18.diff (1361096B)
1 diff --git a/clusters/talos_cluster/flux-system/gotk-components.yaml b/clusters/talos_cluster/flux-system/gotk-components.yaml 2 index 34447f65..250ad0ca 100644 3 --- a/clusters/talos_cluster/flux-system/gotk-components.yaml 4 +++ b/clusters/talos_cluster/flux-system/gotk-components.yaml 5 @@ -1,12264 +1,12440 @@ 6 +--- 7 # This manifest was generated by flux. DO NOT EDIT. 8 -# Flux Version: v2.7.3 9 +# Flux Version: v2.7.5 10 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller 11 apiVersion: v1 12 kind: Namespace 13 metadata: 14 - labels: 15 - app.kubernetes.io/instance: flux-system 16 - app.kubernetes.io/part-of: flux 17 - app.kubernetes.io/version: v2.7.3 18 - pod-security.kubernetes.io/warn: restricted 19 - pod-security.kubernetes.io/warn-version: latest 20 - name: flux-system 21 + labels: 22 + app.kubernetes.io/instance: flux-system 23 + app.kubernetes.io/part-of: flux 24 + app.kubernetes.io/version: v2.7.5 25 + pod-security.kubernetes.io/warn: restricted 26 + pod-security.kubernetes.io/warn-version: latest 27 + name: flux-system 28 --- 29 apiVersion: networking.k8s.io/v1 30 kind: NetworkPolicy 31 metadata: 32 - labels: 33 - app.kubernetes.io/instance: flux-system 34 - app.kubernetes.io/part-of: flux 35 - app.kubernetes.io/version: v2.7.3 36 - name: allow-egress 37 - namespace: flux-system 38 + labels: 39 + app.kubernetes.io/instance: flux-system 40 + app.kubernetes.io/part-of: flux 41 + app.kubernetes.io/version: v2.7.5 42 + name: allow-egress 43 + namespace: flux-system 44 spec: 45 - egress: 46 - - {} 47 - ingress: 48 - - from: 49 - - podSelector: {} 50 - podSelector: {} 51 - policyTypes: 52 - - Ingress 53 - - Egress 54 + egress: 55 + - {} 56 + ingress: 57 + - from: 58 + - podSelector: {} 59 + podSelector: {} 60 + policyTypes: 61 + - Ingress 62 + - Egress 63 --- 64 apiVersion: networking.k8s.io/v1 65 kind: NetworkPolicy 66 metadata: 67 - labels: 68 - app.kubernetes.io/instance: flux-system 69 - app.kubernetes.io/part-of: flux 70 - app.kubernetes.io/version: v2.7.3 71 - name: allow-scraping 72 - namespace: flux-system 73 + labels: 74 + app.kubernetes.io/instance: flux-system 75 + app.kubernetes.io/part-of: flux 76 + app.kubernetes.io/version: v2.7.5 77 + name: allow-scraping 78 + namespace: flux-system 79 spec: 80 - ingress: 81 - - from: 82 - - namespaceSelector: {} 83 - ports: 84 - - port: 8080 85 - protocol: TCP 86 - podSelector: {} 87 - policyTypes: 88 - - Ingress 89 + ingress: 90 + - from: 91 + - namespaceSelector: {} 92 + ports: 93 + - port: 8080 94 + protocol: TCP 95 + podSelector: {} 96 + policyTypes: 97 + - Ingress 98 --- 99 apiVersion: networking.k8s.io/v1 100 kind: NetworkPolicy 101 metadata: 102 - labels: 103 - app.kubernetes.io/instance: flux-system 104 - app.kubernetes.io/part-of: flux 105 - app.kubernetes.io/version: v2.7.3 106 - name: allow-webhooks 107 - namespace: flux-system 108 + labels: 109 + app.kubernetes.io/instance: flux-system 110 + app.kubernetes.io/part-of: flux 111 + app.kubernetes.io/version: v2.7.5 112 + name: allow-webhooks 113 + namespace: flux-system 114 spec: 115 - ingress: 116 - - from: 117 - - namespaceSelector: {} 118 - podSelector: 119 - matchLabels: 120 - app: notification-controller 121 - policyTypes: 122 - - Ingress 123 + ingress: 124 + - from: 125 + - namespaceSelector: {} 126 + podSelector: 127 + matchLabels: 128 + app: notification-controller 129 + policyTypes: 130 + - Ingress 131 --- 132 apiVersion: v1 133 kind: ResourceQuota 134 metadata: 135 - labels: 136 - app.kubernetes.io/instance: flux-system 137 - app.kubernetes.io/part-of: flux 138 - app.kubernetes.io/version: v2.7.3 139 - name: critical-pods-flux-system 140 - namespace: flux-system 141 + labels: 142 + app.kubernetes.io/instance: flux-system 143 + app.kubernetes.io/part-of: flux 144 + app.kubernetes.io/version: v2.7.5 145 + name: critical-pods-flux-system 146 + namespace: flux-system 147 spec: 148 - hard: 149 - pods: "1000" 150 - scopeSelector: 151 - matchExpressions: 152 - - operator: In 153 - scopeName: PriorityClass 154 - values: 155 - - system-node-critical 156 - - system-cluster-critical 157 + hard: 158 + pods: "1000" 159 + scopeSelector: 160 + matchExpressions: 161 + - operator: In 162 + scopeName: PriorityClass 163 + values: 164 + - system-node-critical 165 + - system-cluster-critical 166 --- 167 apiVersion: rbac.authorization.k8s.io/v1 168 kind: ClusterRole 169 metadata: 170 - labels: 171 - app.kubernetes.io/instance: flux-system 172 - app.kubernetes.io/part-of: flux 173 - app.kubernetes.io/version: v2.7.3 174 - name: crd-controller-flux-system 175 + labels: 176 + app.kubernetes.io/instance: flux-system 177 + app.kubernetes.io/part-of: flux 178 + app.kubernetes.io/version: v2.7.5 179 + name: crd-controller-flux-system 180 rules: 181 - - apiGroups: 182 - - source.toolkit.fluxcd.io 183 - resources: 184 - - '*' 185 - verbs: 186 - - '*' 187 - - apiGroups: 188 - - kustomize.toolkit.fluxcd.io 189 - resources: 190 - - '*' 191 - verbs: 192 - - '*' 193 - - apiGroups: 194 - - helm.toolkit.fluxcd.io 195 - resources: 196 - - '*' 197 - verbs: 198 - - '*' 199 - - apiGroups: 200 - - notification.toolkit.fluxcd.io 201 - resources: 202 - - '*' 203 - verbs: 204 - - '*' 205 - - apiGroups: 206 - - image.toolkit.fluxcd.io 207 - resources: 208 - - '*' 209 - verbs: 210 - - '*' 211 - - apiGroups: 212 - - source.extensions.fluxcd.io 213 - resources: 214 - - '*' 215 - verbs: 216 - - '*' 217 - - apiGroups: 218 - - "" 219 - resources: 220 - - namespaces 221 - - secrets 222 - - configmaps 223 - - serviceaccounts 224 - verbs: 225 - - get 226 - - list 227 - - watch 228 - - apiGroups: 229 - - "" 230 - resources: 231 - - events 232 - verbs: 233 - - create 234 - - patch 235 - - apiGroups: 236 - - "" 237 - resources: 238 - - configmaps 239 - verbs: 240 - - get 241 - - list 242 - - watch 243 - - create 244 - - update 245 - - patch 246 - - delete 247 - - apiGroups: 248 - - "" 249 - resources: 250 - - configmaps/status 251 - verbs: 252 - - get 253 - - update 254 - - patch 255 - - apiGroups: 256 - - coordination.k8s.io 257 - resources: 258 - - leases 259 - verbs: 260 - - get 261 - - list 262 - - watch 263 - - create 264 - - update 265 - - patch 266 - - delete 267 - - apiGroups: 268 - - "" 269 - resources: 270 - - serviceaccounts/token 271 - verbs: 272 - - create 273 - - nonResourceURLs: 274 - - /livez/ping 275 - verbs: 276 - - head 277 +- apiGroups: 278 + - source.toolkit.fluxcd.io 279 + resources: 280 + - '*' 281 + verbs: 282 + - '*' 283 +- apiGroups: 284 + - kustomize.toolkit.fluxcd.io 285 + resources: 286 + - '*' 287 + verbs: 288 + - '*' 289 +- apiGroups: 290 + - helm.toolkit.fluxcd.io 291 + resources: 292 + - '*' 293 + verbs: 294 + - '*' 295 +- apiGroups: 296 + - notification.toolkit.fluxcd.io 297 + resources: 298 + - '*' 299 + verbs: 300 + - '*' 301 +- apiGroups: 302 + - image.toolkit.fluxcd.io 303 + resources: 304 + - '*' 305 + verbs: 306 + - '*' 307 +- apiGroups: 308 + - source.extensions.fluxcd.io 309 + resources: 310 + - '*' 311 + verbs: 312 + - '*' 313 +- apiGroups: 314 + - "" 315 + resources: 316 + - namespaces 317 + - secrets 318 + - configmaps 319 + - serviceaccounts 320 + verbs: 321 + - get 322 + - list 323 + - watch 324 +- apiGroups: 325 + - "" 326 + resources: 327 + - events 328 + verbs: 329 + - create 330 + - patch 331 +- apiGroups: 332 + - "" 333 + resources: 334 + - configmaps 335 + verbs: 336 + - get 337 + - list 338 + - watch 339 + - create 340 + - update 341 + - patch 342 + - delete 343 +- apiGroups: 344 + - "" 345 + resources: 346 + - configmaps/status 347 + verbs: 348 + - get 349 + - update 350 + - patch 351 +- apiGroups: 352 + - coordination.k8s.io 353 + resources: 354 + - leases 355 + verbs: 356 + - get 357 + - list 358 + - watch 359 + - create 360 + - update 361 + - patch 362 + - delete 363 +- apiGroups: 364 + - "" 365 + resources: 366 + - serviceaccounts/token 367 + verbs: 368 + - create 369 +- nonResourceURLs: 370 + - /livez/ping 371 + verbs: 372 + - head 373 --- 374 apiVersion: rbac.authorization.k8s.io/v1 375 kind: ClusterRole 376 metadata: 377 - labels: 378 - app.kubernetes.io/instance: flux-system 379 - app.kubernetes.io/part-of: flux 380 - app.kubernetes.io/version: v2.7.3 381 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 382 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 383 - name: flux-edit-flux-system 384 + labels: 385 + app.kubernetes.io/instance: flux-system 386 + app.kubernetes.io/part-of: flux 387 + app.kubernetes.io/version: v2.7.5 388 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 389 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 390 + name: flux-edit-flux-system 391 rules: 392 - - apiGroups: 393 - - notification.toolkit.fluxcd.io 394 - - source.toolkit.fluxcd.io 395 - - helm.toolkit.fluxcd.io 396 - - image.toolkit.fluxcd.io 397 - - kustomize.toolkit.fluxcd.io 398 - resources: 399 - - '*' 400 - verbs: 401 - - create 402 - - delete 403 - - deletecollection 404 - - patch 405 - - update 406 +- apiGroups: 407 + - notification.toolkit.fluxcd.io 408 + - source.toolkit.fluxcd.io 409 + - source.extensions.fluxcd.io 410 + - helm.toolkit.fluxcd.io 411 + - image.toolkit.fluxcd.io 412 + - kustomize.toolkit.fluxcd.io 413 + resources: 414 + - '*' 415 + verbs: 416 + - create 417 + - delete 418 + - deletecollection 419 + - patch 420 + - update 421 --- 422 apiVersion: rbac.authorization.k8s.io/v1 423 kind: ClusterRole 424 metadata: 425 - labels: 426 - app.kubernetes.io/instance: flux-system 427 - app.kubernetes.io/part-of: flux 428 - app.kubernetes.io/version: v2.7.3 429 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 430 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 431 - rbac.authorization.k8s.io/aggregate-to-view: "true" 432 - name: flux-view-flux-system 433 + labels: 434 + app.kubernetes.io/instance: flux-system 435 + app.kubernetes.io/part-of: flux 436 + app.kubernetes.io/version: v2.7.5 437 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 438 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 439 + rbac.authorization.k8s.io/aggregate-to-view: "true" 440 + name: flux-view-flux-system 441 rules: 442 - - apiGroups: 443 - - notification.toolkit.fluxcd.io 444 - - source.toolkit.fluxcd.io 445 - - helm.toolkit.fluxcd.io 446 - - image.toolkit.fluxcd.io 447 - - kustomize.toolkit.fluxcd.io 448 - resources: 449 - - '*' 450 - verbs: 451 - - get 452 - - list 453 - - watch 454 +- apiGroups: 455 + - notification.toolkit.fluxcd.io 456 + - source.toolkit.fluxcd.io 457 + - source.extensions.fluxcd.io 458 + - helm.toolkit.fluxcd.io 459 + - image.toolkit.fluxcd.io 460 + - kustomize.toolkit.fluxcd.io 461 + resources: 462 + - '*' 463 + verbs: 464 + - get 465 + - list 466 + - watch 467 --- 468 apiVersion: rbac.authorization.k8s.io/v1 469 kind: ClusterRoleBinding 470 metadata: 471 - labels: 472 - app.kubernetes.io/instance: flux-system 473 - app.kubernetes.io/part-of: flux 474 - app.kubernetes.io/version: v2.7.3 475 - name: cluster-reconciler-flux-system 476 + labels: 477 + app.kubernetes.io/instance: flux-system 478 + app.kubernetes.io/part-of: flux 479 + app.kubernetes.io/version: v2.7.5 480 + name: cluster-reconciler-flux-system 481 roleRef: 482 - apiGroup: rbac.authorization.k8s.io 483 - kind: ClusterRole 484 - name: cluster-admin 485 + apiGroup: rbac.authorization.k8s.io 486 + kind: ClusterRole 487 + name: cluster-admin 488 subjects: 489 - - kind: ServiceAccount 490 - name: kustomize-controller 491 - namespace: flux-system 492 - - kind: ServiceAccount 493 - name: helm-controller 494 - namespace: flux-system 495 +- kind: ServiceAccount 496 + name: kustomize-controller 497 + namespace: flux-system 498 +- kind: ServiceAccount 499 + name: helm-controller 500 + namespace: flux-system 501 --- 502 apiVersion: rbac.authorization.k8s.io/v1 503 kind: ClusterRoleBinding 504 metadata: 505 - labels: 506 - app.kubernetes.io/instance: flux-system 507 - app.kubernetes.io/part-of: flux 508 - app.kubernetes.io/version: v2.7.3 509 - name: crd-controller-flux-system 510 + labels: 511 + app.kubernetes.io/instance: flux-system 512 + app.kubernetes.io/part-of: flux 513 + app.kubernetes.io/version: v2.7.5 514 + name: crd-controller-flux-system 515 roleRef: 516 - apiGroup: rbac.authorization.k8s.io 517 - kind: ClusterRole 518 - name: crd-controller-flux-system 519 + apiGroup: rbac.authorization.k8s.io 520 + kind: ClusterRole 521 + name: crd-controller-flux-system 522 subjects: 523 - - kind: ServiceAccount 524 - name: kustomize-controller 525 - namespace: flux-system 526 - - kind: ServiceAccount 527 - name: helm-controller 528 - namespace: flux-system 529 - - kind: ServiceAccount 530 - name: source-controller 531 - namespace: flux-system 532 - - kind: ServiceAccount 533 - name: notification-controller 534 - namespace: flux-system 535 - - kind: ServiceAccount 536 - name: image-reflector-controller 537 - namespace: flux-system 538 - - kind: ServiceAccount 539 - name: image-automation-controller 540 - namespace: flux-system 541 - - kind: ServiceAccount 542 - name: source-watcher 543 - namespace: flux-system 544 +- kind: ServiceAccount 545 + name: kustomize-controller 546 + namespace: flux-system 547 +- kind: ServiceAccount 548 + name: helm-controller 549 + namespace: flux-system 550 +- kind: ServiceAccount 551 + name: source-controller 552 + namespace: flux-system 553 +- kind: ServiceAccount 554 + name: notification-controller 555 + namespace: flux-system 556 +- kind: ServiceAccount 557 + name: image-reflector-controller 558 + namespace: flux-system 559 +- kind: ServiceAccount 560 + name: image-automation-controller 561 + namespace: flux-system 562 +- kind: ServiceAccount 563 + name: source-watcher 564 + namespace: flux-system 565 --- 566 apiVersion: apiextensions.k8s.io/v1 567 kind: CustomResourceDefinition 568 metadata: 569 - annotations: 570 - controller-gen.kubebuilder.io/version: v0.19.0 571 - labels: 572 - app.kubernetes.io/component: source-controller 573 - app.kubernetes.io/instance: flux-system 574 - app.kubernetes.io/part-of: flux 575 - app.kubernetes.io/version: v2.7.3 576 - name: buckets.source.toolkit.fluxcd.io 577 + annotations: 578 + controller-gen.kubebuilder.io/version: v0.19.0 579 + labels: 580 + app.kubernetes.io/component: source-controller 581 + app.kubernetes.io/instance: flux-system 582 + app.kubernetes.io/part-of: flux 583 + app.kubernetes.io/version: v2.7.5 584 + name: buckets.source.toolkit.fluxcd.io 585 spec: 586 - group: source.toolkit.fluxcd.io 587 - names: 588 - kind: Bucket 589 - listKind: BucketList 590 - plural: buckets 591 - singular: bucket 592 - scope: Namespaced 593 - versions: 594 - - additionalPrinterColumns: 595 - - jsonPath: .spec.endpoint 596 - name: Endpoint 597 - type: string 598 - - jsonPath: .metadata.creationTimestamp 599 - name: Age 600 - type: date 601 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 602 - name: Ready 603 - type: string 604 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 605 - name: Status 606 - type: string 607 - name: v1 608 - schema: 609 - openAPIV3Schema: 610 - description: Bucket is the Schema for the buckets API. 611 - properties: 612 - apiVersion: 613 - description: |- 614 - APIVersion defines the versioned schema of this representation of an object. 615 - Servers should convert recognized schemas to the latest internal value, and 616 - may reject unrecognized values. 617 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 618 - type: string 619 - kind: 620 - description: |- 621 - Kind is a string value representing the REST resource this object represents. 622 - Servers may infer this from the endpoint the client submits requests to. 623 - Cannot be updated. 624 - In CamelCase. 625 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 626 - type: string 627 - metadata: 628 - type: object 629 - spec: 630 - description: |- 631 - BucketSpec specifies the required configuration to produce an Artifact for 632 - an object storage bucket. 633 - properties: 634 - bucketName: 635 - description: BucketName is the name of the object storage bucket. 636 - type: string 637 - certSecretRef: 638 - description: |- 639 - CertSecretRef can be given the name of a Secret containing 640 - either or both of 641 + group: source.toolkit.fluxcd.io 642 + names: 643 + kind: Bucket 644 + listKind: BucketList 645 + plural: buckets 646 + singular: bucket 647 + scope: Namespaced 648 + versions: 649 + - additionalPrinterColumns: 650 + - jsonPath: .spec.endpoint 651 + name: Endpoint 652 + type: string 653 + - jsonPath: .metadata.creationTimestamp 654 + name: Age 655 + type: date 656 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 657 + name: Ready 658 + type: string 659 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 660 + name: Status 661 + type: string 662 + name: v1 663 + schema: 664 + openAPIV3Schema: 665 + description: Bucket is the Schema for the buckets API. 666 + properties: 667 + apiVersion: 668 + description: |- 669 + APIVersion defines the versioned schema of this representation of an object. 670 + Servers should convert recognized schemas to the latest internal value, and 671 + may reject unrecognized values. 672 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 673 + type: string 674 + kind: 675 + description: |- 676 + Kind is a string value representing the REST resource this object represents. 677 + Servers may infer this from the endpoint the client submits requests to. 678 + Cannot be updated. 679 + In CamelCase. 680 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 681 + type: string 682 + metadata: 683 + type: object 684 + spec: 685 + description: |- 686 + BucketSpec specifies the required configuration to produce an Artifact for 687 + an object storage bucket. 688 + properties: 689 + bucketName: 690 + description: BucketName is the name of the object storage bucket. 691 + type: string 692 + certSecretRef: 693 + description: |- 694 + CertSecretRef can be given the name of a Secret containing 695 + either or both of 696 697 - - a PEM-encoded client certificate (`tls.crt`) and private 698 - key (`tls.key`); 699 - - a PEM-encoded CA certificate (`ca.crt`) 700 + - a PEM-encoded client certificate (`tls.crt`) and private 701 + key (`tls.key`); 702 + - a PEM-encoded CA certificate (`ca.crt`) 703 704 - and whichever are supplied, will be used for connecting to the 705 - bucket. The client cert and key are useful if you are 706 - authenticating with a certificate; the CA cert is useful if 707 - you are using a self-signed server certificate. The Secret must 708 - be of type `Opaque` or `kubernetes.io/tls`. 709 + and whichever are supplied, will be used for connecting to the 710 + bucket. The client cert and key are useful if you are 711 + authenticating with a certificate; the CA cert is useful if 712 + you are using a self-signed server certificate. The Secret must 713 + be of type `Opaque` or `kubernetes.io/tls`. 714 715 - This field is only supported for the `generic` provider. 716 - properties: 717 - name: 718 - description: Name of the referent. 719 - type: string 720 - required: 721 - - name 722 - type: object 723 - endpoint: 724 - description: Endpoint is the object storage address the BucketName is located at. 725 - type: string 726 - ignore: 727 - description: |- 728 - Ignore overrides the set of excluded patterns in the .sourceignore format 729 - (which is the same as .gitignore). If not provided, a default will be used, 730 - consult the documentation for your version to find out what those are. 731 - type: string 732 - insecure: 733 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 734 - type: boolean 735 - interval: 736 - description: |- 737 - Interval at which the Bucket Endpoint is checked for updates. 738 - This interval is approximate and may be subject to jitter to ensure 739 - efficient use of resources. 740 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 741 - type: string 742 - prefix: 743 - description: Prefix to use for server-side filtering of files in the Bucket. 744 - type: string 745 - provider: 746 - default: generic 747 - description: |- 748 - Provider of the object storage bucket. 749 - Defaults to 'generic', which expects an S3 (API) compatible object 750 - storage. 751 - enum: 752 - - generic 753 - - aws 754 - - gcp 755 - - azure 756 - type: string 757 - proxySecretRef: 758 - description: |- 759 - ProxySecretRef specifies the Secret containing the proxy configuration 760 - to use while communicating with the Bucket server. 761 - properties: 762 - name: 763 - description: Name of the referent. 764 - type: string 765 - required: 766 - - name 767 - type: object 768 - region: 769 - description: Region of the Endpoint where the BucketName is located in. 770 - type: string 771 - secretRef: 772 - description: |- 773 - SecretRef specifies the Secret containing authentication credentials 774 - for the Bucket. 775 - properties: 776 - name: 777 - description: Name of the referent. 778 - type: string 779 - required: 780 - - name 781 - type: object 782 - serviceAccountName: 783 - description: |- 784 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 785 - the bucket. This field is only supported for the 'gcp' and 'aws' providers. 786 - For more information about workload identity: 787 - https://fluxcd.io/flux/components/source/buckets/#workload-identity 788 - type: string 789 - sts: 790 - description: |- 791 - STS specifies the required configuration to use a Security Token 792 - Service for fetching temporary credentials to authenticate in a 793 - Bucket provider. 794 + This field is only supported for the `generic` provider. 795 + properties: 796 + name: 797 + description: Name of the referent. 798 + type: string 799 + required: 800 + - name 801 + type: object 802 + endpoint: 803 + description: Endpoint is the object storage address the BucketName 804 + is located at. 805 + type: string 806 + ignore: 807 + description: |- 808 + Ignore overrides the set of excluded patterns in the .sourceignore format 809 + (which is the same as .gitignore). If not provided, a default will be used, 810 + consult the documentation for your version to find out what those are. 811 + type: string 812 + insecure: 813 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 814 + type: boolean 815 + interval: 816 + description: |- 817 + Interval at which the Bucket Endpoint is checked for updates. 818 + This interval is approximate and may be subject to jitter to ensure 819 + efficient use of resources. 820 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 821 + type: string 822 + prefix: 823 + description: Prefix to use for server-side filtering of files in the 824 + Bucket. 825 + type: string 826 + provider: 827 + default: generic 828 + description: |- 829 + Provider of the object storage bucket. 830 + Defaults to 'generic', which expects an S3 (API) compatible object 831 + storage. 832 + enum: 833 + - generic 834 + - aws 835 + - gcp 836 + - azure 837 + type: string 838 + proxySecretRef: 839 + description: |- 840 + ProxySecretRef specifies the Secret containing the proxy configuration 841 + to use while communicating with the Bucket server. 842 + properties: 843 + name: 844 + description: Name of the referent. 845 + type: string 846 + required: 847 + - name 848 + type: object 849 + region: 850 + description: Region of the Endpoint where the BucketName is located 851 + in. 852 + type: string 853 + secretRef: 854 + description: |- 855 + SecretRef specifies the Secret containing authentication credentials 856 + for the Bucket. 857 + properties: 858 + name: 859 + description: Name of the referent. 860 + type: string 861 + required: 862 + - name 863 + type: object 864 + serviceAccountName: 865 + description: |- 866 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 867 + the bucket. This field is only supported for the 'gcp' and 'aws' providers. 868 + For more information about workload identity: 869 + https://fluxcd.io/flux/components/source/buckets/#workload-identity 870 + type: string 871 + sts: 872 + description: |- 873 + STS specifies the required configuration to use a Security Token 874 + Service for fetching temporary credentials to authenticate in a 875 + Bucket provider. 876 877 - This field is only supported for the `aws` and `generic` providers. 878 - properties: 879 - certSecretRef: 880 - description: |- 881 - CertSecretRef can be given the name of a Secret containing 882 - either or both of 883 + This field is only supported for the `aws` and `generic` providers. 884 + properties: 885 + certSecretRef: 886 + description: |- 887 + CertSecretRef can be given the name of a Secret containing 888 + either or both of 889 890 - - a PEM-encoded client certificate (`tls.crt`) and private 891 - key (`tls.key`); 892 - - a PEM-encoded CA certificate (`ca.crt`) 893 + - a PEM-encoded client certificate (`tls.crt`) and private 894 + key (`tls.key`); 895 + - a PEM-encoded CA certificate (`ca.crt`) 896 897 - and whichever are supplied, will be used for connecting to the 898 - STS endpoint. The client cert and key are useful if you are 899 - authenticating with a certificate; the CA cert is useful if 900 - you are using a self-signed server certificate. The Secret must 901 - be of type `Opaque` or `kubernetes.io/tls`. 902 + and whichever are supplied, will be used for connecting to the 903 + STS endpoint. The client cert and key are useful if you are 904 + authenticating with a certificate; the CA cert is useful if 905 + you are using a self-signed server certificate. The Secret must 906 + be of type `Opaque` or `kubernetes.io/tls`. 907 908 - This field is only supported for the `ldap` provider. 909 - properties: 910 - name: 911 - description: Name of the referent. 912 - type: string 913 - required: 914 - - name 915 - type: object 916 - endpoint: 917 - description: |- 918 - Endpoint is the HTTP/S endpoint of the Security Token Service from 919 - where temporary credentials will be fetched. 920 - pattern: ^(http|https)://.*$ 921 - type: string 922 - provider: 923 - description: Provider of the Security Token Service. 924 - enum: 925 - - aws 926 - - ldap 927 - type: string 928 - secretRef: 929 - description: |- 930 - SecretRef specifies the Secret containing authentication credentials 931 - for the STS endpoint. This Secret must contain the fields `username` 932 - and `password` and is supported only for the `ldap` provider. 933 - properties: 934 - name: 935 - description: Name of the referent. 936 - type: string 937 - required: 938 - - name 939 - type: object 940 - required: 941 - - endpoint 942 - - provider 943 - type: object 944 - suspend: 945 - description: |- 946 - Suspend tells the controller to suspend the reconciliation of this 947 - Bucket. 948 - type: boolean 949 - timeout: 950 - default: 60s 951 - description: Timeout for fetch operations, defaults to 60s. 952 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 953 - type: string 954 - required: 955 - - bucketName 956 - - endpoint 957 - - interval 958 - type: object 959 - x-kubernetes-validations: 960 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 961 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 962 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 963 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 964 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 965 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 966 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 967 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 968 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 969 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 970 - - message: ServiceAccountName is not supported for the 'generic' Bucket provider 971 - rule: self.provider != 'generic' || !has(self.serviceAccountName) 972 - - message: cannot set both .spec.secretRef and .spec.serviceAccountName 973 - rule: '!has(self.secretRef) || !has(self.serviceAccountName)' 974 - status: 975 - default: 976 - observedGeneration: -1 977 - description: BucketStatus records the observed state of a Bucket. 978 - properties: 979 - artifact: 980 - description: Artifact represents the last successful Bucket reconciliation. 981 - properties: 982 - digest: 983 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 984 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 985 - type: string 986 - lastUpdateTime: 987 - description: |- 988 - LastUpdateTime is the timestamp corresponding to the last update of the 989 - Artifact. 990 - format: date-time 991 - type: string 992 - metadata: 993 - additionalProperties: 994 - type: string 995 - description: Metadata holds upstream information such as OCI annotations. 996 - type: object 997 - path: 998 - description: |- 999 - Path is the relative file path of the Artifact. It can be used to locate 1000 - the file in the root of the Artifact storage on the local file system of 1001 - the controller managing the Source. 1002 - type: string 1003 - revision: 1004 - description: |- 1005 - Revision is a human-readable identifier traceable in the origin source 1006 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1007 - type: string 1008 - size: 1009 - description: Size is the number of bytes in the file. 1010 - format: int64 1011 - type: integer 1012 - url: 1013 - description: |- 1014 - URL is the HTTP address of the Artifact as exposed by the controller 1015 - managing the Source. It can be used to retrieve the Artifact for 1016 - consumption, e.g. by another controller applying the Artifact contents. 1017 - type: string 1018 - required: 1019 - - digest 1020 - - lastUpdateTime 1021 - - path 1022 - - revision 1023 - - url 1024 - type: object 1025 - conditions: 1026 - description: Conditions holds the conditions for the Bucket. 1027 - items: 1028 - description: Condition contains details for one aspect of the current state of this API 1029 - Resource. 1030 - properties: 1031 - lastTransitionTime: 1032 - description: |- 1033 - lastTransitionTime is the last time the condition transitioned from one status to another. 1034 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1035 - format: date-time 1036 - type: string 1037 - message: 1038 - description: |- 1039 - message is a human readable message indicating details about the transition. 1040 - This may be an empty string. 1041 - maxLength: 32768 1042 - type: string 1043 - observedGeneration: 1044 - description: |- 1045 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1046 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1047 - with respect to the current state of the instance. 1048 - format: int64 1049 - minimum: 0 1050 - type: integer 1051 - reason: 1052 - description: |- 1053 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1054 - Producers of specific condition types may define expected values and meanings for this field, 1055 - and whether the values are considered a guaranteed API. 1056 - The value should be a CamelCase string. 1057 - This field may not be empty. 1058 - maxLength: 1024 1059 - minLength: 1 1060 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1061 - type: string 1062 - status: 1063 - description: status of the condition, one of True, False, Unknown. 1064 - enum: 1065 - - "True" 1066 - - "False" 1067 - - Unknown 1068 - type: string 1069 - type: 1070 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1071 - maxLength: 316 1072 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1073 - type: string 1074 - required: 1075 - - lastTransitionTime 1076 - - message 1077 - - reason 1078 - - status 1079 - - type 1080 - type: object 1081 - type: array 1082 - lastHandledReconcileAt: 1083 - description: |- 1084 - LastHandledReconcileAt holds the value of the most recent 1085 - reconcile request value, so a change of the annotation value 1086 - can be detected. 1087 - type: string 1088 - observedGeneration: 1089 - description: ObservedGeneration is the last observed generation of the Bucket object. 1090 - format: int64 1091 - type: integer 1092 - observedIgnore: 1093 - description: |- 1094 - ObservedIgnore is the observed exclusion patterns used for constructing 1095 - the source artifact. 1096 - type: string 1097 - url: 1098 - description: |- 1099 - URL is the dynamic fetch link for the latest Artifact. 1100 - It is provided on a "best effort" basis, and using the precise 1101 - BucketStatus.Artifact data is recommended. 1102 - type: string 1103 - type: object 1104 - type: object 1105 - served: true 1106 - storage: true 1107 - subresources: 1108 - status: {} 1109 - - additionalPrinterColumns: 1110 - - jsonPath: .spec.endpoint 1111 - name: Endpoint 1112 - type: string 1113 - - jsonPath: .metadata.creationTimestamp 1114 - name: Age 1115 - type: date 1116 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1117 - name: Ready 1118 - type: string 1119 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1120 - name: Status 1121 - type: string 1122 - deprecated: true 1123 - deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1124 - name: v1beta2 1125 - schema: 1126 - openAPIV3Schema: 1127 - description: Bucket is the Schema for the buckets API. 1128 - properties: 1129 - apiVersion: 1130 - description: |- 1131 - APIVersion defines the versioned schema of this representation of an object. 1132 - Servers should convert recognized schemas to the latest internal value, and 1133 - may reject unrecognized values. 1134 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1135 + This field is only supported for the `ldap` provider. 1136 + properties: 1137 + name: 1138 + description: Name of the referent. 1139 type: string 1140 - kind: 1141 - description: |- 1142 - Kind is a string value representing the REST resource this object represents. 1143 - Servers may infer this from the endpoint the client submits requests to. 1144 - Cannot be updated. 1145 - In CamelCase. 1146 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1147 + required: 1148 + - name 1149 + type: object 1150 + endpoint: 1151 + description: |- 1152 + Endpoint is the HTTP/S endpoint of the Security Token Service from 1153 + where temporary credentials will be fetched. 1154 + pattern: ^(http|https)://.*$ 1155 + type: string 1156 + provider: 1157 + description: Provider of the Security Token Service. 1158 + enum: 1159 + - aws 1160 + - ldap 1161 + type: string 1162 + secretRef: 1163 + description: |- 1164 + SecretRef specifies the Secret containing authentication credentials 1165 + for the STS endpoint. This Secret must contain the fields `username` 1166 + and `password` and is supported only for the `ldap` provider. 1167 + properties: 1168 + name: 1169 + description: Name of the referent. 1170 type: string 1171 - metadata: 1172 - type: object 1173 - spec: 1174 - description: |- 1175 - BucketSpec specifies the required configuration to produce an Artifact for 1176 - an object storage bucket. 1177 - properties: 1178 - accessFrom: 1179 - description: |- 1180 - AccessFrom specifies an Access Control List for allowing cross-namespace 1181 - references to this object. 1182 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1183 - properties: 1184 - namespaceSelectors: 1185 - description: |- 1186 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1187 - Items in this list are evaluated using a logical OR operation. 1188 - items: 1189 - description: |- 1190 - NamespaceSelector selects the namespaces to which this ACL applies. 1191 - An empty map of MatchLabels matches all namespaces in a cluster. 1192 - properties: 1193 - matchLabels: 1194 - additionalProperties: 1195 - type: string 1196 - description: |- 1197 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1198 - map is equivalent to an element of matchExpressions, whose key field is "key", the 1199 - operator is "In", and the values array contains only "value". The requirements are ANDed. 1200 - type: object 1201 - type: object 1202 - type: array 1203 - required: 1204 - - namespaceSelectors 1205 - type: object 1206 - bucketName: 1207 - description: BucketName is the name of the object storage bucket. 1208 - type: string 1209 - certSecretRef: 1210 - description: |- 1211 - CertSecretRef can be given the name of a Secret containing 1212 - either or both of 1213 + required: 1214 + - name 1215 + type: object 1216 + required: 1217 + - endpoint 1218 + - provider 1219 + type: object 1220 + suspend: 1221 + description: |- 1222 + Suspend tells the controller to suspend the reconciliation of this 1223 + Bucket. 1224 + type: boolean 1225 + timeout: 1226 + default: 60s 1227 + description: Timeout for fetch operations, defaults to 60s. 1228 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1229 + type: string 1230 + required: 1231 + - bucketName 1232 + - endpoint 1233 + - interval 1234 + type: object 1235 + x-kubernetes-validations: 1236 + - message: STS configuration is only supported for the 'aws' and 'generic' 1237 + Bucket providers 1238 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 1239 + - message: '''aws'' is the only supported STS provider for the ''aws'' 1240 + Bucket provider' 1241 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 1242 + == 'aws' 1243 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 1244 + Bucket provider' 1245 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 1246 + == 'ldap' 1247 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 1248 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 1249 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 1250 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 1251 + - message: ServiceAccountName is not supported for the 'generic' Bucket 1252 + provider 1253 + rule: self.provider != 'generic' || !has(self.serviceAccountName) 1254 + - message: cannot set both .spec.secretRef and .spec.serviceAccountName 1255 + rule: '!has(self.secretRef) || !has(self.serviceAccountName)' 1256 + status: 1257 + default: 1258 + observedGeneration: -1 1259 + description: BucketStatus records the observed state of a Bucket. 1260 + properties: 1261 + artifact: 1262 + description: Artifact represents the last successful Bucket reconciliation. 1263 + properties: 1264 + digest: 1265 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1266 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1267 + type: string 1268 + lastUpdateTime: 1269 + description: |- 1270 + LastUpdateTime is the timestamp corresponding to the last update of the 1271 + Artifact. 1272 + format: date-time 1273 + type: string 1274 + metadata: 1275 + additionalProperties: 1276 + type: string 1277 + description: Metadata holds upstream information such as OCI annotations. 1278 + type: object 1279 + path: 1280 + description: |- 1281 + Path is the relative file path of the Artifact. It can be used to locate 1282 + the file in the root of the Artifact storage on the local file system of 1283 + the controller managing the Source. 1284 + type: string 1285 + revision: 1286 + description: |- 1287 + Revision is a human-readable identifier traceable in the origin source 1288 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1289 + type: string 1290 + size: 1291 + description: Size is the number of bytes in the file. 1292 + format: int64 1293 + type: integer 1294 + url: 1295 + description: |- 1296 + URL is the HTTP address of the Artifact as exposed by the controller 1297 + managing the Source. It can be used to retrieve the Artifact for 1298 + consumption, e.g. by another controller applying the Artifact contents. 1299 + type: string 1300 + required: 1301 + - digest 1302 + - lastUpdateTime 1303 + - path 1304 + - revision 1305 + - url 1306 + type: object 1307 + conditions: 1308 + description: Conditions holds the conditions for the Bucket. 1309 + items: 1310 + description: Condition contains details for one aspect of the current 1311 + state of this API Resource. 1312 + properties: 1313 + lastTransitionTime: 1314 + description: |- 1315 + lastTransitionTime is the last time the condition transitioned from one status to another. 1316 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1317 + format: date-time 1318 + type: string 1319 + message: 1320 + description: |- 1321 + message is a human readable message indicating details about the transition. 1322 + This may be an empty string. 1323 + maxLength: 32768 1324 + type: string 1325 + observedGeneration: 1326 + description: |- 1327 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1328 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1329 + with respect to the current state of the instance. 1330 + format: int64 1331 + minimum: 0 1332 + type: integer 1333 + reason: 1334 + description: |- 1335 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1336 + Producers of specific condition types may define expected values and meanings for this field, 1337 + and whether the values are considered a guaranteed API. 1338 + The value should be a CamelCase string. 1339 + This field may not be empty. 1340 + maxLength: 1024 1341 + minLength: 1 1342 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1343 + type: string 1344 + status: 1345 + description: status of the condition, one of True, False, Unknown. 1346 + enum: 1347 + - "True" 1348 + - "False" 1349 + - Unknown 1350 + type: string 1351 + type: 1352 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1353 + maxLength: 316 1354 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1355 + type: string 1356 + required: 1357 + - lastTransitionTime 1358 + - message 1359 + - reason 1360 + - status 1361 + - type 1362 + type: object 1363 + type: array 1364 + lastHandledReconcileAt: 1365 + description: |- 1366 + LastHandledReconcileAt holds the value of the most recent 1367 + reconcile request value, so a change of the annotation value 1368 + can be detected. 1369 + type: string 1370 + observedGeneration: 1371 + description: ObservedGeneration is the last observed generation of 1372 + the Bucket object. 1373 + format: int64 1374 + type: integer 1375 + observedIgnore: 1376 + description: |- 1377 + ObservedIgnore is the observed exclusion patterns used for constructing 1378 + the source artifact. 1379 + type: string 1380 + url: 1381 + description: |- 1382 + URL is the dynamic fetch link for the latest Artifact. 1383 + It is provided on a "best effort" basis, and using the precise 1384 + BucketStatus.Artifact data is recommended. 1385 + type: string 1386 + type: object 1387 + type: object 1388 + served: true 1389 + storage: true 1390 + subresources: 1391 + status: {} 1392 + - additionalPrinterColumns: 1393 + - jsonPath: .spec.endpoint 1394 + name: Endpoint 1395 + type: string 1396 + - jsonPath: .metadata.creationTimestamp 1397 + name: Age 1398 + type: date 1399 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1400 + name: Ready 1401 + type: string 1402 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1403 + name: Status 1404 + type: string 1405 + deprecated: true 1406 + deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1407 + name: v1beta2 1408 + schema: 1409 + openAPIV3Schema: 1410 + description: Bucket is the Schema for the buckets API. 1411 + properties: 1412 + apiVersion: 1413 + description: |- 1414 + APIVersion defines the versioned schema of this representation of an object. 1415 + Servers should convert recognized schemas to the latest internal value, and 1416 + may reject unrecognized values. 1417 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1418 + type: string 1419 + kind: 1420 + description: |- 1421 + Kind is a string value representing the REST resource this object represents. 1422 + Servers may infer this from the endpoint the client submits requests to. 1423 + Cannot be updated. 1424 + In CamelCase. 1425 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1426 + type: string 1427 + metadata: 1428 + type: object 1429 + spec: 1430 + description: |- 1431 + BucketSpec specifies the required configuration to produce an Artifact for 1432 + an object storage bucket. 1433 + properties: 1434 + accessFrom: 1435 + description: |- 1436 + AccessFrom specifies an Access Control List for allowing cross-namespace 1437 + references to this object. 1438 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1439 + properties: 1440 + namespaceSelectors: 1441 + description: |- 1442 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1443 + Items in this list are evaluated using a logical OR operation. 1444 + items: 1445 + description: |- 1446 + NamespaceSelector selects the namespaces to which this ACL applies. 1447 + An empty map of MatchLabels matches all namespaces in a cluster. 1448 + properties: 1449 + matchLabels: 1450 + additionalProperties: 1451 + type: string 1452 + description: |- 1453 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1454 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1455 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1456 + type: object 1457 + type: object 1458 + type: array 1459 + required: 1460 + - namespaceSelectors 1461 + type: object 1462 + bucketName: 1463 + description: BucketName is the name of the object storage bucket. 1464 + type: string 1465 + certSecretRef: 1466 + description: |- 1467 + CertSecretRef can be given the name of a Secret containing 1468 + either or both of 1469 1470 - - a PEM-encoded client certificate (`tls.crt`) and private 1471 - key (`tls.key`); 1472 - - a PEM-encoded CA certificate (`ca.crt`) 1473 + - a PEM-encoded client certificate (`tls.crt`) and private 1474 + key (`tls.key`); 1475 + - a PEM-encoded CA certificate (`ca.crt`) 1476 1477 - and whichever are supplied, will be used for connecting to the 1478 - bucket. The client cert and key are useful if you are 1479 - authenticating with a certificate; the CA cert is useful if 1480 - you are using a self-signed server certificate. The Secret must 1481 - be of type `Opaque` or `kubernetes.io/tls`. 1482 + and whichever are supplied, will be used for connecting to the 1483 + bucket. The client cert and key are useful if you are 1484 + authenticating with a certificate; the CA cert is useful if 1485 + you are using a self-signed server certificate. The Secret must 1486 + be of type `Opaque` or `kubernetes.io/tls`. 1487 1488 - This field is only supported for the `generic` provider. 1489 - properties: 1490 - name: 1491 - description: Name of the referent. 1492 - type: string 1493 - required: 1494 - - name 1495 - type: object 1496 - endpoint: 1497 - description: Endpoint is the object storage address the BucketName is located at. 1498 - type: string 1499 - ignore: 1500 - description: |- 1501 - Ignore overrides the set of excluded patterns in the .sourceignore format 1502 - (which is the same as .gitignore). If not provided, a default will be used, 1503 - consult the documentation for your version to find out what those are. 1504 - type: string 1505 - insecure: 1506 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1507 - type: boolean 1508 - interval: 1509 - description: |- 1510 - Interval at which the Bucket Endpoint is checked for updates. 1511 - This interval is approximate and may be subject to jitter to ensure 1512 - efficient use of resources. 1513 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1514 - type: string 1515 - prefix: 1516 - description: Prefix to use for server-side filtering of files in the Bucket. 1517 - type: string 1518 - provider: 1519 - default: generic 1520 - description: |- 1521 - Provider of the object storage bucket. 1522 - Defaults to 'generic', which expects an S3 (API) compatible object 1523 - storage. 1524 - enum: 1525 - - generic 1526 - - aws 1527 - - gcp 1528 - - azure 1529 - type: string 1530 - proxySecretRef: 1531 - description: |- 1532 - ProxySecretRef specifies the Secret containing the proxy configuration 1533 - to use while communicating with the Bucket server. 1534 - properties: 1535 - name: 1536 - description: Name of the referent. 1537 - type: string 1538 - required: 1539 - - name 1540 - type: object 1541 - region: 1542 - description: Region of the Endpoint where the BucketName is located in. 1543 - type: string 1544 - secretRef: 1545 - description: |- 1546 - SecretRef specifies the Secret containing authentication credentials 1547 - for the Bucket. 1548 - properties: 1549 - name: 1550 - description: Name of the referent. 1551 - type: string 1552 - required: 1553 - - name 1554 - type: object 1555 - sts: 1556 - description: |- 1557 - STS specifies the required configuration to use a Security Token 1558 - Service for fetching temporary credentials to authenticate in a 1559 - Bucket provider. 1560 + This field is only supported for the `generic` provider. 1561 + properties: 1562 + name: 1563 + description: Name of the referent. 1564 + type: string 1565 + required: 1566 + - name 1567 + type: object 1568 + endpoint: 1569 + description: Endpoint is the object storage address the BucketName 1570 + is located at. 1571 + type: string 1572 + ignore: 1573 + description: |- 1574 + Ignore overrides the set of excluded patterns in the .sourceignore format 1575 + (which is the same as .gitignore). If not provided, a default will be used, 1576 + consult the documentation for your version to find out what those are. 1577 + type: string 1578 + insecure: 1579 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1580 + type: boolean 1581 + interval: 1582 + description: |- 1583 + Interval at which the Bucket Endpoint is checked for updates. 1584 + This interval is approximate and may be subject to jitter to ensure 1585 + efficient use of resources. 1586 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1587 + type: string 1588 + prefix: 1589 + description: Prefix to use for server-side filtering of files in the 1590 + Bucket. 1591 + type: string 1592 + provider: 1593 + default: generic 1594 + description: |- 1595 + Provider of the object storage bucket. 1596 + Defaults to 'generic', which expects an S3 (API) compatible object 1597 + storage. 1598 + enum: 1599 + - generic 1600 + - aws 1601 + - gcp 1602 + - azure 1603 + type: string 1604 + proxySecretRef: 1605 + description: |- 1606 + ProxySecretRef specifies the Secret containing the proxy configuration 1607 + to use while communicating with the Bucket server. 1608 + properties: 1609 + name: 1610 + description: Name of the referent. 1611 + type: string 1612 + required: 1613 + - name 1614 + type: object 1615 + region: 1616 + description: Region of the Endpoint where the BucketName is located 1617 + in. 1618 + type: string 1619 + secretRef: 1620 + description: |- 1621 + SecretRef specifies the Secret containing authentication credentials 1622 + for the Bucket. 1623 + properties: 1624 + name: 1625 + description: Name of the referent. 1626 + type: string 1627 + required: 1628 + - name 1629 + type: object 1630 + sts: 1631 + description: |- 1632 + STS specifies the required configuration to use a Security Token 1633 + Service for fetching temporary credentials to authenticate in a 1634 + Bucket provider. 1635 1636 - This field is only supported for the `aws` and `generic` providers. 1637 - properties: 1638 - certSecretRef: 1639 - description: |- 1640 - CertSecretRef can be given the name of a Secret containing 1641 - either or both of 1642 + This field is only supported for the `aws` and `generic` providers. 1643 + properties: 1644 + certSecretRef: 1645 + description: |- 1646 + CertSecretRef can be given the name of a Secret containing 1647 + either or both of 1648 1649 - - a PEM-encoded client certificate (`tls.crt`) and private 1650 - key (`tls.key`); 1651 - - a PEM-encoded CA certificate (`ca.crt`) 1652 + - a PEM-encoded client certificate (`tls.crt`) and private 1653 + key (`tls.key`); 1654 + - a PEM-encoded CA certificate (`ca.crt`) 1655 1656 - and whichever are supplied, will be used for connecting to the 1657 - STS endpoint. The client cert and key are useful if you are 1658 - authenticating with a certificate; the CA cert is useful if 1659 - you are using a self-signed server certificate. The Secret must 1660 - be of type `Opaque` or `kubernetes.io/tls`. 1661 + and whichever are supplied, will be used for connecting to the 1662 + STS endpoint. The client cert and key are useful if you are 1663 + authenticating with a certificate; the CA cert is useful if 1664 + you are using a self-signed server certificate. The Secret must 1665 + be of type `Opaque` or `kubernetes.io/tls`. 1666 1667 - This field is only supported for the `ldap` provider. 1668 - properties: 1669 - name: 1670 - description: Name of the referent. 1671 - type: string 1672 - required: 1673 - - name 1674 - type: object 1675 - endpoint: 1676 - description: |- 1677 - Endpoint is the HTTP/S endpoint of the Security Token Service from 1678 - where temporary credentials will be fetched. 1679 - pattern: ^(http|https)://.*$ 1680 - type: string 1681 - provider: 1682 - description: Provider of the Security Token Service. 1683 - enum: 1684 - - aws 1685 - - ldap 1686 - type: string 1687 - secretRef: 1688 - description: |- 1689 - SecretRef specifies the Secret containing authentication credentials 1690 - for the STS endpoint. This Secret must contain the fields `username` 1691 - and `password` and is supported only for the `ldap` provider. 1692 - properties: 1693 - name: 1694 - description: Name of the referent. 1695 - type: string 1696 - required: 1697 - - name 1698 - type: object 1699 - required: 1700 - - endpoint 1701 - - provider 1702 - type: object 1703 - suspend: 1704 - description: |- 1705 - Suspend tells the controller to suspend the reconciliation of this 1706 - Bucket. 1707 - type: boolean 1708 - timeout: 1709 - default: 60s 1710 - description: Timeout for fetch operations, defaults to 60s. 1711 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1712 - type: string 1713 - required: 1714 - - bucketName 1715 - - endpoint 1716 - - interval 1717 - type: object 1718 - x-kubernetes-validations: 1719 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 1720 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 1721 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 1722 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 1723 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 1724 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 1725 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 1726 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 1727 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 1728 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 1729 - status: 1730 - default: 1731 - observedGeneration: -1 1732 - description: BucketStatus records the observed state of a Bucket. 1733 - properties: 1734 - artifact: 1735 - description: Artifact represents the last successful Bucket reconciliation. 1736 - properties: 1737 - digest: 1738 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1739 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1740 - type: string 1741 - lastUpdateTime: 1742 - description: |- 1743 - LastUpdateTime is the timestamp corresponding to the last update of the 1744 - Artifact. 1745 - format: date-time 1746 - type: string 1747 - metadata: 1748 - additionalProperties: 1749 - type: string 1750 - description: Metadata holds upstream information such as OCI annotations. 1751 - type: object 1752 - path: 1753 - description: |- 1754 - Path is the relative file path of the Artifact. It can be used to locate 1755 - the file in the root of the Artifact storage on the local file system of 1756 - the controller managing the Source. 1757 - type: string 1758 - revision: 1759 - description: |- 1760 - Revision is a human-readable identifier traceable in the origin source 1761 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1762 - type: string 1763 - size: 1764 - description: Size is the number of bytes in the file. 1765 - format: int64 1766 - type: integer 1767 - url: 1768 - description: |- 1769 - URL is the HTTP address of the Artifact as exposed by the controller 1770 - managing the Source. It can be used to retrieve the Artifact for 1771 - consumption, e.g. by another controller applying the Artifact contents. 1772 - type: string 1773 - required: 1774 - - digest 1775 - - lastUpdateTime 1776 - - path 1777 - - revision 1778 - - url 1779 - type: object 1780 - conditions: 1781 - description: Conditions holds the conditions for the Bucket. 1782 - items: 1783 - description: Condition contains details for one aspect of the current state of this API 1784 - Resource. 1785 - properties: 1786 - lastTransitionTime: 1787 - description: |- 1788 - lastTransitionTime is the last time the condition transitioned from one status to another. 1789 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1790 - format: date-time 1791 - type: string 1792 - message: 1793 - description: |- 1794 - message is a human readable message indicating details about the transition. 1795 - This may be an empty string. 1796 - maxLength: 32768 1797 - type: string 1798 - observedGeneration: 1799 - description: |- 1800 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1801 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1802 - with respect to the current state of the instance. 1803 - format: int64 1804 - minimum: 0 1805 - type: integer 1806 - reason: 1807 - description: |- 1808 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1809 - Producers of specific condition types may define expected values and meanings for this field, 1810 - and whether the values are considered a guaranteed API. 1811 - The value should be a CamelCase string. 1812 - This field may not be empty. 1813 - maxLength: 1024 1814 - minLength: 1 1815 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1816 - type: string 1817 - status: 1818 - description: status of the condition, one of True, False, Unknown. 1819 - enum: 1820 - - "True" 1821 - - "False" 1822 - - Unknown 1823 - type: string 1824 - type: 1825 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1826 - maxLength: 316 1827 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1828 - type: string 1829 - required: 1830 - - lastTransitionTime 1831 - - message 1832 - - reason 1833 - - status 1834 - - type 1835 - type: object 1836 - type: array 1837 - lastHandledReconcileAt: 1838 - description: |- 1839 - LastHandledReconcileAt holds the value of the most recent 1840 - reconcile request value, so a change of the annotation value 1841 - can be detected. 1842 - type: string 1843 - observedGeneration: 1844 - description: ObservedGeneration is the last observed generation of the Bucket object. 1845 - format: int64 1846 - type: integer 1847 - observedIgnore: 1848 - description: |- 1849 - ObservedIgnore is the observed exclusion patterns used for constructing 1850 - the source artifact. 1851 - type: string 1852 - url: 1853 - description: |- 1854 - URL is the dynamic fetch link for the latest Artifact. 1855 - It is provided on a "best effort" basis, and using the precise 1856 - BucketStatus.Artifact data is recommended. 1857 - type: string 1858 - type: object 1859 + This field is only supported for the `ldap` provider. 1860 + properties: 1861 + name: 1862 + description: Name of the referent. 1863 + type: string 1864 + required: 1865 + - name 1866 + type: object 1867 + endpoint: 1868 + description: |- 1869 + Endpoint is the HTTP/S endpoint of the Security Token Service from 1870 + where temporary credentials will be fetched. 1871 + pattern: ^(http|https)://.*$ 1872 + type: string 1873 + provider: 1874 + description: Provider of the Security Token Service. 1875 + enum: 1876 + - aws 1877 + - ldap 1878 + type: string 1879 + secretRef: 1880 + description: |- 1881 + SecretRef specifies the Secret containing authentication credentials 1882 + for the STS endpoint. This Secret must contain the fields `username` 1883 + and `password` and is supported only for the `ldap` provider. 1884 + properties: 1885 + name: 1886 + description: Name of the referent. 1887 + type: string 1888 + required: 1889 + - name 1890 + type: object 1891 + required: 1892 + - endpoint 1893 + - provider 1894 + type: object 1895 + suspend: 1896 + description: |- 1897 + Suspend tells the controller to suspend the reconciliation of this 1898 + Bucket. 1899 + type: boolean 1900 + timeout: 1901 + default: 60s 1902 + description: Timeout for fetch operations, defaults to 60s. 1903 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1904 + type: string 1905 + required: 1906 + - bucketName 1907 + - endpoint 1908 + - interval 1909 + type: object 1910 + x-kubernetes-validations: 1911 + - message: STS configuration is only supported for the 'aws' and 'generic' 1912 + Bucket providers 1913 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 1914 + - message: '''aws'' is the only supported STS provider for the ''aws'' 1915 + Bucket provider' 1916 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 1917 + == 'aws' 1918 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 1919 + Bucket provider' 1920 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 1921 + == 'ldap' 1922 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 1923 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 1924 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 1925 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 1926 + status: 1927 + default: 1928 + observedGeneration: -1 1929 + description: BucketStatus records the observed state of a Bucket. 1930 + properties: 1931 + artifact: 1932 + description: Artifact represents the last successful Bucket reconciliation. 1933 + properties: 1934 + digest: 1935 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1936 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1937 + type: string 1938 + lastUpdateTime: 1939 + description: |- 1940 + LastUpdateTime is the timestamp corresponding to the last update of the 1941 + Artifact. 1942 + format: date-time 1943 + type: string 1944 + metadata: 1945 + additionalProperties: 1946 + type: string 1947 + description: Metadata holds upstream information such as OCI annotations. 1948 + type: object 1949 + path: 1950 + description: |- 1951 + Path is the relative file path of the Artifact. It can be used to locate 1952 + the file in the root of the Artifact storage on the local file system of 1953 + the controller managing the Source. 1954 + type: string 1955 + revision: 1956 + description: |- 1957 + Revision is a human-readable identifier traceable in the origin source 1958 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1959 + type: string 1960 + size: 1961 + description: Size is the number of bytes in the file. 1962 + format: int64 1963 + type: integer 1964 + url: 1965 + description: |- 1966 + URL is the HTTP address of the Artifact as exposed by the controller 1967 + managing the Source. It can be used to retrieve the Artifact for 1968 + consumption, e.g. by another controller applying the Artifact contents. 1969 + type: string 1970 + required: 1971 + - digest 1972 + - lastUpdateTime 1973 + - path 1974 + - revision 1975 + - url 1976 type: object 1977 - served: true 1978 - storage: false 1979 - subresources: 1980 - status: {} 1981 + conditions: 1982 + description: Conditions holds the conditions for the Bucket. 1983 + items: 1984 + description: Condition contains details for one aspect of the current 1985 + state of this API Resource. 1986 + properties: 1987 + lastTransitionTime: 1988 + description: |- 1989 + lastTransitionTime is the last time the condition transitioned from one status to another. 1990 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1991 + format: date-time 1992 + type: string 1993 + message: 1994 + description: |- 1995 + message is a human readable message indicating details about the transition. 1996 + This may be an empty string. 1997 + maxLength: 32768 1998 + type: string 1999 + observedGeneration: 2000 + description: |- 2001 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2002 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2003 + with respect to the current state of the instance. 2004 + format: int64 2005 + minimum: 0 2006 + type: integer 2007 + reason: 2008 + description: |- 2009 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2010 + Producers of specific condition types may define expected values and meanings for this field, 2011 + and whether the values are considered a guaranteed API. 2012 + The value should be a CamelCase string. 2013 + This field may not be empty. 2014 + maxLength: 1024 2015 + minLength: 1 2016 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2017 + type: string 2018 + status: 2019 + description: status of the condition, one of True, False, Unknown. 2020 + enum: 2021 + - "True" 2022 + - "False" 2023 + - Unknown 2024 + type: string 2025 + type: 2026 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2027 + maxLength: 316 2028 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2029 + type: string 2030 + required: 2031 + - lastTransitionTime 2032 + - message 2033 + - reason 2034 + - status 2035 + - type 2036 + type: object 2037 + type: array 2038 + lastHandledReconcileAt: 2039 + description: |- 2040 + LastHandledReconcileAt holds the value of the most recent 2041 + reconcile request value, so a change of the annotation value 2042 + can be detected. 2043 + type: string 2044 + observedGeneration: 2045 + description: ObservedGeneration is the last observed generation of 2046 + the Bucket object. 2047 + format: int64 2048 + type: integer 2049 + observedIgnore: 2050 + description: |- 2051 + ObservedIgnore is the observed exclusion patterns used for constructing 2052 + the source artifact. 2053 + type: string 2054 + url: 2055 + description: |- 2056 + URL is the dynamic fetch link for the latest Artifact. 2057 + It is provided on a "best effort" basis, and using the precise 2058 + BucketStatus.Artifact data is recommended. 2059 + type: string 2060 + type: object 2061 + type: object 2062 + served: true 2063 + storage: false 2064 + subresources: 2065 + status: {} 2066 --- 2067 apiVersion: apiextensions.k8s.io/v1 2068 kind: CustomResourceDefinition 2069 metadata: 2070 - annotations: 2071 - controller-gen.kubebuilder.io/version: v0.19.0 2072 - labels: 2073 - app.kubernetes.io/component: source-controller 2074 - app.kubernetes.io/instance: flux-system 2075 - app.kubernetes.io/part-of: flux 2076 - app.kubernetes.io/version: v2.7.3 2077 - name: externalartifacts.source.toolkit.fluxcd.io 2078 + annotations: 2079 + controller-gen.kubebuilder.io/version: v0.19.0 2080 + labels: 2081 + app.kubernetes.io/component: source-controller 2082 + app.kubernetes.io/instance: flux-system 2083 + app.kubernetes.io/part-of: flux 2084 + app.kubernetes.io/version: v2.7.5 2085 + name: externalartifacts.source.toolkit.fluxcd.io 2086 spec: 2087 - group: source.toolkit.fluxcd.io 2088 - names: 2089 - kind: ExternalArtifact 2090 - listKind: ExternalArtifactList 2091 - plural: externalartifacts 2092 - singular: externalartifact 2093 - scope: Namespaced 2094 - versions: 2095 - - additionalPrinterColumns: 2096 - - jsonPath: .metadata.creationTimestamp 2097 - name: Age 2098 - type: date 2099 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2100 - name: Ready 2101 - type: string 2102 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2103 - name: Status 2104 - type: string 2105 - - jsonPath: .spec.sourceRef.name 2106 - name: Source 2107 - type: string 2108 - name: v1 2109 - schema: 2110 - openAPIV3Schema: 2111 - description: ExternalArtifact is the Schema for the external artifacts API 2112 + group: source.toolkit.fluxcd.io 2113 + names: 2114 + kind: ExternalArtifact 2115 + listKind: ExternalArtifactList 2116 + plural: externalartifacts 2117 + singular: externalartifact 2118 + scope: Namespaced 2119 + versions: 2120 + - additionalPrinterColumns: 2121 + - jsonPath: .metadata.creationTimestamp 2122 + name: Age 2123 + type: date 2124 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2125 + name: Ready 2126 + type: string 2127 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 2128 + name: Status 2129 + type: string 2130 + - jsonPath: .spec.sourceRef.name 2131 + name: Source 2132 + type: string 2133 + name: v1 2134 + schema: 2135 + openAPIV3Schema: 2136 + description: ExternalArtifact is the Schema for the external artifacts API 2137 + properties: 2138 + apiVersion: 2139 + description: |- 2140 + APIVersion defines the versioned schema of this representation of an object. 2141 + Servers should convert recognized schemas to the latest internal value, and 2142 + may reject unrecognized values. 2143 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2144 + type: string 2145 + kind: 2146 + description: |- 2147 + Kind is a string value representing the REST resource this object represents. 2148 + Servers may infer this from the endpoint the client submits requests to. 2149 + Cannot be updated. 2150 + In CamelCase. 2151 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2152 + type: string 2153 + metadata: 2154 + type: object 2155 + spec: 2156 + description: ExternalArtifactSpec defines the desired state of ExternalArtifact 2157 + properties: 2158 + sourceRef: 2159 + description: |- 2160 + SourceRef points to the Kubernetes custom resource for 2161 + which the artifact is generated. 2162 properties: 2163 - apiVersion: 2164 - description: |- 2165 - APIVersion defines the versioned schema of this representation of an object. 2166 - Servers should convert recognized schemas to the latest internal value, and 2167 - may reject unrecognized values. 2168 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2169 - type: string 2170 - kind: 2171 - description: |- 2172 - Kind is a string value representing the REST resource this object represents. 2173 - Servers may infer this from the endpoint the client submits requests to. 2174 - Cannot be updated. 2175 - In CamelCase. 2176 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2177 - type: string 2178 - metadata: 2179 - type: object 2180 - spec: 2181 - description: ExternalArtifactSpec defines the desired state of ExternalArtifact 2182 - properties: 2183 - sourceRef: 2184 - description: |- 2185 - SourceRef points to the Kubernetes custom resource for 2186 - which the artifact is generated. 2187 - properties: 2188 - apiVersion: 2189 - description: API version of the referent, if not specified the Kubernetes preferred 2190 - version will be used. 2191 - type: string 2192 - kind: 2193 - description: Kind of the referent. 2194 - type: string 2195 - name: 2196 - description: Name of the referent. 2197 - type: string 2198 - namespace: 2199 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 2200 - type: string 2201 - required: 2202 - - kind 2203 - - name 2204 - type: object 2205 - type: object 2206 - status: 2207 - description: ExternalArtifactStatus defines the observed state of ExternalArtifact 2208 - properties: 2209 - artifact: 2210 - description: Artifact represents the output of an ExternalArtifact reconciliation. 2211 - properties: 2212 - digest: 2213 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2214 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2215 - type: string 2216 - lastUpdateTime: 2217 - description: |- 2218 - LastUpdateTime is the timestamp corresponding to the last update of the 2219 - Artifact. 2220 - format: date-time 2221 - type: string 2222 - metadata: 2223 - additionalProperties: 2224 - type: string 2225 - description: Metadata holds upstream information such as OCI annotations. 2226 - type: object 2227 - path: 2228 - description: |- 2229 - Path is the relative file path of the Artifact. It can be used to locate 2230 - the file in the root of the Artifact storage on the local file system of 2231 - the controller managing the Source. 2232 - type: string 2233 - revision: 2234 - description: |- 2235 - Revision is a human-readable identifier traceable in the origin source 2236 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2237 - type: string 2238 - size: 2239 - description: Size is the number of bytes in the file. 2240 - format: int64 2241 - type: integer 2242 - url: 2243 - description: |- 2244 - URL is the HTTP address of the Artifact as exposed by the controller 2245 - managing the Source. It can be used to retrieve the Artifact for 2246 - consumption, e.g. by another controller applying the Artifact contents. 2247 - type: string 2248 - required: 2249 - - digest 2250 - - lastUpdateTime 2251 - - path 2252 - - revision 2253 - - url 2254 - type: object 2255 - conditions: 2256 - description: Conditions holds the conditions for the ExternalArtifact. 2257 - items: 2258 - description: Condition contains details for one aspect of the current state of this API 2259 - Resource. 2260 - properties: 2261 - lastTransitionTime: 2262 - description: |- 2263 - lastTransitionTime is the last time the condition transitioned from one status to another. 2264 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2265 - format: date-time 2266 - type: string 2267 - message: 2268 - description: |- 2269 - message is a human readable message indicating details about the transition. 2270 - This may be an empty string. 2271 - maxLength: 32768 2272 - type: string 2273 - observedGeneration: 2274 - description: |- 2275 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2276 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2277 - with respect to the current state of the instance. 2278 - format: int64 2279 - minimum: 0 2280 - type: integer 2281 - reason: 2282 - description: |- 2283 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2284 - Producers of specific condition types may define expected values and meanings for this field, 2285 - and whether the values are considered a guaranteed API. 2286 - The value should be a CamelCase string. 2287 - This field may not be empty. 2288 - maxLength: 1024 2289 - minLength: 1 2290 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2291 - type: string 2292 - status: 2293 - description: status of the condition, one of True, False, Unknown. 2294 - enum: 2295 - - "True" 2296 - - "False" 2297 - - Unknown 2298 - type: string 2299 - type: 2300 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 2301 - maxLength: 316 2302 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2303 - type: string 2304 - required: 2305 - - lastTransitionTime 2306 - - message 2307 - - reason 2308 - - status 2309 - - type 2310 - type: object 2311 - type: array 2312 - type: object 2313 + apiVersion: 2314 + description: API version of the referent, if not specified the 2315 + Kubernetes preferred version will be used. 2316 + type: string 2317 + kind: 2318 + description: Kind of the referent. 2319 + type: string 2320 + name: 2321 + description: Name of the referent. 2322 + type: string 2323 + namespace: 2324 + description: Namespace of the referent, when not specified it 2325 + acts as LocalObjectReference. 2326 + type: string 2327 + required: 2328 + - kind 2329 + - name 2330 + type: object 2331 + type: object 2332 + status: 2333 + description: ExternalArtifactStatus defines the observed state of ExternalArtifact 2334 + properties: 2335 + artifact: 2336 + description: Artifact represents the output of an ExternalArtifact 2337 + reconciliation. 2338 + properties: 2339 + digest: 2340 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2341 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2342 + type: string 2343 + lastUpdateTime: 2344 + description: |- 2345 + LastUpdateTime is the timestamp corresponding to the last update of the 2346 + Artifact. 2347 + format: date-time 2348 + type: string 2349 + metadata: 2350 + additionalProperties: 2351 + type: string 2352 + description: Metadata holds upstream information such as OCI annotations. 2353 + type: object 2354 + path: 2355 + description: |- 2356 + Path is the relative file path of the Artifact. It can be used to locate 2357 + the file in the root of the Artifact storage on the local file system of 2358 + the controller managing the Source. 2359 + type: string 2360 + revision: 2361 + description: |- 2362 + Revision is a human-readable identifier traceable in the origin source 2363 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2364 + type: string 2365 + size: 2366 + description: Size is the number of bytes in the file. 2367 + format: int64 2368 + type: integer 2369 + url: 2370 + description: |- 2371 + URL is the HTTP address of the Artifact as exposed by the controller 2372 + managing the Source. It can be used to retrieve the Artifact for 2373 + consumption, e.g. by another controller applying the Artifact contents. 2374 + type: string 2375 + required: 2376 + - digest 2377 + - lastUpdateTime 2378 + - path 2379 + - revision 2380 + - url 2381 type: object 2382 - served: true 2383 - storage: true 2384 - subresources: 2385 - status: {} 2386 + conditions: 2387 + description: Conditions holds the conditions for the ExternalArtifact. 2388 + items: 2389 + description: Condition contains details for one aspect of the current 2390 + state of this API Resource. 2391 + properties: 2392 + lastTransitionTime: 2393 + description: |- 2394 + lastTransitionTime is the last time the condition transitioned from one status to another. 2395 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2396 + format: date-time 2397 + type: string 2398 + message: 2399 + description: |- 2400 + message is a human readable message indicating details about the transition. 2401 + This may be an empty string. 2402 + maxLength: 32768 2403 + type: string 2404 + observedGeneration: 2405 + description: |- 2406 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2407 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2408 + with respect to the current state of the instance. 2409 + format: int64 2410 + minimum: 0 2411 + type: integer 2412 + reason: 2413 + description: |- 2414 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2415 + Producers of specific condition types may define expected values and meanings for this field, 2416 + and whether the values are considered a guaranteed API. 2417 + The value should be a CamelCase string. 2418 + This field may not be empty. 2419 + maxLength: 1024 2420 + minLength: 1 2421 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2422 + type: string 2423 + status: 2424 + description: status of the condition, one of True, False, Unknown. 2425 + enum: 2426 + - "True" 2427 + - "False" 2428 + - Unknown 2429 + type: string 2430 + type: 2431 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2432 + maxLength: 316 2433 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2434 + type: string 2435 + required: 2436 + - lastTransitionTime 2437 + - message 2438 + - reason 2439 + - status 2440 + - type 2441 + type: object 2442 + type: array 2443 + type: object 2444 + type: object 2445 + served: true 2446 + storage: true 2447 + subresources: 2448 + status: {} 2449 --- 2450 apiVersion: apiextensions.k8s.io/v1 2451 kind: CustomResourceDefinition 2452 metadata: 2453 - annotations: 2454 - controller-gen.kubebuilder.io/version: v0.19.0 2455 - labels: 2456 - app.kubernetes.io/component: source-controller 2457 - app.kubernetes.io/instance: flux-system 2458 - app.kubernetes.io/part-of: flux 2459 - app.kubernetes.io/version: v2.7.3 2460 - name: gitrepositories.source.toolkit.fluxcd.io 2461 + annotations: 2462 + controller-gen.kubebuilder.io/version: v0.19.0 2463 + labels: 2464 + app.kubernetes.io/component: source-controller 2465 + app.kubernetes.io/instance: flux-system 2466 + app.kubernetes.io/part-of: flux 2467 + app.kubernetes.io/version: v2.7.5 2468 + name: gitrepositories.source.toolkit.fluxcd.io 2469 spec: 2470 - group: source.toolkit.fluxcd.io 2471 - names: 2472 - kind: GitRepository 2473 - listKind: GitRepositoryList 2474 - plural: gitrepositories 2475 - shortNames: 2476 - - gitrepo 2477 - singular: gitrepository 2478 - scope: Namespaced 2479 - versions: 2480 - - additionalPrinterColumns: 2481 - - jsonPath: .spec.url 2482 - name: URL 2483 - type: string 2484 - - jsonPath: .metadata.creationTimestamp 2485 - name: Age 2486 - type: date 2487 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2488 - name: Ready 2489 - type: string 2490 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2491 - name: Status 2492 - type: string 2493 - name: v1 2494 - schema: 2495 - openAPIV3Schema: 2496 - description: GitRepository is the Schema for the gitrepositories API. 2497 + group: source.toolkit.fluxcd.io 2498 + names: 2499 + kind: GitRepository 2500 + listKind: GitRepositoryList 2501 + plural: gitrepositories 2502 + shortNames: 2503 + - gitrepo 2504 + singular: gitrepository 2505 + scope: Namespaced 2506 + versions: 2507 + - additionalPrinterColumns: 2508 + - jsonPath: .spec.url 2509 + name: URL 2510 + type: string 2511 + - jsonPath: .metadata.creationTimestamp 2512 + name: Age 2513 + type: date 2514 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2515 + name: Ready 2516 + type: string 2517 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 2518 + name: Status 2519 + type: string 2520 + name: v1 2521 + schema: 2522 + openAPIV3Schema: 2523 + description: GitRepository is the Schema for the gitrepositories API. 2524 + properties: 2525 + apiVersion: 2526 + description: |- 2527 + APIVersion defines the versioned schema of this representation of an object. 2528 + Servers should convert recognized schemas to the latest internal value, and 2529 + may reject unrecognized values. 2530 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2531 + type: string 2532 + kind: 2533 + description: |- 2534 + Kind is a string value representing the REST resource this object represents. 2535 + Servers may infer this from the endpoint the client submits requests to. 2536 + Cannot be updated. 2537 + In CamelCase. 2538 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2539 + type: string 2540 + metadata: 2541 + type: object 2542 + spec: 2543 + description: |- 2544 + GitRepositorySpec specifies the required configuration to produce an 2545 + Artifact for a Git repository. 2546 + properties: 2547 + ignore: 2548 + description: |- 2549 + Ignore overrides the set of excluded patterns in the .sourceignore format 2550 + (which is the same as .gitignore). If not provided, a default will be used, 2551 + consult the documentation for your version to find out what those are. 2552 + type: string 2553 + include: 2554 + description: |- 2555 + Include specifies a list of GitRepository resources which Artifacts 2556 + should be included in the Artifact produced for this GitRepository. 2557 + items: 2558 + description: |- 2559 + GitRepositoryInclude specifies a local reference to a GitRepository which 2560 + Artifact (sub-)contents must be included, and where they should be placed. 2561 + properties: 2562 + fromPath: 2563 + description: |- 2564 + FromPath specifies the path to copy contents from, defaults to the root 2565 + of the Artifact. 2566 + type: string 2567 + repository: 2568 + description: |- 2569 + GitRepositoryRef specifies the GitRepository which Artifact contents 2570 + must be included. 2571 + properties: 2572 + name: 2573 + description: Name of the referent. 2574 + type: string 2575 + required: 2576 + - name 2577 + type: object 2578 + toPath: 2579 + description: |- 2580 + ToPath specifies the path to copy contents to, defaults to the name of 2581 + the GitRepositoryRef. 2582 + type: string 2583 + required: 2584 + - repository 2585 + type: object 2586 + type: array 2587 + interval: 2588 + description: |- 2589 + Interval at which the GitRepository URL is checked for updates. 2590 + This interval is approximate and may be subject to jitter to ensure 2591 + efficient use of resources. 2592 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2593 + type: string 2594 + provider: 2595 + description: |- 2596 + Provider used for authentication, can be 'azure', 'github', 'generic'. 2597 + When not specified, defaults to 'generic'. 2598 + enum: 2599 + - generic 2600 + - azure 2601 + - github 2602 + type: string 2603 + proxySecretRef: 2604 + description: |- 2605 + ProxySecretRef specifies the Secret containing the proxy configuration 2606 + to use while communicating with the Git server. 2607 properties: 2608 - apiVersion: 2609 - description: |- 2610 - APIVersion defines the versioned schema of this representation of an object. 2611 - Servers should convert recognized schemas to the latest internal value, and 2612 - may reject unrecognized values. 2613 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2614 - type: string 2615 - kind: 2616 - description: |- 2617 - Kind is a string value representing the REST resource this object represents. 2618 - Servers may infer this from the endpoint the client submits requests to. 2619 - Cannot be updated. 2620 - In CamelCase. 2621 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2622 + name: 2623 + description: Name of the referent. 2624 + type: string 2625 + required: 2626 + - name 2627 + type: object 2628 + recurseSubmodules: 2629 + description: |- 2630 + RecurseSubmodules enables the initialization of all submodules within 2631 + the GitRepository as cloned from the URL, using their default settings. 2632 + type: boolean 2633 + ref: 2634 + description: |- 2635 + Reference specifies the Git reference to resolve and monitor for 2636 + changes, defaults to the 'master' branch. 2637 + properties: 2638 + branch: 2639 + description: Branch to check out, defaults to 'master' if no other 2640 + field is defined. 2641 + type: string 2642 + commit: 2643 + description: |- 2644 + Commit SHA to check out, takes precedence over all reference fields. 2645 + 2646 + This can be combined with Branch to shallow clone the branch, in which 2647 + the commit is expected to exist. 2648 + type: string 2649 + name: 2650 + description: |- 2651 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2652 + 2653 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2654 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2655 + type: string 2656 + semver: 2657 + description: SemVer tag expression to check out, takes precedence 2658 + over Tag. 2659 + type: string 2660 + tag: 2661 + description: Tag to check out, takes precedence over Branch. 2662 + type: string 2663 + type: object 2664 + secretRef: 2665 + description: |- 2666 + SecretRef specifies the Secret containing authentication credentials for 2667 + the GitRepository. 2668 + For HTTPS repositories the Secret must contain 'username' and 'password' 2669 + fields for basic auth or 'bearerToken' field for token auth. 2670 + For SSH repositories the Secret must contain 'identity' 2671 + and 'known_hosts' fields. 2672 + properties: 2673 + name: 2674 + description: Name of the referent. 2675 + type: string 2676 + required: 2677 + - name 2678 + type: object 2679 + serviceAccountName: 2680 + description: |- 2681 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to 2682 + authenticate to the GitRepository. This field is only supported for 'azure' provider. 2683 + type: string 2684 + sparseCheckout: 2685 + description: |- 2686 + SparseCheckout specifies a list of directories to checkout when cloning 2687 + the repository. If specified, only these directories are included in the 2688 + Artifact produced for this GitRepository. 2689 + items: 2690 + type: string 2691 + type: array 2692 + suspend: 2693 + description: |- 2694 + Suspend tells the controller to suspend the reconciliation of this 2695 + GitRepository. 2696 + type: boolean 2697 + timeout: 2698 + default: 60s 2699 + description: Timeout for Git operations like cloning, defaults to 2700 + 60s. 2701 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2702 + type: string 2703 + url: 2704 + description: URL specifies the Git repository URL, it can be an HTTP/S 2705 + or SSH address. 2706 + pattern: ^(http|https|ssh)://.*$ 2707 + type: string 2708 + verify: 2709 + description: |- 2710 + Verification specifies the configuration to verify the Git commit 2711 + signature(s). 2712 + properties: 2713 + mode: 2714 + default: HEAD 2715 + description: |- 2716 + Mode specifies which Git object(s) should be verified. 2717 + 2718 + The variants "head" and "HEAD" both imply the same thing, i.e. verify 2719 + the commit that the HEAD of the Git repository points to. The variant 2720 + "head" solely exists to ensure backwards compatibility. 2721 + enum: 2722 + - head 2723 + - HEAD 2724 + - Tag 2725 + - TagAndHEAD 2726 + type: string 2727 + secretRef: 2728 + description: |- 2729 + SecretRef specifies the Secret containing the public keys of trusted Git 2730 + authors. 2731 + properties: 2732 + name: 2733 + description: Name of the referent. 2734 type: string 2735 + required: 2736 + - name 2737 + type: object 2738 + required: 2739 + - secretRef 2740 + type: object 2741 + required: 2742 + - interval 2743 + - url 2744 + type: object 2745 + x-kubernetes-validations: 2746 + - message: serviceAccountName can only be set when provider is 'azure' 2747 + rule: '!has(self.serviceAccountName) || (has(self.provider) && self.provider 2748 + == ''azure'')' 2749 + status: 2750 + default: 2751 + observedGeneration: -1 2752 + description: GitRepositoryStatus records the observed state of a Git repository. 2753 + properties: 2754 + artifact: 2755 + description: Artifact represents the last successful GitRepository 2756 + reconciliation. 2757 + properties: 2758 + digest: 2759 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2760 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2761 + type: string 2762 + lastUpdateTime: 2763 + description: |- 2764 + LastUpdateTime is the timestamp corresponding to the last update of the 2765 + Artifact. 2766 + format: date-time 2767 + type: string 2768 + metadata: 2769 + additionalProperties: 2770 + type: string 2771 + description: Metadata holds upstream information such as OCI annotations. 2772 + type: object 2773 + path: 2774 + description: |- 2775 + Path is the relative file path of the Artifact. It can be used to locate 2776 + the file in the root of the Artifact storage on the local file system of 2777 + the controller managing the Source. 2778 + type: string 2779 + revision: 2780 + description: |- 2781 + Revision is a human-readable identifier traceable in the origin source 2782 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2783 + type: string 2784 + size: 2785 + description: Size is the number of bytes in the file. 2786 + format: int64 2787 + type: integer 2788 + url: 2789 + description: |- 2790 + URL is the HTTP address of the Artifact as exposed by the controller 2791 + managing the Source. It can be used to retrieve the Artifact for 2792 + consumption, e.g. by another controller applying the Artifact contents. 2793 + type: string 2794 + required: 2795 + - digest 2796 + - lastUpdateTime 2797 + - path 2798 + - revision 2799 + - url 2800 + type: object 2801 + conditions: 2802 + description: Conditions holds the conditions for the GitRepository. 2803 + items: 2804 + description: Condition contains details for one aspect of the current 2805 + state of this API Resource. 2806 + properties: 2807 + lastTransitionTime: 2808 + description: |- 2809 + lastTransitionTime is the last time the condition transitioned from one status to another. 2810 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2811 + format: date-time 2812 + type: string 2813 + message: 2814 + description: |- 2815 + message is a human readable message indicating details about the transition. 2816 + This may be an empty string. 2817 + maxLength: 32768 2818 + type: string 2819 + observedGeneration: 2820 + description: |- 2821 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2822 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2823 + with respect to the current state of the instance. 2824 + format: int64 2825 + minimum: 0 2826 + type: integer 2827 + reason: 2828 + description: |- 2829 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2830 + Producers of specific condition types may define expected values and meanings for this field, 2831 + and whether the values are considered a guaranteed API. 2832 + The value should be a CamelCase string. 2833 + This field may not be empty. 2834 + maxLength: 1024 2835 + minLength: 1 2836 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2837 + type: string 2838 + status: 2839 + description: status of the condition, one of True, False, Unknown. 2840 + enum: 2841 + - "True" 2842 + - "False" 2843 + - Unknown 2844 + type: string 2845 + type: 2846 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2847 + maxLength: 316 2848 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2849 + type: string 2850 + required: 2851 + - lastTransitionTime 2852 + - message 2853 + - reason 2854 + - status 2855 + - type 2856 + type: object 2857 + type: array 2858 + includedArtifacts: 2859 + description: |- 2860 + IncludedArtifacts contains a list of the last successfully included 2861 + Artifacts as instructed by GitRepositorySpec.Include. 2862 + items: 2863 + description: Artifact represents the output of a Source reconciliation. 2864 + properties: 2865 + digest: 2866 + description: Digest is the digest of the file in the form of 2867 + '<algorithm>:<checksum>'. 2868 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2869 + type: string 2870 + lastUpdateTime: 2871 + description: |- 2872 + LastUpdateTime is the timestamp corresponding to the last update of the 2873 + Artifact. 2874 + format: date-time 2875 + type: string 2876 metadata: 2877 - type: object 2878 - spec: 2879 - description: |- 2880 - GitRepositorySpec specifies the required configuration to produce an 2881 - Artifact for a Git repository. 2882 - properties: 2883 - ignore: 2884 - description: |- 2885 - Ignore overrides the set of excluded patterns in the .sourceignore format 2886 - (which is the same as .gitignore). If not provided, a default will be used, 2887 - consult the documentation for your version to find out what those are. 2888 - type: string 2889 - include: 2890 - description: |- 2891 - Include specifies a list of GitRepository resources which Artifacts 2892 - should be included in the Artifact produced for this GitRepository. 2893 - items: 2894 - description: |- 2895 - GitRepositoryInclude specifies a local reference to a GitRepository which 2896 - Artifact (sub-)contents must be included, and where they should be placed. 2897 - properties: 2898 - fromPath: 2899 - description: |- 2900 - FromPath specifies the path to copy contents from, defaults to the root 2901 - of the Artifact. 2902 - type: string 2903 - repository: 2904 - description: |- 2905 - GitRepositoryRef specifies the GitRepository which Artifact contents 2906 - must be included. 2907 - properties: 2908 - name: 2909 - description: Name of the referent. 2910 - type: string 2911 - required: 2912 - - name 2913 - type: object 2914 - toPath: 2915 - description: |- 2916 - ToPath specifies the path to copy contents to, defaults to the name of 2917 - the GitRepositoryRef. 2918 - type: string 2919 - required: 2920 - - repository 2921 - type: object 2922 - type: array 2923 - interval: 2924 - description: |- 2925 - Interval at which the GitRepository URL is checked for updates. 2926 - This interval is approximate and may be subject to jitter to ensure 2927 - efficient use of resources. 2928 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2929 - type: string 2930 - provider: 2931 - description: |- 2932 - Provider used for authentication, can be 'azure', 'github', 'generic'. 2933 - When not specified, defaults to 'generic'. 2934 - enum: 2935 - - generic 2936 - - azure 2937 - - github 2938 - type: string 2939 - proxySecretRef: 2940 - description: |- 2941 - ProxySecretRef specifies the Secret containing the proxy configuration 2942 - to use while communicating with the Git server. 2943 - properties: 2944 - name: 2945 - description: Name of the referent. 2946 - type: string 2947 - required: 2948 - - name 2949 - type: object 2950 - recurseSubmodules: 2951 - description: |- 2952 - RecurseSubmodules enables the initialization of all submodules within 2953 - the GitRepository as cloned from the URL, using their default settings. 2954 - type: boolean 2955 - ref: 2956 - description: |- 2957 - Reference specifies the Git reference to resolve and monitor for 2958 - changes, defaults to the 'master' branch. 2959 - properties: 2960 - branch: 2961 - description: Branch to check out, defaults to 'master' if no other field is defined. 2962 - type: string 2963 - commit: 2964 - description: |- 2965 - Commit SHA to check out, takes precedence over all reference fields. 2966 - 2967 - This can be combined with Branch to shallow clone the branch, in which 2968 - the commit is expected to exist. 2969 - type: string 2970 - name: 2971 - description: |- 2972 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2973 + additionalProperties: 2974 + type: string 2975 + description: Metadata holds upstream information such as OCI 2976 + annotations. 2977 + type: object 2978 + path: 2979 + description: |- 2980 + Path is the relative file path of the Artifact. It can be used to locate 2981 + the file in the root of the Artifact storage on the local file system of 2982 + the controller managing the Source. 2983 + type: string 2984 + revision: 2985 + description: |- 2986 + Revision is a human-readable identifier traceable in the origin source 2987 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2988 + type: string 2989 + size: 2990 + description: Size is the number of bytes in the file. 2991 + format: int64 2992 + type: integer 2993 + url: 2994 + description: |- 2995 + URL is the HTTP address of the Artifact as exposed by the controller 2996 + managing the Source. It can be used to retrieve the Artifact for 2997 + consumption, e.g. by another controller applying the Artifact contents. 2998 + type: string 2999 + required: 3000 + - digest 3001 + - lastUpdateTime 3002 + - path 3003 + - revision 3004 + - url 3005 + type: object 3006 + type: array 3007 + lastHandledReconcileAt: 3008 + description: |- 3009 + LastHandledReconcileAt holds the value of the most recent 3010 + reconcile request value, so a change of the annotation value 3011 + can be detected. 3012 + type: string 3013 + observedGeneration: 3014 + description: |- 3015 + ObservedGeneration is the last observed generation of the GitRepository 3016 + object. 3017 + format: int64 3018 + type: integer 3019 + observedIgnore: 3020 + description: |- 3021 + ObservedIgnore is the observed exclusion patterns used for constructing 3022 + the source artifact. 3023 + type: string 3024 + observedInclude: 3025 + description: |- 3026 + ObservedInclude is the observed list of GitRepository resources used to 3027 + produce the current Artifact. 3028 + items: 3029 + description: |- 3030 + GitRepositoryInclude specifies a local reference to a GitRepository which 3031 + Artifact (sub-)contents must be included, and where they should be placed. 3032 + properties: 3033 + fromPath: 3034 + description: |- 3035 + FromPath specifies the path to copy contents from, defaults to the root 3036 + of the Artifact. 3037 + type: string 3038 + repository: 3039 + description: |- 3040 + GitRepositoryRef specifies the GitRepository which Artifact contents 3041 + must be included. 3042 + properties: 3043 + name: 3044 + description: Name of the referent. 3045 + type: string 3046 + required: 3047 + - name 3048 + type: object 3049 + toPath: 3050 + description: |- 3051 + ToPath specifies the path to copy contents to, defaults to the name of 3052 + the GitRepositoryRef. 3053 + type: string 3054 + required: 3055 + - repository 3056 + type: object 3057 + type: array 3058 + observedRecurseSubmodules: 3059 + description: |- 3060 + ObservedRecurseSubmodules is the observed resource submodules 3061 + configuration used to produce the current Artifact. 3062 + type: boolean 3063 + observedSparseCheckout: 3064 + description: |- 3065 + ObservedSparseCheckout is the observed list of directories used to 3066 + produce the current Artifact. 3067 + items: 3068 + type: string 3069 + type: array 3070 + sourceVerificationMode: 3071 + description: |- 3072 + SourceVerificationMode is the last used verification mode indicating 3073 + which Git object(s) have been verified. 3074 + type: string 3075 + type: object 3076 + type: object 3077 + served: true 3078 + storage: true 3079 + subresources: 3080 + status: {} 3081 + - additionalPrinterColumns: 3082 + - jsonPath: .spec.url 3083 + name: URL 3084 + type: string 3085 + - jsonPath: .metadata.creationTimestamp 3086 + name: Age 3087 + type: date 3088 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 3089 + name: Ready 3090 + type: string 3091 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3092 + name: Status 3093 + type: string 3094 + deprecated: true 3095 + deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 3096 + name: v1beta2 3097 + schema: 3098 + openAPIV3Schema: 3099 + description: GitRepository is the Schema for the gitrepositories API. 3100 + properties: 3101 + apiVersion: 3102 + description: |- 3103 + APIVersion defines the versioned schema of this representation of an object. 3104 + Servers should convert recognized schemas to the latest internal value, and 3105 + may reject unrecognized values. 3106 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3107 + type: string 3108 + kind: 3109 + description: |- 3110 + Kind is a string value representing the REST resource this object represents. 3111 + Servers may infer this from the endpoint the client submits requests to. 3112 + Cannot be updated. 3113 + In CamelCase. 3114 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3115 + type: string 3116 + metadata: 3117 + type: object 3118 + spec: 3119 + description: |- 3120 + GitRepositorySpec specifies the required configuration to produce an 3121 + Artifact for a Git repository. 3122 + properties: 3123 + accessFrom: 3124 + description: |- 3125 + AccessFrom specifies an Access Control List for allowing cross-namespace 3126 + references to this object. 3127 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 3128 + properties: 3129 + namespaceSelectors: 3130 + description: |- 3131 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3132 + Items in this list are evaluated using a logical OR operation. 3133 + items: 3134 + description: |- 3135 + NamespaceSelector selects the namespaces to which this ACL applies. 3136 + An empty map of MatchLabels matches all namespaces in a cluster. 3137 + properties: 3138 + matchLabels: 3139 + additionalProperties: 3140 + type: string 3141 + description: |- 3142 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3143 + map is equivalent to an element of matchExpressions, whose key field is "key", the 3144 + operator is "In", and the values array contains only "value". The requirements are ANDed. 3145 + type: object 3146 + type: object 3147 + type: array 3148 + required: 3149 + - namespaceSelectors 3150 + type: object 3151 + gitImplementation: 3152 + default: go-git 3153 + description: |- 3154 + GitImplementation specifies which Git client library implementation to 3155 + use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 3156 + Deprecated: gitImplementation is deprecated now that 'go-git' is the 3157 + only supported implementation. 3158 + enum: 3159 + - go-git 3160 + - libgit2 3161 + type: string 3162 + ignore: 3163 + description: |- 3164 + Ignore overrides the set of excluded patterns in the .sourceignore format 3165 + (which is the same as .gitignore). If not provided, a default will be used, 3166 + consult the documentation for your version to find out what those are. 3167 + type: string 3168 + include: 3169 + description: |- 3170 + Include specifies a list of GitRepository resources which Artifacts 3171 + should be included in the Artifact produced for this GitRepository. 3172 + items: 3173 + description: |- 3174 + GitRepositoryInclude specifies a local reference to a GitRepository which 3175 + Artifact (sub-)contents must be included, and where they should be placed. 3176 + properties: 3177 + fromPath: 3178 + description: |- 3179 + FromPath specifies the path to copy contents from, defaults to the root 3180 + of the Artifact. 3181 + type: string 3182 + repository: 3183 + description: |- 3184 + GitRepositoryRef specifies the GitRepository which Artifact contents 3185 + must be included. 3186 + properties: 3187 + name: 3188 + description: Name of the referent. 3189 + type: string 3190 + required: 3191 + - name 3192 + type: object 3193 + toPath: 3194 + description: |- 3195 + ToPath specifies the path to copy contents to, defaults to the name of 3196 + the GitRepositoryRef. 3197 + type: string 3198 + required: 3199 + - repository 3200 + type: object 3201 + type: array 3202 + interval: 3203 + description: Interval at which to check the GitRepository for updates. 3204 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 3205 + type: string 3206 + recurseSubmodules: 3207 + description: |- 3208 + RecurseSubmodules enables the initialization of all submodules within 3209 + the GitRepository as cloned from the URL, using their default settings. 3210 + type: boolean 3211 + ref: 3212 + description: |- 3213 + Reference specifies the Git reference to resolve and monitor for 3214 + changes, defaults to the 'master' branch. 3215 + properties: 3216 + branch: 3217 + description: Branch to check out, defaults to 'master' if no other 3218 + field is defined. 3219 + type: string 3220 + commit: 3221 + description: |- 3222 + Commit SHA to check out, takes precedence over all reference fields. 3223 3224 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 3225 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 3226 - type: string 3227 - semver: 3228 - description: SemVer tag expression to check out, takes precedence over Tag. 3229 - type: string 3230 - tag: 3231 - description: Tag to check out, takes precedence over Branch. 3232 - type: string 3233 - type: object 3234 - secretRef: 3235 - description: |- 3236 - SecretRef specifies the Secret containing authentication credentials for 3237 - the GitRepository. 3238 - For HTTPS repositories the Secret must contain 'username' and 'password' 3239 - fields for basic auth or 'bearerToken' field for token auth. 3240 - For SSH repositories the Secret must contain 'identity' 3241 - and 'known_hosts' fields. 3242 - properties: 3243 - name: 3244 - description: Name of the referent. 3245 - type: string 3246 - required: 3247 - - name 3248 - type: object 3249 - serviceAccountName: 3250 - description: |- 3251 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to 3252 - authenticate to the GitRepository. This field is only supported for 'azure' provider. 3253 - type: string 3254 - sparseCheckout: 3255 - description: |- 3256 - SparseCheckout specifies a list of directories to checkout when cloning 3257 - the repository. If specified, only these directories are included in the 3258 - Artifact produced for this GitRepository. 3259 - items: 3260 - type: string 3261 - type: array 3262 - suspend: 3263 - description: |- 3264 - Suspend tells the controller to suspend the reconciliation of this 3265 - GitRepository. 3266 - type: boolean 3267 - timeout: 3268 - default: 60s 3269 - description: Timeout for Git operations like cloning, defaults to 60s. 3270 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3271 - type: string 3272 - url: 3273 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 3274 - pattern: ^(http|https|ssh)://.*$ 3275 - type: string 3276 - verify: 3277 - description: |- 3278 - Verification specifies the configuration to verify the Git commit 3279 - signature(s). 3280 - properties: 3281 - mode: 3282 - default: HEAD 3283 - description: |- 3284 - Mode specifies which Git object(s) should be verified. 3285 + This can be combined with Branch to shallow clone the branch, in which 3286 + the commit is expected to exist. 3287 + type: string 3288 + name: 3289 + description: |- 3290 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 3291 3292 - The variants "head" and "HEAD" both imply the same thing, i.e. verify 3293 - the commit that the HEAD of the Git repository points to. The variant 3294 - "head" solely exists to ensure backwards compatibility. 3295 - enum: 3296 - - head 3297 - - HEAD 3298 - - Tag 3299 - - TagAndHEAD 3300 - type: string 3301 - secretRef: 3302 - description: |- 3303 - SecretRef specifies the Secret containing the public keys of trusted Git 3304 - authors. 3305 - properties: 3306 - name: 3307 - description: Name of the referent. 3308 - type: string 3309 - required: 3310 - - name 3311 - type: object 3312 - required: 3313 - - secretRef 3314 - type: object 3315 - required: 3316 - - interval 3317 - - url 3318 - type: object 3319 - x-kubernetes-validations: 3320 - - message: serviceAccountName can only be set when provider is 'azure' 3321 - rule: '!has(self.serviceAccountName) || (has(self.provider) && self.provider == ''azure'')' 3322 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 3323 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 3324 + type: string 3325 + semver: 3326 + description: SemVer tag expression to check out, takes precedence 3327 + over Tag. 3328 + type: string 3329 + tag: 3330 + description: Tag to check out, takes precedence over Branch. 3331 + type: string 3332 + type: object 3333 + secretRef: 3334 + description: |- 3335 + SecretRef specifies the Secret containing authentication credentials for 3336 + the GitRepository. 3337 + For HTTPS repositories the Secret must contain 'username' and 'password' 3338 + fields for basic auth or 'bearerToken' field for token auth. 3339 + For SSH repositories the Secret must contain 'identity' 3340 + and 'known_hosts' fields. 3341 + properties: 3342 + name: 3343 + description: Name of the referent. 3344 + type: string 3345 + required: 3346 + - name 3347 + type: object 3348 + suspend: 3349 + description: |- 3350 + Suspend tells the controller to suspend the reconciliation of this 3351 + GitRepository. 3352 + type: boolean 3353 + timeout: 3354 + default: 60s 3355 + description: Timeout for Git operations like cloning, defaults to 3356 + 60s. 3357 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3358 + type: string 3359 + url: 3360 + description: URL specifies the Git repository URL, it can be an HTTP/S 3361 + or SSH address. 3362 + pattern: ^(http|https|ssh)://.*$ 3363 + type: string 3364 + verify: 3365 + description: |- 3366 + Verification specifies the configuration to verify the Git commit 3367 + signature(s). 3368 + properties: 3369 + mode: 3370 + description: Mode specifies what Git object should be verified, 3371 + currently ('head'). 3372 + enum: 3373 + - head 3374 + type: string 3375 + secretRef: 3376 + description: |- 3377 + SecretRef specifies the Secret containing the public keys of trusted Git 3378 + authors. 3379 + properties: 3380 + name: 3381 + description: Name of the referent. 3382 + type: string 3383 + required: 3384 + - name 3385 + type: object 3386 + required: 3387 + - mode 3388 + - secretRef 3389 + type: object 3390 + required: 3391 + - interval 3392 + - url 3393 + type: object 3394 + status: 3395 + default: 3396 + observedGeneration: -1 3397 + description: GitRepositoryStatus records the observed state of a Git repository. 3398 + properties: 3399 + artifact: 3400 + description: Artifact represents the last successful GitRepository 3401 + reconciliation. 3402 + properties: 3403 + digest: 3404 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3405 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3406 + type: string 3407 + lastUpdateTime: 3408 + description: |- 3409 + LastUpdateTime is the timestamp corresponding to the last update of the 3410 + Artifact. 3411 + format: date-time 3412 + type: string 3413 + metadata: 3414 + additionalProperties: 3415 + type: string 3416 + description: Metadata holds upstream information such as OCI annotations. 3417 + type: object 3418 + path: 3419 + description: |- 3420 + Path is the relative file path of the Artifact. It can be used to locate 3421 + the file in the root of the Artifact storage on the local file system of 3422 + the controller managing the Source. 3423 + type: string 3424 + revision: 3425 + description: |- 3426 + Revision is a human-readable identifier traceable in the origin source 3427 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3428 + type: string 3429 + size: 3430 + description: Size is the number of bytes in the file. 3431 + format: int64 3432 + type: integer 3433 + url: 3434 + description: |- 3435 + URL is the HTTP address of the Artifact as exposed by the controller 3436 + managing the Source. It can be used to retrieve the Artifact for 3437 + consumption, e.g. by another controller applying the Artifact contents. 3438 + type: string 3439 + required: 3440 + - digest 3441 + - lastUpdateTime 3442 + - path 3443 + - revision 3444 + - url 3445 + type: object 3446 + conditions: 3447 + description: Conditions holds the conditions for the GitRepository. 3448 + items: 3449 + description: Condition contains details for one aspect of the current 3450 + state of this API Resource. 3451 + properties: 3452 + lastTransitionTime: 3453 + description: |- 3454 + lastTransitionTime is the last time the condition transitioned from one status to another. 3455 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3456 + format: date-time 3457 + type: string 3458 + message: 3459 + description: |- 3460 + message is a human readable message indicating details about the transition. 3461 + This may be an empty string. 3462 + maxLength: 32768 3463 + type: string 3464 + observedGeneration: 3465 + description: |- 3466 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3467 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3468 + with respect to the current state of the instance. 3469 + format: int64 3470 + minimum: 0 3471 + type: integer 3472 + reason: 3473 + description: |- 3474 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3475 + Producers of specific condition types may define expected values and meanings for this field, 3476 + and whether the values are considered a guaranteed API. 3477 + The value should be a CamelCase string. 3478 + This field may not be empty. 3479 + maxLength: 1024 3480 + minLength: 1 3481 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3482 + type: string 3483 status: 3484 - default: 3485 - observedGeneration: -1 3486 - description: GitRepositoryStatus records the observed state of a Git repository. 3487 - properties: 3488 - artifact: 3489 - description: Artifact represents the last successful GitRepository reconciliation. 3490 - properties: 3491 - digest: 3492 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3493 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3494 - type: string 3495 - lastUpdateTime: 3496 - description: |- 3497 - LastUpdateTime is the timestamp corresponding to the last update of the 3498 - Artifact. 3499 - format: date-time 3500 - type: string 3501 - metadata: 3502 - additionalProperties: 3503 - type: string 3504 - description: Metadata holds upstream information such as OCI annotations. 3505 - type: object 3506 - path: 3507 - description: |- 3508 - Path is the relative file path of the Artifact. It can be used to locate 3509 - the file in the root of the Artifact storage on the local file system of 3510 - the controller managing the Source. 3511 - type: string 3512 - revision: 3513 - description: |- 3514 - Revision is a human-readable identifier traceable in the origin source 3515 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3516 - type: string 3517 - size: 3518 - description: Size is the number of bytes in the file. 3519 - format: int64 3520 - type: integer 3521 - url: 3522 - description: |- 3523 - URL is the HTTP address of the Artifact as exposed by the controller 3524 - managing the Source. It can be used to retrieve the Artifact for 3525 - consumption, e.g. by another controller applying the Artifact contents. 3526 - type: string 3527 - required: 3528 - - digest 3529 - - lastUpdateTime 3530 - - path 3531 - - revision 3532 - - url 3533 - type: object 3534 - conditions: 3535 - description: Conditions holds the conditions for the GitRepository. 3536 - items: 3537 - description: Condition contains details for one aspect of the current state of this API 3538 - Resource. 3539 - properties: 3540 - lastTransitionTime: 3541 - description: |- 3542 - lastTransitionTime is the last time the condition transitioned from one status to another. 3543 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3544 - format: date-time 3545 - type: string 3546 - message: 3547 - description: |- 3548 - message is a human readable message indicating details about the transition. 3549 - This may be an empty string. 3550 - maxLength: 32768 3551 - type: string 3552 - observedGeneration: 3553 - description: |- 3554 - observedGeneration represents the .metadata.generation that the condition was set based upon. 3555 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3556 - with respect to the current state of the instance. 3557 - format: int64 3558 - minimum: 0 3559 - type: integer 3560 - reason: 3561 - description: |- 3562 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 3563 - Producers of specific condition types may define expected values and meanings for this field, 3564 - and whether the values are considered a guaranteed API. 3565 - The value should be a CamelCase string. 3566 - This field may not be empty. 3567 - maxLength: 1024 3568 - minLength: 1 3569 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3570 - type: string 3571 - status: 3572 - description: status of the condition, one of True, False, Unknown. 3573 - enum: 3574 - - "True" 3575 - - "False" 3576 - - Unknown 3577 - type: string 3578 - type: 3579 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 3580 - maxLength: 316 3581 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3582 - type: string 3583 - required: 3584 - - lastTransitionTime 3585 - - message 3586 - - reason 3587 - - status 3588 - - type 3589 - type: object 3590 - type: array 3591 - includedArtifacts: 3592 - description: |- 3593 - IncludedArtifacts contains a list of the last successfully included 3594 - Artifacts as instructed by GitRepositorySpec.Include. 3595 - items: 3596 - description: Artifact represents the output of a Source reconciliation. 3597 - properties: 3598 - digest: 3599 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3600 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3601 - type: string 3602 - lastUpdateTime: 3603 - description: |- 3604 - LastUpdateTime is the timestamp corresponding to the last update of the 3605 - Artifact. 3606 - format: date-time 3607 - type: string 3608 - metadata: 3609 - additionalProperties: 3610 - type: string 3611 - description: Metadata holds upstream information such as OCI annotations. 3612 - type: object 3613 - path: 3614 - description: |- 3615 - Path is the relative file path of the Artifact. It can be used to locate 3616 - the file in the root of the Artifact storage on the local file system of 3617 - the controller managing the Source. 3618 - type: string 3619 - revision: 3620 - description: |- 3621 - Revision is a human-readable identifier traceable in the origin source 3622 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3623 - type: string 3624 - size: 3625 - description: Size is the number of bytes in the file. 3626 - format: int64 3627 - type: integer 3628 - url: 3629 - description: |- 3630 - URL is the HTTP address of the Artifact as exposed by the controller 3631 - managing the Source. It can be used to retrieve the Artifact for 3632 - consumption, e.g. by another controller applying the Artifact contents. 3633 - type: string 3634 - required: 3635 - - digest 3636 - - lastUpdateTime 3637 - - path 3638 - - revision 3639 - - url 3640 - type: object 3641 - type: array 3642 - lastHandledReconcileAt: 3643 - description: |- 3644 - LastHandledReconcileAt holds the value of the most recent 3645 - reconcile request value, so a change of the annotation value 3646 - can be detected. 3647 - type: string 3648 - observedGeneration: 3649 - description: |- 3650 - ObservedGeneration is the last observed generation of the GitRepository 3651 - object. 3652 - format: int64 3653 - type: integer 3654 - observedIgnore: 3655 - description: |- 3656 - ObservedIgnore is the observed exclusion patterns used for constructing 3657 - the source artifact. 3658 - type: string 3659 - observedInclude: 3660 - description: |- 3661 - ObservedInclude is the observed list of GitRepository resources used to 3662 - produce the current Artifact. 3663 - items: 3664 - description: |- 3665 - GitRepositoryInclude specifies a local reference to a GitRepository which 3666 - Artifact (sub-)contents must be included, and where they should be placed. 3667 - properties: 3668 - fromPath: 3669 - description: |- 3670 - FromPath specifies the path to copy contents from, defaults to the root 3671 - of the Artifact. 3672 - type: string 3673 - repository: 3674 - description: |- 3675 - GitRepositoryRef specifies the GitRepository which Artifact contents 3676 - must be included. 3677 - properties: 3678 - name: 3679 - description: Name of the referent. 3680 - type: string 3681 - required: 3682 - - name 3683 - type: object 3684 - toPath: 3685 - description: |- 3686 - ToPath specifies the path to copy contents to, defaults to the name of 3687 - the GitRepositoryRef. 3688 - type: string 3689 - required: 3690 - - repository 3691 - type: object 3692 - type: array 3693 - observedRecurseSubmodules: 3694 - description: |- 3695 - ObservedRecurseSubmodules is the observed resource submodules 3696 - configuration used to produce the current Artifact. 3697 - type: boolean 3698 - observedSparseCheckout: 3699 - description: |- 3700 - ObservedSparseCheckout is the observed list of directories used to 3701 - produce the current Artifact. 3702 - items: 3703 - type: string 3704 - type: array 3705 - sourceVerificationMode: 3706 - description: |- 3707 - SourceVerificationMode is the last used verification mode indicating 3708 - which Git object(s) have been verified. 3709 - type: string 3710 - type: object 3711 - type: object 3712 - served: true 3713 - storage: true 3714 - subresources: 3715 - status: {} 3716 - - additionalPrinterColumns: 3717 - - jsonPath: .spec.url 3718 - name: URL 3719 - type: string 3720 - - jsonPath: .metadata.creationTimestamp 3721 - name: Age 3722 - type: date 3723 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 3724 - name: Ready 3725 - type: string 3726 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 3727 - name: Status 3728 - type: string 3729 - deprecated: true 3730 - deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 3731 - name: v1beta2 3732 - schema: 3733 - openAPIV3Schema: 3734 - description: GitRepository is the Schema for the gitrepositories API. 3735 - properties: 3736 - apiVersion: 3737 - description: |- 3738 - APIVersion defines the versioned schema of this representation of an object. 3739 - Servers should convert recognized schemas to the latest internal value, and 3740 - may reject unrecognized values. 3741 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3742 - type: string 3743 - kind: 3744 - description: |- 3745 - Kind is a string value representing the REST resource this object represents. 3746 - Servers may infer this from the endpoint the client submits requests to. 3747 - Cannot be updated. 3748 - In CamelCase. 3749 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3750 - type: string 3751 - metadata: 3752 - type: object 3753 - spec: 3754 - description: |- 3755 - GitRepositorySpec specifies the required configuration to produce an 3756 - Artifact for a Git repository. 3757 - properties: 3758 - accessFrom: 3759 - description: |- 3760 - AccessFrom specifies an Access Control List for allowing cross-namespace 3761 - references to this object. 3762 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 3763 - properties: 3764 - namespaceSelectors: 3765 - description: |- 3766 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3767 - Items in this list are evaluated using a logical OR operation. 3768 - items: 3769 - description: |- 3770 - NamespaceSelector selects the namespaces to which this ACL applies. 3771 - An empty map of MatchLabels matches all namespaces in a cluster. 3772 - properties: 3773 - matchLabels: 3774 - additionalProperties: 3775 - type: string 3776 - description: |- 3777 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3778 - map is equivalent to an element of matchExpressions, whose key field is "key", the 3779 - operator is "In", and the values array contains only "value". The requirements are ANDed. 3780 - type: object 3781 - type: object 3782 - type: array 3783 - required: 3784 - - namespaceSelectors 3785 - type: object 3786 - gitImplementation: 3787 - default: go-git 3788 - description: |- 3789 - GitImplementation specifies which Git client library implementation to 3790 - use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 3791 - Deprecated: gitImplementation is deprecated now that 'go-git' is the 3792 - only supported implementation. 3793 - enum: 3794 - - go-git 3795 - - libgit2 3796 - type: string 3797 - ignore: 3798 - description: |- 3799 - Ignore overrides the set of excluded patterns in the .sourceignore format 3800 - (which is the same as .gitignore). If not provided, a default will be used, 3801 - consult the documentation for your version to find out what those are. 3802 - type: string 3803 - include: 3804 - description: |- 3805 - Include specifies a list of GitRepository resources which Artifacts 3806 - should be included in the Artifact produced for this GitRepository. 3807 - items: 3808 - description: |- 3809 - GitRepositoryInclude specifies a local reference to a GitRepository which 3810 - Artifact (sub-)contents must be included, and where they should be placed. 3811 - properties: 3812 - fromPath: 3813 - description: |- 3814 - FromPath specifies the path to copy contents from, defaults to the root 3815 - of the Artifact. 3816 - type: string 3817 - repository: 3818 - description: |- 3819 - GitRepositoryRef specifies the GitRepository which Artifact contents 3820 - must be included. 3821 - properties: 3822 - name: 3823 - description: Name of the referent. 3824 - type: string 3825 - required: 3826 - - name 3827 - type: object 3828 - toPath: 3829 - description: |- 3830 - ToPath specifies the path to copy contents to, defaults to the name of 3831 - the GitRepositoryRef. 3832 - type: string 3833 - required: 3834 - - repository 3835 - type: object 3836 - type: array 3837 - interval: 3838 - description: Interval at which to check the GitRepository for updates. 3839 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 3840 - type: string 3841 - recurseSubmodules: 3842 - description: |- 3843 - RecurseSubmodules enables the initialization of all submodules within 3844 - the GitRepository as cloned from the URL, using their default settings. 3845 - type: boolean 3846 - ref: 3847 - description: |- 3848 - Reference specifies the Git reference to resolve and monitor for 3849 - changes, defaults to the 'master' branch. 3850 - properties: 3851 - branch: 3852 - description: Branch to check out, defaults to 'master' if no other field is defined. 3853 - type: string 3854 - commit: 3855 - description: |- 3856 - Commit SHA to check out, takes precedence over all reference fields. 3857 - 3858 - This can be combined with Branch to shallow clone the branch, in which 3859 - the commit is expected to exist. 3860 - type: string 3861 - name: 3862 - description: |- 3863 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 3864 - 3865 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 3866 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 3867 - type: string 3868 - semver: 3869 - description: SemVer tag expression to check out, takes precedence over Tag. 3870 - type: string 3871 - tag: 3872 - description: Tag to check out, takes precedence over Branch. 3873 - type: string 3874 - type: object 3875 - secretRef: 3876 - description: |- 3877 - SecretRef specifies the Secret containing authentication credentials for 3878 - the GitRepository. 3879 - For HTTPS repositories the Secret must contain 'username' and 'password' 3880 - fields for basic auth or 'bearerToken' field for token auth. 3881 - For SSH repositories the Secret must contain 'identity' 3882 - and 'known_hosts' fields. 3883 - properties: 3884 - name: 3885 - description: Name of the referent. 3886 - type: string 3887 - required: 3888 - - name 3889 - type: object 3890 - suspend: 3891 - description: |- 3892 - Suspend tells the controller to suspend the reconciliation of this 3893 - GitRepository. 3894 - type: boolean 3895 - timeout: 3896 - default: 60s 3897 - description: Timeout for Git operations like cloning, defaults to 60s. 3898 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3899 - type: string 3900 - url: 3901 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 3902 - pattern: ^(http|https|ssh)://.*$ 3903 - type: string 3904 - verify: 3905 - description: |- 3906 - Verification specifies the configuration to verify the Git commit 3907 - signature(s). 3908 - properties: 3909 - mode: 3910 - description: Mode specifies what Git object should be verified, currently ('head'). 3911 - enum: 3912 - - head 3913 - type: string 3914 - secretRef: 3915 - description: |- 3916 - SecretRef specifies the Secret containing the public keys of trusted Git 3917 - authors. 3918 - properties: 3919 - name: 3920 - description: Name of the referent. 3921 - type: string 3922 - required: 3923 - - name 3924 - type: object 3925 - required: 3926 - - mode 3927 - - secretRef 3928 - type: object 3929 - required: 3930 - - interval 3931 - - url 3932 - type: object 3933 - status: 3934 - default: 3935 - observedGeneration: -1 3936 - description: GitRepositoryStatus records the observed state of a Git repository. 3937 - properties: 3938 - artifact: 3939 - description: Artifact represents the last successful GitRepository reconciliation. 3940 - properties: 3941 - digest: 3942 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3943 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3944 - type: string 3945 - lastUpdateTime: 3946 - description: |- 3947 - LastUpdateTime is the timestamp corresponding to the last update of the 3948 - Artifact. 3949 - format: date-time 3950 - type: string 3951 - metadata: 3952 - additionalProperties: 3953 - type: string 3954 - description: Metadata holds upstream information such as OCI annotations. 3955 - type: object 3956 - path: 3957 - description: |- 3958 - Path is the relative file path of the Artifact. It can be used to locate 3959 - the file in the root of the Artifact storage on the local file system of 3960 - the controller managing the Source. 3961 - type: string 3962 - revision: 3963 - description: |- 3964 - Revision is a human-readable identifier traceable in the origin source 3965 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3966 - type: string 3967 - size: 3968 - description: Size is the number of bytes in the file. 3969 - format: int64 3970 - type: integer 3971 - url: 3972 - description: |- 3973 - URL is the HTTP address of the Artifact as exposed by the controller 3974 - managing the Source. It can be used to retrieve the Artifact for 3975 - consumption, e.g. by another controller applying the Artifact contents. 3976 - type: string 3977 - required: 3978 - - digest 3979 - - lastUpdateTime 3980 - - path 3981 - - revision 3982 - - url 3983 - type: object 3984 - conditions: 3985 - description: Conditions holds the conditions for the GitRepository. 3986 - items: 3987 - description: Condition contains details for one aspect of the current state of this API 3988 - Resource. 3989 - properties: 3990 - lastTransitionTime: 3991 - description: |- 3992 - lastTransitionTime is the last time the condition transitioned from one status to another. 3993 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3994 - format: date-time 3995 - type: string 3996 - message: 3997 - description: |- 3998 - message is a human readable message indicating details about the transition. 3999 - This may be an empty string. 4000 - maxLength: 32768 4001 - type: string 4002 - observedGeneration: 4003 - description: |- 4004 - observedGeneration represents the .metadata.generation that the condition was set based upon. 4005 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4006 - with respect to the current state of the instance. 4007 - format: int64 4008 - minimum: 0 4009 - type: integer 4010 - reason: 4011 - description: |- 4012 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 4013 - Producers of specific condition types may define expected values and meanings for this field, 4014 - and whether the values are considered a guaranteed API. 4015 - The value should be a CamelCase string. 4016 - This field may not be empty. 4017 - maxLength: 1024 4018 - minLength: 1 4019 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4020 - type: string 4021 - status: 4022 - description: status of the condition, one of True, False, Unknown. 4023 - enum: 4024 - - "True" 4025 - - "False" 4026 - - Unknown 4027 - type: string 4028 - type: 4029 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 4030 - maxLength: 316 4031 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4032 - type: string 4033 - required: 4034 - - lastTransitionTime 4035 - - message 4036 - - reason 4037 - - status 4038 - - type 4039 - type: object 4040 - type: array 4041 - contentConfigChecksum: 4042 - description: |- 4043 - ContentConfigChecksum is a checksum of all the configurations related to 4044 - the content of the source artifact: 4045 - - .spec.ignore 4046 - - .spec.recurseSubmodules 4047 - - .spec.included and the checksum of the included artifacts 4048 - observed in .status.observedGeneration version of the object. This can 4049 - be used to determine if the content of the included repository has 4050 - changed. 4051 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4052 + description: status of the condition, one of True, False, Unknown. 4053 + enum: 4054 + - "True" 4055 + - "False" 4056 + - Unknown 4057 + type: string 4058 + type: 4059 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 4060 + maxLength: 316 4061 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4062 + type: string 4063 + required: 4064 + - lastTransitionTime 4065 + - message 4066 + - reason 4067 + - status 4068 + - type 4069 + type: object 4070 + type: array 4071 + contentConfigChecksum: 4072 + description: |- 4073 + ContentConfigChecksum is a checksum of all the configurations related to 4074 + the content of the source artifact: 4075 + - .spec.ignore 4076 + - .spec.recurseSubmodules 4077 + - .spec.included and the checksum of the included artifacts 4078 + observed in .status.observedGeneration version of the object. This can 4079 + be used to determine if the content of the included repository has 4080 + changed. 4081 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4082 4083 - Deprecated: Replaced with explicit fields for observed artifact content 4084 - config in the status. 4085 - type: string 4086 - includedArtifacts: 4087 - description: |- 4088 - IncludedArtifacts contains a list of the last successfully included 4089 - Artifacts as instructed by GitRepositorySpec.Include. 4090 - items: 4091 - description: Artifact represents the output of a Source reconciliation. 4092 - properties: 4093 - digest: 4094 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4095 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4096 - type: string 4097 - lastUpdateTime: 4098 - description: |- 4099 - LastUpdateTime is the timestamp corresponding to the last update of the 4100 - Artifact. 4101 - format: date-time 4102 - type: string 4103 - metadata: 4104 - additionalProperties: 4105 - type: string 4106 - description: Metadata holds upstream information such as OCI annotations. 4107 - type: object 4108 - path: 4109 - description: |- 4110 - Path is the relative file path of the Artifact. It can be used to locate 4111 - the file in the root of the Artifact storage on the local file system of 4112 - the controller managing the Source. 4113 - type: string 4114 - revision: 4115 - description: |- 4116 - Revision is a human-readable identifier traceable in the origin source 4117 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4118 - type: string 4119 - size: 4120 - description: Size is the number of bytes in the file. 4121 - format: int64 4122 - type: integer 4123 - url: 4124 - description: |- 4125 - URL is the HTTP address of the Artifact as exposed by the controller 4126 - managing the Source. It can be used to retrieve the Artifact for 4127 - consumption, e.g. by another controller applying the Artifact contents. 4128 - type: string 4129 - required: 4130 - - digest 4131 - - lastUpdateTime 4132 - - path 4133 - - revision 4134 - - url 4135 - type: object 4136 - type: array 4137 - lastHandledReconcileAt: 4138 - description: |- 4139 - LastHandledReconcileAt holds the value of the most recent 4140 - reconcile request value, so a change of the annotation value 4141 - can be detected. 4142 - type: string 4143 - observedGeneration: 4144 - description: |- 4145 - ObservedGeneration is the last observed generation of the GitRepository 4146 - object. 4147 - format: int64 4148 - type: integer 4149 - observedIgnore: 4150 - description: |- 4151 - ObservedIgnore is the observed exclusion patterns used for constructing 4152 - the source artifact. 4153 - type: string 4154 - observedInclude: 4155 - description: |- 4156 - ObservedInclude is the observed list of GitRepository resources used to 4157 - to produce the current Artifact. 4158 - items: 4159 - description: |- 4160 - GitRepositoryInclude specifies a local reference to a GitRepository which 4161 - Artifact (sub-)contents must be included, and where they should be placed. 4162 - properties: 4163 - fromPath: 4164 - description: |- 4165 - FromPath specifies the path to copy contents from, defaults to the root 4166 - of the Artifact. 4167 - type: string 4168 - repository: 4169 - description: |- 4170 - GitRepositoryRef specifies the GitRepository which Artifact contents 4171 - must be included. 4172 - properties: 4173 - name: 4174 - description: Name of the referent. 4175 - type: string 4176 - required: 4177 - - name 4178 - type: object 4179 - toPath: 4180 - description: |- 4181 - ToPath specifies the path to copy contents to, defaults to the name of 4182 - the GitRepositoryRef. 4183 - type: string 4184 - required: 4185 - - repository 4186 - type: object 4187 - type: array 4188 - observedRecurseSubmodules: 4189 - description: |- 4190 - ObservedRecurseSubmodules is the observed resource submodules 4191 - configuration used to produce the current Artifact. 4192 - type: boolean 4193 - url: 4194 - description: |- 4195 - URL is the dynamic fetch link for the latest Artifact. 4196 - It is provided on a "best effort" basis, and using the precise 4197 - GitRepositoryStatus.Artifact data is recommended. 4198 - type: string 4199 - type: object 4200 - type: object 4201 - served: true 4202 - storage: false 4203 - subresources: 4204 - status: {} 4205 + Deprecated: Replaced with explicit fields for observed artifact content 4206 + config in the status. 4207 + type: string 4208 + includedArtifacts: 4209 + description: |- 4210 + IncludedArtifacts contains a list of the last successfully included 4211 + Artifacts as instructed by GitRepositorySpec.Include. 4212 + items: 4213 + description: Artifact represents the output of a Source reconciliation. 4214 + properties: 4215 + digest: 4216 + description: Digest is the digest of the file in the form of 4217 + '<algorithm>:<checksum>'. 4218 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4219 + type: string 4220 + lastUpdateTime: 4221 + description: |- 4222 + LastUpdateTime is the timestamp corresponding to the last update of the 4223 + Artifact. 4224 + format: date-time 4225 + type: string 4226 + metadata: 4227 + additionalProperties: 4228 + type: string 4229 + description: Metadata holds upstream information such as OCI 4230 + annotations. 4231 + type: object 4232 + path: 4233 + description: |- 4234 + Path is the relative file path of the Artifact. It can be used to locate 4235 + the file in the root of the Artifact storage on the local file system of 4236 + the controller managing the Source. 4237 + type: string 4238 + revision: 4239 + description: |- 4240 + Revision is a human-readable identifier traceable in the origin source 4241 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4242 + type: string 4243 + size: 4244 + description: Size is the number of bytes in the file. 4245 + format: int64 4246 + type: integer 4247 + url: 4248 + description: |- 4249 + URL is the HTTP address of the Artifact as exposed by the controller 4250 + managing the Source. It can be used to retrieve the Artifact for 4251 + consumption, e.g. by another controller applying the Artifact contents. 4252 + type: string 4253 + required: 4254 + - digest 4255 + - lastUpdateTime 4256 + - path 4257 + - revision 4258 + - url 4259 + type: object 4260 + type: array 4261 + lastHandledReconcileAt: 4262 + description: |- 4263 + LastHandledReconcileAt holds the value of the most recent 4264 + reconcile request value, so a change of the annotation value 4265 + can be detected. 4266 + type: string 4267 + observedGeneration: 4268 + description: |- 4269 + ObservedGeneration is the last observed generation of the GitRepository 4270 + object. 4271 + format: int64 4272 + type: integer 4273 + observedIgnore: 4274 + description: |- 4275 + ObservedIgnore is the observed exclusion patterns used for constructing 4276 + the source artifact. 4277 + type: string 4278 + observedInclude: 4279 + description: |- 4280 + ObservedInclude is the observed list of GitRepository resources used to 4281 + to produce the current Artifact. 4282 + items: 4283 + description: |- 4284 + GitRepositoryInclude specifies a local reference to a GitRepository which 4285 + Artifact (sub-)contents must be included, and where they should be placed. 4286 + properties: 4287 + fromPath: 4288 + description: |- 4289 + FromPath specifies the path to copy contents from, defaults to the root 4290 + of the Artifact. 4291 + type: string 4292 + repository: 4293 + description: |- 4294 + GitRepositoryRef specifies the GitRepository which Artifact contents 4295 + must be included. 4296 + properties: 4297 + name: 4298 + description: Name of the referent. 4299 + type: string 4300 + required: 4301 + - name 4302 + type: object 4303 + toPath: 4304 + description: |- 4305 + ToPath specifies the path to copy contents to, defaults to the name of 4306 + the GitRepositoryRef. 4307 + type: string 4308 + required: 4309 + - repository 4310 + type: object 4311 + type: array 4312 + observedRecurseSubmodules: 4313 + description: |- 4314 + ObservedRecurseSubmodules is the observed resource submodules 4315 + configuration used to produce the current Artifact. 4316 + type: boolean 4317 + url: 4318 + description: |- 4319 + URL is the dynamic fetch link for the latest Artifact. 4320 + It is provided on a "best effort" basis, and using the precise 4321 + GitRepositoryStatus.Artifact data is recommended. 4322 + type: string 4323 + type: object 4324 + type: object 4325 + served: true 4326 + storage: false 4327 + subresources: 4328 + status: {} 4329 --- 4330 apiVersion: apiextensions.k8s.io/v1 4331 kind: CustomResourceDefinition 4332 metadata: 4333 - annotations: 4334 - controller-gen.kubebuilder.io/version: v0.19.0 4335 - labels: 4336 - app.kubernetes.io/component: source-controller 4337 - app.kubernetes.io/instance: flux-system 4338 - app.kubernetes.io/part-of: flux 4339 - app.kubernetes.io/version: v2.7.3 4340 - name: helmcharts.source.toolkit.fluxcd.io 4341 + annotations: 4342 + controller-gen.kubebuilder.io/version: v0.19.0 4343 + labels: 4344 + app.kubernetes.io/component: source-controller 4345 + app.kubernetes.io/instance: flux-system 4346 + app.kubernetes.io/part-of: flux 4347 + app.kubernetes.io/version: v2.7.5 4348 + name: helmcharts.source.toolkit.fluxcd.io 4349 spec: 4350 - group: source.toolkit.fluxcd.io 4351 - names: 4352 - kind: HelmChart 4353 - listKind: HelmChartList 4354 - plural: helmcharts 4355 - shortNames: 4356 - - hc 4357 - singular: helmchart 4358 - scope: Namespaced 4359 - versions: 4360 - - additionalPrinterColumns: 4361 - - jsonPath: .spec.chart 4362 - name: Chart 4363 - type: string 4364 - - jsonPath: .spec.version 4365 - name: Version 4366 - type: string 4367 - - jsonPath: .spec.sourceRef.kind 4368 - name: Source Kind 4369 - type: string 4370 - - jsonPath: .spec.sourceRef.name 4371 - name: Source Name 4372 - type: string 4373 - - jsonPath: .metadata.creationTimestamp 4374 - name: Age 4375 - type: date 4376 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 4377 - name: Ready 4378 - type: string 4379 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 4380 - name: Status 4381 - type: string 4382 - name: v1 4383 - schema: 4384 - openAPIV3Schema: 4385 - description: HelmChart is the Schema for the helmcharts API. 4386 + group: source.toolkit.fluxcd.io 4387 + names: 4388 + kind: HelmChart 4389 + listKind: HelmChartList 4390 + plural: helmcharts 4391 + shortNames: 4392 + - hc 4393 + singular: helmchart 4394 + scope: Namespaced 4395 + versions: 4396 + - additionalPrinterColumns: 4397 + - jsonPath: .spec.chart 4398 + name: Chart 4399 + type: string 4400 + - jsonPath: .spec.version 4401 + name: Version 4402 + type: string 4403 + - jsonPath: .spec.sourceRef.kind 4404 + name: Source Kind 4405 + type: string 4406 + - jsonPath: .spec.sourceRef.name 4407 + name: Source Name 4408 + type: string 4409 + - jsonPath: .metadata.creationTimestamp 4410 + name: Age 4411 + type: date 4412 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 4413 + name: Ready 4414 + type: string 4415 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 4416 + name: Status 4417 + type: string 4418 + name: v1 4419 + schema: 4420 + openAPIV3Schema: 4421 + description: HelmChart is the Schema for the helmcharts API. 4422 + properties: 4423 + apiVersion: 4424 + description: |- 4425 + APIVersion defines the versioned schema of this representation of an object. 4426 + Servers should convert recognized schemas to the latest internal value, and 4427 + may reject unrecognized values. 4428 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4429 + type: string 4430 + kind: 4431 + description: |- 4432 + Kind is a string value representing the REST resource this object represents. 4433 + Servers may infer this from the endpoint the client submits requests to. 4434 + Cannot be updated. 4435 + In CamelCase. 4436 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4437 + type: string 4438 + metadata: 4439 + type: object 4440 + spec: 4441 + description: HelmChartSpec specifies the desired state of a Helm chart. 4442 + properties: 4443 + chart: 4444 + description: |- 4445 + Chart is the name or path the Helm chart is available at in the 4446 + SourceRef. 4447 + type: string 4448 + ignoreMissingValuesFiles: 4449 + description: |- 4450 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 4451 + files rather than failing. 4452 + type: boolean 4453 + interval: 4454 + description: |- 4455 + Interval at which the HelmChart SourceRef is checked for updates. 4456 + This interval is approximate and may be subject to jitter to ensure 4457 + efficient use of resources. 4458 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4459 + type: string 4460 + reconcileStrategy: 4461 + default: ChartVersion 4462 + description: |- 4463 + ReconcileStrategy determines what enables the creation of a new artifact. 4464 + Valid values are ('ChartVersion', 'Revision'). 4465 + See the documentation of the values for an explanation on their behavior. 4466 + Defaults to ChartVersion when omitted. 4467 + enum: 4468 + - ChartVersion 4469 + - Revision 4470 + type: string 4471 + sourceRef: 4472 + description: SourceRef is the reference to the Source the chart is 4473 + available at. 4474 properties: 4475 - apiVersion: 4476 - description: |- 4477 - APIVersion defines the versioned schema of this representation of an object. 4478 - Servers should convert recognized schemas to the latest internal value, and 4479 - may reject unrecognized values. 4480 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4481 - type: string 4482 - kind: 4483 - description: |- 4484 - Kind is a string value representing the REST resource this object represents. 4485 - Servers may infer this from the endpoint the client submits requests to. 4486 - Cannot be updated. 4487 - In CamelCase. 4488 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4489 + apiVersion: 4490 + description: APIVersion of the referent. 4491 + type: string 4492 + kind: 4493 + description: |- 4494 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 4495 + 'Bucket'). 4496 + enum: 4497 + - HelmRepository 4498 + - GitRepository 4499 + - Bucket 4500 + type: string 4501 + name: 4502 + description: Name of the referent. 4503 + type: string 4504 + required: 4505 + - kind 4506 + - name 4507 + type: object 4508 + suspend: 4509 + description: |- 4510 + Suspend tells the controller to suspend the reconciliation of this 4511 + source. 4512 + type: boolean 4513 + valuesFiles: 4514 + description: |- 4515 + ValuesFiles is an alternative list of values files to use as the chart 4516 + values (values.yaml is not included by default), expected to be a 4517 + relative path in the SourceRef. 4518 + Values files are merged in the order of this list with the last file 4519 + overriding the first. Ignored when omitted. 4520 + items: 4521 + type: string 4522 + type: array 4523 + verify: 4524 + description: |- 4525 + Verify contains the secret name containing the trusted public keys 4526 + used to verify the signature and specifies which provider to use to check 4527 + whether OCI image is authentic. 4528 + This field is only supported when using HelmRepository source with spec.type 'oci'. 4529 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 4530 + properties: 4531 + matchOIDCIdentity: 4532 + description: |- 4533 + MatchOIDCIdentity specifies the identity matching criteria to use 4534 + while verifying an OCI artifact which was signed using Cosign keyless 4535 + signing. The artifact's identity is deemed to be verified if any of the 4536 + specified matchers match against the identity. 4537 + items: 4538 + description: |- 4539 + OIDCIdentityMatch specifies options for verifying the certificate identity, 4540 + i.e. the issuer and the subject of the certificate. 4541 + properties: 4542 + issuer: 4543 + description: |- 4544 + Issuer specifies the regex pattern to match against to verify 4545 + the OIDC issuer in the Fulcio certificate. The pattern must be a 4546 + valid Go regular expression. 4547 + type: string 4548 + subject: 4549 + description: |- 4550 + Subject specifies the regex pattern to match against to verify 4551 + the identity subject in the Fulcio certificate. The pattern must 4552 + be a valid Go regular expression. 4553 + type: string 4554 + required: 4555 + - issuer 4556 + - subject 4557 + type: object 4558 + type: array 4559 + provider: 4560 + default: cosign 4561 + description: Provider specifies the technology used to sign the 4562 + OCI Artifact. 4563 + enum: 4564 + - cosign 4565 + - notation 4566 + type: string 4567 + secretRef: 4568 + description: |- 4569 + SecretRef specifies the Kubernetes Secret containing the 4570 + trusted public keys. 4571 + properties: 4572 + name: 4573 + description: Name of the referent. 4574 type: string 4575 - metadata: 4576 - type: object 4577 - spec: 4578 - description: HelmChartSpec specifies the desired state of a Helm chart. 4579 - properties: 4580 - chart: 4581 - description: |- 4582 - Chart is the name or path the Helm chart is available at in the 4583 - SourceRef. 4584 - type: string 4585 - ignoreMissingValuesFiles: 4586 - description: |- 4587 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 4588 - files rather than failing. 4589 - type: boolean 4590 - interval: 4591 - description: |- 4592 - Interval at which the HelmChart SourceRef is checked for updates. 4593 - This interval is approximate and may be subject to jitter to ensure 4594 - efficient use of resources. 4595 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4596 - type: string 4597 - reconcileStrategy: 4598 - default: ChartVersion 4599 - description: |- 4600 - ReconcileStrategy determines what enables the creation of a new artifact. 4601 - Valid values are ('ChartVersion', 'Revision'). 4602 - See the documentation of the values for an explanation on their behavior. 4603 - Defaults to ChartVersion when omitted. 4604 - enum: 4605 - - ChartVersion 4606 - - Revision 4607 - type: string 4608 - sourceRef: 4609 - description: SourceRef is the reference to the Source the chart is available at. 4610 - properties: 4611 - apiVersion: 4612 - description: APIVersion of the referent. 4613 - type: string 4614 - kind: 4615 - description: |- 4616 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 4617 - 'Bucket'). 4618 - enum: 4619 - - HelmRepository 4620 - - GitRepository 4621 - - Bucket 4622 - type: string 4623 - name: 4624 - description: Name of the referent. 4625 - type: string 4626 - required: 4627 - - kind 4628 - - name 4629 - type: object 4630 - suspend: 4631 - description: |- 4632 - Suspend tells the controller to suspend the reconciliation of this 4633 - source. 4634 - type: boolean 4635 - valuesFiles: 4636 - description: |- 4637 - ValuesFiles is an alternative list of values files to use as the chart 4638 - values (values.yaml is not included by default), expected to be a 4639 - relative path in the SourceRef. 4640 - Values files are merged in the order of this list with the last file 4641 - overriding the first. Ignored when omitted. 4642 - items: 4643 - type: string 4644 - type: array 4645 - verify: 4646 - description: |- 4647 - Verify contains the secret name containing the trusted public keys 4648 - used to verify the signature and specifies which provider to use to check 4649 - whether OCI image is authentic. 4650 - This field is only supported when using HelmRepository source with spec.type 'oci'. 4651 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 4652 - properties: 4653 - matchOIDCIdentity: 4654 - description: |- 4655 - MatchOIDCIdentity specifies the identity matching criteria to use 4656 - while verifying an OCI artifact which was signed using Cosign keyless 4657 - signing. The artifact's identity is deemed to be verified if any of the 4658 - specified matchers match against the identity. 4659 - items: 4660 - description: |- 4661 - OIDCIdentityMatch specifies options for verifying the certificate identity, 4662 - i.e. the issuer and the subject of the certificate. 4663 - properties: 4664 - issuer: 4665 - description: |- 4666 - Issuer specifies the regex pattern to match against to verify 4667 - the OIDC issuer in the Fulcio certificate. The pattern must be a 4668 - valid Go regular expression. 4669 - type: string 4670 - subject: 4671 - description: |- 4672 - Subject specifies the regex pattern to match against to verify 4673 - the identity subject in the Fulcio certificate. The pattern must 4674 - be a valid Go regular expression. 4675 - type: string 4676 - required: 4677 - - issuer 4678 - - subject 4679 - type: object 4680 - type: array 4681 - provider: 4682 - default: cosign 4683 - description: Provider specifies the technology used to sign the OCI Artifact. 4684 - enum: 4685 - - cosign 4686 - - notation 4687 - type: string 4688 - secretRef: 4689 - description: |- 4690 - SecretRef specifies the Kubernetes Secret containing the 4691 - trusted public keys. 4692 - properties: 4693 - name: 4694 - description: Name of the referent. 4695 - type: string 4696 - required: 4697 - - name 4698 - type: object 4699 - required: 4700 - - provider 4701 - type: object 4702 - version: 4703 - default: '*' 4704 - description: |- 4705 - Version is the chart version semver expression, ignored for charts from 4706 - GitRepository and Bucket sources. Defaults to latest when omitted. 4707 - type: string 4708 - required: 4709 - - chart 4710 - - interval 4711 - - sourceRef 4712 - type: object 4713 + required: 4714 + - name 4715 + type: object 4716 + required: 4717 + - provider 4718 + type: object 4719 + version: 4720 + default: '*' 4721 + description: |- 4722 + Version is the chart version semver expression, ignored for charts from 4723 + GitRepository and Bucket sources. Defaults to latest when omitted. 4724 + type: string 4725 + required: 4726 + - chart 4727 + - interval 4728 + - sourceRef 4729 + type: object 4730 + status: 4731 + default: 4732 + observedGeneration: -1 4733 + description: HelmChartStatus records the observed state of the HelmChart. 4734 + properties: 4735 + artifact: 4736 + description: Artifact represents the output of the last successful 4737 + reconciliation. 4738 + properties: 4739 + digest: 4740 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4741 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4742 + type: string 4743 + lastUpdateTime: 4744 + description: |- 4745 + LastUpdateTime is the timestamp corresponding to the last update of the 4746 + Artifact. 4747 + format: date-time 4748 + type: string 4749 + metadata: 4750 + additionalProperties: 4751 + type: string 4752 + description: Metadata holds upstream information such as OCI annotations. 4753 + type: object 4754 + path: 4755 + description: |- 4756 + Path is the relative file path of the Artifact. It can be used to locate 4757 + the file in the root of the Artifact storage on the local file system of 4758 + the controller managing the Source. 4759 + type: string 4760 + revision: 4761 + description: |- 4762 + Revision is a human-readable identifier traceable in the origin source 4763 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4764 + type: string 4765 + size: 4766 + description: Size is the number of bytes in the file. 4767 + format: int64 4768 + type: integer 4769 + url: 4770 + description: |- 4771 + URL is the HTTP address of the Artifact as exposed by the controller 4772 + managing the Source. It can be used to retrieve the Artifact for 4773 + consumption, e.g. by another controller applying the Artifact contents. 4774 + type: string 4775 + required: 4776 + - digest 4777 + - lastUpdateTime 4778 + - path 4779 + - revision 4780 + - url 4781 + type: object 4782 + conditions: 4783 + description: Conditions holds the conditions for the HelmChart. 4784 + items: 4785 + description: Condition contains details for one aspect of the current 4786 + state of this API Resource. 4787 + properties: 4788 + lastTransitionTime: 4789 + description: |- 4790 + lastTransitionTime is the last time the condition transitioned from one status to another. 4791 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4792 + format: date-time 4793 + type: string 4794 + message: 4795 + description: |- 4796 + message is a human readable message indicating details about the transition. 4797 + This may be an empty string. 4798 + maxLength: 32768 4799 + type: string 4800 + observedGeneration: 4801 + description: |- 4802 + observedGeneration represents the .metadata.generation that the condition was set based upon. 4803 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4804 + with respect to the current state of the instance. 4805 + format: int64 4806 + minimum: 0 4807 + type: integer 4808 + reason: 4809 + description: |- 4810 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 4811 + Producers of specific condition types may define expected values and meanings for this field, 4812 + and whether the values are considered a guaranteed API. 4813 + The value should be a CamelCase string. 4814 + This field may not be empty. 4815 + maxLength: 1024 4816 + minLength: 1 4817 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4818 + type: string 4819 status: 4820 - default: 4821 - observedGeneration: -1 4822 - description: HelmChartStatus records the observed state of the HelmChart. 4823 - properties: 4824 - artifact: 4825 - description: Artifact represents the output of the last successful reconciliation. 4826 - properties: 4827 - digest: 4828 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4829 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4830 - type: string 4831 - lastUpdateTime: 4832 - description: |- 4833 - LastUpdateTime is the timestamp corresponding to the last update of the 4834 - Artifact. 4835 - format: date-time 4836 - type: string 4837 - metadata: 4838 - additionalProperties: 4839 - type: string 4840 - description: Metadata holds upstream information such as OCI annotations. 4841 - type: object 4842 - path: 4843 - description: |- 4844 - Path is the relative file path of the Artifact. It can be used to locate 4845 - the file in the root of the Artifact storage on the local file system of 4846 - the controller managing the Source. 4847 - type: string 4848 - revision: 4849 - description: |- 4850 - Revision is a human-readable identifier traceable in the origin source 4851 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4852 - type: string 4853 - size: 4854 - description: Size is the number of bytes in the file. 4855 - format: int64 4856 - type: integer 4857 - url: 4858 - description: |- 4859 - URL is the HTTP address of the Artifact as exposed by the controller 4860 - managing the Source. It can be used to retrieve the Artifact for 4861 - consumption, e.g. by another controller applying the Artifact contents. 4862 - type: string 4863 - required: 4864 - - digest 4865 - - lastUpdateTime 4866 - - path 4867 - - revision 4868 - - url 4869 - type: object 4870 - conditions: 4871 - description: Conditions holds the conditions for the HelmChart. 4872 - items: 4873 - description: Condition contains details for one aspect of the current state of this API 4874 - Resource. 4875 - properties: 4876 - lastTransitionTime: 4877 - description: |- 4878 - lastTransitionTime is the last time the condition transitioned from one status to another. 4879 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4880 - format: date-time 4881 - type: string 4882 - message: 4883 - description: |- 4884 - message is a human readable message indicating details about the transition. 4885 - This may be an empty string. 4886 - maxLength: 32768 4887 - type: string 4888 - observedGeneration: 4889 - description: |- 4890 - observedGeneration represents the .metadata.generation that the condition was set based upon. 4891 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4892 - with respect to the current state of the instance. 4893 - format: int64 4894 - minimum: 0 4895 - type: integer 4896 - reason: 4897 - description: |- 4898 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 4899 - Producers of specific condition types may define expected values and meanings for this field, 4900 - and whether the values are considered a guaranteed API. 4901 - The value should be a CamelCase string. 4902 - This field may not be empty. 4903 - maxLength: 1024 4904 - minLength: 1 4905 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4906 - type: string 4907 - status: 4908 - description: status of the condition, one of True, False, Unknown. 4909 - enum: 4910 - - "True" 4911 - - "False" 4912 - - Unknown 4913 - type: string 4914 - type: 4915 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 4916 - maxLength: 316 4917 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4918 - type: string 4919 - required: 4920 - - lastTransitionTime 4921 - - message 4922 - - reason 4923 - - status 4924 - - type 4925 - type: object 4926 - type: array 4927 - lastHandledReconcileAt: 4928 - description: |- 4929 - LastHandledReconcileAt holds the value of the most recent 4930 - reconcile request value, so a change of the annotation value 4931 - can be detected. 4932 - type: string 4933 - observedChartName: 4934 - description: |- 4935 - ObservedChartName is the last observed chart name as specified by the 4936 - resolved chart reference. 4937 - type: string 4938 - observedGeneration: 4939 - description: |- 4940 - ObservedGeneration is the last observed generation of the HelmChart 4941 - object. 4942 - format: int64 4943 - type: integer 4944 - observedSourceArtifactRevision: 4945 - description: |- 4946 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 4947 - of the HelmChartSpec.SourceRef. 4948 - type: string 4949 - observedValuesFiles: 4950 - description: |- 4951 - ObservedValuesFiles are the observed value files of the last successful 4952 - reconciliation. 4953 - It matches the chart in the last successfully reconciled artifact. 4954 - items: 4955 - type: string 4956 - type: array 4957 - url: 4958 - description: |- 4959 - URL is the dynamic fetch link for the latest Artifact. 4960 - It is provided on a "best effort" basis, and using the precise 4961 - BucketStatus.Artifact data is recommended. 4962 - type: string 4963 - type: object 4964 + description: status of the condition, one of True, False, Unknown. 4965 + enum: 4966 + - "True" 4967 + - "False" 4968 + - Unknown 4969 + type: string 4970 + type: 4971 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 4972 + maxLength: 316 4973 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4974 + type: string 4975 + required: 4976 + - lastTransitionTime 4977 + - message 4978 + - reason 4979 + - status 4980 + - type 4981 + type: object 4982 + type: array 4983 + lastHandledReconcileAt: 4984 + description: |- 4985 + LastHandledReconcileAt holds the value of the most recent 4986 + reconcile request value, so a change of the annotation value 4987 + can be detected. 4988 + type: string 4989 + observedChartName: 4990 + description: |- 4991 + ObservedChartName is the last observed chart name as specified by the 4992 + resolved chart reference. 4993 + type: string 4994 + observedGeneration: 4995 + description: |- 4996 + ObservedGeneration is the last observed generation of the HelmChart 4997 + object. 4998 + format: int64 4999 + type: integer 5000 + observedSourceArtifactRevision: 5001 + description: |- 5002 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 5003 + of the HelmChartSpec.SourceRef. 5004 + type: string 5005 + observedValuesFiles: 5006 + description: |- 5007 + ObservedValuesFiles are the observed value files of the last successful 5008 + reconciliation. 5009 + It matches the chart in the last successfully reconciled artifact. 5010 + items: 5011 + type: string 5012 + type: array 5013 + url: 5014 + description: |- 5015 + URL is the dynamic fetch link for the latest Artifact. 5016 + It is provided on a "best effort" basis, and using the precise 5017 + BucketStatus.Artifact data is recommended. 5018 + type: string 5019 + type: object 5020 + type: object 5021 + served: true 5022 + storage: true 5023 + subresources: 5024 + status: {} 5025 + - additionalPrinterColumns: 5026 + - jsonPath: .spec.chart 5027 + name: Chart 5028 + type: string 5029 + - jsonPath: .spec.version 5030 + name: Version 5031 + type: string 5032 + - jsonPath: .spec.sourceRef.kind 5033 + name: Source Kind 5034 + type: string 5035 + - jsonPath: .spec.sourceRef.name 5036 + name: Source Name 5037 + type: string 5038 + - jsonPath: .metadata.creationTimestamp 5039 + name: Age 5040 + type: date 5041 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5042 + name: Ready 5043 + type: string 5044 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5045 + name: Status 5046 + type: string 5047 + deprecated: true 5048 + deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 5049 + name: v1beta2 5050 + schema: 5051 + openAPIV3Schema: 5052 + description: HelmChart is the Schema for the helmcharts API. 5053 + properties: 5054 + apiVersion: 5055 + description: |- 5056 + APIVersion defines the versioned schema of this representation of an object. 5057 + Servers should convert recognized schemas to the latest internal value, and 5058 + may reject unrecognized values. 5059 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5060 + type: string 5061 + kind: 5062 + description: |- 5063 + Kind is a string value representing the REST resource this object represents. 5064 + Servers may infer this from the endpoint the client submits requests to. 5065 + Cannot be updated. 5066 + In CamelCase. 5067 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5068 + type: string 5069 + metadata: 5070 + type: object 5071 + spec: 5072 + description: HelmChartSpec specifies the desired state of a Helm chart. 5073 + properties: 5074 + accessFrom: 5075 + description: |- 5076 + AccessFrom specifies an Access Control List for allowing cross-namespace 5077 + references to this object. 5078 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 5079 + properties: 5080 + namespaceSelectors: 5081 + description: |- 5082 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5083 + Items in this list are evaluated using a logical OR operation. 5084 + items: 5085 + description: |- 5086 + NamespaceSelector selects the namespaces to which this ACL applies. 5087 + An empty map of MatchLabels matches all namespaces in a cluster. 5088 + properties: 5089 + matchLabels: 5090 + additionalProperties: 5091 + type: string 5092 + description: |- 5093 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5094 + map is equivalent to an element of matchExpressions, whose key field is "key", the 5095 + operator is "In", and the values array contains only "value". The requirements are ANDed. 5096 + type: object 5097 + type: object 5098 + type: array 5099 + required: 5100 + - namespaceSelectors 5101 type: object 5102 - served: true 5103 - storage: true 5104 - subresources: 5105 - status: {} 5106 - - additionalPrinterColumns: 5107 - - jsonPath: .spec.chart 5108 - name: Chart 5109 - type: string 5110 - - jsonPath: .spec.version 5111 - name: Version 5112 - type: string 5113 - - jsonPath: .spec.sourceRef.kind 5114 - name: Source Kind 5115 - type: string 5116 - - jsonPath: .spec.sourceRef.name 5117 - name: Source Name 5118 - type: string 5119 - - jsonPath: .metadata.creationTimestamp 5120 - name: Age 5121 - type: date 5122 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5123 - name: Ready 5124 - type: string 5125 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5126 - name: Status 5127 - type: string 5128 - deprecated: true 5129 - deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 5130 - name: v1beta2 5131 - schema: 5132 - openAPIV3Schema: 5133 - description: HelmChart is the Schema for the helmcharts API. 5134 + chart: 5135 + description: |- 5136 + Chart is the name or path the Helm chart is available at in the 5137 + SourceRef. 5138 + type: string 5139 + ignoreMissingValuesFiles: 5140 + description: |- 5141 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 5142 + files rather than failing. 5143 + type: boolean 5144 + interval: 5145 + description: |- 5146 + Interval at which the HelmChart SourceRef is checked for updates. 5147 + This interval is approximate and may be subject to jitter to ensure 5148 + efficient use of resources. 5149 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5150 + type: string 5151 + reconcileStrategy: 5152 + default: ChartVersion 5153 + description: |- 5154 + ReconcileStrategy determines what enables the creation of a new artifact. 5155 + Valid values are ('ChartVersion', 'Revision'). 5156 + See the documentation of the values for an explanation on their behavior. 5157 + Defaults to ChartVersion when omitted. 5158 + enum: 5159 + - ChartVersion 5160 + - Revision 5161 + type: string 5162 + sourceRef: 5163 + description: SourceRef is the reference to the Source the chart is 5164 + available at. 5165 properties: 5166 - apiVersion: 5167 - description: |- 5168 - APIVersion defines the versioned schema of this representation of an object. 5169 - Servers should convert recognized schemas to the latest internal value, and 5170 - may reject unrecognized values. 5171 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5172 - type: string 5173 - kind: 5174 - description: |- 5175 - Kind is a string value representing the REST resource this object represents. 5176 - Servers may infer this from the endpoint the client submits requests to. 5177 - Cannot be updated. 5178 - In CamelCase. 5179 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5180 + apiVersion: 5181 + description: APIVersion of the referent. 5182 + type: string 5183 + kind: 5184 + description: |- 5185 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5186 + 'Bucket'). 5187 + enum: 5188 + - HelmRepository 5189 + - GitRepository 5190 + - Bucket 5191 + type: string 5192 + name: 5193 + description: Name of the referent. 5194 + type: string 5195 + required: 5196 + - kind 5197 + - name 5198 + type: object 5199 + suspend: 5200 + description: |- 5201 + Suspend tells the controller to suspend the reconciliation of this 5202 + source. 5203 + type: boolean 5204 + valuesFile: 5205 + description: |- 5206 + ValuesFile is an alternative values file to use as the default chart 5207 + values, expected to be a relative path in the SourceRef. Deprecated in 5208 + favor of ValuesFiles, for backwards compatibility the file specified here 5209 + is merged before the ValuesFiles items. Ignored when omitted. 5210 + type: string 5211 + valuesFiles: 5212 + description: |- 5213 + ValuesFiles is an alternative list of values files to use as the chart 5214 + values (values.yaml is not included by default), expected to be a 5215 + relative path in the SourceRef. 5216 + Values files are merged in the order of this list with the last file 5217 + overriding the first. Ignored when omitted. 5218 + items: 5219 + type: string 5220 + type: array 5221 + verify: 5222 + description: |- 5223 + Verify contains the secret name containing the trusted public keys 5224 + used to verify the signature and specifies which provider to use to check 5225 + whether OCI image is authentic. 5226 + This field is only supported when using HelmRepository source with spec.type 'oci'. 5227 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5228 + properties: 5229 + matchOIDCIdentity: 5230 + description: |- 5231 + MatchOIDCIdentity specifies the identity matching criteria to use 5232 + while verifying an OCI artifact which was signed using Cosign keyless 5233 + signing. The artifact's identity is deemed to be verified if any of the 5234 + specified matchers match against the identity. 5235 + items: 5236 + description: |- 5237 + OIDCIdentityMatch specifies options for verifying the certificate identity, 5238 + i.e. the issuer and the subject of the certificate. 5239 + properties: 5240 + issuer: 5241 + description: |- 5242 + Issuer specifies the regex pattern to match against to verify 5243 + the OIDC issuer in the Fulcio certificate. The pattern must be a 5244 + valid Go regular expression. 5245 + type: string 5246 + subject: 5247 + description: |- 5248 + Subject specifies the regex pattern to match against to verify 5249 + the identity subject in the Fulcio certificate. The pattern must 5250 + be a valid Go regular expression. 5251 + type: string 5252 + required: 5253 + - issuer 5254 + - subject 5255 + type: object 5256 + type: array 5257 + provider: 5258 + default: cosign 5259 + description: Provider specifies the technology used to sign the 5260 + OCI Artifact. 5261 + enum: 5262 + - cosign 5263 + - notation 5264 + type: string 5265 + secretRef: 5266 + description: |- 5267 + SecretRef specifies the Kubernetes Secret containing the 5268 + trusted public keys. 5269 + properties: 5270 + name: 5271 + description: Name of the referent. 5272 type: string 5273 - metadata: 5274 - type: object 5275 - spec: 5276 - description: HelmChartSpec specifies the desired state of a Helm chart. 5277 - properties: 5278 - accessFrom: 5279 - description: |- 5280 - AccessFrom specifies an Access Control List for allowing cross-namespace 5281 - references to this object. 5282 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 5283 - properties: 5284 - namespaceSelectors: 5285 - description: |- 5286 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5287 - Items in this list are evaluated using a logical OR operation. 5288 - items: 5289 - description: |- 5290 - NamespaceSelector selects the namespaces to which this ACL applies. 5291 - An empty map of MatchLabels matches all namespaces in a cluster. 5292 - properties: 5293 - matchLabels: 5294 - additionalProperties: 5295 - type: string 5296 - description: |- 5297 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5298 - map is equivalent to an element of matchExpressions, whose key field is "key", the 5299 - operator is "In", and the values array contains only "value". The requirements are ANDed. 5300 - type: object 5301 - type: object 5302 - type: array 5303 - required: 5304 - - namespaceSelectors 5305 - type: object 5306 - chart: 5307 - description: |- 5308 - Chart is the name or path the Helm chart is available at in the 5309 - SourceRef. 5310 - type: string 5311 - ignoreMissingValuesFiles: 5312 - description: |- 5313 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 5314 - files rather than failing. 5315 - type: boolean 5316 - interval: 5317 - description: |- 5318 - Interval at which the HelmChart SourceRef is checked for updates. 5319 - This interval is approximate and may be subject to jitter to ensure 5320 - efficient use of resources. 5321 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5322 - type: string 5323 - reconcileStrategy: 5324 - default: ChartVersion 5325 - description: |- 5326 - ReconcileStrategy determines what enables the creation of a new artifact. 5327 - Valid values are ('ChartVersion', 'Revision'). 5328 - See the documentation of the values for an explanation on their behavior. 5329 - Defaults to ChartVersion when omitted. 5330 - enum: 5331 - - ChartVersion 5332 - - Revision 5333 - type: string 5334 - sourceRef: 5335 - description: SourceRef is the reference to the Source the chart is available at. 5336 - properties: 5337 - apiVersion: 5338 - description: APIVersion of the referent. 5339 - type: string 5340 - kind: 5341 - description: |- 5342 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5343 - 'Bucket'). 5344 - enum: 5345 - - HelmRepository 5346 - - GitRepository 5347 - - Bucket 5348 - type: string 5349 - name: 5350 - description: Name of the referent. 5351 - type: string 5352 - required: 5353 - - kind 5354 - - name 5355 - type: object 5356 - suspend: 5357 - description: |- 5358 - Suspend tells the controller to suspend the reconciliation of this 5359 - source. 5360 - type: boolean 5361 - valuesFile: 5362 - description: |- 5363 - ValuesFile is an alternative values file to use as the default chart 5364 - values, expected to be a relative path in the SourceRef. Deprecated in 5365 - favor of ValuesFiles, for backwards compatibility the file specified here 5366 - is merged before the ValuesFiles items. Ignored when omitted. 5367 - type: string 5368 - valuesFiles: 5369 - description: |- 5370 - ValuesFiles is an alternative list of values files to use as the chart 5371 - values (values.yaml is not included by default), expected to be a 5372 - relative path in the SourceRef. 5373 - Values files are merged in the order of this list with the last file 5374 - overriding the first. Ignored when omitted. 5375 - items: 5376 - type: string 5377 - type: array 5378 - verify: 5379 - description: |- 5380 - Verify contains the secret name containing the trusted public keys 5381 - used to verify the signature and specifies which provider to use to check 5382 - whether OCI image is authentic. 5383 - This field is only supported when using HelmRepository source with spec.type 'oci'. 5384 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5385 - properties: 5386 - matchOIDCIdentity: 5387 - description: |- 5388 - MatchOIDCIdentity specifies the identity matching criteria to use 5389 - while verifying an OCI artifact which was signed using Cosign keyless 5390 - signing. The artifact's identity is deemed to be verified if any of the 5391 - specified matchers match against the identity. 5392 - items: 5393 - description: |- 5394 - OIDCIdentityMatch specifies options for verifying the certificate identity, 5395 - i.e. the issuer and the subject of the certificate. 5396 - properties: 5397 - issuer: 5398 - description: |- 5399 - Issuer specifies the regex pattern to match against to verify 5400 - the OIDC issuer in the Fulcio certificate. The pattern must be a 5401 - valid Go regular expression. 5402 - type: string 5403 - subject: 5404 - description: |- 5405 - Subject specifies the regex pattern to match against to verify 5406 - the identity subject in the Fulcio certificate. The pattern must 5407 - be a valid Go regular expression. 5408 - type: string 5409 - required: 5410 - - issuer 5411 - - subject 5412 - type: object 5413 - type: array 5414 - provider: 5415 - default: cosign 5416 - description: Provider specifies the technology used to sign the OCI Artifact. 5417 - enum: 5418 - - cosign 5419 - - notation 5420 - type: string 5421 - secretRef: 5422 - description: |- 5423 - SecretRef specifies the Kubernetes Secret containing the 5424 - trusted public keys. 5425 - properties: 5426 - name: 5427 - description: Name of the referent. 5428 - type: string 5429 - required: 5430 - - name 5431 - type: object 5432 - required: 5433 - - provider 5434 - type: object 5435 - version: 5436 - default: '*' 5437 - description: |- 5438 - Version is the chart version semver expression, ignored for charts from 5439 - GitRepository and Bucket sources. Defaults to latest when omitted. 5440 - type: string 5441 - required: 5442 - - chart 5443 - - interval 5444 - - sourceRef 5445 - type: object 5446 - status: 5447 - default: 5448 - observedGeneration: -1 5449 - description: HelmChartStatus records the observed state of the HelmChart. 5450 - properties: 5451 - artifact: 5452 - description: Artifact represents the output of the last successful reconciliation. 5453 - properties: 5454 - digest: 5455 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5456 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5457 - type: string 5458 - lastUpdateTime: 5459 - description: |- 5460 - LastUpdateTime is the timestamp corresponding to the last update of the 5461 - Artifact. 5462 - format: date-time 5463 - type: string 5464 - metadata: 5465 - additionalProperties: 5466 - type: string 5467 - description: Metadata holds upstream information such as OCI annotations. 5468 - type: object 5469 - path: 5470 - description: |- 5471 - Path is the relative file path of the Artifact. It can be used to locate 5472 - the file in the root of the Artifact storage on the local file system of 5473 - the controller managing the Source. 5474 - type: string 5475 - revision: 5476 - description: |- 5477 - Revision is a human-readable identifier traceable in the origin source 5478 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5479 - type: string 5480 - size: 5481 - description: Size is the number of bytes in the file. 5482 - format: int64 5483 - type: integer 5484 - url: 5485 - description: |- 5486 - URL is the HTTP address of the Artifact as exposed by the controller 5487 - managing the Source. It can be used to retrieve the Artifact for 5488 - consumption, e.g. by another controller applying the Artifact contents. 5489 - type: string 5490 - required: 5491 - - digest 5492 - - lastUpdateTime 5493 - - path 5494 - - revision 5495 - - url 5496 - type: object 5497 - conditions: 5498 - description: Conditions holds the conditions for the HelmChart. 5499 - items: 5500 - description: Condition contains details for one aspect of the current state of this API 5501 - Resource. 5502 - properties: 5503 - lastTransitionTime: 5504 - description: |- 5505 - lastTransitionTime is the last time the condition transitioned from one status to another. 5506 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5507 - format: date-time 5508 - type: string 5509 - message: 5510 - description: |- 5511 - message is a human readable message indicating details about the transition. 5512 - This may be an empty string. 5513 - maxLength: 32768 5514 - type: string 5515 - observedGeneration: 5516 - description: |- 5517 - observedGeneration represents the .metadata.generation that the condition was set based upon. 5518 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5519 - with respect to the current state of the instance. 5520 - format: int64 5521 - minimum: 0 5522 - type: integer 5523 - reason: 5524 - description: |- 5525 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 5526 - Producers of specific condition types may define expected values and meanings for this field, 5527 - and whether the values are considered a guaranteed API. 5528 - The value should be a CamelCase string. 5529 - This field may not be empty. 5530 - maxLength: 1024 5531 - minLength: 1 5532 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5533 - type: string 5534 - status: 5535 - description: status of the condition, one of True, False, Unknown. 5536 - enum: 5537 - - "True" 5538 - - "False" 5539 - - Unknown 5540 - type: string 5541 - type: 5542 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 5543 - maxLength: 316 5544 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5545 - type: string 5546 - required: 5547 - - lastTransitionTime 5548 - - message 5549 - - reason 5550 - - status 5551 - - type 5552 - type: object 5553 - type: array 5554 - lastHandledReconcileAt: 5555 - description: |- 5556 - LastHandledReconcileAt holds the value of the most recent 5557 - reconcile request value, so a change of the annotation value 5558 - can be detected. 5559 - type: string 5560 - observedChartName: 5561 - description: |- 5562 - ObservedChartName is the last observed chart name as specified by the 5563 - resolved chart reference. 5564 - type: string 5565 - observedGeneration: 5566 - description: |- 5567 - ObservedGeneration is the last observed generation of the HelmChart 5568 - object. 5569 - format: int64 5570 - type: integer 5571 - observedSourceArtifactRevision: 5572 - description: |- 5573 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 5574 - of the HelmChartSpec.SourceRef. 5575 - type: string 5576 - observedValuesFiles: 5577 - description: |- 5578 - ObservedValuesFiles are the observed value files of the last successful 5579 - reconciliation. 5580 - It matches the chart in the last successfully reconciled artifact. 5581 - items: 5582 - type: string 5583 - type: array 5584 - url: 5585 - description: |- 5586 - URL is the dynamic fetch link for the latest Artifact. 5587 - It is provided on a "best effort" basis, and using the precise 5588 - BucketStatus.Artifact data is recommended. 5589 - type: string 5590 - type: object 5591 + required: 5592 + - name 5593 + type: object 5594 + required: 5595 + - provider 5596 + type: object 5597 + version: 5598 + default: '*' 5599 + description: |- 5600 + Version is the chart version semver expression, ignored for charts from 5601 + GitRepository and Bucket sources. Defaults to latest when omitted. 5602 + type: string 5603 + required: 5604 + - chart 5605 + - interval 5606 + - sourceRef 5607 + type: object 5608 + status: 5609 + default: 5610 + observedGeneration: -1 5611 + description: HelmChartStatus records the observed state of the HelmChart. 5612 + properties: 5613 + artifact: 5614 + description: Artifact represents the output of the last successful 5615 + reconciliation. 5616 + properties: 5617 + digest: 5618 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5619 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5620 + type: string 5621 + lastUpdateTime: 5622 + description: |- 5623 + LastUpdateTime is the timestamp corresponding to the last update of the 5624 + Artifact. 5625 + format: date-time 5626 + type: string 5627 + metadata: 5628 + additionalProperties: 5629 + type: string 5630 + description: Metadata holds upstream information such as OCI annotations. 5631 + type: object 5632 + path: 5633 + description: |- 5634 + Path is the relative file path of the Artifact. It can be used to locate 5635 + the file in the root of the Artifact storage on the local file system of 5636 + the controller managing the Source. 5637 + type: string 5638 + revision: 5639 + description: |- 5640 + Revision is a human-readable identifier traceable in the origin source 5641 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5642 + type: string 5643 + size: 5644 + description: Size is the number of bytes in the file. 5645 + format: int64 5646 + type: integer 5647 + url: 5648 + description: |- 5649 + URL is the HTTP address of the Artifact as exposed by the controller 5650 + managing the Source. It can be used to retrieve the Artifact for 5651 + consumption, e.g. by another controller applying the Artifact contents. 5652 + type: string 5653 + required: 5654 + - digest 5655 + - lastUpdateTime 5656 + - path 5657 + - revision 5658 + - url 5659 type: object 5660 - served: true 5661 - storage: false 5662 - subresources: 5663 - status: {} 5664 + conditions: 5665 + description: Conditions holds the conditions for the HelmChart. 5666 + items: 5667 + description: Condition contains details for one aspect of the current 5668 + state of this API Resource. 5669 + properties: 5670 + lastTransitionTime: 5671 + description: |- 5672 + lastTransitionTime is the last time the condition transitioned from one status to another. 5673 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5674 + format: date-time 5675 + type: string 5676 + message: 5677 + description: |- 5678 + message is a human readable message indicating details about the transition. 5679 + This may be an empty string. 5680 + maxLength: 32768 5681 + type: string 5682 + observedGeneration: 5683 + description: |- 5684 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5685 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5686 + with respect to the current state of the instance. 5687 + format: int64 5688 + minimum: 0 5689 + type: integer 5690 + reason: 5691 + description: |- 5692 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5693 + Producers of specific condition types may define expected values and meanings for this field, 5694 + and whether the values are considered a guaranteed API. 5695 + The value should be a CamelCase string. 5696 + This field may not be empty. 5697 + maxLength: 1024 5698 + minLength: 1 5699 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5700 + type: string 5701 + status: 5702 + description: status of the condition, one of True, False, Unknown. 5703 + enum: 5704 + - "True" 5705 + - "False" 5706 + - Unknown 5707 + type: string 5708 + type: 5709 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 5710 + maxLength: 316 5711 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5712 + type: string 5713 + required: 5714 + - lastTransitionTime 5715 + - message 5716 + - reason 5717 + - status 5718 + - type 5719 + type: object 5720 + type: array 5721 + lastHandledReconcileAt: 5722 + description: |- 5723 + LastHandledReconcileAt holds the value of the most recent 5724 + reconcile request value, so a change of the annotation value 5725 + can be detected. 5726 + type: string 5727 + observedChartName: 5728 + description: |- 5729 + ObservedChartName is the last observed chart name as specified by the 5730 + resolved chart reference. 5731 + type: string 5732 + observedGeneration: 5733 + description: |- 5734 + ObservedGeneration is the last observed generation of the HelmChart 5735 + object. 5736 + format: int64 5737 + type: integer 5738 + observedSourceArtifactRevision: 5739 + description: |- 5740 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 5741 + of the HelmChartSpec.SourceRef. 5742 + type: string 5743 + observedValuesFiles: 5744 + description: |- 5745 + ObservedValuesFiles are the observed value files of the last successful 5746 + reconciliation. 5747 + It matches the chart in the last successfully reconciled artifact. 5748 + items: 5749 + type: string 5750 + type: array 5751 + url: 5752 + description: |- 5753 + URL is the dynamic fetch link for the latest Artifact. 5754 + It is provided on a "best effort" basis, and using the precise 5755 + BucketStatus.Artifact data is recommended. 5756 + type: string 5757 + type: object 5758 + type: object 5759 + served: true 5760 + storage: false 5761 + subresources: 5762 + status: {} 5763 --- 5764 apiVersion: apiextensions.k8s.io/v1 5765 kind: CustomResourceDefinition 5766 metadata: 5767 - annotations: 5768 - controller-gen.kubebuilder.io/version: v0.19.0 5769 - labels: 5770 - app.kubernetes.io/component: source-controller 5771 - app.kubernetes.io/instance: flux-system 5772 - app.kubernetes.io/part-of: flux 5773 - app.kubernetes.io/version: v2.7.3 5774 - name: helmrepositories.source.toolkit.fluxcd.io 5775 + annotations: 5776 + controller-gen.kubebuilder.io/version: v0.19.0 5777 + labels: 5778 + app.kubernetes.io/component: source-controller 5779 + app.kubernetes.io/instance: flux-system 5780 + app.kubernetes.io/part-of: flux 5781 + app.kubernetes.io/version: v2.7.5 5782 + name: helmrepositories.source.toolkit.fluxcd.io 5783 spec: 5784 - group: source.toolkit.fluxcd.io 5785 - names: 5786 - kind: HelmRepository 5787 - listKind: HelmRepositoryList 5788 - plural: helmrepositories 5789 - shortNames: 5790 - - helmrepo 5791 - singular: helmrepository 5792 - scope: Namespaced 5793 - versions: 5794 - - additionalPrinterColumns: 5795 - - jsonPath: .spec.url 5796 - name: URL 5797 - type: string 5798 - - jsonPath: .metadata.creationTimestamp 5799 - name: Age 5800 - type: date 5801 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5802 - name: Ready 5803 - type: string 5804 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5805 - name: Status 5806 - type: string 5807 - name: v1 5808 - schema: 5809 - openAPIV3Schema: 5810 - description: HelmRepository is the Schema for the helmrepositories API. 5811 + group: source.toolkit.fluxcd.io 5812 + names: 5813 + kind: HelmRepository 5814 + listKind: HelmRepositoryList 5815 + plural: helmrepositories 5816 + shortNames: 5817 + - helmrepo 5818 + singular: helmrepository 5819 + scope: Namespaced 5820 + versions: 5821 + - additionalPrinterColumns: 5822 + - jsonPath: .spec.url 5823 + name: URL 5824 + type: string 5825 + - jsonPath: .metadata.creationTimestamp 5826 + name: Age 5827 + type: date 5828 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5829 + name: Ready 5830 + type: string 5831 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5832 + name: Status 5833 + type: string 5834 + name: v1 5835 + schema: 5836 + openAPIV3Schema: 5837 + description: HelmRepository is the Schema for the helmrepositories API. 5838 + properties: 5839 + apiVersion: 5840 + description: |- 5841 + APIVersion defines the versioned schema of this representation of an object. 5842 + Servers should convert recognized schemas to the latest internal value, and 5843 + may reject unrecognized values. 5844 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5845 + type: string 5846 + kind: 5847 + description: |- 5848 + Kind is a string value representing the REST resource this object represents. 5849 + Servers may infer this from the endpoint the client submits requests to. 5850 + Cannot be updated. 5851 + In CamelCase. 5852 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5853 + type: string 5854 + metadata: 5855 + type: object 5856 + spec: 5857 + description: |- 5858 + HelmRepositorySpec specifies the required configuration to produce an 5859 + Artifact for a Helm repository index YAML. 5860 + properties: 5861 + accessFrom: 5862 + description: |- 5863 + AccessFrom specifies an Access Control List for allowing cross-namespace 5864 + references to this object. 5865 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 5866 properties: 5867 - apiVersion: 5868 - description: |- 5869 - APIVersion defines the versioned schema of this representation of an object. 5870 - Servers should convert recognized schemas to the latest internal value, and 5871 - may reject unrecognized values. 5872 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5873 - type: string 5874 - kind: 5875 - description: |- 5876 - Kind is a string value representing the REST resource this object represents. 5877 - Servers may infer this from the endpoint the client submits requests to. 5878 - Cannot be updated. 5879 - In CamelCase. 5880 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5881 - type: string 5882 - metadata: 5883 - type: object 5884 - spec: 5885 - description: |- 5886 - HelmRepositorySpec specifies the required configuration to produce an 5887 - Artifact for a Helm repository index YAML. 5888 - properties: 5889 - accessFrom: 5890 - description: |- 5891 - AccessFrom specifies an Access Control List for allowing cross-namespace 5892 - references to this object. 5893 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 5894 - properties: 5895 - namespaceSelectors: 5896 - description: |- 5897 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5898 - Items in this list are evaluated using a logical OR operation. 5899 - items: 5900 - description: |- 5901 - NamespaceSelector selects the namespaces to which this ACL applies. 5902 - An empty map of MatchLabels matches all namespaces in a cluster. 5903 - properties: 5904 - matchLabels: 5905 - additionalProperties: 5906 - type: string 5907 - description: |- 5908 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5909 - map is equivalent to an element of matchExpressions, whose key field is "key", the 5910 - operator is "In", and the values array contains only "value". The requirements are ANDed. 5911 - type: object 5912 - type: object 5913 - type: array 5914 - required: 5915 - - namespaceSelectors 5916 - type: object 5917 - certSecretRef: 5918 - description: |- 5919 - CertSecretRef can be given the name of a Secret containing 5920 - either or both of 5921 + namespaceSelectors: 5922 + description: |- 5923 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5924 + Items in this list are evaluated using a logical OR operation. 5925 + items: 5926 + description: |- 5927 + NamespaceSelector selects the namespaces to which this ACL applies. 5928 + An empty map of MatchLabels matches all namespaces in a cluster. 5929 + properties: 5930 + matchLabels: 5931 + additionalProperties: 5932 + type: string 5933 + description: |- 5934 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5935 + map is equivalent to an element of matchExpressions, whose key field is "key", the 5936 + operator is "In", and the values array contains only "value". The requirements are ANDed. 5937 + type: object 5938 + type: object 5939 + type: array 5940 + required: 5941 + - namespaceSelectors 5942 + type: object 5943 + certSecretRef: 5944 + description: |- 5945 + CertSecretRef can be given the name of a Secret containing 5946 + either or both of 5947 5948 - - a PEM-encoded client certificate (`tls.crt`) and private 5949 - key (`tls.key`); 5950 - - a PEM-encoded CA certificate (`ca.crt`) 5951 + - a PEM-encoded client certificate (`tls.crt`) and private 5952 + key (`tls.key`); 5953 + - a PEM-encoded CA certificate (`ca.crt`) 5954 5955 - and whichever are supplied, will be used for connecting to the 5956 - registry. The client cert and key are useful if you are 5957 - authenticating with a certificate; the CA cert is useful if 5958 - you are using a self-signed server certificate. The Secret must 5959 - be of type `Opaque` or `kubernetes.io/tls`. 5960 + and whichever are supplied, will be used for connecting to the 5961 + registry. The client cert and key are useful if you are 5962 + authenticating with a certificate; the CA cert is useful if 5963 + you are using a self-signed server certificate. The Secret must 5964 + be of type `Opaque` or `kubernetes.io/tls`. 5965 5966 - It takes precedence over the values specified in the Secret referred 5967 - to by `.spec.secretRef`. 5968 - properties: 5969 - name: 5970 - description: Name of the referent. 5971 - type: string 5972 - required: 5973 - - name 5974 - type: object 5975 - insecure: 5976 - description: |- 5977 - Insecure allows connecting to a non-TLS HTTP container registry. 5978 - This field is only taken into account if the .spec.type field is set to 'oci'. 5979 - type: boolean 5980 - interval: 5981 - description: |- 5982 - Interval at which the HelmRepository URL is checked for updates. 5983 - This interval is approximate and may be subject to jitter to ensure 5984 - efficient use of resources. 5985 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5986 - type: string 5987 - passCredentials: 5988 - description: |- 5989 - PassCredentials allows the credentials from the SecretRef to be passed 5990 - on to a host that does not match the host as defined in URL. 5991 - This may be required if the host of the advertised chart URLs in the 5992 - index differ from the defined URL. 5993 - Enabling this should be done with caution, as it can potentially result 5994 - in credentials getting stolen in a MITM-attack. 5995 - type: boolean 5996 - provider: 5997 - default: generic 5998 - description: |- 5999 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 6000 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 6001 - When not specified, defaults to 'generic'. 6002 - enum: 6003 - - generic 6004 - - aws 6005 - - azure 6006 - - gcp 6007 - type: string 6008 - secretRef: 6009 - description: |- 6010 - SecretRef specifies the Secret containing authentication credentials 6011 - for the HelmRepository. 6012 - For HTTP/S basic auth the secret must contain 'username' and 'password' 6013 - fields. 6014 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 6015 - keys is deprecated. Please use `.spec.certSecretRef` instead. 6016 - properties: 6017 - name: 6018 - description: Name of the referent. 6019 - type: string 6020 - required: 6021 - - name 6022 - type: object 6023 - suspend: 6024 - description: |- 6025 - Suspend tells the controller to suspend the reconciliation of this 6026 - HelmRepository. 6027 - type: boolean 6028 - timeout: 6029 - description: |- 6030 - Timeout is used for the index fetch operation for an HTTPS helm repository, 6031 - and for remote OCI Repository operations like pulling for an OCI helm 6032 - chart by the associated HelmChart. 6033 - Its default value is 60s. 6034 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 6035 - type: string 6036 - type: 6037 - description: |- 6038 - Type of the HelmRepository. 6039 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 6040 - enum: 6041 - - default 6042 - - oci 6043 - type: string 6044 - url: 6045 - description: |- 6046 - URL of the Helm repository, a valid URL contains at least a protocol and 6047 - host. 6048 - pattern: ^(http|https|oci)://.*$ 6049 - type: string 6050 - required: 6051 - - url 6052 - type: object 6053 - status: 6054 - default: 6055 - observedGeneration: -1 6056 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 6057 - properties: 6058 - artifact: 6059 - description: Artifact represents the last successful HelmRepository reconciliation. 6060 - properties: 6061 - digest: 6062 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6063 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6064 - type: string 6065 - lastUpdateTime: 6066 - description: |- 6067 - LastUpdateTime is the timestamp corresponding to the last update of the 6068 - Artifact. 6069 - format: date-time 6070 - type: string 6071 - metadata: 6072 - additionalProperties: 6073 - type: string 6074 - description: Metadata holds upstream information such as OCI annotations. 6075 - type: object 6076 - path: 6077 - description: |- 6078 - Path is the relative file path of the Artifact. It can be used to locate 6079 - the file in the root of the Artifact storage on the local file system of 6080 - the controller managing the Source. 6081 - type: string 6082 - revision: 6083 - description: |- 6084 - Revision is a human-readable identifier traceable in the origin source 6085 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6086 - type: string 6087 - size: 6088 - description: Size is the number of bytes in the file. 6089 - format: int64 6090 - type: integer 6091 - url: 6092 - description: |- 6093 - URL is the HTTP address of the Artifact as exposed by the controller 6094 - managing the Source. It can be used to retrieve the Artifact for 6095 - consumption, e.g. by another controller applying the Artifact contents. 6096 - type: string 6097 - required: 6098 - - digest 6099 - - lastUpdateTime 6100 - - path 6101 - - revision 6102 - - url 6103 - type: object 6104 - conditions: 6105 - description: Conditions holds the conditions for the HelmRepository. 6106 - items: 6107 - description: Condition contains details for one aspect of the current state of this API 6108 - Resource. 6109 - properties: 6110 - lastTransitionTime: 6111 - description: |- 6112 - lastTransitionTime is the last time the condition transitioned from one status to another. 6113 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6114 - format: date-time 6115 - type: string 6116 - message: 6117 - description: |- 6118 - message is a human readable message indicating details about the transition. 6119 - This may be an empty string. 6120 - maxLength: 32768 6121 - type: string 6122 - observedGeneration: 6123 - description: |- 6124 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6125 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6126 - with respect to the current state of the instance. 6127 - format: int64 6128 - minimum: 0 6129 - type: integer 6130 - reason: 6131 - description: |- 6132 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6133 - Producers of specific condition types may define expected values and meanings for this field, 6134 - and whether the values are considered a guaranteed API. 6135 - The value should be a CamelCase string. 6136 - This field may not be empty. 6137 - maxLength: 1024 6138 - minLength: 1 6139 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6140 - type: string 6141 - status: 6142 - description: status of the condition, one of True, False, Unknown. 6143 - enum: 6144 - - "True" 6145 - - "False" 6146 - - Unknown 6147 - type: string 6148 - type: 6149 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 6150 - maxLength: 316 6151 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6152 - type: string 6153 - required: 6154 - - lastTransitionTime 6155 - - message 6156 - - reason 6157 - - status 6158 - - type 6159 - type: object 6160 - type: array 6161 - lastHandledReconcileAt: 6162 - description: |- 6163 - LastHandledReconcileAt holds the value of the most recent 6164 - reconcile request value, so a change of the annotation value 6165 - can be detected. 6166 - type: string 6167 - observedGeneration: 6168 - description: |- 6169 - ObservedGeneration is the last observed generation of the HelmRepository 6170 - object. 6171 - format: int64 6172 - type: integer 6173 - url: 6174 - description: |- 6175 - URL is the dynamic fetch link for the latest Artifact. 6176 - It is provided on a "best effort" basis, and using the precise 6177 - HelmRepositoryStatus.Artifact data is recommended. 6178 - type: string 6179 - type: object 6180 + It takes precedence over the values specified in the Secret referred 6181 + to by `.spec.secretRef`. 6182 + properties: 6183 + name: 6184 + description: Name of the referent. 6185 + type: string 6186 + required: 6187 + - name 6188 type: object 6189 - served: true 6190 - storage: true 6191 - subresources: 6192 - status: {} 6193 - - additionalPrinterColumns: 6194 - - jsonPath: .spec.url 6195 - name: URL 6196 - type: string 6197 - - jsonPath: .metadata.creationTimestamp 6198 - name: Age 6199 - type: date 6200 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6201 - name: Ready 6202 - type: string 6203 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6204 - name: Status 6205 - type: string 6206 - deprecated: true 6207 - deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 6208 - name: v1beta2 6209 - schema: 6210 - openAPIV3Schema: 6211 - description: HelmRepository is the Schema for the helmrepositories API. 6212 + insecure: 6213 + description: |- 6214 + Insecure allows connecting to a non-TLS HTTP container registry. 6215 + This field is only taken into account if the .spec.type field is set to 'oci'. 6216 + type: boolean 6217 + interval: 6218 + description: |- 6219 + Interval at which the HelmRepository URL is checked for updates. 6220 + This interval is approximate and may be subject to jitter to ensure 6221 + efficient use of resources. 6222 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6223 + type: string 6224 + passCredentials: 6225 + description: |- 6226 + PassCredentials allows the credentials from the SecretRef to be passed 6227 + on to a host that does not match the host as defined in URL. 6228 + This may be required if the host of the advertised chart URLs in the 6229 + index differ from the defined URL. 6230 + Enabling this should be done with caution, as it can potentially result 6231 + in credentials getting stolen in a MITM-attack. 6232 + type: boolean 6233 + provider: 6234 + default: generic 6235 + description: |- 6236 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 6237 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 6238 + When not specified, defaults to 'generic'. 6239 + enum: 6240 + - generic 6241 + - aws 6242 + - azure 6243 + - gcp 6244 + type: string 6245 + secretRef: 6246 + description: |- 6247 + SecretRef specifies the Secret containing authentication credentials 6248 + for the HelmRepository. 6249 + For HTTP/S basic auth the secret must contain 'username' and 'password' 6250 + fields. 6251 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 6252 + keys is deprecated. Please use `.spec.certSecretRef` instead. 6253 properties: 6254 - apiVersion: 6255 - description: |- 6256 - APIVersion defines the versioned schema of this representation of an object. 6257 - Servers should convert recognized schemas to the latest internal value, and 6258 - may reject unrecognized values. 6259 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6260 - type: string 6261 - kind: 6262 - description: |- 6263 - Kind is a string value representing the REST resource this object represents. 6264 - Servers may infer this from the endpoint the client submits requests to. 6265 - Cannot be updated. 6266 - In CamelCase. 6267 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6268 - type: string 6269 - metadata: 6270 - type: object 6271 - spec: 6272 - description: |- 6273 - HelmRepositorySpec specifies the required configuration to produce an 6274 - Artifact for a Helm repository index YAML. 6275 - properties: 6276 - accessFrom: 6277 - description: |- 6278 - AccessFrom specifies an Access Control List for allowing cross-namespace 6279 - references to this object. 6280 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6281 - properties: 6282 - namespaceSelectors: 6283 - description: |- 6284 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6285 - Items in this list are evaluated using a logical OR operation. 6286 - items: 6287 - description: |- 6288 - NamespaceSelector selects the namespaces to which this ACL applies. 6289 - An empty map of MatchLabels matches all namespaces in a cluster. 6290 - properties: 6291 - matchLabels: 6292 - additionalProperties: 6293 - type: string 6294 - description: |- 6295 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6296 - map is equivalent to an element of matchExpressions, whose key field is "key", the 6297 - operator is "In", and the values array contains only "value". The requirements are ANDed. 6298 - type: object 6299 - type: object 6300 - type: array 6301 - required: 6302 - - namespaceSelectors 6303 - type: object 6304 - certSecretRef: 6305 - description: |- 6306 - CertSecretRef can be given the name of a Secret containing 6307 - either or both of 6308 + name: 6309 + description: Name of the referent. 6310 + type: string 6311 + required: 6312 + - name 6313 + type: object 6314 + suspend: 6315 + description: |- 6316 + Suspend tells the controller to suspend the reconciliation of this 6317 + HelmRepository. 6318 + type: boolean 6319 + timeout: 6320 + description: |- 6321 + Timeout is used for the index fetch operation for an HTTPS helm repository, 6322 + and for remote OCI Repository operations like pulling for an OCI helm 6323 + chart by the associated HelmChart. 6324 + Its default value is 60s. 6325 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 6326 + type: string 6327 + type: 6328 + description: |- 6329 + Type of the HelmRepository. 6330 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 6331 + enum: 6332 + - default 6333 + - oci 6334 + type: string 6335 + url: 6336 + description: |- 6337 + URL of the Helm repository, a valid URL contains at least a protocol and 6338 + host. 6339 + pattern: ^(http|https|oci)://.*$ 6340 + type: string 6341 + required: 6342 + - url 6343 + type: object 6344 + status: 6345 + default: 6346 + observedGeneration: -1 6347 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 6348 + properties: 6349 + artifact: 6350 + description: Artifact represents the last successful HelmRepository 6351 + reconciliation. 6352 + properties: 6353 + digest: 6354 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6355 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6356 + type: string 6357 + lastUpdateTime: 6358 + description: |- 6359 + LastUpdateTime is the timestamp corresponding to the last update of the 6360 + Artifact. 6361 + format: date-time 6362 + type: string 6363 + metadata: 6364 + additionalProperties: 6365 + type: string 6366 + description: Metadata holds upstream information such as OCI annotations. 6367 + type: object 6368 + path: 6369 + description: |- 6370 + Path is the relative file path of the Artifact. It can be used to locate 6371 + the file in the root of the Artifact storage on the local file system of 6372 + the controller managing the Source. 6373 + type: string 6374 + revision: 6375 + description: |- 6376 + Revision is a human-readable identifier traceable in the origin source 6377 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6378 + type: string 6379 + size: 6380 + description: Size is the number of bytes in the file. 6381 + format: int64 6382 + type: integer 6383 + url: 6384 + description: |- 6385 + URL is the HTTP address of the Artifact as exposed by the controller 6386 + managing the Source. It can be used to retrieve the Artifact for 6387 + consumption, e.g. by another controller applying the Artifact contents. 6388 + type: string 6389 + required: 6390 + - digest 6391 + - lastUpdateTime 6392 + - path 6393 + - revision 6394 + - url 6395 + type: object 6396 + conditions: 6397 + description: Conditions holds the conditions for the HelmRepository. 6398 + items: 6399 + description: Condition contains details for one aspect of the current 6400 + state of this API Resource. 6401 + properties: 6402 + lastTransitionTime: 6403 + description: |- 6404 + lastTransitionTime is the last time the condition transitioned from one status to another. 6405 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6406 + format: date-time 6407 + type: string 6408 + message: 6409 + description: |- 6410 + message is a human readable message indicating details about the transition. 6411 + This may be an empty string. 6412 + maxLength: 32768 6413 + type: string 6414 + observedGeneration: 6415 + description: |- 6416 + observedGeneration represents the .metadata.generation that the condition was set based upon. 6417 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6418 + with respect to the current state of the instance. 6419 + format: int64 6420 + minimum: 0 6421 + type: integer 6422 + reason: 6423 + description: |- 6424 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 6425 + Producers of specific condition types may define expected values and meanings for this field, 6426 + and whether the values are considered a guaranteed API. 6427 + The value should be a CamelCase string. 6428 + This field may not be empty. 6429 + maxLength: 1024 6430 + minLength: 1 6431 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6432 + type: string 6433 + status: 6434 + description: status of the condition, one of True, False, Unknown. 6435 + enum: 6436 + - "True" 6437 + - "False" 6438 + - Unknown 6439 + type: string 6440 + type: 6441 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6442 + maxLength: 316 6443 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6444 + type: string 6445 + required: 6446 + - lastTransitionTime 6447 + - message 6448 + - reason 6449 + - status 6450 + - type 6451 + type: object 6452 + type: array 6453 + lastHandledReconcileAt: 6454 + description: |- 6455 + LastHandledReconcileAt holds the value of the most recent 6456 + reconcile request value, so a change of the annotation value 6457 + can be detected. 6458 + type: string 6459 + observedGeneration: 6460 + description: |- 6461 + ObservedGeneration is the last observed generation of the HelmRepository 6462 + object. 6463 + format: int64 6464 + type: integer 6465 + url: 6466 + description: |- 6467 + URL is the dynamic fetch link for the latest Artifact. 6468 + It is provided on a "best effort" basis, and using the precise 6469 + HelmRepositoryStatus.Artifact data is recommended. 6470 + type: string 6471 + type: object 6472 + type: object 6473 + served: true 6474 + storage: true 6475 + subresources: 6476 + status: {} 6477 + - additionalPrinterColumns: 6478 + - jsonPath: .spec.url 6479 + name: URL 6480 + type: string 6481 + - jsonPath: .metadata.creationTimestamp 6482 + name: Age 6483 + type: date 6484 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 6485 + name: Ready 6486 + type: string 6487 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 6488 + name: Status 6489 + type: string 6490 + deprecated: true 6491 + deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 6492 + name: v1beta2 6493 + schema: 6494 + openAPIV3Schema: 6495 + description: HelmRepository is the Schema for the helmrepositories API. 6496 + properties: 6497 + apiVersion: 6498 + description: |- 6499 + APIVersion defines the versioned schema of this representation of an object. 6500 + Servers should convert recognized schemas to the latest internal value, and 6501 + may reject unrecognized values. 6502 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6503 + type: string 6504 + kind: 6505 + description: |- 6506 + Kind is a string value representing the REST resource this object represents. 6507 + Servers may infer this from the endpoint the client submits requests to. 6508 + Cannot be updated. 6509 + In CamelCase. 6510 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6511 + type: string 6512 + metadata: 6513 + type: object 6514 + spec: 6515 + description: |- 6516 + HelmRepositorySpec specifies the required configuration to produce an 6517 + Artifact for a Helm repository index YAML. 6518 + properties: 6519 + accessFrom: 6520 + description: |- 6521 + AccessFrom specifies an Access Control List for allowing cross-namespace 6522 + references to this object. 6523 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6524 + properties: 6525 + namespaceSelectors: 6526 + description: |- 6527 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6528 + Items in this list are evaluated using a logical OR operation. 6529 + items: 6530 + description: |- 6531 + NamespaceSelector selects the namespaces to which this ACL applies. 6532 + An empty map of MatchLabels matches all namespaces in a cluster. 6533 + properties: 6534 + matchLabels: 6535 + additionalProperties: 6536 + type: string 6537 + description: |- 6538 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6539 + map is equivalent to an element of matchExpressions, whose key field is "key", the 6540 + operator is "In", and the values array contains only "value". The requirements are ANDed. 6541 + type: object 6542 + type: object 6543 + type: array 6544 + required: 6545 + - namespaceSelectors 6546 + type: object 6547 + certSecretRef: 6548 + description: |- 6549 + CertSecretRef can be given the name of a Secret containing 6550 + either or both of 6551 6552 - - a PEM-encoded client certificate (`tls.crt`) and private 6553 - key (`tls.key`); 6554 - - a PEM-encoded CA certificate (`ca.crt`) 6555 + - a PEM-encoded client certificate (`tls.crt`) and private 6556 + key (`tls.key`); 6557 + - a PEM-encoded CA certificate (`ca.crt`) 6558 6559 - and whichever are supplied, will be used for connecting to the 6560 - registry. The client cert and key are useful if you are 6561 - authenticating with a certificate; the CA cert is useful if 6562 - you are using a self-signed server certificate. The Secret must 6563 - be of type `Opaque` or `kubernetes.io/tls`. 6564 + and whichever are supplied, will be used for connecting to the 6565 + registry. The client cert and key are useful if you are 6566 + authenticating with a certificate; the CA cert is useful if 6567 + you are using a self-signed server certificate. The Secret must 6568 + be of type `Opaque` or `kubernetes.io/tls`. 6569 6570 - It takes precedence over the values specified in the Secret referred 6571 - to by `.spec.secretRef`. 6572 - properties: 6573 - name: 6574 - description: Name of the referent. 6575 - type: string 6576 - required: 6577 - - name 6578 - type: object 6579 - insecure: 6580 - description: |- 6581 - Insecure allows connecting to a non-TLS HTTP container registry. 6582 - This field is only taken into account if the .spec.type field is set to 'oci'. 6583 - type: boolean 6584 - interval: 6585 - description: |- 6586 - Interval at which the HelmRepository URL is checked for updates. 6587 - This interval is approximate and may be subject to jitter to ensure 6588 - efficient use of resources. 6589 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6590 - type: string 6591 - passCredentials: 6592 - description: |- 6593 - PassCredentials allows the credentials from the SecretRef to be passed 6594 - on to a host that does not match the host as defined in URL. 6595 - This may be required if the host of the advertised chart URLs in the 6596 - index differ from the defined URL. 6597 - Enabling this should be done with caution, as it can potentially result 6598 - in credentials getting stolen in a MITM-attack. 6599 - type: boolean 6600 - provider: 6601 - default: generic 6602 - description: |- 6603 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 6604 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 6605 - When not specified, defaults to 'generic'. 6606 - enum: 6607 - - generic 6608 - - aws 6609 - - azure 6610 - - gcp 6611 - type: string 6612 - secretRef: 6613 - description: |- 6614 - SecretRef specifies the Secret containing authentication credentials 6615 - for the HelmRepository. 6616 - For HTTP/S basic auth the secret must contain 'username' and 'password' 6617 - fields. 6618 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 6619 - keys is deprecated. Please use `.spec.certSecretRef` instead. 6620 - properties: 6621 - name: 6622 - description: Name of the referent. 6623 - type: string 6624 - required: 6625 - - name 6626 - type: object 6627 - suspend: 6628 - description: |- 6629 - Suspend tells the controller to suspend the reconciliation of this 6630 - HelmRepository. 6631 - type: boolean 6632 - timeout: 6633 - description: |- 6634 - Timeout is used for the index fetch operation for an HTTPS helm repository, 6635 - and for remote OCI Repository operations like pulling for an OCI helm 6636 - chart by the associated HelmChart. 6637 - Its default value is 60s. 6638 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 6639 - type: string 6640 - type: 6641 - description: |- 6642 - Type of the HelmRepository. 6643 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 6644 - enum: 6645 - - default 6646 - - oci 6647 - type: string 6648 - url: 6649 - description: |- 6650 - URL of the Helm repository, a valid URL contains at least a protocol and 6651 - host. 6652 - pattern: ^(http|https|oci)://.*$ 6653 - type: string 6654 - required: 6655 - - url 6656 - type: object 6657 - status: 6658 - default: 6659 - observedGeneration: -1 6660 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 6661 - properties: 6662 - artifact: 6663 - description: Artifact represents the last successful HelmRepository reconciliation. 6664 - properties: 6665 - digest: 6666 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6667 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6668 - type: string 6669 - lastUpdateTime: 6670 - description: |- 6671 - LastUpdateTime is the timestamp corresponding to the last update of the 6672 - Artifact. 6673 - format: date-time 6674 - type: string 6675 - metadata: 6676 - additionalProperties: 6677 - type: string 6678 - description: Metadata holds upstream information such as OCI annotations. 6679 - type: object 6680 - path: 6681 - description: |- 6682 - Path is the relative file path of the Artifact. It can be used to locate 6683 - the file in the root of the Artifact storage on the local file system of 6684 - the controller managing the Source. 6685 - type: string 6686 - revision: 6687 - description: |- 6688 - Revision is a human-readable identifier traceable in the origin source 6689 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6690 - type: string 6691 - size: 6692 - description: Size is the number of bytes in the file. 6693 - format: int64 6694 - type: integer 6695 - url: 6696 - description: |- 6697 - URL is the HTTP address of the Artifact as exposed by the controller 6698 - managing the Source. It can be used to retrieve the Artifact for 6699 - consumption, e.g. by another controller applying the Artifact contents. 6700 - type: string 6701 - required: 6702 - - digest 6703 - - lastUpdateTime 6704 - - path 6705 - - revision 6706 - - url 6707 - type: object 6708 - conditions: 6709 - description: Conditions holds the conditions for the HelmRepository. 6710 - items: 6711 - description: Condition contains details for one aspect of the current state of this API 6712 - Resource. 6713 - properties: 6714 - lastTransitionTime: 6715 - description: |- 6716 - lastTransitionTime is the last time the condition transitioned from one status to another. 6717 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6718 - format: date-time 6719 - type: string 6720 - message: 6721 - description: |- 6722 - message is a human readable message indicating details about the transition. 6723 - This may be an empty string. 6724 - maxLength: 32768 6725 - type: string 6726 - observedGeneration: 6727 - description: |- 6728 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6729 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6730 - with respect to the current state of the instance. 6731 - format: int64 6732 - minimum: 0 6733 - type: integer 6734 - reason: 6735 - description: |- 6736 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6737 - Producers of specific condition types may define expected values and meanings for this field, 6738 - and whether the values are considered a guaranteed API. 6739 - The value should be a CamelCase string. 6740 - This field may not be empty. 6741 - maxLength: 1024 6742 - minLength: 1 6743 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6744 - type: string 6745 - status: 6746 - description: status of the condition, one of True, False, Unknown. 6747 - enum: 6748 - - "True" 6749 - - "False" 6750 - - Unknown 6751 - type: string 6752 - type: 6753 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 6754 - maxLength: 316 6755 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6756 - type: string 6757 - required: 6758 - - lastTransitionTime 6759 - - message 6760 - - reason 6761 - - status 6762 - - type 6763 - type: object 6764 - type: array 6765 - lastHandledReconcileAt: 6766 - description: |- 6767 - LastHandledReconcileAt holds the value of the most recent 6768 - reconcile request value, so a change of the annotation value 6769 - can be detected. 6770 - type: string 6771 - observedGeneration: 6772 - description: |- 6773 - ObservedGeneration is the last observed generation of the HelmRepository 6774 - object. 6775 - format: int64 6776 - type: integer 6777 - url: 6778 - description: |- 6779 - URL is the dynamic fetch link for the latest Artifact. 6780 - It is provided on a "best effort" basis, and using the precise 6781 - HelmRepositoryStatus.Artifact data is recommended. 6782 - type: string 6783 - type: object 6784 + It takes precedence over the values specified in the Secret referred 6785 + to by `.spec.secretRef`. 6786 + properties: 6787 + name: 6788 + description: Name of the referent. 6789 + type: string 6790 + required: 6791 + - name 6792 + type: object 6793 + insecure: 6794 + description: |- 6795 + Insecure allows connecting to a non-TLS HTTP container registry. 6796 + This field is only taken into account if the .spec.type field is set to 'oci'. 6797 + type: boolean 6798 + interval: 6799 + description: |- 6800 + Interval at which the HelmRepository URL is checked for updates. 6801 + This interval is approximate and may be subject to jitter to ensure 6802 + efficient use of resources. 6803 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6804 + type: string 6805 + passCredentials: 6806 + description: |- 6807 + PassCredentials allows the credentials from the SecretRef to be passed 6808 + on to a host that does not match the host as defined in URL. 6809 + This may be required if the host of the advertised chart URLs in the 6810 + index differ from the defined URL. 6811 + Enabling this should be done with caution, as it can potentially result 6812 + in credentials getting stolen in a MITM-attack. 6813 + type: boolean 6814 + provider: 6815 + default: generic 6816 + description: |- 6817 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 6818 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 6819 + When not specified, defaults to 'generic'. 6820 + enum: 6821 + - generic 6822 + - aws 6823 + - azure 6824 + - gcp 6825 + type: string 6826 + secretRef: 6827 + description: |- 6828 + SecretRef specifies the Secret containing authentication credentials 6829 + for the HelmRepository. 6830 + For HTTP/S basic auth the secret must contain 'username' and 'password' 6831 + fields. 6832 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 6833 + keys is deprecated. Please use `.spec.certSecretRef` instead. 6834 + properties: 6835 + name: 6836 + description: Name of the referent. 6837 + type: string 6838 + required: 6839 + - name 6840 + type: object 6841 + suspend: 6842 + description: |- 6843 + Suspend tells the controller to suspend the reconciliation of this 6844 + HelmRepository. 6845 + type: boolean 6846 + timeout: 6847 + description: |- 6848 + Timeout is used for the index fetch operation for an HTTPS helm repository, 6849 + and for remote OCI Repository operations like pulling for an OCI helm 6850 + chart by the associated HelmChart. 6851 + Its default value is 60s. 6852 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 6853 + type: string 6854 + type: 6855 + description: |- 6856 + Type of the HelmRepository. 6857 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 6858 + enum: 6859 + - default 6860 + - oci 6861 + type: string 6862 + url: 6863 + description: |- 6864 + URL of the Helm repository, a valid URL contains at least a protocol and 6865 + host. 6866 + pattern: ^(http|https|oci)://.*$ 6867 + type: string 6868 + required: 6869 + - url 6870 + type: object 6871 + status: 6872 + default: 6873 + observedGeneration: -1 6874 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 6875 + properties: 6876 + artifact: 6877 + description: Artifact represents the last successful HelmRepository 6878 + reconciliation. 6879 + properties: 6880 + digest: 6881 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6882 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6883 + type: string 6884 + lastUpdateTime: 6885 + description: |- 6886 + LastUpdateTime is the timestamp corresponding to the last update of the 6887 + Artifact. 6888 + format: date-time 6889 + type: string 6890 + metadata: 6891 + additionalProperties: 6892 + type: string 6893 + description: Metadata holds upstream information such as OCI annotations. 6894 + type: object 6895 + path: 6896 + description: |- 6897 + Path is the relative file path of the Artifact. It can be used to locate 6898 + the file in the root of the Artifact storage on the local file system of 6899 + the controller managing the Source. 6900 + type: string 6901 + revision: 6902 + description: |- 6903 + Revision is a human-readable identifier traceable in the origin source 6904 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6905 + type: string 6906 + size: 6907 + description: Size is the number of bytes in the file. 6908 + format: int64 6909 + type: integer 6910 + url: 6911 + description: |- 6912 + URL is the HTTP address of the Artifact as exposed by the controller 6913 + managing the Source. It can be used to retrieve the Artifact for 6914 + consumption, e.g. by another controller applying the Artifact contents. 6915 + type: string 6916 + required: 6917 + - digest 6918 + - lastUpdateTime 6919 + - path 6920 + - revision 6921 + - url 6922 type: object 6923 - served: true 6924 - storage: false 6925 - subresources: 6926 - status: {} 6927 + conditions: 6928 + description: Conditions holds the conditions for the HelmRepository. 6929 + items: 6930 + description: Condition contains details for one aspect of the current 6931 + state of this API Resource. 6932 + properties: 6933 + lastTransitionTime: 6934 + description: |- 6935 + lastTransitionTime is the last time the condition transitioned from one status to another. 6936 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6937 + format: date-time 6938 + type: string 6939 + message: 6940 + description: |- 6941 + message is a human readable message indicating details about the transition. 6942 + This may be an empty string. 6943 + maxLength: 32768 6944 + type: string 6945 + observedGeneration: 6946 + description: |- 6947 + observedGeneration represents the .metadata.generation that the condition was set based upon. 6948 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6949 + with respect to the current state of the instance. 6950 + format: int64 6951 + minimum: 0 6952 + type: integer 6953 + reason: 6954 + description: |- 6955 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 6956 + Producers of specific condition types may define expected values and meanings for this field, 6957 + and whether the values are considered a guaranteed API. 6958 + The value should be a CamelCase string. 6959 + This field may not be empty. 6960 + maxLength: 1024 6961 + minLength: 1 6962 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6963 + type: string 6964 + status: 6965 + description: status of the condition, one of True, False, Unknown. 6966 + enum: 6967 + - "True" 6968 + - "False" 6969 + - Unknown 6970 + type: string 6971 + type: 6972 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6973 + maxLength: 316 6974 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6975 + type: string 6976 + required: 6977 + - lastTransitionTime 6978 + - message 6979 + - reason 6980 + - status 6981 + - type 6982 + type: object 6983 + type: array 6984 + lastHandledReconcileAt: 6985 + description: |- 6986 + LastHandledReconcileAt holds the value of the most recent 6987 + reconcile request value, so a change of the annotation value 6988 + can be detected. 6989 + type: string 6990 + observedGeneration: 6991 + description: |- 6992 + ObservedGeneration is the last observed generation of the HelmRepository 6993 + object. 6994 + format: int64 6995 + type: integer 6996 + url: 6997 + description: |- 6998 + URL is the dynamic fetch link for the latest Artifact. 6999 + It is provided on a "best effort" basis, and using the precise 7000 + HelmRepositoryStatus.Artifact data is recommended. 7001 + type: string 7002 + type: object 7003 + type: object 7004 + served: true 7005 + storage: false 7006 + subresources: 7007 + status: {} 7008 --- 7009 apiVersion: apiextensions.k8s.io/v1 7010 kind: CustomResourceDefinition 7011 metadata: 7012 - annotations: 7013 - controller-gen.kubebuilder.io/version: v0.19.0 7014 - labels: 7015 - app.kubernetes.io/component: source-controller 7016 - app.kubernetes.io/instance: flux-system 7017 - app.kubernetes.io/part-of: flux 7018 - app.kubernetes.io/version: v2.7.3 7019 - name: ocirepositories.source.toolkit.fluxcd.io 7020 + annotations: 7021 + controller-gen.kubebuilder.io/version: v0.19.0 7022 + labels: 7023 + app.kubernetes.io/component: source-controller 7024 + app.kubernetes.io/instance: flux-system 7025 + app.kubernetes.io/part-of: flux 7026 + app.kubernetes.io/version: v2.7.5 7027 + name: ocirepositories.source.toolkit.fluxcd.io 7028 spec: 7029 - group: source.toolkit.fluxcd.io 7030 - names: 7031 - kind: OCIRepository 7032 - listKind: OCIRepositoryList 7033 - plural: ocirepositories 7034 - shortNames: 7035 - - ocirepo 7036 - singular: ocirepository 7037 - scope: Namespaced 7038 - versions: 7039 - - additionalPrinterColumns: 7040 - - jsonPath: .spec.url 7041 - name: URL 7042 - type: string 7043 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7044 - name: Ready 7045 - type: string 7046 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7047 - name: Status 7048 - type: string 7049 - - jsonPath: .metadata.creationTimestamp 7050 - name: Age 7051 - type: date 7052 - name: v1 7053 - schema: 7054 - openAPIV3Schema: 7055 - description: OCIRepository is the Schema for the ocirepositories API 7056 - properties: 7057 - apiVersion: 7058 - description: |- 7059 - APIVersion defines the versioned schema of this representation of an object. 7060 - Servers should convert recognized schemas to the latest internal value, and 7061 - may reject unrecognized values. 7062 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7063 - type: string 7064 - kind: 7065 - description: |- 7066 - Kind is a string value representing the REST resource this object represents. 7067 - Servers may infer this from the endpoint the client submits requests to. 7068 - Cannot be updated. 7069 - In CamelCase. 7070 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7071 - type: string 7072 - metadata: 7073 - type: object 7074 - spec: 7075 - description: OCIRepositorySpec defines the desired state of OCIRepository 7076 - properties: 7077 - certSecretRef: 7078 - description: |- 7079 - CertSecretRef can be given the name of a Secret containing 7080 - either or both of 7081 - 7082 - - a PEM-encoded client certificate (`tls.crt`) and private 7083 - key (`tls.key`); 7084 - - a PEM-encoded CA certificate (`ca.crt`) 7085 - 7086 - and whichever are supplied, will be used for connecting to the 7087 - registry. The client cert and key are useful if you are 7088 - authenticating with a certificate; the CA cert is useful if 7089 - you are using a self-signed server certificate. The Secret must 7090 - be of type `Opaque` or `kubernetes.io/tls`. 7091 - properties: 7092 - name: 7093 - description: Name of the referent. 7094 - type: string 7095 - required: 7096 - - name 7097 - type: object 7098 - ignore: 7099 - description: |- 7100 - Ignore overrides the set of excluded patterns in the .sourceignore format 7101 - (which is the same as .gitignore). If not provided, a default will be used, 7102 - consult the documentation for your version to find out what those are. 7103 - type: string 7104 - insecure: 7105 - description: Insecure allows connecting to a non-TLS HTTP container registry. 7106 - type: boolean 7107 - interval: 7108 - description: |- 7109 - Interval at which the OCIRepository URL is checked for updates. 7110 - This interval is approximate and may be subject to jitter to ensure 7111 - efficient use of resources. 7112 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7113 - type: string 7114 - layerSelector: 7115 - description: |- 7116 - LayerSelector specifies which layer should be extracted from the OCI artifact. 7117 - When not specified, the first layer found in the artifact is selected. 7118 - properties: 7119 - mediaType: 7120 - description: |- 7121 - MediaType specifies the OCI media type of the layer 7122 - which should be extracted from the OCI Artifact. The 7123 - first layer matching this type is selected. 7124 - type: string 7125 - operation: 7126 - description: |- 7127 - Operation specifies how the selected layer should be processed. 7128 - By default, the layer compressed content is extracted to storage. 7129 - When the operation is set to 'copy', the layer compressed content 7130 - is persisted to storage as it is. 7131 - enum: 7132 - - extract 7133 - - copy 7134 - type: string 7135 - type: object 7136 - provider: 7137 - default: generic 7138 - description: |- 7139 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7140 - When not specified, defaults to 'generic'. 7141 - enum: 7142 - - generic 7143 - - aws 7144 - - azure 7145 - - gcp 7146 - type: string 7147 - proxySecretRef: 7148 - description: |- 7149 - ProxySecretRef specifies the Secret containing the proxy configuration 7150 - to use while communicating with the container registry. 7151 - properties: 7152 - name: 7153 - description: Name of the referent. 7154 - type: string 7155 - required: 7156 - - name 7157 - type: object 7158 - ref: 7159 - description: |- 7160 - The OCI reference to pull and monitor for changes, 7161 - defaults to the latest tag. 7162 - properties: 7163 - digest: 7164 - description: |- 7165 - Digest is the image digest to pull, takes precedence over SemVer. 7166 - The value should be in the format 'sha256:<HASH>'. 7167 - type: string 7168 - semver: 7169 - description: |- 7170 - SemVer is the range of tags to pull selecting the latest within 7171 - the range, takes precedence over Tag. 7172 - type: string 7173 - semverFilter: 7174 - description: SemverFilter is a regex pattern to filter the tags within the SemVer 7175 - range. 7176 - type: string 7177 - tag: 7178 - description: Tag is the image tag to pull, defaults to latest. 7179 - type: string 7180 - type: object 7181 - secretRef: 7182 - description: |- 7183 - SecretRef contains the secret name containing the registry login 7184 - credentials to resolve image metadata. 7185 - The secret must be of type kubernetes.io/dockerconfigjson. 7186 - properties: 7187 - name: 7188 - description: Name of the referent. 7189 - type: string 7190 - required: 7191 - - name 7192 - type: object 7193 - serviceAccountName: 7194 - description: |- 7195 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 7196 - the image pull if the service account has attached pull secrets. For more information: 7197 - https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 7198 - type: string 7199 - suspend: 7200 - description: This flag tells the controller to suspend the reconciliation of this source. 7201 - type: boolean 7202 - timeout: 7203 - default: 60s 7204 - description: The timeout for remote OCI Repository operations like pulling, defaults to 60s. 7205 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7206 - type: string 7207 - url: 7208 - description: |- 7209 - URL is a reference to an OCI artifact repository hosted 7210 - on a remote container registry. 7211 - pattern: ^oci://.*$ 7212 - type: string 7213 - verify: 7214 - description: |- 7215 - Verify contains the secret name containing the trusted public keys 7216 - used to verify the signature and specifies which provider to use to check 7217 - whether OCI image is authentic. 7218 - properties: 7219 - matchOIDCIdentity: 7220 - description: |- 7221 - MatchOIDCIdentity specifies the identity matching criteria to use 7222 - while verifying an OCI artifact which was signed using Cosign keyless 7223 - signing. The artifact's identity is deemed to be verified if any of the 7224 - specified matchers match against the identity. 7225 - items: 7226 - description: |- 7227 - OIDCIdentityMatch specifies options for verifying the certificate identity, 7228 - i.e. the issuer and the subject of the certificate. 7229 - properties: 7230 - issuer: 7231 - description: |- 7232 - Issuer specifies the regex pattern to match against to verify 7233 - the OIDC issuer in the Fulcio certificate. The pattern must be a 7234 - valid Go regular expression. 7235 - type: string 7236 - subject: 7237 - description: |- 7238 - Subject specifies the regex pattern to match against to verify 7239 - the identity subject in the Fulcio certificate. The pattern must 7240 - be a valid Go regular expression. 7241 - type: string 7242 - required: 7243 - - issuer 7244 - - subject 7245 - type: object 7246 - type: array 7247 - provider: 7248 - default: cosign 7249 - description: Provider specifies the technology used to sign the OCI Artifact. 7250 - enum: 7251 - - cosign 7252 - - notation 7253 - type: string 7254 - secretRef: 7255 - description: |- 7256 - SecretRef specifies the Kubernetes Secret containing the 7257 - trusted public keys. 7258 - properties: 7259 - name: 7260 - description: Name of the referent. 7261 - type: string 7262 - required: 7263 - - name 7264 - type: object 7265 - required: 7266 - - provider 7267 - type: object 7268 - required: 7269 - - interval 7270 - - url 7271 - type: object 7272 - status: 7273 - default: 7274 - observedGeneration: -1 7275 - description: OCIRepositoryStatus defines the observed state of OCIRepository 7276 - properties: 7277 - artifact: 7278 - description: Artifact represents the output of the last successful OCI Repository sync. 7279 - properties: 7280 - digest: 7281 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7282 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7283 - type: string 7284 - lastUpdateTime: 7285 - description: |- 7286 - LastUpdateTime is the timestamp corresponding to the last update of the 7287 - Artifact. 7288 - format: date-time 7289 - type: string 7290 - metadata: 7291 - additionalProperties: 7292 - type: string 7293 - description: Metadata holds upstream information such as OCI annotations. 7294 - type: object 7295 - path: 7296 - description: |- 7297 - Path is the relative file path of the Artifact. It can be used to locate 7298 - the file in the root of the Artifact storage on the local file system of 7299 - the controller managing the Source. 7300 - type: string 7301 - revision: 7302 - description: |- 7303 - Revision is a human-readable identifier traceable in the origin source 7304 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7305 - type: string 7306 - size: 7307 - description: Size is the number of bytes in the file. 7308 - format: int64 7309 - type: integer 7310 - url: 7311 - description: |- 7312 - URL is the HTTP address of the Artifact as exposed by the controller 7313 - managing the Source. It can be used to retrieve the Artifact for 7314 - consumption, e.g. by another controller applying the Artifact contents. 7315 - type: string 7316 - required: 7317 - - digest 7318 - - lastUpdateTime 7319 - - path 7320 - - revision 7321 - - url 7322 - type: object 7323 - conditions: 7324 - description: Conditions holds the conditions for the OCIRepository. 7325 - items: 7326 - description: Condition contains details for one aspect of the current state of this API 7327 - Resource. 7328 - properties: 7329 - lastTransitionTime: 7330 - description: |- 7331 - lastTransitionTime is the last time the condition transitioned from one status to another. 7332 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7333 - format: date-time 7334 - type: string 7335 - message: 7336 - description: |- 7337 - message is a human readable message indicating details about the transition. 7338 - This may be an empty string. 7339 - maxLength: 32768 7340 - type: string 7341 - observedGeneration: 7342 - description: |- 7343 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7344 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7345 - with respect to the current state of the instance. 7346 - format: int64 7347 - minimum: 0 7348 - type: integer 7349 - reason: 7350 - description: |- 7351 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7352 - Producers of specific condition types may define expected values and meanings for this field, 7353 - and whether the values are considered a guaranteed API. 7354 - The value should be a CamelCase string. 7355 - This field may not be empty. 7356 - maxLength: 1024 7357 - minLength: 1 7358 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7359 - type: string 7360 - status: 7361 - description: status of the condition, one of True, False, Unknown. 7362 - enum: 7363 - - "True" 7364 - - "False" 7365 - - Unknown 7366 - type: string 7367 - type: 7368 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 7369 - maxLength: 316 7370 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7371 - type: string 7372 - required: 7373 - - lastTransitionTime 7374 - - message 7375 - - reason 7376 - - status 7377 - - type 7378 - type: object 7379 - type: array 7380 - lastHandledReconcileAt: 7381 - description: |- 7382 - LastHandledReconcileAt holds the value of the most recent 7383 - reconcile request value, so a change of the annotation value 7384 - can be detected. 7385 - type: string 7386 - observedGeneration: 7387 - description: ObservedGeneration is the last observed generation. 7388 - format: int64 7389 - type: integer 7390 - observedIgnore: 7391 - description: |- 7392 - ObservedIgnore is the observed exclusion patterns used for constructing 7393 - the source artifact. 7394 - type: string 7395 - observedLayerSelector: 7396 - description: |- 7397 - ObservedLayerSelector is the observed layer selector used for constructing 7398 - the source artifact. 7399 - properties: 7400 - mediaType: 7401 - description: |- 7402 - MediaType specifies the OCI media type of the layer 7403 - which should be extracted from the OCI Artifact. The 7404 - first layer matching this type is selected. 7405 - type: string 7406 - operation: 7407 - description: |- 7408 - Operation specifies how the selected layer should be processed. 7409 - By default, the layer compressed content is extracted to storage. 7410 - When the operation is set to 'copy', the layer compressed content 7411 - is persisted to storage as it is. 7412 - enum: 7413 - - extract 7414 - - copy 7415 - type: string 7416 - type: object 7417 - url: 7418 - description: URL is the download link for the artifact output of the last OCI Repository sync. 7419 - type: string 7420 - type: object 7421 + group: source.toolkit.fluxcd.io 7422 + names: 7423 + kind: OCIRepository 7424 + listKind: OCIRepositoryList 7425 + plural: ocirepositories 7426 + shortNames: 7427 + - ocirepo 7428 + singular: ocirepository 7429 + scope: Namespaced 7430 + versions: 7431 + - additionalPrinterColumns: 7432 + - jsonPath: .spec.url 7433 + name: URL 7434 + type: string 7435 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 7436 + name: Ready 7437 + type: string 7438 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 7439 + name: Status 7440 + type: string 7441 + - jsonPath: .metadata.creationTimestamp 7442 + name: Age 7443 + type: date 7444 + name: v1 7445 + schema: 7446 + openAPIV3Schema: 7447 + description: OCIRepository is the Schema for the ocirepositories API 7448 + properties: 7449 + apiVersion: 7450 + description: |- 7451 + APIVersion defines the versioned schema of this representation of an object. 7452 + Servers should convert recognized schemas to the latest internal value, and 7453 + may reject unrecognized values. 7454 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7455 + type: string 7456 + kind: 7457 + description: |- 7458 + Kind is a string value representing the REST resource this object represents. 7459 + Servers may infer this from the endpoint the client submits requests to. 7460 + Cannot be updated. 7461 + In CamelCase. 7462 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7463 + type: string 7464 + metadata: 7465 + type: object 7466 + spec: 7467 + description: OCIRepositorySpec defines the desired state of OCIRepository 7468 + properties: 7469 + certSecretRef: 7470 + description: |- 7471 + CertSecretRef can be given the name of a Secret containing 7472 + either or both of 7473 + 7474 + - a PEM-encoded client certificate (`tls.crt`) and private 7475 + key (`tls.key`); 7476 + - a PEM-encoded CA certificate (`ca.crt`) 7477 + 7478 + and whichever are supplied, will be used for connecting to the 7479 + registry. The client cert and key are useful if you are 7480 + authenticating with a certificate; the CA cert is useful if 7481 + you are using a self-signed server certificate. The Secret must 7482 + be of type `Opaque` or `kubernetes.io/tls`. 7483 + properties: 7484 + name: 7485 + description: Name of the referent. 7486 + type: string 7487 + required: 7488 + - name 7489 type: object 7490 - served: true 7491 - storage: true 7492 - subresources: 7493 - status: {} 7494 - - additionalPrinterColumns: 7495 - - jsonPath: .spec.url 7496 - name: URL 7497 - type: string 7498 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7499 - name: Ready 7500 - type: string 7501 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7502 - name: Status 7503 - type: string 7504 - - jsonPath: .metadata.creationTimestamp 7505 - name: Age 7506 - type: date 7507 - deprecated: true 7508 - deprecationWarning: v1beta2 OCIRepository is deprecated, upgrade to v1 7509 - name: v1beta2 7510 - schema: 7511 - openAPIV3Schema: 7512 - description: OCIRepository is the Schema for the ocirepositories API 7513 + ignore: 7514 + description: |- 7515 + Ignore overrides the set of excluded patterns in the .sourceignore format 7516 + (which is the same as .gitignore). If not provided, a default will be used, 7517 + consult the documentation for your version to find out what those are. 7518 + type: string 7519 + insecure: 7520 + description: Insecure allows connecting to a non-TLS HTTP container 7521 + registry. 7522 + type: boolean 7523 + interval: 7524 + description: |- 7525 + Interval at which the OCIRepository URL is checked for updates. 7526 + This interval is approximate and may be subject to jitter to ensure 7527 + efficient use of resources. 7528 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7529 + type: string 7530 + layerSelector: 7531 + description: |- 7532 + LayerSelector specifies which layer should be extracted from the OCI artifact. 7533 + When not specified, the first layer found in the artifact is selected. 7534 properties: 7535 - apiVersion: 7536 - description: |- 7537 - APIVersion defines the versioned schema of this representation of an object. 7538 - Servers should convert recognized schemas to the latest internal value, and 7539 - may reject unrecognized values. 7540 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7541 - type: string 7542 - kind: 7543 - description: |- 7544 - Kind is a string value representing the REST resource this object represents. 7545 - Servers may infer this from the endpoint the client submits requests to. 7546 - Cannot be updated. 7547 - In CamelCase. 7548 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7549 + mediaType: 7550 + description: |- 7551 + MediaType specifies the OCI media type of the layer 7552 + which should be extracted from the OCI Artifact. The 7553 + first layer matching this type is selected. 7554 + type: string 7555 + operation: 7556 + description: |- 7557 + Operation specifies how the selected layer should be processed. 7558 + By default, the layer compressed content is extracted to storage. 7559 + When the operation is set to 'copy', the layer compressed content 7560 + is persisted to storage as it is. 7561 + enum: 7562 + - extract 7563 + - copy 7564 + type: string 7565 + type: object 7566 + provider: 7567 + default: generic 7568 + description: |- 7569 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7570 + When not specified, defaults to 'generic'. 7571 + enum: 7572 + - generic 7573 + - aws 7574 + - azure 7575 + - gcp 7576 + type: string 7577 + proxySecretRef: 7578 + description: |- 7579 + ProxySecretRef specifies the Secret containing the proxy configuration 7580 + to use while communicating with the container registry. 7581 + properties: 7582 + name: 7583 + description: Name of the referent. 7584 + type: string 7585 + required: 7586 + - name 7587 + type: object 7588 + ref: 7589 + description: |- 7590 + The OCI reference to pull and monitor for changes, 7591 + defaults to the latest tag. 7592 + properties: 7593 + digest: 7594 + description: |- 7595 + Digest is the image digest to pull, takes precedence over SemVer. 7596 + The value should be in the format 'sha256:<HASH>'. 7597 + type: string 7598 + semver: 7599 + description: |- 7600 + SemVer is the range of tags to pull selecting the latest within 7601 + the range, takes precedence over Tag. 7602 + type: string 7603 + semverFilter: 7604 + description: SemverFilter is a regex pattern to filter the tags 7605 + within the SemVer range. 7606 + type: string 7607 + tag: 7608 + description: Tag is the image tag to pull, defaults to latest. 7609 + type: string 7610 + type: object 7611 + secretRef: 7612 + description: |- 7613 + SecretRef contains the secret name containing the registry login 7614 + credentials to resolve image metadata. 7615 + The secret must be of type kubernetes.io/dockerconfigjson. 7616 + properties: 7617 + name: 7618 + description: Name of the referent. 7619 + type: string 7620 + required: 7621 + - name 7622 + type: object 7623 + serviceAccountName: 7624 + description: |- 7625 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 7626 + the image pull if the service account has attached pull secrets. For more information: 7627 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 7628 + type: string 7629 + suspend: 7630 + description: This flag tells the controller to suspend the reconciliation 7631 + of this source. 7632 + type: boolean 7633 + timeout: 7634 + default: 60s 7635 + description: The timeout for remote OCI Repository operations like 7636 + pulling, defaults to 60s. 7637 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7638 + type: string 7639 + url: 7640 + description: |- 7641 + URL is a reference to an OCI artifact repository hosted 7642 + on a remote container registry. 7643 + pattern: ^oci://.*$ 7644 + type: string 7645 + verify: 7646 + description: |- 7647 + Verify contains the secret name containing the trusted public keys 7648 + used to verify the signature and specifies which provider to use to check 7649 + whether OCI image is authentic. 7650 + properties: 7651 + matchOIDCIdentity: 7652 + description: |- 7653 + MatchOIDCIdentity specifies the identity matching criteria to use 7654 + while verifying an OCI artifact which was signed using Cosign keyless 7655 + signing. The artifact's identity is deemed to be verified if any of the 7656 + specified matchers match against the identity. 7657 + items: 7658 + description: |- 7659 + OIDCIdentityMatch specifies options for verifying the certificate identity, 7660 + i.e. the issuer and the subject of the certificate. 7661 + properties: 7662 + issuer: 7663 + description: |- 7664 + Issuer specifies the regex pattern to match against to verify 7665 + the OIDC issuer in the Fulcio certificate. The pattern must be a 7666 + valid Go regular expression. 7667 + type: string 7668 + subject: 7669 + description: |- 7670 + Subject specifies the regex pattern to match against to verify 7671 + the identity subject in the Fulcio certificate. The pattern must 7672 + be a valid Go regular expression. 7673 + type: string 7674 + required: 7675 + - issuer 7676 + - subject 7677 + type: object 7678 + type: array 7679 + provider: 7680 + default: cosign 7681 + description: Provider specifies the technology used to sign the 7682 + OCI Artifact. 7683 + enum: 7684 + - cosign 7685 + - notation 7686 + type: string 7687 + secretRef: 7688 + description: |- 7689 + SecretRef specifies the Kubernetes Secret containing the 7690 + trusted public keys. 7691 + properties: 7692 + name: 7693 + description: Name of the referent. 7694 type: string 7695 - metadata: 7696 - type: object 7697 - spec: 7698 - description: OCIRepositorySpec defines the desired state of OCIRepository 7699 - properties: 7700 - certSecretRef: 7701 - description: |- 7702 - CertSecretRef can be given the name of a Secret containing 7703 - either or both of 7704 + required: 7705 + - name 7706 + type: object 7707 + required: 7708 + - provider 7709 + type: object 7710 + required: 7711 + - interval 7712 + - url 7713 + type: object 7714 + status: 7715 + default: 7716 + observedGeneration: -1 7717 + description: OCIRepositoryStatus defines the observed state of OCIRepository 7718 + properties: 7719 + artifact: 7720 + description: Artifact represents the output of the last successful 7721 + OCI Repository sync. 7722 + properties: 7723 + digest: 7724 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7725 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7726 + type: string 7727 + lastUpdateTime: 7728 + description: |- 7729 + LastUpdateTime is the timestamp corresponding to the last update of the 7730 + Artifact. 7731 + format: date-time 7732 + type: string 7733 + metadata: 7734 + additionalProperties: 7735 + type: string 7736 + description: Metadata holds upstream information such as OCI annotations. 7737 + type: object 7738 + path: 7739 + description: |- 7740 + Path is the relative file path of the Artifact. It can be used to locate 7741 + the file in the root of the Artifact storage on the local file system of 7742 + the controller managing the Source. 7743 + type: string 7744 + revision: 7745 + description: |- 7746 + Revision is a human-readable identifier traceable in the origin source 7747 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7748 + type: string 7749 + size: 7750 + description: Size is the number of bytes in the file. 7751 + format: int64 7752 + type: integer 7753 + url: 7754 + description: |- 7755 + URL is the HTTP address of the Artifact as exposed by the controller 7756 + managing the Source. It can be used to retrieve the Artifact for 7757 + consumption, e.g. by another controller applying the Artifact contents. 7758 + type: string 7759 + required: 7760 + - digest 7761 + - lastUpdateTime 7762 + - path 7763 + - revision 7764 + - url 7765 + type: object 7766 + conditions: 7767 + description: Conditions holds the conditions for the OCIRepository. 7768 + items: 7769 + description: Condition contains details for one aspect of the current 7770 + state of this API Resource. 7771 + properties: 7772 + lastTransitionTime: 7773 + description: |- 7774 + lastTransitionTime is the last time the condition transitioned from one status to another. 7775 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7776 + format: date-time 7777 + type: string 7778 + message: 7779 + description: |- 7780 + message is a human readable message indicating details about the transition. 7781 + This may be an empty string. 7782 + maxLength: 32768 7783 + type: string 7784 + observedGeneration: 7785 + description: |- 7786 + observedGeneration represents the .metadata.generation that the condition was set based upon. 7787 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7788 + with respect to the current state of the instance. 7789 + format: int64 7790 + minimum: 0 7791 + type: integer 7792 + reason: 7793 + description: |- 7794 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 7795 + Producers of specific condition types may define expected values and meanings for this field, 7796 + and whether the values are considered a guaranteed API. 7797 + The value should be a CamelCase string. 7798 + This field may not be empty. 7799 + maxLength: 1024 7800 + minLength: 1 7801 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7802 + type: string 7803 + status: 7804 + description: status of the condition, one of True, False, Unknown. 7805 + enum: 7806 + - "True" 7807 + - "False" 7808 + - Unknown 7809 + type: string 7810 + type: 7811 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 7812 + maxLength: 316 7813 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7814 + type: string 7815 + required: 7816 + - lastTransitionTime 7817 + - message 7818 + - reason 7819 + - status 7820 + - type 7821 + type: object 7822 + type: array 7823 + lastHandledReconcileAt: 7824 + description: |- 7825 + LastHandledReconcileAt holds the value of the most recent 7826 + reconcile request value, so a change of the annotation value 7827 + can be detected. 7828 + type: string 7829 + observedGeneration: 7830 + description: ObservedGeneration is the last observed generation. 7831 + format: int64 7832 + type: integer 7833 + observedIgnore: 7834 + description: |- 7835 + ObservedIgnore is the observed exclusion patterns used for constructing 7836 + the source artifact. 7837 + type: string 7838 + observedLayerSelector: 7839 + description: |- 7840 + ObservedLayerSelector is the observed layer selector used for constructing 7841 + the source artifact. 7842 + properties: 7843 + mediaType: 7844 + description: |- 7845 + MediaType specifies the OCI media type of the layer 7846 + which should be extracted from the OCI Artifact. The 7847 + first layer matching this type is selected. 7848 + type: string 7849 + operation: 7850 + description: |- 7851 + Operation specifies how the selected layer should be processed. 7852 + By default, the layer compressed content is extracted to storage. 7853 + When the operation is set to 'copy', the layer compressed content 7854 + is persisted to storage as it is. 7855 + enum: 7856 + - extract 7857 + - copy 7858 + type: string 7859 + type: object 7860 + url: 7861 + description: URL is the download link for the artifact output of the 7862 + last OCI Repository sync. 7863 + type: string 7864 + type: object 7865 + type: object 7866 + served: true 7867 + storage: true 7868 + subresources: 7869 + status: {} 7870 + - additionalPrinterColumns: 7871 + - jsonPath: .spec.url 7872 + name: URL 7873 + type: string 7874 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 7875 + name: Ready 7876 + type: string 7877 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 7878 + name: Status 7879 + type: string 7880 + - jsonPath: .metadata.creationTimestamp 7881 + name: Age 7882 + type: date 7883 + deprecated: true 7884 + deprecationWarning: v1beta2 OCIRepository is deprecated, upgrade to v1 7885 + name: v1beta2 7886 + schema: 7887 + openAPIV3Schema: 7888 + description: OCIRepository is the Schema for the ocirepositories API 7889 + properties: 7890 + apiVersion: 7891 + description: |- 7892 + APIVersion defines the versioned schema of this representation of an object. 7893 + Servers should convert recognized schemas to the latest internal value, and 7894 + may reject unrecognized values. 7895 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7896 + type: string 7897 + kind: 7898 + description: |- 7899 + Kind is a string value representing the REST resource this object represents. 7900 + Servers may infer this from the endpoint the client submits requests to. 7901 + Cannot be updated. 7902 + In CamelCase. 7903 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7904 + type: string 7905 + metadata: 7906 + type: object 7907 + spec: 7908 + description: OCIRepositorySpec defines the desired state of OCIRepository 7909 + properties: 7910 + certSecretRef: 7911 + description: |- 7912 + CertSecretRef can be given the name of a Secret containing 7913 + either or both of 7914 7915 - - a PEM-encoded client certificate (`tls.crt`) and private 7916 - key (`tls.key`); 7917 - - a PEM-encoded CA certificate (`ca.crt`) 7918 + - a PEM-encoded client certificate (`tls.crt`) and private 7919 + key (`tls.key`); 7920 + - a PEM-encoded CA certificate (`ca.crt`) 7921 7922 - and whichever are supplied, will be used for connecting to the 7923 - registry. The client cert and key are useful if you are 7924 - authenticating with a certificate; the CA cert is useful if 7925 - you are using a self-signed server certificate. The Secret must 7926 - be of type `Opaque` or `kubernetes.io/tls`. 7927 + and whichever are supplied, will be used for connecting to the 7928 + registry. The client cert and key are useful if you are 7929 + authenticating with a certificate; the CA cert is useful if 7930 + you are using a self-signed server certificate. The Secret must 7931 + be of type `Opaque` or `kubernetes.io/tls`. 7932 7933 - Note: Support for the `caFile`, `certFile` and `keyFile` keys have 7934 - been deprecated. 7935 - properties: 7936 - name: 7937 - description: Name of the referent. 7938 - type: string 7939 - required: 7940 - - name 7941 - type: object 7942 - ignore: 7943 - description: |- 7944 - Ignore overrides the set of excluded patterns in the .sourceignore format 7945 - (which is the same as .gitignore). If not provided, a default will be used, 7946 - consult the documentation for your version to find out what those are. 7947 - type: string 7948 - insecure: 7949 - description: Insecure allows connecting to a non-TLS HTTP container registry. 7950 - type: boolean 7951 - interval: 7952 - description: |- 7953 - Interval at which the OCIRepository URL is checked for updates. 7954 - This interval is approximate and may be subject to jitter to ensure 7955 - efficient use of resources. 7956 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7957 - type: string 7958 - layerSelector: 7959 - description: |- 7960 - LayerSelector specifies which layer should be extracted from the OCI artifact. 7961 - When not specified, the first layer found in the artifact is selected. 7962 - properties: 7963 - mediaType: 7964 - description: |- 7965 - MediaType specifies the OCI media type of the layer 7966 - which should be extracted from the OCI Artifact. The 7967 - first layer matching this type is selected. 7968 - type: string 7969 - operation: 7970 - description: |- 7971 - Operation specifies how the selected layer should be processed. 7972 - By default, the layer compressed content is extracted to storage. 7973 - When the operation is set to 'copy', the layer compressed content 7974 - is persisted to storage as it is. 7975 - enum: 7976 - - extract 7977 - - copy 7978 - type: string 7979 - type: object 7980 - provider: 7981 - default: generic 7982 - description: |- 7983 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7984 - When not specified, defaults to 'generic'. 7985 - enum: 7986 - - generic 7987 - - aws 7988 - - azure 7989 - - gcp 7990 - type: string 7991 - proxySecretRef: 7992 - description: |- 7993 - ProxySecretRef specifies the Secret containing the proxy configuration 7994 - to use while communicating with the container registry. 7995 - properties: 7996 - name: 7997 - description: Name of the referent. 7998 - type: string 7999 - required: 8000 - - name 8001 - type: object 8002 - ref: 8003 - description: |- 8004 - The OCI reference to pull and monitor for changes, 8005 - defaults to the latest tag. 8006 - properties: 8007 - digest: 8008 - description: |- 8009 - Digest is the image digest to pull, takes precedence over SemVer. 8010 - The value should be in the format 'sha256:<HASH>'. 8011 - type: string 8012 - semver: 8013 - description: |- 8014 - SemVer is the range of tags to pull selecting the latest within 8015 - the range, takes precedence over Tag. 8016 - type: string 8017 - semverFilter: 8018 - description: SemverFilter is a regex pattern to filter the tags within the SemVer 8019 - range. 8020 - type: string 8021 - tag: 8022 - description: Tag is the image tag to pull, defaults to latest. 8023 - type: string 8024 - type: object 8025 - secretRef: 8026 - description: |- 8027 - SecretRef contains the secret name containing the registry login 8028 - credentials to resolve image metadata. 8029 - The secret must be of type kubernetes.io/dockerconfigjson. 8030 - properties: 8031 - name: 8032 - description: Name of the referent. 8033 - type: string 8034 - required: 8035 - - name 8036 - type: object 8037 - serviceAccountName: 8038 - description: |- 8039 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 8040 - the image pull if the service account has attached pull secrets. For more information: 8041 - https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 8042 - type: string 8043 - suspend: 8044 - description: This flag tells the controller to suspend the reconciliation of this source. 8045 - type: boolean 8046 - timeout: 8047 - default: 60s 8048 - description: The timeout for remote OCI Repository operations like pulling, defaults to 60s. 8049 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 8050 - type: string 8051 - url: 8052 - description: |- 8053 - URL is a reference to an OCI artifact repository hosted 8054 - on a remote container registry. 8055 - pattern: ^oci://.*$ 8056 - type: string 8057 - verify: 8058 - description: |- 8059 - Verify contains the secret name containing the trusted public keys 8060 - used to verify the signature and specifies which provider to use to check 8061 - whether OCI image is authentic. 8062 - properties: 8063 - matchOIDCIdentity: 8064 - description: |- 8065 - MatchOIDCIdentity specifies the identity matching criteria to use 8066 - while verifying an OCI artifact which was signed using Cosign keyless 8067 - signing. The artifact's identity is deemed to be verified if any of the 8068 - specified matchers match against the identity. 8069 - items: 8070 - description: |- 8071 - OIDCIdentityMatch specifies options for verifying the certificate identity, 8072 - i.e. the issuer and the subject of the certificate. 8073 - properties: 8074 - issuer: 8075 - description: |- 8076 - Issuer specifies the regex pattern to match against to verify 8077 - the OIDC issuer in the Fulcio certificate. The pattern must be a 8078 - valid Go regular expression. 8079 - type: string 8080 - subject: 8081 - description: |- 8082 - Subject specifies the regex pattern to match against to verify 8083 - the identity subject in the Fulcio certificate. The pattern must 8084 - be a valid Go regular expression. 8085 - type: string 8086 - required: 8087 - - issuer 8088 - - subject 8089 - type: object 8090 - type: array 8091 - provider: 8092 - default: cosign 8093 - description: Provider specifies the technology used to sign the OCI Artifact. 8094 - enum: 8095 - - cosign 8096 - - notation 8097 - type: string 8098 - secretRef: 8099 - description: |- 8100 - SecretRef specifies the Kubernetes Secret containing the 8101 - trusted public keys. 8102 - properties: 8103 - name: 8104 - description: Name of the referent. 8105 - type: string 8106 - required: 8107 - - name 8108 - type: object 8109 - required: 8110 - - provider 8111 - type: object 8112 - required: 8113 - - interval 8114 - - url 8115 - type: object 8116 + Note: Support for the `caFile`, `certFile` and `keyFile` keys have 8117 + been deprecated. 8118 + properties: 8119 + name: 8120 + description: Name of the referent. 8121 + type: string 8122 + required: 8123 + - name 8124 + type: object 8125 + ignore: 8126 + description: |- 8127 + Ignore overrides the set of excluded patterns in the .sourceignore format 8128 + (which is the same as .gitignore). If not provided, a default will be used, 8129 + consult the documentation for your version to find out what those are. 8130 + type: string 8131 + insecure: 8132 + description: Insecure allows connecting to a non-TLS HTTP container 8133 + registry. 8134 + type: boolean 8135 + interval: 8136 + description: |- 8137 + Interval at which the OCIRepository URL is checked for updates. 8138 + This interval is approximate and may be subject to jitter to ensure 8139 + efficient use of resources. 8140 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8141 + type: string 8142 + layerSelector: 8143 + description: |- 8144 + LayerSelector specifies which layer should be extracted from the OCI artifact. 8145 + When not specified, the first layer found in the artifact is selected. 8146 + properties: 8147 + mediaType: 8148 + description: |- 8149 + MediaType specifies the OCI media type of the layer 8150 + which should be extracted from the OCI Artifact. The 8151 + first layer matching this type is selected. 8152 + type: string 8153 + operation: 8154 + description: |- 8155 + Operation specifies how the selected layer should be processed. 8156 + By default, the layer compressed content is extracted to storage. 8157 + When the operation is set to 'copy', the layer compressed content 8158 + is persisted to storage as it is. 8159 + enum: 8160 + - extract 8161 + - copy 8162 + type: string 8163 + type: object 8164 + provider: 8165 + default: generic 8166 + description: |- 8167 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 8168 + When not specified, defaults to 'generic'. 8169 + enum: 8170 + - generic 8171 + - aws 8172 + - azure 8173 + - gcp 8174 + type: string 8175 + proxySecretRef: 8176 + description: |- 8177 + ProxySecretRef specifies the Secret containing the proxy configuration 8178 + to use while communicating with the container registry. 8179 + properties: 8180 + name: 8181 + description: Name of the referent. 8182 + type: string 8183 + required: 8184 + - name 8185 + type: object 8186 + ref: 8187 + description: |- 8188 + The OCI reference to pull and monitor for changes, 8189 + defaults to the latest tag. 8190 + properties: 8191 + digest: 8192 + description: |- 8193 + Digest is the image digest to pull, takes precedence over SemVer. 8194 + The value should be in the format 'sha256:<HASH>'. 8195 + type: string 8196 + semver: 8197 + description: |- 8198 + SemVer is the range of tags to pull selecting the latest within 8199 + the range, takes precedence over Tag. 8200 + type: string 8201 + semverFilter: 8202 + description: SemverFilter is a regex pattern to filter the tags 8203 + within the SemVer range. 8204 + type: string 8205 + tag: 8206 + description: Tag is the image tag to pull, defaults to latest. 8207 + type: string 8208 + type: object 8209 + secretRef: 8210 + description: |- 8211 + SecretRef contains the secret name containing the registry login 8212 + credentials to resolve image metadata. 8213 + The secret must be of type kubernetes.io/dockerconfigjson. 8214 + properties: 8215 + name: 8216 + description: Name of the referent. 8217 + type: string 8218 + required: 8219 + - name 8220 + type: object 8221 + serviceAccountName: 8222 + description: |- 8223 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 8224 + the image pull if the service account has attached pull secrets. For more information: 8225 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 8226 + type: string 8227 + suspend: 8228 + description: This flag tells the controller to suspend the reconciliation 8229 + of this source. 8230 + type: boolean 8231 + timeout: 8232 + default: 60s 8233 + description: The timeout for remote OCI Repository operations like 8234 + pulling, defaults to 60s. 8235 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 8236 + type: string 8237 + url: 8238 + description: |- 8239 + URL is a reference to an OCI artifact repository hosted 8240 + on a remote container registry. 8241 + pattern: ^oci://.*$ 8242 + type: string 8243 + verify: 8244 + description: |- 8245 + Verify contains the secret name containing the trusted public keys 8246 + used to verify the signature and specifies which provider to use to check 8247 + whether OCI image is authentic. 8248 + properties: 8249 + matchOIDCIdentity: 8250 + description: |- 8251 + MatchOIDCIdentity specifies the identity matching criteria to use 8252 + while verifying an OCI artifact which was signed using Cosign keyless 8253 + signing. The artifact's identity is deemed to be verified if any of the 8254 + specified matchers match against the identity. 8255 + items: 8256 + description: |- 8257 + OIDCIdentityMatch specifies options for verifying the certificate identity, 8258 + i.e. the issuer and the subject of the certificate. 8259 + properties: 8260 + issuer: 8261 + description: |- 8262 + Issuer specifies the regex pattern to match against to verify 8263 + the OIDC issuer in the Fulcio certificate. The pattern must be a 8264 + valid Go regular expression. 8265 + type: string 8266 + subject: 8267 + description: |- 8268 + Subject specifies the regex pattern to match against to verify 8269 + the identity subject in the Fulcio certificate. The pattern must 8270 + be a valid Go regular expression. 8271 + type: string 8272 + required: 8273 + - issuer 8274 + - subject 8275 + type: object 8276 + type: array 8277 + provider: 8278 + default: cosign 8279 + description: Provider specifies the technology used to sign the 8280 + OCI Artifact. 8281 + enum: 8282 + - cosign 8283 + - notation 8284 + type: string 8285 + secretRef: 8286 + description: |- 8287 + SecretRef specifies the Kubernetes Secret containing the 8288 + trusted public keys. 8289 + properties: 8290 + name: 8291 + description: Name of the referent. 8292 + type: string 8293 + required: 8294 + - name 8295 + type: object 8296 + required: 8297 + - provider 8298 + type: object 8299 + required: 8300 + - interval 8301 + - url 8302 + type: object 8303 + status: 8304 + default: 8305 + observedGeneration: -1 8306 + description: OCIRepositoryStatus defines the observed state of OCIRepository 8307 + properties: 8308 + artifact: 8309 + description: Artifact represents the output of the last successful 8310 + OCI Repository sync. 8311 + properties: 8312 + digest: 8313 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 8314 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 8315 + type: string 8316 + lastUpdateTime: 8317 + description: |- 8318 + LastUpdateTime is the timestamp corresponding to the last update of the 8319 + Artifact. 8320 + format: date-time 8321 + type: string 8322 + metadata: 8323 + additionalProperties: 8324 + type: string 8325 + description: Metadata holds upstream information such as OCI annotations. 8326 + type: object 8327 + path: 8328 + description: |- 8329 + Path is the relative file path of the Artifact. It can be used to locate 8330 + the file in the root of the Artifact storage on the local file system of 8331 + the controller managing the Source. 8332 + type: string 8333 + revision: 8334 + description: |- 8335 + Revision is a human-readable identifier traceable in the origin source 8336 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 8337 + type: string 8338 + size: 8339 + description: Size is the number of bytes in the file. 8340 + format: int64 8341 + type: integer 8342 + url: 8343 + description: |- 8344 + URL is the HTTP address of the Artifact as exposed by the controller 8345 + managing the Source. It can be used to retrieve the Artifact for 8346 + consumption, e.g. by another controller applying the Artifact contents. 8347 + type: string 8348 + required: 8349 + - digest 8350 + - lastUpdateTime 8351 + - path 8352 + - revision 8353 + - url 8354 + type: object 8355 + conditions: 8356 + description: Conditions holds the conditions for the OCIRepository. 8357 + items: 8358 + description: Condition contains details for one aspect of the current 8359 + state of this API Resource. 8360 + properties: 8361 + lastTransitionTime: 8362 + description: |- 8363 + lastTransitionTime is the last time the condition transitioned from one status to another. 8364 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8365 + format: date-time 8366 + type: string 8367 + message: 8368 + description: |- 8369 + message is a human readable message indicating details about the transition. 8370 + This may be an empty string. 8371 + maxLength: 32768 8372 + type: string 8373 + observedGeneration: 8374 + description: |- 8375 + observedGeneration represents the .metadata.generation that the condition was set based upon. 8376 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8377 + with respect to the current state of the instance. 8378 + format: int64 8379 + minimum: 0 8380 + type: integer 8381 + reason: 8382 + description: |- 8383 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 8384 + Producers of specific condition types may define expected values and meanings for this field, 8385 + and whether the values are considered a guaranteed API. 8386 + The value should be a CamelCase string. 8387 + This field may not be empty. 8388 + maxLength: 1024 8389 + minLength: 1 8390 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8391 + type: string 8392 status: 8393 - default: 8394 - observedGeneration: -1 8395 - description: OCIRepositoryStatus defines the observed state of OCIRepository 8396 - properties: 8397 - artifact: 8398 - description: Artifact represents the output of the last successful OCI Repository sync. 8399 - properties: 8400 - digest: 8401 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 8402 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 8403 - type: string 8404 - lastUpdateTime: 8405 - description: |- 8406 - LastUpdateTime is the timestamp corresponding to the last update of the 8407 - Artifact. 8408 - format: date-time 8409 - type: string 8410 - metadata: 8411 - additionalProperties: 8412 - type: string 8413 - description: Metadata holds upstream information such as OCI annotations. 8414 - type: object 8415 - path: 8416 - description: |- 8417 - Path is the relative file path of the Artifact. It can be used to locate 8418 - the file in the root of the Artifact storage on the local file system of 8419 - the controller managing the Source. 8420 - type: string 8421 - revision: 8422 - description: |- 8423 - Revision is a human-readable identifier traceable in the origin source 8424 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 8425 - type: string 8426 - size: 8427 - description: Size is the number of bytes in the file. 8428 - format: int64 8429 - type: integer 8430 - url: 8431 - description: |- 8432 - URL is the HTTP address of the Artifact as exposed by the controller 8433 - managing the Source. It can be used to retrieve the Artifact for 8434 - consumption, e.g. by another controller applying the Artifact contents. 8435 - type: string 8436 - required: 8437 - - digest 8438 - - lastUpdateTime 8439 - - path 8440 - - revision 8441 - - url 8442 - type: object 8443 - conditions: 8444 - description: Conditions holds the conditions for the OCIRepository. 8445 - items: 8446 - description: Condition contains details for one aspect of the current state of this API 8447 - Resource. 8448 - properties: 8449 - lastTransitionTime: 8450 - description: |- 8451 - lastTransitionTime is the last time the condition transitioned from one status to another. 8452 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8453 - format: date-time 8454 - type: string 8455 - message: 8456 - description: |- 8457 - message is a human readable message indicating details about the transition. 8458 - This may be an empty string. 8459 - maxLength: 32768 8460 - type: string 8461 - observedGeneration: 8462 - description: |- 8463 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8464 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8465 - with respect to the current state of the instance. 8466 - format: int64 8467 - minimum: 0 8468 - type: integer 8469 - reason: 8470 - description: |- 8471 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8472 - Producers of specific condition types may define expected values and meanings for this field, 8473 - and whether the values are considered a guaranteed API. 8474 - The value should be a CamelCase string. 8475 - This field may not be empty. 8476 - maxLength: 1024 8477 - minLength: 1 8478 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8479 - type: string 8480 - status: 8481 - description: status of the condition, one of True, False, Unknown. 8482 - enum: 8483 - - "True" 8484 - - "False" 8485 - - Unknown 8486 - type: string 8487 - type: 8488 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 8489 - maxLength: 316 8490 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8491 - type: string 8492 - required: 8493 - - lastTransitionTime 8494 - - message 8495 - - reason 8496 - - status 8497 - - type 8498 - type: object 8499 - type: array 8500 - contentConfigChecksum: 8501 - description: |- 8502 - ContentConfigChecksum is a checksum of all the configurations related to 8503 - the content of the source artifact: 8504 - - .spec.ignore 8505 - - .spec.layerSelector 8506 - observed in .status.observedGeneration version of the object. This can 8507 - be used to determine if the content configuration has changed and the 8508 - artifact needs to be rebuilt. 8509 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 8510 + description: status of the condition, one of True, False, Unknown. 8511 + enum: 8512 + - "True" 8513 + - "False" 8514 + - Unknown 8515 + type: string 8516 + type: 8517 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 8518 + maxLength: 316 8519 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8520 + type: string 8521 + required: 8522 + - lastTransitionTime 8523 + - message 8524 + - reason 8525 + - status 8526 + - type 8527 + type: object 8528 + type: array 8529 + contentConfigChecksum: 8530 + description: |- 8531 + ContentConfigChecksum is a checksum of all the configurations related to 8532 + the content of the source artifact: 8533 + - .spec.ignore 8534 + - .spec.layerSelector 8535 + observed in .status.observedGeneration version of the object. This can 8536 + be used to determine if the content configuration has changed and the 8537 + artifact needs to be rebuilt. 8538 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 8539 8540 - Deprecated: Replaced with explicit fields for observed artifact content 8541 - config in the status. 8542 - type: string 8543 - lastHandledReconcileAt: 8544 - description: |- 8545 - LastHandledReconcileAt holds the value of the most recent 8546 - reconcile request value, so a change of the annotation value 8547 - can be detected. 8548 - type: string 8549 - observedGeneration: 8550 - description: ObservedGeneration is the last observed generation. 8551 - format: int64 8552 - type: integer 8553 - observedIgnore: 8554 - description: |- 8555 - ObservedIgnore is the observed exclusion patterns used for constructing 8556 - the source artifact. 8557 - type: string 8558 - observedLayerSelector: 8559 - description: |- 8560 - ObservedLayerSelector is the observed layer selector used for constructing 8561 - the source artifact. 8562 - properties: 8563 - mediaType: 8564 - description: |- 8565 - MediaType specifies the OCI media type of the layer 8566 - which should be extracted from the OCI Artifact. The 8567 - first layer matching this type is selected. 8568 - type: string 8569 - operation: 8570 - description: |- 8571 - Operation specifies how the selected layer should be processed. 8572 - By default, the layer compressed content is extracted to storage. 8573 - When the operation is set to 'copy', the layer compressed content 8574 - is persisted to storage as it is. 8575 - enum: 8576 - - extract 8577 - - copy 8578 - type: string 8579 - type: object 8580 - url: 8581 - description: URL is the download link for the artifact output of the last OCI Repository sync. 8582 - type: string 8583 - type: object 8584 + Deprecated: Replaced with explicit fields for observed artifact content 8585 + config in the status. 8586 + type: string 8587 + lastHandledReconcileAt: 8588 + description: |- 8589 + LastHandledReconcileAt holds the value of the most recent 8590 + reconcile request value, so a change of the annotation value 8591 + can be detected. 8592 + type: string 8593 + observedGeneration: 8594 + description: ObservedGeneration is the last observed generation. 8595 + format: int64 8596 + type: integer 8597 + observedIgnore: 8598 + description: |- 8599 + ObservedIgnore is the observed exclusion patterns used for constructing 8600 + the source artifact. 8601 + type: string 8602 + observedLayerSelector: 8603 + description: |- 8604 + ObservedLayerSelector is the observed layer selector used for constructing 8605 + the source artifact. 8606 + properties: 8607 + mediaType: 8608 + description: |- 8609 + MediaType specifies the OCI media type of the layer 8610 + which should be extracted from the OCI Artifact. The 8611 + first layer matching this type is selected. 8612 + type: string 8613 + operation: 8614 + description: |- 8615 + Operation specifies how the selected layer should be processed. 8616 + By default, the layer compressed content is extracted to storage. 8617 + When the operation is set to 'copy', the layer compressed content 8618 + is persisted to storage as it is. 8619 + enum: 8620 + - extract 8621 + - copy 8622 + type: string 8623 type: object 8624 - served: true 8625 - storage: false 8626 - subresources: 8627 - status: {} 8628 + url: 8629 + description: URL is the download link for the artifact output of the 8630 + last OCI Repository sync. 8631 + type: string 8632 + type: object 8633 + type: object 8634 + served: true 8635 + storage: false 8636 + subresources: 8637 + status: {} 8638 --- 8639 apiVersion: v1 8640 kind: ServiceAccount 8641 metadata: 8642 - labels: 8643 - app.kubernetes.io/component: source-controller 8644 - app.kubernetes.io/instance: flux-system 8645 - app.kubernetes.io/part-of: flux 8646 - app.kubernetes.io/version: v2.7.3 8647 - name: source-controller 8648 - namespace: flux-system 8649 + labels: 8650 + app.kubernetes.io/component: source-controller 8651 + app.kubernetes.io/instance: flux-system 8652 + app.kubernetes.io/part-of: flux 8653 + app.kubernetes.io/version: v2.7.5 8654 + name: source-controller 8655 + namespace: flux-system 8656 --- 8657 apiVersion: v1 8658 kind: Service 8659 metadata: 8660 - labels: 8661 - app.kubernetes.io/component: source-controller 8662 - app.kubernetes.io/instance: flux-system 8663 - app.kubernetes.io/part-of: flux 8664 - app.kubernetes.io/version: v2.7.3 8665 - control-plane: controller 8666 - name: source-controller 8667 - namespace: flux-system 8668 + labels: 8669 + app.kubernetes.io/component: source-controller 8670 + app.kubernetes.io/instance: flux-system 8671 + app.kubernetes.io/part-of: flux 8672 + app.kubernetes.io/version: v2.7.5 8673 + control-plane: controller 8674 + name: source-controller 8675 + namespace: flux-system 8676 spec: 8677 - ports: 8678 - - name: http 8679 - port: 80 8680 - protocol: TCP 8681 - targetPort: http 8682 - selector: 8683 - app: source-controller 8684 - type: ClusterIP 8685 + ports: 8686 + - name: http 8687 + port: 80 8688 + protocol: TCP 8689 + targetPort: http 8690 + selector: 8691 + app: source-controller 8692 + type: ClusterIP 8693 --- 8694 apiVersion: apps/v1 8695 kind: Deployment 8696 metadata: 8697 - labels: 8698 + labels: 8699 + app.kubernetes.io/component: source-controller 8700 + app.kubernetes.io/instance: flux-system 8701 + app.kubernetes.io/part-of: flux 8702 + app.kubernetes.io/version: v2.7.5 8703 + control-plane: controller 8704 + name: source-controller 8705 + namespace: flux-system 8706 +spec: 8707 + replicas: 1 8708 + selector: 8709 + matchLabels: 8710 + app: source-controller 8711 + strategy: 8712 + type: Recreate 8713 + template: 8714 + metadata: 8715 + annotations: 8716 + prometheus.io/port: "8080" 8717 + prometheus.io/scrape: "true" 8718 + labels: 8719 + app: source-controller 8720 app.kubernetes.io/component: source-controller 8721 app.kubernetes.io/instance: flux-system 8722 app.kubernetes.io/part-of: flux 8723 - app.kubernetes.io/version: v2.7.3 8724 - control-plane: controller 8725 - name: source-controller 8726 - namespace: flux-system 8727 -spec: 8728 - replicas: 1 8729 - selector: 8730 - matchLabels: 8731 - app: source-controller 8732 - strategy: 8733 - type: Recreate 8734 - template: 8735 - metadata: 8736 - annotations: 8737 - prometheus.io/port: "8080" 8738 - prometheus.io/scrape: "true" 8739 - labels: 8740 - app: source-controller 8741 - app.kubernetes.io/component: source-controller 8742 - app.kubernetes.io/instance: flux-system 8743 - app.kubernetes.io/part-of: flux 8744 - app.kubernetes.io/version: v2.7.3 8745 - spec: 8746 - containers: 8747 - - args: 8748 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 8749 - - --watch-all-namespaces=true 8750 - - --log-level=info 8751 - - --log-encoding=json 8752 - - --enable-leader-election 8753 - - --storage-path=/data 8754 - - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 8755 - env: 8756 - - name: RUNTIME_NAMESPACE 8757 - valueFrom: 8758 - fieldRef: 8759 - fieldPath: metadata.namespace 8760 - - name: TUF_ROOT 8761 - value: /tmp/.sigstore 8762 - - name: GOMEMLIMIT 8763 - valueFrom: 8764 - resourceFieldRef: 8765 - containerName: manager 8766 - resource: limits.memory 8767 - image: ghcr.io/fluxcd/source-controller:v1.7.3 8768 - imagePullPolicy: IfNotPresent 8769 - livenessProbe: 8770 - httpGet: 8771 - path: /healthz 8772 - port: healthz 8773 - name: manager 8774 - ports: 8775 - - containerPort: 9090 8776 - name: http 8777 - protocol: TCP 8778 - - containerPort: 8080 8779 - name: http-prom 8780 - protocol: TCP 8781 - - containerPort: 9440 8782 - name: healthz 8783 - protocol: TCP 8784 - readinessProbe: 8785 - httpGet: 8786 - path: / 8787 - port: http 8788 - resources: 8789 - limits: 8790 - cpu: 1000m 8791 - memory: 1Gi 8792 - requests: 8793 - cpu: 50m 8794 - memory: 64Mi 8795 - securityContext: 8796 - allowPrivilegeEscalation: false 8797 - capabilities: 8798 - drop: 8799 - - ALL 8800 - readOnlyRootFilesystem: true 8801 - runAsNonRoot: true 8802 - seccompProfile: 8803 - type: RuntimeDefault 8804 - volumeMounts: 8805 - - mountPath: /data 8806 - name: data 8807 - - mountPath: /tmp 8808 - name: tmp 8809 - nodeSelector: 8810 - kubernetes.io/os: linux 8811 - priorityClassName: system-cluster-critical 8812 - securityContext: 8813 - fsGroup: 1337 8814 - serviceAccountName: source-controller 8815 - terminationGracePeriodSeconds: 10 8816 - volumes: 8817 - - emptyDir: {} 8818 - name: data 8819 - - emptyDir: {} 8820 - name: tmp 8821 + app.kubernetes.io/version: v2.7.5 8822 + spec: 8823 + containers: 8824 + - args: 8825 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 8826 + - --watch-all-namespaces=true 8827 + - --log-level=info 8828 + - --log-encoding=json 8829 + - --enable-leader-election 8830 + - --storage-path=/data 8831 + - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 8832 + env: 8833 + - name: RUNTIME_NAMESPACE 8834 + valueFrom: 8835 + fieldRef: 8836 + fieldPath: metadata.namespace 8837 + - name: TUF_ROOT 8838 + value: /tmp/.sigstore 8839 + - name: GOMEMLIMIT 8840 + valueFrom: 8841 + resourceFieldRef: 8842 + containerName: manager 8843 + resource: limits.memory 8844 + image: ghcr.io/fluxcd/source-controller:v1.7.4 8845 + imagePullPolicy: IfNotPresent 8846 + livenessProbe: 8847 + httpGet: 8848 + path: /healthz 8849 + port: healthz 8850 + name: manager 8851 + ports: 8852 + - containerPort: 9090 8853 + name: http 8854 + protocol: TCP 8855 + - containerPort: 8080 8856 + name: http-prom 8857 + protocol: TCP 8858 + - containerPort: 9440 8859 + name: healthz 8860 + protocol: TCP 8861 + readinessProbe: 8862 + httpGet: 8863 + path: / 8864 + port: http 8865 + resources: 8866 + limits: 8867 + cpu: 1000m 8868 + memory: 1Gi 8869 + requests: 8870 + cpu: 50m 8871 + memory: 64Mi 8872 + securityContext: 8873 + allowPrivilegeEscalation: false 8874 + capabilities: 8875 + drop: 8876 + - ALL 8877 + readOnlyRootFilesystem: true 8878 + runAsNonRoot: true 8879 + seccompProfile: 8880 + type: RuntimeDefault 8881 + volumeMounts: 8882 + - mountPath: /data 8883 + name: data 8884 + - mountPath: /tmp 8885 + name: tmp 8886 + nodeSelector: 8887 + kubernetes.io/os: linux 8888 + priorityClassName: system-cluster-critical 8889 + securityContext: 8890 + fsGroup: 1337 8891 + serviceAccountName: source-controller 8892 + terminationGracePeriodSeconds: 10 8893 + volumes: 8894 + - emptyDir: {} 8895 + name: data 8896 + - emptyDir: {} 8897 + name: tmp 8898 --- 8899 apiVersion: apiextensions.k8s.io/v1 8900 kind: CustomResourceDefinition 8901 metadata: 8902 - annotations: 8903 - controller-gen.kubebuilder.io/version: v0.19.0 8904 - labels: 8905 - app.kubernetes.io/component: kustomize-controller 8906 - app.kubernetes.io/instance: flux-system 8907 - app.kubernetes.io/part-of: flux 8908 - app.kubernetes.io/version: v2.7.3 8909 - name: kustomizations.kustomize.toolkit.fluxcd.io 8910 + annotations: 8911 + controller-gen.kubebuilder.io/version: v0.19.0 8912 + labels: 8913 + app.kubernetes.io/component: kustomize-controller 8914 + app.kubernetes.io/instance: flux-system 8915 + app.kubernetes.io/part-of: flux 8916 + app.kubernetes.io/version: v2.7.5 8917 + name: kustomizations.kustomize.toolkit.fluxcd.io 8918 spec: 8919 - group: kustomize.toolkit.fluxcd.io 8920 - names: 8921 - kind: Kustomization 8922 - listKind: KustomizationList 8923 - plural: kustomizations 8924 - shortNames: 8925 - - ks 8926 - singular: kustomization 8927 - scope: Namespaced 8928 - versions: 8929 - - additionalPrinterColumns: 8930 - - jsonPath: .metadata.creationTimestamp 8931 - name: Age 8932 - type: date 8933 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 8934 - name: Ready 8935 - type: string 8936 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 8937 - name: Status 8938 - type: string 8939 - name: v1 8940 - schema: 8941 - openAPIV3Schema: 8942 - description: Kustomization is the Schema for the kustomizations API. 8943 + group: kustomize.toolkit.fluxcd.io 8944 + names: 8945 + kind: Kustomization 8946 + listKind: KustomizationList 8947 + plural: kustomizations 8948 + shortNames: 8949 + - ks 8950 + singular: kustomization 8951 + scope: Namespaced 8952 + versions: 8953 + - additionalPrinterColumns: 8954 + - jsonPath: .metadata.creationTimestamp 8955 + name: Age 8956 + type: date 8957 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 8958 + name: Ready 8959 + type: string 8960 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 8961 + name: Status 8962 + type: string 8963 + name: v1 8964 + schema: 8965 + openAPIV3Schema: 8966 + description: Kustomization is the Schema for the kustomizations API. 8967 + properties: 8968 + apiVersion: 8969 + description: |- 8970 + APIVersion defines the versioned schema of this representation of an object. 8971 + Servers should convert recognized schemas to the latest internal value, and 8972 + may reject unrecognized values. 8973 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 8974 + type: string 8975 + kind: 8976 + description: |- 8977 + Kind is a string value representing the REST resource this object represents. 8978 + Servers may infer this from the endpoint the client submits requests to. 8979 + Cannot be updated. 8980 + In CamelCase. 8981 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 8982 + type: string 8983 + metadata: 8984 + type: object 8985 + spec: 8986 + description: |- 8987 + KustomizationSpec defines the configuration to calculate the desired state 8988 + from a Source using Kustomize. 8989 + properties: 8990 + commonMetadata: 8991 + description: |- 8992 + CommonMetadata specifies the common labels and annotations that are 8993 + applied to all resources. Any existing label or annotation will be 8994 + overridden if its key matches a common one. 8995 properties: 8996 - apiVersion: 8997 - description: |- 8998 - APIVersion defines the versioned schema of this representation of an object. 8999 - Servers should convert recognized schemas to the latest internal value, and 9000 - may reject unrecognized values. 9001 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9002 - type: string 9003 - kind: 9004 - description: |- 9005 - Kind is a string value representing the REST resource this object represents. 9006 - Servers may infer this from the endpoint the client submits requests to. 9007 - Cannot be updated. 9008 - In CamelCase. 9009 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9010 - type: string 9011 - metadata: 9012 - type: object 9013 - spec: 9014 - description: |- 9015 - KustomizationSpec defines the configuration to calculate the desired state 9016 - from a Source using Kustomize. 9017 - properties: 9018 - commonMetadata: 9019 - description: |- 9020 - CommonMetadata specifies the common labels and annotations that are 9021 - applied to all resources. Any existing label or annotation will be 9022 - overridden if its key matches a common one. 9023 - properties: 9024 - annotations: 9025 - additionalProperties: 9026 - type: string 9027 - description: Annotations to be added to the object's metadata. 9028 - type: object 9029 - labels: 9030 - additionalProperties: 9031 - type: string 9032 - description: Labels to be added to the object's metadata. 9033 - type: object 9034 - type: object 9035 - components: 9036 - description: Components specifies relative paths to kustomize Components. 9037 - items: 9038 - type: string 9039 - type: array 9040 - decryption: 9041 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9042 - properties: 9043 - provider: 9044 - description: Provider is the name of the decryption engine. 9045 - enum: 9046 - - sops 9047 - type: string 9048 - secretRef: 9049 - description: |- 9050 - The secret name containing the private OpenPGP keys used for decryption. 9051 - A static credential for a cloud provider defined inside the Secret 9052 - takes priority to secret-less authentication with the ServiceAccountName 9053 - field. 9054 - properties: 9055 - name: 9056 - description: Name of the referent. 9057 - type: string 9058 - required: 9059 - - name 9060 - type: object 9061 - serviceAccountName: 9062 - description: |- 9063 - ServiceAccountName is the name of the service account used to 9064 - authenticate with KMS services from cloud providers. If a 9065 - static credential for a given cloud provider is defined 9066 - inside the Secret referenced by SecretRef, that static 9067 - credential takes priority. 9068 - type: string 9069 - required: 9070 - - provider 9071 - type: object 9072 - deletionPolicy: 9073 - description: |- 9074 - DeletionPolicy can be used to control garbage collection when this 9075 - Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 9076 - 'WaitForTermination', 'Orphan'). 'MirrorPrune' mirrors the Prune field 9077 - (orphan if false, delete if true). Defaults to 'MirrorPrune'. 9078 - enum: 9079 - - MirrorPrune 9080 - - Delete 9081 - - WaitForTermination 9082 - - Orphan 9083 - type: string 9084 - dependsOn: 9085 - description: |- 9086 - DependsOn may contain a DependencyReference slice 9087 - with references to Kustomization resources that must be ready before this 9088 - Kustomization can be reconciled. 9089 - items: 9090 - description: DependencyReference defines a Kustomization dependency on another Kustomization 9091 - resource. 9092 - properties: 9093 - name: 9094 - description: Name of the referent. 9095 - type: string 9096 - namespace: 9097 - description: |- 9098 - Namespace of the referent, defaults to the namespace of the Kustomization 9099 - resource object that contains the reference. 9100 - type: string 9101 - readyExpr: 9102 - description: |- 9103 - ReadyExpr is a CEL expression that can be used to assess the readiness 9104 - of a dependency. When specified, the built-in readiness check 9105 - is replaced by the logic defined in the CEL expression. 9106 - To make the CEL expression additive to the built-in readiness check, 9107 - the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 9108 - type: string 9109 - required: 9110 - - name 9111 - type: object 9112 - type: array 9113 - force: 9114 - default: false 9115 - description: |- 9116 - Force instructs the controller to recreate resources 9117 - when patching fails due to an immutable field change. 9118 - type: boolean 9119 - healthCheckExprs: 9120 - description: |- 9121 - HealthCheckExprs is a list of healthcheck expressions for evaluating the 9122 - health of custom resources using Common Expression Language (CEL). 9123 - The expressions are evaluated only when Wait or HealthChecks are specified. 9124 - items: 9125 - description: CustomHealthCheck defines the health check for custom resources. 9126 - properties: 9127 - apiVersion: 9128 - description: APIVersion of the custom resource under evaluation. 9129 - type: string 9130 - current: 9131 - description: |- 9132 - Current is the CEL expression that determines if the status 9133 - of the custom resource has reached the desired state. 9134 - type: string 9135 - failed: 9136 - description: |- 9137 - Failed is the CEL expression that determines if the status 9138 - of the custom resource has failed to reach the desired state. 9139 - type: string 9140 - inProgress: 9141 - description: |- 9142 - InProgress is the CEL expression that determines if the status 9143 - of the custom resource has not yet reached the desired state. 9144 - type: string 9145 - kind: 9146 - description: Kind of the custom resource under evaluation. 9147 - type: string 9148 - required: 9149 - - apiVersion 9150 - - current 9151 - - kind 9152 - type: object 9153 - type: array 9154 - healthChecks: 9155 - description: A list of resources to be included in the health assessment. 9156 - items: 9157 - description: |- 9158 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9159 - in any namespace. 9160 - properties: 9161 - apiVersion: 9162 - description: API version of the referent, if not specified the Kubernetes preferred 9163 - version will be used. 9164 - type: string 9165 - kind: 9166 - description: Kind of the referent. 9167 - type: string 9168 - name: 9169 - description: Name of the referent. 9170 - type: string 9171 - namespace: 9172 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9173 - type: string 9174 - required: 9175 - - kind 9176 - - name 9177 - type: object 9178 - type: array 9179 - ignoreMissingComponents: 9180 - description: |- 9181 - IgnoreMissingComponents instructs the controller to ignore Components paths 9182 - not found in source by removing them from the generated kustomization.yaml 9183 - before running kustomize build. 9184 - type: boolean 9185 - images: 9186 - description: |- 9187 - Images is a list of (image name, new name, new tag or digest) 9188 - for changing image names, tags or digests. This can also be achieved with a 9189 - patch, but this operator is simpler to specify. 9190 - items: 9191 - description: Image contains an image name, a new name, a new tag or digest, which will 9192 - replace the original name and tag. 9193 - properties: 9194 - digest: 9195 - description: |- 9196 - Digest is the value used to replace the original image tag. 9197 - If digest is present NewTag value is ignored. 9198 - type: string 9199 - name: 9200 - description: Name is a tag-less image name. 9201 - type: string 9202 - newName: 9203 - description: NewName is the value used to replace the original name. 9204 - type: string 9205 - newTag: 9206 - description: NewTag is the value used to replace the original tag. 9207 - type: string 9208 - required: 9209 - - name 9210 - type: object 9211 - type: array 9212 - interval: 9213 - description: |- 9214 - The interval at which to reconcile the Kustomization. 9215 - This interval is approximate and may be subject to jitter to ensure 9216 - efficient use of resources. 9217 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9218 - type: string 9219 - kubeConfig: 9220 - description: |- 9221 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9222 - When used in combination with KustomizationSpec.ServiceAccountName, 9223 - forces the controller to act on behalf of that Service Account at the 9224 - target cluster. 9225 - If the --default-service-account flag is set, its value will be used as 9226 - a controller level fallback for when KustomizationSpec.ServiceAccountName 9227 - is empty. 9228 - properties: 9229 - configMapRef: 9230 - description: |- 9231 - ConfigMapRef holds an optional name of a ConfigMap that contains 9232 - the following keys: 9233 - 9234 - - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 9235 - `generic`. Required. 9236 - - `cluster`: the fully qualified resource name of the Kubernetes 9237 - cluster in the cloud provider API. Not used by the `generic` 9238 - provider. Required when one of `address` or `ca.crt` is not set. 9239 - - `address`: the address of the Kubernetes API server. Required 9240 - for `generic`. For the other providers, if not specified, the 9241 - first address in the cluster resource will be used, and if 9242 - specified, it must match one of the addresses in the cluster 9243 - resource. 9244 - If audiences is not set, will be used as the audience for the 9245 - `generic` provider. 9246 - - `ca.crt`: the optional PEM-encoded CA certificate for the 9247 - Kubernetes API server. If not set, the controller will use the 9248 - CA certificate from the cluster resource. 9249 - - `audiences`: the optional audiences as a list of 9250 - line-break-separated strings for the Kubernetes ServiceAccount 9251 - token. Defaults to the `address` for the `generic` provider, or 9252 - to specific values for the other providers depending on the 9253 - provider. 9254 - - `serviceAccountName`: the optional name of the Kubernetes 9255 - ServiceAccount in the same namespace that should be used 9256 - for authentication. If not specified, the controller 9257 - ServiceAccount will be used. 9258 - 9259 - Mutually exclusive with SecretRef. 9260 - properties: 9261 - name: 9262 - description: Name of the referent. 9263 - type: string 9264 - required: 9265 - - name 9266 - type: object 9267 - secretRef: 9268 - description: |- 9269 - SecretRef holds an optional name of a secret that contains a key with 9270 - the kubeconfig file as the value. If no key is set, the key will default 9271 - to 'value'. Mutually exclusive with ConfigMapRef. 9272 - It is recommended that the kubeconfig is self-contained, and the secret 9273 - is regularly updated if credentials such as a cloud-access-token expire. 9274 - Cloud specific `cmd-path` auth helpers will not function without adding 9275 - binaries and credentials to the Pod that is responsible for reconciling 9276 - Kubernetes resources. Supported only for the generic provider. 9277 - properties: 9278 - key: 9279 - description: Key in the Secret, when not specified an implementation-specific 9280 - default key is used. 9281 - type: string 9282 - name: 9283 - description: Name of the Secret. 9284 - type: string 9285 - required: 9286 - - name 9287 - type: object 9288 - type: object 9289 - x-kubernetes-validations: 9290 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 9291 - be specified 9292 - rule: has(self.configMapRef) || has(self.secretRef) 9293 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 9294 - be specified 9295 - rule: '!has(self.configMapRef) || !has(self.secretRef)' 9296 - namePrefix: 9297 - description: NamePrefix will prefix the names of all managed resources. 9298 - maxLength: 200 9299 - minLength: 1 9300 - type: string 9301 - nameSuffix: 9302 - description: NameSuffix will suffix the names of all managed resources. 9303 - maxLength: 200 9304 - minLength: 1 9305 - type: string 9306 - patches: 9307 - description: |- 9308 - Strategic merge and JSON patches, defined as inline YAML objects, 9309 - capable of targeting objects based on kind, label and annotation selectors. 9310 - items: 9311 - description: |- 9312 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9313 - be applied to. 9314 - properties: 9315 - patch: 9316 - description: |- 9317 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9318 - an array of operation objects. 9319 - type: string 9320 - target: 9321 - description: Target points to the resources that the patch document should be 9322 - applied to. 9323 - properties: 9324 - annotationSelector: 9325 - description: |- 9326 - AnnotationSelector is a string that follows the label selection expression 9327 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9328 - It matches with the resource annotations. 9329 - type: string 9330 - group: 9331 - description: |- 9332 - Group is the API group to select resources from. 9333 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9334 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9335 - type: string 9336 - kind: 9337 - description: |- 9338 - Kind of the API Group to select resources from. 9339 - Together with Group and Version it is capable of unambiguously 9340 - identifying and/or selecting resources. 9341 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9342 - type: string 9343 - labelSelector: 9344 - description: |- 9345 - LabelSelector is a string that follows the label selection expression 9346 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9347 - It matches with the resource labels. 9348 - type: string 9349 - name: 9350 - description: Name to match resources with. 9351 - type: string 9352 - namespace: 9353 - description: Namespace to select resources from. 9354 - type: string 9355 - version: 9356 - description: |- 9357 - Version of the API Group to select resources from. 9358 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9359 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9360 - type: string 9361 - type: object 9362 - required: 9363 - - patch 9364 - type: object 9365 - type: array 9366 - path: 9367 - description: |- 9368 - Path to the directory containing the kustomization.yaml file, or the 9369 - set of plain YAMLs a kustomization.yaml should be generated for. 9370 - Defaults to 'None', which translates to the root path of the SourceRef. 9371 - type: string 9372 - postBuild: 9373 - description: |- 9374 - PostBuild describes which actions to perform on the YAML manifest 9375 - generated by building the kustomize overlay. 9376 - properties: 9377 - substitute: 9378 - additionalProperties: 9379 - type: string 9380 - description: |- 9381 - Substitute holds a map of key/value pairs. 9382 - The variables defined in your YAML manifests that match any of the keys 9383 - defined in the map will be substituted with the set value. 9384 - Includes support for bash string replacement functions 9385 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 9386 - type: object 9387 - substituteFrom: 9388 - description: |- 9389 - SubstituteFrom holds references to ConfigMaps and Secrets containing 9390 - the variables and their values to be substituted in the YAML manifests. 9391 - The ConfigMap and the Secret data keys represent the var names, and they 9392 - must match the vars declared in the manifests for the substitution to 9393 - happen. 9394 - items: 9395 - description: |- 9396 - SubstituteReference contains a reference to a resource containing 9397 - the variables name and value. 9398 - properties: 9399 - kind: 9400 - description: Kind of the values referent, valid values are ('Secret', 9401 - 'ConfigMap'). 9402 - enum: 9403 - - Secret 9404 - - ConfigMap 9405 - type: string 9406 - name: 9407 - description: |- 9408 - Name of the values referent. Should reside in the same namespace as the 9409 - referring resource. 9410 - maxLength: 253 9411 - minLength: 1 9412 - type: string 9413 - optional: 9414 - default: false 9415 - description: |- 9416 - Optional indicates whether the referenced resource must exist, or whether to 9417 - tolerate its absence. If true and the referenced resource is absent, proceed 9418 - as if the resource was present but empty, without any variables defined. 9419 - type: boolean 9420 - required: 9421 - - kind 9422 - - name 9423 - type: object 9424 - type: array 9425 - type: object 9426 - prune: 9427 - description: Prune enables garbage collection. 9428 - type: boolean 9429 - retryInterval: 9430 - description: |- 9431 - The interval at which to retry a previously failed reconciliation. 9432 - When not specified, the controller uses the KustomizationSpec.Interval 9433 - value to retry failures. 9434 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9435 - type: string 9436 - serviceAccountName: 9437 - description: |- 9438 - The name of the Kubernetes service account to impersonate 9439 - when reconciling this Kustomization. 9440 - type: string 9441 - sourceRef: 9442 - description: Reference of the source where the kustomization file is. 9443 - properties: 9444 - apiVersion: 9445 - description: API version of the referent. 9446 - type: string 9447 - kind: 9448 - description: Kind of the referent. 9449 - enum: 9450 - - OCIRepository 9451 - - GitRepository 9452 - - Bucket 9453 - - ExternalArtifact 9454 - type: string 9455 - name: 9456 - description: Name of the referent. 9457 - type: string 9458 - namespace: 9459 - description: |- 9460 - Namespace of the referent, defaults to the namespace of the Kubernetes 9461 - resource object that contains the reference. 9462 - type: string 9463 - required: 9464 - - kind 9465 - - name 9466 - type: object 9467 - suspend: 9468 - description: |- 9469 - This flag tells the controller to suspend subsequent kustomize executions, 9470 - it does not apply to already started executions. Defaults to false. 9471 - type: boolean 9472 - targetNamespace: 9473 - description: |- 9474 - TargetNamespace sets or overrides the namespace in the 9475 - kustomization.yaml file. 9476 - maxLength: 63 9477 - minLength: 1 9478 - type: string 9479 - timeout: 9480 - description: |- 9481 - Timeout for validation, apply and health checking operations. 9482 - Defaults to 'Interval' duration. 9483 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9484 - type: string 9485 - wait: 9486 - description: |- 9487 - Wait instructs the controller to check the health of all the reconciled 9488 - resources. When enabled, the HealthChecks are ignored. Defaults to false. 9489 - type: boolean 9490 - required: 9491 - - interval 9492 - - prune 9493 - - sourceRef 9494 - type: object 9495 - status: 9496 - default: 9497 - observedGeneration: -1 9498 - description: KustomizationStatus defines the observed state of a kustomization. 9499 - properties: 9500 - conditions: 9501 - items: 9502 - description: Condition contains details for one aspect of the current state of this API 9503 - Resource. 9504 - properties: 9505 - lastTransitionTime: 9506 - description: |- 9507 - lastTransitionTime is the last time the condition transitioned from one status to another. 9508 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9509 - format: date-time 9510 - type: string 9511 - message: 9512 - description: |- 9513 - message is a human readable message indicating details about the transition. 9514 - This may be an empty string. 9515 - maxLength: 32768 9516 - type: string 9517 - observedGeneration: 9518 - description: |- 9519 - observedGeneration represents the .metadata.generation that the condition was set based upon. 9520 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9521 - with respect to the current state of the instance. 9522 - format: int64 9523 - minimum: 0 9524 - type: integer 9525 - reason: 9526 - description: |- 9527 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 9528 - Producers of specific condition types may define expected values and meanings for this field, 9529 - and whether the values are considered a guaranteed API. 9530 - The value should be a CamelCase string. 9531 - This field may not be empty. 9532 - maxLength: 1024 9533 - minLength: 1 9534 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9535 - type: string 9536 - status: 9537 - description: status of the condition, one of True, False, Unknown. 9538 - enum: 9539 - - "True" 9540 - - "False" 9541 - - Unknown 9542 - type: string 9543 - type: 9544 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 9545 - maxLength: 316 9546 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9547 - type: string 9548 - required: 9549 - - lastTransitionTime 9550 - - message 9551 - - reason 9552 - - status 9553 - - type 9554 - type: object 9555 - type: array 9556 - history: 9557 - description: |- 9558 - History contains a set of snapshots of the last reconciliation attempts 9559 - tracking the revision, the state and the duration of each attempt. 9560 - items: 9561 - description: |- 9562 - Snapshot represents a point-in-time record of a group of resources reconciliation, 9563 - including timing information, status, and a unique digest identifier. 9564 - properties: 9565 - digest: 9566 - description: Digest is the checksum in the format `<algo>:<hex>` of the resources 9567 - in this snapshot. 9568 - type: string 9569 - firstReconciled: 9570 - description: FirstReconciled is the time when this revision was first reconciled 9571 - to the cluster. 9572 - format: date-time 9573 - type: string 9574 - lastReconciled: 9575 - description: LastReconciled is the time when this revision was last reconciled 9576 - to the cluster. 9577 - format: date-time 9578 - type: string 9579 - lastReconciledDuration: 9580 - description: LastReconciledDuration is time it took to reconcile the resources 9581 - in this revision. 9582 - type: string 9583 - lastReconciledStatus: 9584 - description: LastReconciledStatus is the status of the last reconciliation. 9585 - type: string 9586 - metadata: 9587 - additionalProperties: 9588 - type: string 9589 - description: Metadata contains additional information about the snapshot. 9590 - type: object 9591 - totalReconciliations: 9592 - description: TotalReconciliations is the total number of reconciliations that 9593 - have occurred for this snapshot. 9594 - format: int64 9595 - type: integer 9596 - required: 9597 - - digest 9598 - - firstReconciled 9599 - - lastReconciled 9600 - - lastReconciledDuration 9601 - - lastReconciledStatus 9602 - - totalReconciliations 9603 - type: object 9604 - type: array 9605 - inventory: 9606 - description: |- 9607 - Inventory contains the list of Kubernetes resource object references that 9608 - have been successfully applied. 9609 - properties: 9610 - entries: 9611 - description: Entries of Kubernetes resource object references. 9612 - items: 9613 - description: ResourceRef contains the information necessary to locate a resource 9614 - within a cluster. 9615 - properties: 9616 - id: 9617 - description: |- 9618 - ID is the string representation of the Kubernetes resource object's metadata, 9619 - in the format '<namespace>_<name>_<group>_<kind>'. 9620 - type: string 9621 - v: 9622 - description: Version is the API version of the Kubernetes resource object's 9623 - kind. 9624 - type: string 9625 - required: 9626 - - id 9627 - - v 9628 - type: object 9629 - type: array 9630 - required: 9631 - - entries 9632 - type: object 9633 - lastAppliedOriginRevision: 9634 - description: |- 9635 - The last successfully applied origin revision. 9636 - Equals the origin revision of the applied Artifact from the referenced Source. 9637 - Usually present on the Metadata of the applied Artifact and depends on the 9638 - Source type, e.g. for OCI it's the value associated with the key 9639 - "org.opencontainers.image.revision". 9640 - type: string 9641 - lastAppliedRevision: 9642 - description: |- 9643 - The last successfully applied revision. 9644 - Equals the Revision of the applied Artifact from the referenced Source. 9645 - type: string 9646 - lastAttemptedRevision: 9647 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 9648 - type: string 9649 - lastHandledReconcileAt: 9650 - description: |- 9651 - LastHandledReconcileAt holds the value of the most recent 9652 - reconcile request value, so a change of the annotation value 9653 - can be detected. 9654 - type: string 9655 - observedGeneration: 9656 - description: ObservedGeneration is the last reconciled generation. 9657 - format: int64 9658 - type: integer 9659 - type: object 9660 + annotations: 9661 + additionalProperties: 9662 + type: string 9663 + description: Annotations to be added to the object's metadata. 9664 + type: object 9665 + labels: 9666 + additionalProperties: 9667 + type: string 9668 + description: Labels to be added to the object's metadata. 9669 + type: object 9670 type: object 9671 - served: true 9672 - storage: true 9673 - subresources: 9674 - status: {} 9675 - - additionalPrinterColumns: 9676 - - jsonPath: .metadata.creationTimestamp 9677 - name: Age 9678 - type: date 9679 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9680 - name: Ready 9681 - type: string 9682 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9683 - name: Status 9684 - type: string 9685 - deprecated: true 9686 - deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 9687 - name: v1beta2 9688 - schema: 9689 - openAPIV3Schema: 9690 - description: Kustomization is the Schema for the kustomizations API. 9691 + components: 9692 + description: Components specifies relative paths to kustomize Components. 9693 + items: 9694 + type: string 9695 + type: array 9696 + decryption: 9697 + description: Decrypt Kubernetes secrets before applying them on the 9698 + cluster. 9699 properties: 9700 - apiVersion: 9701 - description: |- 9702 - APIVersion defines the versioned schema of this representation of an object. 9703 - Servers should convert recognized schemas to the latest internal value, and 9704 - may reject unrecognized values. 9705 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9706 - type: string 9707 - kind: 9708 - description: |- 9709 - Kind is a string value representing the REST resource this object represents. 9710 - Servers may infer this from the endpoint the client submits requests to. 9711 - Cannot be updated. 9712 - In CamelCase. 9713 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9714 + provider: 9715 + description: Provider is the name of the decryption engine. 9716 + enum: 9717 + - sops 9718 + type: string 9719 + secretRef: 9720 + description: |- 9721 + The secret name containing the private OpenPGP keys used for decryption. 9722 + A static credential for a cloud provider defined inside the Secret 9723 + takes priority to secret-less authentication with the ServiceAccountName 9724 + field. 9725 + properties: 9726 + name: 9727 + description: Name of the referent. 9728 type: string 9729 - metadata: 9730 - type: object 9731 - spec: 9732 - description: KustomizationSpec defines the configuration to calculate the desired state from a Source 9733 - using Kustomize. 9734 - properties: 9735 - commonMetadata: 9736 - description: |- 9737 - CommonMetadata specifies the common labels and annotations that are applied to all resources. 9738 - Any existing label or annotation will be overridden if its key matches a common one. 9739 - properties: 9740 - annotations: 9741 - additionalProperties: 9742 - type: string 9743 - description: Annotations to be added to the object's metadata. 9744 - type: object 9745 - labels: 9746 - additionalProperties: 9747 - type: string 9748 - description: Labels to be added to the object's metadata. 9749 - type: object 9750 - type: object 9751 - components: 9752 - description: Components specifies relative paths to specifications of other Components. 9753 - items: 9754 - type: string 9755 - type: array 9756 - decryption: 9757 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9758 - properties: 9759 - provider: 9760 - description: Provider is the name of the decryption engine. 9761 - enum: 9762 - - sops 9763 - type: string 9764 - secretRef: 9765 - description: The secret name containing the private OpenPGP keys used for decryption. 9766 - properties: 9767 - name: 9768 - description: Name of the referent. 9769 - type: string 9770 - required: 9771 - - name 9772 - type: object 9773 - required: 9774 - - provider 9775 - type: object 9776 - dependsOn: 9777 - description: |- 9778 - DependsOn may contain a meta.NamespacedObjectReference slice 9779 - with references to Kustomization resources that must be ready before this 9780 - Kustomization can be reconciled. 9781 - items: 9782 - description: |- 9783 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 9784 - namespace. 9785 - properties: 9786 - name: 9787 - description: Name of the referent. 9788 - type: string 9789 - namespace: 9790 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9791 - type: string 9792 - required: 9793 - - name 9794 - type: object 9795 - type: array 9796 - force: 9797 - default: false 9798 - description: |- 9799 - Force instructs the controller to recreate resources 9800 - when patching fails due to an immutable field change. 9801 - type: boolean 9802 - healthChecks: 9803 - description: A list of resources to be included in the health assessment. 9804 - items: 9805 - description: |- 9806 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9807 - in any namespace. 9808 - properties: 9809 - apiVersion: 9810 - description: API version of the referent, if not specified the Kubernetes preferred 9811 - version will be used. 9812 - type: string 9813 - kind: 9814 - description: Kind of the referent. 9815 - type: string 9816 - name: 9817 - description: Name of the referent. 9818 - type: string 9819 - namespace: 9820 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9821 - type: string 9822 - required: 9823 - - kind 9824 - - name 9825 - type: object 9826 - type: array 9827 - images: 9828 - description: |- 9829 - Images is a list of (image name, new name, new tag or digest) 9830 - for changing image names, tags or digests. This can also be achieved with a 9831 - patch, but this operator is simpler to specify. 9832 - items: 9833 - description: Image contains an image name, a new name, a new tag or digest, which will 9834 - replace the original name and tag. 9835 - properties: 9836 - digest: 9837 - description: |- 9838 - Digest is the value used to replace the original image tag. 9839 - If digest is present NewTag value is ignored. 9840 - type: string 9841 - name: 9842 - description: Name is a tag-less image name. 9843 - type: string 9844 - newName: 9845 - description: NewName is the value used to replace the original name. 9846 - type: string 9847 - newTag: 9848 - description: NewTag is the value used to replace the original tag. 9849 - type: string 9850 - required: 9851 - - name 9852 - type: object 9853 - type: array 9854 - interval: 9855 - description: The interval at which to reconcile the Kustomization. 9856 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9857 - type: string 9858 - kubeConfig: 9859 - description: |- 9860 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9861 - When used in combination with KustomizationSpec.ServiceAccountName, 9862 - forces the controller to act on behalf of that Service Account at the 9863 - target cluster. 9864 - If the --default-service-account flag is set, its value will be used as 9865 - a controller level fallback for when KustomizationSpec.ServiceAccountName 9866 - is empty. 9867 - properties: 9868 - configMapRef: 9869 - description: |- 9870 - ConfigMapRef holds an optional name of a ConfigMap that contains 9871 - the following keys: 9872 - 9873 - - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 9874 - `generic`. Required. 9875 - - `cluster`: the fully qualified resource name of the Kubernetes 9876 - cluster in the cloud provider API. Not used by the `generic` 9877 - provider. Required when one of `address` or `ca.crt` is not set. 9878 - - `address`: the address of the Kubernetes API server. Required 9879 - for `generic`. For the other providers, if not specified, the 9880 - first address in the cluster resource will be used, and if 9881 - specified, it must match one of the addresses in the cluster 9882 - resource. 9883 - If audiences is not set, will be used as the audience for the 9884 - `generic` provider. 9885 - - `ca.crt`: the optional PEM-encoded CA certificate for the 9886 - Kubernetes API server. If not set, the controller will use the 9887 - CA certificate from the cluster resource. 9888 - - `audiences`: the optional audiences as a list of 9889 - line-break-separated strings for the Kubernetes ServiceAccount 9890 - token. Defaults to the `address` for the `generic` provider, or 9891 - to specific values for the other providers depending on the 9892 - provider. 9893 - - `serviceAccountName`: the optional name of the Kubernetes 9894 - ServiceAccount in the same namespace that should be used 9895 - for authentication. If not specified, the controller 9896 - ServiceAccount will be used. 9897 - 9898 - Mutually exclusive with SecretRef. 9899 - properties: 9900 - name: 9901 - description: Name of the referent. 9902 - type: string 9903 - required: 9904 - - name 9905 - type: object 9906 - secretRef: 9907 - description: |- 9908 - SecretRef holds an optional name of a secret that contains a key with 9909 - the kubeconfig file as the value. If no key is set, the key will default 9910 - to 'value'. Mutually exclusive with ConfigMapRef. 9911 - It is recommended that the kubeconfig is self-contained, and the secret 9912 - is regularly updated if credentials such as a cloud-access-token expire. 9913 - Cloud specific `cmd-path` auth helpers will not function without adding 9914 - binaries and credentials to the Pod that is responsible for reconciling 9915 - Kubernetes resources. Supported only for the generic provider. 9916 - properties: 9917 - key: 9918 - description: Key in the Secret, when not specified an implementation-specific 9919 - default key is used. 9920 - type: string 9921 - name: 9922 - description: Name of the Secret. 9923 - type: string 9924 - required: 9925 - - name 9926 - type: object 9927 - type: object 9928 - x-kubernetes-validations: 9929 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 9930 - be specified 9931 - rule: has(self.configMapRef) || has(self.secretRef) 9932 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 9933 - be specified 9934 - rule: '!has(self.configMapRef) || !has(self.secretRef)' 9935 - patches: 9936 - description: |- 9937 - Strategic merge and JSON patches, defined as inline YAML objects, 9938 - capable of targeting objects based on kind, label and annotation selectors. 9939 - items: 9940 - description: |- 9941 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9942 - be applied to. 9943 - properties: 9944 - patch: 9945 - description: |- 9946 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9947 - an array of operation objects. 9948 - type: string 9949 - target: 9950 - description: Target points to the resources that the patch document should be 9951 - applied to. 9952 - properties: 9953 - annotationSelector: 9954 - description: |- 9955 - AnnotationSelector is a string that follows the label selection expression 9956 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9957 - It matches with the resource annotations. 9958 - type: string 9959 - group: 9960 - description: |- 9961 - Group is the API group to select resources from. 9962 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9963 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9964 - type: string 9965 - kind: 9966 - description: |- 9967 - Kind of the API Group to select resources from. 9968 - Together with Group and Version it is capable of unambiguously 9969 - identifying and/or selecting resources. 9970 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9971 - type: string 9972 - labelSelector: 9973 - description: |- 9974 - LabelSelector is a string that follows the label selection expression 9975 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9976 - It matches with the resource labels. 9977 - type: string 9978 - name: 9979 - description: Name to match resources with. 9980 - type: string 9981 - namespace: 9982 - description: Namespace to select resources from. 9983 - type: string 9984 - version: 9985 - description: |- 9986 - Version of the API Group to select resources from. 9987 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9988 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9989 - type: string 9990 - type: object 9991 - required: 9992 - - patch 9993 - type: object 9994 - type: array 9995 - patchesJson6902: 9996 - description: |- 9997 - JSON 6902 patches, defined as inline YAML objects. 9998 - Deprecated: Use Patches instead. 9999 - items: 10000 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 10001 - applied to. 10002 - properties: 10003 - patch: 10004 - description: Patch contains the JSON6902 patch document with an array of operation 10005 - objects. 10006 - items: 10007 - description: |- 10008 - JSON6902 is a JSON6902 operation object. 10009 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 10010 - properties: 10011 - from: 10012 - description: |- 10013 - From contains a JSON-pointer value that references a location within the target document where the operation is 10014 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 10015 - type: string 10016 - op: 10017 - description: |- 10018 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 10019 - "test". 10020 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 10021 - enum: 10022 - - test 10023 - - remove 10024 - - add 10025 - - replace 10026 - - move 10027 - - copy 10028 - type: string 10029 - path: 10030 - description: |- 10031 - Path contains the JSON-pointer value that references a location within the target document where the operation 10032 - is performed. The meaning of the value depends on the value of Op. 10033 - type: string 10034 - value: 10035 - description: |- 10036 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 10037 - account by all operations. 10038 - x-kubernetes-preserve-unknown-fields: true 10039 - required: 10040 - - op 10041 - - path 10042 - type: object 10043 - type: array 10044 - target: 10045 - description: Target points to the resources that the patch document should be 10046 - applied to. 10047 - properties: 10048 - annotationSelector: 10049 - description: |- 10050 - AnnotationSelector is a string that follows the label selection expression 10051 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10052 - It matches with the resource annotations. 10053 - type: string 10054 - group: 10055 - description: |- 10056 - Group is the API group to select resources from. 10057 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10058 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10059 - type: string 10060 - kind: 10061 - description: |- 10062 - Kind of the API Group to select resources from. 10063 - Together with Group and Version it is capable of unambiguously 10064 - identifying and/or selecting resources. 10065 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10066 - type: string 10067 - labelSelector: 10068 - description: |- 10069 - LabelSelector is a string that follows the label selection expression 10070 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10071 - It matches with the resource labels. 10072 - type: string 10073 - name: 10074 - description: Name to match resources with. 10075 - type: string 10076 - namespace: 10077 - description: Namespace to select resources from. 10078 - type: string 10079 - version: 10080 - description: |- 10081 - Version of the API Group to select resources from. 10082 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10083 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10084 - type: string 10085 - type: object 10086 - required: 10087 - - patch 10088 - - target 10089 - type: object 10090 - type: array 10091 - patchesStrategicMerge: 10092 - description: |- 10093 - Strategic merge patches, defined as inline YAML objects. 10094 - Deprecated: Use Patches instead. 10095 - items: 10096 - x-kubernetes-preserve-unknown-fields: true 10097 - type: array 10098 - path: 10099 - description: |- 10100 - Path to the directory containing the kustomization.yaml file, or the 10101 - set of plain YAMLs a kustomization.yaml should be generated for. 10102 - Defaults to 'None', which translates to the root path of the SourceRef. 10103 - type: string 10104 - postBuild: 10105 - description: |- 10106 - PostBuild describes which actions to perform on the YAML manifest 10107 - generated by building the kustomize overlay. 10108 - properties: 10109 - substitute: 10110 - additionalProperties: 10111 - type: string 10112 - description: |- 10113 - Substitute holds a map of key/value pairs. 10114 - The variables defined in your YAML manifests 10115 - that match any of the keys defined in the map 10116 - will be substituted with the set value. 10117 - Includes support for bash string replacement functions 10118 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 10119 - type: object 10120 - substituteFrom: 10121 - description: |- 10122 - SubstituteFrom holds references to ConfigMaps and Secrets containing 10123 - the variables and their values to be substituted in the YAML manifests. 10124 - The ConfigMap and the Secret data keys represent the var names and they 10125 - must match the vars declared in the manifests for the substitution to happen. 10126 - items: 10127 - description: |- 10128 - SubstituteReference contains a reference to a resource containing 10129 - the variables name and value. 10130 - properties: 10131 - kind: 10132 - description: Kind of the values referent, valid values are ('Secret', 10133 - 'ConfigMap'). 10134 - enum: 10135 - - Secret 10136 - - ConfigMap 10137 - type: string 10138 - name: 10139 - description: |- 10140 - Name of the values referent. Should reside in the same namespace as the 10141 - referring resource. 10142 - maxLength: 253 10143 - minLength: 1 10144 - type: string 10145 - optional: 10146 - default: false 10147 - description: |- 10148 - Optional indicates whether the referenced resource must exist, or whether to 10149 - tolerate its absence. If true and the referenced resource is absent, proceed 10150 - as if the resource was present but empty, without any variables defined. 10151 - type: boolean 10152 - required: 10153 - - kind 10154 - - name 10155 - type: object 10156 - type: array 10157 - type: object 10158 - prune: 10159 - description: Prune enables garbage collection. 10160 - type: boolean 10161 - retryInterval: 10162 - description: |- 10163 - The interval at which to retry a previously failed reconciliation. 10164 - When not specified, the controller uses the KustomizationSpec.Interval 10165 - value to retry failures. 10166 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10167 - type: string 10168 - serviceAccountName: 10169 - description: |- 10170 - The name of the Kubernetes service account to impersonate 10171 - when reconciling this Kustomization. 10172 - type: string 10173 - sourceRef: 10174 - description: Reference of the source where the kustomization file is. 10175 - properties: 10176 - apiVersion: 10177 - description: API version of the referent. 10178 - type: string 10179 - kind: 10180 - description: Kind of the referent. 10181 - enum: 10182 - - OCIRepository 10183 - - GitRepository 10184 - - Bucket 10185 - type: string 10186 - name: 10187 - description: Name of the referent. 10188 - type: string 10189 - namespace: 10190 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 10191 - resource object that contains the reference. 10192 - type: string 10193 - required: 10194 - - kind 10195 - - name 10196 - type: object 10197 - suspend: 10198 - description: |- 10199 - This flag tells the controller to suspend subsequent kustomize executions, 10200 - it does not apply to already started executions. Defaults to false. 10201 - type: boolean 10202 - targetNamespace: 10203 - description: |- 10204 - TargetNamespace sets or overrides the namespace in the 10205 - kustomization.yaml file. 10206 - maxLength: 63 10207 - minLength: 1 10208 - type: string 10209 - timeout: 10210 - description: |- 10211 - Timeout for validation, apply and health checking operations. 10212 - Defaults to 'Interval' duration. 10213 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10214 - type: string 10215 - validation: 10216 - description: 'Deprecated: Not used in v1beta2.' 10217 - enum: 10218 - - none 10219 - - client 10220 - - server 10221 - type: string 10222 - wait: 10223 - description: |- 10224 - Wait instructs the controller to check the health of all the reconciled resources. 10225 - When enabled, the HealthChecks are ignored. Defaults to false. 10226 - type: boolean 10227 - required: 10228 - - interval 10229 - - prune 10230 - - sourceRef 10231 - type: object 10232 + required: 10233 + - name 10234 + type: object 10235 + serviceAccountName: 10236 + description: |- 10237 + ServiceAccountName is the name of the service account used to 10238 + authenticate with KMS services from cloud providers. If a 10239 + static credential for a given cloud provider is defined 10240 + inside the Secret referenced by SecretRef, that static 10241 + credential takes priority. 10242 + type: string 10243 + required: 10244 + - provider 10245 + type: object 10246 + deletionPolicy: 10247 + description: |- 10248 + DeletionPolicy can be used to control garbage collection when this 10249 + Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 10250 + 'WaitForTermination', 'Orphan'). 'MirrorPrune' mirrors the Prune field 10251 + (orphan if false, delete if true). Defaults to 'MirrorPrune'. 10252 + enum: 10253 + - MirrorPrune 10254 + - Delete 10255 + - WaitForTermination 10256 + - Orphan 10257 + type: string 10258 + dependsOn: 10259 + description: |- 10260 + DependsOn may contain a DependencyReference slice 10261 + with references to Kustomization resources that must be ready before this 10262 + Kustomization can be reconciled. 10263 + items: 10264 + description: DependencyReference defines a Kustomization dependency 10265 + on another Kustomization resource. 10266 + properties: 10267 + name: 10268 + description: Name of the referent. 10269 + type: string 10270 + namespace: 10271 + description: |- 10272 + Namespace of the referent, defaults to the namespace of the Kustomization 10273 + resource object that contains the reference. 10274 + type: string 10275 + readyExpr: 10276 + description: |- 10277 + ReadyExpr is a CEL expression that can be used to assess the readiness 10278 + of a dependency. When specified, the built-in readiness check 10279 + is replaced by the logic defined in the CEL expression. 10280 + To make the CEL expression additive to the built-in readiness check, 10281 + the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 10282 + type: string 10283 + required: 10284 + - name 10285 + type: object 10286 + type: array 10287 + force: 10288 + default: false 10289 + description: |- 10290 + Force instructs the controller to recreate resources 10291 + when patching fails due to an immutable field change. 10292 + type: boolean 10293 + healthCheckExprs: 10294 + description: |- 10295 + HealthCheckExprs is a list of healthcheck expressions for evaluating the 10296 + health of custom resources using Common Expression Language (CEL). 10297 + The expressions are evaluated only when Wait or HealthChecks are specified. 10298 + items: 10299 + description: CustomHealthCheck defines the health check for custom 10300 + resources. 10301 + properties: 10302 + apiVersion: 10303 + description: APIVersion of the custom resource under evaluation. 10304 + type: string 10305 + current: 10306 + description: |- 10307 + Current is the CEL expression that determines if the status 10308 + of the custom resource has reached the desired state. 10309 + type: string 10310 + failed: 10311 + description: |- 10312 + Failed is the CEL expression that determines if the status 10313 + of the custom resource has failed to reach the desired state. 10314 + type: string 10315 + inProgress: 10316 + description: |- 10317 + InProgress is the CEL expression that determines if the status 10318 + of the custom resource has not yet reached the desired state. 10319 + type: string 10320 + kind: 10321 + description: Kind of the custom resource under evaluation. 10322 + type: string 10323 + required: 10324 + - apiVersion 10325 + - current 10326 + - kind 10327 + type: object 10328 + type: array 10329 + healthChecks: 10330 + description: A list of resources to be included in the health assessment. 10331 + items: 10332 + description: |- 10333 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 10334 + in any namespace. 10335 + properties: 10336 + apiVersion: 10337 + description: API version of the referent, if not specified the 10338 + Kubernetes preferred version will be used. 10339 + type: string 10340 + kind: 10341 + description: Kind of the referent. 10342 + type: string 10343 + name: 10344 + description: Name of the referent. 10345 + type: string 10346 + namespace: 10347 + description: Namespace of the referent, when not specified it 10348 + acts as LocalObjectReference. 10349 + type: string 10350 + required: 10351 + - kind 10352 + - name 10353 + type: object 10354 + type: array 10355 + ignoreMissingComponents: 10356 + description: |- 10357 + IgnoreMissingComponents instructs the controller to ignore Components paths 10358 + not found in source by removing them from the generated kustomization.yaml 10359 + before running kustomize build. 10360 + type: boolean 10361 + images: 10362 + description: |- 10363 + Images is a list of (image name, new name, new tag or digest) 10364 + for changing image names, tags or digests. This can also be achieved with a 10365 + patch, but this operator is simpler to specify. 10366 + items: 10367 + description: Image contains an image name, a new name, a new tag 10368 + or digest, which will replace the original name and tag. 10369 + properties: 10370 + digest: 10371 + description: |- 10372 + Digest is the value used to replace the original image tag. 10373 + If digest is present NewTag value is ignored. 10374 + type: string 10375 + name: 10376 + description: Name is a tag-less image name. 10377 + type: string 10378 + newName: 10379 + description: NewName is the value used to replace the original 10380 + name. 10381 + type: string 10382 + newTag: 10383 + description: NewTag is the value used to replace the original 10384 + tag. 10385 + type: string 10386 + required: 10387 + - name 10388 + type: object 10389 + type: array 10390 + interval: 10391 + description: |- 10392 + The interval at which to reconcile the Kustomization. 10393 + This interval is approximate and may be subject to jitter to ensure 10394 + efficient use of resources. 10395 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10396 + type: string 10397 + kubeConfig: 10398 + description: |- 10399 + The KubeConfig for reconciling the Kustomization on a remote cluster. 10400 + When used in combination with KustomizationSpec.ServiceAccountName, 10401 + forces the controller to act on behalf of that Service Account at the 10402 + target cluster. 10403 + If the --default-service-account flag is set, its value will be used as 10404 + a controller level fallback for when KustomizationSpec.ServiceAccountName 10405 + is empty. 10406 + properties: 10407 + configMapRef: 10408 + description: |- 10409 + ConfigMapRef holds an optional name of a ConfigMap that contains 10410 + the following keys: 10411 + 10412 + - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 10413 + `generic`. Required. 10414 + - `cluster`: the fully qualified resource name of the Kubernetes 10415 + cluster in the cloud provider API. Not used by the `generic` 10416 + provider. Required when one of `address` or `ca.crt` is not set. 10417 + - `address`: the address of the Kubernetes API server. Required 10418 + for `generic`. For the other providers, if not specified, the 10419 + first address in the cluster resource will be used, and if 10420 + specified, it must match one of the addresses in the cluster 10421 + resource. 10422 + If audiences is not set, will be used as the audience for the 10423 + `generic` provider. 10424 + - `ca.crt`: the optional PEM-encoded CA certificate for the 10425 + Kubernetes API server. If not set, the controller will use the 10426 + CA certificate from the cluster resource. 10427 + - `audiences`: the optional audiences as a list of 10428 + line-break-separated strings for the Kubernetes ServiceAccount 10429 + token. Defaults to the `address` for the `generic` provider, or 10430 + to specific values for the other providers depending on the 10431 + provider. 10432 + - `serviceAccountName`: the optional name of the Kubernetes 10433 + ServiceAccount in the same namespace that should be used 10434 + for authentication. If not specified, the controller 10435 + ServiceAccount will be used. 10436 + 10437 + Mutually exclusive with SecretRef. 10438 + properties: 10439 + name: 10440 + description: Name of the referent. 10441 + type: string 10442 + required: 10443 + - name 10444 + type: object 10445 + secretRef: 10446 + description: |- 10447 + SecretRef holds an optional name of a secret that contains a key with 10448 + the kubeconfig file as the value. If no key is set, the key will default 10449 + to 'value'. Mutually exclusive with ConfigMapRef. 10450 + It is recommended that the kubeconfig is self-contained, and the secret 10451 + is regularly updated if credentials such as a cloud-access-token expire. 10452 + Cloud specific `cmd-path` auth helpers will not function without adding 10453 + binaries and credentials to the Pod that is responsible for reconciling 10454 + Kubernetes resources. Supported only for the generic provider. 10455 + properties: 10456 + key: 10457 + description: Key in the Secret, when not specified an implementation-specific 10458 + default key is used. 10459 + type: string 10460 + name: 10461 + description: Name of the Secret. 10462 + type: string 10463 + required: 10464 + - name 10465 + type: object 10466 + type: object 10467 + x-kubernetes-validations: 10468 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 10469 + must be specified 10470 + rule: has(self.configMapRef) || has(self.secretRef) 10471 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 10472 + must be specified 10473 + rule: '!has(self.configMapRef) || !has(self.secretRef)' 10474 + namePrefix: 10475 + description: NamePrefix will prefix the names of all managed resources. 10476 + maxLength: 200 10477 + minLength: 1 10478 + type: string 10479 + nameSuffix: 10480 + description: NameSuffix will suffix the names of all managed resources. 10481 + maxLength: 200 10482 + minLength: 1 10483 + type: string 10484 + patches: 10485 + description: |- 10486 + Strategic merge and JSON patches, defined as inline YAML objects, 10487 + capable of targeting objects based on kind, label and annotation selectors. 10488 + items: 10489 + description: |- 10490 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 10491 + be applied to. 10492 + properties: 10493 + patch: 10494 + description: |- 10495 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 10496 + an array of operation objects. 10497 + type: string 10498 + target: 10499 + description: Target points to the resources that the patch document 10500 + should be applied to. 10501 + properties: 10502 + annotationSelector: 10503 + description: |- 10504 + AnnotationSelector is a string that follows the label selection expression 10505 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10506 + It matches with the resource annotations. 10507 + type: string 10508 + group: 10509 + description: |- 10510 + Group is the API group to select resources from. 10511 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10512 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10513 + type: string 10514 + kind: 10515 + description: |- 10516 + Kind of the API Group to select resources from. 10517 + Together with Group and Version it is capable of unambiguously 10518 + identifying and/or selecting resources. 10519 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10520 + type: string 10521 + labelSelector: 10522 + description: |- 10523 + LabelSelector is a string that follows the label selection expression 10524 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10525 + It matches with the resource labels. 10526 + type: string 10527 + name: 10528 + description: Name to match resources with. 10529 + type: string 10530 + namespace: 10531 + description: Namespace to select resources from. 10532 + type: string 10533 + version: 10534 + description: |- 10535 + Version of the API Group to select resources from. 10536 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10537 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10538 + type: string 10539 + type: object 10540 + required: 10541 + - patch 10542 + type: object 10543 + type: array 10544 + path: 10545 + description: |- 10546 + Path to the directory containing the kustomization.yaml file, or the 10547 + set of plain YAMLs a kustomization.yaml should be generated for. 10548 + Defaults to 'None', which translates to the root path of the SourceRef. 10549 + type: string 10550 + postBuild: 10551 + description: |- 10552 + PostBuild describes which actions to perform on the YAML manifest 10553 + generated by building the kustomize overlay. 10554 + properties: 10555 + substitute: 10556 + additionalProperties: 10557 + type: string 10558 + description: |- 10559 + Substitute holds a map of key/value pairs. 10560 + The variables defined in your YAML manifests that match any of the keys 10561 + defined in the map will be substituted with the set value. 10562 + Includes support for bash string replacement functions 10563 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 10564 + type: object 10565 + substituteFrom: 10566 + description: |- 10567 + SubstituteFrom holds references to ConfigMaps and Secrets containing 10568 + the variables and their values to be substituted in the YAML manifests. 10569 + The ConfigMap and the Secret data keys represent the var names, and they 10570 + must match the vars declared in the manifests for the substitution to 10571 + happen. 10572 + items: 10573 + description: |- 10574 + SubstituteReference contains a reference to a resource containing 10575 + the variables name and value. 10576 + properties: 10577 + kind: 10578 + description: Kind of the values referent, valid values are 10579 + ('Secret', 'ConfigMap'). 10580 + enum: 10581 + - Secret 10582 + - ConfigMap 10583 + type: string 10584 + name: 10585 + description: |- 10586 + Name of the values referent. Should reside in the same namespace as the 10587 + referring resource. 10588 + maxLength: 253 10589 + minLength: 1 10590 + type: string 10591 + optional: 10592 + default: false 10593 + description: |- 10594 + Optional indicates whether the referenced resource must exist, or whether to 10595 + tolerate its absence. If true and the referenced resource is absent, proceed 10596 + as if the resource was present but empty, without any variables defined. 10597 + type: boolean 10598 + required: 10599 + - kind 10600 + - name 10601 + type: object 10602 + type: array 10603 + type: object 10604 + prune: 10605 + description: Prune enables garbage collection. 10606 + type: boolean 10607 + retryInterval: 10608 + description: |- 10609 + The interval at which to retry a previously failed reconciliation. 10610 + When not specified, the controller uses the KustomizationSpec.Interval 10611 + value to retry failures. 10612 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10613 + type: string 10614 + serviceAccountName: 10615 + description: |- 10616 + The name of the Kubernetes service account to impersonate 10617 + when reconciling this Kustomization. 10618 + type: string 10619 + sourceRef: 10620 + description: Reference of the source where the kustomization file 10621 + is. 10622 + properties: 10623 + apiVersion: 10624 + description: API version of the referent. 10625 + type: string 10626 + kind: 10627 + description: Kind of the referent. 10628 + enum: 10629 + - OCIRepository 10630 + - GitRepository 10631 + - Bucket 10632 + - ExternalArtifact 10633 + type: string 10634 + name: 10635 + description: Name of the referent. 10636 + type: string 10637 + namespace: 10638 + description: |- 10639 + Namespace of the referent, defaults to the namespace of the Kubernetes 10640 + resource object that contains the reference. 10641 + type: string 10642 + required: 10643 + - kind 10644 + - name 10645 + type: object 10646 + suspend: 10647 + description: |- 10648 + This flag tells the controller to suspend subsequent kustomize executions, 10649 + it does not apply to already started executions. Defaults to false. 10650 + type: boolean 10651 + targetNamespace: 10652 + description: |- 10653 + TargetNamespace sets or overrides the namespace in the 10654 + kustomization.yaml file. 10655 + maxLength: 63 10656 + minLength: 1 10657 + type: string 10658 + timeout: 10659 + description: |- 10660 + Timeout for validation, apply and health checking operations. 10661 + Defaults to 'Interval' duration. 10662 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10663 + type: string 10664 + wait: 10665 + description: |- 10666 + Wait instructs the controller to check the health of all the reconciled 10667 + resources. When enabled, the HealthChecks are ignored. Defaults to false. 10668 + type: boolean 10669 + required: 10670 + - interval 10671 + - prune 10672 + - sourceRef 10673 + type: object 10674 + status: 10675 + default: 10676 + observedGeneration: -1 10677 + description: KustomizationStatus defines the observed state of a kustomization. 10678 + properties: 10679 + conditions: 10680 + items: 10681 + description: Condition contains details for one aspect of the current 10682 + state of this API Resource. 10683 + properties: 10684 + lastTransitionTime: 10685 + description: |- 10686 + lastTransitionTime is the last time the condition transitioned from one status to another. 10687 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 10688 + format: date-time 10689 + type: string 10690 + message: 10691 + description: |- 10692 + message is a human readable message indicating details about the transition. 10693 + This may be an empty string. 10694 + maxLength: 32768 10695 + type: string 10696 + observedGeneration: 10697 + description: |- 10698 + observedGeneration represents the .metadata.generation that the condition was set based upon. 10699 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10700 + with respect to the current state of the instance. 10701 + format: int64 10702 + minimum: 0 10703 + type: integer 10704 + reason: 10705 + description: |- 10706 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 10707 + Producers of specific condition types may define expected values and meanings for this field, 10708 + and whether the values are considered a guaranteed API. 10709 + The value should be a CamelCase string. 10710 + This field may not be empty. 10711 + maxLength: 1024 10712 + minLength: 1 10713 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10714 + type: string 10715 status: 10716 - default: 10717 - observedGeneration: -1 10718 - description: KustomizationStatus defines the observed state of a kustomization. 10719 + description: status of the condition, one of True, False, Unknown. 10720 + enum: 10721 + - "True" 10722 + - "False" 10723 + - Unknown 10724 + type: string 10725 + type: 10726 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 10727 + maxLength: 316 10728 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10729 + type: string 10730 + required: 10731 + - lastTransitionTime 10732 + - message 10733 + - reason 10734 + - status 10735 + - type 10736 + type: object 10737 + type: array 10738 + history: 10739 + description: |- 10740 + History contains a set of snapshots of the last reconciliation attempts 10741 + tracking the revision, the state and the duration of each attempt. 10742 + items: 10743 + description: |- 10744 + Snapshot represents a point-in-time record of a group of resources reconciliation, 10745 + including timing information, status, and a unique digest identifier. 10746 + properties: 10747 + digest: 10748 + description: Digest is the checksum in the format `<algo>:<hex>` 10749 + of the resources in this snapshot. 10750 + type: string 10751 + firstReconciled: 10752 + description: FirstReconciled is the time when this revision 10753 + was first reconciled to the cluster. 10754 + format: date-time 10755 + type: string 10756 + lastReconciled: 10757 + description: LastReconciled is the time when this revision was 10758 + last reconciled to the cluster. 10759 + format: date-time 10760 + type: string 10761 + lastReconciledDuration: 10762 + description: LastReconciledDuration is time it took to reconcile 10763 + the resources in this revision. 10764 + type: string 10765 + lastReconciledStatus: 10766 + description: LastReconciledStatus is the status of the last 10767 + reconciliation. 10768 + type: string 10769 + metadata: 10770 + additionalProperties: 10771 + type: string 10772 + description: Metadata contains additional information about 10773 + the snapshot. 10774 + type: object 10775 + totalReconciliations: 10776 + description: TotalReconciliations is the total number of reconciliations 10777 + that have occurred for this snapshot. 10778 + format: int64 10779 + type: integer 10780 + required: 10781 + - digest 10782 + - firstReconciled 10783 + - lastReconciled 10784 + - lastReconciledDuration 10785 + - lastReconciledStatus 10786 + - totalReconciliations 10787 + type: object 10788 + type: array 10789 + inventory: 10790 + description: |- 10791 + Inventory contains the list of Kubernetes resource object references that 10792 + have been successfully applied. 10793 + properties: 10794 + entries: 10795 + description: Entries of Kubernetes resource object references. 10796 + items: 10797 + description: ResourceRef contains the information necessary 10798 + to locate a resource within a cluster. 10799 + properties: 10800 + id: 10801 + description: |- 10802 + ID is the string representation of the Kubernetes resource object's metadata, 10803 + in the format '<namespace>_<name>_<group>_<kind>'. 10804 + type: string 10805 + v: 10806 + description: Version is the API version of the Kubernetes 10807 + resource object's kind. 10808 + type: string 10809 + required: 10810 + - id 10811 + - v 10812 + type: object 10813 + type: array 10814 + required: 10815 + - entries 10816 + type: object 10817 + lastAppliedOriginRevision: 10818 + description: |- 10819 + The last successfully applied origin revision. 10820 + Equals the origin revision of the applied Artifact from the referenced Source. 10821 + Usually present on the Metadata of the applied Artifact and depends on the 10822 + Source type, e.g. for OCI it's the value associated with the key 10823 + "org.opencontainers.image.revision". 10824 + type: string 10825 + lastAppliedRevision: 10826 + description: |- 10827 + The last successfully applied revision. 10828 + Equals the Revision of the applied Artifact from the referenced Source. 10829 + type: string 10830 + lastAttemptedRevision: 10831 + description: LastAttemptedRevision is the revision of the last reconciliation 10832 + attempt. 10833 + type: string 10834 + lastHandledReconcileAt: 10835 + description: |- 10836 + LastHandledReconcileAt holds the value of the most recent 10837 + reconcile request value, so a change of the annotation value 10838 + can be detected. 10839 + type: string 10840 + observedGeneration: 10841 + description: ObservedGeneration is the last reconciled generation. 10842 + format: int64 10843 + type: integer 10844 + type: object 10845 + type: object 10846 + served: true 10847 + storage: true 10848 + subresources: 10849 + status: {} 10850 + - additionalPrinterColumns: 10851 + - jsonPath: .metadata.creationTimestamp 10852 + name: Age 10853 + type: date 10854 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 10855 + name: Ready 10856 + type: string 10857 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 10858 + name: Status 10859 + type: string 10860 + deprecated: true 10861 + deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 10862 + name: v1beta2 10863 + schema: 10864 + openAPIV3Schema: 10865 + description: Kustomization is the Schema for the kustomizations API. 10866 + properties: 10867 + apiVersion: 10868 + description: |- 10869 + APIVersion defines the versioned schema of this representation of an object. 10870 + Servers should convert recognized schemas to the latest internal value, and 10871 + may reject unrecognized values. 10872 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10873 + type: string 10874 + kind: 10875 + description: |- 10876 + Kind is a string value representing the REST resource this object represents. 10877 + Servers may infer this from the endpoint the client submits requests to. 10878 + Cannot be updated. 10879 + In CamelCase. 10880 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10881 + type: string 10882 + metadata: 10883 + type: object 10884 + spec: 10885 + description: KustomizationSpec defines the configuration to calculate 10886 + the desired state from a Source using Kustomize. 10887 + properties: 10888 + commonMetadata: 10889 + description: |- 10890 + CommonMetadata specifies the common labels and annotations that are applied to all resources. 10891 + Any existing label or annotation will be overridden if its key matches a common one. 10892 + properties: 10893 + annotations: 10894 + additionalProperties: 10895 + type: string 10896 + description: Annotations to be added to the object's metadata. 10897 + type: object 10898 + labels: 10899 + additionalProperties: 10900 + type: string 10901 + description: Labels to be added to the object's metadata. 10902 + type: object 10903 + type: object 10904 + components: 10905 + description: Components specifies relative paths to specifications 10906 + of other Components. 10907 + items: 10908 + type: string 10909 + type: array 10910 + decryption: 10911 + description: Decrypt Kubernetes secrets before applying them on the 10912 + cluster. 10913 + properties: 10914 + provider: 10915 + description: Provider is the name of the decryption engine. 10916 + enum: 10917 + - sops 10918 + type: string 10919 + secretRef: 10920 + description: The secret name containing the private OpenPGP keys 10921 + used for decryption. 10922 + properties: 10923 + name: 10924 + description: Name of the referent. 10925 + type: string 10926 + required: 10927 + - name 10928 + type: object 10929 + required: 10930 + - provider 10931 + type: object 10932 + dependsOn: 10933 + description: |- 10934 + DependsOn may contain a meta.NamespacedObjectReference slice 10935 + with references to Kustomization resources that must be ready before this 10936 + Kustomization can be reconciled. 10937 + items: 10938 + description: |- 10939 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 10940 + namespace. 10941 + properties: 10942 + name: 10943 + description: Name of the referent. 10944 + type: string 10945 + namespace: 10946 + description: Namespace of the referent, when not specified it 10947 + acts as LocalObjectReference. 10948 + type: string 10949 + required: 10950 + - name 10951 + type: object 10952 + type: array 10953 + force: 10954 + default: false 10955 + description: |- 10956 + Force instructs the controller to recreate resources 10957 + when patching fails due to an immutable field change. 10958 + type: boolean 10959 + healthChecks: 10960 + description: A list of resources to be included in the health assessment. 10961 + items: 10962 + description: |- 10963 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 10964 + in any namespace. 10965 + properties: 10966 + apiVersion: 10967 + description: API version of the referent, if not specified the 10968 + Kubernetes preferred version will be used. 10969 + type: string 10970 + kind: 10971 + description: Kind of the referent. 10972 + type: string 10973 + name: 10974 + description: Name of the referent. 10975 + type: string 10976 + namespace: 10977 + description: Namespace of the referent, when not specified it 10978 + acts as LocalObjectReference. 10979 + type: string 10980 + required: 10981 + - kind 10982 + - name 10983 + type: object 10984 + type: array 10985 + images: 10986 + description: |- 10987 + Images is a list of (image name, new name, new tag or digest) 10988 + for changing image names, tags or digests. This can also be achieved with a 10989 + patch, but this operator is simpler to specify. 10990 + items: 10991 + description: Image contains an image name, a new name, a new tag 10992 + or digest, which will replace the original name and tag. 10993 + properties: 10994 + digest: 10995 + description: |- 10996 + Digest is the value used to replace the original image tag. 10997 + If digest is present NewTag value is ignored. 10998 + type: string 10999 + name: 11000 + description: Name is a tag-less image name. 11001 + type: string 11002 + newName: 11003 + description: NewName is the value used to replace the original 11004 + name. 11005 + type: string 11006 + newTag: 11007 + description: NewTag is the value used to replace the original 11008 + tag. 11009 + type: string 11010 + required: 11011 + - name 11012 + type: object 11013 + type: array 11014 + interval: 11015 + description: The interval at which to reconcile the Kustomization. 11016 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11017 + type: string 11018 + kubeConfig: 11019 + description: |- 11020 + The KubeConfig for reconciling the Kustomization on a remote cluster. 11021 + When used in combination with KustomizationSpec.ServiceAccountName, 11022 + forces the controller to act on behalf of that Service Account at the 11023 + target cluster. 11024 + If the --default-service-account flag is set, its value will be used as 11025 + a controller level fallback for when KustomizationSpec.ServiceAccountName 11026 + is empty. 11027 + properties: 11028 + configMapRef: 11029 + description: |- 11030 + ConfigMapRef holds an optional name of a ConfigMap that contains 11031 + the following keys: 11032 + 11033 + - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 11034 + `generic`. Required. 11035 + - `cluster`: the fully qualified resource name of the Kubernetes 11036 + cluster in the cloud provider API. Not used by the `generic` 11037 + provider. Required when one of `address` or `ca.crt` is not set. 11038 + - `address`: the address of the Kubernetes API server. Required 11039 + for `generic`. For the other providers, if not specified, the 11040 + first address in the cluster resource will be used, and if 11041 + specified, it must match one of the addresses in the cluster 11042 + resource. 11043 + If audiences is not set, will be used as the audience for the 11044 + `generic` provider. 11045 + - `ca.crt`: the optional PEM-encoded CA certificate for the 11046 + Kubernetes API server. If not set, the controller will use the 11047 + CA certificate from the cluster resource. 11048 + - `audiences`: the optional audiences as a list of 11049 + line-break-separated strings for the Kubernetes ServiceAccount 11050 + token. Defaults to the `address` for the `generic` provider, or 11051 + to specific values for the other providers depending on the 11052 + provider. 11053 + - `serviceAccountName`: the optional name of the Kubernetes 11054 + ServiceAccount in the same namespace that should be used 11055 + for authentication. If not specified, the controller 11056 + ServiceAccount will be used. 11057 + 11058 + Mutually exclusive with SecretRef. 11059 + properties: 11060 + name: 11061 + description: Name of the referent. 11062 + type: string 11063 + required: 11064 + - name 11065 + type: object 11066 + secretRef: 11067 + description: |- 11068 + SecretRef holds an optional name of a secret that contains a key with 11069 + the kubeconfig file as the value. If no key is set, the key will default 11070 + to 'value'. Mutually exclusive with ConfigMapRef. 11071 + It is recommended that the kubeconfig is self-contained, and the secret 11072 + is regularly updated if credentials such as a cloud-access-token expire. 11073 + Cloud specific `cmd-path` auth helpers will not function without adding 11074 + binaries and credentials to the Pod that is responsible for reconciling 11075 + Kubernetes resources. Supported only for the generic provider. 11076 + properties: 11077 + key: 11078 + description: Key in the Secret, when not specified an implementation-specific 11079 + default key is used. 11080 + type: string 11081 + name: 11082 + description: Name of the Secret. 11083 + type: string 11084 + required: 11085 + - name 11086 + type: object 11087 + type: object 11088 + x-kubernetes-validations: 11089 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 11090 + must be specified 11091 + rule: has(self.configMapRef) || has(self.secretRef) 11092 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 11093 + must be specified 11094 + rule: '!has(self.configMapRef) || !has(self.secretRef)' 11095 + patches: 11096 + description: |- 11097 + Strategic merge and JSON patches, defined as inline YAML objects, 11098 + capable of targeting objects based on kind, label and annotation selectors. 11099 + items: 11100 + description: |- 11101 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 11102 + be applied to. 11103 + properties: 11104 + patch: 11105 + description: |- 11106 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 11107 + an array of operation objects. 11108 + type: string 11109 + target: 11110 + description: Target points to the resources that the patch document 11111 + should be applied to. 11112 + properties: 11113 + annotationSelector: 11114 + description: |- 11115 + AnnotationSelector is a string that follows the label selection expression 11116 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11117 + It matches with the resource annotations. 11118 + type: string 11119 + group: 11120 + description: |- 11121 + Group is the API group to select resources from. 11122 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 11123 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11124 + type: string 11125 + kind: 11126 + description: |- 11127 + Kind of the API Group to select resources from. 11128 + Together with Group and Version it is capable of unambiguously 11129 + identifying and/or selecting resources. 11130 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11131 + type: string 11132 + labelSelector: 11133 + description: |- 11134 + LabelSelector is a string that follows the label selection expression 11135 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11136 + It matches with the resource labels. 11137 + type: string 11138 + name: 11139 + description: Name to match resources with. 11140 + type: string 11141 + namespace: 11142 + description: Namespace to select resources from. 11143 + type: string 11144 + version: 11145 + description: |- 11146 + Version of the API Group to select resources from. 11147 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 11148 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11149 + type: string 11150 + type: object 11151 + required: 11152 + - patch 11153 + type: object 11154 + type: array 11155 + patchesJson6902: 11156 + description: |- 11157 + JSON 6902 patches, defined as inline YAML objects. 11158 + Deprecated: Use Patches instead. 11159 + items: 11160 + description: JSON6902Patch contains a JSON6902 patch and the target 11161 + the patch should be applied to. 11162 + properties: 11163 + patch: 11164 + description: Patch contains the JSON6902 patch document with 11165 + an array of operation objects. 11166 + items: 11167 + description: |- 11168 + JSON6902 is a JSON6902 operation object. 11169 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 11170 properties: 11171 - conditions: 11172 - items: 11173 - description: Condition contains details for one aspect of the current state of this API 11174 - Resource. 11175 - properties: 11176 - lastTransitionTime: 11177 - description: |- 11178 - lastTransitionTime is the last time the condition transitioned from one status to another. 11179 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11180 - format: date-time 11181 - type: string 11182 - message: 11183 - description: |- 11184 - message is a human readable message indicating details about the transition. 11185 - This may be an empty string. 11186 - maxLength: 32768 11187 - type: string 11188 - observedGeneration: 11189 - description: |- 11190 - observedGeneration represents the .metadata.generation that the condition was set based upon. 11191 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11192 - with respect to the current state of the instance. 11193 - format: int64 11194 - minimum: 0 11195 - type: integer 11196 - reason: 11197 - description: |- 11198 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 11199 - Producers of specific condition types may define expected values and meanings for this field, 11200 - and whether the values are considered a guaranteed API. 11201 - The value should be a CamelCase string. 11202 - This field may not be empty. 11203 - maxLength: 1024 11204 - minLength: 1 11205 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11206 - type: string 11207 - status: 11208 - description: status of the condition, one of True, False, Unknown. 11209 - enum: 11210 - - "True" 11211 - - "False" 11212 - - Unknown 11213 - type: string 11214 - type: 11215 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 11216 - maxLength: 316 11217 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11218 - type: string 11219 - required: 11220 - - lastTransitionTime 11221 - - message 11222 - - reason 11223 - - status 11224 - - type 11225 - type: object 11226 - type: array 11227 - inventory: 11228 - description: Inventory contains the list of Kubernetes resource object references that have 11229 - been successfully applied. 11230 - properties: 11231 - entries: 11232 - description: Entries of Kubernetes resource object references. 11233 - items: 11234 - description: ResourceRef contains the information necessary to locate a resource 11235 - within a cluster. 11236 - properties: 11237 - id: 11238 - description: |- 11239 - ID is the string representation of the Kubernetes resource object's metadata, 11240 - in the format '<namespace>_<name>_<group>_<kind>'. 11241 - type: string 11242 - v: 11243 - description: Version is the API version of the Kubernetes resource object's 11244 - kind. 11245 - type: string 11246 - required: 11247 - - id 11248 - - v 11249 - type: object 11250 - type: array 11251 - required: 11252 - - entries 11253 - type: object 11254 - lastAppliedRevision: 11255 - description: |- 11256 - The last successfully applied revision. 11257 - Equals the Revision of the applied Artifact from the referenced Source. 11258 - type: string 11259 - lastAttemptedRevision: 11260 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 11261 - type: string 11262 - lastHandledReconcileAt: 11263 - description: |- 11264 - LastHandledReconcileAt holds the value of the most recent 11265 - reconcile request value, so a change of the annotation value 11266 - can be detected. 11267 - type: string 11268 - observedGeneration: 11269 - description: ObservedGeneration is the last reconciled generation. 11270 - format: int64 11271 - type: integer 11272 + from: 11273 + description: |- 11274 + From contains a JSON-pointer value that references a location within the target document where the operation is 11275 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 11276 + type: string 11277 + op: 11278 + description: |- 11279 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 11280 + "test". 11281 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 11282 + enum: 11283 + - test 11284 + - remove 11285 + - add 11286 + - replace 11287 + - move 11288 + - copy 11289 + type: string 11290 + path: 11291 + description: |- 11292 + Path contains the JSON-pointer value that references a location within the target document where the operation 11293 + is performed. The meaning of the value depends on the value of Op. 11294 + type: string 11295 + value: 11296 + description: |- 11297 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 11298 + account by all operations. 11299 + x-kubernetes-preserve-unknown-fields: true 11300 + required: 11301 + - op 11302 + - path 11303 type: object 11304 + type: array 11305 + target: 11306 + description: Target points to the resources that the patch document 11307 + should be applied to. 11308 + properties: 11309 + annotationSelector: 11310 + description: |- 11311 + AnnotationSelector is a string that follows the label selection expression 11312 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11313 + It matches with the resource annotations. 11314 + type: string 11315 + group: 11316 + description: |- 11317 + Group is the API group to select resources from. 11318 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 11319 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11320 + type: string 11321 + kind: 11322 + description: |- 11323 + Kind of the API Group to select resources from. 11324 + Together with Group and Version it is capable of unambiguously 11325 + identifying and/or selecting resources. 11326 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11327 + type: string 11328 + labelSelector: 11329 + description: |- 11330 + LabelSelector is a string that follows the label selection expression 11331 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11332 + It matches with the resource labels. 11333 + type: string 11334 + name: 11335 + description: Name to match resources with. 11336 + type: string 11337 + namespace: 11338 + description: Namespace to select resources from. 11339 + type: string 11340 + version: 11341 + description: |- 11342 + Version of the API Group to select resources from. 11343 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 11344 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11345 + type: string 11346 + type: object 11347 + required: 11348 + - patch 11349 + - target 11350 + type: object 11351 + type: array 11352 + patchesStrategicMerge: 11353 + description: |- 11354 + Strategic merge patches, defined as inline YAML objects. 11355 + Deprecated: Use Patches instead. 11356 + items: 11357 + x-kubernetes-preserve-unknown-fields: true 11358 + type: array 11359 + path: 11360 + description: |- 11361 + Path to the directory containing the kustomization.yaml file, or the 11362 + set of plain YAMLs a kustomization.yaml should be generated for. 11363 + Defaults to 'None', which translates to the root path of the SourceRef. 11364 + type: string 11365 + postBuild: 11366 + description: |- 11367 + PostBuild describes which actions to perform on the YAML manifest 11368 + generated by building the kustomize overlay. 11369 + properties: 11370 + substitute: 11371 + additionalProperties: 11372 + type: string 11373 + description: |- 11374 + Substitute holds a map of key/value pairs. 11375 + The variables defined in your YAML manifests 11376 + that match any of the keys defined in the map 11377 + will be substituted with the set value. 11378 + Includes support for bash string replacement functions 11379 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 11380 + type: object 11381 + substituteFrom: 11382 + description: |- 11383 + SubstituteFrom holds references to ConfigMaps and Secrets containing 11384 + the variables and their values to be substituted in the YAML manifests. 11385 + The ConfigMap and the Secret data keys represent the var names and they 11386 + must match the vars declared in the manifests for the substitution to happen. 11387 + items: 11388 + description: |- 11389 + SubstituteReference contains a reference to a resource containing 11390 + the variables name and value. 11391 + properties: 11392 + kind: 11393 + description: Kind of the values referent, valid values are 11394 + ('Secret', 'ConfigMap'). 11395 + enum: 11396 + - Secret 11397 + - ConfigMap 11398 + type: string 11399 + name: 11400 + description: |- 11401 + Name of the values referent. Should reside in the same namespace as the 11402 + referring resource. 11403 + maxLength: 253 11404 + minLength: 1 11405 + type: string 11406 + optional: 11407 + default: false 11408 + description: |- 11409 + Optional indicates whether the referenced resource must exist, or whether to 11410 + tolerate its absence. If true and the referenced resource is absent, proceed 11411 + as if the resource was present but empty, without any variables defined. 11412 + type: boolean 11413 + required: 11414 + - kind 11415 + - name 11416 + type: object 11417 + type: array 11418 + type: object 11419 + prune: 11420 + description: Prune enables garbage collection. 11421 + type: boolean 11422 + retryInterval: 11423 + description: |- 11424 + The interval at which to retry a previously failed reconciliation. 11425 + When not specified, the controller uses the KustomizationSpec.Interval 11426 + value to retry failures. 11427 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11428 + type: string 11429 + serviceAccountName: 11430 + description: |- 11431 + The name of the Kubernetes service account to impersonate 11432 + when reconciling this Kustomization. 11433 + type: string 11434 + sourceRef: 11435 + description: Reference of the source where the kustomization file 11436 + is. 11437 + properties: 11438 + apiVersion: 11439 + description: API version of the referent. 11440 + type: string 11441 + kind: 11442 + description: Kind of the referent. 11443 + enum: 11444 + - OCIRepository 11445 + - GitRepository 11446 + - Bucket 11447 + type: string 11448 + name: 11449 + description: Name of the referent. 11450 + type: string 11451 + namespace: 11452 + description: Namespace of the referent, defaults to the namespace 11453 + of the Kubernetes resource object that contains the reference. 11454 + type: string 11455 + required: 11456 + - kind 11457 + - name 11458 + type: object 11459 + suspend: 11460 + description: |- 11461 + This flag tells the controller to suspend subsequent kustomize executions, 11462 + it does not apply to already started executions. Defaults to false. 11463 + type: boolean 11464 + targetNamespace: 11465 + description: |- 11466 + TargetNamespace sets or overrides the namespace in the 11467 + kustomization.yaml file. 11468 + maxLength: 63 11469 + minLength: 1 11470 + type: string 11471 + timeout: 11472 + description: |- 11473 + Timeout for validation, apply and health checking operations. 11474 + Defaults to 'Interval' duration. 11475 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11476 + type: string 11477 + validation: 11478 + description: 'Deprecated: Not used in v1beta2.' 11479 + enum: 11480 + - none 11481 + - client 11482 + - server 11483 + type: string 11484 + wait: 11485 + description: |- 11486 + Wait instructs the controller to check the health of all the reconciled resources. 11487 + When enabled, the HealthChecks are ignored. Defaults to false. 11488 + type: boolean 11489 + required: 11490 + - interval 11491 + - prune 11492 + - sourceRef 11493 + type: object 11494 + status: 11495 + default: 11496 + observedGeneration: -1 11497 + description: KustomizationStatus defines the observed state of a kustomization. 11498 + properties: 11499 + conditions: 11500 + items: 11501 + description: Condition contains details for one aspect of the current 11502 + state of this API Resource. 11503 + properties: 11504 + lastTransitionTime: 11505 + description: |- 11506 + lastTransitionTime is the last time the condition transitioned from one status to another. 11507 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11508 + format: date-time 11509 + type: string 11510 + message: 11511 + description: |- 11512 + message is a human readable message indicating details about the transition. 11513 + This may be an empty string. 11514 + maxLength: 32768 11515 + type: string 11516 + observedGeneration: 11517 + description: |- 11518 + observedGeneration represents the .metadata.generation that the condition was set based upon. 11519 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11520 + with respect to the current state of the instance. 11521 + format: int64 11522 + minimum: 0 11523 + type: integer 11524 + reason: 11525 + description: |- 11526 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 11527 + Producers of specific condition types may define expected values and meanings for this field, 11528 + and whether the values are considered a guaranteed API. 11529 + The value should be a CamelCase string. 11530 + This field may not be empty. 11531 + maxLength: 1024 11532 + minLength: 1 11533 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11534 + type: string 11535 + status: 11536 + description: status of the condition, one of True, False, Unknown. 11537 + enum: 11538 + - "True" 11539 + - "False" 11540 + - Unknown 11541 + type: string 11542 + type: 11543 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 11544 + maxLength: 316 11545 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11546 + type: string 11547 + required: 11548 + - lastTransitionTime 11549 + - message 11550 + - reason 11551 + - status 11552 + - type 11553 + type: object 11554 + type: array 11555 + inventory: 11556 + description: Inventory contains the list of Kubernetes resource object 11557 + references that have been successfully applied. 11558 + properties: 11559 + entries: 11560 + description: Entries of Kubernetes resource object references. 11561 + items: 11562 + description: ResourceRef contains the information necessary 11563 + to locate a resource within a cluster. 11564 + properties: 11565 + id: 11566 + description: |- 11567 + ID is the string representation of the Kubernetes resource object's metadata, 11568 + in the format '<namespace>_<name>_<group>_<kind>'. 11569 + type: string 11570 + v: 11571 + description: Version is the API version of the Kubernetes 11572 + resource object's kind. 11573 + type: string 11574 + required: 11575 + - id 11576 + - v 11577 + type: object 11578 + type: array 11579 + required: 11580 + - entries 11581 type: object 11582 - served: true 11583 - storage: false 11584 - subresources: 11585 - status: {} 11586 + lastAppliedRevision: 11587 + description: |- 11588 + The last successfully applied revision. 11589 + Equals the Revision of the applied Artifact from the referenced Source. 11590 + type: string 11591 + lastAttemptedRevision: 11592 + description: LastAttemptedRevision is the revision of the last reconciliation 11593 + attempt. 11594 + type: string 11595 + lastHandledReconcileAt: 11596 + description: |- 11597 + LastHandledReconcileAt holds the value of the most recent 11598 + reconcile request value, so a change of the annotation value 11599 + can be detected. 11600 + type: string 11601 + observedGeneration: 11602 + description: ObservedGeneration is the last reconciled generation. 11603 + format: int64 11604 + type: integer 11605 + type: object 11606 + type: object 11607 + served: true 11608 + storage: false 11609 + subresources: 11610 + status: {} 11611 --- 11612 apiVersion: v1 11613 kind: ServiceAccount 11614 metadata: 11615 - labels: 11616 - app.kubernetes.io/component: kustomize-controller 11617 - app.kubernetes.io/instance: flux-system 11618 - app.kubernetes.io/part-of: flux 11619 - app.kubernetes.io/version: v2.7.3 11620 - name: kustomize-controller 11621 - namespace: flux-system 11622 + labels: 11623 + app.kubernetes.io/component: kustomize-controller 11624 + app.kubernetes.io/instance: flux-system 11625 + app.kubernetes.io/part-of: flux 11626 + app.kubernetes.io/version: v2.7.5 11627 + name: kustomize-controller 11628 + namespace: flux-system 11629 --- 11630 apiVersion: apps/v1 11631 kind: Deployment 11632 metadata: 11633 - labels: 11634 + labels: 11635 + app.kubernetes.io/component: kustomize-controller 11636 + app.kubernetes.io/instance: flux-system 11637 + app.kubernetes.io/part-of: flux 11638 + app.kubernetes.io/version: v2.7.5 11639 + control-plane: controller 11640 + name: kustomize-controller 11641 + namespace: flux-system 11642 +spec: 11643 + replicas: 1 11644 + selector: 11645 + matchLabels: 11646 + app: kustomize-controller 11647 + template: 11648 + metadata: 11649 + annotations: 11650 + prometheus.io/port: "8080" 11651 + prometheus.io/scrape: "true" 11652 + labels: 11653 + app: kustomize-controller 11654 app.kubernetes.io/component: kustomize-controller 11655 app.kubernetes.io/instance: flux-system 11656 app.kubernetes.io/part-of: flux 11657 - app.kubernetes.io/version: v2.7.3 11658 - control-plane: controller 11659 - name: kustomize-controller 11660 - namespace: flux-system 11661 -spec: 11662 - replicas: 1 11663 - selector: 11664 - matchLabels: 11665 - app: kustomize-controller 11666 - template: 11667 - metadata: 11668 - annotations: 11669 - prometheus.io/port: "8080" 11670 - prometheus.io/scrape: "true" 11671 - labels: 11672 - app: kustomize-controller 11673 - app.kubernetes.io/component: kustomize-controller 11674 - app.kubernetes.io/instance: flux-system 11675 - app.kubernetes.io/part-of: flux 11676 - app.kubernetes.io/version: v2.7.3 11677 - spec: 11678 - containers: 11679 - - args: 11680 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 11681 - - --watch-all-namespaces=true 11682 - - --log-level=info 11683 - - --log-encoding=json 11684 - - --enable-leader-election 11685 - env: 11686 - - name: RUNTIME_NAMESPACE 11687 - valueFrom: 11688 - fieldRef: 11689 - fieldPath: metadata.namespace 11690 - - name: GOMEMLIMIT 11691 - valueFrom: 11692 - resourceFieldRef: 11693 - containerName: manager 11694 - resource: limits.memory 11695 - image: ghcr.io/fluxcd/kustomize-controller:v1.7.2 11696 - imagePullPolicy: IfNotPresent 11697 - livenessProbe: 11698 - httpGet: 11699 - path: /healthz 11700 - port: healthz 11701 - name: manager 11702 - ports: 11703 - - containerPort: 8080 11704 - name: http-prom 11705 - protocol: TCP 11706 - - containerPort: 9440 11707 - name: healthz 11708 - protocol: TCP 11709 - readinessProbe: 11710 - httpGet: 11711 - path: /readyz 11712 - port: healthz 11713 - resources: 11714 - limits: 11715 - cpu: 1000m 11716 - memory: 1Gi 11717 - requests: 11718 - cpu: 100m 11719 - memory: 64Mi 11720 - securityContext: 11721 - allowPrivilegeEscalation: false 11722 - capabilities: 11723 - drop: 11724 - - ALL 11725 - readOnlyRootFilesystem: true 11726 - runAsNonRoot: true 11727 - seccompProfile: 11728 - type: RuntimeDefault 11729 - volumeMounts: 11730 - - mountPath: /tmp 11731 - name: temp 11732 - nodeSelector: 11733 - kubernetes.io/os: linux 11734 - priorityClassName: system-cluster-critical 11735 - securityContext: 11736 - fsGroup: 1337 11737 - serviceAccountName: kustomize-controller 11738 - terminationGracePeriodSeconds: 60 11739 - volumes: 11740 - - emptyDir: {} 11741 - name: temp 11742 + app.kubernetes.io/version: v2.7.5 11743 + spec: 11744 + containers: 11745 + - args: 11746 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 11747 + - --watch-all-namespaces=true 11748 + - --log-level=info 11749 + - --log-encoding=json 11750 + - --enable-leader-election 11751 + env: 11752 + - name: RUNTIME_NAMESPACE 11753 + valueFrom: 11754 + fieldRef: 11755 + fieldPath: metadata.namespace 11756 + - name: GOMEMLIMIT 11757 + valueFrom: 11758 + resourceFieldRef: 11759 + containerName: manager 11760 + resource: limits.memory 11761 + image: ghcr.io/fluxcd/kustomize-controller:v1.7.3 11762 + imagePullPolicy: IfNotPresent 11763 + livenessProbe: 11764 + httpGet: 11765 + path: /healthz 11766 + port: healthz 11767 + name: manager 11768 + ports: 11769 + - containerPort: 8080 11770 + name: http-prom 11771 + protocol: TCP 11772 + - containerPort: 9440 11773 + name: healthz 11774 + protocol: TCP 11775 + readinessProbe: 11776 + httpGet: 11777 + path: /readyz 11778 + port: healthz 11779 + resources: 11780 + limits: 11781 + cpu: 1000m 11782 + memory: 1Gi 11783 + requests: 11784 + cpu: 100m 11785 + memory: 64Mi 11786 + securityContext: 11787 + allowPrivilegeEscalation: false 11788 + capabilities: 11789 + drop: 11790 + - ALL 11791 + readOnlyRootFilesystem: true 11792 + runAsNonRoot: true 11793 + seccompProfile: 11794 + type: RuntimeDefault 11795 + volumeMounts: 11796 + - mountPath: /tmp 11797 + name: temp 11798 + nodeSelector: 11799 + kubernetes.io/os: linux 11800 + priorityClassName: system-cluster-critical 11801 + securityContext: 11802 + fsGroup: 1337 11803 + serviceAccountName: kustomize-controller 11804 + terminationGracePeriodSeconds: 60 11805 + volumes: 11806 + - emptyDir: {} 11807 + name: temp 11808 --- 11809 apiVersion: apiextensions.k8s.io/v1 11810 kind: CustomResourceDefinition 11811 metadata: 11812 - annotations: 11813 - controller-gen.kubebuilder.io/version: v0.19.0 11814 - labels: 11815 - app.kubernetes.io/component: helm-controller 11816 - app.kubernetes.io/instance: flux-system 11817 - app.kubernetes.io/part-of: flux 11818 - app.kubernetes.io/version: v2.7.3 11819 - name: helmreleases.helm.toolkit.fluxcd.io 11820 + annotations: 11821 + controller-gen.kubebuilder.io/version: v0.19.0 11822 + labels: 11823 + app.kubernetes.io/component: helm-controller 11824 + app.kubernetes.io/instance: flux-system 11825 + app.kubernetes.io/part-of: flux 11826 + app.kubernetes.io/version: v2.7.5 11827 + name: helmreleases.helm.toolkit.fluxcd.io 11828 spec: 11829 - group: helm.toolkit.fluxcd.io 11830 - names: 11831 - kind: HelmRelease 11832 - listKind: HelmReleaseList 11833 - plural: helmreleases 11834 - shortNames: 11835 - - hr 11836 - singular: helmrelease 11837 - scope: Namespaced 11838 - versions: 11839 - - additionalPrinterColumns: 11840 - - jsonPath: .metadata.creationTimestamp 11841 - name: Age 11842 - type: date 11843 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 11844 - name: Ready 11845 - type: string 11846 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 11847 - name: Status 11848 - type: string 11849 - name: v2 11850 - schema: 11851 - openAPIV3Schema: 11852 - description: HelmRelease is the Schema for the helmreleases API 11853 + group: helm.toolkit.fluxcd.io 11854 + names: 11855 + kind: HelmRelease 11856 + listKind: HelmReleaseList 11857 + plural: helmreleases 11858 + shortNames: 11859 + - hr 11860 + singular: helmrelease 11861 + scope: Namespaced 11862 + versions: 11863 + - additionalPrinterColumns: 11864 + - jsonPath: .metadata.creationTimestamp 11865 + name: Age 11866 + type: date 11867 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 11868 + name: Ready 11869 + type: string 11870 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 11871 + name: Status 11872 + type: string 11873 + name: v2 11874 + schema: 11875 + openAPIV3Schema: 11876 + description: HelmRelease is the Schema for the helmreleases API 11877 + properties: 11878 + apiVersion: 11879 + description: |- 11880 + APIVersion defines the versioned schema of this representation of an object. 11881 + Servers should convert recognized schemas to the latest internal value, and 11882 + may reject unrecognized values. 11883 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11884 + type: string 11885 + kind: 11886 + description: |- 11887 + Kind is a string value representing the REST resource this object represents. 11888 + Servers may infer this from the endpoint the client submits requests to. 11889 + Cannot be updated. 11890 + In CamelCase. 11891 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11892 + type: string 11893 + metadata: 11894 + type: object 11895 + spec: 11896 + description: HelmReleaseSpec defines the desired state of a Helm release. 11897 + properties: 11898 + chart: 11899 + description: |- 11900 + Chart defines the template of the v1.HelmChart that should be created 11901 + for this HelmRelease. 11902 properties: 11903 - apiVersion: 11904 + metadata: 11905 + description: ObjectMeta holds the template for metadata like labels 11906 + and annotations. 11907 + properties: 11908 + annotations: 11909 + additionalProperties: 11910 + type: string 11911 + description: |- 11912 + Annotations is an unstructured key value map stored with a resource that may be 11913 + set by external tools to store and retrieve arbitrary metadata. They are not 11914 + queryable and should be preserved when modifying objects. 11915 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 11916 + type: object 11917 + labels: 11918 + additionalProperties: 11919 + type: string 11920 + description: |- 11921 + Map of string keys and values that can be used to organize and categorize 11922 + (scope and select) objects. 11923 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 11924 + type: object 11925 + type: object 11926 + spec: 11927 + description: Spec holds the template for the v1.HelmChartSpec 11928 + for this HelmRelease. 11929 + properties: 11930 + chart: 11931 + description: The name or path the Helm chart is available 11932 + at in the SourceRef. 11933 + maxLength: 2048 11934 + minLength: 1 11935 + type: string 11936 + ignoreMissingValuesFiles: 11937 + description: IgnoreMissingValuesFiles controls whether to 11938 + silently ignore missing values files rather than failing. 11939 + type: boolean 11940 + interval: 11941 description: |- 11942 - APIVersion defines the versioned schema of this representation of an object. 11943 - Servers should convert recognized schemas to the latest internal value, and 11944 - may reject unrecognized values. 11945 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11946 + Interval at which to check the v1.Source for updates. Defaults to 11947 + 'HelmReleaseSpec.Interval'. 11948 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11949 type: string 11950 - kind: 11951 + reconcileStrategy: 11952 + default: ChartVersion 11953 description: |- 11954 - Kind is a string value representing the REST resource this object represents. 11955 - Servers may infer this from the endpoint the client submits requests to. 11956 - Cannot be updated. 11957 - In CamelCase. 11958 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11959 + Determines what enables the creation of a new artifact. Valid values are 11960 + ('ChartVersion', 'Revision'). 11961 + See the documentation of the values for an explanation on their behavior. 11962 + Defaults to ChartVersion when omitted. 11963 + enum: 11964 + - ChartVersion 11965 + - Revision 11966 type: string 11967 - metadata: 11968 + sourceRef: 11969 + description: The name and namespace of the v1.Source the chart 11970 + is available at. 11971 + properties: 11972 + apiVersion: 11973 + description: APIVersion of the referent. 11974 + type: string 11975 + kind: 11976 + description: Kind of the referent. 11977 + enum: 11978 + - HelmRepository 11979 + - GitRepository 11980 + - Bucket 11981 + type: string 11982 + name: 11983 + description: Name of the referent. 11984 + maxLength: 253 11985 + minLength: 1 11986 + type: string 11987 + namespace: 11988 + description: Namespace of the referent. 11989 + maxLength: 63 11990 + minLength: 1 11991 + type: string 11992 + required: 11993 + - kind 11994 + - name 11995 type: object 11996 - spec: 11997 - description: HelmReleaseSpec defines the desired state of a Helm release. 11998 + valuesFiles: 11999 + description: |- 12000 + Alternative list of values files to use as the chart values (values.yaml 12001 + is not included by default), expected to be a relative path in the SourceRef. 12002 + Values files are merged in the order of this list with the last file overriding 12003 + the first. Ignored when omitted. 12004 + items: 12005 + type: string 12006 + type: array 12007 + verify: 12008 + description: |- 12009 + Verify contains the secret name containing the trusted public keys 12010 + used to verify the signature and specifies which provider to use to check 12011 + whether OCI image is authentic. 12012 + This field is only supported for OCI sources. 12013 + Chart dependencies, which are not bundled in the umbrella chart artifact, 12014 + are not verified. 12015 properties: 12016 - chart: 12017 - description: |- 12018 - Chart defines the template of the v1.HelmChart that should be created 12019 - for this HelmRelease. 12020 - properties: 12021 - metadata: 12022 - description: ObjectMeta holds the template for metadata like labels and annotations. 12023 - properties: 12024 - annotations: 12025 - additionalProperties: 12026 - type: string 12027 - description: |- 12028 - Annotations is an unstructured key value map stored with a resource that may be 12029 - set by external tools to store and retrieve arbitrary metadata. They are not 12030 - queryable and should be preserved when modifying objects. 12031 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 12032 - type: object 12033 - labels: 12034 - additionalProperties: 12035 - type: string 12036 - description: |- 12037 - Map of string keys and values that can be used to organize and categorize 12038 - (scope and select) objects. 12039 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 12040 - type: object 12041 - type: object 12042 - spec: 12043 - description: Spec holds the template for the v1.HelmChartSpec for this HelmRelease. 12044 - properties: 12045 - chart: 12046 - description: The name or path the Helm chart is available at in the SourceRef. 12047 - maxLength: 2048 12048 - minLength: 1 12049 - type: string 12050 - ignoreMissingValuesFiles: 12051 - description: IgnoreMissingValuesFiles controls whether to silently ignore 12052 - missing values files rather than failing. 12053 - type: boolean 12054 - interval: 12055 - description: |- 12056 - Interval at which to check the v1.Source for updates. Defaults to 12057 - 'HelmReleaseSpec.Interval'. 12058 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12059 - type: string 12060 - reconcileStrategy: 12061 - default: ChartVersion 12062 - description: |- 12063 - Determines what enables the creation of a new artifact. Valid values are 12064 - ('ChartVersion', 'Revision'). 12065 - See the documentation of the values for an explanation on their behavior. 12066 - Defaults to ChartVersion when omitted. 12067 - enum: 12068 - - ChartVersion 12069 - - Revision 12070 - type: string 12071 - sourceRef: 12072 - description: The name and namespace of the v1.Source the chart is available 12073 - at. 12074 - properties: 12075 - apiVersion: 12076 - description: APIVersion of the referent. 12077 - type: string 12078 - kind: 12079 - description: Kind of the referent. 12080 - enum: 12081 - - HelmRepository 12082 - - GitRepository 12083 - - Bucket 12084 - type: string 12085 - name: 12086 - description: Name of the referent. 12087 - maxLength: 253 12088 - minLength: 1 12089 - type: string 12090 - namespace: 12091 - description: Namespace of the referent. 12092 - maxLength: 63 12093 - minLength: 1 12094 - type: string 12095 - required: 12096 - - kind 12097 - - name 12098 - type: object 12099 - valuesFiles: 12100 - description: |- 12101 - Alternative list of values files to use as the chart values (values.yaml 12102 - is not included by default), expected to be a relative path in the SourceRef. 12103 - Values files are merged in the order of this list with the last file overriding 12104 - the first. Ignored when omitted. 12105 - items: 12106 - type: string 12107 - type: array 12108 - verify: 12109 - description: |- 12110 - Verify contains the secret name containing the trusted public keys 12111 - used to verify the signature and specifies which provider to use to check 12112 - whether OCI image is authentic. 12113 - This field is only supported for OCI sources. 12114 - Chart dependencies, which are not bundled in the umbrella chart artifact, 12115 - are not verified. 12116 - properties: 12117 - provider: 12118 - default: cosign 12119 - description: Provider specifies the technology used to sign the OCI 12120 - Helm chart. 12121 - enum: 12122 - - cosign 12123 - - notation 12124 - type: string 12125 - secretRef: 12126 - description: |- 12127 - SecretRef specifies the Kubernetes Secret containing the 12128 - trusted public keys. 12129 - properties: 12130 - name: 12131 - description: Name of the referent. 12132 - type: string 12133 - required: 12134 - - name 12135 - type: object 12136 - required: 12137 - - provider 12138 - type: object 12139 - version: 12140 - default: '*' 12141 - description: |- 12142 - Version semver expression, ignored for charts from v1.GitRepository and 12143 - v1beta2.Bucket sources. Defaults to latest when omitted. 12144 - type: string 12145 - required: 12146 - - chart 12147 - - sourceRef 12148 - type: object 12149 - required: 12150 - - spec 12151 - type: object 12152 - chartRef: 12153 - description: |- 12154 - ChartRef holds a reference to a source controller resource containing the 12155 - Helm chart artifact. 12156 - properties: 12157 - apiVersion: 12158 - description: APIVersion of the referent. 12159 - type: string 12160 - kind: 12161 - description: Kind of the referent. 12162 - enum: 12163 - - OCIRepository 12164 - - HelmChart 12165 - - ExternalArtifact 12166 - type: string 12167 - name: 12168 - description: Name of the referent. 12169 - maxLength: 253 12170 - minLength: 1 12171 - type: string 12172 - namespace: 12173 - description: |- 12174 - Namespace of the referent, defaults to the namespace of the Kubernetes 12175 - resource object that contains the reference. 12176 - maxLength: 63 12177 - minLength: 1 12178 - type: string 12179 - required: 12180 - - kind 12181 - - name 12182 - type: object 12183 - commonMetadata: 12184 - description: |- 12185 - CommonMetadata specifies the common labels and annotations that are 12186 - applied to all resources. Any existing label or annotation will be 12187 - overridden if its key matches a common one. 12188 - properties: 12189 - annotations: 12190 - additionalProperties: 12191 - type: string 12192 - description: Annotations to be added to the object's metadata. 12193 - type: object 12194 - labels: 12195 - additionalProperties: 12196 - type: string 12197 - description: Labels to be added to the object's metadata. 12198 - type: object 12199 - type: object 12200 - dependsOn: 12201 - description: |- 12202 - DependsOn may contain a DependencyReference slice with 12203 - references to HelmRelease resources that must be ready before this HelmRelease 12204 - can be reconciled. 12205 - items: 12206 - description: DependencyReference defines a HelmRelease dependency on another HelmRelease 12207 - resource. 12208 - properties: 12209 - name: 12210 - description: Name of the referent. 12211 - type: string 12212 - namespace: 12213 - description: |- 12214 - Namespace of the referent, defaults to the namespace of the HelmRelease 12215 - resource object that contains the reference. 12216 - type: string 12217 - readyExpr: 12218 - description: |- 12219 - ReadyExpr is a CEL expression that can be used to assess the readiness 12220 - of a dependency. When specified, the built-in readiness check 12221 - is replaced by the logic defined in the CEL expression. 12222 - To make the CEL expression additive to the built-in readiness check, 12223 - the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 12224 - type: string 12225 - required: 12226 - - name 12227 - type: object 12228 - type: array 12229 - driftDetection: 12230 - description: |- 12231 - DriftDetection holds the configuration for detecting and handling 12232 - differences between the manifest in the Helm storage and the resources 12233 - currently existing in the cluster. 12234 - properties: 12235 - ignore: 12236 - description: |- 12237 - Ignore contains a list of rules for specifying which changes to ignore 12238 - during diffing. 12239 - items: 12240 - description: |- 12241 - IgnoreRule defines a rule to selectively disregard specific changes during 12242 - the drift detection process. 12243 - properties: 12244 - paths: 12245 - description: |- 12246 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 12247 - consideration in a Kubernetes object. 12248 - items: 12249 - type: string 12250 - type: array 12251 - target: 12252 - description: |- 12253 - Target is a selector for specifying Kubernetes objects to which this 12254 - rule applies. 12255 - If Target is not set, the Paths will be ignored for all Kubernetes 12256 - objects within the manifest of the Helm release. 12257 - properties: 12258 - annotationSelector: 12259 - description: |- 12260 - AnnotationSelector is a string that follows the label selection expression 12261 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12262 - It matches with the resource annotations. 12263 - type: string 12264 - group: 12265 - description: |- 12266 - Group is the API group to select resources from. 12267 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12268 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12269 - type: string 12270 - kind: 12271 - description: |- 12272 - Kind of the API Group to select resources from. 12273 - Together with Group and Version it is capable of unambiguously 12274 - identifying and/or selecting resources. 12275 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12276 - type: string 12277 - labelSelector: 12278 - description: |- 12279 - LabelSelector is a string that follows the label selection expression 12280 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12281 - It matches with the resource labels. 12282 - type: string 12283 - name: 12284 - description: Name to match resources with. 12285 - type: string 12286 - namespace: 12287 - description: Namespace to select resources from. 12288 - type: string 12289 - version: 12290 - description: |- 12291 - Version of the API Group to select resources from. 12292 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12293 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12294 - type: string 12295 - type: object 12296 - required: 12297 - - paths 12298 - type: object 12299 - type: array 12300 - mode: 12301 - description: |- 12302 - Mode defines how differences should be handled between the Helm manifest 12303 - and the manifest currently applied to the cluster. 12304 - If not explicitly set, it defaults to DiffModeDisabled. 12305 - enum: 12306 - - enabled 12307 - - warn 12308 - - disabled 12309 - type: string 12310 - type: object 12311 - install: 12312 - description: Install holds the configuration for Helm install actions for this HelmRelease. 12313 - properties: 12314 - crds: 12315 - description: |- 12316 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12317 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12318 - `Create` or `CreateReplace`. Default is `Create` and if omitted 12319 - CRDs are installed but not updated. 12320 + provider: 12321 + default: cosign 12322 + description: Provider specifies the technology used to 12323 + sign the OCI Helm chart. 12324 + enum: 12325 + - cosign 12326 + - notation 12327 + type: string 12328 + secretRef: 12329 + description: |- 12330 + SecretRef specifies the Kubernetes Secret containing the 12331 + trusted public keys. 12332 + properties: 12333 + name: 12334 + description: Name of the referent. 12335 + type: string 12336 + required: 12337 + - name 12338 + type: object 12339 + required: 12340 + - provider 12341 + type: object 12342 + version: 12343 + default: '*' 12344 + description: |- 12345 + Version semver expression, ignored for charts from v1.GitRepository and 12346 + v1beta2.Bucket sources. Defaults to latest when omitted. 12347 + type: string 12348 + required: 12349 + - chart 12350 + - sourceRef 12351 + type: object 12352 + required: 12353 + - spec 12354 + type: object 12355 + chartRef: 12356 + description: |- 12357 + ChartRef holds a reference to a source controller resource containing the 12358 + Helm chart artifact. 12359 + properties: 12360 + apiVersion: 12361 + description: APIVersion of the referent. 12362 + type: string 12363 + kind: 12364 + description: Kind of the referent. 12365 + enum: 12366 + - OCIRepository 12367 + - HelmChart 12368 + - ExternalArtifact 12369 + type: string 12370 + name: 12371 + description: Name of the referent. 12372 + maxLength: 253 12373 + minLength: 1 12374 + type: string 12375 + namespace: 12376 + description: |- 12377 + Namespace of the referent, defaults to the namespace of the Kubernetes 12378 + resource object that contains the reference. 12379 + maxLength: 63 12380 + minLength: 1 12381 + type: string 12382 + required: 12383 + - kind 12384 + - name 12385 + type: object 12386 + commonMetadata: 12387 + description: |- 12388 + CommonMetadata specifies the common labels and annotations that are 12389 + applied to all resources. Any existing label or annotation will be 12390 + overridden if its key matches a common one. 12391 + properties: 12392 + annotations: 12393 + additionalProperties: 12394 + type: string 12395 + description: Annotations to be added to the object's metadata. 12396 + type: object 12397 + labels: 12398 + additionalProperties: 12399 + type: string 12400 + description: Labels to be added to the object's metadata. 12401 + type: object 12402 + type: object 12403 + dependsOn: 12404 + description: |- 12405 + DependsOn may contain a DependencyReference slice with 12406 + references to HelmRelease resources that must be ready before this HelmRelease 12407 + can be reconciled. 12408 + items: 12409 + description: DependencyReference defines a HelmRelease dependency 12410 + on another HelmRelease resource. 12411 + properties: 12412 + name: 12413 + description: Name of the referent. 12414 + type: string 12415 + namespace: 12416 + description: |- 12417 + Namespace of the referent, defaults to the namespace of the HelmRelease 12418 + resource object that contains the reference. 12419 + type: string 12420 + readyExpr: 12421 + description: |- 12422 + ReadyExpr is a CEL expression that can be used to assess the readiness 12423 + of a dependency. When specified, the built-in readiness check 12424 + is replaced by the logic defined in the CEL expression. 12425 + To make the CEL expression additive to the built-in readiness check, 12426 + the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 12427 + type: string 12428 + required: 12429 + - name 12430 + type: object 12431 + type: array 12432 + driftDetection: 12433 + description: |- 12434 + DriftDetection holds the configuration for detecting and handling 12435 + differences between the manifest in the Helm storage and the resources 12436 + currently existing in the cluster. 12437 + properties: 12438 + ignore: 12439 + description: |- 12440 + Ignore contains a list of rules for specifying which changes to ignore 12441 + during diffing. 12442 + items: 12443 + description: |- 12444 + IgnoreRule defines a rule to selectively disregard specific changes during 12445 + the drift detection process. 12446 + properties: 12447 + paths: 12448 + description: |- 12449 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 12450 + consideration in a Kubernetes object. 12451 + items: 12452 + type: string 12453 + type: array 12454 + target: 12455 + description: |- 12456 + Target is a selector for specifying Kubernetes objects to which this 12457 + rule applies. 12458 + If Target is not set, the Paths will be ignored for all Kubernetes 12459 + objects within the manifest of the Helm release. 12460 + properties: 12461 + annotationSelector: 12462 + description: |- 12463 + AnnotationSelector is a string that follows the label selection expression 12464 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12465 + It matches with the resource annotations. 12466 + type: string 12467 + group: 12468 + description: |- 12469 + Group is the API group to select resources from. 12470 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12471 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12472 + type: string 12473 + kind: 12474 + description: |- 12475 + Kind of the API Group to select resources from. 12476 + Together with Group and Version it is capable of unambiguously 12477 + identifying and/or selecting resources. 12478 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12479 + type: string 12480 + labelSelector: 12481 + description: |- 12482 + LabelSelector is a string that follows the label selection expression 12483 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12484 + It matches with the resource labels. 12485 + type: string 12486 + name: 12487 + description: Name to match resources with. 12488 + type: string 12489 + namespace: 12490 + description: Namespace to select resources from. 12491 + type: string 12492 + version: 12493 + description: |- 12494 + Version of the API Group to select resources from. 12495 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12496 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12497 + type: string 12498 + type: object 12499 + required: 12500 + - paths 12501 + type: object 12502 + type: array 12503 + mode: 12504 + description: |- 12505 + Mode defines how differences should be handled between the Helm manifest 12506 + and the manifest currently applied to the cluster. 12507 + If not explicitly set, it defaults to DiffModeDisabled. 12508 + enum: 12509 + - enabled 12510 + - warn 12511 + - disabled 12512 + type: string 12513 + type: object 12514 + install: 12515 + description: Install holds the configuration for Helm install actions 12516 + for this HelmRelease. 12517 + properties: 12518 + crds: 12519 + description: |- 12520 + CRDs upgrade CRDs from the Helm Chart's crds directory according 12521 + to the CRD upgrade policy provided here. Valid values are `Skip`, 12522 + `Create` or `CreateReplace`. Default is `Create` and if omitted 12523 + CRDs are installed but not updated. 12524 12525 - Skip: do neither install nor replace (update) any CRDs. 12526 + Skip: do neither install nor replace (update) any CRDs. 12527 12528 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12529 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12530 12531 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12532 - but not deleted. 12533 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12534 + but not deleted. 12535 12536 - By default, CRDs are applied (installed) during Helm install action. 12537 - With this option users can opt in to CRD replace existing CRDs on Helm 12538 - install actions, which is not (yet) natively supported by Helm. 12539 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12540 - enum: 12541 - - Skip 12542 - - Create 12543 - - CreateReplace 12544 - type: string 12545 - createNamespace: 12546 - description: |- 12547 - CreateNamespace tells the Helm install action to create the 12548 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 12549 - On uninstall, the namespace will not be garbage collected. 12550 - type: boolean 12551 - disableHooks: 12552 - description: DisableHooks prevents hooks from running during the Helm install action. 12553 - type: boolean 12554 - disableOpenAPIValidation: 12555 - description: |- 12556 - DisableOpenAPIValidation prevents the Helm install action from validating 12557 - rendered templates against the Kubernetes OpenAPI Schema. 12558 - type: boolean 12559 - disableSchemaValidation: 12560 - description: |- 12561 - DisableSchemaValidation prevents the Helm install action from validating 12562 - the values against the JSON Schema. 12563 - type: boolean 12564 - disableTakeOwnership: 12565 - description: |- 12566 - DisableTakeOwnership disables taking ownership of existing resources 12567 - during the Helm install action. Defaults to false. 12568 - type: boolean 12569 - disableWait: 12570 - description: |- 12571 - DisableWait disables the waiting for resources to be ready after a Helm 12572 - install has been performed. 12573 - type: boolean 12574 - disableWaitForJobs: 12575 - description: |- 12576 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12577 - install has been performed. 12578 - type: boolean 12579 - remediation: 12580 - description: |- 12581 - Remediation holds the remediation configuration for when the Helm install 12582 - action for the HelmRelease fails. The default is to not perform any action. 12583 - properties: 12584 - ignoreTestFailures: 12585 - description: |- 12586 - IgnoreTestFailures tells the controller to skip remediation when the Helm 12587 - tests are run after an install action but fail. Defaults to 12588 - 'Test.IgnoreFailures'. 12589 - type: boolean 12590 - remediateLastFailure: 12591 - description: |- 12592 - RemediateLastFailure tells the controller to remediate the last failure, when 12593 - no retries remain. Defaults to 'false'. 12594 - type: boolean 12595 - retries: 12596 - description: |- 12597 - Retries is the number of retries that should be attempted on failures before 12598 - bailing. Remediation, using an uninstall, is performed between each attempt. 12599 - Defaults to '0', a negative integer equals to unlimited retries. 12600 - type: integer 12601 - type: object 12602 - replace: 12603 - description: |- 12604 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 12605 - if that name is a deleted release which remains in the history. 12606 - type: boolean 12607 - skipCRDs: 12608 - description: |- 12609 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 12610 - CRDs are installed if not already present. 12611 + By default, CRDs are applied (installed) during Helm install action. 12612 + With this option users can opt in to CRD replace existing CRDs on Helm 12613 + install actions, which is not (yet) natively supported by Helm. 12614 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12615 + enum: 12616 + - Skip 12617 + - Create 12618 + - CreateReplace 12619 + type: string 12620 + createNamespace: 12621 + description: |- 12622 + CreateNamespace tells the Helm install action to create the 12623 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 12624 + On uninstall, the namespace will not be garbage collected. 12625 + type: boolean 12626 + disableHooks: 12627 + description: DisableHooks prevents hooks from running during the 12628 + Helm install action. 12629 + type: boolean 12630 + disableOpenAPIValidation: 12631 + description: |- 12632 + DisableOpenAPIValidation prevents the Helm install action from validating 12633 + rendered templates against the Kubernetes OpenAPI Schema. 12634 + type: boolean 12635 + disableSchemaValidation: 12636 + description: |- 12637 + DisableSchemaValidation prevents the Helm install action from validating 12638 + the values against the JSON Schema. 12639 + type: boolean 12640 + disableTakeOwnership: 12641 + description: |- 12642 + DisableTakeOwnership disables taking ownership of existing resources 12643 + during the Helm install action. Defaults to false. 12644 + type: boolean 12645 + disableWait: 12646 + description: |- 12647 + DisableWait disables the waiting for resources to be ready after a Helm 12648 + install has been performed. 12649 + type: boolean 12650 + disableWaitForJobs: 12651 + description: |- 12652 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 12653 + install has been performed. 12654 + type: boolean 12655 + remediation: 12656 + description: |- 12657 + Remediation holds the remediation configuration for when the Helm install 12658 + action for the HelmRelease fails. The default is to not perform any action. 12659 + properties: 12660 + ignoreTestFailures: 12661 + description: |- 12662 + IgnoreTestFailures tells the controller to skip remediation when the Helm 12663 + tests are run after an install action but fail. Defaults to 12664 + 'Test.IgnoreFailures'. 12665 + type: boolean 12666 + remediateLastFailure: 12667 + description: |- 12668 + RemediateLastFailure tells the controller to remediate the last failure, when 12669 + no retries remain. Defaults to 'false'. 12670 + type: boolean 12671 + retries: 12672 + description: |- 12673 + Retries is the number of retries that should be attempted on failures before 12674 + bailing. Remediation, using an uninstall, is performed between each attempt. 12675 + Defaults to '0', a negative integer equals to unlimited retries. 12676 + type: integer 12677 + type: object 12678 + replace: 12679 + description: |- 12680 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 12681 + if that name is a deleted release which remains in the history. 12682 + type: boolean 12683 + skipCRDs: 12684 + description: |- 12685 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 12686 + CRDs are installed if not already present. 12687 12688 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 12689 - type: boolean 12690 - strategy: 12691 - description: |- 12692 - Strategy defines the install strategy to use for this HelmRelease. 12693 - Defaults to 'RemediateOnFailure'. 12694 - properties: 12695 - name: 12696 - description: Name of the install strategy. 12697 - enum: 12698 - - RemediateOnFailure 12699 - - RetryOnFailure 12700 - type: string 12701 - retryInterval: 12702 - description: |- 12703 - RetryInterval is the interval at which to retry a failed install. 12704 - Can be used only when Name is set to RetryOnFailure. 12705 - Defaults to '5m'. 12706 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12707 - type: string 12708 - required: 12709 - - name 12710 - type: object 12711 - x-kubernetes-validations: 12712 - - message: .retryInterval cannot be set when .name is 'RemediateOnFailure' 12713 - rule: '!has(self.retryInterval) || self.name != ''RemediateOnFailure''' 12714 - timeout: 12715 - description: |- 12716 - Timeout is the time to wait for any individual Kubernetes operation (like 12717 - Jobs for hooks) during the performance of a Helm install action. Defaults to 12718 - 'HelmReleaseSpec.Timeout'. 12719 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12720 - type: string 12721 - type: object 12722 - interval: 12723 - description: Interval at which to reconcile the Helm release. 12724 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12725 - type: string 12726 - kubeConfig: 12727 - description: |- 12728 - KubeConfig for reconciling the HelmRelease on a remote cluster. 12729 - When used in combination with HelmReleaseSpec.ServiceAccountName, 12730 - forces the controller to act on behalf of that Service Account at the 12731 - target cluster. 12732 - If the --default-service-account flag is set, its value will be used as 12733 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 12734 - is empty. 12735 - properties: 12736 - configMapRef: 12737 - description: |- 12738 - ConfigMapRef holds an optional name of a ConfigMap that contains 12739 - the following keys: 12740 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 12741 + type: boolean 12742 + strategy: 12743 + description: |- 12744 + Strategy defines the install strategy to use for this HelmRelease. 12745 + Defaults to 'RemediateOnFailure'. 12746 + properties: 12747 + name: 12748 + description: Name of the install strategy. 12749 + enum: 12750 + - RemediateOnFailure 12751 + - RetryOnFailure 12752 + type: string 12753 + retryInterval: 12754 + description: |- 12755 + RetryInterval is the interval at which to retry a failed install. 12756 + Can be used only when Name is set to RetryOnFailure. 12757 + Defaults to '5m'. 12758 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12759 + type: string 12760 + required: 12761 + - name 12762 + type: object 12763 + x-kubernetes-validations: 12764 + - message: .retryInterval cannot be set when .name is 'RemediateOnFailure' 12765 + rule: '!has(self.retryInterval) || self.name != ''RemediateOnFailure''' 12766 + timeout: 12767 + description: |- 12768 + Timeout is the time to wait for any individual Kubernetes operation (like 12769 + Jobs for hooks) during the performance of a Helm install action. Defaults to 12770 + 'HelmReleaseSpec.Timeout'. 12771 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12772 + type: string 12773 + type: object 12774 + interval: 12775 + description: Interval at which to reconcile the Helm release. 12776 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12777 + type: string 12778 + kubeConfig: 12779 + description: |- 12780 + KubeConfig for reconciling the HelmRelease on a remote cluster. 12781 + When used in combination with HelmReleaseSpec.ServiceAccountName, 12782 + forces the controller to act on behalf of that Service Account at the 12783 + target cluster. 12784 + If the --default-service-account flag is set, its value will be used as 12785 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 12786 + is empty. 12787 + properties: 12788 + configMapRef: 12789 + description: |- 12790 + ConfigMapRef holds an optional name of a ConfigMap that contains 12791 + the following keys: 12792 12793 - - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 12794 - `generic`. Required. 12795 - - `cluster`: the fully qualified resource name of the Kubernetes 12796 - cluster in the cloud provider API. Not used by the `generic` 12797 - provider. Required when one of `address` or `ca.crt` is not set. 12798 - - `address`: the address of the Kubernetes API server. Required 12799 - for `generic`. For the other providers, if not specified, the 12800 - first address in the cluster resource will be used, and if 12801 - specified, it must match one of the addresses in the cluster 12802 - resource. 12803 - If audiences is not set, will be used as the audience for the 12804 - `generic` provider. 12805 - - `ca.crt`: the optional PEM-encoded CA certificate for the 12806 - Kubernetes API server. If not set, the controller will use the 12807 - CA certificate from the cluster resource. 12808 - - `audiences`: the optional audiences as a list of 12809 - line-break-separated strings for the Kubernetes ServiceAccount 12810 - token. Defaults to the `address` for the `generic` provider, or 12811 - to specific values for the other providers depending on the 12812 - provider. 12813 - - `serviceAccountName`: the optional name of the Kubernetes 12814 - ServiceAccount in the same namespace that should be used 12815 - for authentication. If not specified, the controller 12816 - ServiceAccount will be used. 12817 + - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 12818 + `generic`. Required. 12819 + - `cluster`: the fully qualified resource name of the Kubernetes 12820 + cluster in the cloud provider API. Not used by the `generic` 12821 + provider. Required when one of `address` or `ca.crt` is not set. 12822 + - `address`: the address of the Kubernetes API server. Required 12823 + for `generic`. For the other providers, if not specified, the 12824 + first address in the cluster resource will be used, and if 12825 + specified, it must match one of the addresses in the cluster 12826 + resource. 12827 + If audiences is not set, will be used as the audience for the 12828 + `generic` provider. 12829 + - `ca.crt`: the optional PEM-encoded CA certificate for the 12830 + Kubernetes API server. If not set, the controller will use the 12831 + CA certificate from the cluster resource. 12832 + - `audiences`: the optional audiences as a list of 12833 + line-break-separated strings for the Kubernetes ServiceAccount 12834 + token. Defaults to the `address` for the `generic` provider, or 12835 + to specific values for the other providers depending on the 12836 + provider. 12837 + - `serviceAccountName`: the optional name of the Kubernetes 12838 + ServiceAccount in the same namespace that should be used 12839 + for authentication. If not specified, the controller 12840 + ServiceAccount will be used. 12841 12842 - Mutually exclusive with SecretRef. 12843 - properties: 12844 - name: 12845 - description: Name of the referent. 12846 - type: string 12847 - required: 12848 - - name 12849 - type: object 12850 - secretRef: 12851 - description: |- 12852 - SecretRef holds an optional name of a secret that contains a key with 12853 - the kubeconfig file as the value. If no key is set, the key will default 12854 - to 'value'. Mutually exclusive with ConfigMapRef. 12855 - It is recommended that the kubeconfig is self-contained, and the secret 12856 - is regularly updated if credentials such as a cloud-access-token expire. 12857 - Cloud specific `cmd-path` auth helpers will not function without adding 12858 - binaries and credentials to the Pod that is responsible for reconciling 12859 - Kubernetes resources. Supported only for the generic provider. 12860 - properties: 12861 - key: 12862 - description: Key in the Secret, when not specified an implementation-specific 12863 - default key is used. 12864 - type: string 12865 - name: 12866 - description: Name of the Secret. 12867 - type: string 12868 - required: 12869 - - name 12870 - type: object 12871 - type: object 12872 - x-kubernetes-validations: 12873 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 12874 - be specified 12875 - rule: has(self.configMapRef) || has(self.secretRef) 12876 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 12877 - be specified 12878 - rule: '!has(self.configMapRef) || !has(self.secretRef)' 12879 - maxHistory: 12880 - description: |- 12881 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 12882 - Use '0' for an unlimited number of revisions; defaults to '5'. 12883 - type: integer 12884 - persistentClient: 12885 - description: |- 12886 - PersistentClient tells the controller to use a persistent Kubernetes 12887 - client for this release. When enabled, the client will be reused for the 12888 - duration of the reconciliation, instead of being created and destroyed 12889 - for each (step of a) Helm action. 12890 + Mutually exclusive with SecretRef. 12891 + properties: 12892 + name: 12893 + description: Name of the referent. 12894 + type: string 12895 + required: 12896 + - name 12897 + type: object 12898 + secretRef: 12899 + description: |- 12900 + SecretRef holds an optional name of a secret that contains a key with 12901 + the kubeconfig file as the value. If no key is set, the key will default 12902 + to 'value'. Mutually exclusive with ConfigMapRef. 12903 + It is recommended that the kubeconfig is self-contained, and the secret 12904 + is regularly updated if credentials such as a cloud-access-token expire. 12905 + Cloud specific `cmd-path` auth helpers will not function without adding 12906 + binaries and credentials to the Pod that is responsible for reconciling 12907 + Kubernetes resources. Supported only for the generic provider. 12908 + properties: 12909 + key: 12910 + description: Key in the Secret, when not specified an implementation-specific 12911 + default key is used. 12912 + type: string 12913 + name: 12914 + description: Name of the Secret. 12915 + type: string 12916 + required: 12917 + - name 12918 + type: object 12919 + type: object 12920 + x-kubernetes-validations: 12921 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 12922 + must be specified 12923 + rule: has(self.configMapRef) || has(self.secretRef) 12924 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 12925 + must be specified 12926 + rule: '!has(self.configMapRef) || !has(self.secretRef)' 12927 + maxHistory: 12928 + description: |- 12929 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 12930 + Use '0' for an unlimited number of revisions; defaults to '5'. 12931 + type: integer 12932 + persistentClient: 12933 + description: |- 12934 + PersistentClient tells the controller to use a persistent Kubernetes 12935 + client for this release. When enabled, the client will be reused for the 12936 + duration of the reconciliation, instead of being created and destroyed 12937 + for each (step of a) Helm action. 12938 12939 - This can improve performance, but may cause issues with some Helm charts 12940 - that for example do create Custom Resource Definitions during installation 12941 - outside Helm's CRD lifecycle hooks, which are then not observed to be 12942 - available by e.g. post-install hooks. 12943 + This can improve performance, but may cause issues with some Helm charts 12944 + that for example do create Custom Resource Definitions during installation 12945 + outside Helm's CRD lifecycle hooks, which are then not observed to be 12946 + available by e.g. post-install hooks. 12947 12948 - If not set, it defaults to true. 12949 - type: boolean 12950 - postRenderers: 12951 - description: |- 12952 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 12953 - of their definition. 12954 - items: 12955 - description: PostRenderer contains a Helm PostRenderer specification. 12956 - properties: 12957 - kustomize: 12958 - description: Kustomization to apply as PostRenderer. 12959 - properties: 12960 - images: 12961 - description: |- 12962 - Images is a list of (image name, new name, new tag or digest) 12963 - for changing image names, tags or digests. This can also be achieved with a 12964 - patch, but this operator is simpler to specify. 12965 - items: 12966 - description: Image contains an image name, a new name, a new tag or 12967 - digest, which will replace the original name and tag. 12968 - properties: 12969 - digest: 12970 - description: |- 12971 - Digest is the value used to replace the original image tag. 12972 - If digest is present NewTag value is ignored. 12973 - type: string 12974 - name: 12975 - description: Name is a tag-less image name. 12976 - type: string 12977 - newName: 12978 - description: NewName is the value used to replace the original 12979 - name. 12980 - type: string 12981 - newTag: 12982 - description: NewTag is the value used to replace the original 12983 - tag. 12984 - type: string 12985 - required: 12986 - - name 12987 - type: object 12988 - type: array 12989 - patches: 12990 - description: |- 12991 - Strategic merge and JSON patches, defined as inline YAML objects, 12992 - capable of targeting objects based on kind, label and annotation selectors. 12993 - items: 12994 - description: |- 12995 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 12996 - be applied to. 12997 - properties: 12998 - patch: 12999 - description: |- 13000 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 13001 - an array of operation objects. 13002 - type: string 13003 - target: 13004 - description: Target points to the resources that the patch 13005 - document should be applied to. 13006 - properties: 13007 - annotationSelector: 13008 - description: |- 13009 - AnnotationSelector is a string that follows the label selection expression 13010 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13011 - It matches with the resource annotations. 13012 - type: string 13013 - group: 13014 - description: |- 13015 - Group is the API group to select resources from. 13016 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 13017 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13018 - type: string 13019 - kind: 13020 - description: |- 13021 - Kind of the API Group to select resources from. 13022 - Together with Group and Version it is capable of unambiguously 13023 - identifying and/or selecting resources. 13024 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13025 - type: string 13026 - labelSelector: 13027 - description: |- 13028 - LabelSelector is a string that follows the label selection expression 13029 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13030 - It matches with the resource labels. 13031 - type: string 13032 - name: 13033 - description: Name to match resources with. 13034 - type: string 13035 - namespace: 13036 - description: Namespace to select resources from. 13037 - type: string 13038 - version: 13039 - description: |- 13040 - Version of the API Group to select resources from. 13041 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 13042 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13043 - type: string 13044 - type: object 13045 - required: 13046 - - patch 13047 - type: object 13048 - type: array 13049 - type: object 13050 - type: object 13051 - type: array 13052 - releaseName: 13053 - description: |- 13054 - ReleaseName used for the Helm release. Defaults to a composition of 13055 - '[TargetNamespace-]Name'. 13056 - maxLength: 53 13057 - minLength: 1 13058 - type: string 13059 - rollback: 13060 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 13061 - properties: 13062 - cleanupOnFail: 13063 - description: |- 13064 - CleanupOnFail allows deletion of new resources created during the Helm 13065 - rollback action when it fails. 13066 - type: boolean 13067 - disableHooks: 13068 - description: DisableHooks prevents hooks from running during the Helm rollback action. 13069 - type: boolean 13070 - disableWait: 13071 - description: |- 13072 - DisableWait disables the waiting for resources to be ready after a Helm 13073 - rollback has been performed. 13074 - type: boolean 13075 - disableWaitForJobs: 13076 - description: |- 13077 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 13078 - rollback has been performed. 13079 - type: boolean 13080 - force: 13081 - description: Force forces resource updates through a replacement strategy. 13082 - type: boolean 13083 - recreate: 13084 - description: Recreate performs pod restarts for the resource if applicable. 13085 - type: boolean 13086 - timeout: 13087 - description: |- 13088 - Timeout is the time to wait for any individual Kubernetes operation (like 13089 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 13090 - 'HelmReleaseSpec.Timeout'. 13091 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13092 - type: string 13093 - type: object 13094 - serviceAccountName: 13095 - description: |- 13096 - The name of the Kubernetes service account to impersonate 13097 - when reconciling this HelmRelease. 13098 - maxLength: 253 13099 - minLength: 1 13100 - type: string 13101 - storageNamespace: 13102 - description: |- 13103 - StorageNamespace used for the Helm storage. 13104 - Defaults to the namespace of the HelmRelease. 13105 - maxLength: 63 13106 - minLength: 1 13107 - type: string 13108 - suspend: 13109 - description: |- 13110 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 13111 - it does not apply to already started reconciliations. Defaults to false. 13112 - type: boolean 13113 - targetNamespace: 13114 - description: |- 13115 - TargetNamespace to target when performing operations for the HelmRelease. 13116 - Defaults to the namespace of the HelmRelease. 13117 - maxLength: 63 13118 - minLength: 1 13119 - type: string 13120 - test: 13121 - description: Test holds the configuration for Helm test actions for this HelmRelease. 13122 - properties: 13123 - enable: 13124 - description: |- 13125 - Enable enables Helm test actions for this HelmRelease after an Helm install 13126 - or upgrade action has been performed. 13127 - type: boolean 13128 - filters: 13129 - description: Filters is a list of tests to run or exclude from running. 13130 - items: 13131 - description: Filter holds the configuration for individual Helm test filters. 13132 - properties: 13133 - exclude: 13134 - description: Exclude specifies whether the named test should be excluded. 13135 - type: boolean 13136 - name: 13137 - description: Name is the name of the test. 13138 - maxLength: 253 13139 - minLength: 1 13140 - type: string 13141 - required: 13142 - - name 13143 - type: object 13144 - type: array 13145 - ignoreFailures: 13146 - description: |- 13147 - IgnoreFailures tells the controller to skip remediation when the Helm tests 13148 - are run but fail. Can be overwritten for tests run after install or upgrade 13149 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 13150 - type: boolean 13151 - timeout: 13152 - description: |- 13153 - Timeout is the time to wait for any individual Kubernetes operation during 13154 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 13155 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13156 - type: string 13157 - type: object 13158 - timeout: 13159 - description: |- 13160 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 13161 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 13162 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13163 - type: string 13164 - uninstall: 13165 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 13166 + If not set, it defaults to true. 13167 + type: boolean 13168 + postRenderers: 13169 + description: |- 13170 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 13171 + of their definition. 13172 + items: 13173 + description: PostRenderer contains a Helm PostRenderer specification. 13174 + properties: 13175 + kustomize: 13176 + description: Kustomization to apply as PostRenderer. 13177 + properties: 13178 + images: 13179 + description: |- 13180 + Images is a list of (image name, new name, new tag or digest) 13181 + for changing image names, tags or digests. This can also be achieved with a 13182 + patch, but this operator is simpler to specify. 13183 + items: 13184 + description: Image contains an image name, a new name, 13185 + a new tag or digest, which will replace the original 13186 + name and tag. 13187 + properties: 13188 + digest: 13189 + description: |- 13190 + Digest is the value used to replace the original image tag. 13191 + If digest is present NewTag value is ignored. 13192 + type: string 13193 + name: 13194 + description: Name is a tag-less image name. 13195 + type: string 13196 + newName: 13197 + description: NewName is the value used to replace 13198 + the original name. 13199 + type: string 13200 + newTag: 13201 + description: NewTag is the value used to replace the 13202 + original tag. 13203 + type: string 13204 + required: 13205 + - name 13206 + type: object 13207 + type: array 13208 + patches: 13209 + description: |- 13210 + Strategic merge and JSON patches, defined as inline YAML objects, 13211 + capable of targeting objects based on kind, label and annotation selectors. 13212 + items: 13213 + description: |- 13214 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 13215 + be applied to. 13216 + properties: 13217 + patch: 13218 + description: |- 13219 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 13220 + an array of operation objects. 13221 + type: string 13222 + target: 13223 + description: Target points to the resources that the 13224 + patch document should be applied to. 13225 properties: 13226 - deletionPropagation: 13227 - default: background 13228 - description: |- 13229 - DeletionPropagation specifies the deletion propagation policy when 13230 - a Helm uninstall is performed. 13231 - enum: 13232 - - background 13233 - - foreground 13234 - - orphan 13235 - type: string 13236 - disableHooks: 13237 - description: DisableHooks prevents hooks from running during the Helm rollback action. 13238 - type: boolean 13239 - disableWait: 13240 - description: |- 13241 - DisableWait disables waiting for all the resources to be deleted after 13242 - a Helm uninstall is performed. 13243 - type: boolean 13244 - keepHistory: 13245 - description: |- 13246 - KeepHistory tells Helm to remove all associated resources and mark the 13247 - release as deleted, but retain the release history. 13248 - type: boolean 13249 - timeout: 13250 - description: |- 13251 - Timeout is the time to wait for any individual Kubernetes operation (like 13252 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 13253 - to 'HelmReleaseSpec.Timeout'. 13254 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13255 - type: string 13256 + annotationSelector: 13257 + description: |- 13258 + AnnotationSelector is a string that follows the label selection expression 13259 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13260 + It matches with the resource annotations. 13261 + type: string 13262 + group: 13263 + description: |- 13264 + Group is the API group to select resources from. 13265 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 13266 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13267 + type: string 13268 + kind: 13269 + description: |- 13270 + Kind of the API Group to select resources from. 13271 + Together with Group and Version it is capable of unambiguously 13272 + identifying and/or selecting resources. 13273 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13274 + type: string 13275 + labelSelector: 13276 + description: |- 13277 + LabelSelector is a string that follows the label selection expression 13278 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13279 + It matches with the resource labels. 13280 + type: string 13281 + name: 13282 + description: Name to match resources with. 13283 + type: string 13284 + namespace: 13285 + description: Namespace to select resources from. 13286 + type: string 13287 + version: 13288 + description: |- 13289 + Version of the API Group to select resources from. 13290 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 13291 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13292 + type: string 13293 type: object 13294 - upgrade: 13295 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 13296 - properties: 13297 - cleanupOnFail: 13298 - description: |- 13299 - CleanupOnFail allows deletion of new resources created during the Helm 13300 - upgrade action when it fails. 13301 - type: boolean 13302 - crds: 13303 - description: |- 13304 - CRDs upgrade CRDs from the Helm Chart's crds directory according 13305 - to the CRD upgrade policy provided here. Valid values are `Skip`, 13306 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 13307 - CRDs are neither installed nor upgraded. 13308 + required: 13309 + - patch 13310 + type: object 13311 + type: array 13312 + type: object 13313 + type: object 13314 + type: array 13315 + releaseName: 13316 + description: |- 13317 + ReleaseName used for the Helm release. Defaults to a composition of 13318 + '[TargetNamespace-]Name'. 13319 + maxLength: 53 13320 + minLength: 1 13321 + type: string 13322 + rollback: 13323 + description: Rollback holds the configuration for Helm rollback actions 13324 + for this HelmRelease. 13325 + properties: 13326 + cleanupOnFail: 13327 + description: |- 13328 + CleanupOnFail allows deletion of new resources created during the Helm 13329 + rollback action when it fails. 13330 + type: boolean 13331 + disableHooks: 13332 + description: DisableHooks prevents hooks from running during the 13333 + Helm rollback action. 13334 + type: boolean 13335 + disableWait: 13336 + description: |- 13337 + DisableWait disables the waiting for resources to be ready after a Helm 13338 + rollback has been performed. 13339 + type: boolean 13340 + disableWaitForJobs: 13341 + description: |- 13342 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 13343 + rollback has been performed. 13344 + type: boolean 13345 + force: 13346 + description: Force forces resource updates through a replacement 13347 + strategy. 13348 + type: boolean 13349 + recreate: 13350 + description: Recreate performs pod restarts for the resource if 13351 + applicable. 13352 + type: boolean 13353 + timeout: 13354 + description: |- 13355 + Timeout is the time to wait for any individual Kubernetes operation (like 13356 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 13357 + 'HelmReleaseSpec.Timeout'. 13358 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13359 + type: string 13360 + type: object 13361 + serviceAccountName: 13362 + description: |- 13363 + The name of the Kubernetes service account to impersonate 13364 + when reconciling this HelmRelease. 13365 + maxLength: 253 13366 + minLength: 1 13367 + type: string 13368 + storageNamespace: 13369 + description: |- 13370 + StorageNamespace used for the Helm storage. 13371 + Defaults to the namespace of the HelmRelease. 13372 + maxLength: 63 13373 + minLength: 1 13374 + type: string 13375 + suspend: 13376 + description: |- 13377 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 13378 + it does not apply to already started reconciliations. Defaults to false. 13379 + type: boolean 13380 + targetNamespace: 13381 + description: |- 13382 + TargetNamespace to target when performing operations for the HelmRelease. 13383 + Defaults to the namespace of the HelmRelease. 13384 + maxLength: 63 13385 + minLength: 1 13386 + type: string 13387 + test: 13388 + description: Test holds the configuration for Helm test actions for 13389 + this HelmRelease. 13390 + properties: 13391 + enable: 13392 + description: |- 13393 + Enable enables Helm test actions for this HelmRelease after an Helm install 13394 + or upgrade action has been performed. 13395 + type: boolean 13396 + filters: 13397 + description: Filters is a list of tests to run or exclude from 13398 + running. 13399 + items: 13400 + description: Filter holds the configuration for individual Helm 13401 + test filters. 13402 + properties: 13403 + exclude: 13404 + description: Exclude specifies whether the named test should 13405 + be excluded. 13406 + type: boolean 13407 + name: 13408 + description: Name is the name of the test. 13409 + maxLength: 253 13410 + minLength: 1 13411 + type: string 13412 + required: 13413 + - name 13414 + type: object 13415 + type: array 13416 + ignoreFailures: 13417 + description: |- 13418 + IgnoreFailures tells the controller to skip remediation when the Helm tests 13419 + are run but fail. Can be overwritten for tests run after install or upgrade 13420 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 13421 + type: boolean 13422 + timeout: 13423 + description: |- 13424 + Timeout is the time to wait for any individual Kubernetes operation during 13425 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 13426 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13427 + type: string 13428 + type: object 13429 + timeout: 13430 + description: |- 13431 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 13432 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 13433 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13434 + type: string 13435 + uninstall: 13436 + description: Uninstall holds the configuration for Helm uninstall 13437 + actions for this HelmRelease. 13438 + properties: 13439 + deletionPropagation: 13440 + default: background 13441 + description: |- 13442 + DeletionPropagation specifies the deletion propagation policy when 13443 + a Helm uninstall is performed. 13444 + enum: 13445 + - background 13446 + - foreground 13447 + - orphan 13448 + type: string 13449 + disableHooks: 13450 + description: DisableHooks prevents hooks from running during the 13451 + Helm rollback action. 13452 + type: boolean 13453 + disableWait: 13454 + description: |- 13455 + DisableWait disables waiting for all the resources to be deleted after 13456 + a Helm uninstall is performed. 13457 + type: boolean 13458 + keepHistory: 13459 + description: |- 13460 + KeepHistory tells Helm to remove all associated resources and mark the 13461 + release as deleted, but retain the release history. 13462 + type: boolean 13463 + timeout: 13464 + description: |- 13465 + Timeout is the time to wait for any individual Kubernetes operation (like 13466 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 13467 + to 'HelmReleaseSpec.Timeout'. 13468 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13469 + type: string 13470 + type: object 13471 + upgrade: 13472 + description: Upgrade holds the configuration for Helm upgrade actions 13473 + for this HelmRelease. 13474 + properties: 13475 + cleanupOnFail: 13476 + description: |- 13477 + CleanupOnFail allows deletion of new resources created during the Helm 13478 + upgrade action when it fails. 13479 + type: boolean 13480 + crds: 13481 + description: |- 13482 + CRDs upgrade CRDs from the Helm Chart's crds directory according 13483 + to the CRD upgrade policy provided here. Valid values are `Skip`, 13484 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 13485 + CRDs are neither installed nor upgraded. 13486 13487 - Skip: do neither install nor replace (update) any CRDs. 13488 + Skip: do neither install nor replace (update) any CRDs. 13489 13490 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 13491 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 13492 13493 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 13494 - but not deleted. 13495 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 13496 + but not deleted. 13497 13498 - By default, CRDs are not applied during Helm upgrade action. With this 13499 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 13500 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 13501 - enum: 13502 - - Skip 13503 - - Create 13504 - - CreateReplace 13505 - type: string 13506 - disableHooks: 13507 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 13508 - type: boolean 13509 - disableOpenAPIValidation: 13510 - description: |- 13511 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 13512 - rendered templates against the Kubernetes OpenAPI Schema. 13513 - type: boolean 13514 - disableSchemaValidation: 13515 - description: |- 13516 - DisableSchemaValidation prevents the Helm upgrade action from validating 13517 - the values against the JSON Schema. 13518 - type: boolean 13519 - disableTakeOwnership: 13520 - description: |- 13521 - DisableTakeOwnership disables taking ownership of existing resources 13522 - during the Helm upgrade action. Defaults to false. 13523 - type: boolean 13524 - disableWait: 13525 - description: |- 13526 - DisableWait disables the waiting for resources to be ready after a Helm 13527 - upgrade has been performed. 13528 - type: boolean 13529 - disableWaitForJobs: 13530 - description: |- 13531 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 13532 - upgrade has been performed. 13533 - type: boolean 13534 - force: 13535 - description: Force forces resource updates through a replacement strategy. 13536 - type: boolean 13537 - preserveValues: 13538 - description: |- 13539 - PreserveValues will make Helm reuse the last release's values and merge in 13540 - overrides from 'Values'. Setting this flag makes the HelmRelease 13541 - non-declarative. 13542 - type: boolean 13543 - remediation: 13544 - description: |- 13545 - Remediation holds the remediation configuration for when the Helm upgrade 13546 - action for the HelmRelease fails. The default is to not perform any action. 13547 - properties: 13548 - ignoreTestFailures: 13549 - description: |- 13550 - IgnoreTestFailures tells the controller to skip remediation when the Helm 13551 - tests are run after an upgrade action but fail. 13552 - Defaults to 'Test.IgnoreFailures'. 13553 - type: boolean 13554 - remediateLastFailure: 13555 - description: |- 13556 - RemediateLastFailure tells the controller to remediate the last failure, when 13557 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 13558 - type: boolean 13559 - retries: 13560 - description: |- 13561 - Retries is the number of retries that should be attempted on failures before 13562 - bailing. Remediation, using 'Strategy', is performed between each attempt. 13563 - Defaults to '0', a negative integer equals to unlimited retries. 13564 - type: integer 13565 - strategy: 13566 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 13567 - enum: 13568 - - rollback 13569 - - uninstall 13570 - type: string 13571 - type: object 13572 - strategy: 13573 - description: |- 13574 - Strategy defines the upgrade strategy to use for this HelmRelease. 13575 - Defaults to 'RemediateOnFailure'. 13576 - properties: 13577 - name: 13578 - description: Name of the upgrade strategy. 13579 - enum: 13580 - - RemediateOnFailure 13581 - - RetryOnFailure 13582 - type: string 13583 - retryInterval: 13584 - description: |- 13585 - RetryInterval is the interval at which to retry a failed upgrade. 13586 - Can be used only when Name is set to RetryOnFailure. 13587 - Defaults to '5m'. 13588 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13589 - type: string 13590 - required: 13591 - - name 13592 - type: object 13593 - x-kubernetes-validations: 13594 - - message: .retryInterval can only be set when .name is 'RetryOnFailure' 13595 - rule: '!has(self.retryInterval) || self.name == ''RetryOnFailure''' 13596 - timeout: 13597 - description: |- 13598 - Timeout is the time to wait for any individual Kubernetes operation (like 13599 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 13600 - 'HelmReleaseSpec.Timeout'. 13601 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13602 - type: string 13603 - type: object 13604 - values: 13605 - description: Values holds the values for this Helm release. 13606 - x-kubernetes-preserve-unknown-fields: true 13607 - valuesFrom: 13608 - description: |- 13609 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 13610 - and information about how they should be merged. 13611 - items: 13612 - description: |- 13613 - ValuesReference contains a reference to a resource containing Helm values, 13614 - and optionally the key they can be found at. 13615 - properties: 13616 - kind: 13617 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 13618 - enum: 13619 - - Secret 13620 - - ConfigMap 13621 - type: string 13622 - name: 13623 - description: |- 13624 - Name of the values referent. Should reside in the same namespace as the 13625 - referring resource. 13626 - maxLength: 253 13627 - minLength: 1 13628 - type: string 13629 - optional: 13630 - description: |- 13631 - Optional marks this ValuesReference as optional. When set, a not found error 13632 - for the values reference is ignored, but any ValuesKey, TargetPath or 13633 - transient error will still result in a reconciliation failure. 13634 - type: boolean 13635 - targetPath: 13636 - description: |- 13637 - TargetPath is the YAML dot notation path the value should be merged at. When 13638 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 13639 - which results in the values getting merged at the root. 13640 - maxLength: 250 13641 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 13642 - type: string 13643 - valuesKey: 13644 - description: |- 13645 - ValuesKey is the data key where the values.yaml or a specific value can be 13646 - found at. Defaults to 'values.yaml'. 13647 - maxLength: 253 13648 - pattern: ^[\-._a-zA-Z0-9]+$ 13649 - type: string 13650 - required: 13651 - - kind 13652 - - name 13653 - type: object 13654 - type: array 13655 - required: 13656 - - interval 13657 - type: object 13658 - x-kubernetes-validations: 13659 - - message: either chart or chartRef must be set 13660 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 13661 + By default, CRDs are not applied during Helm upgrade action. With this 13662 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 13663 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 13664 + enum: 13665 + - Skip 13666 + - Create 13667 + - CreateReplace 13668 + type: string 13669 + disableHooks: 13670 + description: DisableHooks prevents hooks from running during the 13671 + Helm upgrade action. 13672 + type: boolean 13673 + disableOpenAPIValidation: 13674 + description: |- 13675 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 13676 + rendered templates against the Kubernetes OpenAPI Schema. 13677 + type: boolean 13678 + disableSchemaValidation: 13679 + description: |- 13680 + DisableSchemaValidation prevents the Helm upgrade action from validating 13681 + the values against the JSON Schema. 13682 + type: boolean 13683 + disableTakeOwnership: 13684 + description: |- 13685 + DisableTakeOwnership disables taking ownership of existing resources 13686 + during the Helm upgrade action. Defaults to false. 13687 + type: boolean 13688 + disableWait: 13689 + description: |- 13690 + DisableWait disables the waiting for resources to be ready after a Helm 13691 + upgrade has been performed. 13692 + type: boolean 13693 + disableWaitForJobs: 13694 + description: |- 13695 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 13696 + upgrade has been performed. 13697 + type: boolean 13698 + force: 13699 + description: Force forces resource updates through a replacement 13700 + strategy. 13701 + type: boolean 13702 + preserveValues: 13703 + description: |- 13704 + PreserveValues will make Helm reuse the last release's values and merge in 13705 + overrides from 'Values'. Setting this flag makes the HelmRelease 13706 + non-declarative. 13707 + type: boolean 13708 + remediation: 13709 + description: |- 13710 + Remediation holds the remediation configuration for when the Helm upgrade 13711 + action for the HelmRelease fails. The default is to not perform any action. 13712 + properties: 13713 + ignoreTestFailures: 13714 + description: |- 13715 + IgnoreTestFailures tells the controller to skip remediation when the Helm 13716 + tests are run after an upgrade action but fail. 13717 + Defaults to 'Test.IgnoreFailures'. 13718 + type: boolean 13719 + remediateLastFailure: 13720 + description: |- 13721 + RemediateLastFailure tells the controller to remediate the last failure, when 13722 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 13723 + type: boolean 13724 + retries: 13725 + description: |- 13726 + Retries is the number of retries that should be attempted on failures before 13727 + bailing. Remediation, using 'Strategy', is performed between each attempt. 13728 + Defaults to '0', a negative integer equals to unlimited retries. 13729 + type: integer 13730 + strategy: 13731 + description: Strategy to use for failure remediation. Defaults 13732 + to 'rollback'. 13733 + enum: 13734 + - rollback 13735 + - uninstall 13736 + type: string 13737 + type: object 13738 + strategy: 13739 + description: |- 13740 + Strategy defines the upgrade strategy to use for this HelmRelease. 13741 + Defaults to 'RemediateOnFailure'. 13742 + properties: 13743 + name: 13744 + description: Name of the upgrade strategy. 13745 + enum: 13746 + - RemediateOnFailure 13747 + - RetryOnFailure 13748 + type: string 13749 + retryInterval: 13750 + description: |- 13751 + RetryInterval is the interval at which to retry a failed upgrade. 13752 + Can be used only when Name is set to RetryOnFailure. 13753 + Defaults to '5m'. 13754 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13755 + type: string 13756 + required: 13757 + - name 13758 + type: object 13759 + x-kubernetes-validations: 13760 + - message: .retryInterval can only be set when .name is 'RetryOnFailure' 13761 + rule: '!has(self.retryInterval) || self.name == ''RetryOnFailure''' 13762 + timeout: 13763 + description: |- 13764 + Timeout is the time to wait for any individual Kubernetes operation (like 13765 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 13766 + 'HelmReleaseSpec.Timeout'. 13767 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13768 + type: string 13769 + type: object 13770 + values: 13771 + description: Values holds the values for this Helm release. 13772 + x-kubernetes-preserve-unknown-fields: true 13773 + valuesFrom: 13774 + description: |- 13775 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 13776 + and information about how they should be merged. 13777 + items: 13778 + description: |- 13779 + ValuesReference contains a reference to a resource containing Helm values, 13780 + and optionally the key they can be found at. 13781 + properties: 13782 + kind: 13783 + description: Kind of the values referent, valid values are ('Secret', 13784 + 'ConfigMap'). 13785 + enum: 13786 + - Secret 13787 + - ConfigMap 13788 + type: string 13789 + name: 13790 + description: |- 13791 + Name of the values referent. Should reside in the same namespace as the 13792 + referring resource. 13793 + maxLength: 253 13794 + minLength: 1 13795 + type: string 13796 + optional: 13797 + description: |- 13798 + Optional marks this ValuesReference as optional. When set, a not found error 13799 + for the values reference is ignored, but any ValuesKey, TargetPath or 13800 + transient error will still result in a reconciliation failure. 13801 + type: boolean 13802 + targetPath: 13803 + description: |- 13804 + TargetPath is the YAML dot notation path the value should be merged at. When 13805 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 13806 + which results in the values getting merged at the root. 13807 + maxLength: 250 13808 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 13809 + type: string 13810 + valuesKey: 13811 + description: |- 13812 + ValuesKey is the data key where the values.yaml or a specific value can be 13813 + found at. Defaults to 'values.yaml'. 13814 + maxLength: 253 13815 + pattern: ^[\-._a-zA-Z0-9]+$ 13816 + type: string 13817 + required: 13818 + - kind 13819 + - name 13820 + type: object 13821 + type: array 13822 + required: 13823 + - interval 13824 + type: object 13825 + x-kubernetes-validations: 13826 + - message: either chart or chartRef must be set 13827 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 13828 + && has(self.chartRef)) 13829 + status: 13830 + default: 13831 + observedGeneration: -1 13832 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 13833 + properties: 13834 + conditions: 13835 + description: Conditions holds the conditions for the HelmRelease. 13836 + items: 13837 + description: Condition contains details for one aspect of the current 13838 + state of this API Resource. 13839 + properties: 13840 + lastTransitionTime: 13841 + description: |- 13842 + lastTransitionTime is the last time the condition transitioned from one status to another. 13843 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13844 + format: date-time 13845 + type: string 13846 + message: 13847 + description: |- 13848 + message is a human readable message indicating details about the transition. 13849 + This may be an empty string. 13850 + maxLength: 32768 13851 + type: string 13852 + observedGeneration: 13853 + description: |- 13854 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13855 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13856 + with respect to the current state of the instance. 13857 + format: int64 13858 + minimum: 0 13859 + type: integer 13860 + reason: 13861 + description: |- 13862 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13863 + Producers of specific condition types may define expected values and meanings for this field, 13864 + and whether the values are considered a guaranteed API. 13865 + The value should be a CamelCase string. 13866 + This field may not be empty. 13867 + maxLength: 1024 13868 + minLength: 1 13869 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13870 + type: string 13871 + status: 13872 + description: status of the condition, one of True, False, Unknown. 13873 + enum: 13874 + - "True" 13875 + - "False" 13876 + - Unknown 13877 + type: string 13878 + type: 13879 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13880 + maxLength: 316 13881 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13882 + type: string 13883 + required: 13884 + - lastTransitionTime 13885 + - message 13886 + - reason 13887 + - status 13888 + - type 13889 + type: object 13890 + type: array 13891 + failures: 13892 + description: |- 13893 + Failures is the reconciliation failure count against the latest desired 13894 + state. It is reset after a successful reconciliation. 13895 + format: int64 13896 + type: integer 13897 + helmChart: 13898 + description: |- 13899 + HelmChart is the namespaced name of the HelmChart resource created by 13900 + the controller for the HelmRelease. 13901 + type: string 13902 + history: 13903 + description: |- 13904 + History holds the history of Helm releases performed for this HelmRelease 13905 + up to the last successfully completed release. 13906 + items: 13907 + description: |- 13908 + Snapshot captures a point-in-time copy of the status information for a Helm release, 13909 + as managed by the controller. 13910 + properties: 13911 + apiVersion: 13912 + description: |- 13913 + APIVersion is the API version of the Snapshot. 13914 + Provisional: when the calculation method of the Digest field is changed, 13915 + this field will be used to distinguish between the old and new methods. 13916 + type: string 13917 + appVersion: 13918 + description: AppVersion is the chart app version of the release 13919 + object in storage. 13920 + type: string 13921 + chartName: 13922 + description: ChartName is the chart name of the release object 13923 + in storage. 13924 + type: string 13925 + chartVersion: 13926 + description: |- 13927 + ChartVersion is the chart version of the release object in 13928 + storage. 13929 + type: string 13930 + configDigest: 13931 + description: |- 13932 + ConfigDigest is the checksum of the config (better known as 13933 + "values") of the release object in storage. 13934 + It has the format of `<algo>:<checksum>`. 13935 + type: string 13936 + deleted: 13937 + description: Deleted is when the release was deleted. 13938 + format: date-time 13939 + type: string 13940 + digest: 13941 + description: |- 13942 + Digest is the checksum of the release object in storage. 13943 + It has the format of `<algo>:<checksum>`. 13944 + type: string 13945 + firstDeployed: 13946 + description: FirstDeployed is when the release was first deployed. 13947 + format: date-time 13948 + type: string 13949 + lastDeployed: 13950 + description: LastDeployed is when the release was last deployed. 13951 + format: date-time 13952 + type: string 13953 + name: 13954 + description: Name is the name of the release. 13955 + type: string 13956 + namespace: 13957 + description: Namespace is the namespace the release is deployed 13958 + to. 13959 + type: string 13960 + ociDigest: 13961 + description: OCIDigest is the digest of the OCI artifact associated 13962 + with the release. 13963 + type: string 13964 status: 13965 - default: 13966 - observedGeneration: -1 13967 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 13968 + description: Status is the current state of the release. 13969 + type: string 13970 + testHooks: 13971 + additionalProperties: 13972 + description: |- 13973 + TestHookStatus holds the status information for a test hook as observed 13974 + to be run by the controller. 13975 properties: 13976 - conditions: 13977 - description: Conditions holds the conditions for the HelmRelease. 13978 - items: 13979 - description: Condition contains details for one aspect of the current state of this API 13980 - Resource. 13981 - properties: 13982 - lastTransitionTime: 13983 - description: |- 13984 - lastTransitionTime is the last time the condition transitioned from one status to another. 13985 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13986 - format: date-time 13987 - type: string 13988 - message: 13989 - description: |- 13990 - message is a human readable message indicating details about the transition. 13991 - This may be an empty string. 13992 - maxLength: 32768 13993 - type: string 13994 - observedGeneration: 13995 - description: |- 13996 - observedGeneration represents the .metadata.generation that the condition was set based upon. 13997 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13998 - with respect to the current state of the instance. 13999 - format: int64 14000 - minimum: 0 14001 - type: integer 14002 - reason: 14003 - description: |- 14004 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 14005 - Producers of specific condition types may define expected values and meanings for this field, 14006 - and whether the values are considered a guaranteed API. 14007 - The value should be a CamelCase string. 14008 - This field may not be empty. 14009 - maxLength: 1024 14010 - minLength: 1 14011 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 14012 - type: string 14013 - status: 14014 - description: status of the condition, one of True, False, Unknown. 14015 - enum: 14016 - - "True" 14017 - - "False" 14018 - - Unknown 14019 - type: string 14020 - type: 14021 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 14022 - maxLength: 316 14023 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 14024 - type: string 14025 - required: 14026 - - lastTransitionTime 14027 - - message 14028 - - reason 14029 - - status 14030 - - type 14031 - type: object 14032 - type: array 14033 - failures: 14034 - description: |- 14035 - Failures is the reconciliation failure count against the latest desired 14036 - state. It is reset after a successful reconciliation. 14037 - format: int64 14038 - type: integer 14039 - helmChart: 14040 - description: |- 14041 - HelmChart is the namespaced name of the HelmChart resource created by 14042 - the controller for the HelmRelease. 14043 - type: string 14044 - history: 14045 - description: |- 14046 - History holds the history of Helm releases performed for this HelmRelease 14047 - up to the last successfully completed release. 14048 - items: 14049 - description: |- 14050 - Snapshot captures a point-in-time copy of the status information for a Helm release, 14051 - as managed by the controller. 14052 - properties: 14053 - apiVersion: 14054 - description: |- 14055 - APIVersion is the API version of the Snapshot. 14056 - Provisional: when the calculation method of the Digest field is changed, 14057 - this field will be used to distinguish between the old and new methods. 14058 - type: string 14059 - appVersion: 14060 - description: AppVersion is the chart app version of the release object in storage. 14061 - type: string 14062 - chartName: 14063 - description: ChartName is the chart name of the release object in storage. 14064 - type: string 14065 - chartVersion: 14066 - description: |- 14067 - ChartVersion is the chart version of the release object in 14068 - storage. 14069 - type: string 14070 - configDigest: 14071 - description: |- 14072 - ConfigDigest is the checksum of the config (better known as 14073 - "values") of the release object in storage. 14074 - It has the format of `<algo>:<checksum>`. 14075 - type: string 14076 - deleted: 14077 - description: Deleted is when the release was deleted. 14078 - format: date-time 14079 - type: string 14080 - digest: 14081 - description: |- 14082 - Digest is the checksum of the release object in storage. 14083 - It has the format of `<algo>:<checksum>`. 14084 - type: string 14085 - firstDeployed: 14086 - description: FirstDeployed is when the release was first deployed. 14087 - format: date-time 14088 - type: string 14089 - lastDeployed: 14090 - description: LastDeployed is when the release was last deployed. 14091 - format: date-time 14092 - type: string 14093 - name: 14094 - description: Name is the name of the release. 14095 - type: string 14096 - namespace: 14097 - description: Namespace is the namespace the release is deployed to. 14098 - type: string 14099 - ociDigest: 14100 - description: OCIDigest is the digest of the OCI artifact associated with the release. 14101 - type: string 14102 - status: 14103 - description: Status is the current state of the release. 14104 - type: string 14105 - testHooks: 14106 - additionalProperties: 14107 - description: |- 14108 - TestHookStatus holds the status information for a test hook as observed 14109 - to be run by the controller. 14110 - properties: 14111 - lastCompleted: 14112 - description: LastCompleted is the time the test hook last completed. 14113 - format: date-time 14114 - type: string 14115 - lastStarted: 14116 - description: LastStarted is the time the test hook was last started. 14117 - format: date-time 14118 - type: string 14119 - phase: 14120 - description: Phase the test hook was observed to be in. 14121 - type: string 14122 - type: object 14123 - description: |- 14124 - TestHooks is the list of test hooks for the release as observed to be 14125 - run by the controller. 14126 - type: object 14127 - version: 14128 - description: Version is the version of the release object in storage. 14129 - type: integer 14130 - required: 14131 - - chartName 14132 - - chartVersion 14133 - - configDigest 14134 - - digest 14135 - - firstDeployed 14136 - - lastDeployed 14137 - - name 14138 - - namespace 14139 - - status 14140 - - version 14141 - type: object 14142 - type: array 14143 - installFailures: 14144 - description: |- 14145 - InstallFailures is the install failure count against the latest desired 14146 - state. It is reset after a successful reconciliation. 14147 - format: int64 14148 - type: integer 14149 - lastAttemptedConfigDigest: 14150 - description: |- 14151 - LastAttemptedConfigDigest is the digest for the config (better known as 14152 - "values") of the last reconciliation attempt. 14153 - type: string 14154 - lastAttemptedGeneration: 14155 - description: |- 14156 - LastAttemptedGeneration is the last generation the controller attempted 14157 - to reconcile. 14158 - format: int64 14159 - type: integer 14160 - lastAttemptedReleaseAction: 14161 - description: |- 14162 - LastAttemptedReleaseAction is the last release action performed for this 14163 - HelmRelease. It is used to determine the active retry or remediation 14164 - strategy. 14165 - enum: 14166 - - install 14167 - - upgrade 14168 - type: string 14169 - lastAttemptedReleaseActionDuration: 14170 - description: |- 14171 - LastAttemptedReleaseActionDuration is the duration of the last 14172 - release action performed for this HelmRelease. 14173 - type: string 14174 - lastAttemptedRevision: 14175 - description: |- 14176 - LastAttemptedRevision is the Source revision of the last reconciliation 14177 - attempt. For OCIRepository sources, the 12 first characters of the digest are 14178 - appended to the chart version e.g. "1.2.3+1234567890ab". 14179 - type: string 14180 - lastAttemptedRevisionDigest: 14181 - description: |- 14182 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 14183 - This is only set for OCIRepository sources. 14184 - type: string 14185 - lastAttemptedValuesChecksum: 14186 - description: |- 14187 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 14188 - reconciliation attempt. 14189 + lastCompleted: 14190 + description: LastCompleted is the time the test hook last 14191 + completed. 14192 + format: date-time 14193 + type: string 14194 + lastStarted: 14195 + description: LastStarted is the time the test hook was 14196 + last started. 14197 + format: date-time 14198 + type: string 14199 + phase: 14200 + description: Phase the test hook was observed to be in. 14201 + type: string 14202 + type: object 14203 + description: |- 14204 + TestHooks is the list of test hooks for the release as observed to be 14205 + run by the controller. 14206 + type: object 14207 + version: 14208 + description: Version is the version of the release object in 14209 + storage. 14210 + type: integer 14211 + required: 14212 + - chartName 14213 + - chartVersion 14214 + - configDigest 14215 + - digest 14216 + - firstDeployed 14217 + - lastDeployed 14218 + - name 14219 + - namespace 14220 + - status 14221 + - version 14222 + type: object 14223 + type: array 14224 + installFailures: 14225 + description: |- 14226 + InstallFailures is the install failure count against the latest desired 14227 + state. It is reset after a successful reconciliation. 14228 + format: int64 14229 + type: integer 14230 + lastAttemptedConfigDigest: 14231 + description: |- 14232 + LastAttemptedConfigDigest is the digest for the config (better known as 14233 + "values") of the last reconciliation attempt. 14234 + type: string 14235 + lastAttemptedGeneration: 14236 + description: |- 14237 + LastAttemptedGeneration is the last generation the controller attempted 14238 + to reconcile. 14239 + format: int64 14240 + type: integer 14241 + lastAttemptedReleaseAction: 14242 + description: |- 14243 + LastAttemptedReleaseAction is the last release action performed for this 14244 + HelmRelease. It is used to determine the active retry or remediation 14245 + strategy. 14246 + enum: 14247 + - install 14248 + - upgrade 14249 + type: string 14250 + lastAttemptedReleaseActionDuration: 14251 + description: |- 14252 + LastAttemptedReleaseActionDuration is the duration of the last 14253 + release action performed for this HelmRelease. 14254 + type: string 14255 + lastAttemptedRevision: 14256 + description: |- 14257 + LastAttemptedRevision is the Source revision of the last reconciliation 14258 + attempt. For OCIRepository sources, the 12 first characters of the digest are 14259 + appended to the chart version e.g. "1.2.3+1234567890ab". 14260 + type: string 14261 + lastAttemptedRevisionDigest: 14262 + description: |- 14263 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 14264 + This is only set for OCIRepository sources. 14265 + type: string 14266 + lastAttemptedValuesChecksum: 14267 + description: |- 14268 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 14269 + reconciliation attempt. 14270 14271 - Deprecated: Use LastAttemptedConfigDigest instead. 14272 - type: string 14273 - lastHandledForceAt: 14274 - description: |- 14275 - LastHandledForceAt holds the value of the most recent 14276 - force request value, so a change of the annotation value 14277 - can be detected. 14278 - type: string 14279 - lastHandledReconcileAt: 14280 - description: |- 14281 - LastHandledReconcileAt holds the value of the most recent 14282 - reconcile request value, so a change of the annotation value 14283 - can be detected. 14284 - type: string 14285 - lastHandledResetAt: 14286 - description: |- 14287 - LastHandledResetAt holds the value of the most recent reset request 14288 - value, so a change of the annotation value can be detected. 14289 - type: string 14290 - lastReleaseRevision: 14291 - description: |- 14292 - LastReleaseRevision is the revision of the last successful Helm release. 14293 + Deprecated: Use LastAttemptedConfigDigest instead. 14294 + type: string 14295 + lastHandledForceAt: 14296 + description: |- 14297 + LastHandledForceAt holds the value of the most recent 14298 + force request value, so a change of the annotation value 14299 + can be detected. 14300 + type: string 14301 + lastHandledReconcileAt: 14302 + description: |- 14303 + LastHandledReconcileAt holds the value of the most recent 14304 + reconcile request value, so a change of the annotation value 14305 + can be detected. 14306 + type: string 14307 + lastHandledResetAt: 14308 + description: |- 14309 + LastHandledResetAt holds the value of the most recent reset request 14310 + value, so a change of the annotation value can be detected. 14311 + type: string 14312 + lastReleaseRevision: 14313 + description: |- 14314 + LastReleaseRevision is the revision of the last successful Helm release. 14315 14316 - Deprecated: Use History instead. 14317 - type: integer 14318 - observedCommonMetadataDigest: 14319 - description: |- 14320 - ObservedCommonMetadataDigest is the digest for the common metadata of 14321 - the last successful reconciliation attempt. 14322 - type: string 14323 - observedGeneration: 14324 - description: ObservedGeneration is the last observed generation. 14325 - format: int64 14326 - type: integer 14327 - observedPostRenderersDigest: 14328 - description: |- 14329 - ObservedPostRenderersDigest is the digest for the post-renderers of 14330 - the last successful reconciliation attempt. 14331 - type: string 14332 - storageNamespace: 14333 - description: |- 14334 - StorageNamespace is the namespace of the Helm release storage for the 14335 - current release. 14336 - maxLength: 63 14337 - minLength: 1 14338 - type: string 14339 - upgradeFailures: 14340 - description: |- 14341 - UpgradeFailures is the upgrade failure count against the latest desired 14342 - state. It is reset after a successful reconciliation. 14343 - format: int64 14344 - type: integer 14345 - type: object 14346 - type: object 14347 - served: true 14348 - storage: true 14349 - subresources: 14350 - status: {} 14351 - - additionalPrinterColumns: 14352 - - jsonPath: .metadata.creationTimestamp 14353 - name: Age 14354 - type: date 14355 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 14356 - name: Ready 14357 - type: string 14358 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 14359 - name: Status 14360 - type: string 14361 - deprecated: true 14362 - deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 14363 - name: v2beta2 14364 - schema: 14365 - openAPIV3Schema: 14366 - description: HelmRelease is the Schema for the helmreleases API 14367 + Deprecated: Use History instead. 14368 + type: integer 14369 + observedCommonMetadataDigest: 14370 + description: |- 14371 + ObservedCommonMetadataDigest is the digest for the common metadata of 14372 + the last successful reconciliation attempt. 14373 + type: string 14374 + observedGeneration: 14375 + description: ObservedGeneration is the last observed generation. 14376 + format: int64 14377 + type: integer 14378 + observedPostRenderersDigest: 14379 + description: |- 14380 + ObservedPostRenderersDigest is the digest for the post-renderers of 14381 + the last successful reconciliation attempt. 14382 + type: string 14383 + storageNamespace: 14384 + description: |- 14385 + StorageNamespace is the namespace of the Helm release storage for the 14386 + current release. 14387 + maxLength: 63 14388 + minLength: 1 14389 + type: string 14390 + upgradeFailures: 14391 + description: |- 14392 + UpgradeFailures is the upgrade failure count against the latest desired 14393 + state. It is reset after a successful reconciliation. 14394 + format: int64 14395 + type: integer 14396 + type: object 14397 + type: object 14398 + served: true 14399 + storage: true 14400 + subresources: 14401 + status: {} 14402 + - additionalPrinterColumns: 14403 + - jsonPath: .metadata.creationTimestamp 14404 + name: Age 14405 + type: date 14406 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 14407 + name: Ready 14408 + type: string 14409 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 14410 + name: Status 14411 + type: string 14412 + deprecated: true 14413 + deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 14414 + name: v2beta2 14415 + schema: 14416 + openAPIV3Schema: 14417 + description: HelmRelease is the Schema for the helmreleases API 14418 + properties: 14419 + apiVersion: 14420 + description: |- 14421 + APIVersion defines the versioned schema of this representation of an object. 14422 + Servers should convert recognized schemas to the latest internal value, and 14423 + may reject unrecognized values. 14424 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14425 + type: string 14426 + kind: 14427 + description: |- 14428 + Kind is a string value representing the REST resource this object represents. 14429 + Servers may infer this from the endpoint the client submits requests to. 14430 + Cannot be updated. 14431 + In CamelCase. 14432 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14433 + type: string 14434 + metadata: 14435 + type: object 14436 + spec: 14437 + description: HelmReleaseSpec defines the desired state of a Helm release. 14438 + properties: 14439 + chart: 14440 + description: |- 14441 + Chart defines the template of the v1beta2.HelmChart that should be created 14442 + for this HelmRelease. 14443 properties: 14444 - apiVersion: 14445 + metadata: 14446 + description: ObjectMeta holds the template for metadata like labels 14447 + and annotations. 14448 + properties: 14449 + annotations: 14450 + additionalProperties: 14451 + type: string 14452 + description: |- 14453 + Annotations is an unstructured key value map stored with a resource that may be 14454 + set by external tools to store and retrieve arbitrary metadata. They are not 14455 + queryable and should be preserved when modifying objects. 14456 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 14457 + type: object 14458 + labels: 14459 + additionalProperties: 14460 + type: string 14461 description: |- 14462 - APIVersion defines the versioned schema of this representation of an object. 14463 - Servers should convert recognized schemas to the latest internal value, and 14464 - may reject unrecognized values. 14465 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14466 + Map of string keys and values that can be used to organize and categorize 14467 + (scope and select) objects. 14468 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 14469 + type: object 14470 + type: object 14471 + spec: 14472 + description: Spec holds the template for the v1beta2.HelmChartSpec 14473 + for this HelmRelease. 14474 + properties: 14475 + chart: 14476 + description: The name or path the Helm chart is available 14477 + at in the SourceRef. 14478 + maxLength: 2048 14479 + minLength: 1 14480 type: string 14481 - kind: 14482 + ignoreMissingValuesFiles: 14483 + description: IgnoreMissingValuesFiles controls whether to 14484 + silently ignore missing values files rather than failing. 14485 + type: boolean 14486 + interval: 14487 description: |- 14488 - Kind is a string value representing the REST resource this object represents. 14489 - Servers may infer this from the endpoint the client submits requests to. 14490 - Cannot be updated. 14491 - In CamelCase. 14492 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14493 + Interval at which to check the v1.Source for updates. Defaults to 14494 + 'HelmReleaseSpec.Interval'. 14495 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14496 type: string 14497 - metadata: 14498 + reconcileStrategy: 14499 + default: ChartVersion 14500 + description: |- 14501 + Determines what enables the creation of a new artifact. Valid values are 14502 + ('ChartVersion', 'Revision'). 14503 + See the documentation of the values for an explanation on their behavior. 14504 + Defaults to ChartVersion when omitted. 14505 + enum: 14506 + - ChartVersion 14507 + - Revision 14508 + type: string 14509 + sourceRef: 14510 + description: The name and namespace of the v1.Source the chart 14511 + is available at. 14512 + properties: 14513 + apiVersion: 14514 + description: APIVersion of the referent. 14515 + type: string 14516 + kind: 14517 + description: Kind of the referent. 14518 + enum: 14519 + - HelmRepository 14520 + - GitRepository 14521 + - Bucket 14522 + type: string 14523 + name: 14524 + description: Name of the referent. 14525 + maxLength: 253 14526 + minLength: 1 14527 + type: string 14528 + namespace: 14529 + description: Namespace of the referent. 14530 + maxLength: 63 14531 + minLength: 1 14532 + type: string 14533 + required: 14534 + - kind 14535 + - name 14536 type: object 14537 - spec: 14538 - description: HelmReleaseSpec defines the desired state of a Helm release. 14539 + valuesFile: 14540 + description: |- 14541 + Alternative values file to use as the default chart values, expected to 14542 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 14543 + for backwards compatibility the file defined here is merged before the 14544 + ValuesFiles items. Ignored when omitted. 14545 + type: string 14546 + valuesFiles: 14547 + description: |- 14548 + Alternative list of values files to use as the chart values (values.yaml 14549 + is not included by default), expected to be a relative path in the SourceRef. 14550 + Values files are merged in the order of this list with the last file overriding 14551 + the first. Ignored when omitted. 14552 + items: 14553 + type: string 14554 + type: array 14555 + verify: 14556 + description: |- 14557 + Verify contains the secret name containing the trusted public keys 14558 + used to verify the signature and specifies which provider to use to check 14559 + whether OCI image is authentic. 14560 + This field is only supported for OCI sources. 14561 + Chart dependencies, which are not bundled in the umbrella chart artifact, 14562 + are not verified. 14563 properties: 14564 - chart: 14565 - description: |- 14566 - Chart defines the template of the v1beta2.HelmChart that should be created 14567 - for this HelmRelease. 14568 - properties: 14569 - metadata: 14570 - description: ObjectMeta holds the template for metadata like labels and annotations. 14571 - properties: 14572 - annotations: 14573 - additionalProperties: 14574 - type: string 14575 - description: |- 14576 - Annotations is an unstructured key value map stored with a resource that may be 14577 - set by external tools to store and retrieve arbitrary metadata. They are not 14578 - queryable and should be preserved when modifying objects. 14579 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 14580 - type: object 14581 - labels: 14582 - additionalProperties: 14583 - type: string 14584 - description: |- 14585 - Map of string keys and values that can be used to organize and categorize 14586 - (scope and select) objects. 14587 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 14588 - type: object 14589 - type: object 14590 - spec: 14591 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 14592 - properties: 14593 - chart: 14594 - description: The name or path the Helm chart is available at in the SourceRef. 14595 - maxLength: 2048 14596 - minLength: 1 14597 - type: string 14598 - ignoreMissingValuesFiles: 14599 - description: IgnoreMissingValuesFiles controls whether to silently ignore 14600 - missing values files rather than failing. 14601 - type: boolean 14602 - interval: 14603 - description: |- 14604 - Interval at which to check the v1.Source for updates. Defaults to 14605 - 'HelmReleaseSpec.Interval'. 14606 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14607 - type: string 14608 - reconcileStrategy: 14609 - default: ChartVersion 14610 - description: |- 14611 - Determines what enables the creation of a new artifact. Valid values are 14612 - ('ChartVersion', 'Revision'). 14613 - See the documentation of the values for an explanation on their behavior. 14614 - Defaults to ChartVersion when omitted. 14615 - enum: 14616 - - ChartVersion 14617 - - Revision 14618 - type: string 14619 - sourceRef: 14620 - description: The name and namespace of the v1.Source the chart is available 14621 - at. 14622 - properties: 14623 - apiVersion: 14624 - description: APIVersion of the referent. 14625 - type: string 14626 - kind: 14627 - description: Kind of the referent. 14628 - enum: 14629 - - HelmRepository 14630 - - GitRepository 14631 - - Bucket 14632 - type: string 14633 - name: 14634 - description: Name of the referent. 14635 - maxLength: 253 14636 - minLength: 1 14637 - type: string 14638 - namespace: 14639 - description: Namespace of the referent. 14640 - maxLength: 63 14641 - minLength: 1 14642 - type: string 14643 - required: 14644 - - kind 14645 - - name 14646 - type: object 14647 - valuesFile: 14648 - description: |- 14649 - Alternative values file to use as the default chart values, expected to 14650 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 14651 - for backwards compatibility the file defined here is merged before the 14652 - ValuesFiles items. Ignored when omitted. 14653 - type: string 14654 - valuesFiles: 14655 - description: |- 14656 - Alternative list of values files to use as the chart values (values.yaml 14657 - is not included by default), expected to be a relative path in the SourceRef. 14658 - Values files are merged in the order of this list with the last file overriding 14659 - the first. Ignored when omitted. 14660 - items: 14661 - type: string 14662 - type: array 14663 - verify: 14664 - description: |- 14665 - Verify contains the secret name containing the trusted public keys 14666 - used to verify the signature and specifies which provider to use to check 14667 - whether OCI image is authentic. 14668 - This field is only supported for OCI sources. 14669 - Chart dependencies, which are not bundled in the umbrella chart artifact, 14670 - are not verified. 14671 - properties: 14672 - provider: 14673 - default: cosign 14674 - description: Provider specifies the technology used to sign the OCI 14675 - Helm chart. 14676 - enum: 14677 - - cosign 14678 - - notation 14679 - type: string 14680 - secretRef: 14681 - description: |- 14682 - SecretRef specifies the Kubernetes Secret containing the 14683 - trusted public keys. 14684 - properties: 14685 - name: 14686 - description: Name of the referent. 14687 - type: string 14688 - required: 14689 - - name 14690 - type: object 14691 - required: 14692 - - provider 14693 - type: object 14694 - version: 14695 - default: '*' 14696 - description: |- 14697 - Version semver expression, ignored for charts from v1beta2.GitRepository and 14698 - v1beta2.Bucket sources. Defaults to latest when omitted. 14699 - type: string 14700 - required: 14701 - - chart 14702 - - sourceRef 14703 - type: object 14704 - required: 14705 - - spec 14706 - type: object 14707 - chartRef: 14708 - description: |- 14709 - ChartRef holds a reference to a source controller resource containing the 14710 - Helm chart artifact. 14711 - 14712 - Note: this field is provisional to the v2 API, and not actively used 14713 - by v2beta2 HelmReleases. 14714 - properties: 14715 - apiVersion: 14716 - description: APIVersion of the referent. 14717 - type: string 14718 - kind: 14719 - description: Kind of the referent. 14720 - enum: 14721 - - OCIRepository 14722 - - HelmChart 14723 - type: string 14724 - name: 14725 - description: Name of the referent. 14726 - maxLength: 253 14727 - minLength: 1 14728 - type: string 14729 - namespace: 14730 - description: |- 14731 - Namespace of the referent, defaults to the namespace of the Kubernetes 14732 - resource object that contains the reference. 14733 - maxLength: 63 14734 - minLength: 1 14735 - type: string 14736 - required: 14737 - - kind 14738 - - name 14739 - type: object 14740 - dependsOn: 14741 - description: |- 14742 - DependsOn may contain a meta.NamespacedObjectReference slice with 14743 - references to HelmRelease resources that must be ready before this HelmRelease 14744 - can be reconciled. 14745 - items: 14746 - description: |- 14747 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 14748 - namespace. 14749 - properties: 14750 - name: 14751 - description: Name of the referent. 14752 - type: string 14753 - namespace: 14754 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 14755 - type: string 14756 - required: 14757 - - name 14758 - type: object 14759 - type: array 14760 - driftDetection: 14761 - description: |- 14762 - DriftDetection holds the configuration for detecting and handling 14763 - differences between the manifest in the Helm storage and the resources 14764 - currently existing in the cluster. 14765 - properties: 14766 - ignore: 14767 - description: |- 14768 - Ignore contains a list of rules for specifying which changes to ignore 14769 - during diffing. 14770 - items: 14771 - description: |- 14772 - IgnoreRule defines a rule to selectively disregard specific changes during 14773 - the drift detection process. 14774 - properties: 14775 - paths: 14776 - description: |- 14777 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 14778 - consideration in a Kubernetes object. 14779 - items: 14780 - type: string 14781 - type: array 14782 - target: 14783 - description: |- 14784 - Target is a selector for specifying Kubernetes objects to which this 14785 - rule applies. 14786 - If Target is not set, the Paths will be ignored for all Kubernetes 14787 - objects within the manifest of the Helm release. 14788 - properties: 14789 - annotationSelector: 14790 - description: |- 14791 - AnnotationSelector is a string that follows the label selection expression 14792 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14793 - It matches with the resource annotations. 14794 - type: string 14795 - group: 14796 - description: |- 14797 - Group is the API group to select resources from. 14798 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14799 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14800 - type: string 14801 - kind: 14802 - description: |- 14803 - Kind of the API Group to select resources from. 14804 - Together with Group and Version it is capable of unambiguously 14805 - identifying and/or selecting resources. 14806 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14807 - type: string 14808 - labelSelector: 14809 - description: |- 14810 - LabelSelector is a string that follows the label selection expression 14811 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14812 - It matches with the resource labels. 14813 - type: string 14814 - name: 14815 - description: Name to match resources with. 14816 - type: string 14817 - namespace: 14818 - description: Namespace to select resources from. 14819 - type: string 14820 - version: 14821 - description: |- 14822 - Version of the API Group to select resources from. 14823 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14824 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14825 - type: string 14826 - type: object 14827 - required: 14828 - - paths 14829 - type: object 14830 - type: array 14831 - mode: 14832 - description: |- 14833 - Mode defines how differences should be handled between the Helm manifest 14834 - and the manifest currently applied to the cluster. 14835 - If not explicitly set, it defaults to DiffModeDisabled. 14836 - enum: 14837 - - enabled 14838 - - warn 14839 - - disabled 14840 - type: string 14841 - type: object 14842 - install: 14843 - description: Install holds the configuration for Helm install actions for this HelmRelease. 14844 - properties: 14845 - crds: 14846 - description: |- 14847 - CRDs upgrade CRDs from the Helm Chart's crds directory according 14848 - to the CRD upgrade policy provided here. Valid values are `Skip`, 14849 - `Create` or `CreateReplace`. Default is `Create` and if omitted 14850 - CRDs are installed but not updated. 14851 - 14852 - Skip: do neither install nor replace (update) any CRDs. 14853 + provider: 14854 + default: cosign 14855 + description: Provider specifies the technology used to 14856 + sign the OCI Helm chart. 14857 + enum: 14858 + - cosign 14859 + - notation 14860 + type: string 14861 + secretRef: 14862 + description: |- 14863 + SecretRef specifies the Kubernetes Secret containing the 14864 + trusted public keys. 14865 + properties: 14866 + name: 14867 + description: Name of the referent. 14868 + type: string 14869 + required: 14870 + - name 14871 + type: object 14872 + required: 14873 + - provider 14874 + type: object 14875 + version: 14876 + default: '*' 14877 + description: |- 14878 + Version semver expression, ignored for charts from v1beta2.GitRepository and 14879 + v1beta2.Bucket sources. Defaults to latest when omitted. 14880 + type: string 14881 + required: 14882 + - chart 14883 + - sourceRef 14884 + type: object 14885 + required: 14886 + - spec 14887 + type: object 14888 + chartRef: 14889 + description: |- 14890 + ChartRef holds a reference to a source controller resource containing the 14891 + Helm chart artifact. 14892 14893 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 14894 + Note: this field is provisional to the v2 API, and not actively used 14895 + by v2beta2 HelmReleases. 14896 + properties: 14897 + apiVersion: 14898 + description: APIVersion of the referent. 14899 + type: string 14900 + kind: 14901 + description: Kind of the referent. 14902 + enum: 14903 + - OCIRepository 14904 + - HelmChart 14905 + type: string 14906 + name: 14907 + description: Name of the referent. 14908 + maxLength: 253 14909 + minLength: 1 14910 + type: string 14911 + namespace: 14912 + description: |- 14913 + Namespace of the referent, defaults to the namespace of the Kubernetes 14914 + resource object that contains the reference. 14915 + maxLength: 63 14916 + minLength: 1 14917 + type: string 14918 + required: 14919 + - kind 14920 + - name 14921 + type: object 14922 + dependsOn: 14923 + description: |- 14924 + DependsOn may contain a meta.NamespacedObjectReference slice with 14925 + references to HelmRelease resources that must be ready before this HelmRelease 14926 + can be reconciled. 14927 + items: 14928 + description: |- 14929 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 14930 + namespace. 14931 + properties: 14932 + name: 14933 + description: Name of the referent. 14934 + type: string 14935 + namespace: 14936 + description: Namespace of the referent, when not specified it 14937 + acts as LocalObjectReference. 14938 + type: string 14939 + required: 14940 + - name 14941 + type: object 14942 + type: array 14943 + driftDetection: 14944 + description: |- 14945 + DriftDetection holds the configuration for detecting and handling 14946 + differences between the manifest in the Helm storage and the resources 14947 + currently existing in the cluster. 14948 + properties: 14949 + ignore: 14950 + description: |- 14951 + Ignore contains a list of rules for specifying which changes to ignore 14952 + during diffing. 14953 + items: 14954 + description: |- 14955 + IgnoreRule defines a rule to selectively disregard specific changes during 14956 + the drift detection process. 14957 + properties: 14958 + paths: 14959 + description: |- 14960 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 14961 + consideration in a Kubernetes object. 14962 + items: 14963 + type: string 14964 + type: array 14965 + target: 14966 + description: |- 14967 + Target is a selector for specifying Kubernetes objects to which this 14968 + rule applies. 14969 + If Target is not set, the Paths will be ignored for all Kubernetes 14970 + objects within the manifest of the Helm release. 14971 + properties: 14972 + annotationSelector: 14973 + description: |- 14974 + AnnotationSelector is a string that follows the label selection expression 14975 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14976 + It matches with the resource annotations. 14977 + type: string 14978 + group: 14979 + description: |- 14980 + Group is the API group to select resources from. 14981 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14982 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14983 + type: string 14984 + kind: 14985 + description: |- 14986 + Kind of the API Group to select resources from. 14987 + Together with Group and Version it is capable of unambiguously 14988 + identifying and/or selecting resources. 14989 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14990 + type: string 14991 + labelSelector: 14992 + description: |- 14993 + LabelSelector is a string that follows the label selection expression 14994 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14995 + It matches with the resource labels. 14996 + type: string 14997 + name: 14998 + description: Name to match resources with. 14999 + type: string 15000 + namespace: 15001 + description: Namespace to select resources from. 15002 + type: string 15003 + version: 15004 + description: |- 15005 + Version of the API Group to select resources from. 15006 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15007 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15008 + type: string 15009 + type: object 15010 + required: 15011 + - paths 15012 + type: object 15013 + type: array 15014 + mode: 15015 + description: |- 15016 + Mode defines how differences should be handled between the Helm manifest 15017 + and the manifest currently applied to the cluster. 15018 + If not explicitly set, it defaults to DiffModeDisabled. 15019 + enum: 15020 + - enabled 15021 + - warn 15022 + - disabled 15023 + type: string 15024 + type: object 15025 + install: 15026 + description: Install holds the configuration for Helm install actions 15027 + for this HelmRelease. 15028 + properties: 15029 + crds: 15030 + description: |- 15031 + CRDs upgrade CRDs from the Helm Chart's crds directory according 15032 + to the CRD upgrade policy provided here. Valid values are `Skip`, 15033 + `Create` or `CreateReplace`. Default is `Create` and if omitted 15034 + CRDs are installed but not updated. 15035 15036 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 15037 - but not deleted. 15038 + Skip: do neither install nor replace (update) any CRDs. 15039 15040 - By default, CRDs are applied (installed) during Helm install action. 15041 - With this option users can opt in to CRD replace existing CRDs on Helm 15042 - install actions, which is not (yet) natively supported by Helm. 15043 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 15044 - enum: 15045 - - Skip 15046 - - Create 15047 - - CreateReplace 15048 - type: string 15049 - createNamespace: 15050 - description: |- 15051 - CreateNamespace tells the Helm install action to create the 15052 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 15053 - On uninstall, the namespace will not be garbage collected. 15054 - type: boolean 15055 - disableHooks: 15056 - description: DisableHooks prevents hooks from running during the Helm install action. 15057 - type: boolean 15058 - disableOpenAPIValidation: 15059 - description: |- 15060 - DisableOpenAPIValidation prevents the Helm install action from validating 15061 - rendered templates against the Kubernetes OpenAPI Schema. 15062 - type: boolean 15063 - disableWait: 15064 - description: |- 15065 - DisableWait disables the waiting for resources to be ready after a Helm 15066 - install has been performed. 15067 - type: boolean 15068 - disableWaitForJobs: 15069 - description: |- 15070 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 15071 - install has been performed. 15072 - type: boolean 15073 - remediation: 15074 - description: |- 15075 - Remediation holds the remediation configuration for when the Helm install 15076 - action for the HelmRelease fails. The default is to not perform any action. 15077 - properties: 15078 - ignoreTestFailures: 15079 - description: |- 15080 - IgnoreTestFailures tells the controller to skip remediation when the Helm 15081 - tests are run after an install action but fail. Defaults to 15082 - 'Test.IgnoreFailures'. 15083 - type: boolean 15084 - remediateLastFailure: 15085 - description: |- 15086 - RemediateLastFailure tells the controller to remediate the last failure, when 15087 - no retries remain. Defaults to 'false'. 15088 - type: boolean 15089 - retries: 15090 - description: |- 15091 - Retries is the number of retries that should be attempted on failures before 15092 - bailing. Remediation, using an uninstall, is performed between each attempt. 15093 - Defaults to '0', a negative integer equals to unlimited retries. 15094 - type: integer 15095 - type: object 15096 - replace: 15097 - description: |- 15098 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 15099 - if that name is a deleted release which remains in the history. 15100 - type: boolean 15101 - skipCRDs: 15102 - description: |- 15103 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 15104 - CRDs are installed if not already present. 15105 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 15106 15107 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 15108 - type: boolean 15109 - timeout: 15110 - description: |- 15111 - Timeout is the time to wait for any individual Kubernetes operation (like 15112 - Jobs for hooks) during the performance of a Helm install action. Defaults to 15113 - 'HelmReleaseSpec.Timeout'. 15114 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15115 - type: string 15116 - type: object 15117 - interval: 15118 - description: Interval at which to reconcile the Helm release. 15119 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15120 - type: string 15121 - kubeConfig: 15122 - description: |- 15123 - KubeConfig for reconciling the HelmRelease on a remote cluster. 15124 - When used in combination with HelmReleaseSpec.ServiceAccountName, 15125 - forces the controller to act on behalf of that Service Account at the 15126 - target cluster. 15127 - If the --default-service-account flag is set, its value will be used as 15128 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 15129 - is empty. 15130 - properties: 15131 - configMapRef: 15132 - description: |- 15133 - ConfigMapRef holds an optional name of a ConfigMap that contains 15134 - the following keys: 15135 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 15136 + but not deleted. 15137 15138 - - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 15139 - `generic`. Required. 15140 - - `cluster`: the fully qualified resource name of the Kubernetes 15141 - cluster in the cloud provider API. Not used by the `generic` 15142 - provider. Required when one of `address` or `ca.crt` is not set. 15143 - - `address`: the address of the Kubernetes API server. Required 15144 - for `generic`. For the other providers, if not specified, the 15145 - first address in the cluster resource will be used, and if 15146 - specified, it must match one of the addresses in the cluster 15147 - resource. 15148 - If audiences is not set, will be used as the audience for the 15149 - `generic` provider. 15150 - - `ca.crt`: the optional PEM-encoded CA certificate for the 15151 - Kubernetes API server. If not set, the controller will use the 15152 - CA certificate from the cluster resource. 15153 - - `audiences`: the optional audiences as a list of 15154 - line-break-separated strings for the Kubernetes ServiceAccount 15155 - token. Defaults to the `address` for the `generic` provider, or 15156 - to specific values for the other providers depending on the 15157 - provider. 15158 - - `serviceAccountName`: the optional name of the Kubernetes 15159 - ServiceAccount in the same namespace that should be used 15160 - for authentication. If not specified, the controller 15161 - ServiceAccount will be used. 15162 + By default, CRDs are applied (installed) during Helm install action. 15163 + With this option users can opt in to CRD replace existing CRDs on Helm 15164 + install actions, which is not (yet) natively supported by Helm. 15165 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 15166 + enum: 15167 + - Skip 15168 + - Create 15169 + - CreateReplace 15170 + type: string 15171 + createNamespace: 15172 + description: |- 15173 + CreateNamespace tells the Helm install action to create the 15174 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 15175 + On uninstall, the namespace will not be garbage collected. 15176 + type: boolean 15177 + disableHooks: 15178 + description: DisableHooks prevents hooks from running during the 15179 + Helm install action. 15180 + type: boolean 15181 + disableOpenAPIValidation: 15182 + description: |- 15183 + DisableOpenAPIValidation prevents the Helm install action from validating 15184 + rendered templates against the Kubernetes OpenAPI Schema. 15185 + type: boolean 15186 + disableWait: 15187 + description: |- 15188 + DisableWait disables the waiting for resources to be ready after a Helm 15189 + install has been performed. 15190 + type: boolean 15191 + disableWaitForJobs: 15192 + description: |- 15193 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 15194 + install has been performed. 15195 + type: boolean 15196 + remediation: 15197 + description: |- 15198 + Remediation holds the remediation configuration for when the Helm install 15199 + action for the HelmRelease fails. The default is to not perform any action. 15200 + properties: 15201 + ignoreTestFailures: 15202 + description: |- 15203 + IgnoreTestFailures tells the controller to skip remediation when the Helm 15204 + tests are run after an install action but fail. Defaults to 15205 + 'Test.IgnoreFailures'. 15206 + type: boolean 15207 + remediateLastFailure: 15208 + description: |- 15209 + RemediateLastFailure tells the controller to remediate the last failure, when 15210 + no retries remain. Defaults to 'false'. 15211 + type: boolean 15212 + retries: 15213 + description: |- 15214 + Retries is the number of retries that should be attempted on failures before 15215 + bailing. Remediation, using an uninstall, is performed between each attempt. 15216 + Defaults to '0', a negative integer equals to unlimited retries. 15217 + type: integer 15218 + type: object 15219 + replace: 15220 + description: |- 15221 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 15222 + if that name is a deleted release which remains in the history. 15223 + type: boolean 15224 + skipCRDs: 15225 + description: |- 15226 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 15227 + CRDs are installed if not already present. 15228 15229 - Mutually exclusive with SecretRef. 15230 - properties: 15231 - name: 15232 - description: Name of the referent. 15233 - type: string 15234 - required: 15235 - - name 15236 - type: object 15237 - secretRef: 15238 - description: |- 15239 - SecretRef holds an optional name of a secret that contains a key with 15240 - the kubeconfig file as the value. If no key is set, the key will default 15241 - to 'value'. Mutually exclusive with ConfigMapRef. 15242 - It is recommended that the kubeconfig is self-contained, and the secret 15243 - is regularly updated if credentials such as a cloud-access-token expire. 15244 - Cloud specific `cmd-path` auth helpers will not function without adding 15245 - binaries and credentials to the Pod that is responsible for reconciling 15246 - Kubernetes resources. Supported only for the generic provider. 15247 - properties: 15248 - key: 15249 - description: Key in the Secret, when not specified an implementation-specific 15250 - default key is used. 15251 - type: string 15252 - name: 15253 - description: Name of the Secret. 15254 - type: string 15255 - required: 15256 - - name 15257 - type: object 15258 - type: object 15259 - x-kubernetes-validations: 15260 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 15261 - be specified 15262 - rule: has(self.configMapRef) || has(self.secretRef) 15263 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must 15264 - be specified 15265 - rule: '!has(self.configMapRef) || !has(self.secretRef)' 15266 - maxHistory: 15267 - description: |- 15268 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 15269 - Use '0' for an unlimited number of revisions; defaults to '5'. 15270 - type: integer 15271 - persistentClient: 15272 - description: |- 15273 - PersistentClient tells the controller to use a persistent Kubernetes 15274 - client for this release. When enabled, the client will be reused for the 15275 - duration of the reconciliation, instead of being created and destroyed 15276 - for each (step of a) Helm action. 15277 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 15278 + type: boolean 15279 + timeout: 15280 + description: |- 15281 + Timeout is the time to wait for any individual Kubernetes operation (like 15282 + Jobs for hooks) during the performance of a Helm install action. Defaults to 15283 + 'HelmReleaseSpec.Timeout'. 15284 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15285 + type: string 15286 + type: object 15287 + interval: 15288 + description: Interval at which to reconcile the Helm release. 15289 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15290 + type: string 15291 + kubeConfig: 15292 + description: |- 15293 + KubeConfig for reconciling the HelmRelease on a remote cluster. 15294 + When used in combination with HelmReleaseSpec.ServiceAccountName, 15295 + forces the controller to act on behalf of that Service Account at the 15296 + target cluster. 15297 + If the --default-service-account flag is set, its value will be used as 15298 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 15299 + is empty. 15300 + properties: 15301 + configMapRef: 15302 + description: |- 15303 + ConfigMapRef holds an optional name of a ConfigMap that contains 15304 + the following keys: 15305 15306 - This can improve performance, but may cause issues with some Helm charts 15307 - that for example do create Custom Resource Definitions during installation 15308 - outside Helm's CRD lifecycle hooks, which are then not observed to be 15309 - available by e.g. post-install hooks. 15310 + - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 15311 + `generic`. Required. 15312 + - `cluster`: the fully qualified resource name of the Kubernetes 15313 + cluster in the cloud provider API. Not used by the `generic` 15314 + provider. Required when one of `address` or `ca.crt` is not set. 15315 + - `address`: the address of the Kubernetes API server. Required 15316 + for `generic`. For the other providers, if not specified, the 15317 + first address in the cluster resource will be used, and if 15318 + specified, it must match one of the addresses in the cluster 15319 + resource. 15320 + If audiences is not set, will be used as the audience for the 15321 + `generic` provider. 15322 + - `ca.crt`: the optional PEM-encoded CA certificate for the 15323 + Kubernetes API server. If not set, the controller will use the 15324 + CA certificate from the cluster resource. 15325 + - `audiences`: the optional audiences as a list of 15326 + line-break-separated strings for the Kubernetes ServiceAccount 15327 + token. Defaults to the `address` for the `generic` provider, or 15328 + to specific values for the other providers depending on the 15329 + provider. 15330 + - `serviceAccountName`: the optional name of the Kubernetes 15331 + ServiceAccount in the same namespace that should be used 15332 + for authentication. If not specified, the controller 15333 + ServiceAccount will be used. 15334 15335 - If not set, it defaults to true. 15336 - type: boolean 15337 - postRenderers: 15338 - description: |- 15339 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 15340 - of their definition. 15341 - items: 15342 - description: PostRenderer contains a Helm PostRenderer specification. 15343 - properties: 15344 - kustomize: 15345 - description: Kustomization to apply as PostRenderer. 15346 - properties: 15347 - images: 15348 - description: |- 15349 - Images is a list of (image name, new name, new tag or digest) 15350 - for changing image names, tags or digests. This can also be achieved with a 15351 - patch, but this operator is simpler to specify. 15352 - items: 15353 - description: Image contains an image name, a new name, a new tag or 15354 - digest, which will replace the original name and tag. 15355 - properties: 15356 - digest: 15357 - description: |- 15358 - Digest is the value used to replace the original image tag. 15359 - If digest is present NewTag value is ignored. 15360 - type: string 15361 - name: 15362 - description: Name is a tag-less image name. 15363 - type: string 15364 - newName: 15365 - description: NewName is the value used to replace the original 15366 - name. 15367 - type: string 15368 - newTag: 15369 - description: NewTag is the value used to replace the original 15370 - tag. 15371 - type: string 15372 - required: 15373 - - name 15374 - type: object 15375 - type: array 15376 - patches: 15377 - description: |- 15378 - Strategic merge and JSON patches, defined as inline YAML objects, 15379 - capable of targeting objects based on kind, label and annotation selectors. 15380 - items: 15381 - description: |- 15382 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 15383 - be applied to. 15384 - properties: 15385 - patch: 15386 - description: |- 15387 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 15388 - an array of operation objects. 15389 - type: string 15390 - target: 15391 - description: Target points to the resources that the patch 15392 - document should be applied to. 15393 - properties: 15394 - annotationSelector: 15395 - description: |- 15396 - AnnotationSelector is a string that follows the label selection expression 15397 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15398 - It matches with the resource annotations. 15399 - type: string 15400 - group: 15401 - description: |- 15402 - Group is the API group to select resources from. 15403 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15404 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15405 - type: string 15406 - kind: 15407 - description: |- 15408 - Kind of the API Group to select resources from. 15409 - Together with Group and Version it is capable of unambiguously 15410 - identifying and/or selecting resources. 15411 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15412 - type: string 15413 - labelSelector: 15414 - description: |- 15415 - LabelSelector is a string that follows the label selection expression 15416 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15417 - It matches with the resource labels. 15418 - type: string 15419 - name: 15420 - description: Name to match resources with. 15421 - type: string 15422 - namespace: 15423 - description: Namespace to select resources from. 15424 - type: string 15425 - version: 15426 - description: |- 15427 - Version of the API Group to select resources from. 15428 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15429 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15430 - type: string 15431 - type: object 15432 - required: 15433 - - patch 15434 - type: object 15435 - type: array 15436 - patchesJson6902: 15437 - description: |- 15438 - JSON 6902 patches, defined as inline YAML objects. 15439 + Mutually exclusive with SecretRef. 15440 + properties: 15441 + name: 15442 + description: Name of the referent. 15443 + type: string 15444 + required: 15445 + - name 15446 + type: object 15447 + secretRef: 15448 + description: |- 15449 + SecretRef holds an optional name of a secret that contains a key with 15450 + the kubeconfig file as the value. If no key is set, the key will default 15451 + to 'value'. Mutually exclusive with ConfigMapRef. 15452 + It is recommended that the kubeconfig is self-contained, and the secret 15453 + is regularly updated if credentials such as a cloud-access-token expire. 15454 + Cloud specific `cmd-path` auth helpers will not function without adding 15455 + binaries and credentials to the Pod that is responsible for reconciling 15456 + Kubernetes resources. Supported only for the generic provider. 15457 + properties: 15458 + key: 15459 + description: Key in the Secret, when not specified an implementation-specific 15460 + default key is used. 15461 + type: string 15462 + name: 15463 + description: Name of the Secret. 15464 + type: string 15465 + required: 15466 + - name 15467 + type: object 15468 + type: object 15469 + x-kubernetes-validations: 15470 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 15471 + must be specified 15472 + rule: has(self.configMapRef) || has(self.secretRef) 15473 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 15474 + must be specified 15475 + rule: '!has(self.configMapRef) || !has(self.secretRef)' 15476 + maxHistory: 15477 + description: |- 15478 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 15479 + Use '0' for an unlimited number of revisions; defaults to '5'. 15480 + type: integer 15481 + persistentClient: 15482 + description: |- 15483 + PersistentClient tells the controller to use a persistent Kubernetes 15484 + client for this release. When enabled, the client will be reused for the 15485 + duration of the reconciliation, instead of being created and destroyed 15486 + for each (step of a) Helm action. 15487 15488 - Deprecated: use Patches instead. 15489 - items: 15490 - description: JSON6902Patch contains a JSON6902 patch and the target 15491 - the patch should be applied to. 15492 - properties: 15493 - patch: 15494 - description: Patch contains the JSON6902 patch document with 15495 - an array of operation objects. 15496 - items: 15497 - description: |- 15498 - JSON6902 is a JSON6902 operation object. 15499 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 15500 - properties: 15501 - from: 15502 - description: |- 15503 - From contains a JSON-pointer value that references a location within the target document where the operation is 15504 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 15505 - type: string 15506 - op: 15507 - description: |- 15508 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 15509 - "test". 15510 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 15511 - enum: 15512 - - test 15513 - - remove 15514 - - add 15515 - - replace 15516 - - move 15517 - - copy 15518 - type: string 15519 - path: 15520 - description: |- 15521 - Path contains the JSON-pointer value that references a location within the target document where the operation 15522 - is performed. The meaning of the value depends on the value of Op. 15523 - type: string 15524 - value: 15525 - description: |- 15526 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 15527 - account by all operations. 15528 - x-kubernetes-preserve-unknown-fields: true 15529 - required: 15530 - - op 15531 - - path 15532 - type: object 15533 - type: array 15534 - target: 15535 - description: Target points to the resources that the patch 15536 - document should be applied to. 15537 - properties: 15538 - annotationSelector: 15539 - description: |- 15540 - AnnotationSelector is a string that follows the label selection expression 15541 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15542 - It matches with the resource annotations. 15543 - type: string 15544 - group: 15545 - description: |- 15546 - Group is the API group to select resources from. 15547 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15548 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15549 - type: string 15550 - kind: 15551 - description: |- 15552 - Kind of the API Group to select resources from. 15553 - Together with Group and Version it is capable of unambiguously 15554 - identifying and/or selecting resources. 15555 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15556 - type: string 15557 - labelSelector: 15558 - description: |- 15559 - LabelSelector is a string that follows the label selection expression 15560 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15561 - It matches with the resource labels. 15562 - type: string 15563 - name: 15564 - description: Name to match resources with. 15565 - type: string 15566 - namespace: 15567 - description: Namespace to select resources from. 15568 - type: string 15569 - version: 15570 - description: |- 15571 - Version of the API Group to select resources from. 15572 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15573 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15574 - type: string 15575 - type: object 15576 - required: 15577 - - patch 15578 - - target 15579 - type: object 15580 - type: array 15581 - patchesStrategicMerge: 15582 - description: |- 15583 - Strategic merge patches, defined as inline YAML objects. 15584 + This can improve performance, but may cause issues with some Helm charts 15585 + that for example do create Custom Resource Definitions during installation 15586 + outside Helm's CRD lifecycle hooks, which are then not observed to be 15587 + available by e.g. post-install hooks. 15588 15589 - Deprecated: use Patches instead. 15590 - items: 15591 - x-kubernetes-preserve-unknown-fields: true 15592 - type: array 15593 - type: object 15594 - type: object 15595 - type: array 15596 - releaseName: 15597 - description: |- 15598 - ReleaseName used for the Helm release. Defaults to a composition of 15599 - '[TargetNamespace-]Name'. 15600 - maxLength: 53 15601 - minLength: 1 15602 - type: string 15603 - rollback: 15604 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 15605 - properties: 15606 - cleanupOnFail: 15607 - description: |- 15608 - CleanupOnFail allows deletion of new resources created during the Helm 15609 - rollback action when it fails. 15610 - type: boolean 15611 - disableHooks: 15612 - description: DisableHooks prevents hooks from running during the Helm rollback action. 15613 - type: boolean 15614 - disableWait: 15615 - description: |- 15616 - DisableWait disables the waiting for resources to be ready after a Helm 15617 - rollback has been performed. 15618 - type: boolean 15619 - disableWaitForJobs: 15620 - description: |- 15621 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 15622 - rollback has been performed. 15623 - type: boolean 15624 - force: 15625 - description: Force forces resource updates through a replacement strategy. 15626 - type: boolean 15627 - recreate: 15628 - description: Recreate performs pod restarts for the resource if applicable. 15629 - type: boolean 15630 - timeout: 15631 - description: |- 15632 - Timeout is the time to wait for any individual Kubernetes operation (like 15633 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 15634 - 'HelmReleaseSpec.Timeout'. 15635 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15636 - type: string 15637 - type: object 15638 - serviceAccountName: 15639 - description: |- 15640 - The name of the Kubernetes service account to impersonate 15641 - when reconciling this HelmRelease. 15642 - maxLength: 253 15643 - minLength: 1 15644 - type: string 15645 - storageNamespace: 15646 - description: |- 15647 - StorageNamespace used for the Helm storage. 15648 - Defaults to the namespace of the HelmRelease. 15649 - maxLength: 63 15650 - minLength: 1 15651 - type: string 15652 - suspend: 15653 - description: |- 15654 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 15655 - it does not apply to already started reconciliations. Defaults to false. 15656 - type: boolean 15657 - targetNamespace: 15658 - description: |- 15659 - TargetNamespace to target when performing operations for the HelmRelease. 15660 - Defaults to the namespace of the HelmRelease. 15661 - maxLength: 63 15662 - minLength: 1 15663 - type: string 15664 - test: 15665 - description: Test holds the configuration for Helm test actions for this HelmRelease. 15666 + If not set, it defaults to true. 15667 + type: boolean 15668 + postRenderers: 15669 + description: |- 15670 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 15671 + of their definition. 15672 + items: 15673 + description: PostRenderer contains a Helm PostRenderer specification. 15674 + properties: 15675 + kustomize: 15676 + description: Kustomization to apply as PostRenderer. 15677 + properties: 15678 + images: 15679 + description: |- 15680 + Images is a list of (image name, new name, new tag or digest) 15681 + for changing image names, tags or digests. This can also be achieved with a 15682 + patch, but this operator is simpler to specify. 15683 + items: 15684 + description: Image contains an image name, a new name, 15685 + a new tag or digest, which will replace the original 15686 + name and tag. 15687 + properties: 15688 + digest: 15689 + description: |- 15690 + Digest is the value used to replace the original image tag. 15691 + If digest is present NewTag value is ignored. 15692 + type: string 15693 + name: 15694 + description: Name is a tag-less image name. 15695 + type: string 15696 + newName: 15697 + description: NewName is the value used to replace 15698 + the original name. 15699 + type: string 15700 + newTag: 15701 + description: NewTag is the value used to replace the 15702 + original tag. 15703 + type: string 15704 + required: 15705 + - name 15706 + type: object 15707 + type: array 15708 + patches: 15709 + description: |- 15710 + Strategic merge and JSON patches, defined as inline YAML objects, 15711 + capable of targeting objects based on kind, label and annotation selectors. 15712 + items: 15713 + description: |- 15714 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 15715 + be applied to. 15716 + properties: 15717 + patch: 15718 + description: |- 15719 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 15720 + an array of operation objects. 15721 + type: string 15722 + target: 15723 + description: Target points to the resources that the 15724 + patch document should be applied to. 15725 properties: 15726 - enable: 15727 - description: |- 15728 - Enable enables Helm test actions for this HelmRelease after an Helm install 15729 - or upgrade action has been performed. 15730 - type: boolean 15731 - filters: 15732 - description: Filters is a list of tests to run or exclude from running. 15733 - items: 15734 - description: Filter holds the configuration for individual Helm test filters. 15735 - properties: 15736 - exclude: 15737 - description: Exclude specifies whether the named test should be excluded. 15738 - type: boolean 15739 - name: 15740 - description: Name is the name of the test. 15741 - maxLength: 253 15742 - minLength: 1 15743 - type: string 15744 - required: 15745 - - name 15746 - type: object 15747 - type: array 15748 - ignoreFailures: 15749 - description: |- 15750 - IgnoreFailures tells the controller to skip remediation when the Helm tests 15751 - are run but fail. Can be overwritten for tests run after install or upgrade 15752 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 15753 - type: boolean 15754 - timeout: 15755 - description: |- 15756 - Timeout is the time to wait for any individual Kubernetes operation during 15757 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 15758 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15759 - type: string 15760 + annotationSelector: 15761 + description: |- 15762 + AnnotationSelector is a string that follows the label selection expression 15763 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15764 + It matches with the resource annotations. 15765 + type: string 15766 + group: 15767 + description: |- 15768 + Group is the API group to select resources from. 15769 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15770 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15771 + type: string 15772 + kind: 15773 + description: |- 15774 + Kind of the API Group to select resources from. 15775 + Together with Group and Version it is capable of unambiguously 15776 + identifying and/or selecting resources. 15777 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15778 + type: string 15779 + labelSelector: 15780 + description: |- 15781 + LabelSelector is a string that follows the label selection expression 15782 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15783 + It matches with the resource labels. 15784 + type: string 15785 + name: 15786 + description: Name to match resources with. 15787 + type: string 15788 + namespace: 15789 + description: Namespace to select resources from. 15790 + type: string 15791 + version: 15792 + description: |- 15793 + Version of the API Group to select resources from. 15794 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15795 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15796 + type: string 15797 type: object 15798 - timeout: 15799 - description: |- 15800 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 15801 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 15802 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15803 - type: string 15804 - uninstall: 15805 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 15806 + required: 15807 + - patch 15808 + type: object 15809 + type: array 15810 + patchesJson6902: 15811 + description: |- 15812 + JSON 6902 patches, defined as inline YAML objects. 15813 + 15814 + Deprecated: use Patches instead. 15815 + items: 15816 + description: JSON6902Patch contains a JSON6902 patch and 15817 + the target the patch should be applied to. 15818 + properties: 15819 + patch: 15820 + description: Patch contains the JSON6902 patch document 15821 + with an array of operation objects. 15822 + items: 15823 + description: |- 15824 + JSON6902 is a JSON6902 operation object. 15825 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 15826 + properties: 15827 + from: 15828 + description: |- 15829 + From contains a JSON-pointer value that references a location within the target document where the operation is 15830 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 15831 + type: string 15832 + op: 15833 + description: |- 15834 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 15835 + "test". 15836 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 15837 + enum: 15838 + - test 15839 + - remove 15840 + - add 15841 + - replace 15842 + - move 15843 + - copy 15844 + type: string 15845 + path: 15846 + description: |- 15847 + Path contains the JSON-pointer value that references a location within the target document where the operation 15848 + is performed. The meaning of the value depends on the value of Op. 15849 + type: string 15850 + value: 15851 + description: |- 15852 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 15853 + account by all operations. 15854 + x-kubernetes-preserve-unknown-fields: true 15855 + required: 15856 + - op 15857 + - path 15858 + type: object 15859 + type: array 15860 + target: 15861 + description: Target points to the resources that the 15862 + patch document should be applied to. 15863 properties: 15864 - deletionPropagation: 15865 - default: background 15866 - description: |- 15867 - DeletionPropagation specifies the deletion propagation policy when 15868 - a Helm uninstall is performed. 15869 - enum: 15870 - - background 15871 - - foreground 15872 - - orphan 15873 - type: string 15874 - disableHooks: 15875 - description: DisableHooks prevents hooks from running during the Helm rollback action. 15876 - type: boolean 15877 - disableWait: 15878 - description: |- 15879 - DisableWait disables waiting for all the resources to be deleted after 15880 - a Helm uninstall is performed. 15881 - type: boolean 15882 - keepHistory: 15883 - description: |- 15884 - KeepHistory tells Helm to remove all associated resources and mark the 15885 - release as deleted, but retain the release history. 15886 - type: boolean 15887 - timeout: 15888 - description: |- 15889 - Timeout is the time to wait for any individual Kubernetes operation (like 15890 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 15891 - to 'HelmReleaseSpec.Timeout'. 15892 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15893 - type: string 15894 + annotationSelector: 15895 + description: |- 15896 + AnnotationSelector is a string that follows the label selection expression 15897 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15898 + It matches with the resource annotations. 15899 + type: string 15900 + group: 15901 + description: |- 15902 + Group is the API group to select resources from. 15903 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15904 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15905 + type: string 15906 + kind: 15907 + description: |- 15908 + Kind of the API Group to select resources from. 15909 + Together with Group and Version it is capable of unambiguously 15910 + identifying and/or selecting resources. 15911 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15912 + type: string 15913 + labelSelector: 15914 + description: |- 15915 + LabelSelector is a string that follows the label selection expression 15916 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15917 + It matches with the resource labels. 15918 + type: string 15919 + name: 15920 + description: Name to match resources with. 15921 + type: string 15922 + namespace: 15923 + description: Namespace to select resources from. 15924 + type: string 15925 + version: 15926 + description: |- 15927 + Version of the API Group to select resources from. 15928 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15929 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15930 + type: string 15931 type: object 15932 - upgrade: 15933 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 15934 - properties: 15935 - cleanupOnFail: 15936 - description: |- 15937 - CleanupOnFail allows deletion of new resources created during the Helm 15938 - upgrade action when it fails. 15939 - type: boolean 15940 - crds: 15941 - description: |- 15942 - CRDs upgrade CRDs from the Helm Chart's crds directory according 15943 - to the CRD upgrade policy provided here. Valid values are `Skip`, 15944 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 15945 - CRDs are neither installed nor upgraded. 15946 + required: 15947 + - patch 15948 + - target 15949 + type: object 15950 + type: array 15951 + patchesStrategicMerge: 15952 + description: |- 15953 + Strategic merge patches, defined as inline YAML objects. 15954 15955 - Skip: do neither install nor replace (update) any CRDs. 15956 + Deprecated: use Patches instead. 15957 + items: 15958 + x-kubernetes-preserve-unknown-fields: true 15959 + type: array 15960 + type: object 15961 + type: object 15962 + type: array 15963 + releaseName: 15964 + description: |- 15965 + ReleaseName used for the Helm release. Defaults to a composition of 15966 + '[TargetNamespace-]Name'. 15967 + maxLength: 53 15968 + minLength: 1 15969 + type: string 15970 + rollback: 15971 + description: Rollback holds the configuration for Helm rollback actions 15972 + for this HelmRelease. 15973 + properties: 15974 + cleanupOnFail: 15975 + description: |- 15976 + CleanupOnFail allows deletion of new resources created during the Helm 15977 + rollback action when it fails. 15978 + type: boolean 15979 + disableHooks: 15980 + description: DisableHooks prevents hooks from running during the 15981 + Helm rollback action. 15982 + type: boolean 15983 + disableWait: 15984 + description: |- 15985 + DisableWait disables the waiting for resources to be ready after a Helm 15986 + rollback has been performed. 15987 + type: boolean 15988 + disableWaitForJobs: 15989 + description: |- 15990 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 15991 + rollback has been performed. 15992 + type: boolean 15993 + force: 15994 + description: Force forces resource updates through a replacement 15995 + strategy. 15996 + type: boolean 15997 + recreate: 15998 + description: Recreate performs pod restarts for the resource if 15999 + applicable. 16000 + type: boolean 16001 + timeout: 16002 + description: |- 16003 + Timeout is the time to wait for any individual Kubernetes operation (like 16004 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 16005 + 'HelmReleaseSpec.Timeout'. 16006 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16007 + type: string 16008 + type: object 16009 + serviceAccountName: 16010 + description: |- 16011 + The name of the Kubernetes service account to impersonate 16012 + when reconciling this HelmRelease. 16013 + maxLength: 253 16014 + minLength: 1 16015 + type: string 16016 + storageNamespace: 16017 + description: |- 16018 + StorageNamespace used for the Helm storage. 16019 + Defaults to the namespace of the HelmRelease. 16020 + maxLength: 63 16021 + minLength: 1 16022 + type: string 16023 + suspend: 16024 + description: |- 16025 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 16026 + it does not apply to already started reconciliations. Defaults to false. 16027 + type: boolean 16028 + targetNamespace: 16029 + description: |- 16030 + TargetNamespace to target when performing operations for the HelmRelease. 16031 + Defaults to the namespace of the HelmRelease. 16032 + maxLength: 63 16033 + minLength: 1 16034 + type: string 16035 + test: 16036 + description: Test holds the configuration for Helm test actions for 16037 + this HelmRelease. 16038 + properties: 16039 + enable: 16040 + description: |- 16041 + Enable enables Helm test actions for this HelmRelease after an Helm install 16042 + or upgrade action has been performed. 16043 + type: boolean 16044 + filters: 16045 + description: Filters is a list of tests to run or exclude from 16046 + running. 16047 + items: 16048 + description: Filter holds the configuration for individual Helm 16049 + test filters. 16050 + properties: 16051 + exclude: 16052 + description: Exclude specifies whether the named test should 16053 + be excluded. 16054 + type: boolean 16055 + name: 16056 + description: Name is the name of the test. 16057 + maxLength: 253 16058 + minLength: 1 16059 + type: string 16060 + required: 16061 + - name 16062 + type: object 16063 + type: array 16064 + ignoreFailures: 16065 + description: |- 16066 + IgnoreFailures tells the controller to skip remediation when the Helm tests 16067 + are run but fail. Can be overwritten for tests run after install or upgrade 16068 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 16069 + type: boolean 16070 + timeout: 16071 + description: |- 16072 + Timeout is the time to wait for any individual Kubernetes operation during 16073 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 16074 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16075 + type: string 16076 + type: object 16077 + timeout: 16078 + description: |- 16079 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 16080 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 16081 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16082 + type: string 16083 + uninstall: 16084 + description: Uninstall holds the configuration for Helm uninstall 16085 + actions for this HelmRelease. 16086 + properties: 16087 + deletionPropagation: 16088 + default: background 16089 + description: |- 16090 + DeletionPropagation specifies the deletion propagation policy when 16091 + a Helm uninstall is performed. 16092 + enum: 16093 + - background 16094 + - foreground 16095 + - orphan 16096 + type: string 16097 + disableHooks: 16098 + description: DisableHooks prevents hooks from running during the 16099 + Helm rollback action. 16100 + type: boolean 16101 + disableWait: 16102 + description: |- 16103 + DisableWait disables waiting for all the resources to be deleted after 16104 + a Helm uninstall is performed. 16105 + type: boolean 16106 + keepHistory: 16107 + description: |- 16108 + KeepHistory tells Helm to remove all associated resources and mark the 16109 + release as deleted, but retain the release history. 16110 + type: boolean 16111 + timeout: 16112 + description: |- 16113 + Timeout is the time to wait for any individual Kubernetes operation (like 16114 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 16115 + to 'HelmReleaseSpec.Timeout'. 16116 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16117 + type: string 16118 + type: object 16119 + upgrade: 16120 + description: Upgrade holds the configuration for Helm upgrade actions 16121 + for this HelmRelease. 16122 + properties: 16123 + cleanupOnFail: 16124 + description: |- 16125 + CleanupOnFail allows deletion of new resources created during the Helm 16126 + upgrade action when it fails. 16127 + type: boolean 16128 + crds: 16129 + description: |- 16130 + CRDs upgrade CRDs from the Helm Chart's crds directory according 16131 + to the CRD upgrade policy provided here. Valid values are `Skip`, 16132 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 16133 + CRDs are neither installed nor upgraded. 16134 16135 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 16136 + Skip: do neither install nor replace (update) any CRDs. 16137 16138 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 16139 - but not deleted. 16140 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 16141 16142 - By default, CRDs are not applied during Helm upgrade action. With this 16143 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 16144 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 16145 - enum: 16146 - - Skip 16147 - - Create 16148 - - CreateReplace 16149 - type: string 16150 - disableHooks: 16151 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 16152 - type: boolean 16153 - disableOpenAPIValidation: 16154 - description: |- 16155 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 16156 - rendered templates against the Kubernetes OpenAPI Schema. 16157 - type: boolean 16158 - disableWait: 16159 - description: |- 16160 - DisableWait disables the waiting for resources to be ready after a Helm 16161 - upgrade has been performed. 16162 - type: boolean 16163 - disableWaitForJobs: 16164 - description: |- 16165 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 16166 - upgrade has been performed. 16167 - type: boolean 16168 - force: 16169 - description: Force forces resource updates through a replacement strategy. 16170 - type: boolean 16171 - preserveValues: 16172 - description: |- 16173 - PreserveValues will make Helm reuse the last release's values and merge in 16174 - overrides from 'Values'. Setting this flag makes the HelmRelease 16175 - non-declarative. 16176 - type: boolean 16177 - remediation: 16178 - description: |- 16179 - Remediation holds the remediation configuration for when the Helm upgrade 16180 - action for the HelmRelease fails. The default is to not perform any action. 16181 - properties: 16182 - ignoreTestFailures: 16183 - description: |- 16184 - IgnoreTestFailures tells the controller to skip remediation when the Helm 16185 - tests are run after an upgrade action but fail. 16186 - Defaults to 'Test.IgnoreFailures'. 16187 - type: boolean 16188 - remediateLastFailure: 16189 - description: |- 16190 - RemediateLastFailure tells the controller to remediate the last failure, when 16191 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 16192 - type: boolean 16193 - retries: 16194 - description: |- 16195 - Retries is the number of retries that should be attempted on failures before 16196 - bailing. Remediation, using 'Strategy', is performed between each attempt. 16197 - Defaults to '0', a negative integer equals to unlimited retries. 16198 - type: integer 16199 - strategy: 16200 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 16201 - enum: 16202 - - rollback 16203 - - uninstall 16204 - type: string 16205 - type: object 16206 - timeout: 16207 - description: |- 16208 - Timeout is the time to wait for any individual Kubernetes operation (like 16209 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 16210 - 'HelmReleaseSpec.Timeout'. 16211 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16212 - type: string 16213 - type: object 16214 - values: 16215 - description: Values holds the values for this Helm release. 16216 - x-kubernetes-preserve-unknown-fields: true 16217 - valuesFrom: 16218 - description: |- 16219 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 16220 - and information about how they should be merged. 16221 - items: 16222 - description: |- 16223 - ValuesReference contains a reference to a resource containing Helm values, 16224 - and optionally the key they can be found at. 16225 - properties: 16226 - kind: 16227 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 16228 - enum: 16229 - - Secret 16230 - - ConfigMap 16231 - type: string 16232 - name: 16233 - description: |- 16234 - Name of the values referent. Should reside in the same namespace as the 16235 - referring resource. 16236 - maxLength: 253 16237 - minLength: 1 16238 - type: string 16239 - optional: 16240 - description: |- 16241 - Optional marks this ValuesReference as optional. When set, a not found error 16242 - for the values reference is ignored, but any ValuesKey, TargetPath or 16243 - transient error will still result in a reconciliation failure. 16244 - type: boolean 16245 - targetPath: 16246 - description: |- 16247 - TargetPath is the YAML dot notation path the value should be merged at. When 16248 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 16249 - which results in the values getting merged at the root. 16250 - maxLength: 250 16251 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 16252 - type: string 16253 - valuesKey: 16254 - description: |- 16255 - ValuesKey is the data key where the values.yaml or a specific value can be 16256 - found at. Defaults to 'values.yaml'. 16257 - maxLength: 253 16258 - pattern: ^[\-._a-zA-Z0-9]+$ 16259 - type: string 16260 - required: 16261 - - kind 16262 - - name 16263 - type: object 16264 - type: array 16265 - required: 16266 - - interval 16267 - type: object 16268 - x-kubernetes-validations: 16269 - - message: either chart or chartRef must be set 16270 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 16271 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 16272 + but not deleted. 16273 + 16274 + By default, CRDs are not applied during Helm upgrade action. With this 16275 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 16276 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 16277 + enum: 16278 + - Skip 16279 + - Create 16280 + - CreateReplace 16281 + type: string 16282 + disableHooks: 16283 + description: DisableHooks prevents hooks from running during the 16284 + Helm upgrade action. 16285 + type: boolean 16286 + disableOpenAPIValidation: 16287 + description: |- 16288 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 16289 + rendered templates against the Kubernetes OpenAPI Schema. 16290 + type: boolean 16291 + disableWait: 16292 + description: |- 16293 + DisableWait disables the waiting for resources to be ready after a Helm 16294 + upgrade has been performed. 16295 + type: boolean 16296 + disableWaitForJobs: 16297 + description: |- 16298 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 16299 + upgrade has been performed. 16300 + type: boolean 16301 + force: 16302 + description: Force forces resource updates through a replacement 16303 + strategy. 16304 + type: boolean 16305 + preserveValues: 16306 + description: |- 16307 + PreserveValues will make Helm reuse the last release's values and merge in 16308 + overrides from 'Values'. Setting this flag makes the HelmRelease 16309 + non-declarative. 16310 + type: boolean 16311 + remediation: 16312 + description: |- 16313 + Remediation holds the remediation configuration for when the Helm upgrade 16314 + action for the HelmRelease fails. The default is to not perform any action. 16315 + properties: 16316 + ignoreTestFailures: 16317 + description: |- 16318 + IgnoreTestFailures tells the controller to skip remediation when the Helm 16319 + tests are run after an upgrade action but fail. 16320 + Defaults to 'Test.IgnoreFailures'. 16321 + type: boolean 16322 + remediateLastFailure: 16323 + description: |- 16324 + RemediateLastFailure tells the controller to remediate the last failure, when 16325 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 16326 + type: boolean 16327 + retries: 16328 + description: |- 16329 + Retries is the number of retries that should be attempted on failures before 16330 + bailing. Remediation, using 'Strategy', is performed between each attempt. 16331 + Defaults to '0', a negative integer equals to unlimited retries. 16332 + type: integer 16333 + strategy: 16334 + description: Strategy to use for failure remediation. Defaults 16335 + to 'rollback'. 16336 + enum: 16337 + - rollback 16338 + - uninstall 16339 + type: string 16340 + type: object 16341 + timeout: 16342 + description: |- 16343 + Timeout is the time to wait for any individual Kubernetes operation (like 16344 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 16345 + 'HelmReleaseSpec.Timeout'. 16346 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16347 + type: string 16348 + type: object 16349 + values: 16350 + description: Values holds the values for this Helm release. 16351 + x-kubernetes-preserve-unknown-fields: true 16352 + valuesFrom: 16353 + description: |- 16354 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 16355 + and information about how they should be merged. 16356 + items: 16357 + description: |- 16358 + ValuesReference contains a reference to a resource containing Helm values, 16359 + and optionally the key they can be found at. 16360 + properties: 16361 + kind: 16362 + description: Kind of the values referent, valid values are ('Secret', 16363 + 'ConfigMap'). 16364 + enum: 16365 + - Secret 16366 + - ConfigMap 16367 + type: string 16368 + name: 16369 + description: |- 16370 + Name of the values referent. Should reside in the same namespace as the 16371 + referring resource. 16372 + maxLength: 253 16373 + minLength: 1 16374 + type: string 16375 + optional: 16376 + description: |- 16377 + Optional marks this ValuesReference as optional. When set, a not found error 16378 + for the values reference is ignored, but any ValuesKey, TargetPath or 16379 + transient error will still result in a reconciliation failure. 16380 + type: boolean 16381 + targetPath: 16382 + description: |- 16383 + TargetPath is the YAML dot notation path the value should be merged at. When 16384 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 16385 + which results in the values getting merged at the root. 16386 + maxLength: 250 16387 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 16388 + type: string 16389 + valuesKey: 16390 + description: |- 16391 + ValuesKey is the data key where the values.yaml or a specific value can be 16392 + found at. Defaults to 'values.yaml'. 16393 + maxLength: 253 16394 + pattern: ^[\-._a-zA-Z0-9]+$ 16395 + type: string 16396 + required: 16397 + - kind 16398 + - name 16399 + type: object 16400 + type: array 16401 + required: 16402 + - interval 16403 + type: object 16404 + x-kubernetes-validations: 16405 + - message: either chart or chartRef must be set 16406 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 16407 + && has(self.chartRef)) 16408 + status: 16409 + default: 16410 + observedGeneration: -1 16411 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 16412 + properties: 16413 + conditions: 16414 + description: Conditions holds the conditions for the HelmRelease. 16415 + items: 16416 + description: Condition contains details for one aspect of the current 16417 + state of this API Resource. 16418 + properties: 16419 + lastTransitionTime: 16420 + description: |- 16421 + lastTransitionTime is the last time the condition transitioned from one status to another. 16422 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16423 + format: date-time 16424 + type: string 16425 + message: 16426 + description: |- 16427 + message is a human readable message indicating details about the transition. 16428 + This may be an empty string. 16429 + maxLength: 32768 16430 + type: string 16431 + observedGeneration: 16432 + description: |- 16433 + observedGeneration represents the .metadata.generation that the condition was set based upon. 16434 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16435 + with respect to the current state of the instance. 16436 + format: int64 16437 + minimum: 0 16438 + type: integer 16439 + reason: 16440 + description: |- 16441 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 16442 + Producers of specific condition types may define expected values and meanings for this field, 16443 + and whether the values are considered a guaranteed API. 16444 + The value should be a CamelCase string. 16445 + This field may not be empty. 16446 + maxLength: 1024 16447 + minLength: 1 16448 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16449 + type: string 16450 + status: 16451 + description: status of the condition, one of True, False, Unknown. 16452 + enum: 16453 + - "True" 16454 + - "False" 16455 + - Unknown 16456 + type: string 16457 + type: 16458 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 16459 + maxLength: 316 16460 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16461 + type: string 16462 + required: 16463 + - lastTransitionTime 16464 + - message 16465 + - reason 16466 + - status 16467 + - type 16468 + type: object 16469 + type: array 16470 + failures: 16471 + description: |- 16472 + Failures is the reconciliation failure count against the latest desired 16473 + state. It is reset after a successful reconciliation. 16474 + format: int64 16475 + type: integer 16476 + helmChart: 16477 + description: |- 16478 + HelmChart is the namespaced name of the HelmChart resource created by 16479 + the controller for the HelmRelease. 16480 + type: string 16481 + history: 16482 + description: |- 16483 + History holds the history of Helm releases performed for this HelmRelease 16484 + up to the last successfully completed release. 16485 + items: 16486 + description: |- 16487 + Snapshot captures a point-in-time copy of the status information for a Helm release, 16488 + as managed by the controller. 16489 + properties: 16490 + apiVersion: 16491 + description: |- 16492 + APIVersion is the API version of the Snapshot. 16493 + Provisional: when the calculation method of the Digest field is changed, 16494 + this field will be used to distinguish between the old and new methods. 16495 + type: string 16496 + appVersion: 16497 + description: AppVersion is the chart app version of the release 16498 + object in storage. 16499 + type: string 16500 + chartName: 16501 + description: ChartName is the chart name of the release object 16502 + in storage. 16503 + type: string 16504 + chartVersion: 16505 + description: |- 16506 + ChartVersion is the chart version of the release object in 16507 + storage. 16508 + type: string 16509 + configDigest: 16510 + description: |- 16511 + ConfigDigest is the checksum of the config (better known as 16512 + "values") of the release object in storage. 16513 + It has the format of `<algo>:<checksum>`. 16514 + type: string 16515 + deleted: 16516 + description: Deleted is when the release was deleted. 16517 + format: date-time 16518 + type: string 16519 + digest: 16520 + description: |- 16521 + Digest is the checksum of the release object in storage. 16522 + It has the format of `<algo>:<checksum>`. 16523 + type: string 16524 + firstDeployed: 16525 + description: FirstDeployed is when the release was first deployed. 16526 + format: date-time 16527 + type: string 16528 + lastDeployed: 16529 + description: LastDeployed is when the release was last deployed. 16530 + format: date-time 16531 + type: string 16532 + name: 16533 + description: Name is the name of the release. 16534 + type: string 16535 + namespace: 16536 + description: Namespace is the namespace the release is deployed 16537 + to. 16538 + type: string 16539 + ociDigest: 16540 + description: OCIDigest is the digest of the OCI artifact associated 16541 + with the release. 16542 + type: string 16543 status: 16544 - default: 16545 - observedGeneration: -1 16546 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 16547 + description: Status is the current state of the release. 16548 + type: string 16549 + testHooks: 16550 + additionalProperties: 16551 + description: |- 16552 + TestHookStatus holds the status information for a test hook as observed 16553 + to be run by the controller. 16554 properties: 16555 - conditions: 16556 - description: Conditions holds the conditions for the HelmRelease. 16557 - items: 16558 - description: Condition contains details for one aspect of the current state of this API 16559 - Resource. 16560 - properties: 16561 - lastTransitionTime: 16562 - description: |- 16563 - lastTransitionTime is the last time the condition transitioned from one status to another. 16564 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16565 - format: date-time 16566 - type: string 16567 - message: 16568 - description: |- 16569 - message is a human readable message indicating details about the transition. 16570 - This may be an empty string. 16571 - maxLength: 32768 16572 - type: string 16573 - observedGeneration: 16574 - description: |- 16575 - observedGeneration represents the .metadata.generation that the condition was set based upon. 16576 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16577 - with respect to the current state of the instance. 16578 - format: int64 16579 - minimum: 0 16580 - type: integer 16581 - reason: 16582 - description: |- 16583 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 16584 - Producers of specific condition types may define expected values and meanings for this field, 16585 - and whether the values are considered a guaranteed API. 16586 - The value should be a CamelCase string. 16587 - This field may not be empty. 16588 - maxLength: 1024 16589 - minLength: 1 16590 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16591 - type: string 16592 - status: 16593 - description: status of the condition, one of True, False, Unknown. 16594 - enum: 16595 - - "True" 16596 - - "False" 16597 - - Unknown 16598 - type: string 16599 - type: 16600 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 16601 - maxLength: 316 16602 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16603 - type: string 16604 - required: 16605 - - lastTransitionTime 16606 - - message 16607 - - reason 16608 - - status 16609 - - type 16610 - type: object 16611 - type: array 16612 - failures: 16613 - description: |- 16614 - Failures is the reconciliation failure count against the latest desired 16615 - state. It is reset after a successful reconciliation. 16616 - format: int64 16617 - type: integer 16618 - helmChart: 16619 - description: |- 16620 - HelmChart is the namespaced name of the HelmChart resource created by 16621 - the controller for the HelmRelease. 16622 - type: string 16623 - history: 16624 - description: |- 16625 - History holds the history of Helm releases performed for this HelmRelease 16626 - up to the last successfully completed release. 16627 - items: 16628 - description: |- 16629 - Snapshot captures a point-in-time copy of the status information for a Helm release, 16630 - as managed by the controller. 16631 - properties: 16632 - apiVersion: 16633 - description: |- 16634 - APIVersion is the API version of the Snapshot. 16635 - Provisional: when the calculation method of the Digest field is changed, 16636 - this field will be used to distinguish between the old and new methods. 16637 - type: string 16638 - appVersion: 16639 - description: AppVersion is the chart app version of the release object in storage. 16640 - type: string 16641 - chartName: 16642 - description: ChartName is the chart name of the release object in storage. 16643 - type: string 16644 - chartVersion: 16645 - description: |- 16646 - ChartVersion is the chart version of the release object in 16647 - storage. 16648 - type: string 16649 - configDigest: 16650 - description: |- 16651 - ConfigDigest is the checksum of the config (better known as 16652 - "values") of the release object in storage. 16653 - It has the format of `<algo>:<checksum>`. 16654 - type: string 16655 - deleted: 16656 - description: Deleted is when the release was deleted. 16657 - format: date-time 16658 - type: string 16659 - digest: 16660 - description: |- 16661 - Digest is the checksum of the release object in storage. 16662 - It has the format of `<algo>:<checksum>`. 16663 - type: string 16664 - firstDeployed: 16665 - description: FirstDeployed is when the release was first deployed. 16666 - format: date-time 16667 - type: string 16668 - lastDeployed: 16669 - description: LastDeployed is when the release was last deployed. 16670 - format: date-time 16671 - type: string 16672 - name: 16673 - description: Name is the name of the release. 16674 - type: string 16675 - namespace: 16676 - description: Namespace is the namespace the release is deployed to. 16677 - type: string 16678 - ociDigest: 16679 - description: OCIDigest is the digest of the OCI artifact associated with the release. 16680 - type: string 16681 - status: 16682 - description: Status is the current state of the release. 16683 - type: string 16684 - testHooks: 16685 - additionalProperties: 16686 - description: |- 16687 - TestHookStatus holds the status information for a test hook as observed 16688 - to be run by the controller. 16689 - properties: 16690 - lastCompleted: 16691 - description: LastCompleted is the time the test hook last completed. 16692 - format: date-time 16693 - type: string 16694 - lastStarted: 16695 - description: LastStarted is the time the test hook was last started. 16696 - format: date-time 16697 - type: string 16698 - phase: 16699 - description: Phase the test hook was observed to be in. 16700 - type: string 16701 - type: object 16702 - description: |- 16703 - TestHooks is the list of test hooks for the release as observed to be 16704 - run by the controller. 16705 - type: object 16706 - version: 16707 - description: Version is the version of the release object in storage. 16708 - type: integer 16709 - required: 16710 - - chartName 16711 - - chartVersion 16712 - - configDigest 16713 - - digest 16714 - - firstDeployed 16715 - - lastDeployed 16716 - - name 16717 - - namespace 16718 - - status 16719 - - version 16720 - type: object 16721 - type: array 16722 - installFailures: 16723 - description: |- 16724 - InstallFailures is the install failure count against the latest desired 16725 - state. It is reset after a successful reconciliation. 16726 - format: int64 16727 - type: integer 16728 - lastAppliedRevision: 16729 - description: |- 16730 - LastAppliedRevision is the revision of the last successfully applied 16731 - source. 16732 + lastCompleted: 16733 + description: LastCompleted is the time the test hook last 16734 + completed. 16735 + format: date-time 16736 + type: string 16737 + lastStarted: 16738 + description: LastStarted is the time the test hook was 16739 + last started. 16740 + format: date-time 16741 + type: string 16742 + phase: 16743 + description: Phase the test hook was observed to be in. 16744 + type: string 16745 + type: object 16746 + description: |- 16747 + TestHooks is the list of test hooks for the release as observed to be 16748 + run by the controller. 16749 + type: object 16750 + version: 16751 + description: Version is the version of the release object in 16752 + storage. 16753 + type: integer 16754 + required: 16755 + - chartName 16756 + - chartVersion 16757 + - configDigest 16758 + - digest 16759 + - firstDeployed 16760 + - lastDeployed 16761 + - name 16762 + - namespace 16763 + - status 16764 + - version 16765 + type: object 16766 + type: array 16767 + installFailures: 16768 + description: |- 16769 + InstallFailures is the install failure count against the latest desired 16770 + state. It is reset after a successful reconciliation. 16771 + format: int64 16772 + type: integer 16773 + lastAppliedRevision: 16774 + description: |- 16775 + LastAppliedRevision is the revision of the last successfully applied 16776 + source. 16777 16778 - Deprecated: the revision can now be found in the History. 16779 - type: string 16780 - lastAttemptedConfigDigest: 16781 - description: |- 16782 - LastAttemptedConfigDigest is the digest for the config (better known as 16783 - "values") of the last reconciliation attempt. 16784 - type: string 16785 - lastAttemptedGeneration: 16786 - description: |- 16787 - LastAttemptedGeneration is the last generation the controller attempted 16788 - to reconcile. 16789 - format: int64 16790 - type: integer 16791 - lastAttemptedReleaseAction: 16792 - description: |- 16793 - LastAttemptedReleaseAction is the last release action performed for this 16794 - HelmRelease. It is used to determine the active remediation strategy. 16795 - enum: 16796 - - install 16797 - - upgrade 16798 - type: string 16799 - lastAttemptedRevision: 16800 - description: |- 16801 - LastAttemptedRevision is the Source revision of the last reconciliation 16802 - attempt. For OCIRepository sources, the 12 first characters of the digest are 16803 - appended to the chart version e.g. "1.2.3+1234567890ab". 16804 - type: string 16805 - lastAttemptedRevisionDigest: 16806 - description: |- 16807 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 16808 - This is only set for OCIRepository sources. 16809 - type: string 16810 - lastAttemptedValuesChecksum: 16811 - description: |- 16812 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 16813 - reconciliation attempt. 16814 + Deprecated: the revision can now be found in the History. 16815 + type: string 16816 + lastAttemptedConfigDigest: 16817 + description: |- 16818 + LastAttemptedConfigDigest is the digest for the config (better known as 16819 + "values") of the last reconciliation attempt. 16820 + type: string 16821 + lastAttemptedGeneration: 16822 + description: |- 16823 + LastAttemptedGeneration is the last generation the controller attempted 16824 + to reconcile. 16825 + format: int64 16826 + type: integer 16827 + lastAttemptedReleaseAction: 16828 + description: |- 16829 + LastAttemptedReleaseAction is the last release action performed for this 16830 + HelmRelease. It is used to determine the active remediation strategy. 16831 + enum: 16832 + - install 16833 + - upgrade 16834 + type: string 16835 + lastAttemptedRevision: 16836 + description: |- 16837 + LastAttemptedRevision is the Source revision of the last reconciliation 16838 + attempt. For OCIRepository sources, the 12 first characters of the digest are 16839 + appended to the chart version e.g. "1.2.3+1234567890ab". 16840 + type: string 16841 + lastAttemptedRevisionDigest: 16842 + description: |- 16843 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 16844 + This is only set for OCIRepository sources. 16845 + type: string 16846 + lastAttemptedValuesChecksum: 16847 + description: |- 16848 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 16849 + reconciliation attempt. 16850 16851 - Deprecated: Use LastAttemptedConfigDigest instead. 16852 - type: string 16853 - lastHandledForceAt: 16854 - description: |- 16855 - LastHandledForceAt holds the value of the most recent force request 16856 - value, so a change of the annotation value can be detected. 16857 - type: string 16858 - lastHandledReconcileAt: 16859 - description: |- 16860 - LastHandledReconcileAt holds the value of the most recent 16861 - reconcile request value, so a change of the annotation value 16862 - can be detected. 16863 - type: string 16864 - lastHandledResetAt: 16865 - description: |- 16866 - LastHandledResetAt holds the value of the most recent reset request 16867 - value, so a change of the annotation value can be detected. 16868 - type: string 16869 - lastReleaseRevision: 16870 - description: |- 16871 - LastReleaseRevision is the revision of the last successful Helm release. 16872 + Deprecated: Use LastAttemptedConfigDigest instead. 16873 + type: string 16874 + lastHandledForceAt: 16875 + description: |- 16876 + LastHandledForceAt holds the value of the most recent force request 16877 + value, so a change of the annotation value can be detected. 16878 + type: string 16879 + lastHandledReconcileAt: 16880 + description: |- 16881 + LastHandledReconcileAt holds the value of the most recent 16882 + reconcile request value, so a change of the annotation value 16883 + can be detected. 16884 + type: string 16885 + lastHandledResetAt: 16886 + description: |- 16887 + LastHandledResetAt holds the value of the most recent reset request 16888 + value, so a change of the annotation value can be detected. 16889 + type: string 16890 + lastReleaseRevision: 16891 + description: |- 16892 + LastReleaseRevision is the revision of the last successful Helm release. 16893 16894 - Deprecated: Use History instead. 16895 - type: integer 16896 - observedGeneration: 16897 - description: ObservedGeneration is the last observed generation. 16898 - format: int64 16899 - type: integer 16900 - observedPostRenderersDigest: 16901 - description: |- 16902 - ObservedPostRenderersDigest is the digest for the post-renderers of 16903 - the last successful reconciliation attempt. 16904 - type: string 16905 - storageNamespace: 16906 - description: |- 16907 - StorageNamespace is the namespace of the Helm release storage for the 16908 - current release. 16909 - maxLength: 63 16910 - minLength: 1 16911 - type: string 16912 - upgradeFailures: 16913 - description: |- 16914 - UpgradeFailures is the upgrade failure count against the latest desired 16915 - state. It is reset after a successful reconciliation. 16916 - format: int64 16917 - type: integer 16918 - type: object 16919 - type: object 16920 - served: true 16921 - storage: false 16922 - subresources: 16923 - status: {} 16924 + Deprecated: Use History instead. 16925 + type: integer 16926 + observedGeneration: 16927 + description: ObservedGeneration is the last observed generation. 16928 + format: int64 16929 + type: integer 16930 + observedPostRenderersDigest: 16931 + description: |- 16932 + ObservedPostRenderersDigest is the digest for the post-renderers of 16933 + the last successful reconciliation attempt. 16934 + type: string 16935 + storageNamespace: 16936 + description: |- 16937 + StorageNamespace is the namespace of the Helm release storage for the 16938 + current release. 16939 + maxLength: 63 16940 + minLength: 1 16941 + type: string 16942 + upgradeFailures: 16943 + description: |- 16944 + UpgradeFailures is the upgrade failure count against the latest desired 16945 + state. It is reset after a successful reconciliation. 16946 + format: int64 16947 + type: integer 16948 + type: object 16949 + type: object 16950 + served: true 16951 + storage: false 16952 + subresources: 16953 + status: {} 16954 --- 16955 apiVersion: v1 16956 kind: ServiceAccount 16957 metadata: 16958 - labels: 16959 - app.kubernetes.io/component: helm-controller 16960 - app.kubernetes.io/instance: flux-system 16961 - app.kubernetes.io/part-of: flux 16962 - app.kubernetes.io/version: v2.7.3 16963 - name: helm-controller 16964 - namespace: flux-system 16965 + labels: 16966 + app.kubernetes.io/component: helm-controller 16967 + app.kubernetes.io/instance: flux-system 16968 + app.kubernetes.io/part-of: flux 16969 + app.kubernetes.io/version: v2.7.5 16970 + name: helm-controller 16971 + namespace: flux-system 16972 --- 16973 apiVersion: apps/v1 16974 kind: Deployment 16975 metadata: 16976 - labels: 16977 - app.kubernetes.io/component: helm-controller 16978 - app.kubernetes.io/instance: flux-system 16979 - app.kubernetes.io/part-of: flux 16980 - app.kubernetes.io/version: v2.7.3 16981 - control-plane: controller 16982 - name: helm-controller 16983 - namespace: flux-system 16984 + labels: 16985 + app.kubernetes.io/component: helm-controller 16986 + app.kubernetes.io/instance: flux-system 16987 + app.kubernetes.io/part-of: flux 16988 + app.kubernetes.io/version: v2.7.5 16989 + control-plane: controller 16990 + name: helm-controller 16991 + namespace: flux-system 16992 spec: 16993 - replicas: 1 16994 - selector: 16995 - matchLabels: 16996 - app: helm-controller 16997 - template: 16998 - metadata: 16999 - annotations: 17000 - prometheus.io/port: "8080" 17001 - prometheus.io/scrape: "true" 17002 - labels: 17003 - app: helm-controller 17004 - app.kubernetes.io/component: helm-controller 17005 - app.kubernetes.io/instance: flux-system 17006 - app.kubernetes.io/part-of: flux 17007 - app.kubernetes.io/version: v2.7.3 17008 - spec: 17009 - containers: 17010 - - args: 17011 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 17012 - - --watch-all-namespaces=true 17013 - - --log-level=info 17014 - - --log-encoding=json 17015 - - --enable-leader-election 17016 - env: 17017 - - name: RUNTIME_NAMESPACE 17018 - valueFrom: 17019 - fieldRef: 17020 - fieldPath: metadata.namespace 17021 - - name: GOMEMLIMIT 17022 - valueFrom: 17023 - resourceFieldRef: 17024 - containerName: manager 17025 - resource: limits.memory 17026 - image: ghcr.io/fluxcd/helm-controller:v1.4.3 17027 - imagePullPolicy: IfNotPresent 17028 - livenessProbe: 17029 - httpGet: 17030 - path: /healthz 17031 - port: healthz 17032 - name: manager 17033 - ports: 17034 - - containerPort: 8080 17035 - name: http-prom 17036 - protocol: TCP 17037 - - containerPort: 9440 17038 - name: healthz 17039 - protocol: TCP 17040 - readinessProbe: 17041 - httpGet: 17042 - path: /readyz 17043 - port: healthz 17044 - resources: 17045 - limits: 17046 - cpu: 1000m 17047 - memory: 1Gi 17048 - requests: 17049 - cpu: 100m 17050 - memory: 64Mi 17051 - securityContext: 17052 - allowPrivilegeEscalation: false 17053 - capabilities: 17054 - drop: 17055 - - ALL 17056 - readOnlyRootFilesystem: true 17057 - runAsNonRoot: true 17058 - seccompProfile: 17059 - type: RuntimeDefault 17060 - volumeMounts: 17061 - - mountPath: /tmp 17062 - name: temp 17063 - nodeSelector: 17064 - kubernetes.io/os: linux 17065 - priorityClassName: system-cluster-critical 17066 - securityContext: 17067 - fsGroup: 1337 17068 - serviceAccountName: helm-controller 17069 - terminationGracePeriodSeconds: 600 17070 - volumes: 17071 - - emptyDir: {} 17072 - name: temp 17073 ---- 17074 -apiVersion: apiextensions.k8s.io/v1 17075 -kind: CustomResourceDefinition 17076 -metadata: 17077 - annotations: 17078 - controller-gen.kubebuilder.io/version: v0.19.0 17079 - labels: 17080 - app.kubernetes.io/component: notification-controller 17081 + replicas: 1 17082 + selector: 17083 + matchLabels: 17084 + app: helm-controller 17085 + template: 17086 + metadata: 17087 + annotations: 17088 + prometheus.io/port: "8080" 17089 + prometheus.io/scrape: "true" 17090 + labels: 17091 + app: helm-controller 17092 + app.kubernetes.io/component: helm-controller 17093 app.kubernetes.io/instance: flux-system 17094 app.kubernetes.io/part-of: flux 17095 - app.kubernetes.io/version: v2.7.3 17096 - name: alerts.notification.toolkit.fluxcd.io 17097 -spec: 17098 - group: notification.toolkit.fluxcd.io 17099 - names: 17100 - kind: Alert 17101 - listKind: AlertList 17102 - plural: alerts 17103 - singular: alert 17104 - scope: Namespaced 17105 - versions: 17106 - - additionalPrinterColumns: 17107 - - jsonPath: .metadata.creationTimestamp 17108 - name: Age 17109 - type: date 17110 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 17111 - name: Ready 17112 - type: string 17113 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 17114 - name: Status 17115 - type: string 17116 - deprecated: true 17117 - deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 17118 - name: v1beta2 17119 - schema: 17120 - openAPIV3Schema: 17121 - description: Alert is the Schema for the alerts API 17122 - properties: 17123 - apiVersion: 17124 - description: |- 17125 - APIVersion defines the versioned schema of this representation of an object. 17126 - Servers should convert recognized schemas to the latest internal value, and 17127 - may reject unrecognized values. 17128 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17129 - type: string 17130 - kind: 17131 - description: |- 17132 - Kind is a string value representing the REST resource this object represents. 17133 - Servers may infer this from the endpoint the client submits requests to. 17134 - Cannot be updated. 17135 - In CamelCase. 17136 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17137 - type: string 17138 - metadata: 17139 - type: object 17140 - spec: 17141 - description: AlertSpec defines an alerting rule for events involving a list of objects. 17142 - properties: 17143 - eventMetadata: 17144 - additionalProperties: 17145 - type: string 17146 - description: |- 17147 - EventMetadata is an optional field for adding metadata to events dispatched by the 17148 - controller. This can be used for enhancing the context of the event. If a field 17149 - would override one already present on the original event as generated by the emitter, 17150 - then the override doesn't happen, i.e. the original value is preserved, and an info 17151 - log is printed. 17152 - type: object 17153 - eventSeverity: 17154 - default: info 17155 - description: |- 17156 - EventSeverity specifies how to filter events based on severity. 17157 - If set to 'info' no events will be filtered. 17158 - enum: 17159 - - info 17160 - - error 17161 - type: string 17162 - eventSources: 17163 - description: |- 17164 - EventSources specifies how to filter events based 17165 - on the involved object kind, name and namespace. 17166 - items: 17167 - description: |- 17168 - CrossNamespaceObjectReference contains enough information to let you locate the 17169 - typed referenced object at cluster level 17170 - properties: 17171 - apiVersion: 17172 - description: API version of the referent 17173 - type: string 17174 - kind: 17175 - description: Kind of the referent 17176 - enum: 17177 - - Bucket 17178 - - GitRepository 17179 - - Kustomization 17180 - - HelmRelease 17181 - - HelmChart 17182 - - HelmRepository 17183 - - ImageRepository 17184 - - ImagePolicy 17185 - - ImageUpdateAutomation 17186 - - OCIRepository 17187 - type: string 17188 - matchLabels: 17189 - additionalProperties: 17190 - type: string 17191 - description: |- 17192 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 17193 - map is equivalent to an element of matchExpressions, whose key field is "key", the 17194 - operator is "In", and the values array contains only "value". The requirements are ANDed. 17195 - MatchLabels requires the name to be set to `*`. 17196 - type: object 17197 - name: 17198 - description: |- 17199 - Name of the referent 17200 - If multiple resources are targeted `*` may be set. 17201 - maxLength: 253 17202 - minLength: 1 17203 - type: string 17204 - namespace: 17205 - description: Namespace of the referent 17206 - maxLength: 253 17207 - minLength: 1 17208 - type: string 17209 - required: 17210 - - kind 17211 - - name 17212 - type: object 17213 - type: array 17214 - exclusionList: 17215 - description: |- 17216 - ExclusionList specifies a list of Golang regular expressions 17217 - to be used for excluding messages. 17218 - items: 17219 - type: string 17220 - type: array 17221 - inclusionList: 17222 - description: |- 17223 - InclusionList specifies a list of Golang regular expressions 17224 - to be used for including messages. 17225 - items: 17226 - type: string 17227 - type: array 17228 - providerRef: 17229 - description: ProviderRef specifies which Provider this Alert should use. 17230 - properties: 17231 - name: 17232 - description: Name of the referent. 17233 - type: string 17234 - required: 17235 - - name 17236 - type: object 17237 - summary: 17238 - description: Summary holds a short description of the impact and affected cluster. 17239 - maxLength: 255 17240 - type: string 17241 - suspend: 17242 - description: |- 17243 - Suspend tells the controller to suspend subsequent 17244 - events handling for this Alert. 17245 - type: boolean 17246 - required: 17247 - - eventSources 17248 - - providerRef 17249 - type: object 17250 - status: 17251 - default: 17252 - observedGeneration: -1 17253 - description: AlertStatus defines the observed state of the Alert. 17254 - properties: 17255 - conditions: 17256 - description: Conditions holds the conditions for the Alert. 17257 - items: 17258 - description: Condition contains details for one aspect of the current state of this API 17259 - Resource. 17260 - properties: 17261 - lastTransitionTime: 17262 - description: |- 17263 - lastTransitionTime is the last time the condition transitioned from one status to another. 17264 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17265 - format: date-time 17266 - type: string 17267 - message: 17268 - description: |- 17269 - message is a human readable message indicating details about the transition. 17270 - This may be an empty string. 17271 - maxLength: 32768 17272 - type: string 17273 - observedGeneration: 17274 - description: |- 17275 - observedGeneration represents the .metadata.generation that the condition was set based upon. 17276 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17277 - with respect to the current state of the instance. 17278 - format: int64 17279 - minimum: 0 17280 - type: integer 17281 - reason: 17282 - description: |- 17283 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 17284 - Producers of specific condition types may define expected values and meanings for this field, 17285 - and whether the values are considered a guaranteed API. 17286 - The value should be a CamelCase string. 17287 - This field may not be empty. 17288 - maxLength: 1024 17289 - minLength: 1 17290 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17291 - type: string 17292 - status: 17293 - description: status of the condition, one of True, False, Unknown. 17294 - enum: 17295 - - "True" 17296 - - "False" 17297 - - Unknown 17298 - type: string 17299 - type: 17300 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 17301 - maxLength: 316 17302 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17303 - type: string 17304 - required: 17305 - - lastTransitionTime 17306 - - message 17307 - - reason 17308 - - status 17309 - - type 17310 - type: object 17311 - type: array 17312 - lastHandledReconcileAt: 17313 - description: |- 17314 - LastHandledReconcileAt holds the value of the most recent 17315 - reconcile request value, so a change of the annotation value 17316 - can be detected. 17317 - type: string 17318 - observedGeneration: 17319 - description: ObservedGeneration is the last observed generation. 17320 - format: int64 17321 - type: integer 17322 - type: object 17323 - type: object 17324 - served: true 17325 - storage: false 17326 - subresources: 17327 - status: {} 17328 - - additionalPrinterColumns: 17329 - - jsonPath: .metadata.creationTimestamp 17330 - name: Age 17331 - type: date 17332 - name: v1beta3 17333 - schema: 17334 - openAPIV3Schema: 17335 - description: Alert is the Schema for the alerts API 17336 - properties: 17337 - apiVersion: 17338 - description: |- 17339 - APIVersion defines the versioned schema of this representation of an object. 17340 - Servers should convert recognized schemas to the latest internal value, and 17341 - may reject unrecognized values. 17342 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17343 - type: string 17344 - kind: 17345 - description: |- 17346 - Kind is a string value representing the REST resource this object represents. 17347 - Servers may infer this from the endpoint the client submits requests to. 17348 - Cannot be updated. 17349 - In CamelCase. 17350 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17351 - type: string 17352 - metadata: 17353 - type: object 17354 - spec: 17355 - description: AlertSpec defines an alerting rule for events involving a list of objects. 17356 - properties: 17357 - eventMetadata: 17358 - additionalProperties: 17359 - type: string 17360 - description: |- 17361 - EventMetadata is an optional field for adding metadata to events dispatched by the 17362 - controller. This can be used for enhancing the context of the event. If a field 17363 - would override one already present on the original event as generated by the emitter, 17364 - then the override doesn't happen, i.e. the original value is preserved, and an info 17365 - log is printed. 17366 - type: object 17367 - eventSeverity: 17368 - default: info 17369 - description: |- 17370 - EventSeverity specifies how to filter events based on severity. 17371 - If set to 'info' no events will be filtered. 17372 - enum: 17373 - - info 17374 - - error 17375 - type: string 17376 - eventSources: 17377 - description: |- 17378 - EventSources specifies how to filter events based 17379 - on the involved object kind, name and namespace. 17380 - items: 17381 - description: |- 17382 - CrossNamespaceObjectReference contains enough information to let you locate the 17383 - typed referenced object at cluster level 17384 - properties: 17385 - apiVersion: 17386 - description: API version of the referent 17387 - type: string 17388 - kind: 17389 - description: Kind of the referent 17390 - enum: 17391 - - Bucket 17392 - - GitRepository 17393 - - Kustomization 17394 - - HelmRelease 17395 - - HelmChart 17396 - - HelmRepository 17397 - - ImageRepository 17398 - - ImagePolicy 17399 - - ImageUpdateAutomation 17400 - - OCIRepository 17401 - type: string 17402 - matchLabels: 17403 - additionalProperties: 17404 - type: string 17405 - description: |- 17406 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 17407 - map is equivalent to an element of matchExpressions, whose key field is "key", the 17408 - operator is "In", and the values array contains only "value". The requirements are ANDed. 17409 - MatchLabels requires the name to be set to `*`. 17410 - type: object 17411 - name: 17412 - description: |- 17413 - Name of the referent 17414 - If multiple resources are targeted `*` may be set. 17415 - maxLength: 253 17416 - minLength: 1 17417 - type: string 17418 - namespace: 17419 - description: Namespace of the referent 17420 - maxLength: 253 17421 - minLength: 1 17422 - type: string 17423 - required: 17424 - - kind 17425 - - name 17426 - type: object 17427 - type: array 17428 - exclusionList: 17429 - description: |- 17430 - ExclusionList specifies a list of Golang regular expressions 17431 - to be used for excluding messages. 17432 - items: 17433 - type: string 17434 - type: array 17435 - inclusionList: 17436 - description: |- 17437 - InclusionList specifies a list of Golang regular expressions 17438 - to be used for including messages. 17439 - items: 17440 - type: string 17441 - type: array 17442 - providerRef: 17443 - description: ProviderRef specifies which Provider this Alert should use. 17444 - properties: 17445 - name: 17446 - description: Name of the referent. 17447 - type: string 17448 - required: 17449 - - name 17450 - type: object 17451 - summary: 17452 - description: |- 17453 - Summary holds a short description of the impact and affected cluster. 17454 - Deprecated: Use EventMetadata instead. 17455 - maxLength: 255 17456 - type: string 17457 - suspend: 17458 - description: |- 17459 - Suspend tells the controller to suspend subsequent 17460 - events handling for this Alert. 17461 - type: boolean 17462 - required: 17463 - - eventSources 17464 - - providerRef 17465 - type: object 17466 - type: object 17467 - served: true 17468 - storage: true 17469 - subresources: {} 17470 + app.kubernetes.io/version: v2.7.5 17471 + spec: 17472 + containers: 17473 + - args: 17474 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 17475 + - --watch-all-namespaces=true 17476 + - --log-level=info 17477 + - --log-encoding=json 17478 + - --enable-leader-election 17479 + env: 17480 + - name: RUNTIME_NAMESPACE 17481 + valueFrom: 17482 + fieldRef: 17483 + fieldPath: metadata.namespace 17484 + - name: GOMEMLIMIT 17485 + valueFrom: 17486 + resourceFieldRef: 17487 + containerName: manager 17488 + resource: limits.memory 17489 + image: ghcr.io/fluxcd/helm-controller:v1.4.5 17490 + imagePullPolicy: IfNotPresent 17491 + livenessProbe: 17492 + httpGet: 17493 + path: /healthz 17494 + port: healthz 17495 + name: manager 17496 + ports: 17497 + - containerPort: 8080 17498 + name: http-prom 17499 + protocol: TCP 17500 + - containerPort: 9440 17501 + name: healthz 17502 + protocol: TCP 17503 + readinessProbe: 17504 + httpGet: 17505 + path: /readyz 17506 + port: healthz 17507 + resources: 17508 + limits: 17509 + cpu: 1000m 17510 + memory: 1Gi 17511 + requests: 17512 + cpu: 100m 17513 + memory: 64Mi 17514 + securityContext: 17515 + allowPrivilegeEscalation: false 17516 + capabilities: 17517 + drop: 17518 + - ALL 17519 + readOnlyRootFilesystem: true 17520 + runAsNonRoot: true 17521 + seccompProfile: 17522 + type: RuntimeDefault 17523 + volumeMounts: 17524 + - mountPath: /tmp 17525 + name: temp 17526 + nodeSelector: 17527 + kubernetes.io/os: linux 17528 + priorityClassName: system-cluster-critical 17529 + securityContext: 17530 + fsGroup: 1337 17531 + serviceAccountName: helm-controller 17532 + terminationGracePeriodSeconds: 600 17533 + volumes: 17534 + - emptyDir: {} 17535 + name: temp 17536 --- 17537 apiVersion: apiextensions.k8s.io/v1 17538 kind: CustomResourceDefinition 17539 metadata: 17540 - annotations: 17541 - controller-gen.kubebuilder.io/version: v0.19.0 17542 - labels: 17543 - app.kubernetes.io/component: notification-controller 17544 - app.kubernetes.io/instance: flux-system 17545 - app.kubernetes.io/part-of: flux 17546 - app.kubernetes.io/version: v2.7.3 17547 - name: providers.notification.toolkit.fluxcd.io 17548 + annotations: 17549 + controller-gen.kubebuilder.io/version: v0.19.0 17550 + labels: 17551 + app.kubernetes.io/component: notification-controller 17552 + app.kubernetes.io/instance: flux-system 17553 + app.kubernetes.io/part-of: flux 17554 + app.kubernetes.io/version: v2.7.5 17555 + name: alerts.notification.toolkit.fluxcd.io 17556 spec: 17557 - group: notification.toolkit.fluxcd.io 17558 - names: 17559 - kind: Provider 17560 - listKind: ProviderList 17561 - plural: providers 17562 - singular: provider 17563 - scope: Namespaced 17564 - versions: 17565 - - additionalPrinterColumns: 17566 - - jsonPath: .metadata.creationTimestamp 17567 - name: Age 17568 - type: date 17569 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 17570 - name: Ready 17571 - type: string 17572 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 17573 - name: Status 17574 - type: string 17575 - deprecated: true 17576 - deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 17577 - name: v1beta2 17578 - schema: 17579 - openAPIV3Schema: 17580 - description: Provider is the Schema for the providers API. 17581 - properties: 17582 - apiVersion: 17583 - description: |- 17584 - APIVersion defines the versioned schema of this representation of an object. 17585 - Servers should convert recognized schemas to the latest internal value, and 17586 - may reject unrecognized values. 17587 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17588 - type: string 17589 - kind: 17590 - description: |- 17591 - Kind is a string value representing the REST resource this object represents. 17592 - Servers may infer this from the endpoint the client submits requests to. 17593 - Cannot be updated. 17594 - In CamelCase. 17595 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17596 - type: string 17597 - metadata: 17598 - type: object 17599 - spec: 17600 - description: ProviderSpec defines the desired state of the Provider. 17601 - properties: 17602 - address: 17603 - description: |- 17604 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 17605 - What kind of endpoint depends on the specific Provider type being used. 17606 - For the generic Provider, for example, this is an HTTP/S address. 17607 - For other Provider types this could be a project ID or a namespace. 17608 - maxLength: 2048 17609 - type: string 17610 - certSecretRef: 17611 - description: |- 17612 - CertSecretRef specifies the Secret containing 17613 - a PEM-encoded CA certificate (in the `ca.crt` key). 17614 - 17615 - Note: Support for the `caFile` key has 17616 - been deprecated. 17617 - properties: 17618 - name: 17619 - description: Name of the referent. 17620 - type: string 17621 - required: 17622 - - name 17623 - type: object 17624 - channel: 17625 - description: Channel specifies the destination channel where events should be posted. 17626 - maxLength: 2048 17627 - type: string 17628 - interval: 17629 - description: Interval at which to reconcile the Provider with its Secret references. 17630 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17631 - type: string 17632 - proxy: 17633 - description: Proxy the HTTP/S address of the proxy server. 17634 - maxLength: 2048 17635 - pattern: ^(http|https)://.*$ 17636 - type: string 17637 - secretRef: 17638 - description: |- 17639 - SecretRef specifies the Secret containing the authentication 17640 - credentials for this Provider. 17641 - properties: 17642 - name: 17643 - description: Name of the referent. 17644 - type: string 17645 - required: 17646 - - name 17647 - type: object 17648 - suspend: 17649 - description: |- 17650 - Suspend tells the controller to suspend subsequent 17651 - events handling for this Provider. 17652 - type: boolean 17653 - timeout: 17654 - description: Timeout for sending alerts to the Provider. 17655 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 17656 - type: string 17657 - type: 17658 - description: Type specifies which Provider implementation to use. 17659 - enum: 17660 - - slack 17661 - - discord 17662 - - msteams 17663 - - rocket 17664 - - generic 17665 - - generic-hmac 17666 - - github 17667 - - gitlab 17668 - - gitea 17669 - - bitbucketserver 17670 - - bitbucket 17671 - - azuredevops 17672 - - googlechat 17673 - - googlepubsub 17674 - - webex 17675 - - sentry 17676 - - azureeventhub 17677 - - telegram 17678 - - lark 17679 - - matrix 17680 - - opsgenie 17681 - - alertmanager 17682 - - grafana 17683 - - githubdispatch 17684 - - pagerduty 17685 - - datadog 17686 - type: string 17687 - username: 17688 - description: Username specifies the name under which events are posted. 17689 - maxLength: 2048 17690 - type: string 17691 - required: 17692 - - type 17693 - type: object 17694 - status: 17695 - default: 17696 - observedGeneration: -1 17697 - description: ProviderStatus defines the observed state of the Provider. 17698 - properties: 17699 - conditions: 17700 - description: Conditions holds the conditions for the Provider. 17701 - items: 17702 - description: Condition contains details for one aspect of the current state of this API 17703 - Resource. 17704 - properties: 17705 - lastTransitionTime: 17706 - description: |- 17707 - lastTransitionTime is the last time the condition transitioned from one status to another. 17708 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17709 - format: date-time 17710 - type: string 17711 - message: 17712 - description: |- 17713 - message is a human readable message indicating details about the transition. 17714 - This may be an empty string. 17715 - maxLength: 32768 17716 - type: string 17717 - observedGeneration: 17718 - description: |- 17719 - observedGeneration represents the .metadata.generation that the condition was set based upon. 17720 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17721 - with respect to the current state of the instance. 17722 - format: int64 17723 - minimum: 0 17724 - type: integer 17725 - reason: 17726 - description: |- 17727 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 17728 - Producers of specific condition types may define expected values and meanings for this field, 17729 - and whether the values are considered a guaranteed API. 17730 - The value should be a CamelCase string. 17731 - This field may not be empty. 17732 - maxLength: 1024 17733 - minLength: 1 17734 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17735 - type: string 17736 - status: 17737 - description: status of the condition, one of True, False, Unknown. 17738 - enum: 17739 - - "True" 17740 - - "False" 17741 - - Unknown 17742 - type: string 17743 - type: 17744 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 17745 - maxLength: 316 17746 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17747 - type: string 17748 - required: 17749 - - lastTransitionTime 17750 - - message 17751 - - reason 17752 - - status 17753 - - type 17754 - type: object 17755 - type: array 17756 - lastHandledReconcileAt: 17757 - description: |- 17758 - LastHandledReconcileAt holds the value of the most recent 17759 - reconcile request value, so a change of the annotation value 17760 - can be detected. 17761 - type: string 17762 - observedGeneration: 17763 - description: ObservedGeneration is the last reconciled generation. 17764 - format: int64 17765 - type: integer 17766 - type: object 17767 + group: notification.toolkit.fluxcd.io 17768 + names: 17769 + kind: Alert 17770 + listKind: AlertList 17771 + plural: alerts 17772 + singular: alert 17773 + scope: Namespaced 17774 + versions: 17775 + - additionalPrinterColumns: 17776 + - jsonPath: .metadata.creationTimestamp 17777 + name: Age 17778 + type: date 17779 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 17780 + name: Ready 17781 + type: string 17782 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 17783 + name: Status 17784 + type: string 17785 + deprecated: true 17786 + deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 17787 + name: v1beta2 17788 + schema: 17789 + openAPIV3Schema: 17790 + description: Alert is the Schema for the alerts API 17791 + properties: 17792 + apiVersion: 17793 + description: |- 17794 + APIVersion defines the versioned schema of this representation of an object. 17795 + Servers should convert recognized schemas to the latest internal value, and 17796 + may reject unrecognized values. 17797 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17798 + type: string 17799 + kind: 17800 + description: |- 17801 + Kind is a string value representing the REST resource this object represents. 17802 + Servers may infer this from the endpoint the client submits requests to. 17803 + Cannot be updated. 17804 + In CamelCase. 17805 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17806 + type: string 17807 + metadata: 17808 + type: object 17809 + spec: 17810 + description: AlertSpec defines an alerting rule for events involving a 17811 + list of objects. 17812 + properties: 17813 + eventMetadata: 17814 + additionalProperties: 17815 + type: string 17816 + description: |- 17817 + EventMetadata is an optional field for adding metadata to events dispatched by the 17818 + controller. This can be used for enhancing the context of the event. If a field 17819 + would override one already present on the original event as generated by the emitter, 17820 + then the override doesn't happen, i.e. the original value is preserved, and an info 17821 + log is printed. 17822 type: object 17823 - served: true 17824 - storage: false 17825 - subresources: 17826 - status: {} 17827 - - additionalPrinterColumns: 17828 - - jsonPath: .metadata.creationTimestamp 17829 - name: Age 17830 - type: date 17831 - name: v1beta3 17832 - schema: 17833 - openAPIV3Schema: 17834 - description: Provider is the Schema for the providers API 17835 - properties: 17836 + eventSeverity: 17837 + default: info 17838 + description: |- 17839 + EventSeverity specifies how to filter events based on severity. 17840 + If set to 'info' no events will be filtered. 17841 + enum: 17842 + - info 17843 + - error 17844 + type: string 17845 + eventSources: 17846 + description: |- 17847 + EventSources specifies how to filter events based 17848 + on the involved object kind, name and namespace. 17849 + items: 17850 + description: |- 17851 + CrossNamespaceObjectReference contains enough information to let you locate the 17852 + typed referenced object at cluster level 17853 + properties: 17854 apiVersion: 17855 - description: |- 17856 - APIVersion defines the versioned schema of this representation of an object. 17857 - Servers should convert recognized schemas to the latest internal value, and 17858 - may reject unrecognized values. 17859 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17860 + description: API version of the referent 17861 + type: string 17862 + kind: 17863 + description: Kind of the referent 17864 + enum: 17865 + - Bucket 17866 + - GitRepository 17867 + - Kustomization 17868 + - HelmRelease 17869 + - HelmChart 17870 + - HelmRepository 17871 + - ImageRepository 17872 + - ImagePolicy 17873 + - ImageUpdateAutomation 17874 + - OCIRepository 17875 + type: string 17876 + matchLabels: 17877 + additionalProperties: 17878 type: string 17879 + description: |- 17880 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 17881 + map is equivalent to an element of matchExpressions, whose key field is "key", the 17882 + operator is "In", and the values array contains only "value". The requirements are ANDed. 17883 + MatchLabels requires the name to be set to `*`. 17884 + type: object 17885 + name: 17886 + description: |- 17887 + Name of the referent 17888 + If multiple resources are targeted `*` may be set. 17889 + maxLength: 253 17890 + minLength: 1 17891 + type: string 17892 + namespace: 17893 + description: Namespace of the referent 17894 + maxLength: 253 17895 + minLength: 1 17896 + type: string 17897 + required: 17898 + - kind 17899 + - name 17900 + type: object 17901 + type: array 17902 + exclusionList: 17903 + description: |- 17904 + ExclusionList specifies a list of Golang regular expressions 17905 + to be used for excluding messages. 17906 + items: 17907 + type: string 17908 + type: array 17909 + inclusionList: 17910 + description: |- 17911 + InclusionList specifies a list of Golang regular expressions 17912 + to be used for including messages. 17913 + items: 17914 + type: string 17915 + type: array 17916 + providerRef: 17917 + description: ProviderRef specifies which Provider this Alert should 17918 + use. 17919 + properties: 17920 + name: 17921 + description: Name of the referent. 17922 + type: string 17923 + required: 17924 + - name 17925 + type: object 17926 + summary: 17927 + description: Summary holds a short description of the impact and affected 17928 + cluster. 17929 + maxLength: 255 17930 + type: string 17931 + suspend: 17932 + description: |- 17933 + Suspend tells the controller to suspend subsequent 17934 + events handling for this Alert. 17935 + type: boolean 17936 + required: 17937 + - eventSources 17938 + - providerRef 17939 + type: object 17940 + status: 17941 + default: 17942 + observedGeneration: -1 17943 + description: AlertStatus defines the observed state of the Alert. 17944 + properties: 17945 + conditions: 17946 + description: Conditions holds the conditions for the Alert. 17947 + items: 17948 + description: Condition contains details for one aspect of the current 17949 + state of this API Resource. 17950 + properties: 17951 + lastTransitionTime: 17952 + description: |- 17953 + lastTransitionTime is the last time the condition transitioned from one status to another. 17954 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17955 + format: date-time 17956 + type: string 17957 + message: 17958 + description: |- 17959 + message is a human readable message indicating details about the transition. 17960 + This may be an empty string. 17961 + maxLength: 32768 17962 + type: string 17963 + observedGeneration: 17964 + description: |- 17965 + observedGeneration represents the .metadata.generation that the condition was set based upon. 17966 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17967 + with respect to the current state of the instance. 17968 + format: int64 17969 + minimum: 0 17970 + type: integer 17971 + reason: 17972 + description: |- 17973 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 17974 + Producers of specific condition types may define expected values and meanings for this field, 17975 + and whether the values are considered a guaranteed API. 17976 + The value should be a CamelCase string. 17977 + This field may not be empty. 17978 + maxLength: 1024 17979 + minLength: 1 17980 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17981 + type: string 17982 + status: 17983 + description: status of the condition, one of True, False, Unknown. 17984 + enum: 17985 + - "True" 17986 + - "False" 17987 + - Unknown 17988 + type: string 17989 + type: 17990 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 17991 + maxLength: 316 17992 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17993 + type: string 17994 + required: 17995 + - lastTransitionTime 17996 + - message 17997 + - reason 17998 + - status 17999 + - type 18000 + type: object 18001 + type: array 18002 + lastHandledReconcileAt: 18003 + description: |- 18004 + LastHandledReconcileAt holds the value of the most recent 18005 + reconcile request value, so a change of the annotation value 18006 + can be detected. 18007 + type: string 18008 + observedGeneration: 18009 + description: ObservedGeneration is the last observed generation. 18010 + format: int64 18011 + type: integer 18012 + type: object 18013 + type: object 18014 + served: true 18015 + storage: false 18016 + subresources: 18017 + status: {} 18018 + - additionalPrinterColumns: 18019 + - jsonPath: .metadata.creationTimestamp 18020 + name: Age 18021 + type: date 18022 + name: v1beta3 18023 + schema: 18024 + openAPIV3Schema: 18025 + description: Alert is the Schema for the alerts API 18026 + properties: 18027 + apiVersion: 18028 + description: |- 18029 + APIVersion defines the versioned schema of this representation of an object. 18030 + Servers should convert recognized schemas to the latest internal value, and 18031 + may reject unrecognized values. 18032 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18033 + type: string 18034 + kind: 18035 + description: |- 18036 + Kind is a string value representing the REST resource this object represents. 18037 + Servers may infer this from the endpoint the client submits requests to. 18038 + Cannot be updated. 18039 + In CamelCase. 18040 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18041 + type: string 18042 + metadata: 18043 + type: object 18044 + spec: 18045 + description: AlertSpec defines an alerting rule for events involving a 18046 + list of objects. 18047 + properties: 18048 + eventMetadata: 18049 + additionalProperties: 18050 + type: string 18051 + description: |- 18052 + EventMetadata is an optional field for adding metadata to events dispatched by the 18053 + controller. This can be used for enhancing the context of the event. If a field 18054 + would override one already present on the original event as generated by the emitter, 18055 + then the override doesn't happen, i.e. the original value is preserved, and an info 18056 + log is printed. 18057 + type: object 18058 + eventSeverity: 18059 + default: info 18060 + description: |- 18061 + EventSeverity specifies how to filter events based on severity. 18062 + If set to 'info' no events will be filtered. 18063 + enum: 18064 + - info 18065 + - error 18066 + type: string 18067 + eventSources: 18068 + description: |- 18069 + EventSources specifies how to filter events based 18070 + on the involved object kind, name and namespace. 18071 + items: 18072 + description: |- 18073 + CrossNamespaceObjectReference contains enough information to let you locate the 18074 + typed referenced object at cluster level 18075 + properties: 18076 + apiVersion: 18077 + description: API version of the referent 18078 + type: string 18079 kind: 18080 - description: |- 18081 - Kind is a string value representing the REST resource this object represents. 18082 - Servers may infer this from the endpoint the client submits requests to. 18083 - Cannot be updated. 18084 - In CamelCase. 18085 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18086 + description: Kind of the referent 18087 + enum: 18088 + - Bucket 18089 + - GitRepository 18090 + - Kustomization 18091 + - HelmRelease 18092 + - HelmChart 18093 + - HelmRepository 18094 + - ImageRepository 18095 + - ImagePolicy 18096 + - ImageUpdateAutomation 18097 + - OCIRepository 18098 + type: string 18099 + matchLabels: 18100 + additionalProperties: 18101 type: string 18102 - metadata: 18103 - type: object 18104 - spec: 18105 - description: ProviderSpec defines the desired state of the Provider. 18106 - properties: 18107 - address: 18108 - description: |- 18109 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 18110 - What kind of endpoint depends on the specific Provider type being used. 18111 - For the generic Provider, for example, this is an HTTP/S address. 18112 - For other Provider types this could be a project ID or a namespace. 18113 - maxLength: 2048 18114 - type: string 18115 - certSecretRef: 18116 - description: |- 18117 - CertSecretRef specifies the Secret containing TLS certificates 18118 - for secure communication. 18119 + description: |- 18120 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 18121 + map is equivalent to an element of matchExpressions, whose key field is "key", the 18122 + operator is "In", and the values array contains only "value". The requirements are ANDed. 18123 + MatchLabels requires the name to be set to `*`. 18124 + type: object 18125 + name: 18126 + description: |- 18127 + Name of the referent 18128 + If multiple resources are targeted `*` may be set. 18129 + maxLength: 253 18130 + minLength: 1 18131 + type: string 18132 + namespace: 18133 + description: Namespace of the referent 18134 + maxLength: 253 18135 + minLength: 1 18136 + type: string 18137 + required: 18138 + - kind 18139 + - name 18140 + type: object 18141 + type: array 18142 + exclusionList: 18143 + description: |- 18144 + ExclusionList specifies a list of Golang regular expressions 18145 + to be used for excluding messages. 18146 + items: 18147 + type: string 18148 + type: array 18149 + inclusionList: 18150 + description: |- 18151 + InclusionList specifies a list of Golang regular expressions 18152 + to be used for including messages. 18153 + items: 18154 + type: string 18155 + type: array 18156 + providerRef: 18157 + description: ProviderRef specifies which Provider this Alert should 18158 + use. 18159 + properties: 18160 + name: 18161 + description: Name of the referent. 18162 + type: string 18163 + required: 18164 + - name 18165 + type: object 18166 + summary: 18167 + description: |- 18168 + Summary holds a short description of the impact and affected cluster. 18169 + Deprecated: Use EventMetadata instead. 18170 + maxLength: 255 18171 + type: string 18172 + suspend: 18173 + description: |- 18174 + Suspend tells the controller to suspend subsequent 18175 + events handling for this Alert. 18176 + type: boolean 18177 + required: 18178 + - eventSources 18179 + - providerRef 18180 + type: object 18181 + type: object 18182 + served: true 18183 + storage: true 18184 + subresources: {} 18185 +--- 18186 +apiVersion: apiextensions.k8s.io/v1 18187 +kind: CustomResourceDefinition 18188 +metadata: 18189 + annotations: 18190 + controller-gen.kubebuilder.io/version: v0.19.0 18191 + labels: 18192 + app.kubernetes.io/component: notification-controller 18193 + app.kubernetes.io/instance: flux-system 18194 + app.kubernetes.io/part-of: flux 18195 + app.kubernetes.io/version: v2.7.5 18196 + name: providers.notification.toolkit.fluxcd.io 18197 +spec: 18198 + group: notification.toolkit.fluxcd.io 18199 + names: 18200 + kind: Provider 18201 + listKind: ProviderList 18202 + plural: providers 18203 + singular: provider 18204 + scope: Namespaced 18205 + versions: 18206 + - additionalPrinterColumns: 18207 + - jsonPath: .metadata.creationTimestamp 18208 + name: Age 18209 + type: date 18210 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 18211 + name: Ready 18212 + type: string 18213 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 18214 + name: Status 18215 + type: string 18216 + deprecated: true 18217 + deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 18218 + name: v1beta2 18219 + schema: 18220 + openAPIV3Schema: 18221 + description: Provider is the Schema for the providers API. 18222 + properties: 18223 + apiVersion: 18224 + description: |- 18225 + APIVersion defines the versioned schema of this representation of an object. 18226 + Servers should convert recognized schemas to the latest internal value, and 18227 + may reject unrecognized values. 18228 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18229 + type: string 18230 + kind: 18231 + description: |- 18232 + Kind is a string value representing the REST resource this object represents. 18233 + Servers may infer this from the endpoint the client submits requests to. 18234 + Cannot be updated. 18235 + In CamelCase. 18236 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18237 + type: string 18238 + metadata: 18239 + type: object 18240 + spec: 18241 + description: ProviderSpec defines the desired state of the Provider. 18242 + properties: 18243 + address: 18244 + description: |- 18245 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 18246 + What kind of endpoint depends on the specific Provider type being used. 18247 + For the generic Provider, for example, this is an HTTP/S address. 18248 + For other Provider types this could be a project ID or a namespace. 18249 + maxLength: 2048 18250 + type: string 18251 + certSecretRef: 18252 + description: |- 18253 + CertSecretRef specifies the Secret containing 18254 + a PEM-encoded CA certificate (in the `ca.crt` key). 18255 18256 - Supported configurations: 18257 - - CA-only: Server authentication (provide ca.crt only) 18258 - - mTLS: Mutual authentication (provide ca.crt + tls.crt + tls.key) 18259 - - Client-only: Client authentication with system CA (provide tls.crt + tls.key only) 18260 + Note: Support for the `caFile` key has 18261 + been deprecated. 18262 + properties: 18263 + name: 18264 + description: Name of the referent. 18265 + type: string 18266 + required: 18267 + - name 18268 + type: object 18269 + channel: 18270 + description: Channel specifies the destination channel where events 18271 + should be posted. 18272 + maxLength: 2048 18273 + type: string 18274 + interval: 18275 + description: Interval at which to reconcile the Provider with its 18276 + Secret references. 18277 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18278 + type: string 18279 + proxy: 18280 + description: Proxy the HTTP/S address of the proxy server. 18281 + maxLength: 2048 18282 + pattern: ^(http|https)://.*$ 18283 + type: string 18284 + secretRef: 18285 + description: |- 18286 + SecretRef specifies the Secret containing the authentication 18287 + credentials for this Provider. 18288 + properties: 18289 + name: 18290 + description: Name of the referent. 18291 + type: string 18292 + required: 18293 + - name 18294 + type: object 18295 + suspend: 18296 + description: |- 18297 + Suspend tells the controller to suspend subsequent 18298 + events handling for this Provider. 18299 + type: boolean 18300 + timeout: 18301 + description: Timeout for sending alerts to the Provider. 18302 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 18303 + type: string 18304 + type: 18305 + description: Type specifies which Provider implementation to use. 18306 + enum: 18307 + - slack 18308 + - discord 18309 + - msteams 18310 + - rocket 18311 + - generic 18312 + - generic-hmac 18313 + - github 18314 + - gitlab 18315 + - gitea 18316 + - bitbucketserver 18317 + - bitbucket 18318 + - azuredevops 18319 + - googlechat 18320 + - googlepubsub 18321 + - webex 18322 + - sentry 18323 + - azureeventhub 18324 + - telegram 18325 + - lark 18326 + - matrix 18327 + - opsgenie 18328 + - alertmanager 18329 + - grafana 18330 + - githubdispatch 18331 + - pagerduty 18332 + - datadog 18333 + type: string 18334 + username: 18335 + description: Username specifies the name under which events are posted. 18336 + maxLength: 2048 18337 + type: string 18338 + required: 18339 + - type 18340 + type: object 18341 + status: 18342 + default: 18343 + observedGeneration: -1 18344 + description: ProviderStatus defines the observed state of the Provider. 18345 + properties: 18346 + conditions: 18347 + description: Conditions holds the conditions for the Provider. 18348 + items: 18349 + description: Condition contains details for one aspect of the current 18350 + state of this API Resource. 18351 + properties: 18352 + lastTransitionTime: 18353 + description: |- 18354 + lastTransitionTime is the last time the condition transitioned from one status to another. 18355 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 18356 + format: date-time 18357 + type: string 18358 + message: 18359 + description: |- 18360 + message is a human readable message indicating details about the transition. 18361 + This may be an empty string. 18362 + maxLength: 32768 18363 + type: string 18364 + observedGeneration: 18365 + description: |- 18366 + observedGeneration represents the .metadata.generation that the condition was set based upon. 18367 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 18368 + with respect to the current state of the instance. 18369 + format: int64 18370 + minimum: 0 18371 + type: integer 18372 + reason: 18373 + description: |- 18374 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 18375 + Producers of specific condition types may define expected values and meanings for this field, 18376 + and whether the values are considered a guaranteed API. 18377 + The value should be a CamelCase string. 18378 + This field may not be empty. 18379 + maxLength: 1024 18380 + minLength: 1 18381 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 18382 + type: string 18383 + status: 18384 + description: status of the condition, one of True, False, Unknown. 18385 + enum: 18386 + - "True" 18387 + - "False" 18388 + - Unknown 18389 + type: string 18390 + type: 18391 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 18392 + maxLength: 316 18393 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 18394 + type: string 18395 + required: 18396 + - lastTransitionTime 18397 + - message 18398 + - reason 18399 + - status 18400 + - type 18401 + type: object 18402 + type: array 18403 + lastHandledReconcileAt: 18404 + description: |- 18405 + LastHandledReconcileAt holds the value of the most recent 18406 + reconcile request value, so a change of the annotation value 18407 + can be detected. 18408 + type: string 18409 + observedGeneration: 18410 + description: ObservedGeneration is the last reconciled generation. 18411 + format: int64 18412 + type: integer 18413 + type: object 18414 + type: object 18415 + served: true 18416 + storage: false 18417 + subresources: 18418 + status: {} 18419 + - additionalPrinterColumns: 18420 + - jsonPath: .metadata.creationTimestamp 18421 + name: Age 18422 + type: date 18423 + name: v1beta3 18424 + schema: 18425 + openAPIV3Schema: 18426 + description: Provider is the Schema for the providers API 18427 + properties: 18428 + apiVersion: 18429 + description: |- 18430 + APIVersion defines the versioned schema of this representation of an object. 18431 + Servers should convert recognized schemas to the latest internal value, and 18432 + may reject unrecognized values. 18433 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18434 + type: string 18435 + kind: 18436 + description: |- 18437 + Kind is a string value representing the REST resource this object represents. 18438 + Servers may infer this from the endpoint the client submits requests to. 18439 + Cannot be updated. 18440 + In CamelCase. 18441 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18442 + type: string 18443 + metadata: 18444 + type: object 18445 + spec: 18446 + description: ProviderSpec defines the desired state of the Provider. 18447 + properties: 18448 + address: 18449 + description: |- 18450 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 18451 + What kind of endpoint depends on the specific Provider type being used. 18452 + For the generic Provider, for example, this is an HTTP/S address. 18453 + For other Provider types this could be a project ID or a namespace. 18454 + maxLength: 2048 18455 + type: string 18456 + certSecretRef: 18457 + description: |- 18458 + CertSecretRef specifies the Secret containing TLS certificates 18459 + for secure communication. 18460 18461 - Legacy keys "caFile", "certFile", "keyFile" are supported but deprecated. Use "ca.crt", "tls.crt", "tls.key" instead. 18462 - properties: 18463 - name: 18464 - description: Name of the referent. 18465 - type: string 18466 - required: 18467 - - name 18468 - type: object 18469 - channel: 18470 - description: Channel specifies the destination channel where events should be posted. 18471 - maxLength: 2048 18472 - type: string 18473 - commitStatusExpr: 18474 - description: |- 18475 - CommitStatusExpr is a CEL expression that evaluates to a string value 18476 - that can be used to generate a custom commit status message for use 18477 - with eligible Provider types (github, gitlab, gitea, bitbucketserver, 18478 - bitbucket, azuredevops). Supported variables are: event, provider, 18479 - and alert. 18480 - type: string 18481 - interval: 18482 - description: |- 18483 - Interval at which to reconcile the Provider with its Secret references. 18484 - Deprecated and not used in v1beta3. 18485 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18486 - type: string 18487 - proxy: 18488 - description: |- 18489 - Proxy the HTTP/S address of the proxy server. 18490 - Deprecated: Use ProxySecretRef instead. Will be removed in v1. 18491 - maxLength: 2048 18492 - pattern: ^(http|https)://.*$ 18493 - type: string 18494 - proxySecretRef: 18495 - description: |- 18496 - ProxySecretRef specifies the Secret containing the proxy configuration 18497 - for this Provider. The Secret should contain an 'address' key with the 18498 - HTTP/S address of the proxy server. Optional 'username' and 'password' 18499 - keys can be provided for proxy authentication. 18500 - properties: 18501 - name: 18502 - description: Name of the referent. 18503 - type: string 18504 - required: 18505 - - name 18506 - type: object 18507 - secretRef: 18508 - description: |- 18509 - SecretRef specifies the Secret containing the authentication 18510 - credentials for this Provider. 18511 - properties: 18512 - name: 18513 - description: Name of the referent. 18514 - type: string 18515 - required: 18516 - - name 18517 - type: object 18518 - serviceAccountName: 18519 - description: |- 18520 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to 18521 - authenticate with cloud provider services through workload identity. 18522 - This enables multi-tenant authentication without storing static credentials. 18523 + Supported configurations: 18524 + - CA-only: Server authentication (provide ca.crt only) 18525 + - mTLS: Mutual authentication (provide ca.crt + tls.crt + tls.key) 18526 + - Client-only: Client authentication with system CA (provide tls.crt + tls.key only) 18527 + 18528 + Legacy keys "caFile", "certFile", "keyFile" are supported but deprecated. Use "ca.crt", "tls.crt", "tls.key" instead. 18529 + properties: 18530 + name: 18531 + description: Name of the referent. 18532 + type: string 18533 + required: 18534 + - name 18535 + type: object 18536 + channel: 18537 + description: Channel specifies the destination channel where events 18538 + should be posted. 18539 + maxLength: 2048 18540 + type: string 18541 + commitStatusExpr: 18542 + description: |- 18543 + CommitStatusExpr is a CEL expression that evaluates to a string value 18544 + that can be used to generate a custom commit status message for use 18545 + with eligible Provider types (github, gitlab, gitea, bitbucketserver, 18546 + bitbucket, azuredevops). Supported variables are: event, provider, 18547 + and alert. 18548 + type: string 18549 + interval: 18550 + description: |- 18551 + Interval at which to reconcile the Provider with its Secret references. 18552 + Deprecated and not used in v1beta3. 18553 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18554 + type: string 18555 + proxy: 18556 + description: |- 18557 + Proxy the HTTP/S address of the proxy server. 18558 + Deprecated: Use ProxySecretRef instead. Will be removed in v1. 18559 + maxLength: 2048 18560 + pattern: ^(http|https)://.*$ 18561 + type: string 18562 + proxySecretRef: 18563 + description: |- 18564 + ProxySecretRef specifies the Secret containing the proxy configuration 18565 + for this Provider. The Secret should contain an 'address' key with the 18566 + HTTP/S address of the proxy server. Optional 'username' and 'password' 18567 + keys can be provided for proxy authentication. 18568 + properties: 18569 + name: 18570 + description: Name of the referent. 18571 + type: string 18572 + required: 18573 + - name 18574 + type: object 18575 + secretRef: 18576 + description: |- 18577 + SecretRef specifies the Secret containing the authentication 18578 + credentials for this Provider. 18579 + properties: 18580 + name: 18581 + description: Name of the referent. 18582 + type: string 18583 + required: 18584 + - name 18585 + type: object 18586 + serviceAccountName: 18587 + description: |- 18588 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to 18589 + authenticate with cloud provider services through workload identity. 18590 + This enables multi-tenant authentication without storing static credentials. 18591 18592 - Supported provider types: azureeventhub, azuredevops, googlepubsub 18593 + Supported provider types: azureeventhub, azuredevops, googlepubsub 18594 18595 - When specified, the controller will: 18596 - 1. Create an OIDC token for the specified ServiceAccount 18597 - 2. Exchange it for cloud provider credentials via STS 18598 - 3. Use the obtained credentials for API authentication 18599 + When specified, the controller will: 18600 + 1. Create an OIDC token for the specified ServiceAccount 18601 + 2. Exchange it for cloud provider credentials via STS 18602 + 3. Use the obtained credentials for API authentication 18603 18604 - When unspecified, controller-level authentication is used (single-tenant). 18605 + When unspecified, controller-level authentication is used (single-tenant). 18606 18607 - An error is thrown if static credentials are also defined in SecretRef. 18608 - This field requires the ObjectLevelWorkloadIdentity feature gate to be enabled. 18609 - type: string 18610 - suspend: 18611 - description: |- 18612 - Suspend tells the controller to suspend subsequent 18613 - events handling for this Provider. 18614 - type: boolean 18615 - timeout: 18616 - description: Timeout for sending alerts to the Provider. 18617 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 18618 - type: string 18619 - type: 18620 - description: Type specifies which Provider implementation to use. 18621 - enum: 18622 - - slack 18623 - - discord 18624 - - msteams 18625 - - rocket 18626 - - generic 18627 - - generic-hmac 18628 - - github 18629 - - gitlab 18630 - - gitea 18631 - - bitbucketserver 18632 - - bitbucket 18633 - - azuredevops 18634 - - googlechat 18635 - - googlepubsub 18636 - - webex 18637 - - sentry 18638 - - azureeventhub 18639 - - telegram 18640 - - lark 18641 - - matrix 18642 - - opsgenie 18643 - - alertmanager 18644 - - grafana 18645 - - githubdispatch 18646 - - pagerduty 18647 - - datadog 18648 - - nats 18649 - - zulip 18650 - - otel 18651 - type: string 18652 - username: 18653 - description: Username specifies the name under which events are posted. 18654 - maxLength: 2048 18655 - type: string 18656 - required: 18657 - - type 18658 - type: object 18659 - x-kubernetes-validations: 18660 - - message: spec.commitStatusExpr is only supported for the 'github', 'gitlab', 'gitea', 'bitbucketserver', 18661 - 'bitbucket', 'azuredevops' provider types 18662 - rule: self.type == 'github' || self.type == 'gitlab' || self.type == 'gitea' || self.type == 18663 - 'bitbucketserver' || self.type == 'bitbucket' || self.type == 'azuredevops' || !has(self.commitStatusExpr) 18664 - type: object 18665 - served: true 18666 - storage: true 18667 - subresources: {} 18668 + An error is thrown if static credentials are also defined in SecretRef. 18669 + This field requires the ObjectLevelWorkloadIdentity feature gate to be enabled. 18670 + type: string 18671 + suspend: 18672 + description: |- 18673 + Suspend tells the controller to suspend subsequent 18674 + events handling for this Provider. 18675 + type: boolean 18676 + timeout: 18677 + description: Timeout for sending alerts to the Provider. 18678 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 18679 + type: string 18680 + type: 18681 + description: Type specifies which Provider implementation to use. 18682 + enum: 18683 + - slack 18684 + - discord 18685 + - msteams 18686 + - rocket 18687 + - generic 18688 + - generic-hmac 18689 + - github 18690 + - gitlab 18691 + - gitea 18692 + - bitbucketserver 18693 + - bitbucket 18694 + - azuredevops 18695 + - googlechat 18696 + - googlepubsub 18697 + - webex 18698 + - sentry 18699 + - azureeventhub 18700 + - telegram 18701 + - lark 18702 + - matrix 18703 + - opsgenie 18704 + - alertmanager 18705 + - grafana 18706 + - githubdispatch 18707 + - pagerduty 18708 + - datadog 18709 + - nats 18710 + - zulip 18711 + - otel 18712 + type: string 18713 + username: 18714 + description: Username specifies the name under which events are posted. 18715 + maxLength: 2048 18716 + type: string 18717 + required: 18718 + - type 18719 + type: object 18720 + x-kubernetes-validations: 18721 + - message: spec.commitStatusExpr is only supported for the 'github', 'gitlab', 18722 + 'gitea', 'bitbucketserver', 'bitbucket', 'azuredevops' provider types 18723 + rule: self.type == 'github' || self.type == 'gitlab' || self.type == 18724 + 'gitea' || self.type == 'bitbucketserver' || self.type == 'bitbucket' 18725 + || self.type == 'azuredevops' || !has(self.commitStatusExpr) 18726 + type: object 18727 + served: true 18728 + storage: true 18729 + subresources: {} 18730 --- 18731 apiVersion: apiextensions.k8s.io/v1 18732 kind: CustomResourceDefinition 18733 metadata: 18734 - annotations: 18735 - controller-gen.kubebuilder.io/version: v0.19.0 18736 - labels: 18737 - app.kubernetes.io/component: notification-controller 18738 - app.kubernetes.io/instance: flux-system 18739 - app.kubernetes.io/part-of: flux 18740 - app.kubernetes.io/version: v2.7.3 18741 - name: receivers.notification.toolkit.fluxcd.io 18742 + annotations: 18743 + controller-gen.kubebuilder.io/version: v0.19.0 18744 + labels: 18745 + app.kubernetes.io/component: notification-controller 18746 + app.kubernetes.io/instance: flux-system 18747 + app.kubernetes.io/part-of: flux 18748 + app.kubernetes.io/version: v2.7.5 18749 + name: receivers.notification.toolkit.fluxcd.io 18750 spec: 18751 - group: notification.toolkit.fluxcd.io 18752 - names: 18753 - kind: Receiver 18754 - listKind: ReceiverList 18755 - plural: receivers 18756 - singular: receiver 18757 - scope: Namespaced 18758 - versions: 18759 - - additionalPrinterColumns: 18760 - - jsonPath: .metadata.creationTimestamp 18761 - name: Age 18762 - type: date 18763 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 18764 - name: Ready 18765 - type: string 18766 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 18767 - name: Status 18768 - type: string 18769 - name: v1 18770 - schema: 18771 - openAPIV3Schema: 18772 - description: Receiver is the Schema for the receivers API. 18773 - properties: 18774 + group: notification.toolkit.fluxcd.io 18775 + names: 18776 + kind: Receiver 18777 + listKind: ReceiverList 18778 + plural: receivers 18779 + singular: receiver 18780 + scope: Namespaced 18781 + versions: 18782 + - additionalPrinterColumns: 18783 + - jsonPath: .metadata.creationTimestamp 18784 + name: Age 18785 + type: date 18786 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 18787 + name: Ready 18788 + type: string 18789 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 18790 + name: Status 18791 + type: string 18792 + name: v1 18793 + schema: 18794 + openAPIV3Schema: 18795 + description: Receiver is the Schema for the receivers API. 18796 + properties: 18797 + apiVersion: 18798 + description: |- 18799 + APIVersion defines the versioned schema of this representation of an object. 18800 + Servers should convert recognized schemas to the latest internal value, and 18801 + may reject unrecognized values. 18802 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18803 + type: string 18804 + kind: 18805 + description: |- 18806 + Kind is a string value representing the REST resource this object represents. 18807 + Servers may infer this from the endpoint the client submits requests to. 18808 + Cannot be updated. 18809 + In CamelCase. 18810 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18811 + type: string 18812 + metadata: 18813 + type: object 18814 + spec: 18815 + description: ReceiverSpec defines the desired state of the Receiver. 18816 + properties: 18817 + events: 18818 + description: |- 18819 + Events specifies the list of event types to handle, 18820 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 18821 + items: 18822 + type: string 18823 + type: array 18824 + interval: 18825 + default: 10m 18826 + description: Interval at which to reconcile the Receiver with its 18827 + Secret references. 18828 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18829 + type: string 18830 + resourceFilter: 18831 + description: |- 18832 + ResourceFilter is a CEL expression expected to return a boolean that is 18833 + evaluated for each resource referenced in the Resources field when a 18834 + webhook is received. If the expression returns false then the controller 18835 + will not request a reconciliation for the resource. 18836 + When the expression is specified the controller will parse it and mark 18837 + the object as terminally failed if the expression is invalid or does not 18838 + return a boolean. 18839 + type: string 18840 + resources: 18841 + description: A list of resources to be notified about changes. 18842 + items: 18843 + description: |- 18844 + CrossNamespaceObjectReference contains enough information to let you locate the 18845 + typed referenced object at cluster level 18846 + properties: 18847 apiVersion: 18848 - description: |- 18849 - APIVersion defines the versioned schema of this representation of an object. 18850 - Servers should convert recognized schemas to the latest internal value, and 18851 - may reject unrecognized values. 18852 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18853 - type: string 18854 + description: API version of the referent 18855 + type: string 18856 kind: 18857 - description: |- 18858 - Kind is a string value representing the REST resource this object represents. 18859 - Servers may infer this from the endpoint the client submits requests to. 18860 - Cannot be updated. 18861 - In CamelCase. 18862 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18863 + description: Kind of the referent 18864 + enum: 18865 + - Bucket 18866 + - GitRepository 18867 + - Kustomization 18868 + - HelmRelease 18869 + - HelmChart 18870 + - HelmRepository 18871 + - ImageRepository 18872 + - ImagePolicy 18873 + - ImageUpdateAutomation 18874 + - OCIRepository 18875 + type: string 18876 + matchLabels: 18877 + additionalProperties: 18878 type: string 18879 - metadata: 18880 - type: object 18881 - spec: 18882 - description: ReceiverSpec defines the desired state of the Receiver. 18883 - properties: 18884 - events: 18885 - description: |- 18886 - Events specifies the list of event types to handle, 18887 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 18888 - items: 18889 - type: string 18890 - type: array 18891 - interval: 18892 - default: 10m 18893 - description: Interval at which to reconcile the Receiver with its Secret references. 18894 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18895 - type: string 18896 - resourceFilter: 18897 - description: |- 18898 - ResourceFilter is a CEL expression expected to return a boolean that is 18899 - evaluated for each resource referenced in the Resources field when a 18900 - webhook is received. If the expression returns false then the controller 18901 - will not request a reconciliation for the resource. 18902 - When the expression is specified the controller will parse it and mark 18903 - the object as terminally failed if the expression is invalid or does not 18904 - return a boolean. 18905 - type: string 18906 - resources: 18907 - description: A list of resources to be notified about changes. 18908 - items: 18909 - description: |- 18910 - CrossNamespaceObjectReference contains enough information to let you locate the 18911 - typed referenced object at cluster level 18912 - properties: 18913 - apiVersion: 18914 - description: API version of the referent 18915 - type: string 18916 - kind: 18917 - description: Kind of the referent 18918 - enum: 18919 - - Bucket 18920 - - GitRepository 18921 - - Kustomization 18922 - - HelmRelease 18923 - - HelmChart 18924 - - HelmRepository 18925 - - ImageRepository 18926 - - ImagePolicy 18927 - - ImageUpdateAutomation 18928 - - OCIRepository 18929 - type: string 18930 - matchLabels: 18931 - additionalProperties: 18932 - type: string 18933 - description: |- 18934 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 18935 - map is equivalent to an element of matchExpressions, whose key field is "key", the 18936 - operator is "In", and the values array contains only "value". The requirements are ANDed. 18937 - MatchLabels requires the name to be set to `*`. 18938 - type: object 18939 - name: 18940 - description: |- 18941 - Name of the referent 18942 - If multiple resources are targeted `*` may be set. 18943 - maxLength: 253 18944 - minLength: 1 18945 - type: string 18946 - namespace: 18947 - description: Namespace of the referent 18948 - maxLength: 253 18949 - minLength: 1 18950 - type: string 18951 - required: 18952 - - kind 18953 - - name 18954 - type: object 18955 - type: array 18956 - secretRef: 18957 - description: |- 18958 - SecretRef specifies the Secret containing the token used 18959 - to validate the payload authenticity. 18960 - properties: 18961 - name: 18962 - description: Name of the referent. 18963 - type: string 18964 - required: 18965 - - name 18966 - type: object 18967 - suspend: 18968 - description: |- 18969 - Suspend tells the controller to suspend subsequent 18970 - events handling for this receiver. 18971 - type: boolean 18972 - type: 18973 - description: |- 18974 - Type of webhook sender, used to determine 18975 - the validation procedure and payload deserialization. 18976 - enum: 18977 - - generic 18978 - - generic-hmac 18979 - - github 18980 - - gitlab 18981 - - bitbucket 18982 - - harbor 18983 - - dockerhub 18984 - - quay 18985 - - gcr 18986 - - nexus 18987 - - acr 18988 - - cdevents 18989 - type: string 18990 - required: 18991 - - resources 18992 - - secretRef 18993 - - type 18994 - type: object 18995 - status: 18996 - default: 18997 - observedGeneration: -1 18998 - description: ReceiverStatus defines the observed state of the Receiver. 18999 - properties: 19000 - conditions: 19001 - description: Conditions holds the conditions for the Receiver. 19002 - items: 19003 - description: Condition contains details for one aspect of the current state of this API 19004 - Resource. 19005 - properties: 19006 - lastTransitionTime: 19007 - description: |- 19008 - lastTransitionTime is the last time the condition transitioned from one status to another. 19009 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19010 - format: date-time 19011 - type: string 19012 - message: 19013 - description: |- 19014 - message is a human readable message indicating details about the transition. 19015 - This may be an empty string. 19016 - maxLength: 32768 19017 - type: string 19018 - observedGeneration: 19019 - description: |- 19020 - observedGeneration represents the .metadata.generation that the condition was set based upon. 19021 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19022 - with respect to the current state of the instance. 19023 - format: int64 19024 - minimum: 0 19025 - type: integer 19026 - reason: 19027 - description: |- 19028 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 19029 - Producers of specific condition types may define expected values and meanings for this field, 19030 - and whether the values are considered a guaranteed API. 19031 - The value should be a CamelCase string. 19032 - This field may not be empty. 19033 - maxLength: 1024 19034 - minLength: 1 19035 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19036 - type: string 19037 - status: 19038 - description: status of the condition, one of True, False, Unknown. 19039 - enum: 19040 - - "True" 19041 - - "False" 19042 - - Unknown 19043 - type: string 19044 - type: 19045 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 19046 - maxLength: 316 19047 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19048 - type: string 19049 - required: 19050 - - lastTransitionTime 19051 - - message 19052 - - reason 19053 - - status 19054 - - type 19055 - type: object 19056 - type: array 19057 - lastHandledReconcileAt: 19058 - description: |- 19059 - LastHandledReconcileAt holds the value of the most recent 19060 - reconcile request value, so a change of the annotation value 19061 - can be detected. 19062 - type: string 19063 - observedGeneration: 19064 - description: ObservedGeneration is the last observed generation of the Receiver object. 19065 - format: int64 19066 - type: integer 19067 - webhookPath: 19068 - description: |- 19069 - WebhookPath is the generated incoming webhook address in the format 19070 - of '/hook/sha256sum(token+name+namespace)'. 19071 - type: string 19072 - type: object 19073 - type: object 19074 - served: true 19075 - storage: true 19076 - subresources: 19077 - status: {} 19078 - - additionalPrinterColumns: 19079 - - jsonPath: .metadata.creationTimestamp 19080 - name: Age 19081 - type: date 19082 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 19083 - name: Ready 19084 - type: string 19085 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 19086 - name: Status 19087 - type: string 19088 - deprecated: true 19089 - deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 19090 - name: v1beta2 19091 - schema: 19092 - openAPIV3Schema: 19093 - description: Receiver is the Schema for the receivers API. 19094 + description: |- 19095 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 19096 + map is equivalent to an element of matchExpressions, whose key field is "key", the 19097 + operator is "In", and the values array contains only "value". The requirements are ANDed. 19098 + MatchLabels requires the name to be set to `*`. 19099 + type: object 19100 + name: 19101 + description: |- 19102 + Name of the referent 19103 + If multiple resources are targeted `*` may be set. 19104 + maxLength: 253 19105 + minLength: 1 19106 + type: string 19107 + namespace: 19108 + description: Namespace of the referent 19109 + maxLength: 253 19110 + minLength: 1 19111 + type: string 19112 + required: 19113 + - kind 19114 + - name 19115 + type: object 19116 + type: array 19117 + secretRef: 19118 + description: |- 19119 + SecretRef specifies the Secret containing the token used 19120 + to validate the payload authenticity. 19121 properties: 19122 + name: 19123 + description: Name of the referent. 19124 + type: string 19125 + required: 19126 + - name 19127 + type: object 19128 + suspend: 19129 + description: |- 19130 + Suspend tells the controller to suspend subsequent 19131 + events handling for this receiver. 19132 + type: boolean 19133 + type: 19134 + description: |- 19135 + Type of webhook sender, used to determine 19136 + the validation procedure and payload deserialization. 19137 + enum: 19138 + - generic 19139 + - generic-hmac 19140 + - github 19141 + - gitlab 19142 + - bitbucket 19143 + - harbor 19144 + - dockerhub 19145 + - quay 19146 + - gcr 19147 + - nexus 19148 + - acr 19149 + - cdevents 19150 + type: string 19151 + required: 19152 + - resources 19153 + - secretRef 19154 + - type 19155 + type: object 19156 + status: 19157 + default: 19158 + observedGeneration: -1 19159 + description: ReceiverStatus defines the observed state of the Receiver. 19160 + properties: 19161 + conditions: 19162 + description: Conditions holds the conditions for the Receiver. 19163 + items: 19164 + description: Condition contains details for one aspect of the current 19165 + state of this API Resource. 19166 + properties: 19167 + lastTransitionTime: 19168 + description: |- 19169 + lastTransitionTime is the last time the condition transitioned from one status to another. 19170 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19171 + format: date-time 19172 + type: string 19173 + message: 19174 + description: |- 19175 + message is a human readable message indicating details about the transition. 19176 + This may be an empty string. 19177 + maxLength: 32768 19178 + type: string 19179 + observedGeneration: 19180 + description: |- 19181 + observedGeneration represents the .metadata.generation that the condition was set based upon. 19182 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19183 + with respect to the current state of the instance. 19184 + format: int64 19185 + minimum: 0 19186 + type: integer 19187 + reason: 19188 + description: |- 19189 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 19190 + Producers of specific condition types may define expected values and meanings for this field, 19191 + and whether the values are considered a guaranteed API. 19192 + The value should be a CamelCase string. 19193 + This field may not be empty. 19194 + maxLength: 1024 19195 + minLength: 1 19196 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19197 + type: string 19198 + status: 19199 + description: status of the condition, one of True, False, Unknown. 19200 + enum: 19201 + - "True" 19202 + - "False" 19203 + - Unknown 19204 + type: string 19205 + type: 19206 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 19207 + maxLength: 316 19208 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19209 + type: string 19210 + required: 19211 + - lastTransitionTime 19212 + - message 19213 + - reason 19214 + - status 19215 + - type 19216 + type: object 19217 + type: array 19218 + lastHandledReconcileAt: 19219 + description: |- 19220 + LastHandledReconcileAt holds the value of the most recent 19221 + reconcile request value, so a change of the annotation value 19222 + can be detected. 19223 + type: string 19224 + observedGeneration: 19225 + description: ObservedGeneration is the last observed generation of 19226 + the Receiver object. 19227 + format: int64 19228 + type: integer 19229 + webhookPath: 19230 + description: |- 19231 + WebhookPath is the generated incoming webhook address in the format 19232 + of '/hook/sha256sum(token+name+namespace)'. 19233 + type: string 19234 + type: object 19235 + type: object 19236 + served: true 19237 + storage: true 19238 + subresources: 19239 + status: {} 19240 + - additionalPrinterColumns: 19241 + - jsonPath: .metadata.creationTimestamp 19242 + name: Age 19243 + type: date 19244 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 19245 + name: Ready 19246 + type: string 19247 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 19248 + name: Status 19249 + type: string 19250 + deprecated: true 19251 + deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 19252 + name: v1beta2 19253 + schema: 19254 + openAPIV3Schema: 19255 + description: Receiver is the Schema for the receivers API. 19256 + properties: 19257 + apiVersion: 19258 + description: |- 19259 + APIVersion defines the versioned schema of this representation of an object. 19260 + Servers should convert recognized schemas to the latest internal value, and 19261 + may reject unrecognized values. 19262 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19263 + type: string 19264 + kind: 19265 + description: |- 19266 + Kind is a string value representing the REST resource this object represents. 19267 + Servers may infer this from the endpoint the client submits requests to. 19268 + Cannot be updated. 19269 + In CamelCase. 19270 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19271 + type: string 19272 + metadata: 19273 + type: object 19274 + spec: 19275 + description: ReceiverSpec defines the desired state of the Receiver. 19276 + properties: 19277 + events: 19278 + description: |- 19279 + Events specifies the list of event types to handle, 19280 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 19281 + items: 19282 + type: string 19283 + type: array 19284 + interval: 19285 + description: Interval at which to reconcile the Receiver with its 19286 + Secret references. 19287 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19288 + type: string 19289 + resources: 19290 + description: A list of resources to be notified about changes. 19291 + items: 19292 + description: |- 19293 + CrossNamespaceObjectReference contains enough information to let you locate the 19294 + typed referenced object at cluster level 19295 + properties: 19296 apiVersion: 19297 - description: |- 19298 - APIVersion defines the versioned schema of this representation of an object. 19299 - Servers should convert recognized schemas to the latest internal value, and 19300 - may reject unrecognized values. 19301 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19302 - type: string 19303 + description: API version of the referent 19304 + type: string 19305 kind: 19306 - description: |- 19307 - Kind is a string value representing the REST resource this object represents. 19308 - Servers may infer this from the endpoint the client submits requests to. 19309 - Cannot be updated. 19310 - In CamelCase. 19311 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19312 + description: Kind of the referent 19313 + enum: 19314 + - Bucket 19315 + - GitRepository 19316 + - Kustomization 19317 + - HelmRelease 19318 + - HelmChart 19319 + - HelmRepository 19320 + - ImageRepository 19321 + - ImagePolicy 19322 + - ImageUpdateAutomation 19323 + - OCIRepository 19324 + type: string 19325 + matchLabels: 19326 + additionalProperties: 19327 type: string 19328 - metadata: 19329 - type: object 19330 - spec: 19331 - description: ReceiverSpec defines the desired state of the Receiver. 19332 - properties: 19333 - events: 19334 - description: |- 19335 - Events specifies the list of event types to handle, 19336 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 19337 - items: 19338 - type: string 19339 - type: array 19340 - interval: 19341 - description: Interval at which to reconcile the Receiver with its Secret references. 19342 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19343 - type: string 19344 - resources: 19345 - description: A list of resources to be notified about changes. 19346 - items: 19347 - description: |- 19348 - CrossNamespaceObjectReference contains enough information to let you locate the 19349 - typed referenced object at cluster level 19350 - properties: 19351 - apiVersion: 19352 - description: API version of the referent 19353 - type: string 19354 - kind: 19355 - description: Kind of the referent 19356 - enum: 19357 - - Bucket 19358 - - GitRepository 19359 - - Kustomization 19360 - - HelmRelease 19361 - - HelmChart 19362 - - HelmRepository 19363 - - ImageRepository 19364 - - ImagePolicy 19365 - - ImageUpdateAutomation 19366 - - OCIRepository 19367 - type: string 19368 - matchLabels: 19369 - additionalProperties: 19370 - type: string 19371 - description: |- 19372 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 19373 - map is equivalent to an element of matchExpressions, whose key field is "key", the 19374 - operator is "In", and the values array contains only "value". The requirements are ANDed. 19375 - MatchLabels requires the name to be set to `*`. 19376 - type: object 19377 - name: 19378 - description: |- 19379 - Name of the referent 19380 - If multiple resources are targeted `*` may be set. 19381 - maxLength: 253 19382 - minLength: 1 19383 - type: string 19384 - namespace: 19385 - description: Namespace of the referent 19386 - maxLength: 253 19387 - minLength: 1 19388 - type: string 19389 - required: 19390 - - kind 19391 - - name 19392 - type: object 19393 - type: array 19394 - secretRef: 19395 - description: |- 19396 - SecretRef specifies the Secret containing the token used 19397 - to validate the payload authenticity. 19398 - properties: 19399 - name: 19400 - description: Name of the referent. 19401 - type: string 19402 - required: 19403 - - name 19404 - type: object 19405 - suspend: 19406 - description: |- 19407 - Suspend tells the controller to suspend subsequent 19408 - events handling for this receiver. 19409 - type: boolean 19410 - type: 19411 - description: |- 19412 - Type of webhook sender, used to determine 19413 - the validation procedure and payload deserialization. 19414 - enum: 19415 - - generic 19416 - - generic-hmac 19417 - - github 19418 - - gitlab 19419 - - bitbucket 19420 - - harbor 19421 - - dockerhub 19422 - - quay 19423 - - gcr 19424 - - nexus 19425 - - acr 19426 - type: string 19427 - required: 19428 - - resources 19429 - - secretRef 19430 - - type 19431 - type: object 19432 - status: 19433 - default: 19434 - observedGeneration: -1 19435 - description: ReceiverStatus defines the observed state of the Receiver. 19436 - properties: 19437 - conditions: 19438 - description: Conditions holds the conditions for the Receiver. 19439 - items: 19440 - description: Condition contains details for one aspect of the current state of this API 19441 - Resource. 19442 - properties: 19443 - lastTransitionTime: 19444 - description: |- 19445 - lastTransitionTime is the last time the condition transitioned from one status to another. 19446 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19447 - format: date-time 19448 - type: string 19449 - message: 19450 - description: |- 19451 - message is a human readable message indicating details about the transition. 19452 - This may be an empty string. 19453 - maxLength: 32768 19454 - type: string 19455 - observedGeneration: 19456 - description: |- 19457 - observedGeneration represents the .metadata.generation that the condition was set based upon. 19458 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19459 - with respect to the current state of the instance. 19460 - format: int64 19461 - minimum: 0 19462 - type: integer 19463 - reason: 19464 - description: |- 19465 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 19466 - Producers of specific condition types may define expected values and meanings for this field, 19467 - and whether the values are considered a guaranteed API. 19468 - The value should be a CamelCase string. 19469 - This field may not be empty. 19470 - maxLength: 1024 19471 - minLength: 1 19472 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19473 - type: string 19474 - status: 19475 - description: status of the condition, one of True, False, Unknown. 19476 - enum: 19477 - - "True" 19478 - - "False" 19479 - - Unknown 19480 - type: string 19481 - type: 19482 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 19483 - maxLength: 316 19484 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19485 - type: string 19486 - required: 19487 - - lastTransitionTime 19488 - - message 19489 - - reason 19490 - - status 19491 - - type 19492 - type: object 19493 - type: array 19494 - lastHandledReconcileAt: 19495 - description: |- 19496 - LastHandledReconcileAt holds the value of the most recent 19497 - reconcile request value, so a change of the annotation value 19498 - can be detected. 19499 - type: string 19500 - observedGeneration: 19501 - description: ObservedGeneration is the last observed generation of the Receiver object. 19502 - format: int64 19503 - type: integer 19504 - url: 19505 - description: |- 19506 - URL is the generated incoming webhook address in the format 19507 - of '/hook/sha256sum(token+name+namespace)'. 19508 - Deprecated: Replaced by WebhookPath. 19509 - type: string 19510 - webhookPath: 19511 - description: |- 19512 - WebhookPath is the generated incoming webhook address in the format 19513 - of '/hook/sha256sum(token+name+namespace)'. 19514 - type: string 19515 - type: object 19516 + description: |- 19517 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 19518 + map is equivalent to an element of matchExpressions, whose key field is "key", the 19519 + operator is "In", and the values array contains only "value". The requirements are ANDed. 19520 + MatchLabels requires the name to be set to `*`. 19521 + type: object 19522 + name: 19523 + description: |- 19524 + Name of the referent 19525 + If multiple resources are targeted `*` may be set. 19526 + maxLength: 253 19527 + minLength: 1 19528 + type: string 19529 + namespace: 19530 + description: Namespace of the referent 19531 + maxLength: 253 19532 + minLength: 1 19533 + type: string 19534 + required: 19535 + - kind 19536 + - name 19537 + type: object 19538 + type: array 19539 + secretRef: 19540 + description: |- 19541 + SecretRef specifies the Secret containing the token used 19542 + to validate the payload authenticity. 19543 + properties: 19544 + name: 19545 + description: Name of the referent. 19546 + type: string 19547 + required: 19548 + - name 19549 type: object 19550 - served: true 19551 - storage: false 19552 - subresources: 19553 - status: {} 19554 + suspend: 19555 + description: |- 19556 + Suspend tells the controller to suspend subsequent 19557 + events handling for this receiver. 19558 + type: boolean 19559 + type: 19560 + description: |- 19561 + Type of webhook sender, used to determine 19562 + the validation procedure and payload deserialization. 19563 + enum: 19564 + - generic 19565 + - generic-hmac 19566 + - github 19567 + - gitlab 19568 + - bitbucket 19569 + - harbor 19570 + - dockerhub 19571 + - quay 19572 + - gcr 19573 + - nexus 19574 + - acr 19575 + type: string 19576 + required: 19577 + - resources 19578 + - secretRef 19579 + - type 19580 + type: object 19581 + status: 19582 + default: 19583 + observedGeneration: -1 19584 + description: ReceiverStatus defines the observed state of the Receiver. 19585 + properties: 19586 + conditions: 19587 + description: Conditions holds the conditions for the Receiver. 19588 + items: 19589 + description: Condition contains details for one aspect of the current 19590 + state of this API Resource. 19591 + properties: 19592 + lastTransitionTime: 19593 + description: |- 19594 + lastTransitionTime is the last time the condition transitioned from one status to another. 19595 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19596 + format: date-time 19597 + type: string 19598 + message: 19599 + description: |- 19600 + message is a human readable message indicating details about the transition. 19601 + This may be an empty string. 19602 + maxLength: 32768 19603 + type: string 19604 + observedGeneration: 19605 + description: |- 19606 + observedGeneration represents the .metadata.generation that the condition was set based upon. 19607 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19608 + with respect to the current state of the instance. 19609 + format: int64 19610 + minimum: 0 19611 + type: integer 19612 + reason: 19613 + description: |- 19614 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 19615 + Producers of specific condition types may define expected values and meanings for this field, 19616 + and whether the values are considered a guaranteed API. 19617 + The value should be a CamelCase string. 19618 + This field may not be empty. 19619 + maxLength: 1024 19620 + minLength: 1 19621 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19622 + type: string 19623 + status: 19624 + description: status of the condition, one of True, False, Unknown. 19625 + enum: 19626 + - "True" 19627 + - "False" 19628 + - Unknown 19629 + type: string 19630 + type: 19631 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 19632 + maxLength: 316 19633 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19634 + type: string 19635 + required: 19636 + - lastTransitionTime 19637 + - message 19638 + - reason 19639 + - status 19640 + - type 19641 + type: object 19642 + type: array 19643 + lastHandledReconcileAt: 19644 + description: |- 19645 + LastHandledReconcileAt holds the value of the most recent 19646 + reconcile request value, so a change of the annotation value 19647 + can be detected. 19648 + type: string 19649 + observedGeneration: 19650 + description: ObservedGeneration is the last observed generation of 19651 + the Receiver object. 19652 + format: int64 19653 + type: integer 19654 + url: 19655 + description: |- 19656 + URL is the generated incoming webhook address in the format 19657 + of '/hook/sha256sum(token+name+namespace)'. 19658 + Deprecated: Replaced by WebhookPath. 19659 + type: string 19660 + webhookPath: 19661 + description: |- 19662 + WebhookPath is the generated incoming webhook address in the format 19663 + of '/hook/sha256sum(token+name+namespace)'. 19664 + type: string 19665 + type: object 19666 + type: object 19667 + served: true 19668 + storage: false 19669 + subresources: 19670 + status: {} 19671 --- 19672 apiVersion: v1 19673 kind: ServiceAccount 19674 metadata: 19675 - labels: 19676 - app.kubernetes.io/component: notification-controller 19677 - app.kubernetes.io/instance: flux-system 19678 - app.kubernetes.io/part-of: flux 19679 - app.kubernetes.io/version: v2.7.3 19680 - name: notification-controller 19681 - namespace: flux-system 19682 + labels: 19683 + app.kubernetes.io/component: notification-controller 19684 + app.kubernetes.io/instance: flux-system 19685 + app.kubernetes.io/part-of: flux 19686 + app.kubernetes.io/version: v2.7.5 19687 + name: notification-controller 19688 + namespace: flux-system 19689 --- 19690 apiVersion: v1 19691 kind: Service 19692 metadata: 19693 - labels: 19694 - app.kubernetes.io/component: notification-controller 19695 - app.kubernetes.io/instance: flux-system 19696 - app.kubernetes.io/part-of: flux 19697 - app.kubernetes.io/version: v2.7.3 19698 - control-plane: controller 19699 - name: notification-controller 19700 - namespace: flux-system 19701 + labels: 19702 + app.kubernetes.io/component: notification-controller 19703 + app.kubernetes.io/instance: flux-system 19704 + app.kubernetes.io/part-of: flux 19705 + app.kubernetes.io/version: v2.7.5 19706 + control-plane: controller 19707 + name: notification-controller 19708 + namespace: flux-system 19709 spec: 19710 - ports: 19711 - - name: http 19712 - port: 80 19713 - protocol: TCP 19714 - targetPort: http 19715 - selector: 19716 - app: notification-controller 19717 - type: ClusterIP 19718 + ports: 19719 + - name: http 19720 + port: 80 19721 + protocol: TCP 19722 + targetPort: http 19723 + selector: 19724 + app: notification-controller 19725 + type: ClusterIP 19726 --- 19727 apiVersion: v1 19728 kind: Service 19729 metadata: 19730 - labels: 19731 - app.kubernetes.io/component: notification-controller 19732 - app.kubernetes.io/instance: flux-system 19733 - app.kubernetes.io/part-of: flux 19734 - app.kubernetes.io/version: v2.7.3 19735 - control-plane: controller 19736 - name: webhook-receiver 19737 - namespace: flux-system 19738 + labels: 19739 + app.kubernetes.io/component: notification-controller 19740 + app.kubernetes.io/instance: flux-system 19741 + app.kubernetes.io/part-of: flux 19742 + app.kubernetes.io/version: v2.7.5 19743 + control-plane: controller 19744 + name: webhook-receiver 19745 + namespace: flux-system 19746 spec: 19747 - ports: 19748 - - name: http 19749 - port: 80 19750 - protocol: TCP 19751 - targetPort: http-webhook 19752 - selector: 19753 - app: notification-controller 19754 - type: ClusterIP 19755 + ports: 19756 + - name: http 19757 + port: 80 19758 + protocol: TCP 19759 + targetPort: http-webhook 19760 + selector: 19761 + app: notification-controller 19762 + type: ClusterIP 19763 --- 19764 apiVersion: apps/v1 19765 kind: Deployment 19766 metadata: 19767 - labels: 19768 + labels: 19769 + app.kubernetes.io/component: notification-controller 19770 + app.kubernetes.io/instance: flux-system 19771 + app.kubernetes.io/part-of: flux 19772 + app.kubernetes.io/version: v2.7.5 19773 + control-plane: controller 19774 + name: notification-controller 19775 + namespace: flux-system 19776 +spec: 19777 + replicas: 1 19778 + selector: 19779 + matchLabels: 19780 + app: notification-controller 19781 + template: 19782 + metadata: 19783 + annotations: 19784 + prometheus.io/port: "8080" 19785 + prometheus.io/scrape: "true" 19786 + labels: 19787 + app: notification-controller 19788 app.kubernetes.io/component: notification-controller 19789 app.kubernetes.io/instance: flux-system 19790 app.kubernetes.io/part-of: flux 19791 - app.kubernetes.io/version: v2.7.3 19792 - control-plane: controller 19793 - name: notification-controller 19794 - namespace: flux-system 19795 -spec: 19796 - replicas: 1 19797 - selector: 19798 - matchLabels: 19799 - app: notification-controller 19800 - template: 19801 - metadata: 19802 - annotations: 19803 - prometheus.io/port: "8080" 19804 - prometheus.io/scrape: "true" 19805 - labels: 19806 - app: notification-controller 19807 - app.kubernetes.io/component: notification-controller 19808 - app.kubernetes.io/instance: flux-system 19809 - app.kubernetes.io/part-of: flux 19810 - app.kubernetes.io/version: v2.7.3 19811 - spec: 19812 - containers: 19813 - - args: 19814 - - --watch-all-namespaces=true 19815 - - --log-level=info 19816 - - --log-encoding=json 19817 - - --enable-leader-election 19818 - env: 19819 - - name: RUNTIME_NAMESPACE 19820 - valueFrom: 19821 - fieldRef: 19822 - fieldPath: metadata.namespace 19823 - - name: GOMEMLIMIT 19824 - valueFrom: 19825 - resourceFieldRef: 19826 - containerName: manager 19827 - resource: limits.memory 19828 - image: ghcr.io/fluxcd/notification-controller:v1.7.4 19829 - imagePullPolicy: IfNotPresent 19830 - livenessProbe: 19831 - httpGet: 19832 - path: /healthz 19833 - port: healthz 19834 - name: manager 19835 - ports: 19836 - - containerPort: 9090 19837 - name: http 19838 - protocol: TCP 19839 - - containerPort: 9292 19840 - name: http-webhook 19841 - protocol: TCP 19842 - - containerPort: 8080 19843 - name: http-prom 19844 - protocol: TCP 19845 - - containerPort: 9440 19846 - name: healthz 19847 - protocol: TCP 19848 - readinessProbe: 19849 - httpGet: 19850 - path: /readyz 19851 - port: healthz 19852 - resources: 19853 - limits: 19854 - cpu: 1000m 19855 - memory: 1Gi 19856 - requests: 19857 - cpu: 100m 19858 - memory: 64Mi 19859 - securityContext: 19860 - allowPrivilegeEscalation: false 19861 - capabilities: 19862 - drop: 19863 - - ALL 19864 - readOnlyRootFilesystem: true 19865 - runAsNonRoot: true 19866 - seccompProfile: 19867 - type: RuntimeDefault 19868 - volumeMounts: 19869 - - mountPath: /tmp 19870 - name: temp 19871 - nodeSelector: 19872 - kubernetes.io/os: linux 19873 - securityContext: 19874 - fsGroup: 1337 19875 - serviceAccountName: notification-controller 19876 - terminationGracePeriodSeconds: 10 19877 - volumes: 19878 - - emptyDir: {} 19879 - name: temp 19880 + app.kubernetes.io/version: v2.7.5 19881 + spec: 19882 + containers: 19883 + - args: 19884 + - --watch-all-namespaces=true 19885 + - --log-level=info 19886 + - --log-encoding=json 19887 + - --enable-leader-election 19888 + env: 19889 + - name: RUNTIME_NAMESPACE 19890 + valueFrom: 19891 + fieldRef: 19892 + fieldPath: metadata.namespace 19893 + - name: GOMEMLIMIT 19894 + valueFrom: 19895 + resourceFieldRef: 19896 + containerName: manager 19897 + resource: limits.memory 19898 + image: ghcr.io/fluxcd/notification-controller:v1.7.5 19899 + imagePullPolicy: IfNotPresent 19900 + livenessProbe: 19901 + httpGet: 19902 + path: /healthz 19903 + port: healthz 19904 + name: manager 19905 + ports: 19906 + - containerPort: 9090 19907 + name: http 19908 + protocol: TCP 19909 + - containerPort: 9292 19910 + name: http-webhook 19911 + protocol: TCP 19912 + - containerPort: 8080 19913 + name: http-prom 19914 + protocol: TCP 19915 + - containerPort: 9440 19916 + name: healthz 19917 + protocol: TCP 19918 + readinessProbe: 19919 + httpGet: 19920 + path: /readyz 19921 + port: healthz 19922 + resources: 19923 + limits: 19924 + cpu: 1000m 19925 + memory: 1Gi 19926 + requests: 19927 + cpu: 100m 19928 + memory: 64Mi 19929 + securityContext: 19930 + allowPrivilegeEscalation: false 19931 + capabilities: 19932 + drop: 19933 + - ALL 19934 + readOnlyRootFilesystem: true 19935 + runAsNonRoot: true 19936 + seccompProfile: 19937 + type: RuntimeDefault 19938 + volumeMounts: 19939 + - mountPath: /tmp 19940 + name: temp 19941 + nodeSelector: 19942 + kubernetes.io/os: linux 19943 + securityContext: 19944 + fsGroup: 1337 19945 + serviceAccountName: notification-controller 19946 + terminationGracePeriodSeconds: 10 19947 + volumes: 19948 + - emptyDir: {} 19949 + name: temp 19950 --- 19951 apiVersion: apiextensions.k8s.io/v1 19952 kind: CustomResourceDefinition 19953 metadata: 19954 - annotations: 19955 - controller-gen.kubebuilder.io/version: v0.19.0 19956 - labels: 19957 - app.kubernetes.io/component: image-reflector-controller 19958 - app.kubernetes.io/instance: flux-system 19959 - app.kubernetes.io/part-of: flux 19960 - app.kubernetes.io/version: v2.7.3 19961 - name: imagepolicies.image.toolkit.fluxcd.io 19962 + annotations: 19963 + controller-gen.kubebuilder.io/version: v0.19.0 19964 + labels: 19965 + app.kubernetes.io/component: image-reflector-controller 19966 + app.kubernetes.io/instance: flux-system 19967 + app.kubernetes.io/part-of: flux 19968 + app.kubernetes.io/version: v2.7.5 19969 + name: imagepolicies.image.toolkit.fluxcd.io 19970 spec: 19971 - group: image.toolkit.fluxcd.io 19972 - names: 19973 - kind: ImagePolicy 19974 - listKind: ImagePolicyList 19975 - plural: imagepolicies 19976 - shortNames: 19977 - - imgpol 19978 - - imagepol 19979 - singular: imagepolicy 19980 - scope: Namespaced 19981 - versions: 19982 - - additionalPrinterColumns: 19983 - - jsonPath: .status.latestRef.name 19984 - name: Image 19985 - type: string 19986 - - jsonPath: .status.latestRef.tag 19987 - name: Tag 19988 - type: string 19989 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 19990 - name: Ready 19991 - type: string 19992 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 19993 - name: Status 19994 - type: string 19995 - - jsonPath: .metadata.creationTimestamp 19996 - name: Age 19997 - type: date 19998 - name: v1 19999 - schema: 20000 - openAPIV3Schema: 20001 - description: ImagePolicy is the Schema for the imagepolicies API 20002 + group: image.toolkit.fluxcd.io 20003 + names: 20004 + kind: ImagePolicy 20005 + listKind: ImagePolicyList 20006 + plural: imagepolicies 20007 + shortNames: 20008 + - imgpol 20009 + - imagepol 20010 + singular: imagepolicy 20011 + scope: Namespaced 20012 + versions: 20013 + - additionalPrinterColumns: 20014 + - jsonPath: .status.latestRef.name 20015 + name: Image 20016 + type: string 20017 + - jsonPath: .status.latestRef.tag 20018 + name: Tag 20019 + type: string 20020 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 20021 + name: Ready 20022 + type: string 20023 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 20024 + name: Status 20025 + type: string 20026 + - jsonPath: .metadata.creationTimestamp 20027 + name: Age 20028 + type: date 20029 + name: v1 20030 + schema: 20031 + openAPIV3Schema: 20032 + description: ImagePolicy is the Schema for the imagepolicies API 20033 + properties: 20034 + apiVersion: 20035 + description: |- 20036 + APIVersion defines the versioned schema of this representation of an object. 20037 + Servers should convert recognized schemas to the latest internal value, and 20038 + may reject unrecognized values. 20039 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20040 + type: string 20041 + kind: 20042 + description: |- 20043 + Kind is a string value representing the REST resource this object represents. 20044 + Servers may infer this from the endpoint the client submits requests to. 20045 + Cannot be updated. 20046 + In CamelCase. 20047 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20048 + type: string 20049 + metadata: 20050 + type: object 20051 + spec: 20052 + description: |- 20053 + ImagePolicySpec defines the parameters for calculating the 20054 + ImagePolicy. 20055 + properties: 20056 + digestReflectionPolicy: 20057 + default: Never 20058 + description: |- 20059 + DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 20060 + 20061 + Never: The digest field will always be set to the empty string. 20062 + 20063 + IfNotPresent: The digest field will be set to the digest of the elected 20064 + latest image if the field is empty and the image did not change. 20065 + 20066 + Always: The digest field will always be set to the digest of the elected 20067 + latest image. 20068 + 20069 + Default: Never. 20070 + enum: 20071 + - Always 20072 + - IfNotPresent 20073 + - Never 20074 + type: string 20075 + filterTags: 20076 + description: |- 20077 + FilterTags enables filtering for only a subset of tags based on a set of 20078 + rules. If no rules are provided, all the tags from the repository will be 20079 + ordered and compared. 20080 properties: 20081 - apiVersion: 20082 + extract: 20083 + description: |- 20084 + Extract allows a capture group to be extracted from the specified regular 20085 + expression pattern, useful before tag evaluation. 20086 + type: string 20087 + pattern: 20088 + description: |- 20089 + Pattern specifies a regular expression pattern used to filter for image 20090 + tags. 20091 + type: string 20092 + type: object 20093 + imageRepositoryRef: 20094 + description: |- 20095 + ImageRepositoryRef points at the object specifying the image 20096 + being scanned 20097 + properties: 20098 + name: 20099 + description: Name of the referent. 20100 + type: string 20101 + namespace: 20102 + description: Namespace of the referent, when not specified it 20103 + acts as LocalObjectReference. 20104 + type: string 20105 + required: 20106 + - name 20107 + type: object 20108 + interval: 20109 + description: |- 20110 + Interval is the length of time to wait between 20111 + refreshing the digest of the latest tag when the 20112 + reflection policy is set to "Always". 20113 + 20114 + Defaults to 10m. 20115 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20116 + type: string 20117 + policy: 20118 + description: |- 20119 + Policy gives the particulars of the policy to be followed in 20120 + selecting the most recent image 20121 + properties: 20122 + alphabetical: 20123 + description: Alphabetical set of rules to use for alphabetical 20124 + ordering of the tags. 20125 + properties: 20126 + order: 20127 + default: asc 20128 description: |- 20129 - APIVersion defines the versioned schema of this representation of an object. 20130 - Servers should convert recognized schemas to the latest internal value, and 20131 - may reject unrecognized values. 20132 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20133 + Order specifies the sorting order of the tags. Given the letters of the 20134 + alphabet as tags, ascending order would select Z, and descending order 20135 + would select A. 20136 + enum: 20137 + - asc 20138 + - desc 20139 type: string 20140 - kind: 20141 + type: object 20142 + numerical: 20143 + description: Numerical set of rules to use for numerical ordering 20144 + of the tags. 20145 + properties: 20146 + order: 20147 + default: asc 20148 description: |- 20149 - Kind is a string value representing the REST resource this object represents. 20150 - Servers may infer this from the endpoint the client submits requests to. 20151 - Cannot be updated. 20152 - In CamelCase. 20153 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20154 + Order specifies the sorting order of the tags. Given the integer values 20155 + from 0 to 9 as tags, ascending order would select 9, and descending order 20156 + would select 0. 20157 + enum: 20158 + - asc 20159 + - desc 20160 type: string 20161 - metadata: 20162 - type: object 20163 - spec: 20164 + type: object 20165 + semver: 20166 + description: |- 20167 + SemVer gives a semantic version range to check against the tags 20168 + available. 20169 + properties: 20170 + range: 20171 description: |- 20172 - ImagePolicySpec defines the parameters for calculating the 20173 - ImagePolicy. 20174 - properties: 20175 - digestReflectionPolicy: 20176 - default: Never 20177 - description: |- 20178 - DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 20179 - 20180 - Never: The digest field will always be set to the empty string. 20181 + Range gives a semver range for the image tag; the highest 20182 + version within the range that's a tag yields the latest image. 20183 + type: string 20184 + required: 20185 + - range 20186 + type: object 20187 + type: object 20188 + suspend: 20189 + description: |- 20190 + This flag tells the controller to suspend subsequent policy reconciliations. 20191 + It does not apply to already started reconciliations. Defaults to false. 20192 + type: boolean 20193 + required: 20194 + - imageRepositoryRef 20195 + - policy 20196 + type: object 20197 + x-kubernetes-validations: 20198 + - message: spec.interval is only accepted when spec.digestReflectionPolicy 20199 + is set to 'Always' 20200 + rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 20201 + == ''Always'')' 20202 + - message: spec.interval must be set when spec.digestReflectionPolicy 20203 + is set to 'Always' 20204 + rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 20205 + != 'Always' 20206 + status: 20207 + default: 20208 + observedGeneration: -1 20209 + description: ImagePolicyStatus defines the observed state of ImagePolicy 20210 + properties: 20211 + conditions: 20212 + items: 20213 + description: Condition contains details for one aspect of the current 20214 + state of this API Resource. 20215 + properties: 20216 + lastTransitionTime: 20217 + description: |- 20218 + lastTransitionTime is the last time the condition transitioned from one status to another. 20219 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20220 + format: date-time 20221 + type: string 20222 + message: 20223 + description: |- 20224 + message is a human readable message indicating details about the transition. 20225 + This may be an empty string. 20226 + maxLength: 32768 20227 + type: string 20228 + observedGeneration: 20229 + description: |- 20230 + observedGeneration represents the .metadata.generation that the condition was set based upon. 20231 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20232 + with respect to the current state of the instance. 20233 + format: int64 20234 + minimum: 0 20235 + type: integer 20236 + reason: 20237 + description: |- 20238 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 20239 + Producers of specific condition types may define expected values and meanings for this field, 20240 + and whether the values are considered a guaranteed API. 20241 + The value should be a CamelCase string. 20242 + This field may not be empty. 20243 + maxLength: 1024 20244 + minLength: 1 20245 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20246 + type: string 20247 + status: 20248 + description: status of the condition, one of True, False, Unknown. 20249 + enum: 20250 + - "True" 20251 + - "False" 20252 + - Unknown 20253 + type: string 20254 + type: 20255 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 20256 + maxLength: 316 20257 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 20258 + type: string 20259 + required: 20260 + - lastTransitionTime 20261 + - message 20262 + - reason 20263 + - status 20264 + - type 20265 + type: object 20266 + type: array 20267 + lastHandledReconcileAt: 20268 + description: |- 20269 + LastHandledReconcileAt holds the value of the most recent 20270 + reconcile request value, so a change of the annotation value 20271 + can be detected. 20272 + type: string 20273 + latestRef: 20274 + description: |- 20275 + LatestRef gives the first in the list of images scanned by 20276 + the image repository, when filtered and ordered according 20277 + to the policy. 20278 + properties: 20279 + digest: 20280 + description: Digest is the image's digest. 20281 + type: string 20282 + name: 20283 + description: Name is the bare image's name. 20284 + type: string 20285 + tag: 20286 + description: Tag is the image's tag. 20287 + type: string 20288 + required: 20289 + - name 20290 + - tag 20291 + type: object 20292 + observedGeneration: 20293 + format: int64 20294 + type: integer 20295 + observedPreviousRef: 20296 + description: |- 20297 + ObservedPreviousRef is the observed previous LatestRef. It is used 20298 + to keep track of the previous and current images. 20299 + properties: 20300 + digest: 20301 + description: Digest is the image's digest. 20302 + type: string 20303 + name: 20304 + description: Name is the bare image's name. 20305 + type: string 20306 + tag: 20307 + description: Tag is the image's tag. 20308 + type: string 20309 + required: 20310 + - name 20311 + - tag 20312 + type: object 20313 + type: object 20314 + type: object 20315 + served: true 20316 + storage: true 20317 + subresources: 20318 + status: {} 20319 + - additionalPrinterColumns: 20320 + - jsonPath: .status.latestRef.name 20321 + name: Image 20322 + type: string 20323 + - jsonPath: .status.latestRef.tag 20324 + name: Tag 20325 + type: string 20326 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 20327 + name: Ready 20328 + type: string 20329 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 20330 + name: Status 20331 + type: string 20332 + - jsonPath: .metadata.creationTimestamp 20333 + name: Age 20334 + type: date 20335 + deprecated: true 20336 + deprecationWarning: v1beta2 ImagePolicy is deprecated, upgrade to v1 20337 + name: v1beta2 20338 + schema: 20339 + openAPIV3Schema: 20340 + description: ImagePolicy is the Schema for the imagepolicies API 20341 + properties: 20342 + apiVersion: 20343 + description: |- 20344 + APIVersion defines the versioned schema of this representation of an object. 20345 + Servers should convert recognized schemas to the latest internal value, and 20346 + may reject unrecognized values. 20347 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20348 + type: string 20349 + kind: 20350 + description: |- 20351 + Kind is a string value representing the REST resource this object represents. 20352 + Servers may infer this from the endpoint the client submits requests to. 20353 + Cannot be updated. 20354 + In CamelCase. 20355 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20356 + type: string 20357 + metadata: 20358 + type: object 20359 + spec: 20360 + description: |- 20361 + ImagePolicySpec defines the parameters for calculating the 20362 + ImagePolicy. 20363 + properties: 20364 + digestReflectionPolicy: 20365 + default: Never 20366 + description: |- 20367 + DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 20368 20369 - IfNotPresent: The digest field will be set to the digest of the elected 20370 - latest image if the field is empty and the image did not change. 20371 + Never: The digest field will always be set to the empty string. 20372 20373 - Always: The digest field will always be set to the digest of the elected 20374 - latest image. 20375 + IfNotPresent: The digest field will be set to the digest of the elected 20376 + latest image if the field is empty and the image did not change. 20377 20378 - Default: Never. 20379 - enum: 20380 - - Always 20381 - - IfNotPresent 20382 - - Never 20383 - type: string 20384 - filterTags: 20385 - description: |- 20386 - FilterTags enables filtering for only a subset of tags based on a set of 20387 - rules. If no rules are provided, all the tags from the repository will be 20388 - ordered and compared. 20389 - properties: 20390 - extract: 20391 - description: |- 20392 - Extract allows a capture group to be extracted from the specified regular 20393 - expression pattern, useful before tag evaluation. 20394 - type: string 20395 - pattern: 20396 - description: |- 20397 - Pattern specifies a regular expression pattern used to filter for image 20398 - tags. 20399 - type: string 20400 - type: object 20401 - imageRepositoryRef: 20402 - description: |- 20403 - ImageRepositoryRef points at the object specifying the image 20404 - being scanned 20405 - properties: 20406 - name: 20407 - description: Name of the referent. 20408 - type: string 20409 - namespace: 20410 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 20411 - type: string 20412 - required: 20413 - - name 20414 - type: object 20415 - interval: 20416 - description: |- 20417 - Interval is the length of time to wait between 20418 - refreshing the digest of the latest tag when the 20419 - reflection policy is set to "Always". 20420 + Always: The digest field will always be set to the digest of the elected 20421 + latest image. 20422 20423 - Defaults to 10m. 20424 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20425 - type: string 20426 - policy: 20427 - description: |- 20428 - Policy gives the particulars of the policy to be followed in 20429 - selecting the most recent image 20430 - properties: 20431 - alphabetical: 20432 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 20433 - properties: 20434 - order: 20435 - default: asc 20436 - description: |- 20437 - Order specifies the sorting order of the tags. Given the letters of the 20438 - alphabet as tags, ascending order would select Z, and descending order 20439 - would select A. 20440 - enum: 20441 - - asc 20442 - - desc 20443 - type: string 20444 - type: object 20445 - numerical: 20446 - description: Numerical set of rules to use for numerical ordering of the tags. 20447 - properties: 20448 - order: 20449 - default: asc 20450 - description: |- 20451 - Order specifies the sorting order of the tags. Given the integer values 20452 - from 0 to 9 as tags, ascending order would select 9, and descending order 20453 - would select 0. 20454 - enum: 20455 - - asc 20456 - - desc 20457 - type: string 20458 - type: object 20459 - semver: 20460 - description: |- 20461 - SemVer gives a semantic version range to check against the tags 20462 - available. 20463 - properties: 20464 - range: 20465 - description: |- 20466 - Range gives a semver range for the image tag; the highest 20467 - version within the range that's a tag yields the latest image. 20468 - type: string 20469 - required: 20470 - - range 20471 - type: object 20472 - type: object 20473 - suspend: 20474 - description: |- 20475 - This flag tells the controller to suspend subsequent policy reconciliations. 20476 - It does not apply to already started reconciliations. Defaults to false. 20477 - type: boolean 20478 - required: 20479 - - imageRepositoryRef 20480 - - policy 20481 - type: object 20482 - x-kubernetes-validations: 20483 - - message: spec.interval is only accepted when spec.digestReflectionPolicy is set to 'Always' 20484 - rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 20485 - == ''Always'')' 20486 - - message: spec.interval must be set when spec.digestReflectionPolicy is set to 'Always' 20487 - rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 20488 - != 'Always' 20489 - status: 20490 - default: 20491 - observedGeneration: -1 20492 - description: ImagePolicyStatus defines the observed state of ImagePolicy 20493 - properties: 20494 - conditions: 20495 - items: 20496 - description: Condition contains details for one aspect of the current state of this API 20497 - Resource. 20498 - properties: 20499 - lastTransitionTime: 20500 - description: |- 20501 - lastTransitionTime is the last time the condition transitioned from one status to another. 20502 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20503 - format: date-time 20504 - type: string 20505 - message: 20506 - description: |- 20507 - message is a human readable message indicating details about the transition. 20508 - This may be an empty string. 20509 - maxLength: 32768 20510 - type: string 20511 - observedGeneration: 20512 - description: |- 20513 - observedGeneration represents the .metadata.generation that the condition was set based upon. 20514 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20515 - with respect to the current state of the instance. 20516 - format: int64 20517 - minimum: 0 20518 - type: integer 20519 - reason: 20520 - description: |- 20521 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 20522 - Producers of specific condition types may define expected values and meanings for this field, 20523 - and whether the values are considered a guaranteed API. 20524 - The value should be a CamelCase string. 20525 - This field may not be empty. 20526 - maxLength: 1024 20527 - minLength: 1 20528 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20529 - type: string 20530 - status: 20531 - description: status of the condition, one of True, False, Unknown. 20532 - enum: 20533 - - "True" 20534 - - "False" 20535 - - Unknown 20536 - type: string 20537 - type: 20538 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 20539 - maxLength: 316 20540 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 20541 - type: string 20542 - required: 20543 - - lastTransitionTime 20544 - - message 20545 - - reason 20546 - - status 20547 - - type 20548 - type: object 20549 - type: array 20550 - lastHandledReconcileAt: 20551 - description: |- 20552 - LastHandledReconcileAt holds the value of the most recent 20553 - reconcile request value, so a change of the annotation value 20554 - can be detected. 20555 - type: string 20556 - latestRef: 20557 - description: |- 20558 - LatestRef gives the first in the list of images scanned by 20559 - the image repository, when filtered and ordered according 20560 - to the policy. 20561 - properties: 20562 - digest: 20563 - description: Digest is the image's digest. 20564 - type: string 20565 - name: 20566 - description: Name is the bare image's name. 20567 - type: string 20568 - tag: 20569 - description: Tag is the image's tag. 20570 - type: string 20571 - required: 20572 - - name 20573 - - tag 20574 - type: object 20575 - observedGeneration: 20576 - format: int64 20577 - type: integer 20578 - observedPreviousRef: 20579 - description: |- 20580 - ObservedPreviousRef is the observed previous LatestRef. It is used 20581 - to keep track of the previous and current images. 20582 - properties: 20583 - digest: 20584 - description: Digest is the image's digest. 20585 - type: string 20586 - name: 20587 - description: Name is the bare image's name. 20588 - type: string 20589 - tag: 20590 - description: Tag is the image's tag. 20591 - type: string 20592 - required: 20593 - - name 20594 - - tag 20595 - type: object 20596 - type: object 20597 + Default: Never. 20598 + enum: 20599 + - Always 20600 + - IfNotPresent 20601 + - Never 20602 + type: string 20603 + filterTags: 20604 + description: |- 20605 + FilterTags enables filtering for only a subset of tags based on a set of 20606 + rules. If no rules are provided, all the tags from the repository will be 20607 + ordered and compared. 20608 + properties: 20609 + extract: 20610 + description: |- 20611 + Extract allows a capture group to be extracted from the specified regular 20612 + expression pattern, useful before tag evaluation. 20613 + type: string 20614 + pattern: 20615 + description: |- 20616 + Pattern specifies a regular expression pattern used to filter for image 20617 + tags. 20618 + type: string 20619 type: object 20620 - served: true 20621 - storage: true 20622 - subresources: 20623 - status: {} 20624 - - additionalPrinterColumns: 20625 - - jsonPath: .status.latestRef.name 20626 - name: Image 20627 - type: string 20628 - - jsonPath: .status.latestRef.tag 20629 - name: Tag 20630 - type: string 20631 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 20632 - name: Ready 20633 - type: string 20634 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 20635 - name: Status 20636 - type: string 20637 - - jsonPath: .metadata.creationTimestamp 20638 - name: Age 20639 - type: date 20640 - deprecated: true 20641 - deprecationWarning: v1beta2 ImagePolicy is deprecated, upgrade to v1 20642 - name: v1beta2 20643 - schema: 20644 - openAPIV3Schema: 20645 - description: ImagePolicy is the Schema for the imagepolicies API 20646 + imageRepositoryRef: 20647 + description: |- 20648 + ImageRepositoryRef points at the object specifying the image 20649 + being scanned 20650 properties: 20651 - apiVersion: 20652 + name: 20653 + description: Name of the referent. 20654 + type: string 20655 + namespace: 20656 + description: Namespace of the referent, when not specified it 20657 + acts as LocalObjectReference. 20658 + type: string 20659 + required: 20660 + - name 20661 + type: object 20662 + interval: 20663 + description: |- 20664 + Interval is the length of time to wait between 20665 + refreshing the digest of the latest tag when the 20666 + reflection policy is set to "Always". 20667 + 20668 + Defaults to 10m. 20669 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20670 + type: string 20671 + policy: 20672 + description: |- 20673 + Policy gives the particulars of the policy to be followed in 20674 + selecting the most recent image 20675 + properties: 20676 + alphabetical: 20677 + description: Alphabetical set of rules to use for alphabetical 20678 + ordering of the tags. 20679 + properties: 20680 + order: 20681 + default: asc 20682 description: |- 20683 - APIVersion defines the versioned schema of this representation of an object. 20684 - Servers should convert recognized schemas to the latest internal value, and 20685 - may reject unrecognized values. 20686 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20687 + Order specifies the sorting order of the tags. Given the letters of the 20688 + alphabet as tags, ascending order would select Z, and descending order 20689 + would select A. 20690 + enum: 20691 + - asc 20692 + - desc 20693 type: string 20694 - kind: 20695 + type: object 20696 + numerical: 20697 + description: Numerical set of rules to use for numerical ordering 20698 + of the tags. 20699 + properties: 20700 + order: 20701 + default: asc 20702 description: |- 20703 - Kind is a string value representing the REST resource this object represents. 20704 - Servers may infer this from the endpoint the client submits requests to. 20705 - Cannot be updated. 20706 - In CamelCase. 20707 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20708 + Order specifies the sorting order of the tags. Given the integer values 20709 + from 0 to 9 as tags, ascending order would select 9, and descending order 20710 + would select 0. 20711 + enum: 20712 + - asc 20713 + - desc 20714 type: string 20715 - metadata: 20716 - type: object 20717 - spec: 20718 + type: object 20719 + semver: 20720 + description: |- 20721 + SemVer gives a semantic version range to check against the tags 20722 + available. 20723 + properties: 20724 + range: 20725 description: |- 20726 - ImagePolicySpec defines the parameters for calculating the 20727 - ImagePolicy. 20728 - properties: 20729 - digestReflectionPolicy: 20730 - default: Never 20731 - description: |- 20732 - DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 20733 - 20734 - Never: The digest field will always be set to the empty string. 20735 - 20736 - IfNotPresent: The digest field will be set to the digest of the elected 20737 - latest image if the field is empty and the image did not change. 20738 - 20739 - Always: The digest field will always be set to the digest of the elected 20740 - latest image. 20741 - 20742 - Default: Never. 20743 - enum: 20744 - - Always 20745 - - IfNotPresent 20746 - - Never 20747 - type: string 20748 - filterTags: 20749 - description: |- 20750 - FilterTags enables filtering for only a subset of tags based on a set of 20751 - rules. If no rules are provided, all the tags from the repository will be 20752 - ordered and compared. 20753 - properties: 20754 - extract: 20755 - description: |- 20756 - Extract allows a capture group to be extracted from the specified regular 20757 - expression pattern, useful before tag evaluation. 20758 - type: string 20759 - pattern: 20760 - description: |- 20761 - Pattern specifies a regular expression pattern used to filter for image 20762 - tags. 20763 - type: string 20764 - type: object 20765 - imageRepositoryRef: 20766 - description: |- 20767 - ImageRepositoryRef points at the object specifying the image 20768 - being scanned 20769 - properties: 20770 - name: 20771 - description: Name of the referent. 20772 - type: string 20773 - namespace: 20774 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 20775 - type: string 20776 - required: 20777 - - name 20778 - type: object 20779 - interval: 20780 - description: |- 20781 - Interval is the length of time to wait between 20782 - refreshing the digest of the latest tag when the 20783 - reflection policy is set to "Always". 20784 - 20785 - Defaults to 10m. 20786 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20787 - type: string 20788 - policy: 20789 - description: |- 20790 - Policy gives the particulars of the policy to be followed in 20791 - selecting the most recent image 20792 - properties: 20793 - alphabetical: 20794 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 20795 - properties: 20796 - order: 20797 - default: asc 20798 - description: |- 20799 - Order specifies the sorting order of the tags. Given the letters of the 20800 - alphabet as tags, ascending order would select Z, and descending order 20801 - would select A. 20802 - enum: 20803 - - asc 20804 - - desc 20805 - type: string 20806 - type: object 20807 - numerical: 20808 - description: Numerical set of rules to use for numerical ordering of the tags. 20809 - properties: 20810 - order: 20811 - default: asc 20812 - description: |- 20813 - Order specifies the sorting order of the tags. Given the integer values 20814 - from 0 to 9 as tags, ascending order would select 9, and descending order 20815 - would select 0. 20816 - enum: 20817 - - asc 20818 - - desc 20819 - type: string 20820 - type: object 20821 - semver: 20822 - description: |- 20823 - SemVer gives a semantic version range to check against the tags 20824 - available. 20825 - properties: 20826 - range: 20827 - description: |- 20828 - Range gives a semver range for the image tag; the highest 20829 - version within the range that's a tag yields the latest image. 20830 - type: string 20831 - required: 20832 - - range 20833 - type: object 20834 - type: object 20835 - suspend: 20836 - description: |- 20837 - This flag tells the controller to suspend subsequent policy reconciliations. 20838 - It does not apply to already started reconciliations. Defaults to false. 20839 - type: boolean 20840 - required: 20841 - - imageRepositoryRef 20842 - - policy 20843 - type: object 20844 - x-kubernetes-validations: 20845 - - message: spec.interval is only accepted when spec.digestReflectionPolicy is set to 'Always' 20846 - rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 20847 - == ''Always'')' 20848 - - message: spec.interval must be set when spec.digestReflectionPolicy is set to 'Always' 20849 - rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 20850 - != 'Always' 20851 + Range gives a semver range for the image tag; the highest 20852 + version within the range that's a tag yields the latest image. 20853 + type: string 20854 + required: 20855 + - range 20856 + type: object 20857 + type: object 20858 + suspend: 20859 + description: |- 20860 + This flag tells the controller to suspend subsequent policy reconciliations. 20861 + It does not apply to already started reconciliations. Defaults to false. 20862 + type: boolean 20863 + required: 20864 + - imageRepositoryRef 20865 + - policy 20866 + type: object 20867 + x-kubernetes-validations: 20868 + - message: spec.interval is only accepted when spec.digestReflectionPolicy 20869 + is set to 'Always' 20870 + rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 20871 + == ''Always'')' 20872 + - message: spec.interval must be set when spec.digestReflectionPolicy 20873 + is set to 'Always' 20874 + rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 20875 + != 'Always' 20876 + status: 20877 + default: 20878 + observedGeneration: -1 20879 + description: ImagePolicyStatus defines the observed state of ImagePolicy 20880 + properties: 20881 + conditions: 20882 + items: 20883 + description: Condition contains details for one aspect of the current 20884 + state of this API Resource. 20885 + properties: 20886 + lastTransitionTime: 20887 + description: |- 20888 + lastTransitionTime is the last time the condition transitioned from one status to another. 20889 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20890 + format: date-time 20891 + type: string 20892 + message: 20893 + description: |- 20894 + message is a human readable message indicating details about the transition. 20895 + This may be an empty string. 20896 + maxLength: 32768 20897 + type: string 20898 + observedGeneration: 20899 + description: |- 20900 + observedGeneration represents the .metadata.generation that the condition was set based upon. 20901 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20902 + with respect to the current state of the instance. 20903 + format: int64 20904 + minimum: 0 20905 + type: integer 20906 + reason: 20907 + description: |- 20908 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 20909 + Producers of specific condition types may define expected values and meanings for this field, 20910 + and whether the values are considered a guaranteed API. 20911 + The value should be a CamelCase string. 20912 + This field may not be empty. 20913 + maxLength: 1024 20914 + minLength: 1 20915 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20916 + type: string 20917 status: 20918 - default: 20919 - observedGeneration: -1 20920 - description: ImagePolicyStatus defines the observed state of ImagePolicy 20921 - properties: 20922 - conditions: 20923 - items: 20924 - description: Condition contains details for one aspect of the current state of this API 20925 - Resource. 20926 - properties: 20927 - lastTransitionTime: 20928 - description: |- 20929 - lastTransitionTime is the last time the condition transitioned from one status to another. 20930 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20931 - format: date-time 20932 - type: string 20933 - message: 20934 - description: |- 20935 - message is a human readable message indicating details about the transition. 20936 - This may be an empty string. 20937 - maxLength: 32768 20938 - type: string 20939 - observedGeneration: 20940 - description: |- 20941 - observedGeneration represents the .metadata.generation that the condition was set based upon. 20942 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20943 - with respect to the current state of the instance. 20944 - format: int64 20945 - minimum: 0 20946 - type: integer 20947 - reason: 20948 - description: |- 20949 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 20950 - Producers of specific condition types may define expected values and meanings for this field, 20951 - and whether the values are considered a guaranteed API. 20952 - The value should be a CamelCase string. 20953 - This field may not be empty. 20954 - maxLength: 1024 20955 - minLength: 1 20956 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20957 - type: string 20958 - status: 20959 - description: status of the condition, one of True, False, Unknown. 20960 - enum: 20961 - - "True" 20962 - - "False" 20963 - - Unknown 20964 - type: string 20965 - type: 20966 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 20967 - maxLength: 316 20968 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 20969 - type: string 20970 - required: 20971 - - lastTransitionTime 20972 - - message 20973 - - reason 20974 - - status 20975 - - type 20976 - type: object 20977 - type: array 20978 - lastHandledReconcileAt: 20979 - description: |- 20980 - LastHandledReconcileAt holds the value of the most recent 20981 - reconcile request value, so a change of the annotation value 20982 - can be detected. 20983 - type: string 20984 - latestRef: 20985 - description: |- 20986 - LatestRef gives the first in the list of images scanned by 20987 - the image repository, when filtered and ordered according 20988 - to the policy. 20989 - properties: 20990 - digest: 20991 - description: Digest is the image's digest. 20992 - type: string 20993 - name: 20994 - description: Name is the bare image's name. 20995 - type: string 20996 - tag: 20997 - description: Tag is the image's tag. 20998 - type: string 20999 - required: 21000 - - name 21001 - - tag 21002 - type: object 21003 - observedGeneration: 21004 - format: int64 21005 - type: integer 21006 - observedPreviousRef: 21007 - description: |- 21008 - ObservedPreviousRef is the observed previous LatestRef. It is used 21009 - to keep track of the previous and current images. 21010 - properties: 21011 - digest: 21012 - description: Digest is the image's digest. 21013 - type: string 21014 - name: 21015 - description: Name is the bare image's name. 21016 - type: string 21017 - tag: 21018 - description: Tag is the image's tag. 21019 - type: string 21020 - required: 21021 - - name 21022 - - tag 21023 - type: object 21024 - type: object 21025 + description: status of the condition, one of True, False, Unknown. 21026 + enum: 21027 + - "True" 21028 + - "False" 21029 + - Unknown 21030 + type: string 21031 + type: 21032 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 21033 + maxLength: 316 21034 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21035 + type: string 21036 + required: 21037 + - lastTransitionTime 21038 + - message 21039 + - reason 21040 + - status 21041 + - type 21042 + type: object 21043 + type: array 21044 + lastHandledReconcileAt: 21045 + description: |- 21046 + LastHandledReconcileAt holds the value of the most recent 21047 + reconcile request value, so a change of the annotation value 21048 + can be detected. 21049 + type: string 21050 + latestRef: 21051 + description: |- 21052 + LatestRef gives the first in the list of images scanned by 21053 + the image repository, when filtered and ordered according 21054 + to the policy. 21055 + properties: 21056 + digest: 21057 + description: Digest is the image's digest. 21058 + type: string 21059 + name: 21060 + description: Name is the bare image's name. 21061 + type: string 21062 + tag: 21063 + description: Tag is the image's tag. 21064 + type: string 21065 + required: 21066 + - name 21067 + - tag 21068 + type: object 21069 + observedGeneration: 21070 + format: int64 21071 + type: integer 21072 + observedPreviousRef: 21073 + description: |- 21074 + ObservedPreviousRef is the observed previous LatestRef. It is used 21075 + to keep track of the previous and current images. 21076 + properties: 21077 + digest: 21078 + description: Digest is the image's digest. 21079 + type: string 21080 + name: 21081 + description: Name is the bare image's name. 21082 + type: string 21083 + tag: 21084 + description: Tag is the image's tag. 21085 + type: string 21086 + required: 21087 + - name 21088 + - tag 21089 type: object 21090 - served: true 21091 - storage: false 21092 - subresources: 21093 - status: {} 21094 + type: object 21095 + type: object 21096 + served: true 21097 + storage: false 21098 + subresources: 21099 + status: {} 21100 --- 21101 apiVersion: apiextensions.k8s.io/v1 21102 kind: CustomResourceDefinition 21103 metadata: 21104 - annotations: 21105 - controller-gen.kubebuilder.io/version: v0.19.0 21106 - labels: 21107 - app.kubernetes.io/component: image-reflector-controller 21108 - app.kubernetes.io/instance: flux-system 21109 - app.kubernetes.io/part-of: flux 21110 - app.kubernetes.io/version: v2.7.3 21111 - name: imagerepositories.image.toolkit.fluxcd.io 21112 + annotations: 21113 + controller-gen.kubebuilder.io/version: v0.19.0 21114 + labels: 21115 + app.kubernetes.io/component: image-reflector-controller 21116 + app.kubernetes.io/instance: flux-system 21117 + app.kubernetes.io/part-of: flux 21118 + app.kubernetes.io/version: v2.7.5 21119 + name: imagerepositories.image.toolkit.fluxcd.io 21120 spec: 21121 - group: image.toolkit.fluxcd.io 21122 - names: 21123 - kind: ImageRepository 21124 - listKind: ImageRepositoryList 21125 - plural: imagerepositories 21126 - shortNames: 21127 - - imgrepo 21128 - - imagerepo 21129 - singular: imagerepository 21130 - scope: Namespaced 21131 - versions: 21132 - - additionalPrinterColumns: 21133 - - jsonPath: .spec.image 21134 - name: Image 21135 - type: string 21136 - - jsonPath: .status.lastScanResult.tagCount 21137 - name: Tags 21138 - type: string 21139 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21140 - name: Ready 21141 - type: string 21142 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21143 - name: Status 21144 - type: string 21145 - - jsonPath: .status.lastScanResult.scanTime 21146 - name: Last scan 21147 - priority: 1 21148 - type: string 21149 - - jsonPath: .metadata.creationTimestamp 21150 - name: Age 21151 - type: date 21152 - name: v1 21153 - schema: 21154 - openAPIV3Schema: 21155 - description: ImageRepository is the Schema for the imagerepositories API 21156 + group: image.toolkit.fluxcd.io 21157 + names: 21158 + kind: ImageRepository 21159 + listKind: ImageRepositoryList 21160 + plural: imagerepositories 21161 + shortNames: 21162 + - imgrepo 21163 + - imagerepo 21164 + singular: imagerepository 21165 + scope: Namespaced 21166 + versions: 21167 + - additionalPrinterColumns: 21168 + - jsonPath: .spec.image 21169 + name: Image 21170 + type: string 21171 + - jsonPath: .status.lastScanResult.tagCount 21172 + name: Tags 21173 + type: string 21174 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 21175 + name: Ready 21176 + type: string 21177 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 21178 + name: Status 21179 + type: string 21180 + - jsonPath: .status.lastScanResult.scanTime 21181 + name: Last scan 21182 + priority: 1 21183 + type: string 21184 + - jsonPath: .metadata.creationTimestamp 21185 + name: Age 21186 + type: date 21187 + name: v1 21188 + schema: 21189 + openAPIV3Schema: 21190 + description: ImageRepository is the Schema for the imagerepositories API 21191 + properties: 21192 + apiVersion: 21193 + description: |- 21194 + APIVersion defines the versioned schema of this representation of an object. 21195 + Servers should convert recognized schemas to the latest internal value, and 21196 + may reject unrecognized values. 21197 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21198 + type: string 21199 + kind: 21200 + description: |- 21201 + Kind is a string value representing the REST resource this object represents. 21202 + Servers may infer this from the endpoint the client submits requests to. 21203 + Cannot be updated. 21204 + In CamelCase. 21205 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21206 + type: string 21207 + metadata: 21208 + type: object 21209 + spec: 21210 + description: |- 21211 + ImageRepositorySpec defines the parameters for scanning an image 21212 + repository, e.g., `fluxcd/flux`. 21213 + properties: 21214 + accessFrom: 21215 + description: |- 21216 + AccessFrom defines an ACL for allowing cross-namespace references 21217 + to the ImageRepository object based on the caller's namespace labels. 21218 properties: 21219 - apiVersion: 21220 - description: |- 21221 - APIVersion defines the versioned schema of this representation of an object. 21222 - Servers should convert recognized schemas to the latest internal value, and 21223 - may reject unrecognized values. 21224 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21225 - type: string 21226 - kind: 21227 - description: |- 21228 - Kind is a string value representing the REST resource this object represents. 21229 - Servers may infer this from the endpoint the client submits requests to. 21230 - Cannot be updated. 21231 - In CamelCase. 21232 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21233 - type: string 21234 - metadata: 21235 - type: object 21236 - spec: 21237 - description: |- 21238 - ImageRepositorySpec defines the parameters for scanning an image 21239 - repository, e.g., `fluxcd/flux`. 21240 - properties: 21241 - accessFrom: 21242 - description: |- 21243 - AccessFrom defines an ACL for allowing cross-namespace references 21244 - to the ImageRepository object based on the caller's namespace labels. 21245 - properties: 21246 - namespaceSelectors: 21247 - description: |- 21248 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 21249 - Items in this list are evaluated using a logical OR operation. 21250 - items: 21251 - description: |- 21252 - NamespaceSelector selects the namespaces to which this ACL applies. 21253 - An empty map of MatchLabels matches all namespaces in a cluster. 21254 - properties: 21255 - matchLabels: 21256 - additionalProperties: 21257 - type: string 21258 - description: |- 21259 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21260 - map is equivalent to an element of matchExpressions, whose key field is "key", the 21261 - operator is "In", and the values array contains only "value". The requirements are ANDed. 21262 - type: object 21263 - type: object 21264 - type: array 21265 - required: 21266 - - namespaceSelectors 21267 - type: object 21268 - certSecretRef: 21269 - description: |- 21270 - CertSecretRef can be given the name of a Secret containing 21271 - either or both of 21272 + namespaceSelectors: 21273 + description: |- 21274 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 21275 + Items in this list are evaluated using a logical OR operation. 21276 + items: 21277 + description: |- 21278 + NamespaceSelector selects the namespaces to which this ACL applies. 21279 + An empty map of MatchLabels matches all namespaces in a cluster. 21280 + properties: 21281 + matchLabels: 21282 + additionalProperties: 21283 + type: string 21284 + description: |- 21285 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21286 + map is equivalent to an element of matchExpressions, whose key field is "key", the 21287 + operator is "In", and the values array contains only "value". The requirements are ANDed. 21288 + type: object 21289 + type: object 21290 + type: array 21291 + required: 21292 + - namespaceSelectors 21293 + type: object 21294 + certSecretRef: 21295 + description: |- 21296 + CertSecretRef can be given the name of a Secret containing 21297 + either or both of 21298 21299 - - a PEM-encoded client certificate (`tls.crt`) and private 21300 - key (`tls.key`); 21301 - - a PEM-encoded CA certificate (`ca.crt`) 21302 + - a PEM-encoded client certificate (`tls.crt`) and private 21303 + key (`tls.key`); 21304 + - a PEM-encoded CA certificate (`ca.crt`) 21305 21306 - and whichever are supplied, will be used for connecting to the 21307 - registry. The client cert and key are useful if you are 21308 - authenticating with a certificate; the CA cert is useful if 21309 - you are using a self-signed server certificate. The Secret must 21310 - be of type `Opaque` or `kubernetes.io/tls`. 21311 + and whichever are supplied, will be used for connecting to the 21312 + registry. The client cert and key are useful if you are 21313 + authenticating with a certificate; the CA cert is useful if 21314 + you are using a self-signed server certificate. The Secret must 21315 + be of type `Opaque` or `kubernetes.io/tls`. 21316 21317 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 21318 - been deprecated. 21319 - properties: 21320 - name: 21321 - description: Name of the referent. 21322 - type: string 21323 - required: 21324 - - name 21325 - type: object 21326 - exclusionList: 21327 - default: 21328 - - ^.*\.sig$ 21329 - description: |- 21330 - ExclusionList is a list of regex strings used to exclude certain tags 21331 - from being stored in the database. 21332 - items: 21333 - type: string 21334 - maxItems: 25 21335 - type: array 21336 - image: 21337 - description: Image is the name of the image repository 21338 - type: string 21339 - insecure: 21340 - description: Insecure allows connecting to a non-TLS HTTP container registry. 21341 - type: boolean 21342 - interval: 21343 - description: |- 21344 - Interval is the length of time to wait between 21345 - scans of the image repository. 21346 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21347 - type: string 21348 - provider: 21349 - default: generic 21350 - description: |- 21351 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 21352 - When not specified, defaults to 'generic'. 21353 - enum: 21354 - - generic 21355 - - aws 21356 - - azure 21357 - - gcp 21358 - type: string 21359 - proxySecretRef: 21360 - description: |- 21361 - ProxySecretRef specifies the Secret containing the proxy configuration 21362 - to use while communicating with the container registry. 21363 - properties: 21364 - name: 21365 - description: Name of the referent. 21366 - type: string 21367 - required: 21368 - - name 21369 - type: object 21370 - secretRef: 21371 - description: |- 21372 - SecretRef can be given the name of a secret containing 21373 - credentials to use for the image registry. The secret should be 21374 - created with `kubectl create secret docker-registry`, or the 21375 - equivalent. 21376 - properties: 21377 - name: 21378 - description: Name of the referent. 21379 - type: string 21380 - required: 21381 - - name 21382 - type: object 21383 - serviceAccountName: 21384 - description: |- 21385 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 21386 - the image pull if the service account has attached pull secrets. 21387 - maxLength: 253 21388 - type: string 21389 - suspend: 21390 - description: |- 21391 - This flag tells the controller to suspend subsequent image scans. 21392 - It does not apply to already started scans. Defaults to false. 21393 - type: boolean 21394 - timeout: 21395 - description: |- 21396 - Timeout for image scanning. 21397 - Defaults to 'Interval' duration. 21398 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 21399 - type: string 21400 - required: 21401 - - image 21402 - - interval 21403 - type: object 21404 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 21405 + been deprecated. 21406 + properties: 21407 + name: 21408 + description: Name of the referent. 21409 + type: string 21410 + required: 21411 + - name 21412 + type: object 21413 + exclusionList: 21414 + default: 21415 + - ^.*\.sig$ 21416 + description: |- 21417 + ExclusionList is a list of regex strings used to exclude certain tags 21418 + from being stored in the database. 21419 + items: 21420 + type: string 21421 + maxItems: 25 21422 + type: array 21423 + image: 21424 + description: Image is the name of the image repository 21425 + type: string 21426 + insecure: 21427 + description: Insecure allows connecting to a non-TLS HTTP container 21428 + registry. 21429 + type: boolean 21430 + interval: 21431 + description: |- 21432 + Interval is the length of time to wait between 21433 + scans of the image repository. 21434 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21435 + type: string 21436 + provider: 21437 + default: generic 21438 + description: |- 21439 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 21440 + When not specified, defaults to 'generic'. 21441 + enum: 21442 + - generic 21443 + - aws 21444 + - azure 21445 + - gcp 21446 + type: string 21447 + proxySecretRef: 21448 + description: |- 21449 + ProxySecretRef specifies the Secret containing the proxy configuration 21450 + to use while communicating with the container registry. 21451 + properties: 21452 + name: 21453 + description: Name of the referent. 21454 + type: string 21455 + required: 21456 + - name 21457 + type: object 21458 + secretRef: 21459 + description: |- 21460 + SecretRef can be given the name of a secret containing 21461 + credentials to use for the image registry. The secret should be 21462 + created with `kubectl create secret docker-registry`, or the 21463 + equivalent. 21464 + properties: 21465 + name: 21466 + description: Name of the referent. 21467 + type: string 21468 + required: 21469 + - name 21470 + type: object 21471 + serviceAccountName: 21472 + description: |- 21473 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 21474 + the image pull if the service account has attached pull secrets. 21475 + maxLength: 253 21476 + type: string 21477 + suspend: 21478 + description: |- 21479 + This flag tells the controller to suspend subsequent image scans. 21480 + It does not apply to already started scans. Defaults to false. 21481 + type: boolean 21482 + timeout: 21483 + description: |- 21484 + Timeout for image scanning. 21485 + Defaults to 'Interval' duration. 21486 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 21487 + type: string 21488 + required: 21489 + - image 21490 + - interval 21491 + type: object 21492 + status: 21493 + default: 21494 + observedGeneration: -1 21495 + description: ImageRepositoryStatus defines the observed state of ImageRepository 21496 + properties: 21497 + canonicalImageName: 21498 + description: |- 21499 + CanonicalName is the name of the image repository with all the 21500 + implied bits made explicit; e.g., `docker.io/library/alpine` 21501 + rather than `alpine`. 21502 + type: string 21503 + conditions: 21504 + items: 21505 + description: Condition contains details for one aspect of the current 21506 + state of this API Resource. 21507 + properties: 21508 + lastTransitionTime: 21509 + description: |- 21510 + lastTransitionTime is the last time the condition transitioned from one status to another. 21511 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21512 + format: date-time 21513 + type: string 21514 + message: 21515 + description: |- 21516 + message is a human readable message indicating details about the transition. 21517 + This may be an empty string. 21518 + maxLength: 32768 21519 + type: string 21520 + observedGeneration: 21521 + description: |- 21522 + observedGeneration represents the .metadata.generation that the condition was set based upon. 21523 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21524 + with respect to the current state of the instance. 21525 + format: int64 21526 + minimum: 0 21527 + type: integer 21528 + reason: 21529 + description: |- 21530 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 21531 + Producers of specific condition types may define expected values and meanings for this field, 21532 + and whether the values are considered a guaranteed API. 21533 + The value should be a CamelCase string. 21534 + This field may not be empty. 21535 + maxLength: 1024 21536 + minLength: 1 21537 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21538 + type: string 21539 status: 21540 - default: 21541 - observedGeneration: -1 21542 - description: ImageRepositoryStatus defines the observed state of ImageRepository 21543 - properties: 21544 - canonicalImageName: 21545 - description: |- 21546 - CanonicalName is the name of the image repository with all the 21547 - implied bits made explicit; e.g., `docker.io/library/alpine` 21548 - rather than `alpine`. 21549 - type: string 21550 - conditions: 21551 - items: 21552 - description: Condition contains details for one aspect of the current state of this API 21553 - Resource. 21554 - properties: 21555 - lastTransitionTime: 21556 - description: |- 21557 - lastTransitionTime is the last time the condition transitioned from one status to another. 21558 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21559 - format: date-time 21560 - type: string 21561 - message: 21562 - description: |- 21563 - message is a human readable message indicating details about the transition. 21564 - This may be an empty string. 21565 - maxLength: 32768 21566 - type: string 21567 - observedGeneration: 21568 - description: |- 21569 - observedGeneration represents the .metadata.generation that the condition was set based upon. 21570 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21571 - with respect to the current state of the instance. 21572 - format: int64 21573 - minimum: 0 21574 - type: integer 21575 - reason: 21576 - description: |- 21577 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 21578 - Producers of specific condition types may define expected values and meanings for this field, 21579 - and whether the values are considered a guaranteed API. 21580 - The value should be a CamelCase string. 21581 - This field may not be empty. 21582 - maxLength: 1024 21583 - minLength: 1 21584 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21585 - type: string 21586 - status: 21587 - description: status of the condition, one of True, False, Unknown. 21588 - enum: 21589 - - "True" 21590 - - "False" 21591 - - Unknown 21592 - type: string 21593 - type: 21594 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 21595 - maxLength: 316 21596 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21597 - type: string 21598 - required: 21599 - - lastTransitionTime 21600 - - message 21601 - - reason 21602 - - status 21603 - - type 21604 - type: object 21605 - type: array 21606 - lastHandledReconcileAt: 21607 - description: |- 21608 - LastHandledReconcileAt holds the value of the most recent 21609 - reconcile request value, so a change of the annotation value 21610 - can be detected. 21611 - type: string 21612 - lastScanResult: 21613 - description: LastScanResult contains the number of fetched tags. 21614 - properties: 21615 - latestTags: 21616 - description: |- 21617 - LatestTags is a small sample of the tags found in the last scan. 21618 - It's the first 10 tags when sorting all the tags in descending 21619 - alphabetical order. 21620 - items: 21621 - type: string 21622 - type: array 21623 - revision: 21624 - description: Revision is a stable hash of the scanned tags. 21625 - type: string 21626 - scanTime: 21627 - description: ScanTime is the time when the last scan was performed. 21628 - format: date-time 21629 - type: string 21630 - tagCount: 21631 - description: TagCount is the number of tags found in the last scan. 21632 - type: integer 21633 - required: 21634 - - tagCount 21635 - type: object 21636 - observedExclusionList: 21637 - description: |- 21638 - ObservedExclusionList is a list of observed exclusion list. It reflects 21639 - the exclusion rules used for the observed scan result in 21640 - spec.lastScanResult. 21641 - items: 21642 - type: string 21643 - type: array 21644 - observedGeneration: 21645 - description: ObservedGeneration is the last reconciled generation. 21646 - format: int64 21647 - type: integer 21648 - type: object 21649 + description: status of the condition, one of True, False, Unknown. 21650 + enum: 21651 + - "True" 21652 + - "False" 21653 + - Unknown 21654 + type: string 21655 + type: 21656 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 21657 + maxLength: 316 21658 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21659 + type: string 21660 + required: 21661 + - lastTransitionTime 21662 + - message 21663 + - reason 21664 + - status 21665 + - type 21666 + type: object 21667 + type: array 21668 + lastHandledReconcileAt: 21669 + description: |- 21670 + LastHandledReconcileAt holds the value of the most recent 21671 + reconcile request value, so a change of the annotation value 21672 + can be detected. 21673 + type: string 21674 + lastScanResult: 21675 + description: LastScanResult contains the number of fetched tags. 21676 + properties: 21677 + latestTags: 21678 + description: |- 21679 + LatestTags is a small sample of the tags found in the last scan. 21680 + It's the first 10 tags when sorting all the tags in descending 21681 + alphabetical order. 21682 + items: 21683 + type: string 21684 + type: array 21685 + revision: 21686 + description: Revision is a stable hash of the scanned tags. 21687 + type: string 21688 + scanTime: 21689 + description: ScanTime is the time when the last scan was performed. 21690 + format: date-time 21691 + type: string 21692 + tagCount: 21693 + description: TagCount is the number of tags found in the last 21694 + scan. 21695 + type: integer 21696 + required: 21697 + - tagCount 21698 type: object 21699 - served: true 21700 - storage: true 21701 - subresources: 21702 - status: {} 21703 - - additionalPrinterColumns: 21704 - - jsonPath: .spec.image 21705 - name: Image 21706 - type: string 21707 - - jsonPath: .status.lastScanResult.tagCount 21708 - name: Tags 21709 - type: string 21710 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21711 - name: Ready 21712 - type: string 21713 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21714 - name: Status 21715 - type: string 21716 - - jsonPath: .status.lastScanResult.scanTime 21717 - name: Last scan 21718 - priority: 1 21719 - type: string 21720 - - jsonPath: .metadata.creationTimestamp 21721 - name: Age 21722 - type: date 21723 - deprecated: true 21724 - deprecationWarning: v1beta2 ImageRepository is deprecated, upgrade to v1 21725 - name: v1beta2 21726 - schema: 21727 - openAPIV3Schema: 21728 - description: ImageRepository is the Schema for the imagerepositories API 21729 + observedExclusionList: 21730 + description: |- 21731 + ObservedExclusionList is a list of observed exclusion list. It reflects 21732 + the exclusion rules used for the observed scan result in 21733 + spec.lastScanResult. 21734 + items: 21735 + type: string 21736 + type: array 21737 + observedGeneration: 21738 + description: ObservedGeneration is the last reconciled generation. 21739 + format: int64 21740 + type: integer 21741 + type: object 21742 + type: object 21743 + served: true 21744 + storage: true 21745 + subresources: 21746 + status: {} 21747 + - additionalPrinterColumns: 21748 + - jsonPath: .spec.image 21749 + name: Image 21750 + type: string 21751 + - jsonPath: .status.lastScanResult.tagCount 21752 + name: Tags 21753 + type: string 21754 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 21755 + name: Ready 21756 + type: string 21757 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 21758 + name: Status 21759 + type: string 21760 + - jsonPath: .status.lastScanResult.scanTime 21761 + name: Last scan 21762 + priority: 1 21763 + type: string 21764 + - jsonPath: .metadata.creationTimestamp 21765 + name: Age 21766 + type: date 21767 + deprecated: true 21768 + deprecationWarning: v1beta2 ImageRepository is deprecated, upgrade to v1 21769 + name: v1beta2 21770 + schema: 21771 + openAPIV3Schema: 21772 + description: ImageRepository is the Schema for the imagerepositories API 21773 + properties: 21774 + apiVersion: 21775 + description: |- 21776 + APIVersion defines the versioned schema of this representation of an object. 21777 + Servers should convert recognized schemas to the latest internal value, and 21778 + may reject unrecognized values. 21779 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21780 + type: string 21781 + kind: 21782 + description: |- 21783 + Kind is a string value representing the REST resource this object represents. 21784 + Servers may infer this from the endpoint the client submits requests to. 21785 + Cannot be updated. 21786 + In CamelCase. 21787 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21788 + type: string 21789 + metadata: 21790 + type: object 21791 + spec: 21792 + description: |- 21793 + ImageRepositorySpec defines the parameters for scanning an image 21794 + repository, e.g., `fluxcd/flux`. 21795 + properties: 21796 + accessFrom: 21797 + description: |- 21798 + AccessFrom defines an ACL for allowing cross-namespace references 21799 + to the ImageRepository object based on the caller's namespace labels. 21800 properties: 21801 - apiVersion: 21802 - description: |- 21803 - APIVersion defines the versioned schema of this representation of an object. 21804 - Servers should convert recognized schemas to the latest internal value, and 21805 - may reject unrecognized values. 21806 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21807 - type: string 21808 - kind: 21809 - description: |- 21810 - Kind is a string value representing the REST resource this object represents. 21811 - Servers may infer this from the endpoint the client submits requests to. 21812 - Cannot be updated. 21813 - In CamelCase. 21814 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21815 - type: string 21816 - metadata: 21817 - type: object 21818 - spec: 21819 - description: |- 21820 - ImageRepositorySpec defines the parameters for scanning an image 21821 - repository, e.g., `fluxcd/flux`. 21822 - properties: 21823 - accessFrom: 21824 - description: |- 21825 - AccessFrom defines an ACL for allowing cross-namespace references 21826 - to the ImageRepository object based on the caller's namespace labels. 21827 - properties: 21828 - namespaceSelectors: 21829 - description: |- 21830 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 21831 - Items in this list are evaluated using a logical OR operation. 21832 - items: 21833 - description: |- 21834 - NamespaceSelector selects the namespaces to which this ACL applies. 21835 - An empty map of MatchLabels matches all namespaces in a cluster. 21836 - properties: 21837 - matchLabels: 21838 - additionalProperties: 21839 - type: string 21840 - description: |- 21841 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21842 - map is equivalent to an element of matchExpressions, whose key field is "key", the 21843 - operator is "In", and the values array contains only "value". The requirements are ANDed. 21844 - type: object 21845 - type: object 21846 - type: array 21847 - required: 21848 - - namespaceSelectors 21849 - type: object 21850 - certSecretRef: 21851 - description: |- 21852 - CertSecretRef can be given the name of a Secret containing 21853 - either or both of 21854 + namespaceSelectors: 21855 + description: |- 21856 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 21857 + Items in this list are evaluated using a logical OR operation. 21858 + items: 21859 + description: |- 21860 + NamespaceSelector selects the namespaces to which this ACL applies. 21861 + An empty map of MatchLabels matches all namespaces in a cluster. 21862 + properties: 21863 + matchLabels: 21864 + additionalProperties: 21865 + type: string 21866 + description: |- 21867 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21868 + map is equivalent to an element of matchExpressions, whose key field is "key", the 21869 + operator is "In", and the values array contains only "value". The requirements are ANDed. 21870 + type: object 21871 + type: object 21872 + type: array 21873 + required: 21874 + - namespaceSelectors 21875 + type: object 21876 + certSecretRef: 21877 + description: |- 21878 + CertSecretRef can be given the name of a Secret containing 21879 + either or both of 21880 21881 - - a PEM-encoded client certificate (`tls.crt`) and private 21882 - key (`tls.key`); 21883 - - a PEM-encoded CA certificate (`ca.crt`) 21884 + - a PEM-encoded client certificate (`tls.crt`) and private 21885 + key (`tls.key`); 21886 + - a PEM-encoded CA certificate (`ca.crt`) 21887 21888 - and whichever are supplied, will be used for connecting to the 21889 - registry. The client cert and key are useful if you are 21890 - authenticating with a certificate; the CA cert is useful if 21891 - you are using a self-signed server certificate. The Secret must 21892 - be of type `Opaque` or `kubernetes.io/tls`. 21893 + and whichever are supplied, will be used for connecting to the 21894 + registry. The client cert and key are useful if you are 21895 + authenticating with a certificate; the CA cert is useful if 21896 + you are using a self-signed server certificate. The Secret must 21897 + be of type `Opaque` or `kubernetes.io/tls`. 21898 21899 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 21900 - been deprecated. 21901 - properties: 21902 - name: 21903 - description: Name of the referent. 21904 - type: string 21905 - required: 21906 - - name 21907 - type: object 21908 - exclusionList: 21909 - default: 21910 - - ^.*\.sig$ 21911 - description: |- 21912 - ExclusionList is a list of regex strings used to exclude certain tags 21913 - from being stored in the database. 21914 - items: 21915 - type: string 21916 - maxItems: 25 21917 - type: array 21918 - image: 21919 - description: Image is the name of the image repository 21920 - type: string 21921 - insecure: 21922 - description: Insecure allows connecting to a non-TLS HTTP container registry. 21923 - type: boolean 21924 - interval: 21925 - description: |- 21926 - Interval is the length of time to wait between 21927 - scans of the image repository. 21928 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21929 - type: string 21930 - provider: 21931 - default: generic 21932 - description: |- 21933 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 21934 - When not specified, defaults to 'generic'. 21935 - enum: 21936 - - generic 21937 - - aws 21938 - - azure 21939 - - gcp 21940 - type: string 21941 - proxySecretRef: 21942 - description: |- 21943 - ProxySecretRef specifies the Secret containing the proxy configuration 21944 - to use while communicating with the container registry. 21945 - properties: 21946 - name: 21947 - description: Name of the referent. 21948 - type: string 21949 - required: 21950 - - name 21951 - type: object 21952 - secretRef: 21953 - description: |- 21954 - SecretRef can be given the name of a secret containing 21955 - credentials to use for the image registry. The secret should be 21956 - created with `kubectl create secret docker-registry`, or the 21957 - equivalent. 21958 - properties: 21959 - name: 21960 - description: Name of the referent. 21961 - type: string 21962 - required: 21963 - - name 21964 - type: object 21965 - serviceAccountName: 21966 - description: |- 21967 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 21968 - the image pull if the service account has attached pull secrets. 21969 - maxLength: 253 21970 - type: string 21971 - suspend: 21972 - description: |- 21973 - This flag tells the controller to suspend subsequent image scans. 21974 - It does not apply to already started scans. Defaults to false. 21975 - type: boolean 21976 - timeout: 21977 - description: |- 21978 - Timeout for image scanning. 21979 - Defaults to 'Interval' duration. 21980 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 21981 - type: string 21982 - required: 21983 - - image 21984 - - interval 21985 - type: object 21986 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 21987 + been deprecated. 21988 + properties: 21989 + name: 21990 + description: Name of the referent. 21991 + type: string 21992 + required: 21993 + - name 21994 + type: object 21995 + exclusionList: 21996 + default: 21997 + - ^.*\.sig$ 21998 + description: |- 21999 + ExclusionList is a list of regex strings used to exclude certain tags 22000 + from being stored in the database. 22001 + items: 22002 + type: string 22003 + maxItems: 25 22004 + type: array 22005 + image: 22006 + description: Image is the name of the image repository 22007 + type: string 22008 + insecure: 22009 + description: Insecure allows connecting to a non-TLS HTTP container 22010 + registry. 22011 + type: boolean 22012 + interval: 22013 + description: |- 22014 + Interval is the length of time to wait between 22015 + scans of the image repository. 22016 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22017 + type: string 22018 + provider: 22019 + default: generic 22020 + description: |- 22021 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 22022 + When not specified, defaults to 'generic'. 22023 + enum: 22024 + - generic 22025 + - aws 22026 + - azure 22027 + - gcp 22028 + type: string 22029 + proxySecretRef: 22030 + description: |- 22031 + ProxySecretRef specifies the Secret containing the proxy configuration 22032 + to use while communicating with the container registry. 22033 + properties: 22034 + name: 22035 + description: Name of the referent. 22036 + type: string 22037 + required: 22038 + - name 22039 + type: object 22040 + secretRef: 22041 + description: |- 22042 + SecretRef can be given the name of a secret containing 22043 + credentials to use for the image registry. The secret should be 22044 + created with `kubectl create secret docker-registry`, or the 22045 + equivalent. 22046 + properties: 22047 + name: 22048 + description: Name of the referent. 22049 + type: string 22050 + required: 22051 + - name 22052 + type: object 22053 + serviceAccountName: 22054 + description: |- 22055 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 22056 + the image pull if the service account has attached pull secrets. 22057 + maxLength: 253 22058 + type: string 22059 + suspend: 22060 + description: |- 22061 + This flag tells the controller to suspend subsequent image scans. 22062 + It does not apply to already started scans. Defaults to false. 22063 + type: boolean 22064 + timeout: 22065 + description: |- 22066 + Timeout for image scanning. 22067 + Defaults to 'Interval' duration. 22068 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 22069 + type: string 22070 + required: 22071 + - image 22072 + - interval 22073 + type: object 22074 + status: 22075 + default: 22076 + observedGeneration: -1 22077 + description: ImageRepositoryStatus defines the observed state of ImageRepository 22078 + properties: 22079 + canonicalImageName: 22080 + description: |- 22081 + CanonicalName is the name of the image repository with all the 22082 + implied bits made explicit; e.g., `docker.io/library/alpine` 22083 + rather than `alpine`. 22084 + type: string 22085 + conditions: 22086 + items: 22087 + description: Condition contains details for one aspect of the current 22088 + state of this API Resource. 22089 + properties: 22090 + lastTransitionTime: 22091 + description: |- 22092 + lastTransitionTime is the last time the condition transitioned from one status to another. 22093 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22094 + format: date-time 22095 + type: string 22096 + message: 22097 + description: |- 22098 + message is a human readable message indicating details about the transition. 22099 + This may be an empty string. 22100 + maxLength: 32768 22101 + type: string 22102 + observedGeneration: 22103 + description: |- 22104 + observedGeneration represents the .metadata.generation that the condition was set based upon. 22105 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22106 + with respect to the current state of the instance. 22107 + format: int64 22108 + minimum: 0 22109 + type: integer 22110 + reason: 22111 + description: |- 22112 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 22113 + Producers of specific condition types may define expected values and meanings for this field, 22114 + and whether the values are considered a guaranteed API. 22115 + The value should be a CamelCase string. 22116 + This field may not be empty. 22117 + maxLength: 1024 22118 + minLength: 1 22119 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22120 + type: string 22121 status: 22122 - default: 22123 - observedGeneration: -1 22124 - description: ImageRepositoryStatus defines the observed state of ImageRepository 22125 - properties: 22126 - canonicalImageName: 22127 - description: |- 22128 - CanonicalName is the name of the image repository with all the 22129 - implied bits made explicit; e.g., `docker.io/library/alpine` 22130 - rather than `alpine`. 22131 - type: string 22132 - conditions: 22133 - items: 22134 - description: Condition contains details for one aspect of the current state of this API 22135 - Resource. 22136 - properties: 22137 - lastTransitionTime: 22138 - description: |- 22139 - lastTransitionTime is the last time the condition transitioned from one status to another. 22140 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22141 - format: date-time 22142 - type: string 22143 - message: 22144 - description: |- 22145 - message is a human readable message indicating details about the transition. 22146 - This may be an empty string. 22147 - maxLength: 32768 22148 - type: string 22149 - observedGeneration: 22150 - description: |- 22151 - observedGeneration represents the .metadata.generation that the condition was set based upon. 22152 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22153 - with respect to the current state of the instance. 22154 - format: int64 22155 - minimum: 0 22156 - type: integer 22157 - reason: 22158 - description: |- 22159 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 22160 - Producers of specific condition types may define expected values and meanings for this field, 22161 - and whether the values are considered a guaranteed API. 22162 - The value should be a CamelCase string. 22163 - This field may not be empty. 22164 - maxLength: 1024 22165 - minLength: 1 22166 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22167 - type: string 22168 - status: 22169 - description: status of the condition, one of True, False, Unknown. 22170 - enum: 22171 - - "True" 22172 - - "False" 22173 - - Unknown 22174 - type: string 22175 - type: 22176 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 22177 - maxLength: 316 22178 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22179 - type: string 22180 - required: 22181 - - lastTransitionTime 22182 - - message 22183 - - reason 22184 - - status 22185 - - type 22186 - type: object 22187 - type: array 22188 - lastHandledReconcileAt: 22189 - description: |- 22190 - LastHandledReconcileAt holds the value of the most recent 22191 - reconcile request value, so a change of the annotation value 22192 - can be detected. 22193 - type: string 22194 - lastScanResult: 22195 - description: LastScanResult contains the number of fetched tags. 22196 - properties: 22197 - latestTags: 22198 - description: |- 22199 - LatestTags is a small sample of the tags found in the last scan. 22200 - It's the first 10 tags when sorting all the tags in descending 22201 - alphabetical order. 22202 - items: 22203 - type: string 22204 - type: array 22205 - revision: 22206 - description: Revision is a stable hash of the scanned tags. 22207 - type: string 22208 - scanTime: 22209 - description: ScanTime is the time when the last scan was performed. 22210 - format: date-time 22211 - type: string 22212 - tagCount: 22213 - description: TagCount is the number of tags found in the last scan. 22214 - type: integer 22215 - required: 22216 - - tagCount 22217 - type: object 22218 - observedExclusionList: 22219 - description: |- 22220 - ObservedExclusionList is a list of observed exclusion list. It reflects 22221 - the exclusion rules used for the observed scan result in 22222 - spec.lastScanResult. 22223 - items: 22224 - type: string 22225 - type: array 22226 - observedGeneration: 22227 - description: ObservedGeneration is the last reconciled generation. 22228 - format: int64 22229 - type: integer 22230 - type: object 22231 + description: status of the condition, one of True, False, Unknown. 22232 + enum: 22233 + - "True" 22234 + - "False" 22235 + - Unknown 22236 + type: string 22237 + type: 22238 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 22239 + maxLength: 316 22240 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22241 + type: string 22242 + required: 22243 + - lastTransitionTime 22244 + - message 22245 + - reason 22246 + - status 22247 + - type 22248 + type: object 22249 + type: array 22250 + lastHandledReconcileAt: 22251 + description: |- 22252 + LastHandledReconcileAt holds the value of the most recent 22253 + reconcile request value, so a change of the annotation value 22254 + can be detected. 22255 + type: string 22256 + lastScanResult: 22257 + description: LastScanResult contains the number of fetched tags. 22258 + properties: 22259 + latestTags: 22260 + description: |- 22261 + LatestTags is a small sample of the tags found in the last scan. 22262 + It's the first 10 tags when sorting all the tags in descending 22263 + alphabetical order. 22264 + items: 22265 + type: string 22266 + type: array 22267 + revision: 22268 + description: Revision is a stable hash of the scanned tags. 22269 + type: string 22270 + scanTime: 22271 + description: ScanTime is the time when the last scan was performed. 22272 + format: date-time 22273 + type: string 22274 + tagCount: 22275 + description: TagCount is the number of tags found in the last 22276 + scan. 22277 + type: integer 22278 + required: 22279 + - tagCount 22280 type: object 22281 - served: true 22282 - storage: false 22283 - subresources: 22284 - status: {} 22285 + observedExclusionList: 22286 + description: |- 22287 + ObservedExclusionList is a list of observed exclusion list. It reflects 22288 + the exclusion rules used for the observed scan result in 22289 + spec.lastScanResult. 22290 + items: 22291 + type: string 22292 + type: array 22293 + observedGeneration: 22294 + description: ObservedGeneration is the last reconciled generation. 22295 + format: int64 22296 + type: integer 22297 + type: object 22298 + type: object 22299 + served: true 22300 + storage: false 22301 + subresources: 22302 + status: {} 22303 --- 22304 apiVersion: v1 22305 kind: ServiceAccount 22306 metadata: 22307 - labels: 22308 - app.kubernetes.io/component: image-reflector-controller 22309 - app.kubernetes.io/instance: flux-system 22310 - app.kubernetes.io/part-of: flux 22311 - app.kubernetes.io/version: v2.7.3 22312 - name: image-reflector-controller 22313 - namespace: flux-system 22314 + labels: 22315 + app.kubernetes.io/component: image-reflector-controller 22316 + app.kubernetes.io/instance: flux-system 22317 + app.kubernetes.io/part-of: flux 22318 + app.kubernetes.io/version: v2.7.5 22319 + name: image-reflector-controller 22320 + namespace: flux-system 22321 --- 22322 apiVersion: apps/v1 22323 kind: Deployment 22324 metadata: 22325 - labels: 22326 + labels: 22327 + app.kubernetes.io/component: image-reflector-controller 22328 + app.kubernetes.io/instance: flux-system 22329 + app.kubernetes.io/part-of: flux 22330 + app.kubernetes.io/version: v2.7.5 22331 + control-plane: controller 22332 + name: image-reflector-controller 22333 + namespace: flux-system 22334 +spec: 22335 + replicas: 1 22336 + selector: 22337 + matchLabels: 22338 + app: image-reflector-controller 22339 + template: 22340 + metadata: 22341 + annotations: 22342 + prometheus.io/port: "8080" 22343 + prometheus.io/scrape: "true" 22344 + labels: 22345 + app: image-reflector-controller 22346 app.kubernetes.io/component: image-reflector-controller 22347 app.kubernetes.io/instance: flux-system 22348 app.kubernetes.io/part-of: flux 22349 - app.kubernetes.io/version: v2.7.3 22350 - control-plane: controller 22351 - name: image-reflector-controller 22352 - namespace: flux-system 22353 -spec: 22354 - replicas: 1 22355 - selector: 22356 - matchLabels: 22357 - app: image-reflector-controller 22358 - template: 22359 - metadata: 22360 - annotations: 22361 - prometheus.io/port: "8080" 22362 - prometheus.io/scrape: "true" 22363 - labels: 22364 - app: image-reflector-controller 22365 - app.kubernetes.io/component: image-reflector-controller 22366 - app.kubernetes.io/instance: flux-system 22367 - app.kubernetes.io/part-of: flux 22368 - app.kubernetes.io/version: v2.7.3 22369 - spec: 22370 - containers: 22371 - - args: 22372 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 22373 - - --watch-all-namespaces=true 22374 - - --log-level=info 22375 - - --log-encoding=json 22376 - - --enable-leader-election 22377 - env: 22378 - - name: RUNTIME_NAMESPACE 22379 - valueFrom: 22380 - fieldRef: 22381 - fieldPath: metadata.namespace 22382 - - name: GOMEMLIMIT 22383 - valueFrom: 22384 - resourceFieldRef: 22385 - containerName: manager 22386 - resource: limits.memory 22387 - image: ghcr.io/fluxcd/image-reflector-controller:v1.0.3 22388 - imagePullPolicy: IfNotPresent 22389 - livenessProbe: 22390 - httpGet: 22391 - path: /healthz 22392 - port: healthz 22393 - name: manager 22394 - ports: 22395 - - containerPort: 8080 22396 - name: http-prom 22397 - protocol: TCP 22398 - - containerPort: 9440 22399 - name: healthz 22400 - protocol: TCP 22401 - readinessProbe: 22402 - httpGet: 22403 - path: /readyz 22404 - port: healthz 22405 - resources: 22406 - limits: 22407 - cpu: 1000m 22408 - memory: 1Gi 22409 - requests: 22410 - cpu: 100m 22411 - memory: 64Mi 22412 - securityContext: 22413 - allowPrivilegeEscalation: false 22414 - capabilities: 22415 - drop: 22416 - - ALL 22417 - readOnlyRootFilesystem: true 22418 - runAsNonRoot: true 22419 - seccompProfile: 22420 - type: RuntimeDefault 22421 - volumeMounts: 22422 - - mountPath: /tmp 22423 - name: temp 22424 - - mountPath: /data 22425 - name: data 22426 - nodeSelector: 22427 - kubernetes.io/os: linux 22428 - securityContext: 22429 - fsGroup: 1337 22430 - serviceAccountName: image-reflector-controller 22431 - terminationGracePeriodSeconds: 10 22432 - volumes: 22433 - - emptyDir: {} 22434 - name: temp 22435 - - emptyDir: {} 22436 - name: data 22437 + app.kubernetes.io/version: v2.7.5 22438 + spec: 22439 + containers: 22440 + - args: 22441 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 22442 + - --watch-all-namespaces=true 22443 + - --log-level=info 22444 + - --log-encoding=json 22445 + - --enable-leader-election 22446 + env: 22447 + - name: RUNTIME_NAMESPACE 22448 + valueFrom: 22449 + fieldRef: 22450 + fieldPath: metadata.namespace 22451 + - name: GOMEMLIMIT 22452 + valueFrom: 22453 + resourceFieldRef: 22454 + containerName: manager 22455 + resource: limits.memory 22456 + image: ghcr.io/fluxcd/image-reflector-controller:v1.0.4 22457 + imagePullPolicy: IfNotPresent 22458 + livenessProbe: 22459 + httpGet: 22460 + path: /healthz 22461 + port: healthz 22462 + name: manager 22463 + ports: 22464 + - containerPort: 8080 22465 + name: http-prom 22466 + protocol: TCP 22467 + - containerPort: 9440 22468 + name: healthz 22469 + protocol: TCP 22470 + readinessProbe: 22471 + httpGet: 22472 + path: /readyz 22473 + port: healthz 22474 + resources: 22475 + limits: 22476 + cpu: 1000m 22477 + memory: 1Gi 22478 + requests: 22479 + cpu: 100m 22480 + memory: 64Mi 22481 + securityContext: 22482 + allowPrivilegeEscalation: false 22483 + capabilities: 22484 + drop: 22485 + - ALL 22486 + readOnlyRootFilesystem: true 22487 + runAsNonRoot: true 22488 + seccompProfile: 22489 + type: RuntimeDefault 22490 + volumeMounts: 22491 + - mountPath: /tmp 22492 + name: temp 22493 + - mountPath: /data 22494 + name: data 22495 + nodeSelector: 22496 + kubernetes.io/os: linux 22497 + securityContext: 22498 + fsGroup: 1337 22499 + serviceAccountName: image-reflector-controller 22500 + terminationGracePeriodSeconds: 10 22501 + volumes: 22502 + - emptyDir: {} 22503 + name: temp 22504 + - emptyDir: {} 22505 + name: data 22506 --- 22507 apiVersion: apiextensions.k8s.io/v1 22508 kind: CustomResourceDefinition 22509 metadata: 22510 - annotations: 22511 - controller-gen.kubebuilder.io/version: v0.19.0 22512 - labels: 22513 - app.kubernetes.io/component: image-automation-controller 22514 - app.kubernetes.io/instance: flux-system 22515 - app.kubernetes.io/part-of: flux 22516 - app.kubernetes.io/version: v2.7.3 22517 - name: imageupdateautomations.image.toolkit.fluxcd.io 22518 + annotations: 22519 + controller-gen.kubebuilder.io/version: v0.19.0 22520 + labels: 22521 + app.kubernetes.io/component: image-automation-controller 22522 + app.kubernetes.io/instance: flux-system 22523 + app.kubernetes.io/part-of: flux 22524 + app.kubernetes.io/version: v2.7.5 22525 + name: imageupdateautomations.image.toolkit.fluxcd.io 22526 spec: 22527 - group: image.toolkit.fluxcd.io 22528 - names: 22529 - kind: ImageUpdateAutomation 22530 - listKind: ImageUpdateAutomationList 22531 - plural: imageupdateautomations 22532 - shortNames: 22533 - - iua 22534 - - imgupd 22535 - - imgauto 22536 - singular: imageupdateautomation 22537 - scope: Namespaced 22538 - versions: 22539 - - additionalPrinterColumns: 22540 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 22541 - name: Ready 22542 - type: string 22543 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 22544 - name: Status 22545 - type: string 22546 - - jsonPath: .status.lastAutomationRunTime 22547 - name: Last run 22548 - priority: 1 22549 - type: string 22550 - - jsonPath: .metadata.creationTimestamp 22551 - name: Age 22552 - type: date 22553 - name: v1 22554 - schema: 22555 - openAPIV3Schema: 22556 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 22557 + group: image.toolkit.fluxcd.io 22558 + names: 22559 + kind: ImageUpdateAutomation 22560 + listKind: ImageUpdateAutomationList 22561 + plural: imageupdateautomations 22562 + shortNames: 22563 + - iua 22564 + - imgupd 22565 + - imgauto 22566 + singular: imageupdateautomation 22567 + scope: Namespaced 22568 + versions: 22569 + - additionalPrinterColumns: 22570 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 22571 + name: Ready 22572 + type: string 22573 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 22574 + name: Status 22575 + type: string 22576 + - jsonPath: .status.lastAutomationRunTime 22577 + name: Last run 22578 + priority: 1 22579 + type: string 22580 + - jsonPath: .metadata.creationTimestamp 22581 + name: Age 22582 + type: date 22583 + name: v1 22584 + schema: 22585 + openAPIV3Schema: 22586 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 22587 + API 22588 + properties: 22589 + apiVersion: 22590 + description: |- 22591 + APIVersion defines the versioned schema of this representation of an object. 22592 + Servers should convert recognized schemas to the latest internal value, and 22593 + may reject unrecognized values. 22594 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22595 + type: string 22596 + kind: 22597 + description: |- 22598 + Kind is a string value representing the REST resource this object represents. 22599 + Servers may infer this from the endpoint the client submits requests to. 22600 + Cannot be updated. 22601 + In CamelCase. 22602 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22603 + type: string 22604 + metadata: 22605 + type: object 22606 + spec: 22607 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 22608 + properties: 22609 + git: 22610 + description: |- 22611 + GitSpec contains all the git-specific definitions. This is 22612 + technically optional, but in practice mandatory until there are 22613 + other kinds of source allowed. 22614 properties: 22615 - apiVersion: 22616 - description: |- 22617 - APIVersion defines the versioned schema of this representation of an object. 22618 - Servers should convert recognized schemas to the latest internal value, and 22619 - may reject unrecognized values. 22620 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22621 - type: string 22622 - kind: 22623 + checkout: 22624 + description: |- 22625 + Checkout gives the parameters for cloning the git repository, 22626 + ready to make changes. If not present, the `spec.ref` field from the 22627 + referenced `GitRepository` or its default will be used. 22628 + properties: 22629 + ref: 22630 description: |- 22631 - Kind is a string value representing the REST resource this object represents. 22632 - Servers may infer this from the endpoint the client submits requests to. 22633 - Cannot be updated. 22634 - In CamelCase. 22635 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22636 - type: string 22637 - metadata: 22638 - type: object 22639 - spec: 22640 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 22641 + Reference gives a branch, tag or commit to clone from the Git 22642 + repository. 22643 properties: 22644 - git: 22645 - description: |- 22646 - GitSpec contains all the git-specific definitions. This is 22647 - technically optional, but in practice mandatory until there are 22648 - other kinds of source allowed. 22649 - properties: 22650 - checkout: 22651 - description: |- 22652 - Checkout gives the parameters for cloning the git repository, 22653 - ready to make changes. If not present, the `spec.ref` field from the 22654 - referenced `GitRepository` or its default will be used. 22655 - properties: 22656 - ref: 22657 - description: |- 22658 - Reference gives a branch, tag or commit to clone from the Git 22659 - repository. 22660 - properties: 22661 - branch: 22662 - description: Branch to check out, defaults to 'master' if no other 22663 - field is defined. 22664 - type: string 22665 - commit: 22666 - description: |- 22667 - Commit SHA to check out, takes precedence over all reference fields. 22668 + branch: 22669 + description: Branch to check out, defaults to 'master' 22670 + if no other field is defined. 22671 + type: string 22672 + commit: 22673 + description: |- 22674 + Commit SHA to check out, takes precedence over all reference fields. 22675 22676 - This can be combined with Branch to shallow clone the branch, in which 22677 - the commit is expected to exist. 22678 - type: string 22679 - name: 22680 - description: |- 22681 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 22682 + This can be combined with Branch to shallow clone the branch, in which 22683 + the commit is expected to exist. 22684 + type: string 22685 + name: 22686 + description: |- 22687 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 22688 22689 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 22690 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 22691 - type: string 22692 - semver: 22693 - description: SemVer tag expression to check out, takes precedence 22694 - over Tag. 22695 - type: string 22696 - tag: 22697 - description: Tag to check out, takes precedence over Branch. 22698 - type: string 22699 - type: object 22700 - required: 22701 - - ref 22702 - type: object 22703 - commit: 22704 - description: Commit specifies how to commit to the git repository. 22705 - properties: 22706 - author: 22707 - description: |- 22708 - Author gives the email and optionally the name to use as the 22709 - author of commits. 22710 - properties: 22711 - email: 22712 - description: Email gives the email to provide when making a commit. 22713 - type: string 22714 - name: 22715 - description: Name gives the name to provide when making a commit. 22716 - type: string 22717 - required: 22718 - - email 22719 - type: object 22720 - messageTemplate: 22721 - description: |- 22722 - MessageTemplate provides a template for the commit message, 22723 - into which will be interpolated the details of the change made. 22724 - Note: The `Updated` template field has been removed. Use `Changed` instead. 22725 - type: string 22726 - messageTemplateValues: 22727 - additionalProperties: 22728 - type: string 22729 - description: |- 22730 - MessageTemplateValues provides additional values to be available to the 22731 - templating rendering. 22732 - type: object 22733 - signingKey: 22734 - description: SigningKey provides the option to sign commits with a GPG key 22735 - properties: 22736 - secretRef: 22737 - description: |- 22738 - SecretRef holds the name to a secret that contains a 'git.asc' key 22739 - corresponding to the ASCII Armored file containing the GPG signing 22740 - keypair as the value. It must be in the same namespace as the 22741 - ImageUpdateAutomation. 22742 - properties: 22743 - name: 22744 - description: Name of the referent. 22745 - type: string 22746 - required: 22747 - - name 22748 - type: object 22749 - required: 22750 - - secretRef 22751 - type: object 22752 - required: 22753 - - author 22754 - type: object 22755 - push: 22756 - description: |- 22757 - Push specifies how and where to push commits made by the 22758 - automation. If missing, commits are pushed (back) to 22759 - `.spec.checkout.branch` or its default. 22760 - properties: 22761 - branch: 22762 - description: |- 22763 - Branch specifies that commits should be pushed to the branch 22764 - named. The branch is created using `.spec.checkout.branch` as the 22765 - starting point, if it doesn't already exist. 22766 - type: string 22767 - options: 22768 - additionalProperties: 22769 - type: string 22770 - description: |- 22771 - Options specifies the push options that are sent to the Git 22772 - server when performing a push operation. For details, see: 22773 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 22774 - type: object 22775 - refspec: 22776 - description: |- 22777 - Refspec specifies the Git Refspec to use for a push operation. 22778 - If both Branch and Refspec are provided, then the commit is pushed 22779 - to the branch and also using the specified refspec. 22780 - For more details about Git Refspecs, see: 22781 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 22782 - type: string 22783 - type: object 22784 - required: 22785 - - commit 22786 - type: object 22787 - interval: 22788 - description: |- 22789 - Interval gives an lower bound for how often the automation 22790 - run should be attempted. 22791 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 22792 - type: string 22793 - policySelector: 22794 - description: |- 22795 - PolicySelector allows to filter applied policies based on labels. 22796 - By default includes all policies in namespace. 22797 - properties: 22798 - matchExpressions: 22799 - description: matchExpressions is a list of label selector requirements. The requirements 22800 - are ANDed. 22801 - items: 22802 - description: |- 22803 - A label selector requirement is a selector that contains values, a key, and an operator that 22804 - relates the key and values. 22805 - properties: 22806 - key: 22807 - description: key is the label key that the selector applies to. 22808 - type: string 22809 - operator: 22810 - description: |- 22811 - operator represents a key's relationship to a set of values. 22812 - Valid operators are In, NotIn, Exists and DoesNotExist. 22813 - type: string 22814 - values: 22815 - description: |- 22816 - values is an array of string values. If the operator is In or NotIn, 22817 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 22818 - the values array must be empty. This array is replaced during a strategic 22819 - merge patch. 22820 - items: 22821 - type: string 22822 - type: array 22823 - x-kubernetes-list-type: atomic 22824 - required: 22825 - - key 22826 - - operator 22827 - type: object 22828 - type: array 22829 - x-kubernetes-list-type: atomic 22830 - matchLabels: 22831 - additionalProperties: 22832 - type: string 22833 - description: |- 22834 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 22835 - map is equivalent to an element of matchExpressions, whose key field is "key", the 22836 - operator is "In", and the values array contains only "value". The requirements are ANDed. 22837 - type: object 22838 - type: object 22839 - x-kubernetes-map-type: atomic 22840 - sourceRef: 22841 - description: |- 22842 - SourceRef refers to the resource giving access details 22843 - to a git repository. 22844 - properties: 22845 - apiVersion: 22846 - description: API version of the referent. 22847 - type: string 22848 - kind: 22849 - default: GitRepository 22850 - description: Kind of the referent. 22851 - enum: 22852 - - GitRepository 22853 - type: string 22854 - name: 22855 - description: Name of the referent. 22856 - type: string 22857 - namespace: 22858 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 22859 - resource object that contains the reference. 22860 - type: string 22861 - required: 22862 - - kind 22863 - - name 22864 - type: object 22865 - suspend: 22866 - description: |- 22867 - Suspend tells the controller to not run this automation, until 22868 - it is unset (or set to false). Defaults to false. 22869 - type: boolean 22870 - update: 22871 - default: 22872 - strategy: Setters 22873 - description: |- 22874 - Update gives the specification for how to update the files in 22875 - the repository. This can be left empty, to use the default 22876 - value. 22877 - properties: 22878 - path: 22879 - description: |- 22880 - Path to the directory containing the manifests to be updated. 22881 - Defaults to 'None', which translates to the root path 22882 - of the GitRepositoryRef. 22883 - type: string 22884 - strategy: 22885 - default: Setters 22886 - description: Strategy names the strategy to be used. 22887 - enum: 22888 - - Setters 22889 - type: string 22890 - type: object 22891 - required: 22892 - - interval 22893 - - sourceRef 22894 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 22895 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 22896 + type: string 22897 + semver: 22898 + description: SemVer tag expression to check out, takes 22899 + precedence over Tag. 22900 + type: string 22901 + tag: 22902 + description: Tag to check out, takes precedence over Branch. 22903 + type: string 22904 type: object 22905 - status: 22906 - default: 22907 - observedGeneration: -1 22908 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 22909 + required: 22910 + - ref 22911 + type: object 22912 + commit: 22913 + description: Commit specifies how to commit to the git repository. 22914 + properties: 22915 + author: 22916 + description: |- 22917 + Author gives the email and optionally the name to use as the 22918 + author of commits. 22919 properties: 22920 - conditions: 22921 - items: 22922 - description: Condition contains details for one aspect of the current state of this API 22923 - Resource. 22924 - properties: 22925 - lastTransitionTime: 22926 - description: |- 22927 - lastTransitionTime is the last time the condition transitioned from one status to another. 22928 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22929 - format: date-time 22930 - type: string 22931 - message: 22932 - description: |- 22933 - message is a human readable message indicating details about the transition. 22934 - This may be an empty string. 22935 - maxLength: 32768 22936 - type: string 22937 - observedGeneration: 22938 - description: |- 22939 - observedGeneration represents the .metadata.generation that the condition was set based upon. 22940 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22941 - with respect to the current state of the instance. 22942 - format: int64 22943 - minimum: 0 22944 - type: integer 22945 - reason: 22946 - description: |- 22947 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 22948 - Producers of specific condition types may define expected values and meanings for this field, 22949 - and whether the values are considered a guaranteed API. 22950 - The value should be a CamelCase string. 22951 - This field may not be empty. 22952 - maxLength: 1024 22953 - minLength: 1 22954 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22955 - type: string 22956 - status: 22957 - description: status of the condition, one of True, False, Unknown. 22958 - enum: 22959 - - "True" 22960 - - "False" 22961 - - Unknown 22962 - type: string 22963 - type: 22964 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 22965 - maxLength: 316 22966 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22967 - type: string 22968 - required: 22969 - - lastTransitionTime 22970 - - message 22971 - - reason 22972 - - status 22973 - - type 22974 - type: object 22975 - type: array 22976 - lastAutomationRunTime: 22977 - description: |- 22978 - LastAutomationRunTime records the last time the controller ran 22979 - this automation through to completion (even if no updates were 22980 - made). 22981 - format: date-time 22982 - type: string 22983 - lastHandledReconcileAt: 22984 - description: |- 22985 - LastHandledReconcileAt holds the value of the most recent 22986 - reconcile request value, so a change of the annotation value 22987 - can be detected. 22988 - type: string 22989 - lastPushCommit: 22990 - description: |- 22991 - LastPushCommit records the SHA1 of the last commit made by the 22992 - controller, for this automation object 22993 - type: string 22994 - lastPushTime: 22995 - description: LastPushTime records the time of the last pushed change. 22996 - format: date-time 22997 - type: string 22998 - observedGeneration: 22999 - format: int64 23000 - type: integer 23001 - observedPolicies: 23002 - additionalProperties: 23003 - description: ImageRef represents an image reference. 23004 - properties: 23005 - digest: 23006 - description: Digest is the image's digest. 23007 - type: string 23008 - name: 23009 - description: Name is the bare image's name. 23010 - type: string 23011 - tag: 23012 - description: Tag is the image's tag. 23013 - type: string 23014 - required: 23015 - - name 23016 - - tag 23017 - type: object 23018 - description: |- 23019 - ObservedPolicies is the list of observed ImagePolicies that were 23020 - considered by the ImageUpdateAutomation update process. 23021 - type: object 23022 - observedSourceRevision: 23023 - description: |- 23024 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 23025 - ObservedSourceRevision is the last observed source revision. This can be 23026 - used to determine if the source has been updated since last observation. 23027 - type: string 23028 + email: 23029 + description: Email gives the email to provide when making 23030 + a commit. 23031 + type: string 23032 + name: 23033 + description: Name gives the name to provide when making 23034 + a commit. 23035 + type: string 23036 + required: 23037 + - email 23038 type: object 23039 - type: object 23040 - served: true 23041 - storage: true 23042 - subresources: 23043 - status: {} 23044 - - additionalPrinterColumns: 23045 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 23046 - name: Ready 23047 - type: string 23048 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 23049 - name: Status 23050 - type: string 23051 - - jsonPath: .status.lastAutomationRunTime 23052 - name: Last run 23053 - priority: 1 23054 - type: string 23055 - - jsonPath: .metadata.creationTimestamp 23056 - name: Age 23057 - type: date 23058 - deprecated: true 23059 - deprecationWarning: v1beta2 ImageUpdateAutomation is deprecated, upgrade to v1 23060 - name: v1beta2 23061 - schema: 23062 - openAPIV3Schema: 23063 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 23064 - properties: 23065 - apiVersion: 23066 + messageTemplate: 23067 description: |- 23068 - APIVersion defines the versioned schema of this representation of an object. 23069 - Servers should convert recognized schemas to the latest internal value, and 23070 - may reject unrecognized values. 23071 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23072 + MessageTemplate provides a template for the commit message, 23073 + into which will be interpolated the details of the change made. 23074 + Note: The `Updated` template field has been removed. Use `Changed` instead. 23075 type: string 23076 - kind: 23077 + messageTemplateValues: 23078 + additionalProperties: 23079 + type: string 23080 + description: |- 23081 + MessageTemplateValues provides additional values to be available to the 23082 + templating rendering. 23083 + type: object 23084 + signingKey: 23085 + description: SigningKey provides the option to sign commits 23086 + with a GPG key 23087 + properties: 23088 + secretRef: 23089 + description: |- 23090 + SecretRef holds the name to a secret that contains a 'git.asc' key 23091 + corresponding to the ASCII Armored file containing the GPG signing 23092 + keypair as the value. It must be in the same namespace as the 23093 + ImageUpdateAutomation. 23094 + properties: 23095 + name: 23096 + description: Name of the referent. 23097 + type: string 23098 + required: 23099 + - name 23100 + type: object 23101 + required: 23102 + - secretRef 23103 + type: object 23104 + required: 23105 + - author 23106 + type: object 23107 + push: 23108 + description: |- 23109 + Push specifies how and where to push commits made by the 23110 + automation. If missing, commits are pushed (back) to 23111 + `.spec.checkout.branch` or its default. 23112 + properties: 23113 + branch: 23114 description: |- 23115 - Kind is a string value representing the REST resource this object represents. 23116 - Servers may infer this from the endpoint the client submits requests to. 23117 - Cannot be updated. 23118 - In CamelCase. 23119 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23120 + Branch specifies that commits should be pushed to the branch 23121 + named. The branch is created using `.spec.checkout.branch` as the 23122 + starting point, if it doesn't already exist. 23123 type: string 23124 - metadata: 23125 + options: 23126 + additionalProperties: 23127 + type: string 23128 + description: |- 23129 + Options specifies the push options that are sent to the Git 23130 + server when performing a push operation. For details, see: 23131 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 23132 type: object 23133 - spec: 23134 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 23135 + refspec: 23136 + description: |- 23137 + Refspec specifies the Git Refspec to use for a push operation. 23138 + If both Branch and Refspec are provided, then the commit is pushed 23139 + to the branch and also using the specified refspec. 23140 + For more details about Git Refspecs, see: 23141 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 23142 + type: string 23143 + type: object 23144 + required: 23145 + - commit 23146 + type: object 23147 + interval: 23148 + description: |- 23149 + Interval gives an lower bound for how often the automation 23150 + run should be attempted. 23151 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23152 + type: string 23153 + policySelector: 23154 + description: |- 23155 + PolicySelector allows to filter applied policies based on labels. 23156 + By default includes all policies in namespace. 23157 + properties: 23158 + matchExpressions: 23159 + description: matchExpressions is a list of label selector requirements. 23160 + The requirements are ANDed. 23161 + items: 23162 + description: |- 23163 + A label selector requirement is a selector that contains values, a key, and an operator that 23164 + relates the key and values. 23165 + properties: 23166 + key: 23167 + description: key is the label key that the selector applies 23168 + to. 23169 + type: string 23170 + operator: 23171 + description: |- 23172 + operator represents a key's relationship to a set of values. 23173 + Valid operators are In, NotIn, Exists and DoesNotExist. 23174 + type: string 23175 + values: 23176 + description: |- 23177 + values is an array of string values. If the operator is In or NotIn, 23178 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 23179 + the values array must be empty. This array is replaced during a strategic 23180 + merge patch. 23181 + items: 23182 + type: string 23183 + type: array 23184 + x-kubernetes-list-type: atomic 23185 + required: 23186 + - key 23187 + - operator 23188 + type: object 23189 + type: array 23190 + x-kubernetes-list-type: atomic 23191 + matchLabels: 23192 + additionalProperties: 23193 + type: string 23194 + description: |- 23195 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23196 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23197 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23198 + type: object 23199 + type: object 23200 + x-kubernetes-map-type: atomic 23201 + sourceRef: 23202 + description: |- 23203 + SourceRef refers to the resource giving access details 23204 + to a git repository. 23205 + properties: 23206 + apiVersion: 23207 + description: API version of the referent. 23208 + type: string 23209 + kind: 23210 + default: GitRepository 23211 + description: Kind of the referent. 23212 + enum: 23213 + - GitRepository 23214 + type: string 23215 + name: 23216 + description: Name of the referent. 23217 + type: string 23218 + namespace: 23219 + description: Namespace of the referent, defaults to the namespace 23220 + of the Kubernetes resource object that contains the reference. 23221 + type: string 23222 + required: 23223 + - kind 23224 + - name 23225 + type: object 23226 + suspend: 23227 + description: |- 23228 + Suspend tells the controller to not run this automation, until 23229 + it is unset (or set to false). Defaults to false. 23230 + type: boolean 23231 + update: 23232 + default: 23233 + strategy: Setters 23234 + description: |- 23235 + Update gives the specification for how to update the files in 23236 + the repository. This can be left empty, to use the default 23237 + value. 23238 + properties: 23239 + path: 23240 + description: |- 23241 + Path to the directory containing the manifests to be updated. 23242 + Defaults to 'None', which translates to the root path 23243 + of the GitRepositoryRef. 23244 + type: string 23245 + strategy: 23246 + default: Setters 23247 + description: Strategy names the strategy to be used. 23248 + enum: 23249 + - Setters 23250 + type: string 23251 + type: object 23252 + required: 23253 + - interval 23254 + - sourceRef 23255 + type: object 23256 + status: 23257 + default: 23258 + observedGeneration: -1 23259 + description: ImageUpdateAutomationStatus defines the observed state of 23260 + ImageUpdateAutomation 23261 + properties: 23262 + conditions: 23263 + items: 23264 + description: Condition contains details for one aspect of the current 23265 + state of this API Resource. 23266 + properties: 23267 + lastTransitionTime: 23268 + description: |- 23269 + lastTransitionTime is the last time the condition transitioned from one status to another. 23270 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23271 + format: date-time 23272 + type: string 23273 + message: 23274 + description: |- 23275 + message is a human readable message indicating details about the transition. 23276 + This may be an empty string. 23277 + maxLength: 32768 23278 + type: string 23279 + observedGeneration: 23280 + description: |- 23281 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23282 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23283 + with respect to the current state of the instance. 23284 + format: int64 23285 + minimum: 0 23286 + type: integer 23287 + reason: 23288 + description: |- 23289 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23290 + Producers of specific condition types may define expected values and meanings for this field, 23291 + and whether the values are considered a guaranteed API. 23292 + The value should be a CamelCase string. 23293 + This field may not be empty. 23294 + maxLength: 1024 23295 + minLength: 1 23296 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23297 + type: string 23298 + status: 23299 + description: status of the condition, one of True, False, Unknown. 23300 + enum: 23301 + - "True" 23302 + - "False" 23303 + - Unknown 23304 + type: string 23305 + type: 23306 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23307 + maxLength: 316 23308 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23309 + type: string 23310 + required: 23311 + - lastTransitionTime 23312 + - message 23313 + - reason 23314 + - status 23315 + - type 23316 + type: object 23317 + type: array 23318 + lastAutomationRunTime: 23319 + description: |- 23320 + LastAutomationRunTime records the last time the controller ran 23321 + this automation through to completion (even if no updates were 23322 + made). 23323 + format: date-time 23324 + type: string 23325 + lastHandledReconcileAt: 23326 + description: |- 23327 + LastHandledReconcileAt holds the value of the most recent 23328 + reconcile request value, so a change of the annotation value 23329 + can be detected. 23330 + type: string 23331 + lastPushCommit: 23332 + description: |- 23333 + LastPushCommit records the SHA1 of the last commit made by the 23334 + controller, for this automation object 23335 + type: string 23336 + lastPushTime: 23337 + description: LastPushTime records the time of the last pushed change. 23338 + format: date-time 23339 + type: string 23340 + observedGeneration: 23341 + format: int64 23342 + type: integer 23343 + observedPolicies: 23344 + additionalProperties: 23345 + description: ImageRef represents an image reference. 23346 + properties: 23347 + digest: 23348 + description: Digest is the image's digest. 23349 + type: string 23350 + name: 23351 + description: Name is the bare image's name. 23352 + type: string 23353 + tag: 23354 + description: Tag is the image's tag. 23355 + type: string 23356 + required: 23357 + - name 23358 + - tag 23359 + type: object 23360 + description: |- 23361 + ObservedPolicies is the list of observed ImagePolicies that were 23362 + considered by the ImageUpdateAutomation update process. 23363 + type: object 23364 + observedSourceRevision: 23365 + description: |- 23366 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 23367 + ObservedSourceRevision is the last observed source revision. This can be 23368 + used to determine if the source has been updated since last observation. 23369 + type: string 23370 + type: object 23371 + type: object 23372 + served: true 23373 + storage: true 23374 + subresources: 23375 + status: {} 23376 + - additionalPrinterColumns: 23377 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23378 + name: Ready 23379 + type: string 23380 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23381 + name: Status 23382 + type: string 23383 + - jsonPath: .status.lastAutomationRunTime 23384 + name: Last run 23385 + priority: 1 23386 + type: string 23387 + - jsonPath: .metadata.creationTimestamp 23388 + name: Age 23389 + type: date 23390 + deprecated: true 23391 + deprecationWarning: v1beta2 ImageUpdateAutomation is deprecated, upgrade to v1 23392 + name: v1beta2 23393 + schema: 23394 + openAPIV3Schema: 23395 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 23396 + API 23397 + properties: 23398 + apiVersion: 23399 + description: |- 23400 + APIVersion defines the versioned schema of this representation of an object. 23401 + Servers should convert recognized schemas to the latest internal value, and 23402 + may reject unrecognized values. 23403 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23404 + type: string 23405 + kind: 23406 + description: |- 23407 + Kind is a string value representing the REST resource this object represents. 23408 + Servers may infer this from the endpoint the client submits requests to. 23409 + Cannot be updated. 23410 + In CamelCase. 23411 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23412 + type: string 23413 + metadata: 23414 + type: object 23415 + spec: 23416 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 23417 + properties: 23418 + git: 23419 + description: |- 23420 + GitSpec contains all the git-specific definitions. This is 23421 + technically optional, but in practice mandatory until there are 23422 + other kinds of source allowed. 23423 + properties: 23424 + checkout: 23425 + description: |- 23426 + Checkout gives the parameters for cloning the git repository, 23427 + ready to make changes. If not present, the `spec.ref` field from the 23428 + referenced `GitRepository` or its default will be used. 23429 + properties: 23430 + ref: 23431 + description: |- 23432 + Reference gives a branch, tag or commit to clone from the Git 23433 + repository. 23434 properties: 23435 - git: 23436 - description: |- 23437 - GitSpec contains all the git-specific definitions. This is 23438 - technically optional, but in practice mandatory until there are 23439 - other kinds of source allowed. 23440 - properties: 23441 - checkout: 23442 - description: |- 23443 - Checkout gives the parameters for cloning the git repository, 23444 - ready to make changes. If not present, the `spec.ref` field from the 23445 - referenced `GitRepository` or its default will be used. 23446 - properties: 23447 - ref: 23448 - description: |- 23449 - Reference gives a branch, tag or commit to clone from the Git 23450 - repository. 23451 - properties: 23452 - branch: 23453 - description: Branch to check out, defaults to 'master' if no other 23454 - field is defined. 23455 - type: string 23456 - commit: 23457 - description: |- 23458 - Commit SHA to check out, takes precedence over all reference fields. 23459 + branch: 23460 + description: Branch to check out, defaults to 'master' 23461 + if no other field is defined. 23462 + type: string 23463 + commit: 23464 + description: |- 23465 + Commit SHA to check out, takes precedence over all reference fields. 23466 23467 - This can be combined with Branch to shallow clone the branch, in which 23468 - the commit is expected to exist. 23469 - type: string 23470 - name: 23471 - description: |- 23472 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 23473 + This can be combined with Branch to shallow clone the branch, in which 23474 + the commit is expected to exist. 23475 + type: string 23476 + name: 23477 + description: |- 23478 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 23479 23480 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 23481 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 23482 - type: string 23483 - semver: 23484 - description: SemVer tag expression to check out, takes precedence 23485 - over Tag. 23486 - type: string 23487 - tag: 23488 - description: Tag to check out, takes precedence over Branch. 23489 - type: string 23490 - type: object 23491 - required: 23492 - - ref 23493 - type: object 23494 - commit: 23495 - description: Commit specifies how to commit to the git repository. 23496 - properties: 23497 - author: 23498 - description: |- 23499 - Author gives the email and optionally the name to use as the 23500 - author of commits. 23501 - properties: 23502 - email: 23503 - description: Email gives the email to provide when making a commit. 23504 - type: string 23505 - name: 23506 - description: Name gives the name to provide when making a commit. 23507 - type: string 23508 - required: 23509 - - email 23510 - type: object 23511 - messageTemplate: 23512 - description: |- 23513 - MessageTemplate provides a template for the commit message, 23514 - into which will be interpolated the details of the change made. 23515 - Note: The `Updated` template field has been removed. Use `Changed` instead. 23516 - type: string 23517 - messageTemplateValues: 23518 - additionalProperties: 23519 - type: string 23520 - description: |- 23521 - MessageTemplateValues provides additional values to be available to the 23522 - templating rendering. 23523 - type: object 23524 - signingKey: 23525 - description: SigningKey provides the option to sign commits with a GPG key 23526 - properties: 23527 - secretRef: 23528 - description: |- 23529 - SecretRef holds the name to a secret that contains a 'git.asc' key 23530 - corresponding to the ASCII Armored file containing the GPG signing 23531 - keypair as the value. It must be in the same namespace as the 23532 - ImageUpdateAutomation. 23533 - properties: 23534 - name: 23535 - description: Name of the referent. 23536 - type: string 23537 - required: 23538 - - name 23539 - type: object 23540 - required: 23541 - - secretRef 23542 - type: object 23543 - required: 23544 - - author 23545 - type: object 23546 - push: 23547 - description: |- 23548 - Push specifies how and where to push commits made by the 23549 - automation. If missing, commits are pushed (back) to 23550 - `.spec.checkout.branch` or its default. 23551 - properties: 23552 - branch: 23553 - description: |- 23554 - Branch specifies that commits should be pushed to the branch 23555 - named. The branch is created using `.spec.checkout.branch` as the 23556 - starting point, if it doesn't already exist. 23557 - type: string 23558 - options: 23559 - additionalProperties: 23560 - type: string 23561 - description: |- 23562 - Options specifies the push options that are sent to the Git 23563 - server when performing a push operation. For details, see: 23564 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 23565 - type: object 23566 - refspec: 23567 - description: |- 23568 - Refspec specifies the Git Refspec to use for a push operation. 23569 - If both Branch and Refspec are provided, then the commit is pushed 23570 - to the branch and also using the specified refspec. 23571 - For more details about Git Refspecs, see: 23572 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 23573 - type: string 23574 - type: object 23575 - required: 23576 - - commit 23577 - type: object 23578 - interval: 23579 - description: |- 23580 - Interval gives an lower bound for how often the automation 23581 - run should be attempted. 23582 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23583 - type: string 23584 - policySelector: 23585 - description: |- 23586 - PolicySelector allows to filter applied policies based on labels. 23587 - By default includes all policies in namespace. 23588 - properties: 23589 - matchExpressions: 23590 - description: matchExpressions is a list of label selector requirements. The requirements 23591 - are ANDed. 23592 - items: 23593 - description: |- 23594 - A label selector requirement is a selector that contains values, a key, and an operator that 23595 - relates the key and values. 23596 - properties: 23597 - key: 23598 - description: key is the label key that the selector applies to. 23599 - type: string 23600 - operator: 23601 - description: |- 23602 - operator represents a key's relationship to a set of values. 23603 - Valid operators are In, NotIn, Exists and DoesNotExist. 23604 - type: string 23605 - values: 23606 - description: |- 23607 - values is an array of string values. If the operator is In or NotIn, 23608 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 23609 - the values array must be empty. This array is replaced during a strategic 23610 - merge patch. 23611 - items: 23612 - type: string 23613 - type: array 23614 - x-kubernetes-list-type: atomic 23615 - required: 23616 - - key 23617 - - operator 23618 - type: object 23619 - type: array 23620 - x-kubernetes-list-type: atomic 23621 - matchLabels: 23622 - additionalProperties: 23623 - type: string 23624 - description: |- 23625 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23626 - map is equivalent to an element of matchExpressions, whose key field is "key", the 23627 - operator is "In", and the values array contains only "value". The requirements are ANDed. 23628 - type: object 23629 - type: object 23630 - x-kubernetes-map-type: atomic 23631 - sourceRef: 23632 - description: |- 23633 - SourceRef refers to the resource giving access details 23634 - to a git repository. 23635 - properties: 23636 - apiVersion: 23637 - description: API version of the referent. 23638 - type: string 23639 - kind: 23640 - default: GitRepository 23641 - description: Kind of the referent. 23642 - enum: 23643 - - GitRepository 23644 - type: string 23645 - name: 23646 - description: Name of the referent. 23647 - type: string 23648 - namespace: 23649 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 23650 - resource object that contains the reference. 23651 - type: string 23652 - required: 23653 - - kind 23654 - - name 23655 - type: object 23656 - suspend: 23657 - description: |- 23658 - Suspend tells the controller to not run this automation, until 23659 - it is unset (or set to false). Defaults to false. 23660 - type: boolean 23661 - update: 23662 - default: 23663 - strategy: Setters 23664 - description: |- 23665 - Update gives the specification for how to update the files in 23666 - the repository. This can be left empty, to use the default 23667 - value. 23668 - properties: 23669 - path: 23670 - description: |- 23671 - Path to the directory containing the manifests to be updated. 23672 - Defaults to 'None', which translates to the root path 23673 - of the GitRepositoryRef. 23674 - type: string 23675 - strategy: 23676 - default: Setters 23677 - description: Strategy names the strategy to be used. 23678 - enum: 23679 - - Setters 23680 - type: string 23681 - type: object 23682 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 23683 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 23684 + type: string 23685 + semver: 23686 + description: SemVer tag expression to check out, takes 23687 + precedence over Tag. 23688 + type: string 23689 + tag: 23690 + description: Tag to check out, takes precedence over Branch. 23691 + type: string 23692 + type: object 23693 + required: 23694 + - ref 23695 + type: object 23696 + commit: 23697 + description: Commit specifies how to commit to the git repository. 23698 + properties: 23699 + author: 23700 + description: |- 23701 + Author gives the email and optionally the name to use as the 23702 + author of commits. 23703 + properties: 23704 + email: 23705 + description: Email gives the email to provide when making 23706 + a commit. 23707 + type: string 23708 + name: 23709 + description: Name gives the name to provide when making 23710 + a commit. 23711 + type: string 23712 required: 23713 - - interval 23714 - - sourceRef 23715 + - email 23716 type: object 23717 - status: 23718 - default: 23719 - observedGeneration: -1 23720 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 23721 + messageTemplate: 23722 + description: |- 23723 + MessageTemplate provides a template for the commit message, 23724 + into which will be interpolated the details of the change made. 23725 + Note: The `Updated` template field has been removed. Use `Changed` instead. 23726 + type: string 23727 + messageTemplateValues: 23728 + additionalProperties: 23729 + type: string 23730 + description: |- 23731 + MessageTemplateValues provides additional values to be available to the 23732 + templating rendering. 23733 + type: object 23734 + signingKey: 23735 + description: SigningKey provides the option to sign commits 23736 + with a GPG key 23737 properties: 23738 - conditions: 23739 - items: 23740 - description: Condition contains details for one aspect of the current state of this API 23741 - Resource. 23742 - properties: 23743 - lastTransitionTime: 23744 - description: |- 23745 - lastTransitionTime is the last time the condition transitioned from one status to another. 23746 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23747 - format: date-time 23748 - type: string 23749 - message: 23750 - description: |- 23751 - message is a human readable message indicating details about the transition. 23752 - This may be an empty string. 23753 - maxLength: 32768 23754 - type: string 23755 - observedGeneration: 23756 - description: |- 23757 - observedGeneration represents the .metadata.generation that the condition was set based upon. 23758 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23759 - with respect to the current state of the instance. 23760 - format: int64 23761 - minimum: 0 23762 - type: integer 23763 - reason: 23764 - description: |- 23765 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 23766 - Producers of specific condition types may define expected values and meanings for this field, 23767 - and whether the values are considered a guaranteed API. 23768 - The value should be a CamelCase string. 23769 - This field may not be empty. 23770 - maxLength: 1024 23771 - minLength: 1 23772 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23773 - type: string 23774 - status: 23775 - description: status of the condition, one of True, False, Unknown. 23776 - enum: 23777 - - "True" 23778 - - "False" 23779 - - Unknown 23780 - type: string 23781 - type: 23782 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 23783 - maxLength: 316 23784 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23785 - type: string 23786 - required: 23787 - - lastTransitionTime 23788 - - message 23789 - - reason 23790 - - status 23791 - - type 23792 - type: object 23793 - type: array 23794 - lastAutomationRunTime: 23795 - description: |- 23796 - LastAutomationRunTime records the last time the controller ran 23797 - this automation through to completion (even if no updates were 23798 - made). 23799 - format: date-time 23800 - type: string 23801 - lastHandledReconcileAt: 23802 - description: |- 23803 - LastHandledReconcileAt holds the value of the most recent 23804 - reconcile request value, so a change of the annotation value 23805 - can be detected. 23806 - type: string 23807 - lastPushCommit: 23808 - description: |- 23809 - LastPushCommit records the SHA1 of the last commit made by the 23810 - controller, for this automation object 23811 - type: string 23812 - lastPushTime: 23813 - description: LastPushTime records the time of the last pushed change. 23814 - format: date-time 23815 - type: string 23816 - observedGeneration: 23817 - format: int64 23818 - type: integer 23819 - observedPolicies: 23820 - additionalProperties: 23821 - description: ImageRef represents an image reference. 23822 - properties: 23823 - digest: 23824 - description: Digest is the image's digest. 23825 - type: string 23826 - name: 23827 - description: Name is the bare image's name. 23828 - type: string 23829 - tag: 23830 - description: Tag is the image's tag. 23831 - type: string 23832 - required: 23833 - - name 23834 - - tag 23835 - type: object 23836 - description: |- 23837 - ObservedPolicies is the list of observed ImagePolicies that were 23838 - considered by the ImageUpdateAutomation update process. 23839 - type: object 23840 - observedSourceRevision: 23841 - description: |- 23842 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 23843 - ObservedSourceRevision is the last observed source revision. This can be 23844 - used to determine if the source has been updated since last observation. 23845 - type: string 23846 + secretRef: 23847 + description: |- 23848 + SecretRef holds the name to a secret that contains a 'git.asc' key 23849 + corresponding to the ASCII Armored file containing the GPG signing 23850 + keypair as the value. It must be in the same namespace as the 23851 + ImageUpdateAutomation. 23852 + properties: 23853 + name: 23854 + description: Name of the referent. 23855 + type: string 23856 + required: 23857 + - name 23858 + type: object 23859 + required: 23860 + - secretRef 23861 + type: object 23862 + required: 23863 + - author 23864 + type: object 23865 + push: 23866 + description: |- 23867 + Push specifies how and where to push commits made by the 23868 + automation. If missing, commits are pushed (back) to 23869 + `.spec.checkout.branch` or its default. 23870 + properties: 23871 + branch: 23872 + description: |- 23873 + Branch specifies that commits should be pushed to the branch 23874 + named. The branch is created using `.spec.checkout.branch` as the 23875 + starting point, if it doesn't already exist. 23876 + type: string 23877 + options: 23878 + additionalProperties: 23879 + type: string 23880 + description: |- 23881 + Options specifies the push options that are sent to the Git 23882 + server when performing a push operation. For details, see: 23883 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 23884 type: object 23885 + refspec: 23886 + description: |- 23887 + Refspec specifies the Git Refspec to use for a push operation. 23888 + If both Branch and Refspec are provided, then the commit is pushed 23889 + to the branch and also using the specified refspec. 23890 + For more details about Git Refspecs, see: 23891 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 23892 + type: string 23893 + type: object 23894 + required: 23895 + - commit 23896 + type: object 23897 + interval: 23898 + description: |- 23899 + Interval gives an lower bound for how often the automation 23900 + run should be attempted. 23901 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23902 + type: string 23903 + policySelector: 23904 + description: |- 23905 + PolicySelector allows to filter applied policies based on labels. 23906 + By default includes all policies in namespace. 23907 + properties: 23908 + matchExpressions: 23909 + description: matchExpressions is a list of label selector requirements. 23910 + The requirements are ANDed. 23911 + items: 23912 + description: |- 23913 + A label selector requirement is a selector that contains values, a key, and an operator that 23914 + relates the key and values. 23915 + properties: 23916 + key: 23917 + description: key is the label key that the selector applies 23918 + to. 23919 + type: string 23920 + operator: 23921 + description: |- 23922 + operator represents a key's relationship to a set of values. 23923 + Valid operators are In, NotIn, Exists and DoesNotExist. 23924 + type: string 23925 + values: 23926 + description: |- 23927 + values is an array of string values. If the operator is In or NotIn, 23928 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 23929 + the values array must be empty. This array is replaced during a strategic 23930 + merge patch. 23931 + items: 23932 + type: string 23933 + type: array 23934 + x-kubernetes-list-type: atomic 23935 + required: 23936 + - key 23937 + - operator 23938 + type: object 23939 + type: array 23940 + x-kubernetes-list-type: atomic 23941 + matchLabels: 23942 + additionalProperties: 23943 + type: string 23944 + description: |- 23945 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23946 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23947 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23948 + type: object 23949 + type: object 23950 + x-kubernetes-map-type: atomic 23951 + sourceRef: 23952 + description: |- 23953 + SourceRef refers to the resource giving access details 23954 + to a git repository. 23955 + properties: 23956 + apiVersion: 23957 + description: API version of the referent. 23958 + type: string 23959 + kind: 23960 + default: GitRepository 23961 + description: Kind of the referent. 23962 + enum: 23963 + - GitRepository 23964 + type: string 23965 + name: 23966 + description: Name of the referent. 23967 + type: string 23968 + namespace: 23969 + description: Namespace of the referent, defaults to the namespace 23970 + of the Kubernetes resource object that contains the reference. 23971 + type: string 23972 + required: 23973 + - kind 23974 + - name 23975 + type: object 23976 + suspend: 23977 + description: |- 23978 + Suspend tells the controller to not run this automation, until 23979 + it is unset (or set to false). Defaults to false. 23980 + type: boolean 23981 + update: 23982 + default: 23983 + strategy: Setters 23984 + description: |- 23985 + Update gives the specification for how to update the files in 23986 + the repository. This can be left empty, to use the default 23987 + value. 23988 + properties: 23989 + path: 23990 + description: |- 23991 + Path to the directory containing the manifests to be updated. 23992 + Defaults to 'None', which translates to the root path 23993 + of the GitRepositoryRef. 23994 + type: string 23995 + strategy: 23996 + default: Setters 23997 + description: Strategy names the strategy to be used. 23998 + enum: 23999 + - Setters 24000 + type: string 24001 + type: object 24002 + required: 24003 + - interval 24004 + - sourceRef 24005 + type: object 24006 + status: 24007 + default: 24008 + observedGeneration: -1 24009 + description: ImageUpdateAutomationStatus defines the observed state of 24010 + ImageUpdateAutomation 24011 + properties: 24012 + conditions: 24013 + items: 24014 + description: Condition contains details for one aspect of the current 24015 + state of this API Resource. 24016 + properties: 24017 + lastTransitionTime: 24018 + description: |- 24019 + lastTransitionTime is the last time the condition transitioned from one status to another. 24020 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24021 + format: date-time 24022 + type: string 24023 + message: 24024 + description: |- 24025 + message is a human readable message indicating details about the transition. 24026 + This may be an empty string. 24027 + maxLength: 32768 24028 + type: string 24029 + observedGeneration: 24030 + description: |- 24031 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24032 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24033 + with respect to the current state of the instance. 24034 + format: int64 24035 + minimum: 0 24036 + type: integer 24037 + reason: 24038 + description: |- 24039 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24040 + Producers of specific condition types may define expected values and meanings for this field, 24041 + and whether the values are considered a guaranteed API. 24042 + The value should be a CamelCase string. 24043 + This field may not be empty. 24044 + maxLength: 1024 24045 + minLength: 1 24046 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24047 + type: string 24048 + status: 24049 + description: status of the condition, one of True, False, Unknown. 24050 + enum: 24051 + - "True" 24052 + - "False" 24053 + - Unknown 24054 + type: string 24055 + type: 24056 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24057 + maxLength: 316 24058 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24059 + type: string 24060 + required: 24061 + - lastTransitionTime 24062 + - message 24063 + - reason 24064 + - status 24065 + - type 24066 + type: object 24067 + type: array 24068 + lastAutomationRunTime: 24069 + description: |- 24070 + LastAutomationRunTime records the last time the controller ran 24071 + this automation through to completion (even if no updates were 24072 + made). 24073 + format: date-time 24074 + type: string 24075 + lastHandledReconcileAt: 24076 + description: |- 24077 + LastHandledReconcileAt holds the value of the most recent 24078 + reconcile request value, so a change of the annotation value 24079 + can be detected. 24080 + type: string 24081 + lastPushCommit: 24082 + description: |- 24083 + LastPushCommit records the SHA1 of the last commit made by the 24084 + controller, for this automation object 24085 + type: string 24086 + lastPushTime: 24087 + description: LastPushTime records the time of the last pushed change. 24088 + format: date-time 24089 + type: string 24090 + observedGeneration: 24091 + format: int64 24092 + type: integer 24093 + observedPolicies: 24094 + additionalProperties: 24095 + description: ImageRef represents an image reference. 24096 + properties: 24097 + digest: 24098 + description: Digest is the image's digest. 24099 + type: string 24100 + name: 24101 + description: Name is the bare image's name. 24102 + type: string 24103 + tag: 24104 + description: Tag is the image's tag. 24105 + type: string 24106 + required: 24107 + - name 24108 + - tag 24109 + type: object 24110 + description: |- 24111 + ObservedPolicies is the list of observed ImagePolicies that were 24112 + considered by the ImageUpdateAutomation update process. 24113 type: object 24114 - served: true 24115 - storage: false 24116 - subresources: 24117 - status: {} 24118 + observedSourceRevision: 24119 + description: |- 24120 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 24121 + ObservedSourceRevision is the last observed source revision. This can be 24122 + used to determine if the source has been updated since last observation. 24123 + type: string 24124 + type: object 24125 + type: object 24126 + served: true 24127 + storage: false 24128 + subresources: 24129 + status: {} 24130 --- 24131 apiVersion: v1 24132 kind: ServiceAccount 24133 metadata: 24134 - labels: 24135 - app.kubernetes.io/component: image-automation-controller 24136 - app.kubernetes.io/instance: flux-system 24137 - app.kubernetes.io/part-of: flux 24138 - app.kubernetes.io/version: v2.7.3 24139 - name: image-automation-controller 24140 - namespace: flux-system 24141 + labels: 24142 + app.kubernetes.io/component: image-automation-controller 24143 + app.kubernetes.io/instance: flux-system 24144 + app.kubernetes.io/part-of: flux 24145 + app.kubernetes.io/version: v2.7.5 24146 + name: image-automation-controller 24147 + namespace: flux-system 24148 --- 24149 apiVersion: apps/v1 24150 kind: Deployment 24151 metadata: 24152 - labels: 24153 + labels: 24154 + app.kubernetes.io/component: image-automation-controller 24155 + app.kubernetes.io/instance: flux-system 24156 + app.kubernetes.io/part-of: flux 24157 + app.kubernetes.io/version: v2.7.5 24158 + control-plane: controller 24159 + name: image-automation-controller 24160 + namespace: flux-system 24161 +spec: 24162 + replicas: 1 24163 + selector: 24164 + matchLabels: 24165 + app: image-automation-controller 24166 + template: 24167 + metadata: 24168 + annotations: 24169 + prometheus.io/port: "8080" 24170 + prometheus.io/scrape: "true" 24171 + labels: 24172 + app: image-automation-controller 24173 app.kubernetes.io/component: image-automation-controller 24174 app.kubernetes.io/instance: flux-system 24175 app.kubernetes.io/part-of: flux 24176 - app.kubernetes.io/version: v2.7.3 24177 - control-plane: controller 24178 - name: image-automation-controller 24179 - namespace: flux-system 24180 -spec: 24181 - replicas: 1 24182 - selector: 24183 - matchLabels: 24184 - app: image-automation-controller 24185 - template: 24186 - metadata: 24187 - annotations: 24188 - prometheus.io/port: "8080" 24189 - prometheus.io/scrape: "true" 24190 - labels: 24191 - app: image-automation-controller 24192 - app.kubernetes.io/component: image-automation-controller 24193 - app.kubernetes.io/instance: flux-system 24194 - app.kubernetes.io/part-of: flux 24195 - app.kubernetes.io/version: v2.7.3 24196 - spec: 24197 - containers: 24198 - - args: 24199 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 24200 - - --watch-all-namespaces=true 24201 - - --log-level=info 24202 - - --log-encoding=json 24203 - - --enable-leader-election 24204 - env: 24205 - - name: RUNTIME_NAMESPACE 24206 - valueFrom: 24207 - fieldRef: 24208 - fieldPath: metadata.namespace 24209 - - name: GOMEMLIMIT 24210 - valueFrom: 24211 - resourceFieldRef: 24212 - containerName: manager 24213 - resource: limits.memory 24214 - image: ghcr.io/fluxcd/image-automation-controller:v1.0.3 24215 - imagePullPolicy: IfNotPresent 24216 - livenessProbe: 24217 - httpGet: 24218 - path: /healthz 24219 - port: healthz 24220 - name: manager 24221 - ports: 24222 - - containerPort: 8080 24223 - name: http-prom 24224 - protocol: TCP 24225 - - containerPort: 9440 24226 - name: healthz 24227 - protocol: TCP 24228 - readinessProbe: 24229 - httpGet: 24230 - path: /readyz 24231 - port: healthz 24232 - resources: 24233 - limits: 24234 - cpu: 1000m 24235 - memory: 1Gi 24236 - requests: 24237 - cpu: 100m 24238 - memory: 64Mi 24239 - securityContext: 24240 - allowPrivilegeEscalation: false 24241 - capabilities: 24242 - drop: 24243 - - ALL 24244 - readOnlyRootFilesystem: true 24245 - runAsNonRoot: true 24246 - seccompProfile: 24247 - type: RuntimeDefault 24248 - volumeMounts: 24249 - - mountPath: /tmp 24250 - name: temp 24251 - nodeSelector: 24252 - kubernetes.io/os: linux 24253 - securityContext: 24254 - fsGroup: 1337 24255 - serviceAccountName: image-automation-controller 24256 - terminationGracePeriodSeconds: 10 24257 - volumes: 24258 - - emptyDir: {} 24259 - name: temp 24260 + app.kubernetes.io/version: v2.7.5 24261 + spec: 24262 + containers: 24263 + - args: 24264 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 24265 + - --watch-all-namespaces=true 24266 + - --log-level=info 24267 + - --log-encoding=json 24268 + - --enable-leader-election 24269 + env: 24270 + - name: RUNTIME_NAMESPACE 24271 + valueFrom: 24272 + fieldRef: 24273 + fieldPath: metadata.namespace 24274 + - name: GOMEMLIMIT 24275 + valueFrom: 24276 + resourceFieldRef: 24277 + containerName: manager 24278 + resource: limits.memory 24279 + image: ghcr.io/fluxcd/image-automation-controller:v1.0.4 24280 + imagePullPolicy: IfNotPresent 24281 + livenessProbe: 24282 + httpGet: 24283 + path: /healthz 24284 + port: healthz 24285 + name: manager 24286 + ports: 24287 + - containerPort: 8080 24288 + name: http-prom 24289 + protocol: TCP 24290 + - containerPort: 9440 24291 + name: healthz 24292 + protocol: TCP 24293 + readinessProbe: 24294 + httpGet: 24295 + path: /readyz 24296 + port: healthz 24297 + resources: 24298 + limits: 24299 + cpu: 1000m 24300 + memory: 1Gi 24301 + requests: 24302 + cpu: 100m 24303 + memory: 64Mi 24304 + securityContext: 24305 + allowPrivilegeEscalation: false 24306 + capabilities: 24307 + drop: 24308 + - ALL 24309 + readOnlyRootFilesystem: true 24310 + runAsNonRoot: true 24311 + seccompProfile: 24312 + type: RuntimeDefault 24313 + volumeMounts: 24314 + - mountPath: /tmp 24315 + name: temp 24316 + nodeSelector: 24317 + kubernetes.io/os: linux 24318 + securityContext: 24319 + fsGroup: 1337 24320 + serviceAccountName: image-automation-controller 24321 + terminationGracePeriodSeconds: 10 24322 + volumes: 24323 + - emptyDir: {} 24324 + name: temp