: IgnoreMissingValuesFiles controls whether to 21374 + silently ignore missing values files rather than failing. 21375 + type: boolean 21376 + interval: 21377 description: |- 21378 - Kind is a string value representing the REST resource this object represents. 21379 - Servers may infer this from the endpoint the client submits requests to. 21380 - Cannot be updated. 21381 - In CamelCase. 21382 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21383 + Interval at which to check the v1.Source for updates. Defaults to 21384 + 'HelmReleaseSpec.Interval'. 21385 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21386 type: string 21387 - metadata: 21388 - type: object 21389 - spec: 21390 - description: ReceiverSpec defines the desired state of Receiver 21391 + reconcileStrategy: 21392 + default: ChartVersion 21393 + description: |- 21394 + Determines what enables the creation of a new artifact. Valid values are 21395 + ('ChartVersion', 'Revision'). 21396 + See the documentation of the values for an explanation on their behavior. 21397 + Defaults to ChartVersion when omitted. 21398 + enum: 21399 + - ChartVersion 21400 + - Revision 21401 + type: string 21402 + sourceRef: 21403 + description: The name and namespace of the v1.Source the chart 21404 + is available at. 21405 properties: 21406 - events: 21407 - description: |- 21408 - A list of events to handle, 21409 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 21410 - items: 21411 - type: string 21412 - type: array 21413 - resources: 21414 - description: A list of resources to be notified about changes. 21415 - items: 21416 - description: |- 21417 - CrossNamespaceObjectReference contains enough information to let you locate the 21418 - typed referenced object at cluster level 21419 - properties: 21420 - apiVersion: 21421 - description: API version of the referent 21422 - type: string 21423 - kind: 21424 - description: Kind of the referent 21425 - enum: 21426 - - Bucket 21427 - - GitRepository 21428 - - Kustomization 21429 - - HelmRelease 21430 - - HelmChart 21431 - - HelmRepository 21432 - - ImageRepository 21433 - - ImagePolicy 21434 - - ImageUpdateAutomation 21435 - - OCIRepository 21436 - type: string 21437 - matchLabels: 21438 - additionalProperties: 21439 - type: string 21440 - description: |- 21441 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21442 - map is equivalent to an element of matchExpressions, whose key field is "key", the 21443 - operator is "In", and the values array contains only "value". The requirements are ANDed. 21444 - type: object 21445 - name: 21446 - description: Name of the referent 21447 - maxLength: 53 21448 - minLength: 1 21449 - type: string 21450 - namespace: 21451 - description: Namespace of the referent 21452 - maxLength: 53 21453 - minLength: 1 21454 - type: string 21455 - required: 21456 - - kind 21457 - - name 21458 - type: object 21459 - type: array 21460 - secretRef: 21461 - description: |- 21462 - Secret reference containing the token used 21463 - to validate the payload authenticity 21464 - properties: 21465 - name: 21466 - description: Name of the referent. 21467 - type: string 21468 - required: 21469 - - name 21470 - type: object 21471 - suspend: 21472 - description: |- 21473 - This flag tells the controller to suspend subsequent events handling. 21474 - Defaults to false. 21475 - type: boolean 21476 - type: 21477 - description: |- 21478 - Type of webhook sender, used to determine 21479 - the validation procedure and payload deserialization. 21480 - enum: 21481 - - generic 21482 - - generic-hmac 21483 - - github 21484 - - gitlab 21485 - - bitbucket 21486 - - harbor 21487 - - dockerhub 21488 - - quay 21489 - - gcr 21490 - - nexus 21491 - - acr 21492 - type: string 21493 + apiVersion: 21494 + description: APIVersion of the referent. 21495 + type: string 21496 + kind: 21497 + description: Kind of the referent. 21498 + enum: 21499 + - HelmRepository 21500 + - GitRepository 21501 + - Bucket 21502 + type: string 21503 + name: 21504 + description: Name of the referent. 21505 + maxLength: 253 21506 + minLength: 1 21507 + type: string 21508 + namespace: 21509 + description: Namespace of the referent. 21510 + maxLength: 63 21511 + minLength: 1 21512 + type: string 21513 required: 21514 - - resources 21515 - - secretRef 21516 - - type 21517 + - kind 21518 + - name 21519 type: object 21520 - status: 21521 - default: 21522 - observedGeneration: -1 21523 - description: ReceiverStatus defines the observed state of Receiver 21524 + valuesFile: 21525 + description: |- 21526 + Alternative values file to use as the default chart values, expected to 21527 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 21528 + for backwards compatibility the file defined here is merged before the 21529 + ValuesFiles items. Ignored when omitted. 21530 + type: string 21531 + valuesFiles: 21532 + description: |- 21533 + Alternative list of values files to use as the chart values (values.yaml 21534 + is not included by default), expected to be a relative path in the SourceRef. 21535 + Values files are merged in the order of this list with the last file overriding 21536 + the first. Ignored when omitted. 21537 + items: 21538 + type: string 21539 + type: array 21540 + verify: 21541 + description: |- 21542 + Verify contains the secret name containing the trusted public keys 21543 + used to verify the signature and specifies which provider to use to check 21544 + whether OCI image is authentic. 21545 + This field is only supported for OCI sources. 21546 + Chart dependencies, which are not bundled in the umbrella chart artifact, 21547 + are not verified. 21548 properties: 21549 - conditions: 21550 - items: 21551 - description: Condition contains details for one aspect of the current state of this API 21552 - Resource. 21553 - properties: 21554 - lastTransitionTime: 21555 - description: |- 21556 - lastTransitionTime is the last time the condition transitioned from one status to another. 21557 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21558 - format: date-time 21559 - type: string 21560 - message: 21561 - description: |- 21562 - message is a human readable message indicating details about the transition. 21563 - This may be an empty string. 21564 - maxLength: 32768 21565 - type: string 21566 - observedGeneration: 21567 - description: |- 21568 - observedGeneration represents the .metadata.generation that the condition was set based upon. 21569 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21570 - with respect to the current state of the instance. 21571 - format: int64 21572 - minimum: 0 21573 - type: integer 21574 - reason: 21575 - description: |- 21576 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 21577 - Producers of specific condition types may define expected values and meanings for this field, 21578 - and whether the values are considered a guaranteed API. 21579 - The value should be a CamelCase string. 21580 - This field may not be empty. 21581 - maxLength: 1024 21582 - minLength: 1 21583 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21584 - type: string 21585 - status: 21586 - description: status of the condition, one of True, False, Unknown. 21587 - enum: 21588 - - "True" 21589 - - "False" 21590 - - Unknown 21591 - type: string 21592 - type: 21593 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 21594 - maxLength: 316 21595 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21596 - type: string 21597 - required: 21598 - - lastTransitionTime 21599 - - message 21600 - - reason 21601 - - status 21602 - - type 21603 - type: object 21604 - type: array 21605 - observedGeneration: 21606 - description: ObservedGeneration is the last observed generation. 21607 - format: int64 21608 - type: integer 21609 - url: 21610 - description: |- 21611 - Generated webhook URL in the format 21612 - of '/hook/sha256sum(token+name+namespace)'. 21613 - type: string 21614 + provider: 21615 + default: cosign 21616 + description: Provider specifies the technology used to 21617 + sign the OCI Helm chart. 21618 + enum: 21619 + - cosign 21620 + - notation 21621 + type: string 21622 + secretRef: 21623 + description: |- 21624 + SecretRef specifies the Kubernetes Secret containing the 21625 + trusted public keys. 21626 + properties: 21627 + name: 21628 + description: Name of the referent. 21629 + type: string 21630 + required: 21631 + - name 21632 + type: object 21633 + required: 21634 + - provider 21635 type: object 21636 + version: 21637 + default: '*' 21638 + description: |- 21639 + Version semver expression, ignored for charts from v1beta2.GitRepository and 21640 + v1beta2.Bucket sources. Defaults to latest when omitted. 21641 + type: string 21642 + required: 21643 + - chart 21644 + - sourceRef 21645 + type: object 21646 + required: 21647 + - spec 21648 type: object 21649 - served: true 21650 - storage: false 21651 - subresources: 21652 - status: {} 21653 - - additionalPrinterColumns: 21654 - - jsonPath: .metadata.creationTimestamp 21655 - name: Age 21656 - type: date 21657 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21658 - name: Ready 21659 - type: string 21660 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21661 - name: Status 21662 - type: string 21663 - deprecated: true 21664 - deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 21665 - name: v1beta2 21666 - schema: 21667 - openAPIV3Schema: 21668 - description: Receiver is the Schema for the receivers API. 21669 + chartRef: 21670 + description: |- 21671 + ChartRef holds a reference to a source controller resource containing the 21672 + Helm chart artifact. 21673 + 21674 + Note: this field is provisional to the v2 API, and not actively used 21675 + by v2beta2 HelmReleases. 21676 properties: 21677 - apiVersion: 21678 + apiVersion: 21679 + description: APIVersion of the referent. 21680 + type: string 21681 + kind: 21682 + description: Kind of the referent. 21683 + enum: 21684 + - OCIRepository 21685 + - HelmChart 21686 + type: string 21687 + name: 21688 + description: Name of the referent. 21689 + maxLength: 253 21690 + minLength: 1 21691 + type: string 21692 + namespace: 21693 + description: |- 21694 + Namespace of the referent, defaults to the namespace of the Kubernetes 21695 + resource object that contains the reference. 21696 + maxLength: 63 21697 + minLength: 1 21698 + type: string 21699 + required: 21700 + - kind 21701 + - name 21702 + type: object 21703 + dependsOn: 21704 + description: |- 21705 + DependsOn may contain a meta.NamespacedObjectReference slice with 21706 + references to HelmRelease resources that must be ready before this HelmRelease 21707 + can be reconciled. 21708 + items: 21709 + description: |- 21710 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 21711 + namespace. 21712 + properties: 21713 + name: 21714 + description: Name of the referent. 21715 + type: string 21716 + namespace: 21717 + description: Namespace of the referent, when not specified it 21718 + acts as LocalObjectReference. 21719 + type: string 21720 + required: 21721 + - name 21722 + type: object 21723 + type: array 21724 + driftDetection: 21725 + description: |- 21726 + DriftDetection holds the configuration for detecting and handling 21727 + differences between the manifest in the Helm storage and the resources 21728 + currently existing in the cluster. 21729 + properties: 21730 + ignore: 21731 + description: |- 21732 + Ignore contains a list of rules for specifying which changes to ignore 21733 + during diffing. 21734 + items: 21735 + description: |- 21736 + IgnoreRule defines a rule to selectively disregard specific changes during 21737 + the drift detection process. 21738 + properties: 21739 + paths: 21740 + description: |- 21741 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 21742 + consideration in a Kubernetes object. 21743 + items: 21744 + type: string 21745 + type: array 21746 + target: 21747 + description: |- 21748 + Target is a selector for specifying Kubernetes objects to which this 21749 + rule applies. 21750 + If Target is not set, the Paths will be ignored for all Kubernetes 21751 + objects within the manifest of the Helm release. 21752 + properties: 21753 + annotationSelector: 21754 + description: |- 21755 + AnnotationSelector is a string that follows the label selection expression 21756 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 21757 + It matches with the resource annotations. 21758 + type: string 21759 + group: 21760 + description: |- 21761 + Group is the API group to select resources from. 21762 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 21763 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21764 + type: string 21765 + kind: 21766 + description: |- 21767 + Kind of the API Group to select resources from. 21768 + Together with Group and Version it is capable of unambiguously 21769 + identifying and/or selecting resources. 21770 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21771 + type: string 21772 + labelSelector: 21773 + description: |- 21774 + LabelSelector is a string that follows the label selection expression 21775 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 21776 + It matches with the resource labels. 21777 + type: string 21778 + name: 21779 + description: Name to match resources with. 21780 + type: string 21781 + namespace: 21782 + description: Namespace to select resources from. 21783 + type: string 21784 + version: 21785 + description: |- 21786 + Version of the API Group to select resources from. 21787 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 21788 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21789 + type: string 21790 + type: object 21791 + required: 21792 + - paths 21793 + type: object 21794 + type: array 21795 + mode: 21796 + description: |- 21797 + Mode defines how differences should be handled between the Helm manifest 21798 + and the manifest currently applied to the cluster. 21799 + If not explicitly set, it defaults to DiffModeDisabled. 21800 + enum: 21801 + - enabled 21802 + - warn 21803 + - disabled 21804 + type: string 21805 + type: object 21806 + install: 21807 + description: Install holds the configuration for Helm install actions 21808 + for this HelmRelease. 21809 + properties: 21810 + crds: 21811 + description: |- 21812 + CRDs upgrade CRDs from the Helm Chart's crds directory according 21813 + to the CRD upgrade policy provided here. Valid values are `Skip`, 21814 + `Create` or `CreateReplace`. Default is `Create` and if omitted 21815 + CRDs are installed but not updated. 21816 + 21817 + Skip: do neither install nor replace (update) any CRDs. 21818 + 21819 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 21820 + 21821 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 21822 + but not deleted. 21823 + 21824 + By default, CRDs are applied (installed) during Helm install action. 21825 + With this option users can opt in to CRD replace existing CRDs on Helm 21826 + install actions, which is not (yet) natively supported by Helm. 21827 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 21828 + enum: 21829 + - Skip 21830 + - Create 21831 + - CreateReplace 21832 + type: string 21833 + createNamespace: 21834 + description: |- 21835 + CreateNamespace tells the Helm install action to create the 21836 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 21837 + On uninstall, the namespace will not be garbage collected. 21838 + type: boolean 21839 + disableHooks: 21840 + description: DisableHooks prevents hooks from running during the 21841 + Helm install action. 21842 + type: boolean 21843 + disableOpenAPIValidation: 21844 + description: |- 21845 + DisableOpenAPIValidation prevents the Helm install action from validating 21846 + rendered templates against the Kubernetes OpenAPI Schema. 21847 + type: boolean 21848 + disableWait: 21849 + description: |- 21850 + DisableWait disables the waiting for resources to be ready after a Helm 21851 + install has been performed. 21852 + type: boolean 21853 + disableWaitForJobs: 21854 + description: |- 21855 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 21856 + install has been performed. 21857 + type: boolean 21858 + remediation: 21859 + description: |- 21860 + Remediation holds the remediation configuration for when the Helm install 21861 + action for the HelmRelease fails. The default is to not perform any action. 21862 + properties: 21863 + ignoreTestFailures: 21864 description: |- 21865 - APIVersion defines the versioned schema of this representation of an object. 21866 - Servers should convert recognized schemas to the latest internal value, and 21867 - may reject unrecognized values. 21868 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21869 - type: string 21870 - kind: 21871 + IgnoreTestFailures tells the controller to skip remediation when the Helm 21872 + tests are run after an install action but fail. Defaults to 21873 + 'Test.IgnoreFailures'. 21874 + type: boolean 21875 + remediateLastFailure: 21876 + description: |- 21877 + RemediateLastFailure tells the controller to remediate the last failure, when 21878 + no retries remain. Defaults to 'false'. 21879 + type: boolean 21880 + retries: 21881 description: |- 21882 - Kind is a string value representing the REST resource this object represents. 21883 - Servers may infer this from the endpoint the client submits requests to. 21884 - Cannot be updated. 21885 - In CamelCase. 21886 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21887 + Retries is the number of retries that should be attempted on failures before 21888 + bailing. Remediation, using an uninstall, is performed between each attempt. 21889 + Defaults to '0', a negative integer equals to unlimited retries. 21890 + type: integer 21891 + type: object 21892 + replace: 21893 + description: |- 21894 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 21895 + if that name is a deleted release which remains in the history. 21896 + type: boolean 21897 + skipCRDs: 21898 + description: |- 21899 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 21900 + CRDs are installed if not already present. 21901 + 21902 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 21903 + type: boolean 21904 + timeout: 21905 + description: |- 21906 + Timeout is the time to wait for any individual Kubernetes operation (like 21907 + Jobs for hooks) during the performance of a Helm install action. Defaults to 21908 + 'HelmReleaseSpec.Timeout'. 21909 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21910 + type: string 21911 + type: object 21912 + interval: 21913 + description: Interval at which to reconcile the Helm release. 21914 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21915 + type: string 21916 + kubeConfig: 21917 + description: |- 21918 + KubeConfig for reconciling the HelmRelease on a remote cluster. 21919 + When used in combination with HelmReleaseSpec.ServiceAccountName, 21920 + forces the controller to act on behalf of that Service Account at the 21921 + target cluster. 21922 + If the --default-service-account flag is set, its value will be used as 21923 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 21924 + is empty. 21925 + properties: 21926 + secretRef: 21927 + description: |- 21928 + SecretRef holds the name of a secret that contains a key with 21929 + the kubeconfig file as the value. If no key is set, the key will default 21930 + to 'value'. 21931 + It is recommended that the kubeconfig is self-contained, and the secret 21932 + is regularly updated if credentials such as a cloud-access-token expire. 21933 + Cloud specific `cmd-path` auth helpers will not function without adding 21934 + binaries and credentials to the Pod that is responsible for reconciling 21935 + Kubernetes resources. 21936 + properties: 21937 + key: 21938 + description: Key in the Secret, when not specified an implementation-specific 21939 + default key is used. 21940 type: string 21941 - metadata: 21942 - type: object 21943 - spec: 21944 - description: ReceiverSpec defines the desired state of the Receiver. 21945 - properties: 21946 - events: 21947 - description: |- 21948 - Events specifies the list of event types to handle, 21949 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 21950 - items: 21951 + name: 21952 + description: Name of the Secret. 21953 + type: string 21954 + required: 21955 + - name 21956 + type: object 21957 + required: 21958 + - secretRef 21959 + type: object 21960 + maxHistory: 21961 + description: |- 21962 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 21963 + Use '0' for an unlimited number of revisions; defaults to '5'. 21964 + type: integer 21965 + persistentClient: 21966 + description: |- 21967 + PersistentClient tells the controller to use a persistent Kubernetes 21968 + client for this release. When enabled, the client will be reused for the 21969 + duration of the reconciliation, instead of being created and destroyed 21970 + for each (step of a) Helm action. 21971 + 21972 + This can improve performance, but may cause issues with some Helm charts 21973 + that for example do create Custom Resource Definitions during installation 21974 + outside Helm's CRD lifecycle hooks, which are then not observed to be 21975 + available by e.g. post-install hooks. 21976 + 21977 + If not set, it defaults to true. 21978 + type: boolean 21979 + postRenderers: 21980 + description: |- 21981 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 21982 + of their definition. 21983 + items: 21984 + description: PostRenderer contains a Helm PostRenderer specification. 21985 + properties: 21986 + kustomize: 21987 + description: Kustomization to apply as PostRenderer. 21988 + properties: 21989 + images: 21990 + description: |- 21991 + Images is a list of (image name, new name, new tag or digest) 21992 + for changing image names, tags or digests. This can also be achieved with a 21993 + patch, but this operator is simpler to specify. 21994 + items: 21995 + description: Image contains an image name, a new name, 21996 + a new tag or digest, which will replace the original 21997 + name and tag. 21998 + properties: 21999 + digest: 22000 + description: |- 22001 + Digest is the value used to replace the original image tag. 22002 + If digest is present NewTag value is ignored. 22003 + type: string 22004 + name: 22005 + description: Name is a tag-less image name. 22006 + type: string 22007 + newName: 22008 + description: NewName is the value used to replace 22009 + the original name. 22010 + type: string 22011 + newTag: 22012 + description: NewTag is the value used to replace the 22013 + original tag. 22014 + type: string 22015 + required: 22016 + - name 22017 + type: object 22018 + type: array 22019 + patches: 22020 + description: |- 22021 + Strategic merge and JSON patches, defined as inline YAML objects, 22022 + capable of targeting objects based on kind, label and annotation selectors. 22023 + items: 22024 + description: |- 22025 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 22026 + be applied to. 22027 + properties: 22028 + patch: 22029 + description: |- 22030 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 22031 + an array of operation objects. 22032 + type: string 22033 + target: 22034 + description: Target points to the resources that the 22035 + patch document should be applied to. 22036 + properties: 22037 + annotationSelector: 22038 + description: |- 22039 + AnnotationSelector is a string that follows the label selection expression 22040 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 22041 + It matches with the resource annotations. 22042 type: string 22043 - type: array 22044 - interval: 22045 - description: Interval at which to reconcile the Receiver with its Secret references. 22046 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22047 - type: string 22048 - resources: 22049 - description: A list of resources to be notified about changes. 22050 - items: 22051 + group: 22052 + description: |- 22053 + Group is the API group to select resources from. 22054 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 22055 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 22056 + type: string 22057 + kind: 22058 + description: |- 22059 + Kind of the API Group to select resources from. 22060 + Together with Group and Version it is capable of unambiguously 22061 + identifying and/or selecting resources. 22062 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 22063 + type: string 22064 + labelSelector: 22065 + description: |- 22066 + LabelSelector is a string that follows the label selection expression 22067 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 22068 + It matches with the resource labels. 22069 + type: string 22070 + name: 22071 + description: Name to match resources with. 22072 + type: string 22073 + namespace: 22074 + description: Namespace to select resources from. 22075 + type: string 22076 + version: 22077 description: |- 22078 - CrossNamespaceObjectReference contains enough information to let you locate the 22079 - typed referenced object at cluster level 22080 - properties: 22081 - apiVersion: 22082 - description: API version of the referent 22083 - type: string 22084 - kind: 22085 - description: Kind of the referent 22086 - enum: 22087 - - Bucket 22088 - - GitRepository 22089 - - Kustomization 22090 - - HelmRelease 22091 - - HelmChart 22092 - - HelmRepository 22093 - - ImageRepository 22094 - - ImagePolicy 22095 - - ImageUpdateAutomation 22096 - - OCIRepository 22097 - type: string 22098 - matchLabels: 22099 - additionalProperties: 22100 - type: string 22101 - description: |- 22102 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 22103 - map is equivalent to an element of matchExpressions, whose key field is "key", the 22104 - operator is "In", and the values array contains only "value". The requirements are ANDed. 22105 - MatchLabels requires the name to be set to `*`. 22106 - type: object 22107 - name: 22108 - description: |- 22109 - Name of the referent 22110 - If multiple resources are targeted `*` may be set. 22111 - maxLength: 53 22112 - minLength: 1 22113 - type: string 22114 - namespace: 22115 - description: Namespace of the referent 22116 - maxLength: 53 22117 - minLength: 1 22118 - type: string 22119 - required: 22120 - - kind 22121 - - name 22122 - type: object 22123 + Version of the API Group to select resources from. 22124 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 22125 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 22126 + type: string 22127 + type: object 22128 + required: 22129 + - patch 22130 + type: object 22131 + type: array 22132 + patchesJson6902: 22133 + description: |- 22134 + JSON 6902 patches, defined as inline YAML objects. 22135 + Deprecated: use Patches instead. 22136 + items: 22137 + description: JSON6902Patch contains a JSON6902 patch and 22138 + the target the patch should be applied to. 22139 + properties: 22140 + patch: 22141 + description: Patch contains the JSON6902 patch document 22142 + with an array of operation objects. 22143 + items: 22144 + description: |- 22145 + JSON6902 is a JSON6902 operation object. 22146 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 22147 + properties: 22148 + from: 22149 + description: |- 22150 + From contains a JSON-pointer value that references a location within the target document where the operation is 22151 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 22152 + type: string 22153 + op: 22154 + description: |- 22155 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 22156 + "test". 22157 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 22158 + enum: 22159 + - test 22160 + - remove 22161 + - add 22162 + - replace 22163 + - move 22164 + - copy 22165 + type: string 22166 + path: 22167 + description: |- 22168 + Path contains the JSON-pointer value that references a location within the target document where the operation 22169 + is performed. The meaning of the value depends on the value of Op. 22170 + type: string 22171 + value: 22172 + description: |- 22173 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 22174 + account by all operations. 22175 + x-kubernetes-preserve-unknown-fields: true 22176 + required: 22177 + - op 22178 + - path 22179 + type: object 22180 type: array 22181 - secretRef: 22182 - description: |- 22183 - SecretRef specifies the Secret containing the token used 22184 - to validate the payload authenticity. 22185 + target: 22186 + description: Target points to the resources that the 22187 + patch document should be applied to. 22188 properties: 22189 - name: 22190 - description: Name of the referent. 22191 - type: string 22192 - required: 22193 - - name 22194 + annotationSelector: 22195 + description: |- 22196 + AnnotationSelector is a string that follows the label selection expression 22197 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 22198 + It matches with the resource annotations. 22199 + type: string 22200 + group: 22201 + description: |- 22202 + Group is the API group to select resources from. 22203 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 22204 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 22205 + type: string 22206 + kind: 22207 + description: |- 22208 + Kind of the API Group to select resources from. 22209 + Together with Group and Version it is capable of unambiguously 22210 + identifying and/or selecting resources. 22211 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 22212 + type: string 22213 + labelSelector: 22214 + description: |- 22215 + LabelSelector is a string that follows the label selection expression 22216 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 22217 + It matches with the resource labels. 22218 + type: string 22219 + name: 22220 + description: Name to match resources with. 22221 + type: string 22222 + namespace: 22223 + description: Namespace to select resources from. 22224 + type: string 22225 + version: 22226 + description: |- 22227 + Version of the API Group to select resources from. 22228 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 22229 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 22230 + type: string 22231 type: object 22232 - suspend: 22233 - description: |- 22234 - Suspend tells the controller to suspend subsequent 22235 - events handling for this receiver. 22236 - type: boolean 22237 - type: 22238 - description: |- 22239 - Type of webhook sender, used to determine 22240 - the validation procedure and payload deserialization. 22241 - enum: 22242 - - generic 22243 - - generic-hmac 22244 - - github 22245 - - gitlab 22246 - - bitbucket 22247 - - harbor 22248 - - dockerhub 22249 - - quay 22250 - - gcr 22251 - - nexus 22252 - - acr 22253 - type: string 22254 - required: 22255 - - resources 22256 - - secretRef 22257 - - type 22258 - type: object 22259 + required: 22260 + - patch 22261 + - target 22262 + type: object 22263 + type: array 22264 + patchesStrategicMerge: 22265 + description: |- 22266 + Strategic merge patches, defined as inline YAML objects. 22267 + Deprecated: use Patches instead. 22268 + items: 22269 + x-kubernetes-preserve-unknown-fields: true 22270 + type: array 22271 + type: object 22272 + type: object 22273 + type: array 22274 + releaseName: 22275 + description: |- 22276 + ReleaseName used for the Helm release. Defaults to a composition of 22277 + '[TargetNamespace-]Name'. 22278 + maxLength: 53 22279 + minLength: 1 22280 + type: string 22281 + rollback: 22282 + description: Rollback holds the configuration for Helm rollback actions 22283 + for this HelmRelease. 22284 + properties: 22285 + cleanupOnFail: 22286 + description: |- 22287 + CleanupOnFail allows deletion of new resources created during the Helm 22288 + rollback action when it fails. 22289 + type: boolean 22290 + disableHooks: 22291 + description: DisableHooks prevents hooks from running during the 22292 + Helm rollback action. 22293 + type: boolean 22294 + disableWait: 22295 + description: |- 22296 + DisableWait disables the waiting for resources to be ready after a Helm 22297 + rollback has been performed. 22298 + type: boolean 22299 + disableWaitForJobs: 22300 + description: |- 22301 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 22302 + rollback has been performed. 22303 + type: boolean 22304 + force: 22305 + description: Force forces resource updates through a replacement 22306 + strategy. 22307 + type: boolean 22308 + recreate: 22309 + description: Recreate performs pod restarts for the resource if 22310 + applicable. 22311 + type: boolean 22312 + timeout: 22313 + description: |- 22314 + Timeout is the time to wait for any individual Kubernetes operation (like 22315 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 22316 + 'HelmReleaseSpec.Timeout'. 22317 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22318 + type: string 22319 + type: object 22320 + serviceAccountName: 22321 + description: |- 22322 + The name of the Kubernetes service account to impersonate 22323 + when reconciling this HelmRelease. 22324 + maxLength: 253 22325 + minLength: 1 22326 + type: string 22327 + storageNamespace: 22328 + description: |- 22329 + StorageNamespace used for the Helm storage. 22330 + Defaults to the namespace of the HelmRelease. 22331 + maxLength: 63 22332 + minLength: 1 22333 + type: string 22334 + suspend: 22335 + description: |- 22336 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 22337 + it does not apply to already started reconciliations. Defaults to false. 22338 + type: boolean 22339 + targetNamespace: 22340 + description: |- 22341 + TargetNamespace to target when performing operations for the HelmRelease. 22342 + Defaults to the namespace of the HelmRelease. 22343 + maxLength: 63 22344 + minLength: 1 22345 + type: string 22346 + test: 22347 + description: Test holds the configuration for Helm test actions for 22348 + this HelmRelease. 22349 + properties: 22350 + enable: 22351 + description: |- 22352 + Enable enables Helm test actions for this HelmRelease after an Helm install 22353 + or upgrade action has been performed. 22354 + type: boolean 22355 + filters: 22356 + description: Filters is a list of tests to run or exclude from 22357 + running. 22358 + items: 22359 + description: Filter holds the configuration for individual Helm 22360 + test filters. 22361 + properties: 22362 + exclude: 22363 + description: Exclude specifies whether the named test should 22364 + be excluded. 22365 + type: boolean 22366 + name: 22367 + description: Name is the name of the test. 22368 + maxLength: 253 22369 + minLength: 1 22370 + type: string 22371 + required: 22372 + - name 22373 + type: object 22374 + type: array 22375 + ignoreFailures: 22376 + description: |- 22377 + IgnoreFailures tells the controller to skip remediation when the Helm tests 22378 + are run but fail. Can be overwritten for tests run after install or upgrade 22379 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 22380 + type: boolean 22381 + timeout: 22382 + description: |- 22383 + Timeout is the time to wait for any individual Kubernetes operation during 22384 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 22385 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22386 + type: string 22387 + type: object 22388 + timeout: 22389 + description: |- 22390 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 22391 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 22392 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22393 + type: string 22394 + uninstall: 22395 + description: Uninstall holds the configuration for Helm uninstall 22396 + actions for this HelmRelease. 22397 + properties: 22398 + deletionPropagation: 22399 + default: background 22400 + description: |- 22401 + DeletionPropagation specifies the deletion propagation policy when 22402 + a Helm uninstall is performed. 22403 + enum: 22404 + - background 22405 + - foreground 22406 + - orphan 22407 + type: string 22408 + disableHooks: 22409 + description: DisableHooks prevents hooks from running during the 22410 + Helm rollback action. 22411 + type: boolean 22412 + disableWait: 22413 + description: |- 22414 + DisableWait disables waiting for all the resources to be deleted after 22415 + a Helm uninstall is performed. 22416 + type: boolean 22417 + keepHistory: 22418 + description: |- 22419 + KeepHistory tells Helm to remove all associated resources and mark the 22420 + release as deleted, but retain the release history. 22421 + type: boolean 22422 + timeout: 22423 + description: |- 22424 + Timeout is the time to wait for any individual Kubernetes operation (like 22425 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 22426 + to 'HelmReleaseSpec.Timeout'. 22427 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22428 + type: string 22429 + type: object 22430 + upgrade: 22431 + description: Upgrade holds the configuration for Helm upgrade actions 22432 + for this HelmRelease. 22433 + properties: 22434 + cleanupOnFail: 22435 + description: |- 22436 + CleanupOnFail allows deletion of new resources created during the Helm 22437 + upgrade action when it fails. 22438 + type: boolean 22439 + crds: 22440 + description: |- 22441 + CRDs upgrade CRDs from the Helm Chart's crds directory according 22442 + to the CRD upgrade policy provided here. Valid values are `Skip`, 22443 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 22444 + CRDs are neither installed nor upgraded. 22445 + 22446 + Skip: do neither install nor replace (update) any CRDs. 22447 + 22448 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 22449 + 22450 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 22451 + but not deleted. 22452 + 22453 + By default, CRDs are not applied during Helm upgrade action. With this 22454 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 22455 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 22456 + enum: 22457 + - Skip 22458 + - Create 22459 + - CreateReplace 22460 + type: string 22461 + disableHooks: 22462 + description: DisableHooks prevents hooks from running during the 22463 + Helm upgrade action. 22464 + type: boolean 22465 + disableOpenAPIValidation: 22466 + description: |- 22467 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 22468 + rendered templates against the Kubernetes OpenAPI Schema. 22469 + type: boolean 22470 + disableWait: 22471 + description: |- 22472 + DisableWait disables the waiting for resources to be ready after a Helm 22473 + upgrade has been performed. 22474 + type: boolean 22475 + disableWaitForJobs: 22476 + description: |- 22477 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 22478 + upgrade has been performed. 22479 + type: boolean 22480 + force: 22481 + description: Force forces resource updates through a replacement 22482 + strategy. 22483 + type: boolean 22484 + preserveValues: 22485 + description: |- 22486 + PreserveValues will make Helm reuse the last release's values and merge in 22487 + overrides from 'Values'. Setting this flag makes the HelmRelease 22488 + non-declarative. 22489 + type: boolean 22490 + remediation: 22491 + description: |- 22492 + Remediation holds the remediation configuration for when the Helm upgrade 22493 + action for the HelmRelease fails. The default is to not perform any action. 22494 + properties: 22495 + ignoreTestFailures: 22496 + description: |- 22497 + IgnoreTestFailures tells the controller to skip remediation when the Helm 22498 + tests are run after an upgrade action but fail. 22499 + Defaults to 'Test.IgnoreFailures'. 22500 + type: boolean 22501 + remediateLastFailure: 22502 + description: |- 22503 + RemediateLastFailure tells the controller to remediate the last failure, when 22504 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 22505 + type: boolean 22506 + retries: 22507 + description: |- 22508 + Retries is the number of retries that should be attempted on failures before 22509 + bailing. Remediation, using 'Strategy', is performed between each attempt. 22510 + Defaults to '0', a negative integer equals to unlimited retries. 22511 + type: integer 22512 + strategy: 22513 + description: Strategy to use for failure remediation. Defaults 22514 + to 'rollback'. 22515 + enum: 22516 + - rollback 22517 + - uninstall 22518 + type: string 22519 + type: object 22520 + timeout: 22521 + description: |- 22522 + Timeout is the time to wait for any individual Kubernetes operation (like 22523 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 22524 + 'HelmReleaseSpec.Timeout'. 22525 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22526 + type: string 22527 + type: object 22528 + values: 22529 + description: Values holds the values for this Helm release. 22530 + x-kubernetes-preserve-unknown-fields: true 22531 + valuesFrom: 22532 + description: |- 22533 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 22534 + and information about how they should be merged. 22535 + items: 22536 + description: |- 22537 + ValuesReference contains a reference to a resource containing Helm values, 22538 + and optionally the key they can be found at. 22539 + properties: 22540 + kind: 22541 + description: Kind of the values referent, valid values are ('Secret', 22542 + 'ConfigMap'). 22543 + enum: 22544 + - Secret 22545 + - ConfigMap 22546 + type: string 22547 + name: 22548 + description: |- 22549 + Name of the values referent. Should reside in the same namespace as the 22550 + referring resource. 22551 + maxLength: 253 22552 + minLength: 1 22553 + type: string 22554 + optional: 22555 + description: |- 22556 + Optional marks this ValuesReference as optional. When set, a not found error 22557 + for the values reference is ignored, but any ValuesKey, TargetPath or 22558 + transient error will still result in a reconciliation failure. 22559 + type: boolean 22560 + targetPath: 22561 + description: |- 22562 + TargetPath is the YAML dot notation path the value should be merged at. When 22563 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 22564 + which results in the values getting merged at the root. 22565 + maxLength: 250 22566 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 22567 + type: string 22568 + valuesKey: 22569 + description: |- 22570 + ValuesKey is the data key where the values.yaml or a specific value can be 22571 + found at. Defaults to 'values.yaml'. 22572 + maxLength: 253 22573 + pattern: ^[\-._a-zA-Z0-9]+$ 22574 + type: string 22575 + required: 22576 + - kind 22577 + - name 22578 + type: object 22579 + type: array 22580 + required: 22581 + - interval 22582 + type: object 22583 + x-kubernetes-validations: 22584 + - message: either chart or chartRef must be set 22585 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 22586 + && has(self.chartRef)) 22587 + status: 22588 + default: 22589 + observedGeneration: -1 22590 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 22591 + properties: 22592 + conditions: 22593 + description: Conditions holds the conditions for the HelmRelease. 22594 + items: 22595 + description: Condition contains details for one aspect of the current 22596 + state of this API Resource. 22597 + properties: 22598 + lastTransitionTime: 22599 + description: |- 22600 + lastTransitionTime is the last time the condition transitioned from one status to another. 22601 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22602 + format: date-time 22603 + type: string 22604 + message: 22605 + description: |- 22606 + message is a human readable message indicating details about the transition. 22607 + This may be an empty string. 22608 + maxLength: 32768 22609 + type: string 22610 + observedGeneration: 22611 + description: |- 22612 + observedGeneration represents the .metadata.generation that the condition was set based upon. 22613 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22614 + with respect to the current state of the instance. 22615 + format: int64 22616 + minimum: 0 22617 + type: integer 22618 + reason: 22619 + description: |- 22620 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 22621 + Producers of specific condition types may define expected values and meanings for this field, 22622 + and whether the values are considered a guaranteed API. 22623 + The value should be a CamelCase string. 22624 + This field may not be empty. 22625 + maxLength: 1024 22626 + minLength: 1 22627 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22628 + type: string 22629 status: 22630 - default: 22631 - observedGeneration: -1 22632 - description: ReceiverStatus defines the observed state of the Receiver. 22633 + description: status of the condition, one of True, False, Unknown. 22634 + enum: 22635 + - "True" 22636 + - "False" 22637 + - Unknown 22638 + type: string 22639 + type: 22640 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 22641 + maxLength: 316 22642 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22643 + type: string 22644 + required: 22645 + - lastTransitionTime 22646 + - message 22647 + - reason 22648 + - status 22649 + - type 22650 + type: object 22651 + type: array 22652 + failures: 22653 + description: |- 22654 + Failures is the reconciliation failure count against the latest desired 22655 + state. It is reset after a successful reconciliation. 22656 + format: int64 22657 + type: integer 22658 + helmChart: 22659 + description: |- 22660 + HelmChart is the namespaced name of the HelmChart resource created by 22661 + the controller for the HelmRelease. 22662 + type: string 22663 + history: 22664 + description: |- 22665 + History holds the history of Helm releases performed for this HelmRelease 22666 + up to the last successfully completed release. 22667 + items: 22668 + description: |- 22669 + Snapshot captures a point-in-time copy of the status information for a Helm release, 22670 + as managed by the controller. 22671 + properties: 22672 + apiVersion: 22673 + description: |- 22674 + APIVersion is the API version of the Snapshot. 22675 + Provisional: when the calculation method of the Digest field is changed, 22676 + this field will be used to distinguish between the old and new methods. 22677 + type: string 22678 + appVersion: 22679 + description: AppVersion is the chart app version of the release 22680 + object in storage. 22681 + type: string 22682 + chartName: 22683 + description: ChartName is the chart name of the release object 22684 + in storage. 22685 + type: string 22686 + chartVersion: 22687 + description: |- 22688 + ChartVersion is the chart version of the release object in 22689 + storage. 22690 + type: string 22691 + configDigest: 22692 + description: |- 22693 + ConfigDigest is the checksum of the config (better known as 22694 + "values") of the release object in storage. 22695 + It has the format of `<algo>:<checksum>`. 22696 + type: string 22697 + deleted: 22698 + description: Deleted is when the release was deleted. 22699 + format: date-time 22700 + type: string 22701 + digest: 22702 + description: |- 22703 + Digest is the checksum of the release object in storage. 22704 + It has the format of `<algo>:<checksum>`. 22705 + type: string 22706 + firstDeployed: 22707 + description: FirstDeployed is when the release was first deployed. 22708 + format: date-time 22709 + type: string 22710 + lastDeployed: 22711 + description: LastDeployed is when the release was last deployed. 22712 + format: date-time 22713 + type: string 22714 + name: 22715 + description: Name is the name of the release. 22716 + type: string 22717 + namespace: 22718 + description: Namespace is the namespace the release is deployed 22719 + to. 22720 + type: string 22721 + ociDigest: 22722 + description: OCIDigest is the digest of the OCI artifact associated 22723 + with the release. 22724 + type: string 22725 + status: 22726 + description: Status is the current state of the release. 22727 + type: string 22728 + testHooks: 22729 + additionalProperties: 22730 + description: |- 22731 + TestHookStatus holds the status information for a test hook as observed 22732 + to be run by the controller. 22733 properties: 22734 - conditions: 22735 - description: Conditions holds the conditions for the Receiver. 22736 - items: 22737 - description: Condition contains details for one aspect of the current state of this API 22738 - Resource. 22739 - properties: 22740 - lastTransitionTime: 22741 - description: |- 22742 - lastTransitionTime is the last time the condition transitioned from one status to another. 22743 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22744 - format: date-time 22745 - type: string 22746 - message: 22747 - description: |- 22748 - message is a human readable message indicating details about the transition. 22749 - This may be an empty string. 22750 - maxLength: 32768 22751 - type: string 22752 - observedGeneration: 22753 - description: |- 22754 - observedGeneration represents the .metadata.generation that the condition was set based upon. 22755 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22756 - with respect to the current state of the instance. 22757 - format: int64 22758 - minimum: 0 22759 - type: integer 22760 - reason: 22761 - description: |- 22762 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 22763 - Producers of specific condition types may define expected values and meanings for this field, 22764 - and whether the values are considered a guaranteed API. 22765 - The value should be a CamelCase string. 22766 - This field may not be empty. 22767 - maxLength: 1024 22768 - minLength: 1 22769 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22770 - type: string 22771 - status: 22772 - description: status of the condition, one of True, False, Unknown. 22773 - enum: 22774 - - "True" 22775 - - "False" 22776 - - Unknown 22777 - type: string 22778 - type: 22779 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 22780 - maxLength: 316 22781 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22782 - type: string 22783 - required: 22784 - - lastTransitionTime 22785 - - message 22786 - - reason 22787 - - status 22788 - - type 22789 - type: object 22790 - type: array 22791 - lastHandledReconcileAt: 22792 - description: |- 22793 - LastHandledReconcileAt holds the value of the most recent 22794 - reconcile request value, so a change of the annotation value 22795 - can be detected. 22796 - type: string 22797 - observedGeneration: 22798 - description: ObservedGeneration is the last observed generation of the Receiver object. 22799 - format: int64 22800 - type: integer 22801 - url: 22802 - description: |- 22803 - URL is the generated incoming webhook address in the format 22804 - of '/hook/sha256sum(token+name+namespace)'. 22805 - Deprecated: Replaced by WebhookPath. 22806 - type: string 22807 - webhookPath: 22808 - description: |- 22809 - WebhookPath is the generated incoming webhook address in the format 22810 - of '/hook/sha256sum(token+name+namespace)'. 22811 - type: string 22812 + lastCompleted: 22813 + description: LastCompleted is the time the test hook last 22814 + completed. 22815 + format: date-time 22816 + type: string 22817 + lastStarted: 22818 + description: LastStarted is the time the test hook was 22819 + last started. 22820 + format: date-time 22821 + type: string 22822 + phase: 22823 + description: Phase the test hook was observed to be in. 22824 + type: string 22825 type: object 22826 - type: object 22827 - served: true 22828 - storage: false 22829 - subresources: 22830 - status: {} 22831 + description: |- 22832 + TestHooks is the list of test hooks for the release as observed to be 22833 + run by the controller. 22834 + type: object 22835 + version: 22836 + description: Version is the version of the release object in 22837 + storage. 22838 + type: integer 22839 + required: 22840 + - chartName 22841 + - chartVersion 22842 + - configDigest 22843 + - digest 22844 + - firstDeployed 22845 + - lastDeployed 22846 + - name 22847 + - namespace 22848 + - status 22849 + - version 22850 + type: object 22851 + type: array 22852 + installFailures: 22853 + description: |- 22854 + InstallFailures is the install failure count against the latest desired 22855 + state. It is reset after a successful reconciliation. 22856 + format: int64 22857 + type: integer 22858 + lastAppliedRevision: 22859 + description: |- 22860 + LastAppliedRevision is the revision of the last successfully applied 22861 + source. 22862 + Deprecated: the revision can now be found in the History. 22863 + type: string 22864 + lastAttemptedConfigDigest: 22865 + description: |- 22866 + LastAttemptedConfigDigest is the digest for the config (better known as 22867 + "values") of the last reconciliation attempt. 22868 + type: string 22869 + lastAttemptedGeneration: 22870 + description: |- 22871 + LastAttemptedGeneration is the last generation the controller attempted 22872 + to reconcile. 22873 + format: int64 22874 + type: integer 22875 + lastAttemptedReleaseAction: 22876 + description: |- 22877 + LastAttemptedReleaseAction is the last release action performed for this 22878 + HelmRelease. It is used to determine the active remediation strategy. 22879 + enum: 22880 + - install 22881 + - upgrade 22882 + type: string 22883 + lastAttemptedRevision: 22884 + description: |- 22885 + LastAttemptedRevision is the Source revision of the last reconciliation 22886 + attempt. For OCIRepository sources, the 12 first characters of the digest are 22887 + appended to the chart version e.g. "1.2.3+1234567890ab". 22888 + type: string 22889 + lastAttemptedRevisionDigest: 22890 + description: |- 22891 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 22892 + This is only set for OCIRepository sources. 22893 + type: string 22894 + lastAttemptedValuesChecksum: 22895 + description: |- 22896 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 22897 + reconciliation attempt. 22898 + Deprecated: Use LastAttemptedConfigDigest instead. 22899 + type: string 22900 + lastHandledForceAt: 22901 + description: |- 22902 + LastHandledForceAt holds the value of the most recent force request 22903 + value, so a change of the annotation value can be detected. 22904 + type: string 22905 + lastHandledReconcileAt: 22906 + description: |- 22907 + LastHandledReconcileAt holds the value of the most recent 22908 + reconcile request value, so a change of the annotation value 22909 + can be detected. 22910 + type: string 22911 + lastHandledResetAt: 22912 + description: |- 22913 + LastHandledResetAt holds the value of the most recent reset request 22914 + value, so a change of the annotation value can be detected. 22915 + type: string 22916 + lastReleaseRevision: 22917 + description: |- 22918 + LastReleaseRevision is the revision of the last successful Helm release. 22919 + Deprecated: Use History instead. 22920 + type: integer 22921 + observedGeneration: 22922 + description: ObservedGeneration is the last observed generation. 22923 + format: int64 22924 + type: integer 22925 + observedPostRenderersDigest: 22926 + description: |- 22927 + ObservedPostRenderersDigest is the digest for the post-renderers of 22928 + the last successful reconciliation attempt. 22929 + type: string 22930 + storageNamespace: 22931 + description: |- 22932 + StorageNamespace is the namespace of the Helm release storage for the 22933 + current release. 22934 + maxLength: 63 22935 + minLength: 1 22936 + type: string 22937 + upgradeFailures: 22938 + description: |- 22939 + UpgradeFailures is the upgrade failure count against the latest desired 22940 + state. It is reset after a successful reconciliation. 22941 + format: int64 22942 + type: integer 22943 + type: object 22944 + type: object 22945 + served: true 22946 + storage: false 22947 + subresources: 22948 + status: {} 22949 --- 22950 apiVersion: v1 22951 kind: ServiceAccount 22952 metadata: 22953 - labels: 22954 - app.kubernetes.io/component: notification-controller 22955 - app.kubernetes.io/instance: flux-system 22956 - app.kubernetes.io/part-of: flux 22957 - app.kubernetes.io/version: v2.5.1 22958 - name: notification-controller 22959 - namespace: flux-system 22960 ---- 22961 -apiVersion: v1 22962 -kind: Service 22963 -metadata: 22964 - labels: 22965 - app.kubernetes.io/component: notification-controller 22966 - app.kubernetes.io/instance: flux-system 22967 - app.kubernetes.io/part-of: flux 22968 - app.kubernetes.io/version: v2.5.1 22969 - control-plane: controller 22970 - name: notification-controller 22971 - namespace: flux-system 22972 -spec: 22973 - ports: 22974 - - name: http 22975 - port: 80 22976 - protocol: TCP 22977 - targetPort: http 22978 - selector: 22979 - app: notification-controller 22980 - type: ClusterIP 22981 ---- 22982 -apiVersion: v1 22983 -kind: Service 22984 -metadata: 22985 - labels: 22986 - app.kubernetes.io/component: notification-controller 22987 - app.kubernetes.io/instance: flux-system 22988 - app.kubernetes.io/part-of: flux 22989 - app.kubernetes.io/version: v2.5.1 22990 - control-plane: controller 22991 - name: webhook-receiver 22992 - namespace: flux-system 22993 -spec: 22994 - ports: 22995 - - name: http 22996 - port: 80 22997 - protocol: TCP 22998 - targetPort: http-webhook 22999 - selector: 23000 - app: notification-controller 23001 - type: ClusterIP 23002 + labels: 23003 + app.kubernetes.io/component: helm-controller 23004 + app.kubernetes.io/instance: flux-system 23005 + app.kubernetes.io/part-of: flux 23006 + app.kubernetes.io/version: v2.6.4 23007 + name: helm-controller 23008 + namespace: flux-system 23009 --- 23010 apiVersion: apps/v1 23011 kind: Deployment 23012 metadata: 23013 - labels: 23014 - app.kubernetes.io/component: notification-controller 23015 - app.kubernetes.io/instance: flux-system 23016 - app.kubernetes.io/part-of: flux 23017 - app.kubernetes.io/version: v2.5.1 23018 - control-plane: controller 23019 - name: notification-controller 23020 - namespace: flux-system 23021 + labels: 23022 + app.kubernetes.io/component: helm-controller 23023 + app.kubernetes.io/instance: flux-system 23024 + app.kubernetes.io/part-of: flux 23025 + app.kubernetes.io/version: v2.6.4 23026 + control-plane: controller 23027 + name: helm-controller 23028 + namespace: flux-system 23029 spec: 23030 - replicas: 1 23031 - selector: 23032 - matchLabels: 23033 - app: notification-controller 23034 - template: 23035 - metadata: 23036 - annotations: 23037 - prometheus.io/port: "8080" 23038 - prometheus.io/scrape: "true" 23039 - labels: 23040 - app: notification-controller 23041 - spec: 23042 - containers: 23043 - - args: 23044 - - --watch-all-namespaces=true 23045 - - --log-level=info 23046 - - --log-encoding=json 23047 - - --enable-leader-election 23048 - env: 23049 - - name: RUNTIME_NAMESPACE 23050 - valueFrom: 23051 - fieldRef: 23052 - fieldPath: metadata.namespace 23053 - - name: GOMAXPROCS 23054 - valueFrom: 23055 - resourceFieldRef: 23056 - containerName: manager 23057 - resource: limits.cpu 23058 - - name: GOMEMLIMIT 23059 - valueFrom: 23060 - resourceFieldRef: 23061 - containerName: manager 23062 - resource: limits.memory 23063 - image: ghcr.io/fluxcd/notification-controller:v1.5.0 23064 - imagePullPolicy: IfNotPresent 23065 - livenessProbe: 23066 - httpGet: 23067 - path: /healthz 23068 - port: healthz 23069 - name: manager 23070 - ports: 23071 - - containerPort: 9090 23072 - name: http 23073 - protocol: TCP 23074 - - containerPort: 9292 23075 - name: http-webhook 23076 - protocol: TCP 23077 - - containerPort: 8080 23078 - name: http-prom 23079 - protocol: TCP 23080 - - containerPort: 9440 23081 - name: healthz 23082 - protocol: TCP 23083 - readinessProbe: 23084 - httpGet: 23085 - path: /readyz 23086 - port: healthz 23087 - resources: 23088 - limits: 23089 - cpu: 1000m 23090 - memory: 1Gi 23091 - requests: 23092 - cpu: 100m 23093 - memory: 64Mi 23094 - securityContext: 23095 - allowPrivilegeEscalation: false 23096 - capabilities: 23097 - drop: 23098 - - ALL 23099 - readOnlyRootFilesystem: true 23100 - runAsNonRoot: true 23101 - seccompProfile: 23102 - type: RuntimeDefault 23103 - volumeMounts: 23104 - - mountPath: /tmp 23105 - name: temp 23106 - nodeSelector: 23107 - kubernetes.io/os: linux 23108 - securityContext: 23109 - fsGroup: 1337 23110 - serviceAccountName: notification-controller 23111 - terminationGracePeriodSeconds: 10 23112 - volumes: 23113 - - emptyDir: {} 23114 - name: temp 23115 + replicas: 1 23116 + selector: 23117 + matchLabels: 23118 + app: helm-controller 23119 + template: 23120 + metadata: 23121 + annotations: 23122 + prometheus.io/port: "8080" 23123 + prometheus.io/scrape: "true" 23124 + labels: 23125 + app: helm-controller 23126 + spec: 23127 + containers: 23128 + - args: 23129 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 23130 + - --watch-all-namespaces=true 23131 + - --log-level=info 23132 + - --log-encoding=json 23133 + - --enable-leader-election 23134 + env: 23135 + - name: RUNTIME_NAMESPACE 23136 + valueFrom: 23137 + fieldRef: 23138 + fieldPath: metadata.namespace 23139 + - name: GOMAXPROCS 23140 + valueFrom: 23141 + resourceFieldRef: 23142 + containerName: manager 23143 + resource: limits.cpu 23144 + - name: GOMEMLIMIT 23145 + valueFrom: 23146 + resourceFieldRef: 23147 + containerName: manager 23148 + resource: limits.memory 23149 + image: ghcr.io/fluxcd/helm-controller:v1.3.0 23150 + imagePullPolicy: IfNotPresent 23151 + livenessProbe: 23152 + httpGet: 23153 + path: /healthz 23154 + port: healthz 23155 + name: manager 23156 + ports: 23157 + - containerPort: 8080 23158 + name: http-prom 23159 + protocol: TCP 23160 + - containerPort: 9440 23161 + name: healthz 23162 + protocol: TCP 23163 + readinessProbe: 23164 + httpGet: 23165 + path: /readyz 23166 + port: healthz 23167 + resources: 23168 + limits: 23169 + cpu: 1000m 23170 + memory: 1Gi 23171 + requests: 23172 + cpu: 100m 23173 + memory: 64Mi 23174 + securityContext: 23175 + allowPrivilegeEscalation: false 23176 + capabilities: 23177 + drop: 23178 + - ALL 23179 + readOnlyRootFilesystem: true 23180 + runAsNonRoot: true 23181 + seccompProfile: 23182 + type: RuntimeDefault 23183 + volumeMounts: 23184 + - mountPath: /tmp 23185 + name: temp 23186 + nodeSelector: 23187 + kubernetes.io/os: linux 23188 + priorityClassName: system-cluster-critical 23189 + securityContext: 23190 + fsGroup: 1337 23191 + serviceAccountName: helm-controller 23192 + terminationGracePeriodSeconds: 600 23193 + volumes: 23194 + - emptyDir: {} 23195 + name: temp 23196 --- 23197 apiVersion: apiextensions.k8s.io/v1 23198 kind: CustomResourceDefinition 23199 metadata: 23200 - annotations: 23201 - controller-gen.kubebuilder.io/version: v0.16.1 23202 - labels: 23203 - app.kubernetes.io/component: image-reflector-controller 23204 - app.kubernetes.io/instance: flux-system 23205 - app.kubernetes.io/part-of: flux 23206 - app.kubernetes.io/version: v2.5.1 23207 - name: imagepolicies.image.toolkit.fluxcd.io 23208 + annotations: 23209 + controller-gen.kubebuilder.io/version: v0.16.1 23210 + labels: 23211 + app.kubernetes.io/component: notification-controller 23212 + app.kubernetes.io/instance: flux-system 23213 + app.kubernetes.io/part-of: flux 23214 + app.kubernetes.io/version: v2.6.4 23215 + name: alerts.notification.toolkit.fluxcd.io 23216 spec: 23217 - group: image.toolkit.fluxcd.io 23218 - names: 23219 - kind: ImagePolicy 23220 - listKind: ImagePolicyList 23221 - plural: imagepolicies 23222 - singular: imagepolicy 23223 - scope: Namespaced 23224 - versions: 23225 - - additionalPrinterColumns: 23226 - - jsonPath: .status.latestImage 23227 - name: LatestImage 23228 - type: string 23229 - name: v1beta1 23230 - schema: 23231 - openAPIV3Schema: 23232 - description: ImagePolicy is the Schema for the imagepolicies API 23233 + group: notification.toolkit.fluxcd.io 23234 + names: 23235 + kind: Alert 23236 + listKind: AlertList 23237 + plural: alerts 23238 + singular: alert 23239 + scope: Namespaced 23240 + versions: 23241 + - additionalPrinterColumns: 23242 + - jsonPath: .metadata.creationTimestamp 23243 + name: Age 23244 + type: date 23245 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23246 + name: Ready 23247 + type: string 23248 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23249 + name: Status 23250 + type: string 23251 + deprecated: true 23252 + deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3 23253 + name: v1beta1 23254 + schema: 23255 + openAPIV3Schema: 23256 + description: Alert is the Schema for the alerts API 23257 + properties: 23258 + apiVersion: 23259 + description: |- 23260 + APIVersion defines the versioned schema of this representation of an object. 23261 + Servers should convert recognized schemas to the latest internal value, and 23262 + may reject unrecognized values. 23263 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23264 + type: string 23265 + kind: 23266 + description: |- 23267 + Kind is a string value representing the REST resource this object represents. 23268 + Servers may infer this from the endpoint the client submits requests to. 23269 + Cannot be updated. 23270 + In CamelCase. 23271 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23272 + type: string 23273 + metadata: 23274 + type: object 23275 + spec: 23276 + description: AlertSpec defines an alerting rule for events involving a 23277 + list of objects 23278 + properties: 23279 + eventSeverity: 23280 + default: info 23281 + description: |- 23282 + Filter events based on severity, defaults to ('info'). 23283 + If set to 'info' no events will be filtered. 23284 + enum: 23285 + - info 23286 + - error 23287 + type: string 23288 + eventSources: 23289 + description: Filter events based on the involved objects. 23290 + items: 23291 + description: |- 23292 + CrossNamespaceObjectReference contains enough information to let you locate the 23293 + typed referenced object at cluster level 23294 + properties: 23295 + apiVersion: 23296 + description: API version of the referent 23297 + type: string 23298 + kind: 23299 + description: Kind of the referent 23300 + enum: 23301 + - Bucket 23302 + - GitRepository 23303 + - Kustomization 23304 + - HelmRelease 23305 + - HelmChart 23306 + - HelmRepository 23307 + - ImageRepository 23308 + - ImagePolicy 23309 + - ImageUpdateAutomation 23310 + - OCIRepository 23311 + type: string 23312 + matchLabels: 23313 + additionalProperties: 23314 + type: string 23315 + description: |- 23316 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23317 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23318 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23319 + type: object 23320 + name: 23321 + description: Name of the referent 23322 + maxLength: 53 23323 + minLength: 1 23324 + type: string 23325 + namespace: 23326 + description: Namespace of the referent 23327 + maxLength: 53 23328 + minLength: 1 23329 + type: string 23330 + required: 23331 + - kind 23332 + - name 23333 + type: object 23334 + type: array 23335 + exclusionList: 23336 + description: A list of Golang regular expressions to be used for excluding 23337 + messages. 23338 + items: 23339 + type: string 23340 + type: array 23341 + providerRef: 23342 + description: Send events using this provider. 23343 properties: 23344 + name: 23345 + description: Name of the referent. 23346 + type: string 23347 + required: 23348 + - name 23349 + type: object 23350 + summary: 23351 + description: Short description of the impact and affected cluster. 23352 + type: string 23353 + suspend: 23354 + description: |- 23355 + This flag tells the controller to suspend subsequent events dispatching. 23356 + Defaults to false. 23357 + type: boolean 23358 + required: 23359 + - eventSources 23360 + - providerRef 23361 + type: object 23362 + status: 23363 + default: 23364 + observedGeneration: -1 23365 + description: AlertStatus defines the observed state of Alert 23366 + properties: 23367 + conditions: 23368 + items: 23369 + description: Condition contains details for one aspect of the current 23370 + state of this API Resource. 23371 + properties: 23372 + lastTransitionTime: 23373 + description: |- 23374 + lastTransitionTime is the last time the condition transitioned from one status to another. 23375 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23376 + format: date-time 23377 + type: string 23378 + message: 23379 + description: |- 23380 + message is a human readable message indicating details about the transition. 23381 + This may be an empty string. 23382 + maxLength: 32768 23383 + type: string 23384 + observedGeneration: 23385 + description: |- 23386 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23387 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23388 + with respect to the current state of the instance. 23389 + format: int64 23390 + minimum: 0 23391 + type: integer 23392 + reason: 23393 + description: |- 23394 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23395 + Producers of specific condition types may define expected values and meanings for this field, 23396 + and whether the values are considered a guaranteed API. 23397 + The value should be a CamelCase string. 23398 + This field may not be empty. 23399 + maxLength: 1024 23400 + minLength: 1 23401 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23402 + type: string 23403 + status: 23404 + description: status of the condition, one of True, False, Unknown. 23405 + enum: 23406 + - "True" 23407 + - "False" 23408 + - Unknown 23409 + type: string 23410 + type: 23411 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23412 + maxLength: 316 23413 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23414 + type: string 23415 + required: 23416 + - lastTransitionTime 23417 + - message 23418 + - reason 23419 + - status 23420 + - type 23421 + type: object 23422 + type: array 23423 + observedGeneration: 23424 + description: ObservedGeneration is the last observed generation. 23425 + format: int64 23426 + type: integer 23427 + type: object 23428 + type: object 23429 + served: true 23430 + storage: false 23431 + subresources: 23432 + status: {} 23433 + - additionalPrinterColumns: 23434 + - jsonPath: .metadata.creationTimestamp 23435 + name: Age 23436 + type: date 23437 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23438 + name: Ready 23439 + type: string 23440 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23441 + name: Status 23442 + type: string 23443 + deprecated: true 23444 + deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 23445 + name: v1beta2 23446 + schema: 23447 + openAPIV3Schema: 23448 + description: Alert is the Schema for the alerts API 23449 + properties: 23450 + apiVersion: 23451 + description: |- 23452 + APIVersion defines the versioned schema of this representation of an object. 23453 + Servers should convert recognized schemas to the latest internal value, and 23454 + may reject unrecognized values. 23455 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23456 + type: string 23457 + kind: 23458 + description: |- 23459 + Kind is a string value representing the REST resource this object represents. 23460 + Servers may infer this from the endpoint the client submits requests to. 23461 + Cannot be updated. 23462 + In CamelCase. 23463 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23464 + type: string 23465 + metadata: 23466 + type: object 23467 + spec: 23468 + description: AlertSpec defines an alerting rule for events involving a 23469 + list of objects. 23470 + properties: 23471 + eventMetadata: 23472 + additionalProperties: 23473 + type: string 23474 + description: |- 23475 + EventMetadata is an optional field for adding metadata to events dispatched by the 23476 + controller. This can be used for enhancing the context of the event. If a field 23477 + would override one already present on the original event as generated by the emitter, 23478 + then the override doesn't happen, i.e. the original value is preserved, and an info 23479 + log is printed. 23480 + type: object 23481 + eventSeverity: 23482 + default: info 23483 + description: |- 23484 + EventSeverity specifies how to filter events based on severity. 23485 + If set to 'info' no events will be filtered. 23486 + enum: 23487 + - info 23488 + - error 23489 + type: string 23490 + eventSources: 23491 + description: |- 23492 + EventSources specifies how to filter events based 23493 + on the involved object kind, name and namespace. 23494 + items: 23495 + description: |- 23496 + CrossNamespaceObjectReference contains enough information to let you locate the 23497 + typed referenced object at cluster level 23498 + properties: 23499 apiVersion: 23500 - description: |- 23501 - APIVersion defines the versioned schema of this representation of an object. 23502 - Servers should convert recognized schemas to the latest internal value, and 23503 - may reject unrecognized values. 23504 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23505 + description: API version of the referent 23506 + type: string 23507 + kind: 23508 + description: Kind of the referent 23509 + enum: 23510 + - Bucket 23511 + - GitRepository 23512 + - Kustomization 23513 + - HelmRelease 23514 + - HelmChart 23515 + - HelmRepository 23516 + - ImageRepository 23517 + - ImagePolicy 23518 + - ImageUpdateAutomation 23519 + - OCIRepository 23520 + type: string 23521 + matchLabels: 23522 + additionalProperties: 23523 type: string 23524 + description: |- 23525 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23526 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23527 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23528 + MatchLabels requires the name to be set to `*`. 23529 + type: object 23530 + name: 23531 + description: |- 23532 + Name of the referent 23533 + If multiple resources are targeted `*` may be set. 23534 + maxLength: 253 23535 + minLength: 1 23536 + type: string 23537 + namespace: 23538 + description: Namespace of the referent 23539 + maxLength: 253 23540 + minLength: 1 23541 + type: string 23542 + required: 23543 + - kind 23544 + - name 23545 + type: object 23546 + type: array 23547 + exclusionList: 23548 + description: |- 23549 + ExclusionList specifies a list of Golang regular expressions 23550 + to be used for excluding messages. 23551 + items: 23552 + type: string 23553 + type: array 23554 + inclusionList: 23555 + description: |- 23556 + InclusionList specifies a list of Golang regular expressions 23557 + to be used for including messages. 23558 + items: 23559 + type: string 23560 + type: array 23561 + providerRef: 23562 + description: ProviderRef specifies which Provider this Alert should 23563 + use. 23564 + properties: 23565 + name: 23566 + description: Name of the referent. 23567 + type: string 23568 + required: 23569 + - name 23570 + type: object 23571 + summary: 23572 + description: Summary holds a short description of the impact and affected 23573 + cluster. 23574 + maxLength: 255 23575 + type: string 23576 + suspend: 23577 + description: |- 23578 + Suspend tells the controller to suspend subsequent 23579 + events handling for this Alert. 23580 + type: boolean 23581 + required: 23582 + - eventSources 23583 + - providerRef 23584 + type: object 23585 + status: 23586 + default: 23587 + observedGeneration: -1 23588 + description: AlertStatus defines the observed state of the Alert. 23589 + properties: 23590 + conditions: 23591 + description: Conditions holds the conditions for the Alert. 23592 + items: 23593 + description: Condition contains details for one aspect of the current 23594 + state of this API Resource. 23595 + properties: 23596 + lastTransitionTime: 23597 + description: |- 23598 + lastTransitionTime is the last time the condition transitioned from one status to another. 23599 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23600 + format: date-time 23601 + type: string 23602 + message: 23603 + description: |- 23604 + message is a human readable message indicating details about the transition. 23605 + This may be an empty string. 23606 + maxLength: 32768 23607 + type: string 23608 + observedGeneration: 23609 + description: |- 23610 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23611 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23612 + with respect to the current state of the instance. 23613 + format: int64 23614 + minimum: 0 23615 + type: integer 23616 + reason: 23617 + description: |- 23618 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23619 + Producers of specific condition types may define expected values and meanings for this field, 23620 + and whether the values are considered a guaranteed API. 23621 + The value should be a CamelCase string. 23622 + This field may not be empty. 23623 + maxLength: 1024 23624 + minLength: 1 23625 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23626 + type: string 23627 + status: 23628 + description: status of the condition, one of True, False, Unknown. 23629 + enum: 23630 + - "True" 23631 + - "False" 23632 + - Unknown 23633 + type: string 23634 + type: 23635 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23636 + maxLength: 316 23637 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23638 + type: string 23639 + required: 23640 + - lastTransitionTime 23641 + - message 23642 + - reason 23643 + - status 23644 + - type 23645 + type: object 23646 + type: array 23647 + lastHandledReconcileAt: 23648 + description: |- 23649 + LastHandledReconcileAt holds the value of the most recent 23650 + reconcile request value, so a change of the annotation value 23651 + can be detected. 23652 + type: string 23653 + observedGeneration: 23654 + description: ObservedGeneration is the last observed generation. 23655 + format: int64 23656 + type: integer 23657 + type: object 23658 + type: object 23659 + served: true 23660 + storage: false 23661 + subresources: 23662 + status: {} 23663 + - additionalPrinterColumns: 23664 + - jsonPath: .metadata.creationTimestamp 23665 + name: Age 23666 + type: date 23667 + name: v1beta3 23668 + schema: 23669 + openAPIV3Schema: 23670 + description: Alert is the Schema for the alerts API 23671 + properties: 23672 + apiVersion: 23673 + description: |- 23674 + APIVersion defines the versioned schema of this representation of an object. 23675 + Servers should convert recognized schemas to the latest internal value, and 23676 + may reject unrecognized values. 23677 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23678 + type: string 23679 + kind: 23680 + description: |- 23681 + Kind is a string value representing the REST resource this object represents. 23682 + Servers may infer this from the endpoint the client submits requests to. 23683 + Cannot be updated. 23684 + In CamelCase. 23685 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23686 + type: string 23687 + metadata: 23688 + type: object 23689 + spec: 23690 + description: AlertSpec defines an alerting rule for events involving a 23691 + list of objects. 23692 + properties: 23693 + eventMetadata: 23694 + additionalProperties: 23695 + type: string 23696 + description: |- 23697 + EventMetadata is an optional field for adding metadata to events dispatched by the 23698 + controller. This can be used for enhancing the context of the event. If a field 23699 + would override one already present on the original event as generated by the emitter, 23700 + then the override doesn't happen, i.e. the original value is preserved, and an info 23701 + log is printed. 23702 + type: object 23703 + eventSeverity: 23704 + default: info 23705 + description: |- 23706 + EventSeverity specifies how to filter events based on severity. 23707 + If set to 'info' no events will be filtered. 23708 + enum: 23709 + - info 23710 + - error 23711 + type: string 23712 + eventSources: 23713 + description: |- 23714 + EventSources specifies how to filter events based 23715 + on the involved object kind, name and namespace. 23716 + items: 23717 + description: |- 23718 + CrossNamespaceObjectReference contains enough information to let you locate the 23719 + typed referenced object at cluster level 23720 + properties: 23721 + apiVersion: 23722 + description: API version of the referent 23723 + type: string 23724 kind: 23725 - description: |- 23726 - Kind is a string value representing the REST resource this object represents. 23727 - Servers may infer this from the endpoint the client submits requests to. 23728 - Cannot be updated. 23729 - In CamelCase. 23730 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23731 + description: Kind of the referent 23732 + enum: 23733 + - Bucket 23734 + - GitRepository 23735 + - Kustomization 23736 + - HelmRelease 23737 + - HelmChart 23738 + - HelmRepository 23739 + - ImageRepository 23740 + - ImagePolicy 23741 + - ImageUpdateAutomation 23742 + - OCIRepository 23743 + type: string 23744 + matchLabels: 23745 + additionalProperties: 23746 type: string 23747 - metadata: 23748 - type: object 23749 - spec: 23750 - description: |- 23751 - ImagePolicySpec defines the parameters for calculating the 23752 - ImagePolicy 23753 - properties: 23754 - filterTags: 23755 - description: |- 23756 - FilterTags enables filtering for only a subset of tags based on a set of 23757 - rules. If no rules are provided, all the tags from the repository will be 23758 - ordered and compared. 23759 - properties: 23760 - extract: 23761 - description: |- 23762 - Extract allows a capture group to be extracted from the specified regular 23763 - expression pattern, useful before tag evaluation. 23764 - type: string 23765 - pattern: 23766 - description: |- 23767 - Pattern specifies a regular expression pattern used to filter for image 23768 - tags. 23769 - type: string 23770 - type: object 23771 - imageRepositoryRef: 23772 - description: |- 23773 - ImageRepositoryRef points at the object specifying the image 23774 - being scanned 23775 - properties: 23776 - name: 23777 - description: Name of the referent. 23778 - type: string 23779 - namespace: 23780 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 23781 - type: string 23782 - required: 23783 - - name 23784 - type: object 23785 - policy: 23786 - description: |- 23787 - Policy gives the particulars of the policy to be followed in 23788 - selecting the most recent image 23789 - properties: 23790 - alphabetical: 23791 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 23792 - properties: 23793 - order: 23794 - default: asc 23795 - description: |- 23796 - Order specifies the sorting order of the tags. Given the letters of the 23797 - alphabet as tags, ascending order would select Z, and descending order 23798 - would select A. 23799 - enum: 23800 - - asc 23801 - - desc 23802 - type: string 23803 - type: object 23804 - numerical: 23805 - description: Numerical set of rules to use for numerical ordering of the tags. 23806 - properties: 23807 - order: 23808 - default: asc 23809 - description: |- 23810 - Order specifies the sorting order of the tags. Given the integer values 23811 - from 0 to 9 as tags, ascending order would select 9, and descending order 23812 - would select 0. 23813 - enum: 23814 - - asc 23815 - - desc 23816 - type: string 23817 - type: object 23818 - semver: 23819 - description: |- 23820 - SemVer gives a semantic version range to check against the tags 23821 - available. 23822 - properties: 23823 - range: 23824 - description: |- 23825 - Range gives a semver range for the image tag; the highest 23826 - version within the range that's a tag yields the latest image. 23827 - type: string 23828 - required: 23829 - - range 23830 - type: object 23831 - type: object 23832 - required: 23833 - - imageRepositoryRef 23834 - - policy 23835 - type: object 23836 + description: |- 23837 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23838 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23839 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23840 + MatchLabels requires the name to be set to `*`. 23841 + type: object 23842 + name: 23843 + description: |- 23844 + Name of the referent 23845 + If multiple resources are targeted `*` may be set. 23846 + maxLength: 253 23847 + minLength: 1 23848 + type: string 23849 + namespace: 23850 + description: Namespace of the referent 23851 + maxLength: 253 23852 + minLength: 1 23853 + type: string 23854 + required: 23855 + - kind 23856 + - name 23857 + type: object 23858 + type: array 23859 + exclusionList: 23860 + description: |- 23861 + ExclusionList specifies a list of Golang regular expressions 23862 + to be used for excluding messages. 23863 + items: 23864 + type: string 23865 + type: array 23866 + inclusionList: 23867 + description: |- 23868 + InclusionList specifies a list of Golang regular expressions 23869 + to be used for including messages. 23870 + items: 23871 + type: string 23872 + type: array 23873 + providerRef: 23874 + description: ProviderRef specifies which Provider this Alert should 23875 + use. 23876 + properties: 23877 + name: 23878 + description: Name of the referent. 23879 + type: string 23880 + required: 23881 + - name 23882 + type: object 23883 + summary: 23884 + description: |- 23885 + Summary holds a short description of the impact and affected cluster. 23886 + Deprecated: Use EventMetadata instead. 23887 + maxLength: 255 23888 + type: string 23889 + suspend: 23890 + description: |- 23891 + Suspend tells the controller to suspend subsequent 23892 + events handling for this Alert. 23893 + type: boolean 23894 + required: 23895 + - eventSources 23896 + - providerRef 23897 + type: object 23898 + type: object 23899 + served: true 23900 + storage: true 23901 + subresources: {} 23902 +--- 23903 +apiVersion: apiextensions.k8s.io/v1 23904 +kind: CustomResourceDefinition 23905 +metadata: 23906 + annotations: 23907 + controller-gen.kubebuilder.io/version: v0.16.1 23908 + labels: 23909 + app.kubernetes.io/component: notification-controller 23910 + app.kubernetes.io/instance: flux-system 23911 + app.kubernetes.io/part-of: flux 23912 + app.kubernetes.io/version: v2.6.4 23913 + name: providers.notification.toolkit.fluxcd.io 23914 +spec: 23915 + group: notification.toolkit.fluxcd.io 23916 + names: 23917 + kind: Provider 23918 + listKind: ProviderList 23919 + plural: providers 23920 + singular: provider 23921 + scope: Namespaced 23922 + versions: 23923 + - additionalPrinterColumns: 23924 + - jsonPath: .metadata.creationTimestamp 23925 + name: Age 23926 + type: date 23927 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23928 + name: Ready 23929 + type: string 23930 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23931 + name: Status 23932 + type: string 23933 + deprecated: true 23934 + deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3 23935 + name: v1beta1 23936 + schema: 23937 + openAPIV3Schema: 23938 + description: Provider is the Schema for the providers API 23939 + properties: 23940 + apiVersion: 23941 + description: |- 23942 + APIVersion defines the versioned schema of this representation of an object. 23943 + Servers should convert recognized schemas to the latest internal value, and 23944 + may reject unrecognized values. 23945 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23946 + type: string 23947 + kind: 23948 + description: |- 23949 + Kind is a string value representing the REST resource this object represents. 23950 + Servers may infer this from the endpoint the client submits requests to. 23951 + Cannot be updated. 23952 + In CamelCase. 23953 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23954 + type: string 23955 + metadata: 23956 + type: object 23957 + spec: 23958 + description: ProviderSpec defines the desired state of Provider 23959 + properties: 23960 + address: 23961 + description: HTTP/S webhook address of this provider 23962 + pattern: ^(http|https):// 23963 + type: string 23964 + certSecretRef: 23965 + description: |- 23966 + CertSecretRef can be given the name of a secret containing 23967 + a PEM-encoded CA certificate (`caFile`) 23968 + properties: 23969 + name: 23970 + description: Name of the referent. 23971 + type: string 23972 + required: 23973 + - name 23974 + type: object 23975 + channel: 23976 + description: Alert channel for this provider 23977 + type: string 23978 + proxy: 23979 + description: HTTP/S address of the proxy 23980 + pattern: ^(http|https):// 23981 + type: string 23982 + secretRef: 23983 + description: |- 23984 + Secret reference containing the provider webhook URL 23985 + using "address" as data key 23986 + properties: 23987 + name: 23988 + description: Name of the referent. 23989 + type: string 23990 + required: 23991 + - name 23992 + type: object 23993 + suspend: 23994 + description: |- 23995 + This flag tells the controller to suspend subsequent events handling. 23996 + Defaults to false. 23997 + type: boolean 23998 + timeout: 23999 + description: Timeout for sending alerts to the provider. 24000 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 24001 + type: string 24002 + type: 24003 + description: Type of provider 24004 + enum: 24005 + - slack 24006 + - discord 24007 + - msteams 24008 + - rocket 24009 + - generic 24010 + - generic-hmac 24011 + - github 24012 + - gitlab 24013 + - bitbucket 24014 + - azuredevops 24015 + - googlechat 24016 + - webex 24017 + - sentry 24018 + - azureeventhub 24019 + - telegram 24020 + - lark 24021 + - matrix 24022 + - opsgenie 24023 + - alertmanager 24024 + - grafana 24025 + - githubdispatch 24026 + type: string 24027 + username: 24028 + description: Bot username for this provider 24029 + type: string 24030 + required: 24031 + - type 24032 + type: object 24033 + status: 24034 + default: 24035 + observedGeneration: -1 24036 + description: ProviderStatus defines the observed state of Provider 24037 + properties: 24038 + conditions: 24039 + items: 24040 + description: Condition contains details for one aspect of the current 24041 + state of this API Resource. 24042 + properties: 24043 + lastTransitionTime: 24044 + description: |- 24045 + lastTransitionTime is the last time the condition transitioned from one status to another. 24046 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24047 + format: date-time 24048 + type: string 24049 + message: 24050 + description: |- 24051 + message is a human readable message indicating details about the transition. 24052 + This may be an empty string. 24053 + maxLength: 32768 24054 + type: string 24055 + observedGeneration: 24056 + description: |- 24057 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24058 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24059 + with respect to the current state of the instance. 24060 + format: int64 24061 + minimum: 0 24062 + type: integer 24063 + reason: 24064 + description: |- 24065 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24066 + Producers of specific condition types may define expected values and meanings for this field, 24067 + and whether the values are considered a guaranteed API. 24068 + The value should be a CamelCase string. 24069 + This field may not be empty. 24070 + maxLength: 1024 24071 + minLength: 1 24072 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24073 + type: string 24074 status: 24075 - default: 24076 - observedGeneration: -1 24077 - description: ImagePolicyStatus defines the observed state of ImagePolicy 24078 - properties: 24079 - conditions: 24080 - items: 24081 - description: Condition contains details for one aspect of the current state of this API 24082 - Resource. 24083 - properties: 24084 - lastTransitionTime: 24085 - description: |- 24086 - lastTransitionTime is the last time the condition transitioned from one status to another. 24087 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24088 - format: date-time 24089 - type: string 24090 - message: 24091 - description: |- 24092 - message is a human readable message indicating details about the transition. 24093 - This may be an empty string. 24094 - maxLength: 32768 24095 - type: string 24096 - observedGeneration: 24097 - description: |- 24098 - observedGeneration represents the .metadata.generation that the condition was set based upon. 24099 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24100 - with respect to the current state of the instance. 24101 - format: int64 24102 - minimum: 0 24103 - type: integer 24104 - reason: 24105 - description: |- 24106 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 24107 - Producers of specific condition types may define expected values and meanings for this field, 24108 - and whether the values are considered a guaranteed API. 24109 - The value should be a CamelCase string. 24110 - This field may not be empty. 24111 - maxLength: 1024 24112 - minLength: 1 24113 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24114 - type: string 24115 - status: 24116 - description: status of the condition, one of True, False, Unknown. 24117 - enum: 24118 - - "True" 24119 - - "False" 24120 - - Unknown 24121 - type: string 24122 - type: 24123 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 24124 - maxLength: 316 24125 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24126 - type: string 24127 - required: 24128 - - lastTransitionTime 24129 - - message 24130 - - reason 24131 - - status 24132 - - type 24133 - type: object 24134 - type: array 24135 - latestImage: 24136 - description: |- 24137 - LatestImage gives the first in the list of images scanned by 24138 - the image repository, when filtered and ordered according to 24139 - the policy. 24140 - type: string 24141 - observedGeneration: 24142 - format: int64 24143 - type: integer 24144 - type: object 24145 + description: status of the condition, one of True, False, Unknown. 24146 + enum: 24147 + - "True" 24148 + - "False" 24149 + - Unknown 24150 + type: string 24151 + type: 24152 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24153 + maxLength: 316 24154 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24155 + type: string 24156 + required: 24157 + - lastTransitionTime 24158 + - message 24159 + - reason 24160 + - status 24161 + - type 24162 + type: object 24163 + type: array 24164 + observedGeneration: 24165 + description: ObservedGeneration is the last reconciled generation. 24166 + format: int64 24167 + type: integer 24168 + type: object 24169 + type: object 24170 + served: true 24171 + storage: false 24172 + subresources: 24173 + status: {} 24174 + - additionalPrinterColumns: 24175 + - jsonPath: .metadata.creationTimestamp 24176 + name: Age 24177 + type: date 24178 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 24179 + name: Ready 24180 + type: string 24181 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 24182 + name: Status 24183 + type: string 24184 + deprecated: true 24185 + deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 24186 + name: v1beta2 24187 + schema: 24188 + openAPIV3Schema: 24189 + description: Provider is the Schema for the providers API. 24190 + properties: 24191 + apiVersion: 24192 + description: |- 24193 + APIVersion defines the versioned schema of this representation of an object. 24194 + Servers should convert recognized schemas to the latest internal value, and 24195 + may reject unrecognized values. 24196 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24197 + type: string 24198 + kind: 24199 + description: |- 24200 + Kind is a string value representing the REST resource this object represents. 24201 + Servers may infer this from the endpoint the client submits requests to. 24202 + Cannot be updated. 24203 + In CamelCase. 24204 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24205 + type: string 24206 + metadata: 24207 + type: object 24208 + spec: 24209 + description: ProviderSpec defines the desired state of the Provider. 24210 + properties: 24211 + address: 24212 + description: |- 24213 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 24214 + What kind of endpoint depends on the specific Provider type being used. 24215 + For the generic Provider, for example, this is an HTTP/S address. 24216 + For other Provider types this could be a project ID or a namespace. 24217 + maxLength: 2048 24218 + type: string 24219 + certSecretRef: 24220 + description: |- 24221 + CertSecretRef specifies the Secret containing 24222 + a PEM-encoded CA certificate (in the `ca.crt` key). 24223 + 24224 + Note: Support for the `caFile` key has 24225 + been deprecated. 24226 + properties: 24227 + name: 24228 + description: Name of the referent. 24229 + type: string 24230 + required: 24231 + - name 24232 + type: object 24233 + channel: 24234 + description: Channel specifies the destination channel where events 24235 + should be posted. 24236 + maxLength: 2048 24237 + type: string 24238 + interval: 24239 + description: Interval at which to reconcile the Provider with its 24240 + Secret references. 24241 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 24242 + type: string 24243 + proxy: 24244 + description: Proxy the HTTP/S address of the proxy server. 24245 + maxLength: 2048 24246 + pattern: ^(http|https)://.*$ 24247 + type: string 24248 + secretRef: 24249 + description: |- 24250 + SecretRef specifies the Secret containing the authentication 24251 + credentials for this Provider. 24252 + properties: 24253 + name: 24254 + description: Name of the referent. 24255 + type: string 24256 + required: 24257 + - name 24258 type: object 24259 - served: true 24260 - storage: false 24261 - subresources: 24262 - status: {} 24263 - - additionalPrinterColumns: 24264 - - jsonPath: .status.latestImage 24265 - name: LatestImage 24266 - type: string 24267 - name: v1beta2 24268 - schema: 24269 - openAPIV3Schema: 24270 - description: ImagePolicy is the Schema for the imagepolicies API 24271 + suspend: 24272 + description: |- 24273 + Suspend tells the controller to suspend subsequent 24274 + events handling for this Provider. 24275 + type: boolean 24276 + timeout: 24277 + description: Timeout for sending alerts to the Provider. 24278 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 24279 + type: string 24280 + type: 24281 + description: Type specifies which Provider implementation to use. 24282 + enum: 24283 + - slack 24284 + - discord 24285 + - msteams 24286 + - rocket 24287 + - generic 24288 + - generic-hmac 24289 + - github 24290 + - gitlab 24291 + - gitea 24292 + - bitbucketserver 24293 + - bitbucket 24294 + - azuredevops 24295 + - googlechat 24296 + - googlepubsub 24297 + - webex 24298 + - sentry 24299 + - azureeventhub 24300 + - telegram 24301 + - lark 24302 + - matrix 24303 + - opsgenie 24304 + - alertmanager 24305 + - grafana 24306 + - githubdispatch 24307 + - pagerduty 24308 + - datadog 24309 + type: string 24310 + username: 24311 + description: Username specifies the name under which events are posted. 24312 + maxLength: 2048 24313 + type: string 24314 + required: 24315 + - type 24316 + type: object 24317 + status: 24318 + default: 24319 + observedGeneration: -1 24320 + description: ProviderStatus defines the observed state of the Provider. 24321 + properties: 24322 + conditions: 24323 + description: Conditions holds the conditions for the Provider. 24324 + items: 24325 + description: Condition contains details for one aspect of the current 24326 + state of this API Resource. 24327 + properties: 24328 + lastTransitionTime: 24329 + description: |- 24330 + lastTransitionTime is the last time the condition transitioned from one status to another. 24331 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24332 + format: date-time 24333 + type: string 24334 + message: 24335 + description: |- 24336 + message is a human readable message indicating details about the transition. 24337 + This may be an empty string. 24338 + maxLength: 32768 24339 + type: string 24340 + observedGeneration: 24341 + description: |- 24342 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24343 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24344 + with respect to the current state of the instance. 24345 + format: int64 24346 + minimum: 0 24347 + type: integer 24348 + reason: 24349 + description: |- 24350 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24351 + Producers of specific condition types may define expected values and meanings for this field, 24352 + and whether the values are considered a guaranteed API. 24353 + The value should be a CamelCase string. 24354 + This field may not be empty. 24355 + maxLength: 1024 24356 + minLength: 1 24357 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24358 + type: string 24359 + status: 24360 + description: status of the condition, one of True, False, Unknown. 24361 + enum: 24362 + - "True" 24363 + - "False" 24364 + - Unknown 24365 + type: string 24366 + type: 24367 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24368 + maxLength: 316 24369 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24370 + type: string 24371 + required: 24372 + - lastTransitionTime 24373 + - message 24374 + - reason 24375 + - status 24376 + - type 24377 + type: object 24378 + type: array 24379 + lastHandledReconcileAt: 24380 + description: |- 24381 + LastHandledReconcileAt holds the value of the most recent 24382 + reconcile request value, so a change of the annotation value 24383 + can be detected. 24384 + type: string 24385 + observedGeneration: 24386 + description: ObservedGeneration is the last reconciled generation. 24387 + format: int64 24388 + type: integer 24389 + type: object 24390 + type: object 24391 + served: true 24392 + storage: false 24393 + subresources: 24394 + status: {} 24395 + - additionalPrinterColumns: 24396 + - jsonPath: .metadata.creationTimestamp 24397 + name: Age 24398 + type: date 24399 + name: v1beta3 24400 + schema: 24401 + openAPIV3Schema: 24402 + description: Provider is the Schema for the providers API 24403 + properties: 24404 + apiVersion: 24405 + description: |- 24406 + APIVersion defines the versioned schema of this representation of an object. 24407 + Servers should convert recognized schemas to the latest internal value, and 24408 + may reject unrecognized values. 24409 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24410 + type: string 24411 + kind: 24412 + description: |- 24413 + Kind is a string value representing the REST resource this object represents. 24414 + Servers may infer this from the endpoint the client submits requests to. 24415 + Cannot be updated. 24416 + In CamelCase. 24417 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24418 + type: string 24419 + metadata: 24420 + type: object 24421 + spec: 24422 + description: ProviderSpec defines the desired state of the Provider. 24423 + properties: 24424 + address: 24425 + description: |- 24426 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 24427 + What kind of endpoint depends on the specific Provider type being used. 24428 + For the generic Provider, for example, this is an HTTP/S address. 24429 + For other Provider types this could be a project ID or a namespace. 24430 + maxLength: 2048 24431 + type: string 24432 + certSecretRef: 24433 + description: |- 24434 + CertSecretRef specifies the Secret containing 24435 + a PEM-encoded CA certificate (in the `ca.crt` key). 24436 + 24437 + Note: Support for the `caFile` key has 24438 + been deprecated. 24439 + properties: 24440 + name: 24441 + description: Name of the referent. 24442 + type: string 24443 + required: 24444 + - name 24445 + type: object 24446 + channel: 24447 + description: Channel specifies the destination channel where events 24448 + should be posted. 24449 + maxLength: 2048 24450 + type: string 24451 + commitStatusExpr: 24452 + description: |- 24453 + CommitStatusExpr is a CEL expression that evaluates to a string value 24454 + that can be used to generate a custom commit status message for use 24455 + with eligible Provider types (github, gitlab, gitea, bitbucketserver, 24456 + bitbucket, azuredevops). Supported variables are: event, provider, 24457 + and alert. 24458 + type: string 24459 + interval: 24460 + description: |- 24461 + Interval at which to reconcile the Provider with its Secret references. 24462 + Deprecated and not used in v1beta3. 24463 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 24464 + type: string 24465 + proxy: 24466 + description: Proxy the HTTP/S address of the proxy server. 24467 + maxLength: 2048 24468 + pattern: ^(http|https)://.*$ 24469 + type: string 24470 + secretRef: 24471 + description: |- 24472 + SecretRef specifies the Secret containing the authentication 24473 + credentials for this Provider. 24474 properties: 24475 + name: 24476 + description: Name of the referent. 24477 + type: string 24478 + required: 24479 + - name 24480 + type: object 24481 + serviceAccountName: 24482 + description: |- 24483 + ServiceAccountName is the name of the service account used to 24484 + authenticate with services from cloud providers. An error is thrown if a 24485 + static credential is also defined inside the Secret referenced by the 24486 + SecretRef. 24487 + type: string 24488 + suspend: 24489 + description: |- 24490 + Suspend tells the controller to suspend subsequent 24491 + events handling for this Provider. 24492 + type: boolean 24493 + timeout: 24494 + description: Timeout for sending alerts to the Provider. 24495 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 24496 + type: string 24497 + type: 24498 + description: Type specifies which Provider implementation to use. 24499 + enum: 24500 + - slack 24501 + - discord 24502 + - msteams 24503 + - rocket 24504 + - generic 24505 + - generic-hmac 24506 + - github 24507 + - gitlab 24508 + - gitea 24509 + - bitbucketserver 24510 + - bitbucket 24511 + - azuredevops 24512 + - googlechat 24513 + - googlepubsub 24514 + - webex 24515 + - sentry 24516 + - azureeventhub 24517 + - telegram 24518 + - lark 24519 + - matrix 24520 + - opsgenie 24521 + - alertmanager 24522 + - grafana 24523 + - githubdispatch 24524 + - pagerduty 24525 + - datadog 24526 + - nats 24527 + type: string 24528 + username: 24529 + description: Username specifies the name under which events are posted. 24530 + maxLength: 2048 24531 + type: string 24532 + required: 24533 + - type 24534 + type: object 24535 + x-kubernetes-validations: 24536 + - message: spec.commitStatusExpr is only supported for the 'github', 'gitlab', 24537 + 'gitea', 'bitbucketserver', 'bitbucket', 'azuredevops' provider types 24538 + rule: self.type == 'github' || self.type == 'gitlab' || self.type == 24539 + 'gitea' || self.type == 'bitbucketserver' || self.type == 'bitbucket' 24540 + || self.type == 'azuredevops' || !has(self.commitStatusExpr) 24541 + type: object 24542 + served: true 24543 + storage: true 24544 + subresources: {} 24545 +--- 24546 +apiVersion: apiextensions.k8s.io/v1 24547 +kind: CustomResourceDefinition 24548 +metadata: 24549 + annotations: 24550 + controller-gen.kubebuilder.io/version: v0.16.1 24551 + labels: 24552 + app.kubernetes.io/component: notification-controller 24553 + app.kubernetes.io/instance: flux-system 24554 + app.kubernetes.io/part-of: flux 24555 + app.kubernetes.io/version: v2.6.4 24556 + name: receivers.notification.toolkit.fluxcd.io 24557 +spec: 24558 + group: notification.toolkit.fluxcd.io 24559 + names: 24560 + kind: Receiver 24561 + listKind: ReceiverList 24562 + plural: receivers 24563 + singular: receiver 24564 + scope: Namespaced 24565 + versions: 24566 + - additionalPrinterColumns: 24567 + - jsonPath: .metadata.creationTimestamp 24568 + name: Age 24569 + type: date 24570 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 24571 + name: Ready 24572 + type: string 24573 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 24574 + name: Status 24575 + type: string 24576 + name: v1 24577 + schema: 24578 + openAPIV3Schema: 24579 + description: Receiver is the Schema for the receivers API. 24580 + properties: 24581 + apiVersion: 24582 + description: |- 24583 + APIVersion defines the versioned schema of this representation of an object. 24584 + Servers should convert recognized schemas to the latest internal value, and 24585 + may reject unrecognized values. 24586 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24587 + type: string 24588 + kind: 24589 + description: |- 24590 + Kind is a string value representing the REST resource this object represents. 24591 + Servers may infer this from the endpoint the client submits requests to. 24592 + Cannot be updated. 24593 + In CamelCase. 24594 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24595 + type: string 24596 + metadata: 24597 + type: object 24598 + spec: 24599 + description: ReceiverSpec defines the desired state of the Receiver. 24600 + properties: 24601 + events: 24602 + description: |- 24603 + Events specifies the list of event types to handle, 24604 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 24605 + items: 24606 + type: string 24607 + type: array 24608 + interval: 24609 + default: 10m 24610 + description: Interval at which to reconcile the Receiver with its 24611 + Secret references. 24612 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 24613 + type: string 24614 + resourceFilter: 24615 + description: |- 24616 + ResourceFilter is a CEL expression expected to return a boolean that is 24617 + evaluated for each resource referenced in the Resources field when a 24618 + webhook is received. If the expression returns false then the controller 24619 + will not request a reconciliation for the resource. 24620 + When the expression is specified the controller will parse it and mark 24621 + the object as terminally failed if the expression is invalid or does not 24622 + return a boolean. 24623 + type: string 24624 + resources: 24625 + description: A list of resources to be notified about changes. 24626 + items: 24627 + description: |- 24628 + CrossNamespaceObjectReference contains enough information to let you locate the 24629 + typed referenced object at cluster level 24630 + properties: 24631 apiVersion: 24632 - description: |- 24633 - APIVersion defines the versioned schema of this representation of an object. 24634 - Servers should convert recognized schemas to the latest internal value, and 24635 - may reject unrecognized values. 24636 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24637 + description: API version of the referent 24638 + type: string 24639 + kind: 24640 + description: Kind of the referent 24641 + enum: 24642 + - Bucket 24643 + - GitRepository 24644 + - Kustomization 24645 + - HelmRelease 24646 + - HelmChart 24647 + - HelmRepository 24648 + - ImageRepository 24649 + - ImagePolicy 24650 + - ImageUpdateAutomation 24651 + - OCIRepository 24652 + type: string 24653 + matchLabels: 24654 + additionalProperties: 24655 type: string 24656 + description: |- 24657 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 24658 + map is equivalent to an element of matchExpressions, whose key field is "key", the 24659 + operator is "In", and the values array contains only "value". The requirements are ANDed. 24660 + MatchLabels requires the name to be set to `*`. 24661 + type: object 24662 + name: 24663 + description: |- 24664 + Name of the referent 24665 + If multiple resources are targeted `*` may be set. 24666 + maxLength: 253 24667 + minLength: 1 24668 + type: string 24669 + namespace: 24670 + description: Namespace of the referent 24671 + maxLength: 253 24672 + minLength: 1 24673 + type: string 24674 + required: 24675 + - kind 24676 + - name 24677 + type: object 24678 + type: array 24679 + secretRef: 24680 + description: |- 24681 + SecretRef specifies the Secret containing the token used 24682 + to validate the payload authenticity. 24683 + properties: 24684 + name: 24685 + description: Name of the referent. 24686 + type: string 24687 + required: 24688 + - name 24689 + type: object 24690 + suspend: 24691 + description: |- 24692 + Suspend tells the controller to suspend subsequent 24693 + events handling for this receiver. 24694 + type: boolean 24695 + type: 24696 + description: |- 24697 + Type of webhook sender, used to determine 24698 + the validation procedure and payload deserialization. 24699 + enum: 24700 + - generic 24701 + - generic-hmac 24702 + - github 24703 + - gitlab 24704 + - bitbucket 24705 + - harbor 24706 + - dockerhub 24707 + - quay 24708 + - gcr 24709 + - nexus 24710 + - acr 24711 + - cdevents 24712 + type: string 24713 + required: 24714 + - resources 24715 + - secretRef 24716 + - type 24717 + type: object 24718 + status: 24719 + default: 24720 + observedGeneration: -1 24721 + description: ReceiverStatus defines the observed state of the Receiver. 24722 + properties: 24723 + conditions: 24724 + description: Conditions holds the conditions for the Receiver. 24725 + items: 24726 + description: Condition contains details for one aspect of the current 24727 + state of this API Resource. 24728 + properties: 24729 + lastTransitionTime: 24730 + description: |- 24731 + lastTransitionTime is the last time the condition transitioned from one status to another. 24732 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24733 + format: date-time 24734 + type: string 24735 + message: 24736 + description: |- 24737 + message is a human readable message indicating details about the transition. 24738 + This may be an empty string. 24739 + maxLength: 32768 24740 + type: string 24741 + observedGeneration: 24742 + description: |- 24743 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24744 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24745 + with respect to the current state of the instance. 24746 + format: int64 24747 + minimum: 0 24748 + type: integer 24749 + reason: 24750 + description: |- 24751 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24752 + Producers of specific condition types may define expected values and meanings for this field, 24753 + and whether the values are considered a guaranteed API. 24754 + The value should be a CamelCase string. 24755 + This field may not be empty. 24756 + maxLength: 1024 24757 + minLength: 1 24758 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24759 + type: string 24760 + status: 24761 + description: status of the condition, one of True, False, Unknown. 24762 + enum: 24763 + - "True" 24764 + - "False" 24765 + - Unknown 24766 + type: string 24767 + type: 24768 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24769 + maxLength: 316 24770 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24771 + type: string 24772 + required: 24773 + - lastTransitionTime 24774 + - message 24775 + - reason 24776 + - status 24777 + - type 24778 + type: object 24779 + type: array 24780 + lastHandledReconcileAt: 24781 + description: |- 24782 + LastHandledReconcileAt holds the value of the most recent 24783 + reconcile request value, so a change of the annotation value 24784 + can be detected. 24785 + type: string 24786 + observedGeneration: 24787 + description: ObservedGeneration is the last observed generation of 24788 + the Receiver object. 24789 + format: int64 24790 + type: integer 24791 + webhookPath: 24792 + description: |- 24793 + WebhookPath is the generated incoming webhook address in the format 24794 + of '/hook/sha256sum(token+name+namespace)'. 24795 + type: string 24796 + type: object 24797 + type: object 24798 + served: true 24799 + storage: true 24800 + subresources: 24801 + status: {} 24802 + - additionalPrinterColumns: 24803 + - jsonPath: .metadata.creationTimestamp 24804 + name: Age 24805 + type: date 24806 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 24807 + name: Ready 24808 + type: string 24809 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 24810 + name: Status 24811 + type: string 24812 + deprecated: true 24813 + deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1 24814 + name: v1beta1 24815 + schema: 24816 + openAPIV3Schema: 24817 + description: Receiver is the Schema for the receivers API 24818 + properties: 24819 + apiVersion: 24820 + description: |- 24821 + APIVersion defines the versioned schema of this representation of an object. 24822 + Servers should convert recognized schemas to the latest internal value, and 24823 + may reject unrecognized values. 24824 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24825 + type: string 24826 + kind: 24827 + description: |- 24828 + Kind is a string value representing the REST resource this object represents. 24829 + Servers may infer this from the endpoint the client submits requests to. 24830 + Cannot be updated. 24831 + In CamelCase. 24832 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24833 + type: string 24834 + metadata: 24835 + type: object 24836 + spec: 24837 + description: ReceiverSpec defines the desired state of Receiver 24838 + properties: 24839 + events: 24840 + description: |- 24841 + A list of events to handle, 24842 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 24843 + items: 24844 + type: string 24845 + type: array 24846 + resources: 24847 + description: A list of resources to be notified about changes. 24848 + items: 24849 + description: |- 24850 + CrossNamespaceObjectReference contains enough information to let you locate the 24851 + typed referenced object at cluster level 24852 + properties: 24853 + apiVersion: 24854 + description: API version of the referent 24855 + type: string 24856 kind: 24857 - description: |- 24858 - Kind is a string value representing the REST resource this object represents. 24859 - Servers may infer this from the endpoint the client submits requests to. 24860 - Cannot be updated. 24861 - In CamelCase. 24862 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24863 + description: Kind of the referent 24864 + enum: 24865 + - Bucket 24866 + - GitRepository 24867 + - Kustomization 24868 + - HelmRelease 24869 + - HelmChart 24870 + - HelmRepository 24871 + - ImageRepository 24872 + - ImagePolicy 24873 + - ImageUpdateAutomation 24874 + - OCIRepository 24875 + type: string 24876 + matchLabels: 24877 + additionalProperties: 24878 type: string 24879 - metadata: 24880 - type: object 24881 - spec: 24882 - description: |- 24883 - ImagePolicySpec defines the parameters for calculating the 24884 - ImagePolicy. 24885 - properties: 24886 - filterTags: 24887 - description: |- 24888 - FilterTags enables filtering for only a subset of tags based on a set of 24889 - rules. If no rules are provided, all the tags from the repository will be 24890 - ordered and compared. 24891 - properties: 24892 - extract: 24893 - description: |- 24894 - Extract allows a capture group to be extracted from the specified regular 24895 - expression pattern, useful before tag evaluation. 24896 - type: string 24897 - pattern: 24898 - description: |- 24899 - Pattern specifies a regular expression pattern used to filter for image 24900 - tags. 24901 - type: string 24902 - type: object 24903 - imageRepositoryRef: 24904 - description: |- 24905 - ImageRepositoryRef points at the object specifying the image 24906 - being scanned 24907 - properties: 24908 - name: 24909 - description: Name of the referent. 24910 - type: string 24911 - namespace: 24912 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 24913 - type: string 24914 - required: 24915 - - name 24916 - type: object 24917 - policy: 24918 - description: |- 24919 - Policy gives the particulars of the policy to be followed in 24920 - selecting the most recent image 24921 - properties: 24922 - alphabetical: 24923 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 24924 - properties: 24925 - order: 24926 - default: asc 24927 - description: |- 24928 - Order specifies the sorting order of the tags. Given the letters of the 24929 - alphabet as tags, ascending order would select Z, and descending order 24930 - would select A. 24931 - enum: 24932 - - asc 24933 - - desc 24934 - type: string 24935 - type: object 24936 - numerical: 24937 - description: Numerical set of rules to use for numerical ordering of the tags. 24938 - properties: 24939 - order: 24940 - default: asc 24941 - description: |- 24942 - Order specifies the sorting order of the tags. Given the integer values 24943 - from 0 to 9 as tags, ascending order would select 9, and descending order 24944 - would select 0. 24945 - enum: 24946 - - asc 24947 - - desc 24948 - type: string 24949 - type: object 24950 - semver: 24951 - description: |- 24952 - SemVer gives a semantic version range to check against the tags 24953 - available. 24954 - properties: 24955 - range: 24956 - description: |- 24957 - Range gives a semver range for the image tag; the highest 24958 - version within the range that's a tag yields the latest image. 24959 - type: string 24960 - required: 24961 - - range 24962 - type: object 24963 - type: object 24964 - required: 24965 - - imageRepositoryRef 24966 - - policy 24967 - type: object 24968 + description: |- 24969 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 24970 + map is equivalent to an element of matchExpressions, whose key field is "key", the 24971 + operator is "In", and the values array contains only "value". The requirements are ANDed. 24972 + type: object 24973 + name: 24974 + description: Name of the referent 24975 + maxLength: 53 24976 + minLength: 1 24977 + type: string 24978 + namespace: 24979 + description: Namespace of the referent 24980 + maxLength: 53 24981 + minLength: 1 24982 + type: string 24983 + required: 24984 + - kind 24985 + - name 24986 + type: object 24987 + type: array 24988 + secretRef: 24989 + description: |- 24990 + Secret reference containing the token used 24991 + to validate the payload authenticity 24992 + properties: 24993 + name: 24994 + description: Name of the referent. 24995 + type: string 24996 + required: 24997 + - name 24998 + type: object 24999 + suspend: 25000 + description: |- 25001 + This flag tells the controller to suspend subsequent events handling. 25002 + Defaults to false. 25003 + type: boolean 25004 + type: 25005 + description: |- 25006 + Type of webhook sender, used to determine 25007 + the validation procedure and payload deserialization. 25008 + enum: 25009 + - generic 25010 + - generic-hmac 25011 + - github 25012 + - gitlab 25013 + - bitbucket 25014 + - harbor 25015 + - dockerhub 25016 + - quay 25017 + - gcr 25018 + - nexus 25019 + - acr 25020 + type: string 25021 + required: 25022 + - resources 25023 + - secretRef 25024 + - type 25025 + type: object 25026 + status: 25027 + default: 25028 + observedGeneration: -1 25029 + description: ReceiverStatus defines the observed state of Receiver 25030 + properties: 25031 + conditions: 25032 + items: 25033 + description: Condition contains details for one aspect of the current 25034 + state of this API Resource. 25035 + properties: 25036 + lastTransitionTime: 25037 + description: |- 25038 + lastTransitionTime is the last time the condition transitioned from one status to another. 25039 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25040 + format: date-time 25041 + type: string 25042 + message: 25043 + description: |- 25044 + message is a human readable message indicating details about the transition. 25045 + This may be an empty string. 25046 + maxLength: 32768 25047 + type: string 25048 + observedGeneration: 25049 + description: |- 25050 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25051 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25052 + with respect to the current state of the instance. 25053 + format: int64 25054 + minimum: 0 25055 + type: integer 25056 + reason: 25057 + description: |- 25058 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25059 + Producers of specific condition types may define expected values and meanings for this field, 25060 + and whether the values are considered a guaranteed API. 25061 + The value should be a CamelCase string. 25062 + This field may not be empty. 25063 + maxLength: 1024 25064 + minLength: 1 25065 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25066 + type: string 25067 status: 25068 - default: 25069 - observedGeneration: -1 25070 - description: ImagePolicyStatus defines the observed state of ImagePolicy 25071 - properties: 25072 - conditions: 25073 - items: 25074 - description: Condition contains details for one aspect of the current state of this API 25075 - Resource. 25076 - properties: 25077 - lastTransitionTime: 25078 - description: |- 25079 - lastTransitionTime is the last time the condition transitioned from one status to another. 25080 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25081 - format: date-time 25082 - type: string 25083 - message: 25084 - description: |- 25085 - message is a human readable message indicating details about the transition. 25086 - This may be an empty string. 25087 - maxLength: 32768 25088 - type: string 25089 - observedGeneration: 25090 - description: |- 25091 - observedGeneration represents the .metadata.generation that the condition was set based upon. 25092 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25093 - with respect to the current state of the instance. 25094 - format: int64 25095 - minimum: 0 25096 - type: integer 25097 - reason: 25098 - description: |- 25099 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 25100 - Producers of specific condition types may define expected values and meanings for this field, 25101 - and whether the values are considered a guaranteed API. 25102 - The value should be a CamelCase string. 25103 - This field may not be empty. 25104 - maxLength: 1024 25105 - minLength: 1 25106 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25107 - type: string 25108 - status: 25109 - description: status of the condition, one of True, False, Unknown. 25110 - enum: 25111 - - "True" 25112 - - "False" 25113 - - Unknown 25114 - type: string 25115 - type: 25116 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 25117 - maxLength: 316 25118 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25119 - type: string 25120 - required: 25121 - - lastTransitionTime 25122 - - message 25123 - - reason 25124 - - status 25125 - - type 25126 - type: object 25127 - type: array 25128 - latestImage: 25129 - description: |- 25130 - LatestImage gives the first in the list of images scanned by 25131 - the image repository, when filtered and ordered according to 25132 - the policy. 25133 - type: string 25134 - observedGeneration: 25135 - format: int64 25136 - type: integer 25137 - observedPreviousImage: 25138 - description: |- 25139 - ObservedPreviousImage is the observed previous LatestImage. It is used 25140 - to keep track of the previous and current images. 25141 - type: string 25142 - type: object 25143 + description: status of the condition, one of True, False, Unknown. 25144 + enum: 25145 + - "True" 25146 + - "False" 25147 + - Unknown 25148 + type: string 25149 + type: 25150 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25151 + maxLength: 316 25152 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25153 + type: string 25154 + required: 25155 + - lastTransitionTime 25156 + - message 25157 + - reason 25158 + - status 25159 + - type 25160 + type: object 25161 + type: array 25162 + observedGeneration: 25163 + description: ObservedGeneration is the last observed generation. 25164 + format: int64 25165 + type: integer 25166 + url: 25167 + description: |- 25168 + Generated webhook URL in the format 25169 + of '/hook/sha256sum(token+name+namespace)'. 25170 + type: string 25171 + type: object 25172 + type: object 25173 + served: true 25174 + storage: false 25175 + subresources: 25176 + status: {} 25177 + - additionalPrinterColumns: 25178 + - jsonPath: .metadata.creationTimestamp 25179 + name: Age 25180 + type: date 25181 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 25182 + name: Ready 25183 + type: string 25184 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 25185 + name: Status 25186 + type: string 25187 + deprecated: true 25188 + deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 25189 + name: v1beta2 25190 + schema: 25191 + openAPIV3Schema: 25192 + description: Receiver is the Schema for the receivers API. 25193 + properties: 25194 + apiVersion: 25195 + description: |- 25196 + APIVersion defines the versioned schema of this representation of an object. 25197 + Servers should convert recognized schemas to the latest internal value, and 25198 + may reject unrecognized values. 25199 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25200 + type: string 25201 + kind: 25202 + description: |- 25203 + Kind is a string value representing the REST resource this object represents. 25204 + Servers may infer this from the endpoint the client submits requests to. 25205 + Cannot be updated. 25206 + In CamelCase. 25207 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25208 + type: string 25209 + metadata: 25210 + type: object 25211 + spec: 25212 + description: ReceiverSpec defines the desired state of the Receiver. 25213 + properties: 25214 + events: 25215 + description: |- 25216 + Events specifies the list of event types to handle, 25217 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 25218 + items: 25219 + type: string 25220 + type: array 25221 + interval: 25222 + description: Interval at which to reconcile the Receiver with its 25223 + Secret references. 25224 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25225 + type: string 25226 + resources: 25227 + description: A list of resources to be notified about changes. 25228 + items: 25229 + description: |- 25230 + CrossNamespaceObjectReference contains enough information to let you locate the 25231 + typed referenced object at cluster level 25232 + properties: 25233 + apiVersion: 25234 + description: API version of the referent 25235 + type: string 25236 + kind: 25237 + description: Kind of the referent 25238 + enum: 25239 + - Bucket 25240 + - GitRepository 25241 + - Kustomization 25242 + - HelmRelease 25243 + - HelmChart 25244 + - HelmRepository 25245 + - ImageRepository 25246 + - ImagePolicy 25247 + - ImageUpdateAutomation 25248 + - OCIRepository 25249 + type: string 25250 + matchLabels: 25251 + additionalProperties: 25252 + type: string 25253 + description: |- 25254 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25255 + map is equivalent to an element of matchExpressions, whose key field is "key", the 25256 + operator is "In", and the values array contains only "value". The requirements are ANDed. 25257 + MatchLabels requires the name to be set to `*`. 25258 + type: object 25259 + name: 25260 + description: |- 25261 + Name of the referent 25262 + If multiple resources are targeted `*` may be set. 25263 + maxLength: 253 25264 + minLength: 1 25265 + type: string 25266 + namespace: 25267 + description: Namespace of the referent 25268 + maxLength: 253 25269 + minLength: 1 25270 + type: string 25271 + required: 25272 + - kind 25273 + - name 25274 + type: object 25275 + type: array 25276 + secretRef: 25277 + description: |- 25278 + SecretRef specifies the Secret containing the token used 25279 + to validate the payload authenticity. 25280 + properties: 25281 + name: 25282 + description: Name of the referent. 25283 + type: string 25284 + required: 25285 + - name 25286 type: object 25287 - served: true 25288 - storage: true 25289 - subresources: 25290 - status: {} 25291 + suspend: 25292 + description: |- 25293 + Suspend tells the controller to suspend subsequent 25294 + events handling for this receiver. 25295 + type: boolean 25296 + type: 25297 + description: |- 25298 + Type of webhook sender, used to determine 25299 + the validation procedure and payload deserialization. 25300 + enum: 25301 + - generic 25302 + - generic-hmac 25303 + - github 25304 + - gitlab 25305 + - bitbucket 25306 + - harbor 25307 + - dockerhub 25308 + - quay 25309 + - gcr 25310 + - nexus 25311 + - acr 25312 + type: string 25313 + required: 25314 + - resources 25315 + - secretRef 25316 + - type 25317 + type: object 25318 + status: 25319 + default: 25320 + observedGeneration: -1 25321 + description: ReceiverStatus defines the observed state of the Receiver. 25322 + properties: 25323 + conditions: 25324 + description: Conditions holds the conditions for the Receiver. 25325 + items: 25326 + description: Condition contains details for one aspect of the current 25327 + state of this API Resource. 25328 + properties: 25329 + lastTransitionTime: 25330 + description: |- 25331 + lastTransitionTime is the last time the condition transitioned from one status to another. 25332 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25333 + format: date-time 25334 + type: string 25335 + message: 25336 + description: |- 25337 + message is a human readable message indicating details about the transition. 25338 + This may be an empty string. 25339 + maxLength: 32768 25340 + type: string 25341 + observedGeneration: 25342 + description: |- 25343 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25344 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25345 + with respect to the current state of the instance. 25346 + format: int64 25347 + minimum: 0 25348 + type: integer 25349 + reason: 25350 + description: |- 25351 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25352 + Producers of specific condition types may define expected values and meanings for this field, 25353 + and whether the values are considered a guaranteed API. 25354 + The value should be a CamelCase string. 25355 + This field may not be empty. 25356 + maxLength: 1024 25357 + minLength: 1 25358 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25359 + type: string 25360 + status: 25361 + description: status of the condition, one of True, False, Unknown. 25362 + enum: 25363 + - "True" 25364 + - "False" 25365 + - Unknown 25366 + type: string 25367 + type: 25368 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25369 + maxLength: 316 25370 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25371 + type: string 25372 + required: 25373 + - lastTransitionTime 25374 + - message 25375 + - reason 25376 + - status 25377 + - type 25378 + type: object 25379 + type: array 25380 + lastHandledReconcileAt: 25381 + description: |- 25382 + LastHandledReconcileAt holds the value of the most recent 25383 + reconcile request value, so a change of the annotation value 25384 + can be detected. 25385 + type: string 25386 + observedGeneration: 25387 + description: ObservedGeneration is the last observed generation of 25388 + the Receiver object. 25389 + format: int64 25390 + type: integer 25391 + url: 25392 + description: |- 25393 + URL is the generated incoming webhook address in the format 25394 + of '/hook/sha256sum(token+name+namespace)'. 25395 + Deprecated: Replaced by WebhookPath. 25396 + type: string 25397 + webhookPath: 25398 + description: |- 25399 + WebhookPath is the generated incoming webhook address in the format 25400 + of '/hook/sha256sum(token+name+namespace)'. 25401 + type: string 25402 + type: object 25403 + type: object 25404 + served: true 25405 + storage: false 25406 + subresources: 25407 + status: {} 25408 +--- 25409 +apiVersion: v1 25410 +kind: ServiceAccount 25411 +metadata: 25412 + labels: 25413 + app.kubernetes.io/component: notification-controller 25414 + app.kubernetes.io/instance: flux-system 25415 + app.kubernetes.io/part-of: flux 25416 + app.kubernetes.io/version: v2.6.4 25417 + name: notification-controller 25418 + namespace: flux-system 25419 +--- 25420 +apiVersion: v1 25421 +kind: Service 25422 +metadata: 25423 + labels: 25424 + app.kubernetes.io/component: notification-controller 25425 + app.kubernetes.io/instance: flux-system 25426 + app.kubernetes.io/part-of: flux 25427 + app.kubernetes.io/version: v2.6.4 25428 + control-plane: controller 25429 + name: notification-controller 25430 + namespace: flux-system 25431 +spec: 25432 + ports: 25433 + - name: http 25434 + port: 80 25435 + protocol: TCP 25436 + targetPort: http 25437 + selector: 25438 + app: notification-controller 25439 + type: ClusterIP 25440 +--- 25441 +apiVersion: v1 25442 +kind: Service 25443 +metadata: 25444 + labels: 25445 + app.kubernetes.io/component: notification-controller 25446 + app.kubernetes.io/instance: flux-system 25447 + app.kubernetes.io/part-of: flux 25448 + app.kubernetes.io/version: v2.6.4 25449 + control-plane: controller 25450 + name: webhook-receiver 25451 + namespace: flux-system 25452 +spec: 25453 + ports: 25454 + - name: http 25455 + port: 80 25456 + protocol: TCP 25457 + targetPort: http-webhook 25458 + selector: 25459 + app: notification-controller 25460 + type: ClusterIP 25461 +--- 25462 +apiVersion: apps/v1 25463 +kind: Deployment 25464 +metadata: 25465 + labels: 25466 + app.kubernetes.io/component: notification-controller 25467 + app.kubernetes.io/instance: flux-system 25468 + app.kubernetes.io/part-of: flux 25469 + app.kubernetes.io/version: v2.6.4 25470 + control-plane: controller 25471 + name: notification-controller 25472 + namespace: flux-system 25473 +spec: 25474 + replicas: 1 25475 + selector: 25476 + matchLabels: 25477 + app: notification-controller 25478 + template: 25479 + metadata: 25480 + annotations: 25481 + prometheus.io/port: "8080" 25482 + prometheus.io/scrape: "true" 25483 + labels: 25484 + app: notification-controller 25485 + spec: 25486 + containers: 25487 + - args: 25488 + - --watch-all-namespaces=true 25489 + - --log-level=info 25490 + - --log-encoding=json 25491 + - --enable-leader-election 25492 + env: 25493 + - name: RUNTIME_NAMESPACE 25494 + valueFrom: 25495 + fieldRef: 25496 + fieldPath: metadata.namespace 25497 + - name: GOMAXPROCS 25498 + valueFrom: 25499 + resourceFieldRef: 25500 + containerName: manager 25501 + resource: limits.cpu 25502 + - name: GOMEMLIMIT 25503 + valueFrom: 25504 + resourceFieldRef: 25505 + containerName: manager 25506 + resource: limits.memory 25507 + image: ghcr.io/fluxcd/notification-controller:v1.6.0 25508 + imagePullPolicy: IfNotPresent 25509 + livenessProbe: 25510 + httpGet: 25511 + path: /healthz 25512 + port: healthz 25513 + name: manager 25514 + ports: 25515 + - containerPort: 9090 25516 + name: http 25517 + protocol: TCP 25518 + - containerPort: 9292 25519 + name: http-webhook 25520 + protocol: TCP 25521 + - containerPort: 8080 25522 + name: http-prom 25523 + protocol: TCP 25524 + - containerPort: 9440 25525 + name: healthz 25526 + protocol: TCP 25527 + readinessProbe: 25528 + httpGet: 25529 + path: /readyz 25530 + port: healthz 25531 + resources: 25532 + limits: 25533 + cpu: 1000m 25534 + memory: 1Gi 25535 + requests: 25536 + cpu: 100m 25537 + memory: 64Mi 25538 + securityContext: 25539 + allowPrivilegeEscalation: false 25540 + capabilities: 25541 + drop: 25542 + - ALL 25543 + readOnlyRootFilesystem: true 25544 + runAsNonRoot: true 25545 + seccompProfile: 25546 + type: RuntimeDefault 25547 + volumeMounts: 25548 + - mountPath: /tmp 25549 + name: temp 25550 + nodeSelector: 25551 + kubernetes.io/os: linux 25552 + securityContext: 25553 + fsGroup: 1337 25554 + serviceAccountName: notification-controller 25555 + terminationGracePeriodSeconds: 10 25556 + volumes: 25557 + - emptyDir: {} 25558 + name: temp 25559 --- 25560 apiVersion: apiextensions.k8s.io/v1 25561 kind: CustomResourceDefinition 25562 metadata: 25563 - annotations: 25564 - controller-gen.kubebuilder.io/version: v0.16.1 25565 - labels: 25566 - app.kubernetes.io/component: image-reflector-controller 25567 - app.kubernetes.io/instance: flux-system 25568 - app.kubernetes.io/part-of: flux 25569 - app.kubernetes.io/version: v2.5.1 25570 - name: imagerepositories.image.toolkit.fluxcd.io 25571 + annotations: 25572 + controller-gen.kubebuilder.io/version: v0.16.1 25573 + labels: 25574 + app.kubernetes.io/component: image-reflector-controller 25575 + app.kubernetes.io/instance: flux-system 25576 + app.kubernetes.io/part-of: flux 25577 + app.kubernetes.io/version: v2.6.4 25578 + name: imagepolicies.image.toolkit.fluxcd.io 25579 spec: 25580 - group: image.toolkit.fluxcd.io 25581 - names: 25582 - kind: ImageRepository 25583 - listKind: ImageRepositoryList 25584 - plural: imagerepositories 25585 - singular: imagerepository 25586 - scope: Namespaced 25587 - versions: 25588 - - additionalPrinterColumns: 25589 - - jsonPath: .status.lastScanResult.scanTime 25590 - name: Last scan 25591 - type: string 25592 - - jsonPath: .status.lastScanResult.tagCount 25593 - name: Tags 25594 - type: string 25595 - name: v1beta1 25596 - schema: 25597 - openAPIV3Schema: 25598 - description: ImageRepository is the Schema for the imagerepositories API 25599 + group: image.toolkit.fluxcd.io 25600 + names: 25601 + kind: ImagePolicy 25602 + listKind: ImagePolicyList 25603 + plural: imagepolicies 25604 + singular: imagepolicy 25605 + scope: Namespaced 25606 + versions: 25607 + - additionalPrinterColumns: 25608 + - jsonPath: .status.latestImage 25609 + name: LatestImage 25610 + type: string 25611 + name: v1beta1 25612 + schema: 25613 + openAPIV3Schema: 25614 + description: ImagePolicy is the Schema for the imagepolicies API 25615 + properties: 25616 + apiVersion: 25617 + description: |- 25618 + APIVersion defines the versioned schema of this representation of an object. 25619 + Servers should convert recognized schemas to the latest internal value, and 25620 + may reject unrecognized values. 25621 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25622 + type: string 25623 + kind: 25624 + description: |- 25625 + Kind is a string value representing the REST resource this object represents. 25626 + Servers may infer this from the endpoint the client submits requests to. 25627 + Cannot be updated. 25628 + In CamelCase. 25629 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25630 + type: string 25631 + metadata: 25632 + type: object 25633 + spec: 25634 + description: |- 25635 + ImagePolicySpec defines the parameters for calculating the 25636 + ImagePolicy 25637 + properties: 25638 + filterTags: 25639 + description: |- 25640 + FilterTags enables filtering for only a subset of tags based on a set of 25641 + rules. If no rules are provided, all the tags from the repository will be 25642 + ordered and compared. 25643 properties: 25644 - apiVersion: 25645 + extract: 25646 + description: |- 25647 + Extract allows a capture group to be extracted from the specified regular 25648 + expression pattern, useful before tag evaluation. 25649 + type: string 25650 + pattern: 25651 + description: |- 25652 + Pattern specifies a regular expression pattern used to filter for image 25653 + tags. 25654 + type: string 25655 + type: object 25656 + imageRepositoryRef: 25657 + description: |- 25658 + ImageRepositoryRef points at the object specifying the image 25659 + being scanned 25660 + properties: 25661 + name: 25662 + description: Name of the referent. 25663 + type: string 25664 + namespace: 25665 + description: Namespace of the referent, when not specified it 25666 + acts as LocalObjectReference. 25667 + type: string 25668 + required: 25669 + - name 25670 + type: object 25671 + policy: 25672 + description: |- 25673 + Policy gives the particulars of the policy to be followed in 25674 + selecting the most recent image 25675 + properties: 25676 + alphabetical: 25677 + description: Alphabetical set of rules to use for alphabetical 25678 + ordering of the tags. 25679 + properties: 25680 + order: 25681 + default: asc 25682 description: |- 25683 - APIVersion defines the versioned schema of this representation of an object. 25684 - Servers should convert recognized schemas to the latest internal value, and 25685 - may reject unrecognized values. 25686 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25687 + Order specifies the sorting order of the tags. Given the letters of the 25688 + alphabet as tags, ascending order would select Z, and descending order 25689 + would select A. 25690 + enum: 25691 + - asc 25692 + - desc 25693 type: string 25694 - kind: 25695 + type: object 25696 + numerical: 25697 + description: Numerical set of rules to use for numerical ordering 25698 + of the tags. 25699 + properties: 25700 + order: 25701 + default: asc 25702 description: |- 25703 - Kind is a string value representing the REST resource this object represents. 25704 - Servers may infer this from the endpoint the client submits requests to. 25705 - Cannot be updated. 25706 - In CamelCase. 25707 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25708 + Order specifies the sorting order of the tags. Given the integer values 25709 + from 0 to 9 as tags, ascending order would select 9, and descending order 25710 + would select 0. 25711 + enum: 25712 + - asc 25713 + - desc 25714 type: string 25715 - metadata: 25716 - type: object 25717 - spec: 25718 + type: object 25719 + semver: 25720 + description: |- 25721 + SemVer gives a semantic version range to check against the tags 25722 + available. 25723 + properties: 25724 + range: 25725 description: |- 25726 - ImageRepositorySpec defines the parameters for scanning an image 25727 - repository, e.g., `fluxcd/flux`. 25728 - properties: 25729 - accessFrom: 25730 - description: |- 25731 - AccessFrom defines an ACL for allowing cross-namespace references 25732 - to the ImageRepository object based on the caller's namespace labels. 25733 - properties: 25734 - namespaceSelectors: 25735 - description: |- 25736 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25737 - Items in this list are evaluated using a logical OR operation. 25738 - items: 25739 - description: |- 25740 - NamespaceSelector selects the namespaces to which this ACL applies. 25741 - An empty map of MatchLabels matches all namespaces in a cluster. 25742 - properties: 25743 - matchLabels: 25744 - additionalProperties: 25745 - type: string 25746 - description: |- 25747 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25748 - map is equivalent to an element of matchExpressions, whose key field is "key", the 25749 - operator is "In", and the values array contains only "value". The requirements are ANDed. 25750 - type: object 25751 - type: object 25752 - type: array 25753 - required: 25754 - - namespaceSelectors 25755 - type: object 25756 - certSecretRef: 25757 - description: |- 25758 - CertSecretRef can be given the name of a secret containing 25759 - either or both of 25760 + Range gives a semver range for the image tag; the highest 25761 + version within the range that's a tag yields the latest image. 25762 + type: string 25763 + required: 25764 + - range 25765 + type: object 25766 + type: object 25767 + required: 25768 + - imageRepositoryRef 25769 + - policy 25770 + type: object 25771 + status: 25772 + default: 25773 + observedGeneration: -1 25774 + description: ImagePolicyStatus defines the observed state of ImagePolicy 25775 + properties: 25776 + conditions: 25777 + items: 25778 + description: Condition contains details for one aspect of the current 25779 + state of this API Resource. 25780 + properties: 25781 + lastTransitionTime: 25782 + description: |- 25783 + lastTransitionTime is the last time the condition transitioned from one status to another. 25784 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25785 + format: date-time 25786 + type: string 25787 + message: 25788 + description: |- 25789 + message is a human readable message indicating details about the transition. 25790 + This may be an empty string. 25791 + maxLength: 32768 25792 + type: string 25793 + observedGeneration: 25794 + description: |- 25795 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25796 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25797 + with respect to the current state of the instance. 25798 + format: int64 25799 + minimum: 0 25800 + type: integer 25801 + reason: 25802 + description: |- 25803 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25804 + Producers of specific condition types may define expected values and meanings for this field, 25805 + and whether the values are considered a guaranteed API. 25806 + The value should be a CamelCase string. 25807 + This field may not be empty. 25808 + maxLength: 1024 25809 + minLength: 1 25810 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25811 + type: string 25812 + status: 25813 + description: status of the condition, one of True, False, Unknown. 25814 + enum: 25815 + - "True" 25816 + - "False" 25817 + - Unknown 25818 + type: string 25819 + type: 25820 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25821 + maxLength: 316 25822 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25823 + type: string 25824 + required: 25825 + - lastTransitionTime 25826 + - message 25827 + - reason 25828 + - status 25829 + - type 25830 + type: object 25831 + type: array 25832 + latestImage: 25833 + description: |- 25834 + LatestImage gives the first in the list of images scanned by 25835 + the image repository, when filtered and ordered according to 25836 + the policy. 25837 + type: string 25838 + observedGeneration: 25839 + format: int64 25840 + type: integer 25841 + type: object 25842 + type: object 25843 + served: true 25844 + storage: false 25845 + subresources: 25846 + status: {} 25847 + - additionalPrinterColumns: 25848 + - jsonPath: .status.latestImage 25849 + name: LatestImage 25850 + type: string 25851 + name: v1beta2 25852 + schema: 25853 + openAPIV3Schema: 25854 + description: ImagePolicy is the Schema for the imagepolicies API 25855 + properties: 25856 + apiVersion: 25857 + description: |- 25858 + APIVersion defines the versioned schema of this representation of an object. 25859 + Servers should convert recognized schemas to the latest internal value, and 25860 + may reject unrecognized values. 25861 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25862 + type: string 25863 + kind: 25864 + description: |- 25865 + Kind is a string value representing the REST resource this object represents. 25866 + Servers may infer this from the endpoint the client submits requests to. 25867 + Cannot be updated. 25868 + In CamelCase. 25869 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25870 + type: string 25871 + metadata: 25872 + type: object 25873 + spec: 25874 + description: |- 25875 + ImagePolicySpec defines the parameters for calculating the 25876 + ImagePolicy. 25877 + properties: 25878 + digestReflectionPolicy: 25879 + default: Never 25880 + description: |- 25881 + DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 25882 25883 - - a PEM-encoded client certificate (`certFile`) and private 25884 - key (`keyFile`); 25885 - - a PEM-encoded CA certificate (`caFile`) 25886 + Never: The digest field will always be set to the empty string. 25887 25888 - and whichever are supplied, will be used for connecting to the 25889 - registry. The client cert and key are useful if you are 25890 - authenticating with a certificate; the CA cert is useful if 25891 - you are using a self-signed server certificate. 25892 - properties: 25893 - name: 25894 - description: Name of the referent. 25895 - type: string 25896 - required: 25897 - - name 25898 - type: object 25899 - exclusionList: 25900 - description: |- 25901 - ExclusionList is a list of regex strings used to exclude certain tags 25902 - from being stored in the database. 25903 - items: 25904 - type: string 25905 - type: array 25906 - image: 25907 - description: Image is the name of the image repository 25908 - type: string 25909 - interval: 25910 - description: |- 25911 - Interval is the length of time to wait between 25912 - scans of the image repository. 25913 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25914 - type: string 25915 - secretRef: 25916 - description: |- 25917 - SecretRef can be given the name of a secret containing 25918 - credentials to use for the image registry. The secret should be 25919 - created with `kubectl create secret docker-registry`, or the 25920 - equivalent. 25921 - properties: 25922 - name: 25923 - description: Name of the referent. 25924 - type: string 25925 - required: 25926 - - name 25927 - type: object 25928 - serviceAccountName: 25929 - description: |- 25930 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 25931 - the image pull if the service account has attached pull secrets. 25932 - maxLength: 253 25933 - type: string 25934 - suspend: 25935 - description: |- 25936 - This flag tells the controller to suspend subsequent image scans. 25937 - It does not apply to already started scans. Defaults to false. 25938 - type: boolean 25939 - timeout: 25940 - description: |- 25941 - Timeout for image scanning. 25942 - Defaults to 'Interval' duration. 25943 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 25944 - type: string 25945 - required: 25946 - - image 25947 - - interval 25948 - type: object 25949 - status: 25950 - default: 25951 - observedGeneration: -1 25952 - description: ImageRepositoryStatus defines the observed state of ImageRepository 25953 - properties: 25954 - canonicalImageName: 25955 - description: |- 25956 - CanonicalName is the name of the image repository with all the 25957 - implied bits made explicit; e.g., `docker.io/library/alpine` 25958 - rather than `alpine`. 25959 - type: string 25960 - conditions: 25961 - items: 25962 - description: Condition contains details for one aspect of the current state of this API 25963 - Resource. 25964 - properties: 25965 - lastTransitionTime: 25966 - description: |- 25967 - lastTransitionTime is the last time the condition transitioned from one status to another. 25968 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25969 - format: date-time 25970 - type: string 25971 - message: 25972 - description: |- 25973 - message is a human readable message indicating details about the transition. 25974 - This may be an empty string. 25975 - maxLength: 32768 25976 - type: string 25977 - observedGeneration: 25978 - description: |- 25979 - observedGeneration represents the .metadata.generation that the condition was set based upon. 25980 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25981 - with respect to the current state of the instance. 25982 - format: int64 25983 - minimum: 0 25984 - type: integer 25985 - reason: 25986 - description: |- 25987 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 25988 - Producers of specific condition types may define expected values and meanings for this field, 25989 - and whether the values are considered a guaranteed API. 25990 - The value should be a CamelCase string. 25991 - This field may not be empty. 25992 - maxLength: 1024 25993 - minLength: 1 25994 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25995 - type: string 25996 - status: 25997 - description: status of the condition, one of True, False, Unknown. 25998 - enum: 25999 - - "True" 26000 - - "False" 26001 - - Unknown 26002 - type: string 26003 - type: 26004 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 26005 - maxLength: 316 26006 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26007 - type: string 26008 - required: 26009 - - lastTransitionTime 26010 - - message 26011 - - reason 26012 - - status 26013 - - type 26014 - type: object 26015 - type: array 26016 - lastHandledReconcileAt: 26017 - description: |- 26018 - LastHandledReconcileAt holds the value of the most recent 26019 - reconcile request value, so a change of the annotation value 26020 - can be detected. 26021 - type: string 26022 - lastScanResult: 26023 - description: LastScanResult contains the number of fetched tags. 26024 - properties: 26025 - scanTime: 26026 - format: date-time 26027 - type: string 26028 - tagCount: 26029 - type: integer 26030 - required: 26031 - - tagCount 26032 - type: object 26033 - observedGeneration: 26034 - description: ObservedGeneration is the last reconciled generation. 26035 - format: int64 26036 - type: integer 26037 - type: object 26038 + IfNotPresent: The digest field will be set to the digest of the elected 26039 + latest image if the field is empty and the image did not change. 26040 + 26041 + Always: The digest field will always be set to the digest of the elected 26042 + latest image. 26043 + 26044 + Default: Never. 26045 + enum: 26046 + - Always 26047 + - IfNotPresent 26048 + - Never 26049 + type: string 26050 + filterTags: 26051 + description: |- 26052 + FilterTags enables filtering for only a subset of tags based on a set of 26053 + rules. If no rules are provided, all the tags from the repository will be 26054 + ordered and compared. 26055 + properties: 26056 + extract: 26057 + description: |- 26058 + Extract allows a capture group to be extracted from the specified regular 26059 + expression pattern, useful before tag evaluation. 26060 + type: string 26061 + pattern: 26062 + description: |- 26063 + Pattern specifies a regular expression pattern used to filter for image 26064 + tags. 26065 + type: string 26066 type: object 26067 - served: true 26068 - storage: false 26069 - subresources: 26070 - status: {} 26071 - - additionalPrinterColumns: 26072 - - jsonPath: .status.lastScanResult.scanTime 26073 - name: Last scan 26074 - type: string 26075 - - jsonPath: .status.lastScanResult.tagCount 26076 - name: Tags 26077 - type: string 26078 - name: v1beta2 26079 - schema: 26080 - openAPIV3Schema: 26081 - description: ImageRepository is the Schema for the imagerepositories API 26082 + imageRepositoryRef: 26083 + description: |- 26084 + ImageRepositoryRef points at the object specifying the image 26085 + being scanned 26086 properties: 26087 - apiVersion: 26088 + name: 26089 + description: Name of the referent. 26090 + type: string 26091 + namespace: 26092 + description: Namespace of the referent, when not specified it 26093 + acts as LocalObjectReference. 26094 + type: string 26095 + required: 26096 + - name 26097 + type: object 26098 + interval: 26099 + description: |- 26100 + Interval is the length of time to wait between 26101 + refreshing the digest of the latest tag when the 26102 + reflection policy is set to "Always". 26103 + 26104 + Defaults to 10m. 26105 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26106 + type: string 26107 + policy: 26108 + description: |- 26109 + Policy gives the particulars of the policy to be followed in 26110 + selecting the most recent image 26111 + properties: 26112 + alphabetical: 26113 + description: Alphabetical set of rules to use for alphabetical 26114 + ordering of the tags. 26115 + properties: 26116 + order: 26117 + default: asc 26118 description: |- 26119 - APIVersion defines the versioned schema of this representation of an object. 26120 - Servers should convert recognized schemas to the latest internal value, and 26121 - may reject unrecognized values. 26122 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26123 + Order specifies the sorting order of the tags. Given the letters of the 26124 + alphabet as tags, ascending order would select Z, and descending order 26125 + would select A. 26126 + enum: 26127 + - asc 26128 + - desc 26129 type: string 26130 - kind: 26131 + type: object 26132 + numerical: 26133 + description: Numerical set of rules to use for numerical ordering 26134 + of the tags. 26135 + properties: 26136 + order: 26137 + default: asc 26138 description: |- 26139 - Kind is a string value representing the REST resource this object represents. 26140 - Servers may infer this from the endpoint the client submits requests to. 26141 - Cannot be updated. 26142 - In CamelCase. 26143 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26144 + Order specifies the sorting order of the tags. Given the integer values 26145 + from 0 to 9 as tags, ascending order would select 9, and descending order 26146 + would select 0. 26147 + enum: 26148 + - asc 26149 + - desc 26150 type: string 26151 - metadata: 26152 - type: object 26153 - spec: 26154 + type: object 26155 + semver: 26156 + description: |- 26157 + SemVer gives a semantic version range to check against the tags 26158 + available. 26159 + properties: 26160 + range: 26161 description: |- 26162 - ImageRepositorySpec defines the parameters for scanning an image 26163 - repository, e.g., `fluxcd/flux`. 26164 - properties: 26165 - accessFrom: 26166 - description: |- 26167 - AccessFrom defines an ACL for allowing cross-namespace references 26168 - to the ImageRepository object based on the caller's namespace labels. 26169 - properties: 26170 - namespaceSelectors: 26171 - description: |- 26172 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 26173 - Items in this list are evaluated using a logical OR operation. 26174 - items: 26175 - description: |- 26176 - NamespaceSelector selects the namespaces to which this ACL applies. 26177 - An empty map of MatchLabels matches all namespaces in a cluster. 26178 - properties: 26179 - matchLabels: 26180 - additionalProperties: 26181 - type: string 26182 - description: |- 26183 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 26184 - map is equivalent to an element of matchExpressions, whose key field is "key", the 26185 - operator is "In", and the values array contains only "value". The requirements are ANDed. 26186 - type: object 26187 - type: object 26188 - type: array 26189 - required: 26190 - - namespaceSelectors 26191 - type: object 26192 - certSecretRef: 26193 - description: |- 26194 - CertSecretRef can be given the name of a Secret containing 26195 - either or both of 26196 + Range gives a semver range for the image tag; the highest 26197 + version within the range that's a tag yields the latest image. 26198 + type: string 26199 + required: 26200 + - range 26201 + type: object 26202 + type: object 26203 + required: 26204 + - imageRepositoryRef 26205 + - policy 26206 + type: object 26207 + x-kubernetes-validations: 26208 + - message: spec.interval is only accepted when spec.digestReflectionPolicy 26209 + is set to 'Always' 26210 + rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 26211 + == ''Always'')' 26212 + - message: spec.interval must be set when spec.digestReflectionPolicy 26213 + is set to 'Always' 26214 + rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 26215 + != 'Always' 26216 + status: 26217 + default: 26218 + observedGeneration: -1 26219 + description: ImagePolicyStatus defines the observed state of ImagePolicy 26220 + properties: 26221 + conditions: 26222 + items: 26223 + description: Condition contains details for one aspect of the current 26224 + state of this API Resource. 26225 + properties: 26226 + lastTransitionTime: 26227 + description: |- 26228 + lastTransitionTime is the last time the condition transitioned from one status to another. 26229 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26230 + format: date-time 26231 + type: string 26232 + message: 26233 + description: |- 26234 + message is a human readable message indicating details about the transition. 26235 + This may be an empty string. 26236 + maxLength: 32768 26237 + type: string 26238 + observedGeneration: 26239 + description: |- 26240 + observedGeneration represents the .metadata.generation that the condition was set based upon. 26241 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26242 + with respect to the current state of the instance. 26243 + format: int64 26244 + minimum: 0 26245 + type: integer 26246 + reason: 26247 + description: |- 26248 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 26249 + Producers of specific condition types may define expected values and meanings for this field, 26250 + and whether the values are considered a guaranteed API. 26251 + The value should be a CamelCase string. 26252 + This field may not be empty. 26253 + maxLength: 1024 26254 + minLength: 1 26255 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26256 + type: string 26257 + status: 26258 + description: status of the condition, one of True, False, Unknown. 26259 + enum: 26260 + - "True" 26261 + - "False" 26262 + - Unknown 26263 + type: string 26264 + type: 26265 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 26266 + maxLength: 316 26267 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26268 + type: string 26269 + required: 26270 + - lastTransitionTime 26271 + - message 26272 + - reason 26273 + - status 26274 + - type 26275 + type: object 26276 + type: array 26277 + latestImage: 26278 + description: |- 26279 + LatestImage gives the first in the list of images scanned by 26280 + the image repository, when filtered and ordered according to 26281 + the policy. 26282 26283 - - a PEM-encoded client certificate (`tls.crt`) and private 26284 - key (`tls.key`); 26285 - - a PEM-encoded CA certificate (`ca.crt`) 26286 + Deprecated: Replaced by the composite "latestRef" field. 26287 + type: string 26288 + latestRef: 26289 + description: |- 26290 + LatestRef gives the first in the list of images scanned by 26291 + the image repository, when filtered and ordered according 26292 + to the policy. 26293 + properties: 26294 + digest: 26295 + description: Digest is the image's digest. 26296 + type: string 26297 + name: 26298 + description: Name is the bare image's name. 26299 + type: string 26300 + tag: 26301 + description: Tag is the image's tag. 26302 + type: string 26303 + required: 26304 + - name 26305 + - tag 26306 + type: object 26307 + observedGeneration: 26308 + format: int64 26309 + type: integer 26310 + observedPreviousImage: 26311 + description: |- 26312 + ObservedPreviousImage is the observed previous LatestImage. It is used 26313 + to keep track of the previous and current images. 26314 26315 - and whichever are supplied, will be used for connecting to the 26316 - registry. The client cert and key are useful if you are 26317 - authenticating with a certificate; the CA cert is useful if 26318 - you are using a self-signed server certificate. The Secret must 26319 - be of type `Opaque` or `kubernetes.io/tls`. 26320 + Deprecated: Replaced by the composite "observedPreviousRef" field. 26321 + type: string 26322 + observedPreviousRef: 26323 + description: |- 26324 + ObservedPreviousRef is the observed previous LatestRef. It is used 26325 + to keep track of the previous and current images. 26326 + properties: 26327 + digest: 26328 + description: Digest is the image's digest. 26329 + type: string 26330 + name: 26331 + description: Name is the bare image's name. 26332 + type: string 26333 + tag: 26334 + description: Tag is the image's tag. 26335 + type: string 26336 + required: 26337 + - name 26338 + - tag 26339 + type: object 26340 + type: object 26341 + type: object 26342 + served: true 26343 + storage: true 26344 + subresources: 26345 + status: {} 26346 +--- 26347 +apiVersion: apiextensions.k8s.io/v1 26348 +kind: CustomResourceDefinition 26349 +metadata: 26350 + annotations: 26351 + controller-gen.kubebuilder.io/version: v0.16.1 26352 + labels: 26353 + app.kubernetes.io/component: image-reflector-controller 26354 + app.kubernetes.io/instance: flux-system 26355 + app.kubernetes.io/part-of: flux 26356 + app.kubernetes.io/version: v2.6.4 26357 + name: imagerepositories.image.toolkit.fluxcd.io 26358 +spec: 26359 + group: image.toolkit.fluxcd.io 26360 + names: 26361 + kind: ImageRepository 26362 + listKind: ImageRepositoryList 26363 + plural: imagerepositories 26364 + singular: imagerepository 26365 + scope: Namespaced 26366 + versions: 26367 + - additionalPrinterColumns: 26368 + - jsonPath: .status.lastScanResult.scanTime 26369 + name: Last scan 26370 + type: string 26371 + - jsonPath: .status.lastScanResult.tagCount 26372 + name: Tags 26373 + type: string 26374 + name: v1beta1 26375 + schema: 26376 + openAPIV3Schema: 26377 + description: ImageRepository is the Schema for the imagerepositories API 26378 + properties: 26379 + apiVersion: 26380 + description: |- 26381 + APIVersion defines the versioned schema of this representation of an object. 26382 + Servers should convert recognized schemas to the latest internal value, and 26383 + may reject unrecognized values. 26384 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26385 + type: string 26386 + kind: 26387 + description: |- 26388 + Kind is a string value representing the REST resource this object represents. 26389 + Servers may infer this from the endpoint the client submits requests to. 26390 + Cannot be updated. 26391 + In CamelCase. 26392 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26393 + type: string 26394 + metadata: 26395 + type: object 26396 + spec: 26397 + description: |- 26398 + ImageRepositorySpec defines the parameters for scanning an image 26399 + repository, e.g., `fluxcd/flux`. 26400 + properties: 26401 + accessFrom: 26402 + description: |- 26403 + AccessFrom defines an ACL for allowing cross-namespace references 26404 + to the ImageRepository object based on the caller's namespace labels. 26405 + properties: 26406 + namespaceSelectors: 26407 + description: |- 26408 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 26409 + Items in this list are evaluated using a logical OR operation. 26410 + items: 26411 + description: |- 26412 + NamespaceSelector selects the namespaces to which this ACL applies. 26413 + An empty map of MatchLabels matches all namespaces in a cluster. 26414 + properties: 26415 + matchLabels: 26416 + additionalProperties: 26417 + type: string 26418 + description: |- 26419 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 26420 + map is equivalent to an element of matchExpressions, whose key field is "key", the 26421 + operator is "In", and the values array contains only "value". The requirements are ANDed. 26422 + type: object 26423 + type: object 26424 + type: array 26425 + required: 26426 + - namespaceSelectors 26427 + type: object 26428 + certSecretRef: 26429 + description: |- 26430 + CertSecretRef can be given the name of a secret containing 26431 + either or both of 26432 26433 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 26434 - been deprecated. 26435 - properties: 26436 - name: 26437 - description: Name of the referent. 26438 - type: string 26439 - required: 26440 - - name 26441 - type: object 26442 - exclusionList: 26443 - default: 26444 - - ^.*\.sig$ 26445 - description: |- 26446 - ExclusionList is a list of regex strings used to exclude certain tags 26447 - from being stored in the database. 26448 - items: 26449 - type: string 26450 - maxItems: 25 26451 - type: array 26452 - image: 26453 - description: Image is the name of the image repository 26454 - type: string 26455 - insecure: 26456 - description: Insecure allows connecting to a non-TLS HTTP container registry. 26457 - type: boolean 26458 - interval: 26459 - description: |- 26460 - Interval is the length of time to wait between 26461 - scans of the image repository. 26462 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26463 - type: string 26464 - provider: 26465 - default: generic 26466 - description: |- 26467 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 26468 - When not specified, defaults to 'generic'. 26469 - enum: 26470 - - generic 26471 - - aws 26472 - - azure 26473 - - gcp 26474 - type: string 26475 - proxySecretRef: 26476 - description: |- 26477 - ProxySecretRef specifies the Secret containing the proxy configuration 26478 - to use while communicating with the container registry. 26479 - properties: 26480 - name: 26481 - description: Name of the referent. 26482 - type: string 26483 - required: 26484 - - name 26485 - type: object 26486 - secretRef: 26487 - description: |- 26488 - SecretRef can be given the name of a secret containing 26489 - credentials to use for the image registry. The secret should be 26490 - created with `kubectl create secret docker-registry`, or the 26491 - equivalent. 26492 - properties: 26493 - name: 26494 - description: Name of the referent. 26495 - type: string 26496 - required: 26497 - - name 26498 - type: object 26499 - serviceAccountName: 26500 - description: |- 26501 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 26502 - the image pull if the service account has attached pull secrets. 26503 - maxLength: 253 26504 - type: string 26505 - suspend: 26506 - description: |- 26507 - This flag tells the controller to suspend subsequent image scans. 26508 - It does not apply to already started scans. Defaults to false. 26509 - type: boolean 26510 - timeout: 26511 - description: |- 26512 - Timeout for image scanning. 26513 - Defaults to 'Interval' duration. 26514 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 26515 - type: string 26516 - required: 26517 - - image 26518 - - interval 26519 - type: object 26520 + - a PEM-encoded client certificate (`certFile`) and private 26521 + key (`keyFile`); 26522 + - a PEM-encoded CA certificate (`caFile`) 26523 + 26524 + and whichever are supplied, will be used for connecting to the 26525 + registry. The client cert and key are useful if you are 26526 + authenticating with a certificate; the CA cert is useful if 26527 + you are using a self-signed server certificate. 26528 + properties: 26529 + name: 26530 + description: Name of the referent. 26531 + type: string 26532 + required: 26533 + - name 26534 + type: object 26535 + exclusionList: 26536 + description: |- 26537 + ExclusionList is a list of regex strings used to exclude certain tags 26538 + from being stored in the database. 26539 + items: 26540 + type: string 26541 + type: array 26542 + image: 26543 + description: Image is the name of the image repository 26544 + type: string 26545 + interval: 26546 + description: |- 26547 + Interval is the length of time to wait between 26548 + scans of the image repository. 26549 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26550 + type: string 26551 + secretRef: 26552 + description: |- 26553 + SecretRef can be given the name of a secret containing 26554 + credentials to use for the image registry. The secret should be 26555 + created with `kubectl create secret docker-registry`, or the 26556 + equivalent. 26557 + properties: 26558 + name: 26559 + description: Name of the referent. 26560 + type: string 26561 + required: 26562 + - name 26563 + type: object 26564 + serviceAccountName: 26565 + description: |- 26566 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 26567 + the image pull if the service account has attached pull secrets. 26568 + maxLength: 253 26569 + type: string 26570 + suspend: 26571 + description: |- 26572 + This flag tells the controller to suspend subsequent image scans. 26573 + It does not apply to already started scans. Defaults to false. 26574 + type: boolean 26575 + timeout: 26576 + description: |- 26577 + Timeout for image scanning. 26578 + Defaults to 'Interval' duration. 26579 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 26580 + type: string 26581 + required: 26582 + - image 26583 + - interval 26584 + type: object 26585 + status: 26586 + default: 26587 + observedGeneration: -1 26588 + description: ImageRepositoryStatus defines the observed state of ImageRepository 26589 + properties: 26590 + canonicalImageName: 26591 + description: |- 26592 + CanonicalName is the name of the image repository with all the 26593 + implied bits made explicit; e.g., `docker.io/library/alpine` 26594 + rather than `alpine`. 26595 + type: string 26596 + conditions: 26597 + items: 26598 + description: Condition contains details for one aspect of the current 26599 + state of this API Resource. 26600 + properties: 26601 + lastTransitionTime: 26602 + description: |- 26603 + lastTransitionTime is the last time the condition transitioned from one status to another. 26604 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26605 + format: date-time 26606 + type: string 26607 + message: 26608 + description: |- 26609 + message is a human readable message indicating details about the transition. 26610 + This may be an empty string. 26611 + maxLength: 32768 26612 + type: string 26613 + observedGeneration: 26614 + description: |- 26615 + observedGeneration represents the .metadata.generation that the condition was set based upon. 26616 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26617 + with respect to the current state of the instance. 26618 + format: int64 26619 + minimum: 0 26620 + type: integer 26621 + reason: 26622 + description: |- 26623 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 26624 + Producers of specific condition types may define expected values and meanings for this field, 26625 + and whether the values are considered a guaranteed API. 26626 + The value should be a CamelCase string. 26627 + This field may not be empty. 26628 + maxLength: 1024 26629 + minLength: 1 26630 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26631 + type: string 26632 status: 26633 - default: 26634 - observedGeneration: -1 26635 - description: ImageRepositoryStatus defines the observed state of ImageRepository 26636 - properties: 26637 - canonicalImageName: 26638 - description: |- 26639 - CanonicalName is the name of the image repository with all the 26640 - implied bits made explicit; e.g., `docker.io/library/alpine` 26641 - rather than `alpine`. 26642 - type: string 26643 - conditions: 26644 - items: 26645 - description: Condition contains details for one aspect of the current state of this API 26646 - Resource. 26647 - properties: 26648 - lastTransitionTime: 26649 - description: |- 26650 - lastTransitionTime is the last time the condition transitioned from one status to another. 26651 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26652 - format: date-time 26653 - type: string 26654 - message: 26655 - description: |- 26656 - message is a human readable message indicating details about the transition. 26657 - This may be an empty string. 26658 - maxLength: 32768 26659 - type: string 26660 - observedGeneration: 26661 - description: |- 26662 - observedGeneration represents the .metadata.generation that the condition was set based upon. 26663 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26664 - with respect to the current state of the instance. 26665 - format: int64 26666 - minimum: 0 26667 - type: integer 26668 - reason: 26669 - description: |- 26670 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 26671 - Producers of specific condition types may define expected values and meanings for this field, 26672 - and whether the values are considered a guaranteed API. 26673 - The value should be a CamelCase string. 26674 - This field may not be empty. 26675 - maxLength: 1024 26676 - minLength: 1 26677 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26678 - type: string 26679 - status: 26680 - description: status of the condition, one of True, False, Unknown. 26681 - enum: 26682 - - "True" 26683 - - "False" 26684 - - Unknown 26685 - type: string 26686 - type: 26687 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 26688 - maxLength: 316 26689 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26690 - type: string 26691 - required: 26692 - - lastTransitionTime 26693 - - message 26694 - - reason 26695 - - status 26696 - - type 26697 - type: object 26698 - type: array 26699 - lastHandledReconcileAt: 26700 - description: |- 26701 - LastHandledReconcileAt holds the value of the most recent 26702 - reconcile request value, so a change of the annotation value 26703 - can be detected. 26704 - type: string 26705 - lastScanResult: 26706 - description: LastScanResult contains the number of fetched tags. 26707 - properties: 26708 - latestTags: 26709 - items: 26710 - type: string 26711 - type: array 26712 - scanTime: 26713 - format: date-time 26714 - type: string 26715 - tagCount: 26716 - type: integer 26717 - required: 26718 - - tagCount 26719 - type: object 26720 - observedExclusionList: 26721 - description: |- 26722 - ObservedExclusionList is a list of observed exclusion list. It reflects 26723 - the exclusion rules used for the observed scan result in 26724 - spec.lastScanResult. 26725 - items: 26726 - type: string 26727 - type: array 26728 - observedGeneration: 26729 - description: ObservedGeneration is the last reconciled generation. 26730 - format: int64 26731 - type: integer 26732 - type: object 26733 + description: status of the condition, one of True, False, Unknown. 26734 + enum: 26735 + - "True" 26736 + - "False" 26737 + - Unknown 26738 + type: string 26739 + type: 26740 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 26741 + maxLength: 316 26742 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26743 + type: string 26744 + required: 26745 + - lastTransitionTime 26746 + - message 26747 + - reason 26748 + - status 26749 + - type 26750 + type: object 26751 + type: array 26752 + lastHandledReconcileAt: 26753 + description: |- 26754 + LastHandledReconcileAt holds the value of the most recent 26755 + reconcile request value, so a change of the annotation value 26756 + can be detected. 26757 + type: string 26758 + lastScanResult: 26759 + description: LastScanResult contains the number of fetched tags. 26760 + properties: 26761 + scanTime: 26762 + format: date-time 26763 + type: string 26764 + tagCount: 26765 + type: integer 26766 + required: 26767 + - tagCount 26768 + type: object 26769 + observedGeneration: 26770 + description: ObservedGeneration is the last reconciled generation. 26771 + format: int64 26772 + type: integer 26773 + type: object 26774 + type: object 26775 + served: true 26776 + storage: false 26777 + subresources: 26778 + status: {} 26779 + - additionalPrinterColumns: 26780 + - jsonPath: .status.lastScanResult.scanTime 26781 + name: Last scan 26782 + type: string 26783 + - jsonPath: .status.lastScanResult.tagCount 26784 + name: Tags 26785 + type: string 26786 + name: v1beta2 26787 + schema: 26788 + openAPIV3Schema: 26789 + description: ImageRepository is the Schema for the imagerepositories API 26790 + properties: 26791 + apiVersion: 26792 + description: |- 26793 + APIVersion defines the versioned schema of this representation of an object. 26794 + Servers should convert recognized schemas to the latest internal value, and 26795 + may reject unrecognized values. 26796 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26797 + type: string 26798 + kind: 26799 + description: |- 26800 + Kind is a string value representing the REST resource this object represents. 26801 + Servers may infer this from the endpoint the client submits requests to. 26802 + Cannot be updated. 26803 + In CamelCase. 26804 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26805 + type: string 26806 + metadata: 26807 + type: object 26808 + spec: 26809 + description: |- 26810 + ImageRepositorySpec defines the parameters for scanning an image 26811 + repository, e.g., `fluxcd/flux`. 26812 + properties: 26813 + accessFrom: 26814 + description: |- 26815 + AccessFrom defines an ACL for allowing cross-namespace references 26816 + to the ImageRepository object based on the caller's namespace labels. 26817 + properties: 26818 + namespaceSelectors: 26819 + description: |- 26820 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 26821 + Items in this list are evaluated using a logical OR operation. 26822 + items: 26823 + description: |- 26824 + NamespaceSelector selects the namespaces to which this ACL applies. 26825 + An empty map of MatchLabels matches all namespaces in a cluster. 26826 + properties: 26827 + matchLabels: 26828 + additionalProperties: 26829 + type: string 26830 + description: |- 26831 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 26832 + map is equivalent to an element of matchExpressions, whose key field is "key", the 26833 + operator is "In", and the values array contains only "value". The requirements are ANDed. 26834 + type: object 26835 + type: object 26836 + type: array 26837 + required: 26838 + - namespaceSelectors 26839 + type: object 26840 + certSecretRef: 26841 + description: |- 26842 + CertSecretRef can be given the name of a Secret containing 26843 + either or both of 26844 + 26845 + - a PEM-encoded client certificate (`tls.crt`) and private 26846 + key (`tls.key`); 26847 + - a PEM-encoded CA certificate (`ca.crt`) 26848 + 26849 + and whichever are supplied, will be used for connecting to the 26850 + registry. The client cert and key are useful if you are 26851 + authenticating with a certificate; the CA cert is useful if 26852 + you are using a self-signed server certificate. The Secret must 26853 + be of type `Opaque` or `kubernetes.io/tls`. 26854 + 26855 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 26856 + been deprecated. 26857 + properties: 26858 + name: 26859 + description: Name of the referent. 26860 + type: string 26861 + required: 26862 + - name 26863 + type: object 26864 + exclusionList: 26865 + default: 26866 + - ^.*\.sig$ 26867 + description: |- 26868 + ExclusionList is a list of regex strings used to exclude certain tags 26869 + from being stored in the database. 26870 + items: 26871 + type: string 26872 + maxItems: 25 26873 + type: array 26874 + image: 26875 + description: Image is the name of the image repository 26876 + type: string 26877 + insecure: 26878 + description: Insecure allows connecting to a non-TLS HTTP container 26879 + registry. 26880 + type: boolean 26881 + interval: 26882 + description: |- 26883 + Interval is the length of time to wait between 26884 + scans of the image repository. 26885 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26886 + type: string 26887 + provider: 26888 + default: generic 26889 + description: |- 26890 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 26891 + When not specified, defaults to 'generic'. 26892 + enum: 26893 + - generic 26894 + - aws 26895 + - azure 26896 + - gcp 26897 + type: string 26898 + proxySecretRef: 26899 + description: |- 26900 + ProxySecretRef specifies the Secret containing the proxy configuration 26901 + to use while communicating with the container registry. 26902 + properties: 26903 + name: 26904 + description: Name of the referent. 26905 + type: string 26906 + required: 26907 + - name 26908 + type: object 26909 + secretRef: 26910 + description: |- 26911 + SecretRef can be given the name of a secret containing 26912 + credentials to use for the image registry. The secret should be 26913 + created with `kubectl create secret docker-registry`, or the 26914 + equivalent. 26915 + properties: 26916 + name: 26917 + description: Name of the referent. 26918 + type: string 26919 + required: 26920 + - name 26921 + type: object 26922 + serviceAccountName: 26923 + description: |- 26924 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 26925 + the image pull if the service account has attached pull secrets. 26926 + maxLength: 253 26927 + type: string 26928 + suspend: 26929 + description: |- 26930 + This flag tells the controller to suspend subsequent image scans. 26931 + It does not apply to already started scans. Defaults to false. 26932 + type: boolean 26933 + timeout: 26934 + description: |- 26935 + Timeout for image scanning. 26936 + Defaults to 'Interval' duration. 26937 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 26938 + type: string 26939 + required: 26940 + - image 26941 + - interval 26942 + type: object 26943 + status: 26944 + default: 26945 + observedGeneration: -1 26946 + description: ImageRepositoryStatus defines the observed state of ImageRepository 26947 + properties: 26948 + canonicalImageName: 26949 + description: |- 26950 + CanonicalName is the name of the image repository with all the 26951 + implied bits made explicit; e.g., `docker.io/library/alpine` 26952 + rather than `alpine`. 26953 + type: string 26954 + conditions: 26955 + items: 26956 + description: Condition contains details for one aspect of the current 26957 + state of this API Resource. 26958 + properties: 26959 + lastTransitionTime: 26960 + description: |- 26961 + lastTransitionTime is the last time the condition transitioned from one status to another. 26962 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26963 + format: date-time 26964 + type: string 26965 + message: 26966 + description: |- 26967 + message is a human readable message indicating details about the transition. 26968 + This may be an empty string. 26969 + maxLength: 32768 26970 + type: string 26971 + observedGeneration: 26972 + description: |- 26973 + observedGeneration represents the .metadata.generation that the condition was set based upon. 26974 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26975 + with respect to the current state of the instance. 26976 + format: int64 26977 + minimum: 0 26978 + type: integer 26979 + reason: 26980 + description: |- 26981 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 26982 + Producers of specific condition types may define expected values and meanings for this field, 26983 + and whether the values are considered a guaranteed API. 26984 + The value should be a CamelCase string. 26985 + This field may not be empty. 26986 + maxLength: 1024 26987 + minLength: 1 26988 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26989 + type: string 26990 + status: 26991 + description: status of the condition, one of True, False, Unknown. 26992 + enum: 26993 + - "True" 26994 + - "False" 26995 + - Unknown 26996 + type: string 26997 + type: 26998 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 26999 + maxLength: 316 27000 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27001 + type: string 27002 + required: 27003 + - lastTransitionTime 27004 + - message 27005 + - reason 27006 + - status 27007 + - type 27008 + type: object 27009 + type: array 27010 + lastHandledReconcileAt: 27011 + description: |- 27012 + LastHandledReconcileAt holds the value of the most recent 27013 + reconcile request value, so a change of the annotation value 27014 + can be detected. 27015 + type: string 27016 + lastScanResult: 27017 + description: LastScanResult contains the number of fetched tags. 27018 + properties: 27019 + latestTags: 27020 + items: 27021 + type: string 27022 + type: array 27023 + scanTime: 27024 + format: date-time 27025 + type: string 27026 + tagCount: 27027 + type: integer 27028 + required: 27029 + - tagCount 27030 type: object 27031 - served: true 27032 - storage: true 27033 - subresources: 27034 - status: {} 27035 + observedExclusionList: 27036 + description: |- 27037 + ObservedExclusionList is a list of observed exclusion list. It reflects 27038 + the exclusion rules used for the observed scan result in 27039 + spec.lastScanResult. 27040 + items: 27041 + type: string 27042 + type: array 27043 + observedGeneration: 27044 + description: ObservedGeneration is the last reconciled generation. 27045 + format: int64 27046 + type: integer 27047 + type: object 27048 + type: object 27049 + served: true 27050 + storage: true 27051 + subresources: 27052 + status: {} 27053 --- 27054 apiVersion: v1 27055 kind: ServiceAccount 27056 metadata: 27057 - labels: 27058 - app.kubernetes.io/component: image-reflector-controller 27059 - app.kubernetes.io/instance: flux-system 27060 - app.kubernetes.io/part-of: flux 27061 - app.kubernetes.io/version: v2.5.1 27062 - name: image-reflector-controller 27063 - namespace: flux-system 27064 + labels: 27065 + app.kubernetes.io/component: image-reflector-controller 27066 + app.kubernetes.io/instance: flux-system 27067 + app.kubernetes.io/part-of: flux 27068 + app.kubernetes.io/version: v2.6.4 27069 + name: image-reflector-controller 27070 + namespace: flux-system 27071 --- 27072 apiVersion: apps/v1 27073 kind: Deployment 27074 metadata: 27075 - labels: 27076 - app.kubernetes.io/component: image-reflector-controller 27077 - app.kubernetes.io/instance: flux-system 27078 - app.kubernetes.io/part-of: flux 27079 - app.kubernetes.io/version: v2.5.1 27080 - control-plane: controller 27081 - name: image-reflector-controller 27082 - namespace: flux-system 27083 + labels: 27084 + app.kubernetes.io/component: image-reflector-controller 27085 + app.kubernetes.io/instance: flux-system 27086 + app.kubernetes.io/part-of: flux 27087 + app.kubernetes.io/version: v2.6.4 27088 + control-plane: controller 27089 + name: image-reflector-controller 27090 + namespace: flux-system 27091 spec: 27092 - replicas: 1 27093 - selector: 27094 - matchLabels: 27095 - app: image-reflector-controller 27096 - template: 27097 - metadata: 27098 - annotations: 27099 - prometheus.io/port: "8080" 27100 - prometheus.io/scrape: "true" 27101 - labels: 27102 - app: image-reflector-controller 27103 - spec: 27104 - containers: 27105 - - args: 27106 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 27107 - - --watch-all-namespaces=true 27108 - - --log-level=info 27109 - - --log-encoding=json 27110 - - --enable-leader-election 27111 - env: 27112 - - name: RUNTIME_NAMESPACE 27113 - valueFrom: 27114 - fieldRef: 27115 - fieldPath: metadata.namespace 27116 - - name: GOMAXPROCS 27117 - valueFrom: 27118 - resourceFieldRef: 27119 - containerName: manager 27120 - resource: limits.cpu 27121 - - name: GOMEMLIMIT 27122 - valueFrom: 27123 - resourceFieldRef: 27124 - containerName: manager 27125 - resource: limits.memory 27126 - image: ghcr.io/fluxcd/image-reflector-controller:v0.34.0 27127 - imagePullPolicy: IfNotPresent 27128 - livenessProbe: 27129 - httpGet: 27130 - path: /healthz 27131 - port: healthz 27132 - name: manager 27133 - ports: 27134 - - containerPort: 8080 27135 - name: http-prom 27136 - protocol: TCP 27137 - - containerPort: 9440 27138 - name: healthz 27139 - protocol: TCP 27140 - readinessProbe: 27141 - httpGet: 27142 - path: /readyz 27143 - port: healthz 27144 - resources: 27145 - limits: 27146 - cpu: 1000m 27147 - memory: 1Gi 27148 - requests: 27149 - cpu: 100m 27150 - memory: 64Mi 27151 - securityContext: 27152 - allowPrivilegeEscalation: false 27153 - capabilities: 27154 - drop: 27155 - - ALL 27156 - readOnlyRootFilesystem: true 27157 - runAsNonRoot: true 27158 - seccompProfile: 27159 - type: RuntimeDefault 27160 - volumeMounts: 27161 - - mountPath: /tmp 27162 - name: temp 27163 - - mountPath: /data 27164 - name: data 27165 - nodeSelector: 27166 - kubernetes.io/os: linux 27167 - securityContext: 27168 - fsGroup: 1337 27169 - serviceAccountName: image-reflector-controller 27170 - terminationGracePeriodSeconds: 10 27171 - volumes: 27172 - - emptyDir: {} 27173 - name: temp 27174 - - emptyDir: {} 27175 - name: data 27176 + replicas: 1 27177 + selector: 27178 + matchLabels: 27179 + app: image-reflector-controller 27180 + template: 27181 + metadata: 27182 + annotations: 27183 + prometheus.io/port: "8080" 27184 + prometheus.io/scrape: "true" 27185 + labels: 27186 + app: image-reflector-controller 27187 + spec: 27188 + containers: 27189 + - args: 27190 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 27191 + - --watch-all-namespaces=true 27192 + - --log-level=info 27193 + - --log-encoding=json 27194 + - --enable-leader-election 27195 + env: 27196 + - name: RUNTIME_NAMESPACE 27197 + valueFrom: 27198 + fieldRef: 27199 + fieldPath: metadata.namespace 27200 + - name: GOMAXPROCS 27201 + valueFrom: 27202 + resourceFieldRef: 27203 + containerName: manager 27204 + resource: limits.cpu 27205 + - name: GOMEMLIMIT 27206 + valueFrom: 27207 + resourceFieldRef: 27208 + containerName: manager 27209 + resource: limits.memory 27210 + image: ghcr.io/fluxcd/image-reflector-controller:v0.35.2 27211 + imagePullPolicy: IfNotPresent 27212 + livenessProbe: 27213 + httpGet: 27214 + path: /healthz 27215 + port: healthz 27216 + name: manager 27217 + ports: 27218 + - containerPort: 8080 27219 + name: http-prom 27220 + protocol: TCP 27221 + - containerPort: 9440 27222 + name: healthz 27223 + protocol: TCP 27224 + readinessProbe: 27225 + httpGet: 27226 + path: /readyz 27227 + port: healthz 27228 + resources: 27229 + limits: 27230 + cpu: 1000m 27231 + memory: 1Gi 27232 + requests: 27233 + cpu: 100m 27234 + memory: 64Mi 27235 + securityContext: 27236 + allowPrivilegeEscalation: false 27237 + capabilities: 27238 + drop: 27239 + - ALL 27240 + readOnlyRootFilesystem: true 27241 + runAsNonRoot: true 27242 + seccompProfile: 27243 + type: RuntimeDefault 27244 + volumeMounts: 27245 + - mountPath: /tmp 27246 + name: temp 27247 + - mountPath: /data 27248 + name: data 27249 + nodeSelector: 27250 + kubernetes.io/os: linux 27251 + securityContext: 27252 + fsGroup: 1337 27253 + serviceAccountName: image-reflector-controller 27254 + terminationGracePeriodSeconds: 10 27255 + volumes: 27256 + - emptyDir: {} 27257 + name: temp 27258 + - emptyDir: {} 27259 + name: data 27260 --- 27261 apiVersion: apiextensions.k8s.io/v1 27262 kind: CustomResourceDefinition 27263 metadata: 27264 - annotations: 27265 - controller-gen.kubebuilder.io/version: v0.16.1 27266 - labels: 27267 - app.kubernetes.io/component: image-automation-controller 27268 - app.kubernetes.io/instance: flux-system 27269 - app.kubernetes.io/part-of: flux 27270 - app.kubernetes.io/version: v2.5.1 27271 - name: imageupdateautomations.image.toolkit.fluxcd.io 27272 + annotations: 27273 + controller-gen.kubebuilder.io/version: v0.16.1 27274 + labels: 27275 + app.kubernetes.io/component: image-automation-controller 27276 + app.kubernetes.io/instance: flux-system 27277 + app.kubernetes.io/part-of: flux 27278 + app.kubernetes.io/version: v2.6.4 27279 + name: imageupdateautomations.image.toolkit.fluxcd.io 27280 spec: 27281 - group: image.toolkit.fluxcd.io 27282 - names: 27283 - kind: ImageUpdateAutomation 27284 - listKind: ImageUpdateAutomationList 27285 - plural: imageupdateautomations 27286 - singular: imageupdateautomation 27287 - scope: Namespaced 27288 - versions: 27289 - - additionalPrinterColumns: 27290 - - jsonPath: .status.lastAutomationRunTime 27291 - name: Last run 27292 - type: string 27293 - deprecated: true 27294 - deprecationWarning: v1beta1 ImageUpdateAutomation is deprecated, upgrade to v1beta2 27295 - name: v1beta1 27296 - schema: 27297 - openAPIV3Schema: 27298 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 27299 + group: image.toolkit.fluxcd.io 27300 + names: 27301 + kind: ImageUpdateAutomation 27302 + listKind: ImageUpdateAutomationList 27303 + plural: imageupdateautomations 27304 + singular: imageupdateautomation 27305 + scope: Namespaced 27306 + versions: 27307 + - additionalPrinterColumns: 27308 + - jsonPath: .status.lastAutomationRunTime 27309 + name: Last run 27310 + type: string 27311 + deprecated: true 27312 + deprecationWarning: v1beta1 ImageUpdateAutomation is deprecated, upgrade to v1beta2 27313 + name: v1beta1 27314 + schema: 27315 + openAPIV3Schema: 27316 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 27317 + API 27318 + properties: 27319 + apiVersion: 27320 + description: |- 27321 + APIVersion defines the versioned schema of this representation of an object. 27322 + Servers should convert recognized schemas to the latest internal value, and 27323 + may reject unrecognized values. 27324 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27325 + type: string 27326 + kind: 27327 + description: |- 27328 + Kind is a string value representing the REST resource this object represents. 27329 + Servers may infer this from the endpoint the client submits requests to. 27330 + Cannot be updated. 27331 + In CamelCase. 27332 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27333 + type: string 27334 + metadata: 27335 + type: object 27336 + spec: 27337 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27338 + properties: 27339 + git: 27340 + description: |- 27341 + GitSpec contains all the git-specific definitions. This is 27342 + technically optional, but in practice mandatory until there are 27343 + other kinds of source allowed. 27344 properties: 27345 - apiVersion: 27346 - description: |- 27347 - APIVersion defines the versioned schema of this representation of an object. 27348 - Servers should convert recognized schemas to the latest internal value, and 27349 - may reject unrecognized values. 27350 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27351 - type: string 27352 - kind: 27353 + checkout: 27354 + description: |- 27355 + Checkout gives the parameters for cloning the git repository, 27356 + ready to make changes. If not present, the `spec.ref` field from the 27357 + referenced `GitRepository` or its default will be used. 27358 + properties: 27359 + ref: 27360 description: |- 27361 - Kind is a string value representing the REST resource this object represents. 27362 - Servers may infer this from the endpoint the client submits requests to. 27363 - Cannot be updated. 27364 - In CamelCase. 27365 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27366 - type: string 27367 - metadata: 27368 - type: object 27369 - spec: 27370 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27371 + Reference gives a branch, tag or commit to clone from the Git 27372 + repository. 27373 properties: 27374 - git: 27375 - description: |- 27376 - GitSpec contains all the git-specific definitions. This is 27377 - technically optional, but in practice mandatory until there are 27378 - other kinds of source allowed. 27379 - properties: 27380 - checkout: 27381 - description: |- 27382 - Checkout gives the parameters for cloning the git repository, 27383 - ready to make changes. If not present, the `spec.ref` field from the 27384 - referenced `GitRepository` or its default will be used. 27385 - properties: 27386 - ref: 27387 - description: |- 27388 - Reference gives a branch, tag or commit to clone from the Git 27389 - repository. 27390 - properties: 27391 - branch: 27392 - description: Branch to check out, defaults to 'master' if no other 27393 - field is defined. 27394 - type: string 27395 - commit: 27396 - description: |- 27397 - Commit SHA to check out, takes precedence over all reference fields. 27398 + branch: 27399 + description: Branch to check out, defaults to 'master' 27400 + if no other field is defined. 27401 + type: string 27402 + commit: 27403 + description: |- 27404 + Commit SHA to check out, takes precedence over all reference fields. 27405 27406 - This can be combined with Branch to shallow clone the branch, in which 27407 - the commit is expected to exist. 27408 - type: string 27409 - name: 27410 - description: |- 27411 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 27412 + This can be combined with Branch to shallow clone the branch, in which 27413 + the commit is expected to exist. 27414 + type: string 27415 + name: 27416 + description: |- 27417 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 27418 27419 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 27420 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 27421 - type: string 27422 - semver: 27423 - description: SemVer tag expression to check out, takes precedence 27424 - over Tag. 27425 - type: string 27426 - tag: 27427 - description: Tag to check out, takes precedence over Branch. 27428 - type: string 27429 - type: object 27430 - required: 27431 - - ref 27432 - type: object 27433 - commit: 27434 - description: Commit specifies how to commit to the git repository. 27435 - properties: 27436 - author: 27437 - description: |- 27438 - Author gives the email and optionally the name to use as the 27439 - author of commits. 27440 - properties: 27441 - email: 27442 - description: Email gives the email to provide when making a commit. 27443 - type: string 27444 - name: 27445 - description: Name gives the name to provide when making a commit. 27446 - type: string 27447 - required: 27448 - - email 27449 - type: object 27450 - messageTemplate: 27451 - description: |- 27452 - MessageTemplate provides a template for the commit message, 27453 - into which will be interpolated the details of the change made. 27454 - type: string 27455 - signingKey: 27456 - description: SigningKey provides the option to sign commits with a GPG key 27457 - properties: 27458 - secretRef: 27459 - description: |- 27460 - SecretRef holds the name to a secret that contains a 'git.asc' key 27461 - corresponding to the ASCII Armored file containing the GPG signing 27462 - keypair as the value. It must be in the same namespace as the 27463 - ImageUpdateAutomation. 27464 - properties: 27465 - name: 27466 - description: Name of the referent. 27467 - type: string 27468 - required: 27469 - - name 27470 - type: object 27471 - required: 27472 - - secretRef 27473 - type: object 27474 - required: 27475 - - author 27476 - type: object 27477 - push: 27478 - description: |- 27479 - Push specifies how and where to push commits made by the 27480 - automation. If missing, commits are pushed (back) to 27481 - `.spec.checkout.branch` or its default. 27482 - properties: 27483 - branch: 27484 - description: |- 27485 - Branch specifies that commits should be pushed to the branch 27486 - named. The branch is created using `.spec.checkout.branch` as the 27487 - starting point, if it doesn't already exist. 27488 - type: string 27489 - options: 27490 - additionalProperties: 27491 - type: string 27492 - description: |- 27493 - Options specifies the push options that are sent to the Git 27494 - server when performing a push operation. For details, see: 27495 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27496 - type: object 27497 - refspec: 27498 - description: |- 27499 - Refspec specifies the Git Refspec to use for a push operation. 27500 - If both Branch and Refspec are provided, then the commit is pushed 27501 - to the branch and also using the specified refspec. 27502 - For more details about Git Refspecs, see: 27503 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27504 - type: string 27505 - type: object 27506 - required: 27507 - - commit 27508 - type: object 27509 - interval: 27510 - description: |- 27511 - Interval gives an lower bound for how often the automation 27512 - run should be attempted. 27513 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27514 - type: string 27515 - sourceRef: 27516 - description: |- 27517 - SourceRef refers to the resource giving access details 27518 - to a git repository. 27519 - properties: 27520 - apiVersion: 27521 - description: API version of the referent. 27522 - type: string 27523 - kind: 27524 - default: GitRepository 27525 - description: Kind of the referent. 27526 - enum: 27527 - - GitRepository 27528 - type: string 27529 - name: 27530 - description: Name of the referent. 27531 - type: string 27532 - namespace: 27533 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 27534 - resource object that contains the reference. 27535 - type: string 27536 - required: 27537 - - kind 27538 - - name 27539 - type: object 27540 - suspend: 27541 - description: |- 27542 - Suspend tells the controller to not run this automation, until 27543 - it is unset (or set to false). Defaults to false. 27544 - type: boolean 27545 - update: 27546 - default: 27547 - strategy: Setters 27548 - description: |- 27549 - Update gives the specification for how to update the files in 27550 - the repository. This can be left empty, to use the default 27551 - value. 27552 - properties: 27553 - path: 27554 - description: |- 27555 - Path to the directory containing the manifests to be updated. 27556 - Defaults to 'None', which translates to the root path 27557 - of the GitRepositoryRef. 27558 - type: string 27559 - strategy: 27560 - default: Setters 27561 - description: Strategy names the strategy to be used. 27562 - enum: 27563 - - Setters 27564 - type: string 27565 - required: 27566 - - strategy 27567 - type: object 27568 - required: 27569 - - interval 27570 - - sourceRef 27571 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 27572 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 27573 + type: string 27574 + semver: 27575 + description: SemVer tag expression to check out, takes 27576 + precedence over Tag. 27577 + type: string 27578 + tag: 27579 + description: Tag to check out, takes precedence over Branch. 27580 + type: string 27581 type: object 27582 - status: 27583 - default: 27584 - observedGeneration: -1 27585 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 27586 + required: 27587 + - ref 27588 + type: object 27589 + commit: 27590 + description: Commit specifies how to commit to the git repository. 27591 + properties: 27592 + author: 27593 + description: |- 27594 + Author gives the email and optionally the name to use as the 27595 + author of commits. 27596 properties: 27597 - conditions: 27598 - items: 27599 - description: Condition contains details for one aspect of the current state of this API 27600 - Resource. 27601 - properties: 27602 - lastTransitionTime: 27603 - description: |- 27604 - lastTransitionTime is the last time the condition transitioned from one status to another. 27605 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27606 - format: date-time 27607 - type: string 27608 - message: 27609 - description: |- 27610 - message is a human readable message indicating details about the transition. 27611 - This may be an empty string. 27612 - maxLength: 32768 27613 - type: string 27614 - observedGeneration: 27615 - description: |- 27616 - observedGeneration represents the .metadata.generation that the condition was set based upon. 27617 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27618 - with respect to the current state of the instance. 27619 - format: int64 27620 - minimum: 0 27621 - type: integer 27622 - reason: 27623 - description: |- 27624 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 27625 - Producers of specific condition types may define expected values and meanings for this field, 27626 - and whether the values are considered a guaranteed API. 27627 - The value should be a CamelCase string. 27628 - This field may not be empty. 27629 - maxLength: 1024 27630 - minLength: 1 27631 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27632 - type: string 27633 - status: 27634 - description: status of the condition, one of True, False, Unknown. 27635 - enum: 27636 - - "True" 27637 - - "False" 27638 - - Unknown 27639 - type: string 27640 - type: 27641 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 27642 - maxLength: 316 27643 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27644 - type: string 27645 - required: 27646 - - lastTransitionTime 27647 - - message 27648 - - reason 27649 - - status 27650 - - type 27651 - type: object 27652 - type: array 27653 - lastAutomationRunTime: 27654 - description: |- 27655 - LastAutomationRunTime records the last time the controller ran 27656 - this automation through to completion (even if no updates were 27657 - made). 27658 - format: date-time 27659 - type: string 27660 - lastHandledReconcileAt: 27661 - description: |- 27662 - LastHandledReconcileAt holds the value of the most recent 27663 - reconcile request value, so a change of the annotation value 27664 - can be detected. 27665 - type: string 27666 - lastPushCommit: 27667 - description: |- 27668 - LastPushCommit records the SHA1 of the last commit made by the 27669 - controller, for this automation object 27670 - type: string 27671 - lastPushTime: 27672 - description: LastPushTime records the time of the last pushed change. 27673 - format: date-time 27674 - type: string 27675 - observedGeneration: 27676 - format: int64 27677 - type: integer 27678 + email: 27679 + description: Email gives the email to provide when making 27680 + a commit. 27681 + type: string 27682 + name: 27683 + description: Name gives the name to provide when making 27684 + a commit. 27685 + type: string 27686 + required: 27687 + - email 27688 type: object 27689 - type: object 27690 - served: true 27691 - storage: false 27692 - subresources: 27693 - status: {} 27694 - - additionalPrinterColumns: 27695 - - jsonPath: .status.lastAutomationRunTime 27696 - name: Last run 27697 - type: string 27698 - name: v1beta2 27699 - schema: 27700 - openAPIV3Schema: 27701 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 27702 - properties: 27703 - apiVersion: 27704 + messageTemplate: 27705 description: |- 27706 - APIVersion defines the versioned schema of this representation of an object. 27707 - Servers should convert recognized schemas to the latest internal value, and 27708 - may reject unrecognized values. 27709 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27710 + MessageTemplate provides a template for the commit message, 27711 + into which will be interpolated the details of the change made. 27712 type: string 27713 - kind: 27714 + signingKey: 27715 + description: SigningKey provides the option to sign commits 27716 + with a GPG key 27717 + properties: 27718 + secretRef: 27719 + description: |- 27720 + SecretRef holds the name to a secret that contains a 'git.asc' key 27721 + corresponding to the ASCII Armored file containing the GPG signing 27722 + keypair as the value. It must be in the same namespace as the 27723 + ImageUpdateAutomation. 27724 + properties: 27725 + name: 27726 + description: Name of the referent. 27727 + type: string 27728 + required: 27729 + - name 27730 + type: object 27731 + required: 27732 + - secretRef 27733 + type: object 27734 + required: 27735 + - author 27736 + type: object 27737 + push: 27738 + description: |- 27739 + Push specifies how and where to push commits made by the 27740 + automation. If missing, commits are pushed (back) to 27741 + `.spec.checkout.branch` or its default. 27742 + properties: 27743 + branch: 27744 description: |- 27745 - Kind is a string value representing the REST resource this object represents. 27746 - Servers may infer this from the endpoint the client submits requests to. 27747 - Cannot be updated. 27748 - In CamelCase. 27749 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27750 + Branch specifies that commits should be pushed to the branch 27751 + named. The branch is created using `.spec.checkout.branch` as the 27752 + starting point, if it doesn't already exist. 27753 type: string 27754 - metadata: 27755 + options: 27756 + additionalProperties: 27757 + type: string 27758 + description: |- 27759 + Options specifies the push options that are sent to the Git 27760 + server when performing a push operation. For details, see: 27761 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27762 type: object 27763 - spec: 27764 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27765 + refspec: 27766 + description: |- 27767 + Refspec specifies the Git Refspec to use for a push operation. 27768 + If both Branch and Refspec are provided, then the commit is pushed 27769 + to the branch and also using the specified refspec. 27770 + For more details about Git Refspecs, see: 27771 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27772 + type: string 27773 + type: object 27774 + required: 27775 + - commit 27776 + type: object 27777 + interval: 27778 + description: |- 27779 + Interval gives an lower bound for how often the automation 27780 + run should be attempted. 27781 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27782 + type: string 27783 + sourceRef: 27784 + description: |- 27785 + SourceRef refers to the resource giving access details 27786 + to a git repository. 27787 + properties: 27788 + apiVersion: 27789 + description: API version of the referent. 27790 + type: string 27791 + kind: 27792 + default: GitRepository 27793 + description: Kind of the referent. 27794 + enum: 27795 + - GitRepository 27796 + type: string 27797 + name: 27798 + description: Name of the referent. 27799 + type: string 27800 + namespace: 27801 + description: Namespace of the referent, defaults to the namespace 27802 + of the Kubernetes resource object that contains the reference. 27803 + type: string 27804 + required: 27805 + - kind 27806 + - name 27807 + type: object 27808 + suspend: 27809 + description: |- 27810 + Suspend tells the controller to not run this automation, until 27811 + it is unset (or set to false). Defaults to false. 27812 + type: boolean 27813 + update: 27814 + default: 27815 + strategy: Setters 27816 + description: |- 27817 + Update gives the specification for how to update the files in 27818 + the repository. This can be left empty, to use the default 27819 + value. 27820 + properties: 27821 + path: 27822 + description: |- 27823 + Path to the directory containing the manifests to be updated. 27824 + Defaults to 'None', which translates to the root path 27825 + of the GitRepositoryRef. 27826 + type: string 27827 + strategy: 27828 + default: Setters 27829 + description: Strategy names the strategy to be used. 27830 + enum: 27831 + - Setters 27832 + type: string 27833 + required: 27834 + - strategy 27835 + type: object 27836 + required: 27837 + - interval 27838 + - sourceRef 27839 + type: object 27840 + status: 27841 + default: 27842 + observedGeneration: -1 27843 + description: ImageUpdateAutomationStatus defines the observed state of 27844 + ImageUpdateAutomation 27845 + properties: 27846 + conditions: 27847 + items: 27848 + description: Condition contains details for one aspect of the current 27849 + state of this API Resource. 27850 + properties: 27851 + lastTransitionTime: 27852 + description: |- 27853 + lastTransitionTime is the last time the condition transitioned from one status to another. 27854 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27855 + format: date-time 27856 + type: string 27857 + message: 27858 + description: |- 27859 + message is a human readable message indicating details about the transition. 27860 + This may be an empty string. 27861 + maxLength: 32768 27862 + type: string 27863 + observedGeneration: 27864 + description: |- 27865 + observedGeneration represents the .metadata.generation that the condition was set based upon. 27866 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27867 + with respect to the current state of the instance. 27868 + format: int64 27869 + minimum: 0 27870 + type: integer 27871 + reason: 27872 + description: |- 27873 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 27874 + Producers of specific condition types may define expected values and meanings for this field, 27875 + and whether the values are considered a guaranteed API. 27876 + The value should be a CamelCase string. 27877 + This field may not be empty. 27878 + maxLength: 1024 27879 + minLength: 1 27880 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27881 + type: string 27882 + status: 27883 + description: status of the condition, one of True, False, Unknown. 27884 + enum: 27885 + - "True" 27886 + - "False" 27887 + - Unknown 27888 + type: string 27889 + type: 27890 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 27891 + maxLength: 316 27892 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27893 + type: string 27894 + required: 27895 + - lastTransitionTime 27896 + - message 27897 + - reason 27898 + - status 27899 + - type 27900 + type: object 27901 + type: array 27902 + lastAutomationRunTime: 27903 + description: |- 27904 + LastAutomationRunTime records the last time the controller ran 27905 + this automation through to completion (even if no updates were 27906 + made). 27907 + format: date-time 27908 + type: string 27909 + lastHandledReconcileAt: 27910 + description: |- 27911 + LastHandledReconcileAt holds the value of the most recent 27912 + reconcile request value, so a change of the annotation value 27913 + can be detected. 27914 + type: string 27915 + lastPushCommit: 27916 + description: |- 27917 + LastPushCommit records the SHA1 of the last commit made by the 27918 + controller, for this automation object 27919 + type: string 27920 + lastPushTime: 27921 + description: LastPushTime records the time of the last pushed change. 27922 + format: date-time 27923 + type: string 27924 + observedGeneration: 27925 + format: int64 27926 + type: integer 27927 + type: object 27928 + type: object 27929 + served: true 27930 + storage: false 27931 + subresources: 27932 + status: {} 27933 + - additionalPrinterColumns: 27934 + - jsonPath: .status.lastAutomationRunTime 27935 + name: Last run 27936 + type: string 27937 + name: v1beta2 27938 + schema: 27939 + openAPIV3Schema: 27940 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 27941 + API 27942 + properties: 27943 + apiVersion: 27944 + description: |- 27945 + APIVersion defines the versioned schema of this representation of an object. 27946 + Servers should convert recognized schemas to the latest internal value, and 27947 + may reject unrecognized values. 27948 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27949 + type: string 27950 + kind: 27951 + description: |- 27952 + Kind is a string value representing the REST resource this object represents. 27953 + Servers may infer this from the endpoint the client submits requests to. 27954 + Cannot be updated. 27955 + In CamelCase. 27956 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27957 + type: string 27958 + metadata: 27959 + type: object 27960 + spec: 27961 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27962 + properties: 27963 + git: 27964 + description: |- 27965 + GitSpec contains all the git-specific definitions. This is 27966 + technically optional, but in practice mandatory until there are 27967 + other kinds of source allowed. 27968 + properties: 27969 + checkout: 27970 + description: |- 27971 + Checkout gives the parameters for cloning the git repository, 27972 + ready to make changes. If not present, the `spec.ref` field from the 27973 + referenced `GitRepository` or its default will be used. 27974 + properties: 27975 + ref: 27976 + description: |- 27977 + Reference gives a branch, tag or commit to clone from the Git 27978 + repository. 27979 properties: 27980 - git: 27981 - description: |- 27982 - GitSpec contains all the git-specific definitions. This is 27983 - technically optional, but in practice mandatory until there are 27984 - other kinds of source allowed. 27985 - properties: 27986 - checkout: 27987 - description: |- 27988 - Checkout gives the parameters for cloning the git repository, 27989 - ready to make changes. If not present, the `spec.ref` field from the 27990 - referenced `GitRepository` or its default will be used. 27991 - properties: 27992 - ref: 27993 - description: |- 27994 - Reference gives a branch, tag or commit to clone from the Git 27995 - repository. 27996 - properties: 27997 - branch: 27998 - description: Branch to check out, defaults to 'master' if no other 27999 - field is defined. 28000 - type: string 28001 - commit: 28002 - description: |- 28003 - Commit SHA to check out, takes precedence over all reference fields. 28004 + branch: 28005 + description: Branch to check out, defaults to 'master' 28006 + if no other field is defined. 28007 + type: string 28008 + commit: 28009 + description: |- 28010 + Commit SHA to check out, takes precedence over all reference fields. 28011 28012 - This can be combined with Branch to shallow clone the branch, in which 28013 - the commit is expected to exist. 28014 - type: string 28015 - name: 28016 - description: |- 28017 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 28018 + This can be combined with Branch to shallow clone the branch, in which 28019 + the commit is expected to exist. 28020 + type: string 28021 + name: 28022 + description: |- 28023 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 28024 28025 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 28026 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 28027 - type: string 28028 - semver: 28029 - description: SemVer tag expression to check out, takes precedence 28030 - over Tag. 28031 - type: string 28032 - tag: 28033 - description: Tag to check out, takes precedence over Branch. 28034 - type: string 28035 - type: object 28036 - required: 28037 - - ref 28038 - type: object 28039 - commit: 28040 - description: Commit specifies how to commit to the git repository. 28041 - properties: 28042 - author: 28043 - description: |- 28044 - Author gives the email and optionally the name to use as the 28045 - author of commits. 28046 - properties: 28047 - email: 28048 - description: Email gives the email to provide when making a commit. 28049 - type: string 28050 - name: 28051 - description: Name gives the name to provide when making a commit. 28052 - type: string 28053 - required: 28054 - - email 28055 - type: object 28056 - messageTemplate: 28057 - description: |- 28058 - MessageTemplate provides a template for the commit message, 28059 - into which will be interpolated the details of the change made. 28060 - type: string 28061 - messageTemplateValues: 28062 - additionalProperties: 28063 - type: string 28064 - description: |- 28065 - MessageTemplateValues provides additional values to be available to the 28066 - templating rendering. 28067 - type: object 28068 - signingKey: 28069 - description: SigningKey provides the option to sign commits with a GPG key 28070 - properties: 28071 - secretRef: 28072 - description: |- 28073 - SecretRef holds the name to a secret that contains a 'git.asc' key 28074 - corresponding to the ASCII Armored file containing the GPG signing 28075 - keypair as the value. It must be in the same namespace as the 28076 - ImageUpdateAutomation. 28077 - properties: 28078 - name: 28079 - description: Name of the referent. 28080 - type: string 28081 - required: 28082 - - name 28083 - type: object 28084 - required: 28085 - - secretRef 28086 - type: object 28087 - required: 28088 - - author 28089 - type: object 28090 - push: 28091 - description: |- 28092 - Push specifies how and where to push commits made by the 28093 - automation. If missing, commits are pushed (back) to 28094 - `.spec.checkout.branch` or its default. 28095 - properties: 28096 - branch: 28097 - description: |- 28098 - Branch specifies that commits should be pushed to the branch 28099 - named. The branch is created using `.spec.checkout.branch` as the 28100 - starting point, if it doesn't already exist. 28101 - type: string 28102 - options: 28103 - additionalProperties: 28104 - type: string 28105 - description: |- 28106 - Options specifies the push options that are sent to the Git 28107 - server when performing a push operation. For details, see: 28108 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 28109 - type: object 28110 - refspec: 28111 - description: |- 28112 - Refspec specifies the Git Refspec to use for a push operation. 28113 - If both Branch and Refspec are provided, then the commit is pushed 28114 - to the branch and also using the specified refspec. 28115 - For more details about Git Refspecs, see: 28116 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 28117 - type: string 28118 - type: object 28119 - required: 28120 - - commit 28121 - type: object 28122 - interval: 28123 - description: |- 28124 - Interval gives an lower bound for how often the automation 28125 - run should be attempted. 28126 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 28127 - type: string 28128 - policySelector: 28129 - description: |- 28130 - PolicySelector allows to filter applied policies based on labels. 28131 - By default includes all policies in namespace. 28132 - properties: 28133 - matchExpressions: 28134 - description: matchExpressions is a list of label selector requirements. The requirements 28135 - are ANDed. 28136 - items: 28137 - description: |- 28138 - A label selector requirement is a selector that contains values, a key, and an operator that 28139 - relates the key and values. 28140 - properties: 28141 - key: 28142 - description: key is the label key that the selector applies to. 28143 - type: string 28144 - operator: 28145 - description: |- 28146 - operator represents a key's relationship to a set of values. 28147 - Valid operators are In, NotIn, Exists and DoesNotExist. 28148 - type: string 28149 - values: 28150 - description: |- 28151 - values is an array of string values. If the operator is In or NotIn, 28152 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 28153 - the values array must be empty. This array is replaced during a strategic 28154 - merge patch. 28155 - items: 28156 - type: string 28157 - type: array 28158 - x-kubernetes-list-type: atomic 28159 - required: 28160 - - key 28161 - - operator 28162 - type: object 28163 - type: array 28164 - x-kubernetes-list-type: atomic 28165 - matchLabels: 28166 - additionalProperties: 28167 - type: string 28168 - description: |- 28169 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 28170 - map is equivalent to an element of matchExpressions, whose key field is "key", the 28171 - operator is "In", and the values array contains only "value". The requirements are ANDed. 28172 - type: object 28173 - type: object 28174 - x-kubernetes-map-type: atomic 28175 - sourceRef: 28176 - description: |- 28177 - SourceRef refers to the resource giving access details 28178 - to a git repository. 28179 - properties: 28180 - apiVersion: 28181 - description: API version of the referent. 28182 - type: string 28183 - kind: 28184 - default: GitRepository 28185 - description: Kind of the referent. 28186 - enum: 28187 - - GitRepository 28188 - type: string 28189 - name: 28190 - description: Name of the referent. 28191 - type: string 28192 - namespace: 28193 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 28194 - resource object that contains the reference. 28195 - type: string 28196 - required: 28197 - - kind 28198 - - name 28199 - type: object 28200 - suspend: 28201 - description: |- 28202 - Suspend tells the controller to not run this automation, until 28203 - it is unset (or set to false). Defaults to false. 28204 - type: boolean 28205 - update: 28206 - default: 28207 - strategy: Setters 28208 - description: |- 28209 - Update gives the specification for how to update the files in 28210 - the repository. This can be left empty, to use the default 28211 - value. 28212 - properties: 28213 - path: 28214 - description: |- 28215 - Path to the directory containing the manifests to be updated. 28216 - Defaults to 'None', which translates to the root path 28217 - of the GitRepositoryRef. 28218 - type: string 28219 - strategy: 28220 - default: Setters 28221 - description: Strategy names the strategy to be used. 28222 - enum: 28223 - - Setters 28224 - type: string 28225 - required: 28226 - - strategy 28227 - type: object 28228 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 28229 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 28230 + type: string 28231 + semver: 28232 + description: SemVer tag expression to check out, takes 28233 + precedence over Tag. 28234 + type: string 28235 + tag: 28236 + description: Tag to check out, takes precedence over Branch. 28237 + type: string 28238 + type: object 28239 + required: 28240 + - ref 28241 + type: object 28242 + commit: 28243 + description: Commit specifies how to commit to the git repository. 28244 + properties: 28245 + author: 28246 + description: |- 28247 + Author gives the email and optionally the name to use as the 28248 + author of commits. 28249 + properties: 28250 + email: 28251 + description: Email gives the email to provide when making 28252 + a commit. 28253 + type: string 28254 + name: 28255 + description: Name gives the name to provide when making 28256 + a commit. 28257 + type: string 28258 required: 28259 - - interval 28260 - - sourceRef 28261 + - email 28262 type: object 28263 - status: 28264 - default: 28265 - observedGeneration: -1 28266 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 28267 + messageTemplate: 28268 + description: |- 28269 + MessageTemplate provides a template for the commit message, 28270 + into which will be interpolated the details of the change made. 28271 + type: string 28272 + messageTemplateValues: 28273 + additionalProperties: 28274 + type: string 28275 + description: |- 28276 + MessageTemplateValues provides additional values to be available to the 28277 + templating rendering. 28278 + type: object 28279 + signingKey: 28280 + description: SigningKey provides the option to sign commits 28281 + with a GPG key 28282 properties: 28283 - conditions: 28284 - items: 28285 - description: Condition contains details for one aspect of the current state of this API 28286 - Resource. 28287 - properties: 28288 - lastTransitionTime: 28289 - description: |- 28290 - lastTransitionTime is the last time the condition transitioned from one status to another. 28291 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 28292 - format: date-time 28293 - type: string 28294 - message: 28295 - description: |- 28296 - message is a human readable message indicating details about the transition. 28297 - This may be an empty string. 28298 - maxLength: 32768 28299 - type: string 28300 - observedGeneration: 28301 - description: |- 28302 - observedGeneration represents the .metadata.generation that the condition was set based upon. 28303 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 28304 - with respect to the current state of the instance. 28305 - format: int64 28306 - minimum: 0 28307 - type: integer 28308 - reason: 28309 - description: |- 28310 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 28311 - Producers of specific condition types may define expected values and meanings for this field, 28312 - and whether the values are considered a guaranteed API. 28313 - The value should be a CamelCase string. 28314 - This field may not be empty. 28315 - maxLength: 1024 28316 - minLength: 1 28317 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 28318 - type: string 28319 - status: 28320 - description: status of the condition, one of True, False, Unknown. 28321 - enum: 28322 - - "True" 28323 - - "False" 28324 - - Unknown 28325 - type: string 28326 - type: 28327 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 28328 - maxLength: 316 28329 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 28330 - type: string 28331 - required: 28332 - - lastTransitionTime 28333 - - message 28334 - - reason 28335 - - status 28336 - - type 28337 - type: object 28338 - type: array 28339 - lastAutomationRunTime: 28340 - description: |- 28341 - LastAutomationRunTime records the last time the controller ran 28342 - this automation through to completion (even if no updates were 28343 - made). 28344 - format: date-time 28345 - type: string 28346 - lastHandledReconcileAt: 28347 - description: |- 28348 - LastHandledReconcileAt holds the value of the most recent 28349 - reconcile request value, so a change of the annotation value 28350 - can be detected. 28351 - type: string 28352 - lastPushCommit: 28353 - description: |- 28354 - LastPushCommit records the SHA1 of the last commit made by the 28355 - controller, for this automation object 28356 - type: string 28357 - lastPushTime: 28358 - description: LastPushTime records the time of the last pushed change. 28359 - format: date-time 28360 - type: string 28361 - observedGeneration: 28362 - format: int64 28363 - type: integer 28364 - observedPolicies: 28365 - additionalProperties: 28366 - description: ImageRef represents an image reference. 28367 - properties: 28368 - name: 28369 - description: Name is the bare image's name. 28370 - type: string 28371 - tag: 28372 - description: Tag is the image's tag. 28373 - type: string 28374 - required: 28375 - - name 28376 - - tag 28377 - type: object 28378 - description: |- 28379 - ObservedPolicies is the list of observed ImagePolicies that were 28380 - considered by the ImageUpdateAutomation update process. 28381 - type: object 28382 - observedSourceRevision: 28383 - description: |- 28384 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 28385 - ObservedSourceRevision is the last observed source revision. This can be 28386 - used to determine if the source has been updated since last observation. 28387 - type: string 28388 + secretRef: 28389 + description: |- 28390 + SecretRef holds the name to a secret that contains a 'git.asc' key 28391 + corresponding to the ASCII Armored file containing the GPG signing 28392 + keypair as the value. It must be in the same namespace as the 28393 + ImageUpdateAutomation. 28394 + properties: 28395 + name: 28396 + description: Name of the referent. 28397 + type: string 28398 + required: 28399 + - name 28400 + type: object 28401 + required: 28402 + - secretRef 28403 type: object 28404 + required: 28405 + - author 28406 + type: object 28407 + push: 28408 + description: |- 28409 + Push specifies how and where to push commits made by the 28410 + automation. If missing, commits are pushed (back) to 28411 + `.spec.checkout.branch` or its default. 28412 + properties: 28413 + branch: 28414 + description: |- 28415 + Branch specifies that commits should be pushed to the branch 28416 + named. The branch is created using `.spec.checkout.branch` as the 28417 + starting point, if it doesn't already exist. 28418 + type: string 28419 + options: 28420 + additionalProperties: 28421 + type: string 28422 + description: |- 28423 + Options specifies the push options that are sent to the Git 28424 + server when performing a push operation. For details, see: 28425 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 28426 + type: object 28427 + refspec: 28428 + description: |- 28429 + Refspec specifies the Git Refspec to use for a push operation. 28430 + If both Branch and Refspec are provided, then the commit is pushed 28431 + to the branch and also using the specified refspec. 28432 + For more details about Git Refspecs, see: 28433 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 28434 + type: string 28435 + type: object 28436 + required: 28437 + - commit 28438 + type: object 28439 + interval: 28440 + description: |- 28441 + Interval gives an lower bound for how often the automation 28442 + run should be attempted. 28443 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 28444 + type: string 28445 + policySelector: 28446 + description: |- 28447 + PolicySelector allows to filter applied policies based on labels. 28448 + By default includes all policies in namespace. 28449 + properties: 28450 + matchExpressions: 28451 + description: matchExpressions is a list of label selector requirements. 28452 + The requirements are ANDed. 28453 + items: 28454 + description: |- 28455 + A label selector requirement is a selector that contains values, a key, and an operator that 28456 + relates the key and values. 28457 + properties: 28458 + key: 28459 + description: key is the label key that the selector applies 28460 + to. 28461 + type: string 28462 + operator: 28463 + description: |- 28464 + operator represents a key's relationship to a set of values. 28465 + Valid operators are In, NotIn, Exists and DoesNotExist. 28466 + type: string 28467 + values: 28468 + description: |- 28469 + values is an array of string values. If the operator is In or NotIn, 28470 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 28471 + the values array must be empty. This array is replaced during a strategic 28472 + merge patch. 28473 + items: 28474 + type: string 28475 + type: array 28476 + x-kubernetes-list-type: atomic 28477 + required: 28478 + - key 28479 + - operator 28480 + type: object 28481 + type: array 28482 + x-kubernetes-list-type: atomic 28483 + matchLabels: 28484 + additionalProperties: 28485 + type: string 28486 + description: |- 28487 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 28488 + map is equivalent to an element of matchExpressions, whose key field is "key", the 28489 + operator is "In", and the values array contains only "value". The requirements are ANDed. 28490 + type: object 28491 type: object 28492 - served: true 28493 - storage: true 28494 - subresources: 28495 - status: {} 28496 + x-kubernetes-map-type: atomic 28497 + sourceRef: 28498 + description: |- 28499 + SourceRef refers to the resource giving access details 28500 + to a git repository. 28501 + properties: 28502 + apiVersion: 28503 + description: API version of the referent. 28504 + type: string 28505 + kind: 28506 + default: GitRepository 28507 + description: Kind of the referent. 28508 + enum: 28509 + - GitRepository 28510 + type: string 28511 + name: 28512 + description: Name of the referent. 28513 + type: string 28514 + namespace: 28515 + description: Namespace of the referent, defaults to the namespace 28516 + of the Kubernetes resource object that contains the reference. 28517 + type: string 28518 + required: 28519 + - kind 28520 + - name 28521 + type: object 28522 + suspend: 28523 + description: |- 28524 + Suspend tells the controller to not run this automation, until 28525 + it is unset (or set to false). Defaults to false. 28526 + type: boolean 28527 + update: 28528 + default: 28529 + strategy: Setters 28530 + description: |- 28531 + Update gives the specification for how to update the files in 28532 + the repository. This can be left empty, to use the default 28533 + value. 28534 + properties: 28535 + path: 28536 + description: |- 28537 + Path to the directory containing the manifests to be updated. 28538 + Defaults to 'None', which translates to the root path 28539 + of the GitRepositoryRef. 28540 + type: string 28541 + strategy: 28542 + default: Setters 28543 + description: Strategy names the strategy to be used. 28544 + enum: 28545 + - Setters 28546 + type: string 28547 + required: 28548 + - strategy 28549 + type: object 28550 + required: 28551 + - interval 28552 + - sourceRef 28553 + type: object 28554 + status: 28555 + default: 28556 + observedGeneration: -1 28557 + description: ImageUpdateAutomationStatus defines the observed state of 28558 + ImageUpdateAutomation 28559 + properties: 28560 + conditions: 28561 + items: 28562 + description: Condition contains details for one aspect of the current 28563 + state of this API Resource. 28564 + properties: 28565 + lastTransitionTime: 28566 + description: |- 28567 + lastTransitionTime is the last time the condition transitioned from one status to another. 28568 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 28569 + format: date-time 28570 + type: string 28571 + message: 28572 + description: |- 28573 + message is a human readable message indicating details about the transition. 28574 + This may be an empty string. 28575 + maxLength: 32768 28576 + type: string 28577 + observedGeneration: 28578 + description: |- 28579 + observedGeneration represents the .metadata.generation that the condition was set based upon. 28580 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 28581 + with respect to the current state of the instance. 28582 + format: int64 28583 + minimum: 0 28584 + type: integer 28585 + reason: 28586 + description: |- 28587 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 28588 + Producers of specific condition types may define expected values and meanings for this field, 28589 + and whether the values are considered a guaranteed API. 28590 + The value should be a CamelCase string. 28591 + This field may not be empty. 28592 + maxLength: 1024 28593 + minLength: 1 28594 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 28595 + type: string 28596 + status: 28597 + description: status of the condition, one of True, False, Unknown. 28598 + enum: 28599 + - "True" 28600 + - "False" 28601 + - Unknown 28602 + type: string 28603 + type: 28604 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 28605 + maxLength: 316 28606 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 28607 + type: string 28608 + required: 28609 + - lastTransitionTime 28610 + - message 28611 + - reason 28612 + - status 28613 + - type 28614 + type: object 28615 + type: array 28616 + lastAutomationRunTime: 28617 + description: |- 28618 + LastAutomationRunTime records the last time the controller ran 28619 + this automation through to completion (even if no updates were 28620 + made). 28621 + format: date-time 28622 + type: string 28623 + lastHandledReconcileAt: 28624 + description: |- 28625 + LastHandledReconcileAt holds the value of the most recent 28626 + reconcile request value, so a change of the annotation value 28627 + can be detected. 28628 + type: string 28629 + lastPushCommit: 28630 + description: |- 28631 + LastPushCommit records the SHA1 of the last commit made by the 28632 + controller, for this automation object 28633 + type: string 28634 + lastPushTime: 28635 + description: LastPushTime records the time of the last pushed change. 28636 + format: date-time 28637 + type: string 28638 + observedGeneration: 28639 + format: int64 28640 + type: integer 28641 + observedPolicies: 28642 + additionalProperties: 28643 + description: ImageRef represents an image reference. 28644 + properties: 28645 + digest: 28646 + description: Digest is the image's digest. 28647 + type: string 28648 + name: 28649 + description: Name is the bare image's name. 28650 + type: string 28651 + tag: 28652 + description: Tag is the image's tag. 28653 + type: string 28654 + required: 28655 + - name 28656 + - tag 28657 + type: object 28658 + description: |- 28659 + ObservedPolicies is the list of observed ImagePolicies that were 28660 + considered by the ImageUpdateAutomation update process. 28661 + type: object 28662 + observedSourceRevision: 28663 + description: |- 28664 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 28665 + ObservedSourceRevision is the last observed source revision. This can be 28666 + used to determine if the source has been updated since last observation. 28667 + type: string 28668 + type: object 28669 + type: object 28670 + served: true 28671 + storage: true 28672 + subresources: 28673 + status: {} 28674 --- 28675 apiVersion: v1 28676 kind: ServiceAccount 28677 metadata: 28678 - labels: 28679 - app.kubernetes.io/component: image-automation-controller 28680 - app.kubernetes.io/instance: flux-system 28681 - app.kubernetes.io/part-of: flux 28682 - app.kubernetes.io/version: v2.5.1 28683 - name: image-automation-controller 28684 - namespace: flux-system 28685 + labels: 28686 + app.kubernetes.io/component: image-automation-controller 28687 + app.kubernetes.io/instance: flux-system 28688 + app.kubernetes.io/part-of: flux 28689 + app.kubernetes.io/version: v2.6.4 28690 + name: image-automation-controller 28691 + namespace: flux-system 28692 --- 28693 apiVersion: apps/v1 28694 kind: Deployment 28695 metadata: 28696 - labels: 28697 - app.kubernetes.io/component: image-automation-controller 28698 - app.kubernetes.io/instance: flux-system 28699 - app.kubernetes.io/part-of: flux 28700 - app.kubernetes.io/version: v2.5.1 28701 - control-plane: controller 28702 - name: image-automation-controller 28703 - namespace: flux-system 28704 + labels: 28705 + app.kubernetes.io/component: image-automation-controller 28706 + app.kubernetes.io/instance: flux-system 28707 + app.kubernetes.io/part-of: flux 28708 + app.kubernetes.io/version: v2.6.4 28709 + control-plane: controller 28710 + name: image-automation-controller 28711 + namespace: flux-system 28712 spec: 28713 - replicas: 1 28714 - selector: 28715 - matchLabels: 28716 - app: image-automation-controller 28717 - template: 28718 - metadata: 28719 - annotations: 28720 - prometheus.io/port: "8080" 28721 - prometheus.io/scrape: "true" 28722 - labels: 28723 - app: image-automation-controller 28724 - spec: 28725 - containers: 28726 - - args: 28727 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 28728 - - --watch-all-namespaces=true 28729 - - --log-level=info 28730 - - --log-encoding=json 28731 - - --enable-leader-election 28732 - env: 28733 - - name: RUNTIME_NAMESPACE 28734 - valueFrom: 28735 - fieldRef: 28736 - fieldPath: metadata.namespace 28737 - - name: GOMAXPROCS 28738 - valueFrom: 28739 - resourceFieldRef: 28740 - containerName: manager 28741 - resource: limits.cpu 28742 - - name: GOMEMLIMIT 28743 - valueFrom: 28744 - resourceFieldRef: 28745 - containerName: manager 28746 - resource: limits.memory 28747 - image: ghcr.io/fluxcd/image-automation-controller:v0.40.0 28748 - imagePullPolicy: IfNotPresent 28749 - livenessProbe: 28750 - httpGet: 28751 - path: /healthz 28752 - port: healthz 28753 - name: manager 28754 - ports: 28755 - - containerPort: 8080 28756 - name: http-prom 28757 - protocol: TCP 28758 - - containerPort: 9440 28759 - name: healthz 28760 - protocol: TCP 28761 - readinessProbe: 28762 - httpGet: 28763 - path: /readyz 28764 - port: healthz 28765 - resources: 28766 - limits: 28767 - cpu: 1000m 28768 - memory: 1Gi 28769 - requests: 28770 - cpu: 100m 28771 - memory: 64Mi 28772 - securityContext: 28773 - allowPrivilegeEscalation: false 28774 - capabilities: 28775 - drop: 28776 - - ALL 28777 - readOnlyRootFilesystem: true 28778 - runAsNonRoot: true 28779 - seccompProfile: 28780 - type: RuntimeDefault 28781 - volumeMounts: 28782 - - mountPath: /tmp 28783 - name: temp 28784 - nodeSelector: 28785 - kubernetes.io/os: linux 28786 - securityContext: 28787 - fsGroup: 1337 28788 - serviceAccountName: image-automation-controller 28789 - terminationGracePeriodSeconds: 10 28790 - volumes: 28791 - - emptyDir: {} 28792 - name: temp 28793 + replicas: 1 28794 + selector: 28795 + matchLabels: 28796 + app: image-automation-controller 28797 + template: 28798 + metadata: 28799 + annotations: 28800 + prometheus.io/port: "8080" 28801 + prometheus.io/scrape: "true" 28802 + labels: 28803 + app: image-automation-controller 28804 + spec: 28805 + containers: 28806 + - args: 28807 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 28808 + - --watch-all-namespaces=true 28809 + - --log-level=info 28810 + - --log-encoding=json 28811 + - --enable-leader-election 28812 + env: 28813 + - name: RUNTIME_NAMESPACE 28814 + valueFrom: 28815 + fieldRef: 28816 + fieldPath: metadata.namespace 28817 + - name: GOMAXPROCS 28818 + valueFrom: 28819 + resourceFieldRef: 28820 + containerName: manager 28821 + resource: limits.cpu 28822 + - name: GOMEMLIMIT 28823 + valueFrom: 28824 + resourceFieldRef: 28825 + containerName: manager 28826 + resource: limits.memory 28827 + image: ghcr.io/fluxcd/image-automation-controller:v0.41.2 28828 + imagePullPolicy: IfNotPresent 28829 + livenessProbe: 28830 + httpGet: 28831 + path: /healthz 28832 + port: healthz 28833 + name: manager 28834 + ports: 28835 + - containerPort: 8080 28836 + name: http-prom 28837 + protocol: TCP 28838 + - containerPort: 9440 28839 + name: healthz 28840 + protocol: TCP 28841 + readinessProbe: 28842 + httpGet: 28843 + path: /readyz 28844 + port: healthz 28845 + resources: 28846 + limits: 28847 + cpu: 1000m 28848 + memory: 1Gi 28849 + requests: 28850 + cpu: 100m 28851 + memory: 64Mi 28852 + securityContext: 28853 + allowPrivilegeEscalation: false 28854 + capabilities: 28855 + drop: 28856 + - ALL 28857 + readOnlyRootFilesystem: true 28858 + runAsNonRoot: true 28859 + seccompProfile: 28860 + type: RuntimeDefault 28861 + volumeMounts: 28862 + - mountPath: /tmp 28863 + name: temp 28864 + nodeSelector: 28865 + kubernetes.io/os: linux 28866 + securityContext: 28867 + fsGroup: 1337 28868 + serviceAccountName: image-automation-controller 28869 + terminationGracePeriodSeconds: 10 28870 + volumes: 28871 + - emptyDir: {} 28872 + name: temp