7.diff (1597975B)
1 diff --git a/clusters/2024_cluster/flux-system/gotk-components.yaml b/clusters/2024_cluster/flux-system/gotk-components.yaml 2 index b60031b3..3d243307 100644 3 --- a/clusters/2024_cluster/flux-system/gotk-components.yaml 4 +++ b/clusters/2024_cluster/flux-system/gotk-components.yaml 5 @@ -1,14071 +1,14362 @@ 6 +--- 7 # This manifest was generated by flux. DO NOT EDIT. 8 -# Flux Version: v2.3.0 9 +# Flux Version: v2.4.0 10 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller 11 apiVersion: v1 12 kind: Namespace 13 metadata: 14 - labels: 15 - app.kubernetes.io/instance: flux-system 16 - app.kubernetes.io/part-of: flux 17 - app.kubernetes.io/version: v2.3.0 18 - pod-security.kubernetes.io/warn: restricted 19 - pod-security.kubernetes.io/warn-version: latest 20 - name: flux-system 21 + labels: 22 + app.kubernetes.io/instance: flux-system 23 + app.kubernetes.io/part-of: flux 24 + app.kubernetes.io/version: v2.4.0 25 + pod-security.kubernetes.io/warn: restricted 26 + pod-security.kubernetes.io/warn-version: latest 27 + name: flux-system 28 --- 29 apiVersion: networking.k8s.io/v1 30 kind: NetworkPolicy 31 metadata: 32 - labels: 33 - app.kubernetes.io/instance: flux-system 34 - app.kubernetes.io/part-of: flux 35 - app.kubernetes.io/version: v2.3.0 36 - name: allow-egress 37 - namespace: flux-system 38 + labels: 39 + app.kubernetes.io/instance: flux-system 40 + app.kubernetes.io/part-of: flux 41 + app.kubernetes.io/version: v2.4.0 42 + name: allow-egress 43 + namespace: flux-system 44 spec: 45 - egress: 46 - - {} 47 - ingress: 48 - - from: 49 - - podSelector: {} 50 - podSelector: {} 51 - policyTypes: 52 - - Ingress 53 - - Egress 54 + egress: 55 + - {} 56 + ingress: 57 + - from: 58 + - podSelector: {} 59 + podSelector: {} 60 + policyTypes: 61 + - Ingress 62 + - Egress 63 --- 64 apiVersion: networking.k8s.io/v1 65 kind: NetworkPolicy 66 metadata: 67 - labels: 68 - app.kubernetes.io/instance: flux-system 69 - app.kubernetes.io/part-of: flux 70 - app.kubernetes.io/version: v2.3.0 71 - name: allow-scraping 72 - namespace: flux-system 73 + labels: 74 + app.kubernetes.io/instance: flux-system 75 + app.kubernetes.io/part-of: flux 76 + app.kubernetes.io/version: v2.4.0 77 + name: allow-scraping 78 + namespace: flux-system 79 spec: 80 - ingress: 81 - - from: 82 - - namespaceSelector: {} 83 - ports: 84 - - port: 8080 85 - protocol: TCP 86 - podSelector: {} 87 - policyTypes: 88 - - Ingress 89 + ingress: 90 + - from: 91 + - namespaceSelector: {} 92 + ports: 93 + - port: 8080 94 + protocol: TCP 95 + podSelector: {} 96 + policyTypes: 97 + - Ingress 98 --- 99 apiVersion: networking.k8s.io/v1 100 kind: NetworkPolicy 101 metadata: 102 - labels: 103 - app.kubernetes.io/instance: flux-system 104 - app.kubernetes.io/part-of: flux 105 - app.kubernetes.io/version: v2.3.0 106 - name: allow-webhooks 107 - namespace: flux-system 108 + labels: 109 + app.kubernetes.io/instance: flux-system 110 + app.kubernetes.io/part-of: flux 111 + app.kubernetes.io/version: v2.4.0 112 + name: allow-webhooks 113 + namespace: flux-system 114 spec: 115 - ingress: 116 - - from: 117 - - namespaceSelector: {} 118 - podSelector: 119 - matchLabels: 120 - app: notification-controller 121 - policyTypes: 122 - - Ingress 123 + ingress: 124 + - from: 125 + - namespaceSelector: {} 126 + podSelector: 127 + matchLabels: 128 + app: notification-controller 129 + policyTypes: 130 + - Ingress 131 --- 132 apiVersion: v1 133 kind: ResourceQuota 134 metadata: 135 - labels: 136 - app.kubernetes.io/instance: flux-system 137 - app.kubernetes.io/part-of: flux 138 - app.kubernetes.io/version: v2.3.0 139 - name: critical-pods-flux-system 140 - namespace: flux-system 141 + labels: 142 + app.kubernetes.io/instance: flux-system 143 + app.kubernetes.io/part-of: flux 144 + app.kubernetes.io/version: v2.4.0 145 + name: critical-pods-flux-system 146 + namespace: flux-system 147 spec: 148 - hard: 149 - pods: "1000" 150 - scopeSelector: 151 - matchExpressions: 152 - - operator: In 153 - scopeName: PriorityClass 154 - values: 155 - - system-node-critical 156 - - system-cluster-critical 157 + hard: 158 + pods: "1000" 159 + scopeSelector: 160 + matchExpressions: 161 + - operator: In 162 + scopeName: PriorityClass 163 + values: 164 + - system-node-critical 165 + - system-cluster-critical 166 --- 167 apiVersion: rbac.authorization.k8s.io/v1 168 kind: ClusterRole 169 metadata: 170 - labels: 171 - app.kubernetes.io/instance: flux-system 172 - app.kubernetes.io/part-of: flux 173 - app.kubernetes.io/version: v2.3.0 174 - name: crd-controller-flux-system 175 + labels: 176 + app.kubernetes.io/instance: flux-system 177 + app.kubernetes.io/part-of: flux 178 + app.kubernetes.io/version: v2.4.0 179 + name: crd-controller-flux-system 180 rules: 181 - - apiGroups: 182 - - source.toolkit.fluxcd.io 183 - resources: 184 - - '*' 185 - verbs: 186 - - '*' 187 - - apiGroups: 188 - - kustomize.toolkit.fluxcd.io 189 - resources: 190 - - '*' 191 - verbs: 192 - - '*' 193 - - apiGroups: 194 - - helm.toolkit.fluxcd.io 195 - resources: 196 - - '*' 197 - verbs: 198 - - '*' 199 - - apiGroups: 200 - - notification.toolkit.fluxcd.io 201 - resources: 202 - - '*' 203 - verbs: 204 - - '*' 205 - - apiGroups: 206 - - image.toolkit.fluxcd.io 207 - resources: 208 - - '*' 209 - verbs: 210 - - '*' 211 - - apiGroups: 212 - - "" 213 - resources: 214 - - namespaces 215 - - secrets 216 - - configmaps 217 - - serviceaccounts 218 - verbs: 219 - - get 220 - - list 221 - - watch 222 - - apiGroups: 223 - - "" 224 - resources: 225 - - events 226 - verbs: 227 - - create 228 - - patch 229 - - apiGroups: 230 - - "" 231 - resources: 232 - - configmaps 233 - verbs: 234 - - get 235 - - list 236 - - watch 237 - - create 238 - - update 239 - - patch 240 - - delete 241 - - apiGroups: 242 - - "" 243 - resources: 244 - - configmaps/status 245 - verbs: 246 - - get 247 - - update 248 - - patch 249 - - apiGroups: 250 - - coordination.k8s.io 251 - resources: 252 - - leases 253 - verbs: 254 - - get 255 - - list 256 - - watch 257 - - create 258 - - update 259 - - patch 260 - - delete 261 - - nonResourceURLs: 262 - - /livez/ping 263 - verbs: 264 - - head 265 +- apiGroups: 266 + - source.toolkit.fluxcd.io 267 + resources: 268 + - '*' 269 + verbs: 270 + - '*' 271 +- apiGroups: 272 + - kustomize.toolkit.fluxcd.io 273 + resources: 274 + - '*' 275 + verbs: 276 + - '*' 277 +- apiGroups: 278 + - helm.toolkit.fluxcd.io 279 + resources: 280 + - '*' 281 + verbs: 282 + - '*' 283 +- apiGroups: 284 + - notification.toolkit.fluxcd.io 285 + resources: 286 + - '*' 287 + verbs: 288 + - '*' 289 +- apiGroups: 290 + - image.toolkit.fluxcd.io 291 + resources: 292 + - '*' 293 + verbs: 294 + - '*' 295 +- apiGroups: 296 + - "" 297 + resources: 298 + - namespaces 299 + - secrets 300 + - configmaps 301 + - serviceaccounts 302 + verbs: 303 + - get 304 + - list 305 + - watch 306 +- apiGroups: 307 + - "" 308 + resources: 309 + - events 310 + verbs: 311 + - create 312 + - patch 313 +- apiGroups: 314 + - "" 315 + resources: 316 + - configmaps 317 + verbs: 318 + - get 319 + - list 320 + - watch 321 + - create 322 + - update 323 + - patch 324 + - delete 325 +- apiGroups: 326 + - "" 327 + resources: 328 + - configmaps/status 329 + verbs: 330 + - get 331 + - update 332 + - patch 333 +- apiGroups: 334 + - coordination.k8s.io 335 + resources: 336 + - leases 337 + verbs: 338 + - get 339 + - list 340 + - watch 341 + - create 342 + - update 343 + - patch 344 + - delete 345 +- nonResourceURLs: 346 + - /livez/ping 347 + verbs: 348 + - head 349 --- 350 apiVersion: rbac.authorization.k8s.io/v1 351 kind: ClusterRole 352 metadata: 353 - labels: 354 - app.kubernetes.io/instance: flux-system 355 - app.kubernetes.io/part-of: flux 356 - app.kubernetes.io/version: v2.3.0 357 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 358 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 359 - name: flux-edit-flux-system 360 + labels: 361 + app.kubernetes.io/instance: flux-system 362 + app.kubernetes.io/part-of: flux 363 + app.kubernetes.io/version: v2.4.0 364 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 365 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 366 + name: flux-edit-flux-system 367 rules: 368 - - apiGroups: 369 - - notification.toolkit.fluxcd.io 370 - - source.toolkit.fluxcd.io 371 - - helm.toolkit.fluxcd.io 372 - - image.toolkit.fluxcd.io 373 - - kustomize.toolkit.fluxcd.io 374 - resources: 375 - - '*' 376 - verbs: 377 - - create 378 - - delete 379 - - deletecollection 380 - - patch 381 - - update 382 +- apiGroups: 383 + - notification.toolkit.fluxcd.io 384 + - source.toolkit.fluxcd.io 385 + - helm.toolkit.fluxcd.io 386 + - image.toolkit.fluxcd.io 387 + - kustomize.toolkit.fluxcd.io 388 + resources: 389 + - '*' 390 + verbs: 391 + - create 392 + - delete 393 + - deletecollection 394 + - patch 395 + - update 396 --- 397 apiVersion: rbac.authorization.k8s.io/v1 398 kind: ClusterRole 399 metadata: 400 - labels: 401 - app.kubernetes.io/instance: flux-system 402 - app.kubernetes.io/part-of: flux 403 - app.kubernetes.io/version: v2.3.0 404 - rbac.authorization.k8s.io/aggregate-to-admin: "true" 405 - rbac.authorization.k8s.io/aggregate-to-edit: "true" 406 - rbac.authorization.k8s.io/aggregate-to-view: "true" 407 - name: flux-view-flux-system 408 + labels: 409 + app.kubernetes.io/instance: flux-system 410 + app.kubernetes.io/part-of: flux 411 + app.kubernetes.io/version: v2.4.0 412 + rbac.authorization.k8s.io/aggregate-to-admin: "true" 413 + rbac.authorization.k8s.io/aggregate-to-edit: "true" 414 + rbac.authorization.k8s.io/aggregate-to-view: "true" 415 + name: flux-view-flux-system 416 rules: 417 - - apiGroups: 418 - - notification.toolkit.fluxcd.io 419 - - source.toolkit.fluxcd.io 420 - - helm.toolkit.fluxcd.io 421 - - image.toolkit.fluxcd.io 422 - - kustomize.toolkit.fluxcd.io 423 - resources: 424 - - '*' 425 - verbs: 426 - - get 427 - - list 428 - - watch 429 +- apiGroups: 430 + - notification.toolkit.fluxcd.io 431 + - source.toolkit.fluxcd.io 432 + - helm.toolkit.fluxcd.io 433 + - image.toolkit.fluxcd.io 434 + - kustomize.toolkit.fluxcd.io 435 + resources: 436 + - '*' 437 + verbs: 438 + - get 439 + - list 440 + - watch 441 --- 442 apiVersion: rbac.authorization.k8s.io/v1 443 kind: ClusterRoleBinding 444 metadata: 445 - labels: 446 - app.kubernetes.io/instance: flux-system 447 - app.kubernetes.io/part-of: flux 448 - app.kubernetes.io/version: v2.3.0 449 - name: cluster-reconciler-flux-system 450 + labels: 451 + app.kubernetes.io/instance: flux-system 452 + app.kubernetes.io/part-of: flux 453 + app.kubernetes.io/version: v2.4.0 454 + name: cluster-reconciler-flux-system 455 roleRef: 456 - apiGroup: rbac.authorization.k8s.io 457 - kind: ClusterRole 458 - name: cluster-admin 459 + apiGroup: rbac.authorization.k8s.io 460 + kind: ClusterRole 461 + name: cluster-admin 462 subjects: 463 - - kind: ServiceAccount 464 - name: kustomize-controller 465 - namespace: flux-system 466 - - kind: ServiceAccount 467 - name: helm-controller 468 - namespace: flux-system 469 +- kind: ServiceAccount 470 + name: kustomize-controller 471 + namespace: flux-system 472 +- kind: ServiceAccount 473 + name: helm-controller 474 + namespace: flux-system 475 --- 476 apiVersion: rbac.authorization.k8s.io/v1 477 kind: ClusterRoleBinding 478 metadata: 479 - labels: 480 - app.kubernetes.io/instance: flux-system 481 - app.kubernetes.io/part-of: flux 482 - app.kubernetes.io/version: v2.3.0 483 - name: crd-controller-flux-system 484 + labels: 485 + app.kubernetes.io/instance: flux-system 486 + app.kubernetes.io/part-of: flux 487 + app.kubernetes.io/version: v2.4.0 488 + name: crd-controller-flux-system 489 roleRef: 490 - apiGroup: rbac.authorization.k8s.io 491 - kind: ClusterRole 492 - name: crd-controller-flux-system 493 + apiGroup: rbac.authorization.k8s.io 494 + kind: ClusterRole 495 + name: crd-controller-flux-system 496 subjects: 497 - - kind: ServiceAccount 498 - name: kustomize-controller 499 - namespace: flux-system 500 - - kind: ServiceAccount 501 - name: helm-controller 502 - namespace: flux-system 503 - - kind: ServiceAccount 504 - name: source-controller 505 - namespace: flux-system 506 - - kind: ServiceAccount 507 - name: notification-controller 508 - namespace: flux-system 509 - - kind: ServiceAccount 510 - name: image-reflector-controller 511 - namespace: flux-system 512 - - kind: ServiceAccount 513 - name: image-automation-controller 514 - namespace: flux-system 515 +- kind: ServiceAccount 516 + name: kustomize-controller 517 + namespace: flux-system 518 +- kind: ServiceAccount 519 + name: helm-controller 520 + namespace: flux-system 521 +- kind: ServiceAccount 522 + name: source-controller 523 + namespace: flux-system 524 +- kind: ServiceAccount 525 + name: notification-controller 526 + namespace: flux-system 527 +- kind: ServiceAccount 528 + name: image-reflector-controller 529 + namespace: flux-system 530 +- kind: ServiceAccount 531 + name: image-automation-controller 532 + namespace: flux-system 533 --- 534 apiVersion: apiextensions.k8s.io/v1 535 kind: CustomResourceDefinition 536 metadata: 537 - annotations: 538 - controller-gen.kubebuilder.io/version: v0.15.0 539 - labels: 540 - app.kubernetes.io/component: source-controller 541 - app.kubernetes.io/instance: flux-system 542 - app.kubernetes.io/part-of: flux 543 - app.kubernetes.io/version: v2.3.0 544 - name: buckets.source.toolkit.fluxcd.io 545 + annotations: 546 + controller-gen.kubebuilder.io/version: v0.16.1 547 + labels: 548 + app.kubernetes.io/component: source-controller 549 + app.kubernetes.io/instance: flux-system 550 + app.kubernetes.io/part-of: flux 551 + app.kubernetes.io/version: v2.4.0 552 + name: buckets.source.toolkit.fluxcd.io 553 spec: 554 - group: source.toolkit.fluxcd.io 555 - names: 556 - kind: Bucket 557 - listKind: BucketList 558 - plural: buckets 559 - singular: bucket 560 - scope: Namespaced 561 - versions: 562 - - additionalPrinterColumns: 563 - - jsonPath: .spec.endpoint 564 - name: Endpoint 565 - type: string 566 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 567 - name: Ready 568 - type: string 569 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 570 - name: Status 571 - type: string 572 - - jsonPath: .metadata.creationTimestamp 573 - name: Age 574 - type: date 575 - deprecated: true 576 - deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1beta2 577 - name: v1beta1 578 - schema: 579 - openAPIV3Schema: 580 - description: Bucket is the Schema for the buckets API 581 + group: source.toolkit.fluxcd.io 582 + names: 583 + kind: Bucket 584 + listKind: BucketList 585 + plural: buckets 586 + singular: bucket 587 + scope: Namespaced 588 + versions: 589 + - additionalPrinterColumns: 590 + - jsonPath: .spec.endpoint 591 + name: Endpoint 592 + type: string 593 + - jsonPath: .metadata.creationTimestamp 594 + name: Age 595 + type: date 596 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 597 + name: Ready 598 + type: string 599 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 600 + name: Status 601 + type: string 602 + name: v1 603 + schema: 604 + openAPIV3Schema: 605 + description: Bucket is the Schema for the buckets API. 606 + properties: 607 + apiVersion: 608 + description: |- 609 + APIVersion defines the versioned schema of this representation of an object. 610 + Servers should convert recognized schemas to the latest internal value, and 611 + may reject unrecognized values. 612 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 613 + type: string 614 + kind: 615 + description: |- 616 + Kind is a string value representing the REST resource this object represents. 617 + Servers may infer this from the endpoint the client submits requests to. 618 + Cannot be updated. 619 + In CamelCase. 620 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 621 + type: string 622 + metadata: 623 + type: object 624 + spec: 625 + description: |- 626 + BucketSpec specifies the required configuration to produce an Artifact for 627 + an object storage bucket. 628 + properties: 629 + bucketName: 630 + description: BucketName is the name of the object storage bucket. 631 + type: string 632 + certSecretRef: 633 + description: |- 634 + CertSecretRef can be given the name of a Secret containing 635 + either or both of 636 + 637 + - a PEM-encoded client certificate (`tls.crt`) and private 638 + key (`tls.key`); 639 + - a PEM-encoded CA certificate (`ca.crt`) 640 + 641 + and whichever are supplied, will be used for connecting to the 642 + bucket. The client cert and key are useful if you are 643 + authenticating with a certificate; the CA cert is useful if 644 + you are using a self-signed server certificate. The Secret must 645 + be of type `Opaque` or `kubernetes.io/tls`. 646 + 647 + This field is only supported for the `generic` provider. 648 properties: 649 - apiVersion: 650 - description: |- 651 - APIVersion defines the versioned schema of this representation of an object. 652 - Servers should convert recognized schemas to the latest internal value, and 653 - may reject unrecognized values. 654 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 655 + name: 656 + description: Name of the referent. 657 + type: string 658 + required: 659 + - name 660 + type: object 661 + endpoint: 662 + description: Endpoint is the object storage address the BucketName 663 + is located at. 664 + type: string 665 + ignore: 666 + description: |- 667 + Ignore overrides the set of excluded patterns in the .sourceignore format 668 + (which is the same as .gitignore). If not provided, a default will be used, 669 + consult the documentation for your version to find out what those are. 670 + type: string 671 + insecure: 672 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 673 + type: boolean 674 + interval: 675 + description: |- 676 + Interval at which the Bucket Endpoint is checked for updates. 677 + This interval is approximate and may be subject to jitter to ensure 678 + efficient use of resources. 679 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 680 + type: string 681 + prefix: 682 + description: Prefix to use for server-side filtering of files in the 683 + Bucket. 684 + type: string 685 + provider: 686 + default: generic 687 + description: |- 688 + Provider of the object storage bucket. 689 + Defaults to 'generic', which expects an S3 (API) compatible object 690 + storage. 691 + enum: 692 + - generic 693 + - aws 694 + - gcp 695 + - azure 696 + type: string 697 + proxySecretRef: 698 + description: |- 699 + ProxySecretRef specifies the Secret containing the proxy configuration 700 + to use while communicating with the Bucket server. 701 + properties: 702 + name: 703 + description: Name of the referent. 704 + type: string 705 + required: 706 + - name 707 + type: object 708 + region: 709 + description: Region of the Endpoint where the BucketName is located 710 + in. 711 + type: string 712 + secretRef: 713 + description: |- 714 + SecretRef specifies the Secret containing authentication credentials 715 + for the Bucket. 716 + properties: 717 + name: 718 + description: Name of the referent. 719 + type: string 720 + required: 721 + - name 722 + type: object 723 + sts: 724 + description: |- 725 + STS specifies the required configuration to use a Security Token 726 + Service for fetching temporary credentials to authenticate in a 727 + Bucket provider. 728 + 729 + This field is only supported for the `aws` and `generic` providers. 730 + properties: 731 + certSecretRef: 732 + description: |- 733 + CertSecretRef can be given the name of a Secret containing 734 + either or both of 735 + 736 + - a PEM-encoded client certificate (`tls.crt`) and private 737 + key (`tls.key`); 738 + - a PEM-encoded CA certificate (`ca.crt`) 739 + 740 + and whichever are supplied, will be used for connecting to the 741 + STS endpoint. The client cert and key are useful if you are 742 + authenticating with a certificate; the CA cert is useful if 743 + you are using a self-signed server certificate. The Secret must 744 + be of type `Opaque` or `kubernetes.io/tls`. 745 + 746 + This field is only supported for the `ldap` provider. 747 + properties: 748 + name: 749 + description: Name of the referent. 750 type: string 751 - kind: 752 - description: |- 753 - Kind is a string value representing the REST resource this object represents. 754 - Servers may infer this from the endpoint the client submits requests to. 755 - Cannot be updated. 756 - In CamelCase. 757 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 758 + required: 759 + - name 760 + type: object 761 + endpoint: 762 + description: |- 763 + Endpoint is the HTTP/S endpoint of the Security Token Service from 764 + where temporary credentials will be fetched. 765 + pattern: ^(http|https)://.*$ 766 + type: string 767 + provider: 768 + description: Provider of the Security Token Service. 769 + enum: 770 + - aws 771 + - ldap 772 + type: string 773 + secretRef: 774 + description: |- 775 + SecretRef specifies the Secret containing authentication credentials 776 + for the STS endpoint. This Secret must contain the fields `username` 777 + and `password` and is supported only for the `ldap` provider. 778 + properties: 779 + name: 780 + description: Name of the referent. 781 type: string 782 - metadata: 783 - type: object 784 - spec: 785 - description: BucketSpec defines the desired state of an S3 compatible bucket 786 - properties: 787 - accessFrom: 788 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 789 - to this object. 790 - properties: 791 - namespaceSelectors: 792 - description: |- 793 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 794 - Items in this list are evaluated using a logical OR operation. 795 - items: 796 - description: |- 797 - NamespaceSelector selects the namespaces to which this ACL applies. 798 - An empty map of MatchLabels matches all namespaces in a cluster. 799 - properties: 800 - matchLabels: 801 - additionalProperties: 802 - type: string 803 - description: |- 804 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 805 - map is equivalent to an element of matchExpressions, whose key field is "key", the 806 - operator is "In", and the values array contains only "value". The requirements are ANDed. 807 - type: object 808 - type: object 809 - type: array 810 - required: 811 - - namespaceSelectors 812 - type: object 813 - bucketName: 814 - description: The bucket name. 815 - type: string 816 - endpoint: 817 - description: The bucket endpoint address. 818 - type: string 819 - ignore: 820 - description: |- 821 - Ignore overrides the set of excluded patterns in the .sourceignore format 822 - (which is the same as .gitignore). If not provided, a default will be used, 823 - consult the documentation for your version to find out what those are. 824 - type: string 825 - insecure: 826 - description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. 827 - type: boolean 828 - interval: 829 - description: The interval at which to check for bucket updates. 830 - type: string 831 - provider: 832 - default: generic 833 - description: The S3 compatible storage provider name, default ('generic'). 834 - enum: 835 - - generic 836 - - aws 837 - - gcp 838 - type: string 839 - region: 840 - description: The bucket region. 841 - type: string 842 - secretRef: 843 - description: |- 844 - The name of the secret containing authentication credentials 845 - for the Bucket. 846 - properties: 847 - name: 848 - description: Name of the referent. 849 - type: string 850 - required: 851 - - name 852 - type: object 853 - suspend: 854 - description: This flag tells the controller to suspend the reconciliation of this source. 855 - type: boolean 856 - timeout: 857 - default: 60s 858 - description: The timeout for download operations, defaults to 60s. 859 - type: string 860 - required: 861 - - bucketName 862 - - endpoint 863 - - interval 864 - type: object 865 + required: 866 + - name 867 + type: object 868 + required: 869 + - endpoint 870 + - provider 871 + type: object 872 + suspend: 873 + description: |- 874 + Suspend tells the controller to suspend the reconciliation of this 875 + Bucket. 876 + type: boolean 877 + timeout: 878 + default: 60s 879 + description: Timeout for fetch operations, defaults to 60s. 880 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 881 + type: string 882 + required: 883 + - bucketName 884 + - endpoint 885 + - interval 886 + type: object 887 + x-kubernetes-validations: 888 + - message: STS configuration is only supported for the 'aws' and 'generic' 889 + Bucket providers 890 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 891 + - message: '''aws'' is the only supported STS provider for the ''aws'' 892 + Bucket provider' 893 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 894 + == 'aws' 895 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 896 + Bucket provider' 897 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 898 + == 'ldap' 899 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 900 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 901 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 902 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 903 + status: 904 + default: 905 + observedGeneration: -1 906 + description: BucketStatus records the observed state of a Bucket. 907 + properties: 908 + artifact: 909 + description: Artifact represents the last successful Bucket reconciliation. 910 + properties: 911 + digest: 912 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 913 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 914 + type: string 915 + lastUpdateTime: 916 + description: |- 917 + LastUpdateTime is the timestamp corresponding to the last update of the 918 + Artifact. 919 + format: date-time 920 + type: string 921 + metadata: 922 + additionalProperties: 923 + type: string 924 + description: Metadata holds upstream information such as OCI annotations. 925 + type: object 926 + path: 927 + description: |- 928 + Path is the relative file path of the Artifact. It can be used to locate 929 + the file in the root of the Artifact storage on the local file system of 930 + the controller managing the Source. 931 + type: string 932 + revision: 933 + description: |- 934 + Revision is a human-readable identifier traceable in the origin source 935 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 936 + type: string 937 + size: 938 + description: Size is the number of bytes in the file. 939 + format: int64 940 + type: integer 941 + url: 942 + description: |- 943 + URL is the HTTP address of the Artifact as exposed by the controller 944 + managing the Source. It can be used to retrieve the Artifact for 945 + consumption, e.g. by another controller applying the Artifact contents. 946 + type: string 947 + required: 948 + - lastUpdateTime 949 + - path 950 + - revision 951 + - url 952 + type: object 953 + conditions: 954 + description: Conditions holds the conditions for the Bucket. 955 + items: 956 + description: Condition contains details for one aspect of the current 957 + state of this API Resource. 958 + properties: 959 + lastTransitionTime: 960 + description: |- 961 + lastTransitionTime is the last time the condition transitioned from one status to another. 962 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 963 + format: date-time 964 + type: string 965 + message: 966 + description: |- 967 + message is a human readable message indicating details about the transition. 968 + This may be an empty string. 969 + maxLength: 32768 970 + type: string 971 + observedGeneration: 972 + description: |- 973 + observedGeneration represents the .metadata.generation that the condition was set based upon. 974 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 975 + with respect to the current state of the instance. 976 + format: int64 977 + minimum: 0 978 + type: integer 979 + reason: 980 + description: |- 981 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 982 + Producers of specific condition types may define expected values and meanings for this field, 983 + and whether the values are considered a guaranteed API. 984 + The value should be a CamelCase string. 985 + This field may not be empty. 986 + maxLength: 1024 987 + minLength: 1 988 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 989 + type: string 990 status: 991 - default: 992 - observedGeneration: -1 993 - description: BucketStatus defines the observed state of a bucket 994 - properties: 995 - artifact: 996 - description: Artifact represents the output of the last successful Bucket sync. 997 - properties: 998 - checksum: 999 - description: Checksum is the SHA256 checksum of the artifact. 1000 - type: string 1001 - lastUpdateTime: 1002 - description: |- 1003 - LastUpdateTime is the timestamp corresponding to the last update of this 1004 - artifact. 1005 - format: date-time 1006 - type: string 1007 - path: 1008 - description: Path is the relative file path of this artifact. 1009 - type: string 1010 - revision: 1011 - description: |- 1012 - Revision is a human readable identifier traceable in the origin source 1013 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 1014 - chart version, etc. 1015 - type: string 1016 - url: 1017 - description: URL is the HTTP address of this artifact. 1018 - type: string 1019 - required: 1020 - - path 1021 - - url 1022 - type: object 1023 - conditions: 1024 - description: Conditions holds the conditions for the Bucket. 1025 - items: 1026 - description: "Condition contains details for one aspect of the current state of this API 1027 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 1028 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 1029 - the observations of a foo's current state.\n\t // Known .status.conditions.type 1030 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 1031 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 1032 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 1033 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 1034 - fields\n\t}" 1035 - properties: 1036 - lastTransitionTime: 1037 - description: |- 1038 - lastTransitionTime is the last time the condition transitioned from one status to another. 1039 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1040 - format: date-time 1041 - type: string 1042 - message: 1043 - description: |- 1044 - message is a human readable message indicating details about the transition. 1045 - This may be an empty string. 1046 - maxLength: 32768 1047 - type: string 1048 - observedGeneration: 1049 - description: |- 1050 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1051 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1052 - with respect to the current state of the instance. 1053 - format: int64 1054 - minimum: 0 1055 - type: integer 1056 - reason: 1057 - description: |- 1058 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1059 - Producers of specific condition types may define expected values and meanings for this field, 1060 - and whether the values are considered a guaranteed API. 1061 - The value should be a CamelCase string. 1062 - This field may not be empty. 1063 - maxLength: 1024 1064 - minLength: 1 1065 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1066 - type: string 1067 - status: 1068 - description: status of the condition, one of True, False, Unknown. 1069 - enum: 1070 - - "True" 1071 - - "False" 1072 - - Unknown 1073 - type: string 1074 - type: 1075 - description: |- 1076 - type of condition in CamelCase or in foo.example.com/CamelCase. 1077 - --- 1078 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 1079 - useful (see .node.status.conditions), the ability to deconflict is important. 1080 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 1081 - maxLength: 316 1082 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1083 - type: string 1084 - required: 1085 - - lastTransitionTime 1086 - - message 1087 - - reason 1088 - - status 1089 - - type 1090 - type: object 1091 - type: array 1092 - lastHandledReconcileAt: 1093 - description: |- 1094 - LastHandledReconcileAt holds the value of the most recent 1095 - reconcile request value, so a change of the annotation value 1096 - can be detected. 1097 - type: string 1098 - observedGeneration: 1099 - description: ObservedGeneration is the last observed generation. 1100 - format: int64 1101 - type: integer 1102 - url: 1103 - description: URL is the download link for the artifact output of the last Bucket sync. 1104 - type: string 1105 - type: object 1106 + description: status of the condition, one of True, False, Unknown. 1107 + enum: 1108 + - "True" 1109 + - "False" 1110 + - Unknown 1111 + type: string 1112 + type: 1113 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1114 + maxLength: 316 1115 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1116 + type: string 1117 + required: 1118 + - lastTransitionTime 1119 + - message 1120 + - reason 1121 + - status 1122 + - type 1123 + type: object 1124 + type: array 1125 + lastHandledReconcileAt: 1126 + description: |- 1127 + LastHandledReconcileAt holds the value of the most recent 1128 + reconcile request value, so a change of the annotation value 1129 + can be detected. 1130 + type: string 1131 + observedGeneration: 1132 + description: ObservedGeneration is the last observed generation of 1133 + the Bucket object. 1134 + format: int64 1135 + type: integer 1136 + observedIgnore: 1137 + description: |- 1138 + ObservedIgnore is the observed exclusion patterns used for constructing 1139 + the source artifact. 1140 + type: string 1141 + url: 1142 + description: |- 1143 + URL is the dynamic fetch link for the latest Artifact. 1144 + It is provided on a "best effort" basis, and using the precise 1145 + BucketStatus.Artifact data is recommended. 1146 + type: string 1147 + type: object 1148 + type: object 1149 + served: true 1150 + storage: true 1151 + subresources: 1152 + status: {} 1153 + - additionalPrinterColumns: 1154 + - jsonPath: .spec.endpoint 1155 + name: Endpoint 1156 + type: string 1157 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1158 + name: Ready 1159 + type: string 1160 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1161 + name: Status 1162 + type: string 1163 + - jsonPath: .metadata.creationTimestamp 1164 + name: Age 1165 + type: date 1166 + deprecated: true 1167 + deprecationWarning: v1beta1 Bucket is deprecated, upgrade to v1 1168 + name: v1beta1 1169 + schema: 1170 + openAPIV3Schema: 1171 + description: Bucket is the Schema for the buckets API 1172 + properties: 1173 + apiVersion: 1174 + description: |- 1175 + APIVersion defines the versioned schema of this representation of an object. 1176 + Servers should convert recognized schemas to the latest internal value, and 1177 + may reject unrecognized values. 1178 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1179 + type: string 1180 + kind: 1181 + description: |- 1182 + Kind is a string value representing the REST resource this object represents. 1183 + Servers may infer this from the endpoint the client submits requests to. 1184 + Cannot be updated. 1185 + In CamelCase. 1186 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1187 + type: string 1188 + metadata: 1189 + type: object 1190 + spec: 1191 + description: BucketSpec defines the desired state of an S3 compatible 1192 + bucket 1193 + properties: 1194 + accessFrom: 1195 + description: AccessFrom defines an Access Control List for allowing 1196 + cross-namespace references to this object. 1197 + properties: 1198 + namespaceSelectors: 1199 + description: |- 1200 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1201 + Items in this list are evaluated using a logical OR operation. 1202 + items: 1203 + description: |- 1204 + NamespaceSelector selects the namespaces to which this ACL applies. 1205 + An empty map of MatchLabels matches all namespaces in a cluster. 1206 + properties: 1207 + matchLabels: 1208 + additionalProperties: 1209 + type: string 1210 + description: |- 1211 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1212 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1213 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1214 + type: object 1215 + type: object 1216 + type: array 1217 + required: 1218 + - namespaceSelectors 1219 type: object 1220 - served: true 1221 - storage: false 1222 - subresources: 1223 - status: {} 1224 - - additionalPrinterColumns: 1225 - - jsonPath: .spec.endpoint 1226 - name: Endpoint 1227 - type: string 1228 - - jsonPath: .metadata.creationTimestamp 1229 - name: Age 1230 - type: date 1231 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1232 - name: Ready 1233 - type: string 1234 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1235 - name: Status 1236 - type: string 1237 - name: v1beta2 1238 - schema: 1239 - openAPIV3Schema: 1240 - description: Bucket is the Schema for the buckets API. 1241 + bucketName: 1242 + description: The bucket name. 1243 + type: string 1244 + endpoint: 1245 + description: The bucket endpoint address. 1246 + type: string 1247 + ignore: 1248 + description: |- 1249 + Ignore overrides the set of excluded patterns in the .sourceignore format 1250 + (which is the same as .gitignore). If not provided, a default will be used, 1251 + consult the documentation for your version to find out what those are. 1252 + type: string 1253 + insecure: 1254 + description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. 1255 + type: boolean 1256 + interval: 1257 + description: The interval at which to check for bucket updates. 1258 + type: string 1259 + provider: 1260 + default: generic 1261 + description: The S3 compatible storage provider name, default ('generic'). 1262 + enum: 1263 + - generic 1264 + - aws 1265 + - gcp 1266 + type: string 1267 + region: 1268 + description: The bucket region. 1269 + type: string 1270 + secretRef: 1271 + description: |- 1272 + The name of the secret containing authentication credentials 1273 + for the Bucket. 1274 properties: 1275 - apiVersion: 1276 - description: |- 1277 - APIVersion defines the versioned schema of this representation of an object. 1278 - Servers should convert recognized schemas to the latest internal value, and 1279 - may reject unrecognized values. 1280 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1281 + name: 1282 + description: Name of the referent. 1283 + type: string 1284 + required: 1285 + - name 1286 + type: object 1287 + suspend: 1288 + description: This flag tells the controller to suspend the reconciliation 1289 + of this source. 1290 + type: boolean 1291 + timeout: 1292 + default: 60s 1293 + description: The timeout for download operations, defaults to 60s. 1294 + type: string 1295 + required: 1296 + - bucketName 1297 + - endpoint 1298 + - interval 1299 + type: object 1300 + status: 1301 + default: 1302 + observedGeneration: -1 1303 + description: BucketStatus defines the observed state of a bucket 1304 + properties: 1305 + artifact: 1306 + description: Artifact represents the output of the last successful 1307 + Bucket sync. 1308 + properties: 1309 + checksum: 1310 + description: Checksum is the SHA256 checksum of the artifact. 1311 + type: string 1312 + lastUpdateTime: 1313 + description: |- 1314 + LastUpdateTime is the timestamp corresponding to the last update of this 1315 + artifact. 1316 + format: date-time 1317 + type: string 1318 + path: 1319 + description: Path is the relative file path of this artifact. 1320 + type: string 1321 + revision: 1322 + description: |- 1323 + Revision is a human readable identifier traceable in the origin source 1324 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 1325 + chart version, etc. 1326 + type: string 1327 + url: 1328 + description: URL is the HTTP address of this artifact. 1329 + type: string 1330 + required: 1331 + - lastUpdateTime 1332 + - path 1333 + - url 1334 + type: object 1335 + conditions: 1336 + description: Conditions holds the conditions for the Bucket. 1337 + items: 1338 + description: Condition contains details for one aspect of the current 1339 + state of this API Resource. 1340 + properties: 1341 + lastTransitionTime: 1342 + description: |- 1343 + lastTransitionTime is the last time the condition transitioned from one status to another. 1344 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1345 + format: date-time 1346 + type: string 1347 + message: 1348 + description: |- 1349 + message is a human readable message indicating details about the transition. 1350 + This may be an empty string. 1351 + maxLength: 32768 1352 + type: string 1353 + observedGeneration: 1354 + description: |- 1355 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1356 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1357 + with respect to the current state of the instance. 1358 + format: int64 1359 + minimum: 0 1360 + type: integer 1361 + reason: 1362 + description: |- 1363 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1364 + Producers of specific condition types may define expected values and meanings for this field, 1365 + and whether the values are considered a guaranteed API. 1366 + The value should be a CamelCase string. 1367 + This field may not be empty. 1368 + maxLength: 1024 1369 + minLength: 1 1370 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1371 + type: string 1372 + status: 1373 + description: status of the condition, one of True, False, Unknown. 1374 + enum: 1375 + - "True" 1376 + - "False" 1377 + - Unknown 1378 + type: string 1379 + type: 1380 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1381 + maxLength: 316 1382 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1383 + type: string 1384 + required: 1385 + - lastTransitionTime 1386 + - message 1387 + - reason 1388 + - status 1389 + - type 1390 + type: object 1391 + type: array 1392 + lastHandledReconcileAt: 1393 + description: |- 1394 + LastHandledReconcileAt holds the value of the most recent 1395 + reconcile request value, so a change of the annotation value 1396 + can be detected. 1397 + type: string 1398 + observedGeneration: 1399 + description: ObservedGeneration is the last observed generation. 1400 + format: int64 1401 + type: integer 1402 + url: 1403 + description: URL is the download link for the artifact output of the 1404 + last Bucket sync. 1405 + type: string 1406 + type: object 1407 + type: object 1408 + served: true 1409 + storage: false 1410 + subresources: 1411 + status: {} 1412 + - additionalPrinterColumns: 1413 + - jsonPath: .spec.endpoint 1414 + name: Endpoint 1415 + type: string 1416 + - jsonPath: .metadata.creationTimestamp 1417 + name: Age 1418 + type: date 1419 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1420 + name: Ready 1421 + type: string 1422 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1423 + name: Status 1424 + type: string 1425 + deprecated: true 1426 + deprecationWarning: v1beta2 Bucket is deprecated, upgrade to v1 1427 + name: v1beta2 1428 + schema: 1429 + openAPIV3Schema: 1430 + description: Bucket is the Schema for the buckets API. 1431 + properties: 1432 + apiVersion: 1433 + description: |- 1434 + APIVersion defines the versioned schema of this representation of an object. 1435 + Servers should convert recognized schemas to the latest internal value, and 1436 + may reject unrecognized values. 1437 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1438 + type: string 1439 + kind: 1440 + description: |- 1441 + Kind is a string value representing the REST resource this object represents. 1442 + Servers may infer this from the endpoint the client submits requests to. 1443 + Cannot be updated. 1444 + In CamelCase. 1445 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1446 + type: string 1447 + metadata: 1448 + type: object 1449 + spec: 1450 + description: |- 1451 + BucketSpec specifies the required configuration to produce an Artifact for 1452 + an object storage bucket. 1453 + properties: 1454 + accessFrom: 1455 + description: |- 1456 + AccessFrom specifies an Access Control List for allowing cross-namespace 1457 + references to this object. 1458 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1459 + properties: 1460 + namespaceSelectors: 1461 + description: |- 1462 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1463 + Items in this list are evaluated using a logical OR operation. 1464 + items: 1465 + description: |- 1466 + NamespaceSelector selects the namespaces to which this ACL applies. 1467 + An empty map of MatchLabels matches all namespaces in a cluster. 1468 + properties: 1469 + matchLabels: 1470 + additionalProperties: 1471 + type: string 1472 + description: |- 1473 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1474 + map is equivalent to an element of matchExpressions, whose key field is "key", the 1475 + operator is "In", and the values array contains only "value". The requirements are ANDed. 1476 + type: object 1477 + type: object 1478 + type: array 1479 + required: 1480 + - namespaceSelectors 1481 + type: object 1482 + bucketName: 1483 + description: BucketName is the name of the object storage bucket. 1484 + type: string 1485 + certSecretRef: 1486 + description: |- 1487 + CertSecretRef can be given the name of a Secret containing 1488 + either or both of 1489 + 1490 + - a PEM-encoded client certificate (`tls.crt`) and private 1491 + key (`tls.key`); 1492 + - a PEM-encoded CA certificate (`ca.crt`) 1493 + 1494 + and whichever are supplied, will be used for connecting to the 1495 + bucket. The client cert and key are useful if you are 1496 + authenticating with a certificate; the CA cert is useful if 1497 + you are using a self-signed server certificate. The Secret must 1498 + be of type `Opaque` or `kubernetes.io/tls`. 1499 + 1500 + This field is only supported for the `generic` provider. 1501 + properties: 1502 + name: 1503 + description: Name of the referent. 1504 + type: string 1505 + required: 1506 + - name 1507 + type: object 1508 + endpoint: 1509 + description: Endpoint is the object storage address the BucketName 1510 + is located at. 1511 + type: string 1512 + ignore: 1513 + description: |- 1514 + Ignore overrides the set of excluded patterns in the .sourceignore format 1515 + (which is the same as .gitignore). If not provided, a default will be used, 1516 + consult the documentation for your version to find out what those are. 1517 + type: string 1518 + insecure: 1519 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1520 + type: boolean 1521 + interval: 1522 + description: |- 1523 + Interval at which the Bucket Endpoint is checked for updates. 1524 + This interval is approximate and may be subject to jitter to ensure 1525 + efficient use of resources. 1526 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1527 + type: string 1528 + prefix: 1529 + description: Prefix to use for server-side filtering of files in the 1530 + Bucket. 1531 + type: string 1532 + provider: 1533 + default: generic 1534 + description: |- 1535 + Provider of the object storage bucket. 1536 + Defaults to 'generic', which expects an S3 (API) compatible object 1537 + storage. 1538 + enum: 1539 + - generic 1540 + - aws 1541 + - gcp 1542 + - azure 1543 + type: string 1544 + proxySecretRef: 1545 + description: |- 1546 + ProxySecretRef specifies the Secret containing the proxy configuration 1547 + to use while communicating with the Bucket server. 1548 + properties: 1549 + name: 1550 + description: Name of the referent. 1551 + type: string 1552 + required: 1553 + - name 1554 + type: object 1555 + region: 1556 + description: Region of the Endpoint where the BucketName is located 1557 + in. 1558 + type: string 1559 + secretRef: 1560 + description: |- 1561 + SecretRef specifies the Secret containing authentication credentials 1562 + for the Bucket. 1563 + properties: 1564 + name: 1565 + description: Name of the referent. 1566 + type: string 1567 + required: 1568 + - name 1569 + type: object 1570 + sts: 1571 + description: |- 1572 + STS specifies the required configuration to use a Security Token 1573 + Service for fetching temporary credentials to authenticate in a 1574 + Bucket provider. 1575 + 1576 + This field is only supported for the `aws` and `generic` providers. 1577 + properties: 1578 + certSecretRef: 1579 + description: |- 1580 + CertSecretRef can be given the name of a Secret containing 1581 + either or both of 1582 + 1583 + - a PEM-encoded client certificate (`tls.crt`) and private 1584 + key (`tls.key`); 1585 + - a PEM-encoded CA certificate (`ca.crt`) 1586 + 1587 + and whichever are supplied, will be used for connecting to the 1588 + STS endpoint. The client cert and key are useful if you are 1589 + authenticating with a certificate; the CA cert is useful if 1590 + you are using a self-signed server certificate. The Secret must 1591 + be of type `Opaque` or `kubernetes.io/tls`. 1592 + 1593 + This field is only supported for the `ldap` provider. 1594 + properties: 1595 + name: 1596 + description: Name of the referent. 1597 type: string 1598 - kind: 1599 - description: |- 1600 - Kind is a string value representing the REST resource this object represents. 1601 - Servers may infer this from the endpoint the client submits requests to. 1602 - Cannot be updated. 1603 - In CamelCase. 1604 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1605 + required: 1606 + - name 1607 + type: object 1608 + endpoint: 1609 + description: |- 1610 + Endpoint is the HTTP/S endpoint of the Security Token Service from 1611 + where temporary credentials will be fetched. 1612 + pattern: ^(http|https)://.*$ 1613 + type: string 1614 + provider: 1615 + description: Provider of the Security Token Service. 1616 + enum: 1617 + - aws 1618 + - ldap 1619 + type: string 1620 + secretRef: 1621 + description: |- 1622 + SecretRef specifies the Secret containing authentication credentials 1623 + for the STS endpoint. This Secret must contain the fields `username` 1624 + and `password` and is supported only for the `ldap` provider. 1625 + properties: 1626 + name: 1627 + description: Name of the referent. 1628 type: string 1629 - metadata: 1630 - type: object 1631 - spec: 1632 - description: |- 1633 - BucketSpec specifies the required configuration to produce an Artifact for 1634 - an object storage bucket. 1635 - properties: 1636 - accessFrom: 1637 - description: |- 1638 - AccessFrom specifies an Access Control List for allowing cross-namespace 1639 - references to this object. 1640 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 1641 - properties: 1642 - namespaceSelectors: 1643 - description: |- 1644 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 1645 - Items in this list are evaluated using a logical OR operation. 1646 - items: 1647 - description: |- 1648 - NamespaceSelector selects the namespaces to which this ACL applies. 1649 - An empty map of MatchLabels matches all namespaces in a cluster. 1650 - properties: 1651 - matchLabels: 1652 - additionalProperties: 1653 - type: string 1654 - description: |- 1655 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 1656 - map is equivalent to an element of matchExpressions, whose key field is "key", the 1657 - operator is "In", and the values array contains only "value". The requirements are ANDed. 1658 - type: object 1659 - type: object 1660 - type: array 1661 - required: 1662 - - namespaceSelectors 1663 - type: object 1664 - bucketName: 1665 - description: BucketName is the name of the object storage bucket. 1666 - type: string 1667 - endpoint: 1668 - description: Endpoint is the object storage address the BucketName is located at. 1669 - type: string 1670 - ignore: 1671 - description: |- 1672 - Ignore overrides the set of excluded patterns in the .sourceignore format 1673 - (which is the same as .gitignore). If not provided, a default will be used, 1674 - consult the documentation for your version to find out what those are. 1675 - type: string 1676 - insecure: 1677 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 1678 - type: boolean 1679 - interval: 1680 - description: |- 1681 - Interval at which the Bucket Endpoint is checked for updates. 1682 - This interval is approximate and may be subject to jitter to ensure 1683 - efficient use of resources. 1684 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1685 - type: string 1686 - prefix: 1687 - description: Prefix to use for server-side filtering of files in the Bucket. 1688 - type: string 1689 - provider: 1690 - default: generic 1691 - description: |- 1692 - Provider of the object storage bucket. 1693 - Defaults to 'generic', which expects an S3 (API) compatible object 1694 - storage. 1695 - enum: 1696 - - generic 1697 - - aws 1698 - - gcp 1699 - - azure 1700 - type: string 1701 - region: 1702 - description: Region of the Endpoint where the BucketName is located in. 1703 - type: string 1704 - secretRef: 1705 - description: |- 1706 - SecretRef specifies the Secret containing authentication credentials 1707 - for the Bucket. 1708 - properties: 1709 - name: 1710 - description: Name of the referent. 1711 - type: string 1712 - required: 1713 - - name 1714 - type: object 1715 - suspend: 1716 - description: |- 1717 - Suspend tells the controller to suspend the reconciliation of this 1718 - Bucket. 1719 - type: boolean 1720 - timeout: 1721 - default: 60s 1722 - description: Timeout for fetch operations, defaults to 60s. 1723 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1724 - type: string 1725 - required: 1726 - - bucketName 1727 - - endpoint 1728 - - interval 1729 - type: object 1730 - status: 1731 - default: 1732 - observedGeneration: -1 1733 - description: BucketStatus records the observed state of a Bucket. 1734 - properties: 1735 - artifact: 1736 - description: Artifact represents the last successful Bucket reconciliation. 1737 - properties: 1738 - digest: 1739 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1740 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1741 - type: string 1742 - lastUpdateTime: 1743 - description: |- 1744 - LastUpdateTime is the timestamp corresponding to the last update of the 1745 - Artifact. 1746 - format: date-time 1747 - type: string 1748 - metadata: 1749 - additionalProperties: 1750 - type: string 1751 - description: Metadata holds upstream information such as OCI annotations. 1752 - type: object 1753 - path: 1754 - description: |- 1755 - Path is the relative file path of the Artifact. It can be used to locate 1756 - the file in the root of the Artifact storage on the local file system of 1757 - the controller managing the Source. 1758 - type: string 1759 - revision: 1760 - description: |- 1761 - Revision is a human-readable identifier traceable in the origin source 1762 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1763 - type: string 1764 - size: 1765 - description: Size is the number of bytes in the file. 1766 - format: int64 1767 - type: integer 1768 - url: 1769 - description: |- 1770 - URL is the HTTP address of the Artifact as exposed by the controller 1771 - managing the Source. It can be used to retrieve the Artifact for 1772 - consumption, e.g. by another controller applying the Artifact contents. 1773 - type: string 1774 - required: 1775 - - lastUpdateTime 1776 - - path 1777 - - revision 1778 - - url 1779 - type: object 1780 - conditions: 1781 - description: Conditions holds the conditions for the Bucket. 1782 - items: 1783 - description: "Condition contains details for one aspect of the current state of this API 1784 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 1785 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 1786 - the observations of a foo's current state.\n\t // Known .status.conditions.type 1787 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 1788 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 1789 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 1790 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 1791 - fields\n\t}" 1792 - properties: 1793 - lastTransitionTime: 1794 - description: |- 1795 - lastTransitionTime is the last time the condition transitioned from one status to another. 1796 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1797 - format: date-time 1798 - type: string 1799 - message: 1800 - description: |- 1801 - message is a human readable message indicating details about the transition. 1802 - This may be an empty string. 1803 - maxLength: 32768 1804 - type: string 1805 - observedGeneration: 1806 - description: |- 1807 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1808 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1809 - with respect to the current state of the instance. 1810 - format: int64 1811 - minimum: 0 1812 - type: integer 1813 - reason: 1814 - description: |- 1815 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1816 - Producers of specific condition types may define expected values and meanings for this field, 1817 - and whether the values are considered a guaranteed API. 1818 - The value should be a CamelCase string. 1819 - This field may not be empty. 1820 - maxLength: 1024 1821 - minLength: 1 1822 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1823 - type: string 1824 - status: 1825 - description: status of the condition, one of True, False, Unknown. 1826 - enum: 1827 - - "True" 1828 - - "False" 1829 - - Unknown 1830 - type: string 1831 - type: 1832 - description: |- 1833 - type of condition in CamelCase or in foo.example.com/CamelCase. 1834 - --- 1835 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 1836 - useful (see .node.status.conditions), the ability to deconflict is important. 1837 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 1838 - maxLength: 316 1839 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1840 - type: string 1841 - required: 1842 - - lastTransitionTime 1843 - - message 1844 - - reason 1845 - - status 1846 - - type 1847 - type: object 1848 - type: array 1849 - lastHandledReconcileAt: 1850 - description: |- 1851 - LastHandledReconcileAt holds the value of the most recent 1852 - reconcile request value, so a change of the annotation value 1853 - can be detected. 1854 - type: string 1855 - observedGeneration: 1856 - description: ObservedGeneration is the last observed generation of the Bucket object. 1857 - format: int64 1858 - type: integer 1859 - observedIgnore: 1860 - description: |- 1861 - ObservedIgnore is the observed exclusion patterns used for constructing 1862 - the source artifact. 1863 - type: string 1864 - url: 1865 - description: |- 1866 - URL is the dynamic fetch link for the latest Artifact. 1867 - It is provided on a "best effort" basis, and using the precise 1868 - BucketStatus.Artifact data is recommended. 1869 - type: string 1870 - type: object 1871 + required: 1872 + - name 1873 + type: object 1874 + required: 1875 + - endpoint 1876 + - provider 1877 + type: object 1878 + suspend: 1879 + description: |- 1880 + Suspend tells the controller to suspend the reconciliation of this 1881 + Bucket. 1882 + type: boolean 1883 + timeout: 1884 + default: 60s 1885 + description: Timeout for fetch operations, defaults to 60s. 1886 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1887 + type: string 1888 + required: 1889 + - bucketName 1890 + - endpoint 1891 + - interval 1892 + type: object 1893 + x-kubernetes-validations: 1894 + - message: STS configuration is only supported for the 'aws' and 'generic' 1895 + Bucket providers 1896 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 1897 + - message: '''aws'' is the only supported STS provider for the ''aws'' 1898 + Bucket provider' 1899 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 1900 + == 'aws' 1901 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 1902 + Bucket provider' 1903 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 1904 + == 'ldap' 1905 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 1906 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 1907 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 1908 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 1909 + status: 1910 + default: 1911 + observedGeneration: -1 1912 + description: BucketStatus records the observed state of a Bucket. 1913 + properties: 1914 + artifact: 1915 + description: Artifact represents the last successful Bucket reconciliation. 1916 + properties: 1917 + digest: 1918 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1919 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1920 + type: string 1921 + lastUpdateTime: 1922 + description: |- 1923 + LastUpdateTime is the timestamp corresponding to the last update of the 1924 + Artifact. 1925 + format: date-time 1926 + type: string 1927 + metadata: 1928 + additionalProperties: 1929 + type: string 1930 + description: Metadata holds upstream information such as OCI annotations. 1931 + type: object 1932 + path: 1933 + description: |- 1934 + Path is the relative file path of the Artifact. It can be used to locate 1935 + the file in the root of the Artifact storage on the local file system of 1936 + the controller managing the Source. 1937 + type: string 1938 + revision: 1939 + description: |- 1940 + Revision is a human-readable identifier traceable in the origin source 1941 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1942 + type: string 1943 + size: 1944 + description: Size is the number of bytes in the file. 1945 + format: int64 1946 + type: integer 1947 + url: 1948 + description: |- 1949 + URL is the HTTP address of the Artifact as exposed by the controller 1950 + managing the Source. It can be used to retrieve the Artifact for 1951 + consumption, e.g. by another controller applying the Artifact contents. 1952 + type: string 1953 + required: 1954 + - lastUpdateTime 1955 + - path 1956 + - revision 1957 + - url 1958 type: object 1959 - served: true 1960 - storage: true 1961 - subresources: 1962 - status: {} 1963 + conditions: 1964 + description: Conditions holds the conditions for the Bucket. 1965 + items: 1966 + description: Condition contains details for one aspect of the current 1967 + state of this API Resource. 1968 + properties: 1969 + lastTransitionTime: 1970 + description: |- 1971 + lastTransitionTime is the last time the condition transitioned from one status to another. 1972 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1973 + format: date-time 1974 + type: string 1975 + message: 1976 + description: |- 1977 + message is a human readable message indicating details about the transition. 1978 + This may be an empty string. 1979 + maxLength: 32768 1980 + type: string 1981 + observedGeneration: 1982 + description: |- 1983 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1984 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1985 + with respect to the current state of the instance. 1986 + format: int64 1987 + minimum: 0 1988 + type: integer 1989 + reason: 1990 + description: |- 1991 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1992 + Producers of specific condition types may define expected values and meanings for this field, 1993 + and whether the values are considered a guaranteed API. 1994 + The value should be a CamelCase string. 1995 + This field may not be empty. 1996 + maxLength: 1024 1997 + minLength: 1 1998 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1999 + type: string 2000 + status: 2001 + description: status of the condition, one of True, False, Unknown. 2002 + enum: 2003 + - "True" 2004 + - "False" 2005 + - Unknown 2006 + type: string 2007 + type: 2008 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2009 + maxLength: 316 2010 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2011 + type: string 2012 + required: 2013 + - lastTransitionTime 2014 + - message 2015 + - reason 2016 + - status 2017 + - type 2018 + type: object 2019 + type: array 2020 + lastHandledReconcileAt: 2021 + description: |- 2022 + LastHandledReconcileAt holds the value of the most recent 2023 + reconcile request value, so a change of the annotation value 2024 + can be detected. 2025 + type: string 2026 + observedGeneration: 2027 + description: ObservedGeneration is the last observed generation of 2028 + the Bucket object. 2029 + format: int64 2030 + type: integer 2031 + observedIgnore: 2032 + description: |- 2033 + ObservedIgnore is the observed exclusion patterns used for constructing 2034 + the source artifact. 2035 + type: string 2036 + url: 2037 + description: |- 2038 + URL is the dynamic fetch link for the latest Artifact. 2039 + It is provided on a "best effort" basis, and using the precise 2040 + BucketStatus.Artifact data is recommended. 2041 + type: string 2042 + type: object 2043 + type: object 2044 + served: true 2045 + storage: false 2046 + subresources: 2047 + status: {} 2048 --- 2049 apiVersion: apiextensions.k8s.io/v1 2050 kind: CustomResourceDefinition 2051 metadata: 2052 - annotations: 2053 - controller-gen.kubebuilder.io/version: v0.15.0 2054 - labels: 2055 - app.kubernetes.io/component: source-controller 2056 - app.kubernetes.io/instance: flux-system 2057 - app.kubernetes.io/part-of: flux 2058 - app.kubernetes.io/version: v2.3.0 2059 - name: gitrepositories.source.toolkit.fluxcd.io 2060 + annotations: 2061 + controller-gen.kubebuilder.io/version: v0.16.1 2062 + labels: 2063 + app.kubernetes.io/component: source-controller 2064 + app.kubernetes.io/instance: flux-system 2065 + app.kubernetes.io/part-of: flux 2066 + app.kubernetes.io/version: v2.4.0 2067 + name: gitrepositories.source.toolkit.fluxcd.io 2068 spec: 2069 - group: source.toolkit.fluxcd.io 2070 - names: 2071 - kind: GitRepository 2072 - listKind: GitRepositoryList 2073 - plural: gitrepositories 2074 - shortNames: 2075 - - gitrepo 2076 - singular: gitrepository 2077 - scope: Namespaced 2078 - versions: 2079 - - additionalPrinterColumns: 2080 - - jsonPath: .spec.url 2081 - name: URL 2082 - type: string 2083 - - jsonPath: .metadata.creationTimestamp 2084 - name: Age 2085 - type: date 2086 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2087 - name: Ready 2088 - type: string 2089 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2090 - name: Status 2091 - type: string 2092 - name: v1 2093 - schema: 2094 - openAPIV3Schema: 2095 - description: GitRepository is the Schema for the gitrepositories API. 2096 + group: source.toolkit.fluxcd.io 2097 + names: 2098 + kind: GitRepository 2099 + listKind: GitRepositoryList 2100 + plural: gitrepositories 2101 + shortNames: 2102 + - gitrepo 2103 + singular: gitrepository 2104 + scope: Namespaced 2105 + versions: 2106 + - additionalPrinterColumns: 2107 + - jsonPath: .spec.url 2108 + name: URL 2109 + type: string 2110 + - jsonPath: .metadata.creationTimestamp 2111 + name: Age 2112 + type: date 2113 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2114 + name: Ready 2115 + type: string 2116 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 2117 + name: Status 2118 + type: string 2119 + name: v1 2120 + schema: 2121 + openAPIV3Schema: 2122 + description: GitRepository is the Schema for the gitrepositories API. 2123 + properties: 2124 + apiVersion: 2125 + description: |- 2126 + APIVersion defines the versioned schema of this representation of an object. 2127 + Servers should convert recognized schemas to the latest internal value, and 2128 + may reject unrecognized values. 2129 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2130 + type: string 2131 + kind: 2132 + description: |- 2133 + Kind is a string value representing the REST resource this object represents. 2134 + Servers may infer this from the endpoint the client submits requests to. 2135 + Cannot be updated. 2136 + In CamelCase. 2137 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2138 + type: string 2139 + metadata: 2140 + type: object 2141 + spec: 2142 + description: |- 2143 + GitRepositorySpec specifies the required configuration to produce an 2144 + Artifact for a Git repository. 2145 + properties: 2146 + ignore: 2147 + description: |- 2148 + Ignore overrides the set of excluded patterns in the .sourceignore format 2149 + (which is the same as .gitignore). If not provided, a default will be used, 2150 + consult the documentation for your version to find out what those are. 2151 + type: string 2152 + include: 2153 + description: |- 2154 + Include specifies a list of GitRepository resources which Artifacts 2155 + should be included in the Artifact produced for this GitRepository. 2156 + items: 2157 + description: |- 2158 + GitRepositoryInclude specifies a local reference to a GitRepository which 2159 + Artifact (sub-)contents must be included, and where they should be placed. 2160 + properties: 2161 + fromPath: 2162 + description: |- 2163 + FromPath specifies the path to copy contents from, defaults to the root 2164 + of the Artifact. 2165 + type: string 2166 + repository: 2167 + description: |- 2168 + GitRepositoryRef specifies the GitRepository which Artifact contents 2169 + must be included. 2170 + properties: 2171 + name: 2172 + description: Name of the referent. 2173 + type: string 2174 + required: 2175 + - name 2176 + type: object 2177 + toPath: 2178 + description: |- 2179 + ToPath specifies the path to copy contents to, defaults to the name of 2180 + the GitRepositoryRef. 2181 + type: string 2182 + required: 2183 + - repository 2184 + type: object 2185 + type: array 2186 + interval: 2187 + description: |- 2188 + Interval at which the GitRepository URL is checked for updates. 2189 + This interval is approximate and may be subject to jitter to ensure 2190 + efficient use of resources. 2191 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2192 + type: string 2193 + provider: 2194 + description: |- 2195 + Provider used for authentication, can be 'azure', 'generic'. 2196 + When not specified, defaults to 'generic'. 2197 + enum: 2198 + - generic 2199 + - azure 2200 + type: string 2201 + proxySecretRef: 2202 + description: |- 2203 + ProxySecretRef specifies the Secret containing the proxy configuration 2204 + to use while communicating with the Git server. 2205 properties: 2206 - apiVersion: 2207 - description: |- 2208 - APIVersion defines the versioned schema of this representation of an object. 2209 - Servers should convert recognized schemas to the latest internal value, and 2210 - may reject unrecognized values. 2211 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2212 - type: string 2213 - kind: 2214 - description: |- 2215 - Kind is a string value representing the REST resource this object represents. 2216 - Servers may infer this from the endpoint the client submits requests to. 2217 - Cannot be updated. 2218 - In CamelCase. 2219 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2220 + name: 2221 + description: Name of the referent. 2222 + type: string 2223 + required: 2224 + - name 2225 + type: object 2226 + recurseSubmodules: 2227 + description: |- 2228 + RecurseSubmodules enables the initialization of all submodules within 2229 + the GitRepository as cloned from the URL, using their default settings. 2230 + type: boolean 2231 + ref: 2232 + description: |- 2233 + Reference specifies the Git reference to resolve and monitor for 2234 + changes, defaults to the 'master' branch. 2235 + properties: 2236 + branch: 2237 + description: Branch to check out, defaults to 'master' if no other 2238 + field is defined. 2239 + type: string 2240 + commit: 2241 + description: |- 2242 + Commit SHA to check out, takes precedence over all reference fields. 2243 + 2244 + This can be combined with Branch to shallow clone the branch, in which 2245 + the commit is expected to exist. 2246 + type: string 2247 + name: 2248 + description: |- 2249 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2250 + 2251 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2252 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2253 + type: string 2254 + semver: 2255 + description: SemVer tag expression to check out, takes precedence 2256 + over Tag. 2257 + type: string 2258 + tag: 2259 + description: Tag to check out, takes precedence over Branch. 2260 + type: string 2261 + type: object 2262 + secretRef: 2263 + description: |- 2264 + SecretRef specifies the Secret containing authentication credentials for 2265 + the GitRepository. 2266 + For HTTPS repositories the Secret must contain 'username' and 'password' 2267 + fields for basic auth or 'bearerToken' field for token auth. 2268 + For SSH repositories the Secret must contain 'identity' 2269 + and 'known_hosts' fields. 2270 + properties: 2271 + name: 2272 + description: Name of the referent. 2273 + type: string 2274 + required: 2275 + - name 2276 + type: object 2277 + suspend: 2278 + description: |- 2279 + Suspend tells the controller to suspend the reconciliation of this 2280 + GitRepository. 2281 + type: boolean 2282 + timeout: 2283 + default: 60s 2284 + description: Timeout for Git operations like cloning, defaults to 2285 + 60s. 2286 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2287 + type: string 2288 + url: 2289 + description: URL specifies the Git repository URL, it can be an HTTP/S 2290 + or SSH address. 2291 + pattern: ^(http|https|ssh)://.*$ 2292 + type: string 2293 + verify: 2294 + description: |- 2295 + Verification specifies the configuration to verify the Git commit 2296 + signature(s). 2297 + properties: 2298 + mode: 2299 + default: HEAD 2300 + description: |- 2301 + Mode specifies which Git object(s) should be verified. 2302 + 2303 + The variants "head" and "HEAD" both imply the same thing, i.e. verify 2304 + the commit that the HEAD of the Git repository points to. The variant 2305 + "head" solely exists to ensure backwards compatibility. 2306 + enum: 2307 + - head 2308 + - HEAD 2309 + - Tag 2310 + - TagAndHEAD 2311 + type: string 2312 + secretRef: 2313 + description: |- 2314 + SecretRef specifies the Secret containing the public keys of trusted Git 2315 + authors. 2316 + properties: 2317 + name: 2318 + description: Name of the referent. 2319 type: string 2320 - metadata: 2321 - type: object 2322 - spec: 2323 - description: |- 2324 - GitRepositorySpec specifies the required configuration to produce an 2325 - Artifact for a Git repository. 2326 - properties: 2327 - ignore: 2328 - description: |- 2329 - Ignore overrides the set of excluded patterns in the .sourceignore format 2330 - (which is the same as .gitignore). If not provided, a default will be used, 2331 - consult the documentation for your version to find out what those are. 2332 - type: string 2333 - include: 2334 - description: |- 2335 - Include specifies a list of GitRepository resources which Artifacts 2336 - should be included in the Artifact produced for this GitRepository. 2337 - items: 2338 - description: |- 2339 - GitRepositoryInclude specifies a local reference to a GitRepository which 2340 - Artifact (sub-)contents must be included, and where they should be placed. 2341 - properties: 2342 - fromPath: 2343 - description: |- 2344 - FromPath specifies the path to copy contents from, defaults to the root 2345 - of the Artifact. 2346 - type: string 2347 - repository: 2348 - description: |- 2349 - GitRepositoryRef specifies the GitRepository which Artifact contents 2350 - must be included. 2351 - properties: 2352 - name: 2353 - description: Name of the referent. 2354 - type: string 2355 - required: 2356 - - name 2357 - type: object 2358 - toPath: 2359 - description: |- 2360 - ToPath specifies the path to copy contents to, defaults to the name of 2361 - the GitRepositoryRef. 2362 - type: string 2363 - required: 2364 - - repository 2365 - type: object 2366 - type: array 2367 - interval: 2368 - description: |- 2369 - Interval at which the GitRepository URL is checked for updates. 2370 - This interval is approximate and may be subject to jitter to ensure 2371 - efficient use of resources. 2372 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2373 - type: string 2374 - proxySecretRef: 2375 - description: |- 2376 - ProxySecretRef specifies the Secret containing the proxy configuration 2377 - to use while communicating with the Git server. 2378 - properties: 2379 - name: 2380 - description: Name of the referent. 2381 - type: string 2382 - required: 2383 - - name 2384 - type: object 2385 - recurseSubmodules: 2386 - description: |- 2387 - RecurseSubmodules enables the initialization of all submodules within 2388 - the GitRepository as cloned from the URL, using their default settings. 2389 - type: boolean 2390 - ref: 2391 - description: |- 2392 - Reference specifies the Git reference to resolve and monitor for 2393 - changes, defaults to the 'master' branch. 2394 - properties: 2395 - branch: 2396 - description: Branch to check out, defaults to 'master' if no other field is defined. 2397 - type: string 2398 - commit: 2399 - description: |- 2400 - Commit SHA to check out, takes precedence over all reference fields. 2401 - 2402 - 2403 - This can be combined with Branch to shallow clone the branch, in which 2404 - the commit is expected to exist. 2405 - type: string 2406 - name: 2407 - description: |- 2408 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 2409 - 2410 - 2411 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 2412 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 2413 - type: string 2414 - semver: 2415 - description: SemVer tag expression to check out, takes precedence over Tag. 2416 - type: string 2417 - tag: 2418 - description: Tag to check out, takes precedence over Branch. 2419 - type: string 2420 - type: object 2421 - secretRef: 2422 - description: |- 2423 - SecretRef specifies the Secret containing authentication credentials for 2424 - the GitRepository. 2425 - For HTTPS repositories the Secret must contain 'username' and 'password' 2426 - fields for basic auth or 'bearerToken' field for token auth. 2427 - For SSH repositories the Secret must contain 'identity' 2428 - and 'known_hosts' fields. 2429 - properties: 2430 - name: 2431 - description: Name of the referent. 2432 - type: string 2433 - required: 2434 - - name 2435 - type: object 2436 - suspend: 2437 - description: |- 2438 - Suspend tells the controller to suspend the reconciliation of this 2439 - GitRepository. 2440 - type: boolean 2441 - timeout: 2442 - default: 60s 2443 - description: Timeout for Git operations like cloning, defaults to 60s. 2444 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 2445 - type: string 2446 - url: 2447 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 2448 - pattern: ^(http|https|ssh)://.*$ 2449 - type: string 2450 - verify: 2451 - description: |- 2452 - Verification specifies the configuration to verify the Git commit 2453 - signature(s). 2454 - properties: 2455 - mode: 2456 - default: HEAD 2457 - description: |- 2458 - Mode specifies which Git object(s) should be verified. 2459 - 2460 - 2461 - The variants "head" and "HEAD" both imply the same thing, i.e. verify 2462 - the commit that the HEAD of the Git repository points to. The variant 2463 - "head" solely exists to ensure backwards compatibility. 2464 - enum: 2465 - - head 2466 - - HEAD 2467 - - Tag 2468 - - TagAndHEAD 2469 - type: string 2470 - secretRef: 2471 - description: |- 2472 - SecretRef specifies the Secret containing the public keys of trusted Git 2473 - authors. 2474 - properties: 2475 - name: 2476 - description: Name of the referent. 2477 - type: string 2478 - required: 2479 - - name 2480 - type: object 2481 - required: 2482 - - secretRef 2483 - type: object 2484 - required: 2485 - - interval 2486 - - url 2487 - type: object 2488 - status: 2489 - default: 2490 - observedGeneration: -1 2491 - description: GitRepositoryStatus records the observed state of a Git repository. 2492 - properties: 2493 - artifact: 2494 - description: Artifact represents the last successful GitRepository reconciliation. 2495 - properties: 2496 - digest: 2497 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2498 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2499 - type: string 2500 - lastUpdateTime: 2501 - description: |- 2502 - LastUpdateTime is the timestamp corresponding to the last update of the 2503 - Artifact. 2504 - format: date-time 2505 - type: string 2506 - metadata: 2507 - additionalProperties: 2508 - type: string 2509 - description: Metadata holds upstream information such as OCI annotations. 2510 - type: object 2511 - path: 2512 - description: |- 2513 - Path is the relative file path of the Artifact. It can be used to locate 2514 - the file in the root of the Artifact storage on the local file system of 2515 - the controller managing the Source. 2516 - type: string 2517 - revision: 2518 - description: |- 2519 - Revision is a human-readable identifier traceable in the origin source 2520 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2521 - type: string 2522 - size: 2523 - description: Size is the number of bytes in the file. 2524 - format: int64 2525 - type: integer 2526 - url: 2527 - description: |- 2528 - URL is the HTTP address of the Artifact as exposed by the controller 2529 - managing the Source. It can be used to retrieve the Artifact for 2530 - consumption, e.g. by another controller applying the Artifact contents. 2531 - type: string 2532 - required: 2533 - - lastUpdateTime 2534 - - path 2535 - - revision 2536 - - url 2537 - type: object 2538 - conditions: 2539 - description: Conditions holds the conditions for the GitRepository. 2540 - items: 2541 - description: "Condition contains details for one aspect of the current state of this API 2542 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 2543 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 2544 - the observations of a foo's current state.\n\t // Known .status.conditions.type 2545 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 2546 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 2547 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 2548 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 2549 - fields\n\t}" 2550 - properties: 2551 - lastTransitionTime: 2552 - description: |- 2553 - lastTransitionTime is the last time the condition transitioned from one status to another. 2554 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2555 - format: date-time 2556 - type: string 2557 - message: 2558 - description: |- 2559 - message is a human readable message indicating details about the transition. 2560 - This may be an empty string. 2561 - maxLength: 32768 2562 - type: string 2563 - observedGeneration: 2564 - description: |- 2565 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2566 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2567 - with respect to the current state of the instance. 2568 - format: int64 2569 - minimum: 0 2570 - type: integer 2571 - reason: 2572 - description: |- 2573 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2574 - Producers of specific condition types may define expected values and meanings for this field, 2575 - and whether the values are considered a guaranteed API. 2576 - The value should be a CamelCase string. 2577 - This field may not be empty. 2578 - maxLength: 1024 2579 - minLength: 1 2580 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2581 - type: string 2582 - status: 2583 - description: status of the condition, one of True, False, Unknown. 2584 - enum: 2585 - - "True" 2586 - - "False" 2587 - - Unknown 2588 - type: string 2589 - type: 2590 - description: |- 2591 - type of condition in CamelCase or in foo.example.com/CamelCase. 2592 - --- 2593 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 2594 - useful (see .node.status.conditions), the ability to deconflict is important. 2595 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 2596 - maxLength: 316 2597 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2598 - type: string 2599 - required: 2600 - - lastTransitionTime 2601 - - message 2602 - - reason 2603 - - status 2604 - - type 2605 - type: object 2606 - type: array 2607 - includedArtifacts: 2608 - description: |- 2609 - IncludedArtifacts contains a list of the last successfully included 2610 - Artifacts as instructed by GitRepositorySpec.Include. 2611 - items: 2612 - description: Artifact represents the output of a Source reconciliation. 2613 - properties: 2614 - digest: 2615 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2616 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2617 - type: string 2618 - lastUpdateTime: 2619 - description: |- 2620 - LastUpdateTime is the timestamp corresponding to the last update of the 2621 - Artifact. 2622 - format: date-time 2623 - type: string 2624 - metadata: 2625 - additionalProperties: 2626 - type: string 2627 - description: Metadata holds upstream information such as OCI annotations. 2628 - type: object 2629 - path: 2630 - description: |- 2631 - Path is the relative file path of the Artifact. It can be used to locate 2632 - the file in the root of the Artifact storage on the local file system of 2633 - the controller managing the Source. 2634 - type: string 2635 - revision: 2636 - description: |- 2637 - Revision is a human-readable identifier traceable in the origin source 2638 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2639 - type: string 2640 - size: 2641 - description: Size is the number of bytes in the file. 2642 - format: int64 2643 - type: integer 2644 - url: 2645 - description: |- 2646 - URL is the HTTP address of the Artifact as exposed by the controller 2647 - managing the Source. It can be used to retrieve the Artifact for 2648 - consumption, e.g. by another controller applying the Artifact contents. 2649 - type: string 2650 - required: 2651 - - lastUpdateTime 2652 - - path 2653 - - revision 2654 - - url 2655 - type: object 2656 - type: array 2657 - lastHandledReconcileAt: 2658 - description: |- 2659 - LastHandledReconcileAt holds the value of the most recent 2660 - reconcile request value, so a change of the annotation value 2661 - can be detected. 2662 - type: string 2663 - observedGeneration: 2664 - description: |- 2665 - ObservedGeneration is the last observed generation of the GitRepository 2666 - object. 2667 - format: int64 2668 - type: integer 2669 - observedIgnore: 2670 - description: |- 2671 - ObservedIgnore is the observed exclusion patterns used for constructing 2672 - the source artifact. 2673 - type: string 2674 - observedInclude: 2675 - description: |- 2676 - ObservedInclude is the observed list of GitRepository resources used to 2677 - produce the current Artifact. 2678 - items: 2679 - description: |- 2680 - GitRepositoryInclude specifies a local reference to a GitRepository which 2681 - Artifact (sub-)contents must be included, and where they should be placed. 2682 - properties: 2683 - fromPath: 2684 - description: |- 2685 - FromPath specifies the path to copy contents from, defaults to the root 2686 - of the Artifact. 2687 - type: string 2688 - repository: 2689 - description: |- 2690 - GitRepositoryRef specifies the GitRepository which Artifact contents 2691 - must be included. 2692 - properties: 2693 - name: 2694 - description: Name of the referent. 2695 - type: string 2696 - required: 2697 - - name 2698 - type: object 2699 - toPath: 2700 - description: |- 2701 - ToPath specifies the path to copy contents to, defaults to the name of 2702 - the GitRepositoryRef. 2703 - type: string 2704 - required: 2705 - - repository 2706 - type: object 2707 - type: array 2708 - observedRecurseSubmodules: 2709 - description: |- 2710 - ObservedRecurseSubmodules is the observed resource submodules 2711 - configuration used to produce the current Artifact. 2712 - type: boolean 2713 - sourceVerificationMode: 2714 - description: |- 2715 - SourceVerificationMode is the last used verification mode indicating 2716 - which Git object(s) have been verified. 2717 - type: string 2718 - type: object 2719 + required: 2720 + - name 2721 + type: object 2722 + required: 2723 + - secretRef 2724 type: object 2725 - served: true 2726 - storage: true 2727 - subresources: 2728 - status: {} 2729 - - additionalPrinterColumns: 2730 - - jsonPath: .spec.url 2731 - name: URL 2732 - type: string 2733 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2734 - name: Ready 2735 - type: string 2736 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2737 - name: Status 2738 - type: string 2739 - - jsonPath: .metadata.creationTimestamp 2740 - name: Age 2741 - type: date 2742 - deprecated: true 2743 - deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1 2744 - name: v1beta1 2745 - schema: 2746 - openAPIV3Schema: 2747 - description: GitRepository is the Schema for the gitrepositories API 2748 + required: 2749 + - interval 2750 + - url 2751 + type: object 2752 + status: 2753 + default: 2754 + observedGeneration: -1 2755 + description: GitRepositoryStatus records the observed state of a Git repository. 2756 + properties: 2757 + artifact: 2758 + description: Artifact represents the last successful GitRepository 2759 + reconciliation. 2760 properties: 2761 - apiVersion: 2762 - description: |- 2763 - APIVersion defines the versioned schema of this representation of an object. 2764 - Servers should convert recognized schemas to the latest internal value, and 2765 - may reject unrecognized values. 2766 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2767 + digest: 2768 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2769 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2770 + type: string 2771 + lastUpdateTime: 2772 + description: |- 2773 + LastUpdateTime is the timestamp corresponding to the last update of the 2774 + Artifact. 2775 + format: date-time 2776 + type: string 2777 + metadata: 2778 + additionalProperties: 2779 + type: string 2780 + description: Metadata holds upstream information such as OCI annotations. 2781 + type: object 2782 + path: 2783 + description: |- 2784 + Path is the relative file path of the Artifact. It can be used to locate 2785 + the file in the root of the Artifact storage on the local file system of 2786 + the controller managing the Source. 2787 + type: string 2788 + revision: 2789 + description: |- 2790 + Revision is a human-readable identifier traceable in the origin source 2791 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2792 + type: string 2793 + size: 2794 + description: Size is the number of bytes in the file. 2795 + format: int64 2796 + type: integer 2797 + url: 2798 + description: |- 2799 + URL is the HTTP address of the Artifact as exposed by the controller 2800 + managing the Source. It can be used to retrieve the Artifact for 2801 + consumption, e.g. by another controller applying the Artifact contents. 2802 + type: string 2803 + required: 2804 + - lastUpdateTime 2805 + - path 2806 + - revision 2807 + - url 2808 + type: object 2809 + conditions: 2810 + description: Conditions holds the conditions for the GitRepository. 2811 + items: 2812 + description: Condition contains details for one aspect of the current 2813 + state of this API Resource. 2814 + properties: 2815 + lastTransitionTime: 2816 + description: |- 2817 + lastTransitionTime is the last time the condition transitioned from one status to another. 2818 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2819 + format: date-time 2820 + type: string 2821 + message: 2822 + description: |- 2823 + message is a human readable message indicating details about the transition. 2824 + This may be an empty string. 2825 + maxLength: 32768 2826 + type: string 2827 + observedGeneration: 2828 + description: |- 2829 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2830 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2831 + with respect to the current state of the instance. 2832 + format: int64 2833 + minimum: 0 2834 + type: integer 2835 + reason: 2836 + description: |- 2837 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2838 + Producers of specific condition types may define expected values and meanings for this field, 2839 + and whether the values are considered a guaranteed API. 2840 + The value should be a CamelCase string. 2841 + This field may not be empty. 2842 + maxLength: 1024 2843 + minLength: 1 2844 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2845 + type: string 2846 + status: 2847 + description: status of the condition, one of True, False, Unknown. 2848 + enum: 2849 + - "True" 2850 + - "False" 2851 + - Unknown 2852 + type: string 2853 + type: 2854 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2855 + maxLength: 316 2856 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2857 + type: string 2858 + required: 2859 + - lastTransitionTime 2860 + - message 2861 + - reason 2862 + - status 2863 + - type 2864 + type: object 2865 + type: array 2866 + includedArtifacts: 2867 + description: |- 2868 + IncludedArtifacts contains a list of the last successfully included 2869 + Artifacts as instructed by GitRepositorySpec.Include. 2870 + items: 2871 + description: Artifact represents the output of a Source reconciliation. 2872 + properties: 2873 + digest: 2874 + description: Digest is the digest of the file in the form of 2875 + '<algorithm>:<checksum>'. 2876 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2877 + type: string 2878 + lastUpdateTime: 2879 + description: |- 2880 + LastUpdateTime is the timestamp corresponding to the last update of the 2881 + Artifact. 2882 + format: date-time 2883 + type: string 2884 + metadata: 2885 + additionalProperties: 2886 type: string 2887 - kind: 2888 - description: |- 2889 - Kind is a string value representing the REST resource this object represents. 2890 - Servers may infer this from the endpoint the client submits requests to. 2891 - Cannot be updated. 2892 - In CamelCase. 2893 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2894 + description: Metadata holds upstream information such as OCI 2895 + annotations. 2896 + type: object 2897 + path: 2898 + description: |- 2899 + Path is the relative file path of the Artifact. It can be used to locate 2900 + the file in the root of the Artifact storage on the local file system of 2901 + the controller managing the Source. 2902 + type: string 2903 + revision: 2904 + description: |- 2905 + Revision is a human-readable identifier traceable in the origin source 2906 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2907 + type: string 2908 + size: 2909 + description: Size is the number of bytes in the file. 2910 + format: int64 2911 + type: integer 2912 + url: 2913 + description: |- 2914 + URL is the HTTP address of the Artifact as exposed by the controller 2915 + managing the Source. It can be used to retrieve the Artifact for 2916 + consumption, e.g. by another controller applying the Artifact contents. 2917 + type: string 2918 + required: 2919 + - lastUpdateTime 2920 + - path 2921 + - revision 2922 + - url 2923 + type: object 2924 + type: array 2925 + lastHandledReconcileAt: 2926 + description: |- 2927 + LastHandledReconcileAt holds the value of the most recent 2928 + reconcile request value, so a change of the annotation value 2929 + can be detected. 2930 + type: string 2931 + observedGeneration: 2932 + description: |- 2933 + ObservedGeneration is the last observed generation of the GitRepository 2934 + object. 2935 + format: int64 2936 + type: integer 2937 + observedIgnore: 2938 + description: |- 2939 + ObservedIgnore is the observed exclusion patterns used for constructing 2940 + the source artifact. 2941 + type: string 2942 + observedInclude: 2943 + description: |- 2944 + ObservedInclude is the observed list of GitRepository resources used to 2945 + produce the current Artifact. 2946 + items: 2947 + description: |- 2948 + GitRepositoryInclude specifies a local reference to a GitRepository which 2949 + Artifact (sub-)contents must be included, and where they should be placed. 2950 + properties: 2951 + fromPath: 2952 + description: |- 2953 + FromPath specifies the path to copy contents from, defaults to the root 2954 + of the Artifact. 2955 + type: string 2956 + repository: 2957 + description: |- 2958 + GitRepositoryRef specifies the GitRepository which Artifact contents 2959 + must be included. 2960 + properties: 2961 + name: 2962 + description: Name of the referent. 2963 + type: string 2964 + required: 2965 + - name 2966 + type: object 2967 + toPath: 2968 + description: |- 2969 + ToPath specifies the path to copy contents to, defaults to the name of 2970 + the GitRepositoryRef. 2971 + type: string 2972 + required: 2973 + - repository 2974 + type: object 2975 + type: array 2976 + observedRecurseSubmodules: 2977 + description: |- 2978 + ObservedRecurseSubmodules is the observed resource submodules 2979 + configuration used to produce the current Artifact. 2980 + type: boolean 2981 + sourceVerificationMode: 2982 + description: |- 2983 + SourceVerificationMode is the last used verification mode indicating 2984 + which Git object(s) have been verified. 2985 + type: string 2986 + type: object 2987 + type: object 2988 + served: true 2989 + storage: true 2990 + subresources: 2991 + status: {} 2992 + - additionalPrinterColumns: 2993 + - jsonPath: .spec.url 2994 + name: URL 2995 + type: string 2996 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2997 + name: Ready 2998 + type: string 2999 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3000 + name: Status 3001 + type: string 3002 + - jsonPath: .metadata.creationTimestamp 3003 + name: Age 3004 + type: date 3005 + deprecated: true 3006 + deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1 3007 + name: v1beta1 3008 + schema: 3009 + openAPIV3Schema: 3010 + description: GitRepository is the Schema for the gitrepositories API 3011 + properties: 3012 + apiVersion: 3013 + description: |- 3014 + APIVersion defines the versioned schema of this representation of an object. 3015 + Servers should convert recognized schemas to the latest internal value, and 3016 + may reject unrecognized values. 3017 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3018 + type: string 3019 + kind: 3020 + description: |- 3021 + Kind is a string value representing the REST resource this object represents. 3022 + Servers may infer this from the endpoint the client submits requests to. 3023 + Cannot be updated. 3024 + In CamelCase. 3025 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3026 + type: string 3027 + metadata: 3028 + type: object 3029 + spec: 3030 + description: GitRepositorySpec defines the desired state of a Git repository. 3031 + properties: 3032 + accessFrom: 3033 + description: AccessFrom defines an Access Control List for allowing 3034 + cross-namespace references to this object. 3035 + properties: 3036 + namespaceSelectors: 3037 + description: |- 3038 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3039 + Items in this list are evaluated using a logical OR operation. 3040 + items: 3041 + description: |- 3042 + NamespaceSelector selects the namespaces to which this ACL applies. 3043 + An empty map of MatchLabels matches all namespaces in a cluster. 3044 + properties: 3045 + matchLabels: 3046 + additionalProperties: 3047 + type: string 3048 + description: |- 3049 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3050 + map is equivalent to an element of matchExpressions, whose key field is "key", the 3051 + operator is "In", and the values array contains only "value". The requirements are ANDed. 3052 + type: object 3053 + type: object 3054 + type: array 3055 + required: 3056 + - namespaceSelectors 3057 + type: object 3058 + gitImplementation: 3059 + default: go-git 3060 + description: |- 3061 + Determines which git client library to use. 3062 + Defaults to go-git, valid values are ('go-git', 'libgit2'). 3063 + enum: 3064 + - go-git 3065 + - libgit2 3066 + type: string 3067 + ignore: 3068 + description: |- 3069 + Ignore overrides the set of excluded patterns in the .sourceignore format 3070 + (which is the same as .gitignore). If not provided, a default will be used, 3071 + consult the documentation for your version to find out what those are. 3072 + type: string 3073 + include: 3074 + description: Extra git repositories to map into the repository 3075 + items: 3076 + description: GitRepositoryInclude defines a source with a from and 3077 + to path. 3078 + properties: 3079 + fromPath: 3080 + description: The path to copy contents from, defaults to the 3081 + root directory. 3082 + type: string 3083 + repository: 3084 + description: Reference to a GitRepository to include. 3085 + properties: 3086 + name: 3087 + description: Name of the referent. 3088 + type: string 3089 + required: 3090 + - name 3091 + type: object 3092 + toPath: 3093 + description: The path to copy contents to, defaults to the name 3094 + of the source ref. 3095 + type: string 3096 + required: 3097 + - repository 3098 + type: object 3099 + type: array 3100 + interval: 3101 + description: The interval at which to check for repository updates. 3102 + type: string 3103 + recurseSubmodules: 3104 + description: |- 3105 + When enabled, after the clone is created, initializes all submodules within, 3106 + using their default settings. 3107 + This option is available only when using the 'go-git' GitImplementation. 3108 + type: boolean 3109 + ref: 3110 + description: |- 3111 + The Git reference to checkout and monitor for changes, defaults to 3112 + master branch. 3113 + properties: 3114 + branch: 3115 + description: The Git branch to checkout, defaults to master. 3116 + type: string 3117 + commit: 3118 + description: The Git commit SHA to checkout, if specified Tag 3119 + filters will be ignored. 3120 + type: string 3121 + semver: 3122 + description: The Git tag semver expression, takes precedence over 3123 + Tag. 3124 + type: string 3125 + tag: 3126 + description: The Git tag to checkout, takes precedence over Branch. 3127 + type: string 3128 + type: object 3129 + secretRef: 3130 + description: |- 3131 + The secret name containing the Git credentials. 3132 + For HTTPS repositories the secret must contain username and password 3133 + fields. 3134 + For SSH repositories the secret must contain identity and known_hosts 3135 + fields. 3136 + properties: 3137 + name: 3138 + description: Name of the referent. 3139 + type: string 3140 + required: 3141 + - name 3142 + type: object 3143 + suspend: 3144 + description: This flag tells the controller to suspend the reconciliation 3145 + of this source. 3146 + type: boolean 3147 + timeout: 3148 + default: 60s 3149 + description: The timeout for remote Git operations like cloning, defaults 3150 + to 60s. 3151 + type: string 3152 + url: 3153 + description: The repository URL, can be a HTTP/S or SSH address. 3154 + pattern: ^(http|https|ssh)://.*$ 3155 + type: string 3156 + verify: 3157 + description: Verify OpenPGP signature for the Git commit HEAD points 3158 + to. 3159 + properties: 3160 + mode: 3161 + description: Mode describes what git object should be verified, 3162 + currently ('head'). 3163 + enum: 3164 + - head 3165 + type: string 3166 + secretRef: 3167 + description: The secret name containing the public keys of all 3168 + trusted Git authors. 3169 + properties: 3170 + name: 3171 + description: Name of the referent. 3172 type: string 3173 - metadata: 3174 - type: object 3175 - spec: 3176 - description: GitRepositorySpec defines the desired state of a Git repository. 3177 - properties: 3178 - accessFrom: 3179 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 3180 - to this object. 3181 - properties: 3182 - namespaceSelectors: 3183 - description: |- 3184 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3185 - Items in this list are evaluated using a logical OR operation. 3186 - items: 3187 - description: |- 3188 - NamespaceSelector selects the namespaces to which this ACL applies. 3189 - An empty map of MatchLabels matches all namespaces in a cluster. 3190 - properties: 3191 - matchLabels: 3192 - additionalProperties: 3193 - type: string 3194 - description: |- 3195 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3196 - map is equivalent to an element of matchExpressions, whose key field is "key", the 3197 - operator is "In", and the values array contains only "value". The requirements are ANDed. 3198 - type: object 3199 - type: object 3200 - type: array 3201 - required: 3202 - - namespaceSelectors 3203 - type: object 3204 - gitImplementation: 3205 - default: go-git 3206 - description: |- 3207 - Determines which git client library to use. 3208 - Defaults to go-git, valid values are ('go-git', 'libgit2'). 3209 - enum: 3210 - - go-git 3211 - - libgit2 3212 - type: string 3213 - ignore: 3214 - description: |- 3215 - Ignore overrides the set of excluded patterns in the .sourceignore format 3216 - (which is the same as .gitignore). If not provided, a default will be used, 3217 - consult the documentation for your version to find out what those are. 3218 - type: string 3219 - include: 3220 - description: Extra git repositories to map into the repository 3221 - items: 3222 - description: GitRepositoryInclude defines a source with a from and to path. 3223 - properties: 3224 - fromPath: 3225 - description: The path to copy contents from, defaults to the root directory. 3226 - type: string 3227 - repository: 3228 - description: Reference to a GitRepository to include. 3229 - properties: 3230 - name: 3231 - description: Name of the referent. 3232 - type: string 3233 - required: 3234 - - name 3235 - type: object 3236 - toPath: 3237 - description: The path to copy contents to, defaults to the name of the source 3238 - ref. 3239 - type: string 3240 - required: 3241 - - repository 3242 - type: object 3243 - type: array 3244 - interval: 3245 - description: The interval at which to check for repository updates. 3246 - type: string 3247 - recurseSubmodules: 3248 - description: |- 3249 - When enabled, after the clone is created, initializes all submodules within, 3250 - using their default settings. 3251 - This option is available only when using the 'go-git' GitImplementation. 3252 - type: boolean 3253 - ref: 3254 - description: |- 3255 - The Git reference to checkout and monitor for changes, defaults to 3256 - master branch. 3257 - properties: 3258 - branch: 3259 - description: The Git branch to checkout, defaults to master. 3260 - type: string 3261 - commit: 3262 - description: The Git commit SHA to checkout, if specified Tag filters will be ignored. 3263 - type: string 3264 - semver: 3265 - description: The Git tag semver expression, takes precedence over Tag. 3266 - type: string 3267 - tag: 3268 - description: The Git tag to checkout, takes precedence over Branch. 3269 - type: string 3270 - type: object 3271 - secretRef: 3272 - description: |- 3273 - The secret name containing the Git credentials. 3274 - For HTTPS repositories the secret must contain username and password 3275 - fields. 3276 - For SSH repositories the secret must contain identity and known_hosts 3277 - fields. 3278 - properties: 3279 - name: 3280 - description: Name of the referent. 3281 - type: string 3282 - required: 3283 - - name 3284 - type: object 3285 - suspend: 3286 - description: This flag tells the controller to suspend the reconciliation of this source. 3287 - type: boolean 3288 - timeout: 3289 - default: 60s 3290 - description: The timeout for remote Git operations like cloning, defaults to 60s. 3291 - type: string 3292 - url: 3293 - description: The repository URL, can be a HTTP/S or SSH address. 3294 - pattern: ^(http|https|ssh)://.*$ 3295 - type: string 3296 - verify: 3297 - description: Verify OpenPGP signature for the Git commit HEAD points to. 3298 - properties: 3299 - mode: 3300 - description: Mode describes what git object should be verified, currently ('head'). 3301 - enum: 3302 - - head 3303 - type: string 3304 - secretRef: 3305 - description: The secret name containing the public keys of all trusted Git authors. 3306 - properties: 3307 - name: 3308 - description: Name of the referent. 3309 - type: string 3310 - required: 3311 - - name 3312 - type: object 3313 - required: 3314 - - mode 3315 - type: object 3316 - required: 3317 - - interval 3318 - - url 3319 - type: object 3320 + required: 3321 + - name 3322 + type: object 3323 + required: 3324 + - mode 3325 + type: object 3326 + required: 3327 + - interval 3328 + - url 3329 + type: object 3330 + status: 3331 + default: 3332 + observedGeneration: -1 3333 + description: GitRepositoryStatus defines the observed state of a Git repository. 3334 + properties: 3335 + artifact: 3336 + description: Artifact represents the output of the last successful 3337 + repository sync. 3338 + properties: 3339 + checksum: 3340 + description: Checksum is the SHA256 checksum of the artifact. 3341 + type: string 3342 + lastUpdateTime: 3343 + description: |- 3344 + LastUpdateTime is the timestamp corresponding to the last update of this 3345 + artifact. 3346 + format: date-time 3347 + type: string 3348 + path: 3349 + description: Path is the relative file path of this artifact. 3350 + type: string 3351 + revision: 3352 + description: |- 3353 + Revision is a human readable identifier traceable in the origin source 3354 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3355 + chart version, etc. 3356 + type: string 3357 + url: 3358 + description: URL is the HTTP address of this artifact. 3359 + type: string 3360 + required: 3361 + - lastUpdateTime 3362 + - path 3363 + - url 3364 + type: object 3365 + conditions: 3366 + description: Conditions holds the conditions for the GitRepository. 3367 + items: 3368 + description: Condition contains details for one aspect of the current 3369 + state of this API Resource. 3370 + properties: 3371 + lastTransitionTime: 3372 + description: |- 3373 + lastTransitionTime is the last time the condition transitioned from one status to another. 3374 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3375 + format: date-time 3376 + type: string 3377 + message: 3378 + description: |- 3379 + message is a human readable message indicating details about the transition. 3380 + This may be an empty string. 3381 + maxLength: 32768 3382 + type: string 3383 + observedGeneration: 3384 + description: |- 3385 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3386 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3387 + with respect to the current state of the instance. 3388 + format: int64 3389 + minimum: 0 3390 + type: integer 3391 + reason: 3392 + description: |- 3393 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3394 + Producers of specific condition types may define expected values and meanings for this field, 3395 + and whether the values are considered a guaranteed API. 3396 + The value should be a CamelCase string. 3397 + This field may not be empty. 3398 + maxLength: 1024 3399 + minLength: 1 3400 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3401 + type: string 3402 status: 3403 - default: 3404 - observedGeneration: -1 3405 - description: GitRepositoryStatus defines the observed state of a Git repository. 3406 - properties: 3407 - artifact: 3408 - description: Artifact represents the output of the last successful repository sync. 3409 - properties: 3410 - checksum: 3411 - description: Checksum is the SHA256 checksum of the artifact. 3412 - type: string 3413 - lastUpdateTime: 3414 - description: |- 3415 - LastUpdateTime is the timestamp corresponding to the last update of this 3416 - artifact. 3417 - format: date-time 3418 - type: string 3419 - path: 3420 - description: Path is the relative file path of this artifact. 3421 - type: string 3422 - revision: 3423 - description: |- 3424 - Revision is a human readable identifier traceable in the origin source 3425 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3426 - chart version, etc. 3427 - type: string 3428 - url: 3429 - description: URL is the HTTP address of this artifact. 3430 - type: string 3431 - required: 3432 - - path 3433 - - url 3434 - type: object 3435 - conditions: 3436 - description: Conditions holds the conditions for the GitRepository. 3437 - items: 3438 - description: "Condition contains details for one aspect of the current state of this API 3439 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 3440 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 3441 - the observations of a foo's current state.\n\t // Known .status.conditions.type 3442 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 3443 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 3444 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 3445 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 3446 - fields\n\t}" 3447 - properties: 3448 - lastTransitionTime: 3449 - description: |- 3450 - lastTransitionTime is the last time the condition transitioned from one status to another. 3451 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3452 - format: date-time 3453 - type: string 3454 - message: 3455 - description: |- 3456 - message is a human readable message indicating details about the transition. 3457 - This may be an empty string. 3458 - maxLength: 32768 3459 - type: string 3460 - observedGeneration: 3461 - description: |- 3462 - observedGeneration represents the .metadata.generation that the condition was set based upon. 3463 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3464 - with respect to the current state of the instance. 3465 - format: int64 3466 - minimum: 0 3467 - type: integer 3468 - reason: 3469 - description: |- 3470 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 3471 - Producers of specific condition types may define expected values and meanings for this field, 3472 - and whether the values are considered a guaranteed API. 3473 - The value should be a CamelCase string. 3474 - This field may not be empty. 3475 - maxLength: 1024 3476 - minLength: 1 3477 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3478 - type: string 3479 - status: 3480 - description: status of the condition, one of True, False, Unknown. 3481 - enum: 3482 - - "True" 3483 - - "False" 3484 - - Unknown 3485 - type: string 3486 - type: 3487 - description: |- 3488 - type of condition in CamelCase or in foo.example.com/CamelCase. 3489 - --- 3490 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 3491 - useful (see .node.status.conditions), the ability to deconflict is important. 3492 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 3493 - maxLength: 316 3494 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3495 - type: string 3496 - required: 3497 - - lastTransitionTime 3498 - - message 3499 - - reason 3500 - - status 3501 - - type 3502 - type: object 3503 - type: array 3504 - includedArtifacts: 3505 - description: IncludedArtifacts represents the included artifacts from the last successful 3506 - repository sync. 3507 - items: 3508 - description: Artifact represents the output of a source synchronisation. 3509 - properties: 3510 - checksum: 3511 - description: Checksum is the SHA256 checksum of the artifact. 3512 - type: string 3513 - lastUpdateTime: 3514 - description: |- 3515 - LastUpdateTime is the timestamp corresponding to the last update of this 3516 - artifact. 3517 - format: date-time 3518 - type: string 3519 - path: 3520 - description: Path is the relative file path of this artifact. 3521 - type: string 3522 - revision: 3523 - description: |- 3524 - Revision is a human readable identifier traceable in the origin source 3525 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3526 - chart version, etc. 3527 - type: string 3528 - url: 3529 - description: URL is the HTTP address of this artifact. 3530 - type: string 3531 - required: 3532 - - path 3533 - - url 3534 - type: object 3535 - type: array 3536 - lastHandledReconcileAt: 3537 - description: |- 3538 - LastHandledReconcileAt holds the value of the most recent 3539 - reconcile request value, so a change of the annotation value 3540 - can be detected. 3541 - type: string 3542 - observedGeneration: 3543 - description: ObservedGeneration is the last observed generation. 3544 - format: int64 3545 - type: integer 3546 - url: 3547 - description: |- 3548 - URL is the download link for the artifact output of the last repository 3549 - sync. 3550 - type: string 3551 - type: object 3552 + description: status of the condition, one of True, False, Unknown. 3553 + enum: 3554 + - "True" 3555 + - "False" 3556 + - Unknown 3557 + type: string 3558 + type: 3559 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3560 + maxLength: 316 3561 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3562 + type: string 3563 + required: 3564 + - lastTransitionTime 3565 + - message 3566 + - reason 3567 + - status 3568 + - type 3569 + type: object 3570 + type: array 3571 + includedArtifacts: 3572 + description: IncludedArtifacts represents the included artifacts from 3573 + the last successful repository sync. 3574 + items: 3575 + description: Artifact represents the output of a source synchronisation. 3576 + properties: 3577 + checksum: 3578 + description: Checksum is the SHA256 checksum of the artifact. 3579 + type: string 3580 + lastUpdateTime: 3581 + description: |- 3582 + LastUpdateTime is the timestamp corresponding to the last update of this 3583 + artifact. 3584 + format: date-time 3585 + type: string 3586 + path: 3587 + description: Path is the relative file path of this artifact. 3588 + type: string 3589 + revision: 3590 + description: |- 3591 + Revision is a human readable identifier traceable in the origin source 3592 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 3593 + chart version, etc. 3594 + type: string 3595 + url: 3596 + description: URL is the HTTP address of this artifact. 3597 + type: string 3598 + required: 3599 + - lastUpdateTime 3600 + - path 3601 + - url 3602 + type: object 3603 + type: array 3604 + lastHandledReconcileAt: 3605 + description: |- 3606 + LastHandledReconcileAt holds the value of the most recent 3607 + reconcile request value, so a change of the annotation value 3608 + can be detected. 3609 + type: string 3610 + observedGeneration: 3611 + description: ObservedGeneration is the last observed generation. 3612 + format: int64 3613 + type: integer 3614 + url: 3615 + description: |- 3616 + URL is the download link for the artifact output of the last repository 3617 + sync. 3618 + type: string 3619 + type: object 3620 + type: object 3621 + served: true 3622 + storage: false 3623 + subresources: 3624 + status: {} 3625 + - additionalPrinterColumns: 3626 + - jsonPath: .spec.url 3627 + name: URL 3628 + type: string 3629 + - jsonPath: .metadata.creationTimestamp 3630 + name: Age 3631 + type: date 3632 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 3633 + name: Ready 3634 + type: string 3635 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3636 + name: Status 3637 + type: string 3638 + deprecated: true 3639 + deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 3640 + name: v1beta2 3641 + schema: 3642 + openAPIV3Schema: 3643 + description: GitRepository is the Schema for the gitrepositories API. 3644 + properties: 3645 + apiVersion: 3646 + description: |- 3647 + APIVersion defines the versioned schema of this representation of an object. 3648 + Servers should convert recognized schemas to the latest internal value, and 3649 + may reject unrecognized values. 3650 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3651 + type: string 3652 + kind: 3653 + description: |- 3654 + Kind is a string value representing the REST resource this object represents. 3655 + Servers may infer this from the endpoint the client submits requests to. 3656 + Cannot be updated. 3657 + In CamelCase. 3658 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3659 + type: string 3660 + metadata: 3661 + type: object 3662 + spec: 3663 + description: |- 3664 + GitRepositorySpec specifies the required configuration to produce an 3665 + Artifact for a Git repository. 3666 + properties: 3667 + accessFrom: 3668 + description: |- 3669 + AccessFrom specifies an Access Control List for allowing cross-namespace 3670 + references to this object. 3671 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 3672 + properties: 3673 + namespaceSelectors: 3674 + description: |- 3675 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3676 + Items in this list are evaluated using a logical OR operation. 3677 + items: 3678 + description: |- 3679 + NamespaceSelector selects the namespaces to which this ACL applies. 3680 + An empty map of MatchLabels matches all namespaces in a cluster. 3681 + properties: 3682 + matchLabels: 3683 + additionalProperties: 3684 + type: string 3685 + description: |- 3686 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3687 + map is equivalent to an element of matchExpressions, whose key field is "key", the 3688 + operator is "In", and the values array contains only "value". The requirements are ANDed. 3689 + type: object 3690 + type: object 3691 + type: array 3692 + required: 3693 + - namespaceSelectors 3694 type: object 3695 - served: true 3696 - storage: false 3697 - subresources: 3698 - status: {} 3699 - - additionalPrinterColumns: 3700 - - jsonPath: .spec.url 3701 - name: URL 3702 - type: string 3703 - - jsonPath: .metadata.creationTimestamp 3704 - name: Age 3705 - type: date 3706 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 3707 - name: Ready 3708 - type: string 3709 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 3710 - name: Status 3711 - type: string 3712 - deprecated: true 3713 - deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1 3714 - name: v1beta2 3715 - schema: 3716 - openAPIV3Schema: 3717 - description: GitRepository is the Schema for the gitrepositories API. 3718 + gitImplementation: 3719 + default: go-git 3720 + description: |- 3721 + GitImplementation specifies which Git client library implementation to 3722 + use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 3723 + Deprecated: gitImplementation is deprecated now that 'go-git' is the 3724 + only supported implementation. 3725 + enum: 3726 + - go-git 3727 + - libgit2 3728 + type: string 3729 + ignore: 3730 + description: |- 3731 + Ignore overrides the set of excluded patterns in the .sourceignore format 3732 + (which is the same as .gitignore). If not provided, a default will be used, 3733 + consult the documentation for your version to find out what those are. 3734 + type: string 3735 + include: 3736 + description: |- 3737 + Include specifies a list of GitRepository resources which Artifacts 3738 + should be included in the Artifact produced for this GitRepository. 3739 + items: 3740 + description: |- 3741 + GitRepositoryInclude specifies a local reference to a GitRepository which 3742 + Artifact (sub-)contents must be included, and where they should be placed. 3743 + properties: 3744 + fromPath: 3745 + description: |- 3746 + FromPath specifies the path to copy contents from, defaults to the root 3747 + of the Artifact. 3748 + type: string 3749 + repository: 3750 + description: |- 3751 + GitRepositoryRef specifies the GitRepository which Artifact contents 3752 + must be included. 3753 + properties: 3754 + name: 3755 + description: Name of the referent. 3756 + type: string 3757 + required: 3758 + - name 3759 + type: object 3760 + toPath: 3761 + description: |- 3762 + ToPath specifies the path to copy contents to, defaults to the name of 3763 + the GitRepositoryRef. 3764 + type: string 3765 + required: 3766 + - repository 3767 + type: object 3768 + type: array 3769 + interval: 3770 + description: Interval at which to check the GitRepository for updates. 3771 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 3772 + type: string 3773 + recurseSubmodules: 3774 + description: |- 3775 + RecurseSubmodules enables the initialization of all submodules within 3776 + the GitRepository as cloned from the URL, using their default settings. 3777 + type: boolean 3778 + ref: 3779 + description: |- 3780 + Reference specifies the Git reference to resolve and monitor for 3781 + changes, defaults to the 'master' branch. 3782 properties: 3783 - apiVersion: 3784 - description: |- 3785 - APIVersion defines the versioned schema of this representation of an object. 3786 - Servers should convert recognized schemas to the latest internal value, and 3787 - may reject unrecognized values. 3788 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3789 - type: string 3790 - kind: 3791 - description: |- 3792 - Kind is a string value representing the REST resource this object represents. 3793 - Servers may infer this from the endpoint the client submits requests to. 3794 - Cannot be updated. 3795 - In CamelCase. 3796 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3797 + branch: 3798 + description: Branch to check out, defaults to 'master' if no other 3799 + field is defined. 3800 + type: string 3801 + commit: 3802 + description: |- 3803 + Commit SHA to check out, takes precedence over all reference fields. 3804 + 3805 + This can be combined with Branch to shallow clone the branch, in which 3806 + the commit is expected to exist. 3807 + type: string 3808 + name: 3809 + description: |- 3810 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 3811 + 3812 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 3813 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 3814 + type: string 3815 + semver: 3816 + description: SemVer tag expression to check out, takes precedence 3817 + over Tag. 3818 + type: string 3819 + tag: 3820 + description: Tag to check out, takes precedence over Branch. 3821 + type: string 3822 + type: object 3823 + secretRef: 3824 + description: |- 3825 + SecretRef specifies the Secret containing authentication credentials for 3826 + the GitRepository. 3827 + For HTTPS repositories the Secret must contain 'username' and 'password' 3828 + fields for basic auth or 'bearerToken' field for token auth. 3829 + For SSH repositories the Secret must contain 'identity' 3830 + and 'known_hosts' fields. 3831 + properties: 3832 + name: 3833 + description: Name of the referent. 3834 + type: string 3835 + required: 3836 + - name 3837 + type: object 3838 + suspend: 3839 + description: |- 3840 + Suspend tells the controller to suspend the reconciliation of this 3841 + GitRepository. 3842 + type: boolean 3843 + timeout: 3844 + default: 60s 3845 + description: Timeout for Git operations like cloning, defaults to 3846 + 60s. 3847 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3848 + type: string 3849 + url: 3850 + description: URL specifies the Git repository URL, it can be an HTTP/S 3851 + or SSH address. 3852 + pattern: ^(http|https|ssh)://.*$ 3853 + type: string 3854 + verify: 3855 + description: |- 3856 + Verification specifies the configuration to verify the Git commit 3857 + signature(s). 3858 + properties: 3859 + mode: 3860 + description: Mode specifies what Git object should be verified, 3861 + currently ('head'). 3862 + enum: 3863 + - head 3864 + type: string 3865 + secretRef: 3866 + description: |- 3867 + SecretRef specifies the Secret containing the public keys of trusted Git 3868 + authors. 3869 + properties: 3870 + name: 3871 + description: Name of the referent. 3872 type: string 3873 + required: 3874 + - name 3875 + type: object 3876 + required: 3877 + - mode 3878 + - secretRef 3879 + type: object 3880 + required: 3881 + - interval 3882 + - url 3883 + type: object 3884 + status: 3885 + default: 3886 + observedGeneration: -1 3887 + description: GitRepositoryStatus records the observed state of a Git repository. 3888 + properties: 3889 + artifact: 3890 + description: Artifact represents the last successful GitRepository 3891 + reconciliation. 3892 + properties: 3893 + digest: 3894 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3895 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3896 + type: string 3897 + lastUpdateTime: 3898 + description: |- 3899 + LastUpdateTime is the timestamp corresponding to the last update of the 3900 + Artifact. 3901 + format: date-time 3902 + type: string 3903 + metadata: 3904 + additionalProperties: 3905 + type: string 3906 + description: Metadata holds upstream information such as OCI annotations. 3907 + type: object 3908 + path: 3909 + description: |- 3910 + Path is the relative file path of the Artifact. It can be used to locate 3911 + the file in the root of the Artifact storage on the local file system of 3912 + the controller managing the Source. 3913 + type: string 3914 + revision: 3915 + description: |- 3916 + Revision is a human-readable identifier traceable in the origin source 3917 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3918 + type: string 3919 + size: 3920 + description: Size is the number of bytes in the file. 3921 + format: int64 3922 + type: integer 3923 + url: 3924 + description: |- 3925 + URL is the HTTP address of the Artifact as exposed by the controller 3926 + managing the Source. It can be used to retrieve the Artifact for 3927 + consumption, e.g. by another controller applying the Artifact contents. 3928 + type: string 3929 + required: 3930 + - lastUpdateTime 3931 + - path 3932 + - revision 3933 + - url 3934 + type: object 3935 + conditions: 3936 + description: Conditions holds the conditions for the GitRepository. 3937 + items: 3938 + description: Condition contains details for one aspect of the current 3939 + state of this API Resource. 3940 + properties: 3941 + lastTransitionTime: 3942 + description: |- 3943 + lastTransitionTime is the last time the condition transitioned from one status to another. 3944 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3945 + format: date-time 3946 + type: string 3947 + message: 3948 + description: |- 3949 + message is a human readable message indicating details about the transition. 3950 + This may be an empty string. 3951 + maxLength: 32768 3952 + type: string 3953 + observedGeneration: 3954 + description: |- 3955 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3956 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3957 + with respect to the current state of the instance. 3958 + format: int64 3959 + minimum: 0 3960 + type: integer 3961 + reason: 3962 + description: |- 3963 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3964 + Producers of specific condition types may define expected values and meanings for this field, 3965 + and whether the values are considered a guaranteed API. 3966 + The value should be a CamelCase string. 3967 + This field may not be empty. 3968 + maxLength: 1024 3969 + minLength: 1 3970 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3971 + type: string 3972 + status: 3973 + description: status of the condition, one of True, False, Unknown. 3974 + enum: 3975 + - "True" 3976 + - "False" 3977 + - Unknown 3978 + type: string 3979 + type: 3980 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3981 + maxLength: 316 3982 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3983 + type: string 3984 + required: 3985 + - lastTransitionTime 3986 + - message 3987 + - reason 3988 + - status 3989 + - type 3990 + type: object 3991 + type: array 3992 + contentConfigChecksum: 3993 + description: |- 3994 + ContentConfigChecksum is a checksum of all the configurations related to 3995 + the content of the source artifact: 3996 + - .spec.ignore 3997 + - .spec.recurseSubmodules 3998 + - .spec.included and the checksum of the included artifacts 3999 + observed in .status.observedGeneration version of the object. This can 4000 + be used to determine if the content of the included repository has 4001 + changed. 4002 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4003 + 4004 + Deprecated: Replaced with explicit fields for observed artifact content 4005 + config in the status. 4006 + type: string 4007 + includedArtifacts: 4008 + description: |- 4009 + IncludedArtifacts contains a list of the last successfully included 4010 + Artifacts as instructed by GitRepositorySpec.Include. 4011 + items: 4012 + description: Artifact represents the output of a Source reconciliation. 4013 + properties: 4014 + digest: 4015 + description: Digest is the digest of the file in the form of 4016 + '<algorithm>:<checksum>'. 4017 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4018 + type: string 4019 + lastUpdateTime: 4020 + description: |- 4021 + LastUpdateTime is the timestamp corresponding to the last update of the 4022 + Artifact. 4023 + format: date-time 4024 + type: string 4025 metadata: 4026 - type: object 4027 - spec: 4028 - description: |- 4029 - GitRepositorySpec specifies the required configuration to produce an 4030 - Artifact for a Git repository. 4031 - properties: 4032 - accessFrom: 4033 - description: |- 4034 - AccessFrom specifies an Access Control List for allowing cross-namespace 4035 - references to this object. 4036 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 4037 - properties: 4038 - namespaceSelectors: 4039 - description: |- 4040 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 4041 - Items in this list are evaluated using a logical OR operation. 4042 - items: 4043 - description: |- 4044 - NamespaceSelector selects the namespaces to which this ACL applies. 4045 - An empty map of MatchLabels matches all namespaces in a cluster. 4046 - properties: 4047 - matchLabels: 4048 - additionalProperties: 4049 - type: string 4050 - description: |- 4051 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 4052 - map is equivalent to an element of matchExpressions, whose key field is "key", the 4053 - operator is "In", and the values array contains only "value". The requirements are ANDed. 4054 - type: object 4055 - type: object 4056 - type: array 4057 - required: 4058 - - namespaceSelectors 4059 - type: object 4060 - gitImplementation: 4061 - default: go-git 4062 - description: |- 4063 - GitImplementation specifies which Git client library implementation to 4064 - use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). 4065 - Deprecated: gitImplementation is deprecated now that 'go-git' is the 4066 - only supported implementation. 4067 - enum: 4068 - - go-git 4069 - - libgit2 4070 - type: string 4071 - ignore: 4072 - description: |- 4073 - Ignore overrides the set of excluded patterns in the .sourceignore format 4074 - (which is the same as .gitignore). If not provided, a default will be used, 4075 - consult the documentation for your version to find out what those are. 4076 - type: string 4077 - include: 4078 - description: |- 4079 - Include specifies a list of GitRepository resources which Artifacts 4080 - should be included in the Artifact produced for this GitRepository. 4081 - items: 4082 - description: |- 4083 - GitRepositoryInclude specifies a local reference to a GitRepository which 4084 - Artifact (sub-)contents must be included, and where they should be placed. 4085 - properties: 4086 - fromPath: 4087 - description: |- 4088 - FromPath specifies the path to copy contents from, defaults to the root 4089 - of the Artifact. 4090 - type: string 4091 - repository: 4092 - description: |- 4093 - GitRepositoryRef specifies the GitRepository which Artifact contents 4094 - must be included. 4095 - properties: 4096 - name: 4097 - description: Name of the referent. 4098 - type: string 4099 - required: 4100 - - name 4101 - type: object 4102 - toPath: 4103 - description: |- 4104 - ToPath specifies the path to copy contents to, defaults to the name of 4105 - the GitRepositoryRef. 4106 - type: string 4107 - required: 4108 - - repository 4109 - type: object 4110 - type: array 4111 - interval: 4112 - description: Interval at which to check the GitRepository for updates. 4113 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4114 - type: string 4115 - recurseSubmodules: 4116 - description: |- 4117 - RecurseSubmodules enables the initialization of all submodules within 4118 - the GitRepository as cloned from the URL, using their default settings. 4119 - type: boolean 4120 - ref: 4121 - description: |- 4122 - Reference specifies the Git reference to resolve and monitor for 4123 - changes, defaults to the 'master' branch. 4124 - properties: 4125 - branch: 4126 - description: Branch to check out, defaults to 'master' if no other field is defined. 4127 - type: string 4128 - commit: 4129 - description: |- 4130 - Commit SHA to check out, takes precedence over all reference fields. 4131 - 4132 - 4133 - This can be combined with Branch to shallow clone the branch, in which 4134 - the commit is expected to exist. 4135 - type: string 4136 - name: 4137 - description: |- 4138 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 4139 - 4140 - 4141 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 4142 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 4143 - type: string 4144 - semver: 4145 - description: SemVer tag expression to check out, takes precedence over Tag. 4146 - type: string 4147 - tag: 4148 - description: Tag to check out, takes precedence over Branch. 4149 - type: string 4150 - type: object 4151 - secretRef: 4152 - description: |- 4153 - SecretRef specifies the Secret containing authentication credentials for 4154 - the GitRepository. 4155 - For HTTPS repositories the Secret must contain 'username' and 'password' 4156 - fields for basic auth or 'bearerToken' field for token auth. 4157 - For SSH repositories the Secret must contain 'identity' 4158 - and 'known_hosts' fields. 4159 - properties: 4160 - name: 4161 - description: Name of the referent. 4162 - type: string 4163 - required: 4164 - - name 4165 - type: object 4166 - suspend: 4167 - description: |- 4168 - Suspend tells the controller to suspend the reconciliation of this 4169 - GitRepository. 4170 - type: boolean 4171 - timeout: 4172 - default: 60s 4173 - description: Timeout for Git operations like cloning, defaults to 60s. 4174 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 4175 - type: string 4176 - url: 4177 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 4178 - pattern: ^(http|https|ssh)://.*$ 4179 - type: string 4180 - verify: 4181 - description: |- 4182 - Verification specifies the configuration to verify the Git commit 4183 - signature(s). 4184 - properties: 4185 - mode: 4186 - description: Mode specifies what Git object should be verified, currently ('head'). 4187 - enum: 4188 - - head 4189 - type: string 4190 - secretRef: 4191 - description: |- 4192 - SecretRef specifies the Secret containing the public keys of trusted Git 4193 - authors. 4194 - properties: 4195 - name: 4196 - description: Name of the referent. 4197 - type: string 4198 - required: 4199 - - name 4200 - type: object 4201 - required: 4202 - - mode 4203 - - secretRef 4204 - type: object 4205 - required: 4206 - - interval 4207 - - url 4208 - type: object 4209 - status: 4210 - default: 4211 - observedGeneration: -1 4212 - description: GitRepositoryStatus records the observed state of a Git repository. 4213 - properties: 4214 - artifact: 4215 - description: Artifact represents the last successful GitRepository reconciliation. 4216 - properties: 4217 - digest: 4218 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4219 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4220 - type: string 4221 - lastUpdateTime: 4222 - description: |- 4223 - LastUpdateTime is the timestamp corresponding to the last update of the 4224 - Artifact. 4225 - format: date-time 4226 - type: string 4227 - metadata: 4228 - additionalProperties: 4229 - type: string 4230 - description: Metadata holds upstream information such as OCI annotations. 4231 - type: object 4232 - path: 4233 - description: |- 4234 - Path is the relative file path of the Artifact. It can be used to locate 4235 - the file in the root of the Artifact storage on the local file system of 4236 - the controller managing the Source. 4237 - type: string 4238 - revision: 4239 - description: |- 4240 - Revision is a human-readable identifier traceable in the origin source 4241 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4242 - type: string 4243 - size: 4244 - description: Size is the number of bytes in the file. 4245 - format: int64 4246 - type: integer 4247 - url: 4248 - description: |- 4249 - URL is the HTTP address of the Artifact as exposed by the controller 4250 - managing the Source. It can be used to retrieve the Artifact for 4251 - consumption, e.g. by another controller applying the Artifact contents. 4252 - type: string 4253 - required: 4254 - - lastUpdateTime 4255 - - path 4256 - - revision 4257 - - url 4258 - type: object 4259 - conditions: 4260 - description: Conditions holds the conditions for the GitRepository. 4261 - items: 4262 - description: "Condition contains details for one aspect of the current state of this API 4263 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 4264 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 4265 - the observations of a foo's current state.\n\t // Known .status.conditions.type 4266 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 4267 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 4268 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 4269 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 4270 - fields\n\t}" 4271 - properties: 4272 - lastTransitionTime: 4273 - description: |- 4274 - lastTransitionTime is the last time the condition transitioned from one status to another. 4275 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4276 - format: date-time 4277 - type: string 4278 - message: 4279 - description: |- 4280 - message is a human readable message indicating details about the transition. 4281 - This may be an empty string. 4282 - maxLength: 32768 4283 - type: string 4284 - observedGeneration: 4285 - description: |- 4286 - observedGeneration represents the .metadata.generation that the condition was set based upon. 4287 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4288 - with respect to the current state of the instance. 4289 - format: int64 4290 - minimum: 0 4291 - type: integer 4292 - reason: 4293 - description: |- 4294 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 4295 - Producers of specific condition types may define expected values and meanings for this field, 4296 - and whether the values are considered a guaranteed API. 4297 - The value should be a CamelCase string. 4298 - This field may not be empty. 4299 - maxLength: 1024 4300 - minLength: 1 4301 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4302 - type: string 4303 - status: 4304 - description: status of the condition, one of True, False, Unknown. 4305 - enum: 4306 - - "True" 4307 - - "False" 4308 - - Unknown 4309 - type: string 4310 - type: 4311 - description: |- 4312 - type of condition in CamelCase or in foo.example.com/CamelCase. 4313 - --- 4314 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 4315 - useful (see .node.status.conditions), the ability to deconflict is important. 4316 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 4317 - maxLength: 316 4318 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4319 - type: string 4320 - required: 4321 - - lastTransitionTime 4322 - - message 4323 - - reason 4324 - - status 4325 - - type 4326 - type: object 4327 - type: array 4328 - contentConfigChecksum: 4329 - description: |- 4330 - ContentConfigChecksum is a checksum of all the configurations related to 4331 - the content of the source artifact: 4332 - - .spec.ignore 4333 - - .spec.recurseSubmodules 4334 - - .spec.included and the checksum of the included artifacts 4335 - observed in .status.observedGeneration version of the object. This can 4336 - be used to determine if the content of the included repository has 4337 - changed. 4338 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 4339 - 4340 - 4341 - Deprecated: Replaced with explicit fields for observed artifact content 4342 - config in the status. 4343 - type: string 4344 - includedArtifacts: 4345 - description: |- 4346 - IncludedArtifacts contains a list of the last successfully included 4347 - Artifacts as instructed by GitRepositorySpec.Include. 4348 - items: 4349 - description: Artifact represents the output of a Source reconciliation. 4350 - properties: 4351 - digest: 4352 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4353 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4354 - type: string 4355 - lastUpdateTime: 4356 - description: |- 4357 - LastUpdateTime is the timestamp corresponding to the last update of the 4358 - Artifact. 4359 - format: date-time 4360 - type: string 4361 - metadata: 4362 - additionalProperties: 4363 - type: string 4364 - description: Metadata holds upstream information such as OCI annotations. 4365 - type: object 4366 - path: 4367 - description: |- 4368 - Path is the relative file path of the Artifact. It can be used to locate 4369 - the file in the root of the Artifact storage on the local file system of 4370 - the controller managing the Source. 4371 - type: string 4372 - revision: 4373 - description: |- 4374 - Revision is a human-readable identifier traceable in the origin source 4375 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4376 - type: string 4377 - size: 4378 - description: Size is the number of bytes in the file. 4379 - format: int64 4380 - type: integer 4381 - url: 4382 - description: |- 4383 - URL is the HTTP address of the Artifact as exposed by the controller 4384 - managing the Source. It can be used to retrieve the Artifact for 4385 - consumption, e.g. by another controller applying the Artifact contents. 4386 - type: string 4387 - required: 4388 - - lastUpdateTime 4389 - - path 4390 - - revision 4391 - - url 4392 - type: object 4393 - type: array 4394 - lastHandledReconcileAt: 4395 - description: |- 4396 - LastHandledReconcileAt holds the value of the most recent 4397 - reconcile request value, so a change of the annotation value 4398 - can be detected. 4399 - type: string 4400 - observedGeneration: 4401 - description: |- 4402 - ObservedGeneration is the last observed generation of the GitRepository 4403 - object. 4404 - format: int64 4405 - type: integer 4406 - observedIgnore: 4407 - description: |- 4408 - ObservedIgnore is the observed exclusion patterns used for constructing 4409 - the source artifact. 4410 - type: string 4411 - observedInclude: 4412 - description: |- 4413 - ObservedInclude is the observed list of GitRepository resources used to 4414 - to produce the current Artifact. 4415 - items: 4416 - description: |- 4417 - GitRepositoryInclude specifies a local reference to a GitRepository which 4418 - Artifact (sub-)contents must be included, and where they should be placed. 4419 - properties: 4420 - fromPath: 4421 - description: |- 4422 - FromPath specifies the path to copy contents from, defaults to the root 4423 - of the Artifact. 4424 - type: string 4425 - repository: 4426 - description: |- 4427 - GitRepositoryRef specifies the GitRepository which Artifact contents 4428 - must be included. 4429 - properties: 4430 - name: 4431 - description: Name of the referent. 4432 - type: string 4433 - required: 4434 - - name 4435 - type: object 4436 - toPath: 4437 - description: |- 4438 - ToPath specifies the path to copy contents to, defaults to the name of 4439 - the GitRepositoryRef. 4440 - type: string 4441 - required: 4442 - - repository 4443 - type: object 4444 - type: array 4445 - observedRecurseSubmodules: 4446 - description: |- 4447 - ObservedRecurseSubmodules is the observed resource submodules 4448 - configuration used to produce the current Artifact. 4449 - type: boolean 4450 - url: 4451 - description: |- 4452 - URL is the dynamic fetch link for the latest Artifact. 4453 - It is provided on a "best effort" basis, and using the precise 4454 - GitRepositoryStatus.Artifact data is recommended. 4455 - type: string 4456 - type: object 4457 - type: object 4458 - served: true 4459 - storage: false 4460 - subresources: 4461 - status: {} 4462 + additionalProperties: 4463 + type: string 4464 + description: Metadata holds upstream information such as OCI 4465 + annotations. 4466 + type: object 4467 + path: 4468 + description: |- 4469 + Path is the relative file path of the Artifact. It can be used to locate 4470 + the file in the root of the Artifact storage on the local file system of 4471 + the controller managing the Source. 4472 + type: string 4473 + revision: 4474 + description: |- 4475 + Revision is a human-readable identifier traceable in the origin source 4476 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4477 + type: string 4478 + size: 4479 + description: Size is the number of bytes in the file. 4480 + format: int64 4481 + type: integer 4482 + url: 4483 + description: |- 4484 + URL is the HTTP address of the Artifact as exposed by the controller 4485 + managing the Source. It can be used to retrieve the Artifact for 4486 + consumption, e.g. by another controller applying the Artifact contents. 4487 + type: string 4488 + required: 4489 + - lastUpdateTime 4490 + - path 4491 + - revision 4492 + - url 4493 + type: object 4494 + type: array 4495 + lastHandledReconcileAt: 4496 + description: |- 4497 + LastHandledReconcileAt holds the value of the most recent 4498 + reconcile request value, so a change of the annotation value 4499 + can be detected. 4500 + type: string 4501 + observedGeneration: 4502 + description: |- 4503 + ObservedGeneration is the last observed generation of the GitRepository 4504 + object. 4505 + format: int64 4506 + type: integer 4507 + observedIgnore: 4508 + description: |- 4509 + ObservedIgnore is the observed exclusion patterns used for constructing 4510 + the source artifact. 4511 + type: string 4512 + observedInclude: 4513 + description: |- 4514 + ObservedInclude is the observed list of GitRepository resources used to 4515 + to produce the current Artifact. 4516 + items: 4517 + description: |- 4518 + GitRepositoryInclude specifies a local reference to a GitRepository which 4519 + Artifact (sub-)contents must be included, and where they should be placed. 4520 + properties: 4521 + fromPath: 4522 + description: |- 4523 + FromPath specifies the path to copy contents from, defaults to the root 4524 + of the Artifact. 4525 + type: string 4526 + repository: 4527 + description: |- 4528 + GitRepositoryRef specifies the GitRepository which Artifact contents 4529 + must be included. 4530 + properties: 4531 + name: 4532 + description: Name of the referent. 4533 + type: string 4534 + required: 4535 + - name 4536 + type: object 4537 + toPath: 4538 + description: |- 4539 + ToPath specifies the path to copy contents to, defaults to the name of 4540 + the GitRepositoryRef. 4541 + type: string 4542 + required: 4543 + - repository 4544 + type: object 4545 + type: array 4546 + observedRecurseSubmodules: 4547 + description: |- 4548 + ObservedRecurseSubmodules is the observed resource submodules 4549 + configuration used to produce the current Artifact. 4550 + type: boolean 4551 + url: 4552 + description: |- 4553 + URL is the dynamic fetch link for the latest Artifact. 4554 + It is provided on a "best effort" basis, and using the precise 4555 + GitRepositoryStatus.Artifact data is recommended. 4556 + type: string 4557 + type: object 4558 + type: object 4559 + served: true 4560 + storage: false 4561 + subresources: 4562 + status: {} 4563 --- 4564 apiVersion: apiextensions.k8s.io/v1 4565 kind: CustomResourceDefinition 4566 metadata: 4567 - annotations: 4568 - controller-gen.kubebuilder.io/version: v0.15.0 4569 - labels: 4570 - app.kubernetes.io/component: source-controller 4571 - app.kubernetes.io/instance: flux-system 4572 - app.kubernetes.io/part-of: flux 4573 - app.kubernetes.io/version: v2.3.0 4574 - name: helmcharts.source.toolkit.fluxcd.io 4575 + annotations: 4576 + controller-gen.kubebuilder.io/version: v0.16.1 4577 + labels: 4578 + app.kubernetes.io/component: source-controller 4579 + app.kubernetes.io/instance: flux-system 4580 + app.kubernetes.io/part-of: flux 4581 + app.kubernetes.io/version: v2.4.0 4582 + name: helmcharts.source.toolkit.fluxcd.io 4583 spec: 4584 - group: source.toolkit.fluxcd.io 4585 - names: 4586 - kind: HelmChart 4587 - listKind: HelmChartList 4588 - plural: helmcharts 4589 - shortNames: 4590 - - hc 4591 - singular: helmchart 4592 - scope: Namespaced 4593 - versions: 4594 - - additionalPrinterColumns: 4595 - - jsonPath: .spec.chart 4596 - name: Chart 4597 - type: string 4598 - - jsonPath: .spec.version 4599 - name: Version 4600 - type: string 4601 - - jsonPath: .spec.sourceRef.kind 4602 - name: Source Kind 4603 - type: string 4604 - - jsonPath: .spec.sourceRef.name 4605 - name: Source Name 4606 - type: string 4607 - - jsonPath: .metadata.creationTimestamp 4608 - name: Age 4609 - type: date 4610 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 4611 - name: Ready 4612 - type: string 4613 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 4614 - name: Status 4615 - type: string 4616 - name: v1 4617 - schema: 4618 - openAPIV3Schema: 4619 - description: HelmChart is the Schema for the helmcharts API. 4620 + group: source.toolkit.fluxcd.io 4621 + names: 4622 + kind: HelmChart 4623 + listKind: HelmChartList 4624 + plural: helmcharts 4625 + shortNames: 4626 + - hc 4627 + singular: helmchart 4628 + scope: Namespaced 4629 + versions: 4630 + - additionalPrinterColumns: 4631 + - jsonPath: .spec.chart 4632 + name: Chart 4633 + type: string 4634 + - jsonPath: .spec.version 4635 + name: Version 4636 + type: string 4637 + - jsonPath: .spec.sourceRef.kind 4638 + name: Source Kind 4639 + type: string 4640 + - jsonPath: .spec.sourceRef.name 4641 + name: Source Name 4642 + type: string 4643 + - jsonPath: .metadata.creationTimestamp 4644 + name: Age 4645 + type: date 4646 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 4647 + name: Ready 4648 + type: string 4649 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 4650 + name: Status 4651 + type: string 4652 + name: v1 4653 + schema: 4654 + openAPIV3Schema: 4655 + description: HelmChart is the Schema for the helmcharts API. 4656 + properties: 4657 + apiVersion: 4658 + description: |- 4659 + APIVersion defines the versioned schema of this representation of an object. 4660 + Servers should convert recognized schemas to the latest internal value, and 4661 + may reject unrecognized values. 4662 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4663 + type: string 4664 + kind: 4665 + description: |- 4666 + Kind is a string value representing the REST resource this object represents. 4667 + Servers may infer this from the endpoint the client submits requests to. 4668 + Cannot be updated. 4669 + In CamelCase. 4670 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4671 + type: string 4672 + metadata: 4673 + type: object 4674 + spec: 4675 + description: HelmChartSpec specifies the desired state of a Helm chart. 4676 + properties: 4677 + chart: 4678 + description: |- 4679 + Chart is the name or path the Helm chart is available at in the 4680 + SourceRef. 4681 + type: string 4682 + ignoreMissingValuesFiles: 4683 + description: |- 4684 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 4685 + files rather than failing. 4686 + type: boolean 4687 + interval: 4688 + description: |- 4689 + Interval at which the HelmChart SourceRef is checked for updates. 4690 + This interval is approximate and may be subject to jitter to ensure 4691 + efficient use of resources. 4692 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4693 + type: string 4694 + reconcileStrategy: 4695 + default: ChartVersion 4696 + description: |- 4697 + ReconcileStrategy determines what enables the creation of a new artifact. 4698 + Valid values are ('ChartVersion', 'Revision'). 4699 + See the documentation of the values for an explanation on their behavior. 4700 + Defaults to ChartVersion when omitted. 4701 + enum: 4702 + - ChartVersion 4703 + - Revision 4704 + type: string 4705 + sourceRef: 4706 + description: SourceRef is the reference to the Source the chart is 4707 + available at. 4708 properties: 4709 - apiVersion: 4710 - description: |- 4711 - APIVersion defines the versioned schema of this representation of an object. 4712 - Servers should convert recognized schemas to the latest internal value, and 4713 - may reject unrecognized values. 4714 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4715 - type: string 4716 - kind: 4717 - description: |- 4718 - Kind is a string value representing the REST resource this object represents. 4719 - Servers may infer this from the endpoint the client submits requests to. 4720 - Cannot be updated. 4721 - In CamelCase. 4722 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4723 + apiVersion: 4724 + description: APIVersion of the referent. 4725 + type: string 4726 + kind: 4727 + description: |- 4728 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 4729 + 'Bucket'). 4730 + enum: 4731 + - HelmRepository 4732 + - GitRepository 4733 + - Bucket 4734 + type: string 4735 + name: 4736 + description: Name of the referent. 4737 + type: string 4738 + required: 4739 + - kind 4740 + - name 4741 + type: object 4742 + suspend: 4743 + description: |- 4744 + Suspend tells the controller to suspend the reconciliation of this 4745 + source. 4746 + type: boolean 4747 + valuesFiles: 4748 + description: |- 4749 + ValuesFiles is an alternative list of values files to use as the chart 4750 + values (values.yaml is not included by default), expected to be a 4751 + relative path in the SourceRef. 4752 + Values files are merged in the order of this list with the last file 4753 + overriding the first. Ignored when omitted. 4754 + items: 4755 + type: string 4756 + type: array 4757 + verify: 4758 + description: |- 4759 + Verify contains the secret name containing the trusted public keys 4760 + used to verify the signature and specifies which provider to use to check 4761 + whether OCI image is authentic. 4762 + This field is only supported when using HelmRepository source with spec.type 'oci'. 4763 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 4764 + properties: 4765 + matchOIDCIdentity: 4766 + description: |- 4767 + MatchOIDCIdentity specifies the identity matching criteria to use 4768 + while verifying an OCI artifact which was signed using Cosign keyless 4769 + signing. The artifact's identity is deemed to be verified if any of the 4770 + specified matchers match against the identity. 4771 + items: 4772 + description: |- 4773 + OIDCIdentityMatch specifies options for verifying the certificate identity, 4774 + i.e. the issuer and the subject of the certificate. 4775 + properties: 4776 + issuer: 4777 + description: |- 4778 + Issuer specifies the regex pattern to match against to verify 4779 + the OIDC issuer in the Fulcio certificate. The pattern must be a 4780 + valid Go regular expression. 4781 + type: string 4782 + subject: 4783 + description: |- 4784 + Subject specifies the regex pattern to match against to verify 4785 + the identity subject in the Fulcio certificate. The pattern must 4786 + be a valid Go regular expression. 4787 + type: string 4788 + required: 4789 + - issuer 4790 + - subject 4791 + type: object 4792 + type: array 4793 + provider: 4794 + default: cosign 4795 + description: Provider specifies the technology used to sign the 4796 + OCI Artifact. 4797 + enum: 4798 + - cosign 4799 + - notation 4800 + type: string 4801 + secretRef: 4802 + description: |- 4803 + SecretRef specifies the Kubernetes Secret containing the 4804 + trusted public keys. 4805 + properties: 4806 + name: 4807 + description: Name of the referent. 4808 type: string 4809 - metadata: 4810 - type: object 4811 - spec: 4812 - description: HelmChartSpec specifies the desired state of a Helm chart. 4813 - properties: 4814 - chart: 4815 - description: |- 4816 - Chart is the name or path the Helm chart is available at in the 4817 - SourceRef. 4818 - type: string 4819 - ignoreMissingValuesFiles: 4820 - description: |- 4821 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 4822 - files rather than failing. 4823 - type: boolean 4824 - interval: 4825 - description: |- 4826 - Interval at which the HelmChart SourceRef is checked for updates. 4827 - This interval is approximate and may be subject to jitter to ensure 4828 - efficient use of resources. 4829 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4830 - type: string 4831 - reconcileStrategy: 4832 - default: ChartVersion 4833 - description: |- 4834 - ReconcileStrategy determines what enables the creation of a new artifact. 4835 - Valid values are ('ChartVersion', 'Revision'). 4836 - See the documentation of the values for an explanation on their behavior. 4837 - Defaults to ChartVersion when omitted. 4838 - enum: 4839 - - ChartVersion 4840 - - Revision 4841 - type: string 4842 - sourceRef: 4843 - description: SourceRef is the reference to the Source the chart is available at. 4844 - properties: 4845 - apiVersion: 4846 - description: APIVersion of the referent. 4847 - type: string 4848 - kind: 4849 - description: |- 4850 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 4851 - 'Bucket'). 4852 - enum: 4853 - - HelmRepository 4854 - - GitRepository 4855 - - Bucket 4856 - type: string 4857 - name: 4858 - description: Name of the referent. 4859 - type: string 4860 - required: 4861 - - kind 4862 - - name 4863 - type: object 4864 - suspend: 4865 - description: |- 4866 - Suspend tells the controller to suspend the reconciliation of this 4867 - source. 4868 - type: boolean 4869 - valuesFiles: 4870 - description: |- 4871 - ValuesFiles is an alternative list of values files to use as the chart 4872 - values (values.yaml is not included by default), expected to be a 4873 - relative path in the SourceRef. 4874 - Values files are merged in the order of this list with the last file 4875 - overriding the first. Ignored when omitted. 4876 - items: 4877 - type: string 4878 - type: array 4879 - verify: 4880 - description: |- 4881 - Verify contains the secret name containing the trusted public keys 4882 - used to verify the signature and specifies which provider to use to check 4883 - whether OCI image is authentic. 4884 - This field is only supported when using HelmRepository source with spec.type 'oci'. 4885 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 4886 - properties: 4887 - matchOIDCIdentity: 4888 - description: |- 4889 - MatchOIDCIdentity specifies the identity matching criteria to use 4890 - while verifying an OCI artifact which was signed using Cosign keyless 4891 - signing. The artifact's identity is deemed to be verified if any of the 4892 - specified matchers match against the identity. 4893 - items: 4894 - description: |- 4895 - OIDCIdentityMatch specifies options for verifying the certificate identity, 4896 - i.e. the issuer and the subject of the certificate. 4897 - properties: 4898 - issuer: 4899 - description: |- 4900 - Issuer specifies the regex pattern to match against to verify 4901 - the OIDC issuer in the Fulcio certificate. The pattern must be a 4902 - valid Go regular expression. 4903 - type: string 4904 - subject: 4905 - description: |- 4906 - Subject specifies the regex pattern to match against to verify 4907 - the identity subject in the Fulcio certificate. The pattern must 4908 - be a valid Go regular expression. 4909 - type: string 4910 - required: 4911 - - issuer 4912 - - subject 4913 - type: object 4914 - type: array 4915 - provider: 4916 - default: cosign 4917 - description: Provider specifies the technology used to sign the OCI Artifact. 4918 - enum: 4919 - - cosign 4920 - - notation 4921 - type: string 4922 - secretRef: 4923 - description: |- 4924 - SecretRef specifies the Kubernetes Secret containing the 4925 - trusted public keys. 4926 - properties: 4927 - name: 4928 - description: Name of the referent. 4929 - type: string 4930 - required: 4931 - - name 4932 - type: object 4933 - required: 4934 - - provider 4935 - type: object 4936 - version: 4937 - default: '*' 4938 - description: |- 4939 - Version is the chart version semver expression, ignored for charts from 4940 - GitRepository and Bucket sources. Defaults to latest when omitted. 4941 - type: string 4942 - required: 4943 - - chart 4944 - - interval 4945 - - sourceRef 4946 - type: object 4947 + required: 4948 + - name 4949 + type: object 4950 + required: 4951 + - provider 4952 + type: object 4953 + version: 4954 + default: '*' 4955 + description: |- 4956 + Version is the chart version semver expression, ignored for charts from 4957 + GitRepository and Bucket sources. Defaults to latest when omitted. 4958 + type: string 4959 + required: 4960 + - chart 4961 + - interval 4962 + - sourceRef 4963 + type: object 4964 + status: 4965 + default: 4966 + observedGeneration: -1 4967 + description: HelmChartStatus records the observed state of the HelmChart. 4968 + properties: 4969 + artifact: 4970 + description: Artifact represents the output of the last successful 4971 + reconciliation. 4972 + properties: 4973 + digest: 4974 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4975 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4976 + type: string 4977 + lastUpdateTime: 4978 + description: |- 4979 + LastUpdateTime is the timestamp corresponding to the last update of the 4980 + Artifact. 4981 + format: date-time 4982 + type: string 4983 + metadata: 4984 + additionalProperties: 4985 + type: string 4986 + description: Metadata holds upstream information such as OCI annotations. 4987 + type: object 4988 + path: 4989 + description: |- 4990 + Path is the relative file path of the Artifact. It can be used to locate 4991 + the file in the root of the Artifact storage on the local file system of 4992 + the controller managing the Source. 4993 + type: string 4994 + revision: 4995 + description: |- 4996 + Revision is a human-readable identifier traceable in the origin source 4997 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4998 + type: string 4999 + size: 5000 + description: Size is the number of bytes in the file. 5001 + format: int64 5002 + type: integer 5003 + url: 5004 + description: |- 5005 + URL is the HTTP address of the Artifact as exposed by the controller 5006 + managing the Source. It can be used to retrieve the Artifact for 5007 + consumption, e.g. by another controller applying the Artifact contents. 5008 + type: string 5009 + required: 5010 + - lastUpdateTime 5011 + - path 5012 + - revision 5013 + - url 5014 + type: object 5015 + conditions: 5016 + description: Conditions holds the conditions for the HelmChart. 5017 + items: 5018 + description: Condition contains details for one aspect of the current 5019 + state of this API Resource. 5020 + properties: 5021 + lastTransitionTime: 5022 + description: |- 5023 + lastTransitionTime is the last time the condition transitioned from one status to another. 5024 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5025 + format: date-time 5026 + type: string 5027 + message: 5028 + description: |- 5029 + message is a human readable message indicating details about the transition. 5030 + This may be an empty string. 5031 + maxLength: 32768 5032 + type: string 5033 + observedGeneration: 5034 + description: |- 5035 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5036 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5037 + with respect to the current state of the instance. 5038 + format: int64 5039 + minimum: 0 5040 + type: integer 5041 + reason: 5042 + description: |- 5043 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5044 + Producers of specific condition types may define expected values and meanings for this field, 5045 + and whether the values are considered a guaranteed API. 5046 + The value should be a CamelCase string. 5047 + This field may not be empty. 5048 + maxLength: 1024 5049 + minLength: 1 5050 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5051 + type: string 5052 status: 5053 - default: 5054 - observedGeneration: -1 5055 - description: HelmChartStatus records the observed state of the HelmChart. 5056 - properties: 5057 - artifact: 5058 - description: Artifact represents the output of the last successful reconciliation. 5059 - properties: 5060 - digest: 5061 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 5062 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 5063 - type: string 5064 - lastUpdateTime: 5065 - description: |- 5066 - LastUpdateTime is the timestamp corresponding to the last update of the 5067 - Artifact. 5068 - format: date-time 5069 - type: string 5070 - metadata: 5071 - additionalProperties: 5072 - type: string 5073 - description: Metadata holds upstream information such as OCI annotations. 5074 - type: object 5075 - path: 5076 - description: |- 5077 - Path is the relative file path of the Artifact. It can be used to locate 5078 - the file in the root of the Artifact storage on the local file system of 5079 - the controller managing the Source. 5080 - type: string 5081 - revision: 5082 - description: |- 5083 - Revision is a human-readable identifier traceable in the origin source 5084 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 5085 - type: string 5086 - size: 5087 - description: Size is the number of bytes in the file. 5088 - format: int64 5089 - type: integer 5090 - url: 5091 - description: |- 5092 - URL is the HTTP address of the Artifact as exposed by the controller 5093 - managing the Source. It can be used to retrieve the Artifact for 5094 - consumption, e.g. by another controller applying the Artifact contents. 5095 - type: string 5096 - required: 5097 - - lastUpdateTime 5098 - - path 5099 - - revision 5100 - - url 5101 - type: object 5102 - conditions: 5103 - description: Conditions holds the conditions for the HelmChart. 5104 - items: 5105 - description: "Condition contains details for one aspect of the current state of this API 5106 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 5107 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 5108 - the observations of a foo's current state.\n\t // Known .status.conditions.type 5109 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 5110 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 5111 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 5112 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 5113 - fields\n\t}" 5114 - properties: 5115 - lastTransitionTime: 5116 - description: |- 5117 - lastTransitionTime is the last time the condition transitioned from one status to another. 5118 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5119 - format: date-time 5120 - type: string 5121 - message: 5122 - description: |- 5123 - message is a human readable message indicating details about the transition. 5124 - This may be an empty string. 5125 - maxLength: 32768 5126 - type: string 5127 - observedGeneration: 5128 - description: |- 5129 - observedGeneration represents the .metadata.generation that the condition was set based upon. 5130 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5131 - with respect to the current state of the instance. 5132 - format: int64 5133 - minimum: 0 5134 - type: integer 5135 - reason: 5136 - description: |- 5137 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 5138 - Producers of specific condition types may define expected values and meanings for this field, 5139 - and whether the values are considered a guaranteed API. 5140 - The value should be a CamelCase string. 5141 - This field may not be empty. 5142 - maxLength: 1024 5143 - minLength: 1 5144 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5145 - type: string 5146 - status: 5147 - description: status of the condition, one of True, False, Unknown. 5148 - enum: 5149 - - "True" 5150 - - "False" 5151 - - Unknown 5152 - type: string 5153 - type: 5154 - description: |- 5155 - type of condition in CamelCase or in foo.example.com/CamelCase. 5156 - --- 5157 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 5158 - useful (see .node.status.conditions), the ability to deconflict is important. 5159 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 5160 - maxLength: 316 5161 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5162 - type: string 5163 - required: 5164 - - lastTransitionTime 5165 - - message 5166 - - reason 5167 - - status 5168 - - type 5169 - type: object 5170 - type: array 5171 - lastHandledReconcileAt: 5172 - description: |- 5173 - LastHandledReconcileAt holds the value of the most recent 5174 - reconcile request value, so a change of the annotation value 5175 - can be detected. 5176 - type: string 5177 - observedChartName: 5178 - description: |- 5179 - ObservedChartName is the last observed chart name as specified by the 5180 - resolved chart reference. 5181 - type: string 5182 - observedGeneration: 5183 - description: |- 5184 - ObservedGeneration is the last observed generation of the HelmChart 5185 - object. 5186 - format: int64 5187 - type: integer 5188 - observedSourceArtifactRevision: 5189 - description: |- 5190 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 5191 - of the HelmChartSpec.SourceRef. 5192 - type: string 5193 - observedValuesFiles: 5194 - description: |- 5195 - ObservedValuesFiles are the observed value files of the last successful 5196 - reconciliation. 5197 - It matches the chart in the last successfully reconciled artifact. 5198 - items: 5199 - type: string 5200 - type: array 5201 - url: 5202 - description: |- 5203 - URL is the dynamic fetch link for the latest Artifact. 5204 - It is provided on a "best effort" basis, and using the precise 5205 - BucketStatus.Artifact data is recommended. 5206 - type: string 5207 - type: object 5208 + description: status of the condition, one of True, False, Unknown. 5209 + enum: 5210 + - "True" 5211 + - "False" 5212 + - Unknown 5213 + type: string 5214 + type: 5215 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 5216 + maxLength: 316 5217 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5218 + type: string 5219 + required: 5220 + - lastTransitionTime 5221 + - message 5222 + - reason 5223 + - status 5224 + - type 5225 + type: object 5226 + type: array 5227 + lastHandledReconcileAt: 5228 + description: |- 5229 + LastHandledReconcileAt holds the value of the most recent 5230 + reconcile request value, so a change of the annotation value 5231 + can be detected. 5232 + type: string 5233 + observedChartName: 5234 + description: |- 5235 + ObservedChartName is the last observed chart name as specified by the 5236 + resolved chart reference. 5237 + type: string 5238 + observedGeneration: 5239 + description: |- 5240 + ObservedGeneration is the last observed generation of the HelmChart 5241 + object. 5242 + format: int64 5243 + type: integer 5244 + observedSourceArtifactRevision: 5245 + description: |- 5246 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 5247 + of the HelmChartSpec.SourceRef. 5248 + type: string 5249 + observedValuesFiles: 5250 + description: |- 5251 + ObservedValuesFiles are the observed value files of the last successful 5252 + reconciliation. 5253 + It matches the chart in the last successfully reconciled artifact. 5254 + items: 5255 + type: string 5256 + type: array 5257 + url: 5258 + description: |- 5259 + URL is the dynamic fetch link for the latest Artifact. 5260 + It is provided on a "best effort" basis, and using the precise 5261 + BucketStatus.Artifact data is recommended. 5262 + type: string 5263 + type: object 5264 + type: object 5265 + served: true 5266 + storage: true 5267 + subresources: 5268 + status: {} 5269 + - additionalPrinterColumns: 5270 + - jsonPath: .spec.chart 5271 + name: Chart 5272 + type: string 5273 + - jsonPath: .spec.version 5274 + name: Version 5275 + type: string 5276 + - jsonPath: .spec.sourceRef.kind 5277 + name: Source Kind 5278 + type: string 5279 + - jsonPath: .spec.sourceRef.name 5280 + name: Source Name 5281 + type: string 5282 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5283 + name: Ready 5284 + type: string 5285 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5286 + name: Status 5287 + type: string 5288 + - jsonPath: .metadata.creationTimestamp 5289 + name: Age 5290 + type: date 5291 + deprecated: true 5292 + deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1 5293 + name: v1beta1 5294 + schema: 5295 + openAPIV3Schema: 5296 + description: HelmChart is the Schema for the helmcharts API 5297 + properties: 5298 + apiVersion: 5299 + description: |- 5300 + APIVersion defines the versioned schema of this representation of an object. 5301 + Servers should convert recognized schemas to the latest internal value, and 5302 + may reject unrecognized values. 5303 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5304 + type: string 5305 + kind: 5306 + description: |- 5307 + Kind is a string value representing the REST resource this object represents. 5308 + Servers may infer this from the endpoint the client submits requests to. 5309 + Cannot be updated. 5310 + In CamelCase. 5311 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5312 + type: string 5313 + metadata: 5314 + type: object 5315 + spec: 5316 + description: HelmChartSpec defines the desired state of a Helm chart. 5317 + properties: 5318 + accessFrom: 5319 + description: AccessFrom defines an Access Control List for allowing 5320 + cross-namespace references to this object. 5321 + properties: 5322 + namespaceSelectors: 5323 + description: |- 5324 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5325 + Items in this list are evaluated using a logical OR operation. 5326 + items: 5327 + description: |- 5328 + NamespaceSelector selects the namespaces to which this ACL applies. 5329 + An empty map of MatchLabels matches all namespaces in a cluster. 5330 + properties: 5331 + matchLabels: 5332 + additionalProperties: 5333 + type: string 5334 + description: |- 5335 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5336 + map is equivalent to an element of matchExpressions, whose key field is "key", the 5337 + operator is "In", and the values array contains only "value". The requirements are ANDed. 5338 + type: object 5339 + type: object 5340 + type: array 5341 + required: 5342 + - namespaceSelectors 5343 type: object 5344 - served: true 5345 - storage: true 5346 - subresources: 5347 - status: {} 5348 - - additionalPrinterColumns: 5349 - - jsonPath: .spec.chart 5350 - name: Chart 5351 - type: string 5352 - - jsonPath: .spec.version 5353 - name: Version 5354 - type: string 5355 - - jsonPath: .spec.sourceRef.kind 5356 - name: Source Kind 5357 - type: string 5358 - - jsonPath: .spec.sourceRef.name 5359 - name: Source Name 5360 - type: string 5361 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5362 - name: Ready 5363 - type: string 5364 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5365 - name: Status 5366 - type: string 5367 - - jsonPath: .metadata.creationTimestamp 5368 - name: Age 5369 - type: date 5370 - deprecated: true 5371 - deprecationWarning: v1beta1 HelmChart is deprecated, upgrade to v1 5372 - name: v1beta1 5373 - schema: 5374 - openAPIV3Schema: 5375 - description: HelmChart is the Schema for the helmcharts API 5376 + chart: 5377 + description: The name or path the Helm chart is available at in the 5378 + SourceRef. 5379 + type: string 5380 + interval: 5381 + description: The interval at which to check the Source for updates. 5382 + type: string 5383 + reconcileStrategy: 5384 + default: ChartVersion 5385 + description: |- 5386 + Determines what enables the creation of a new artifact. Valid values are 5387 + ('ChartVersion', 'Revision'). 5388 + See the documentation of the values for an explanation on their behavior. 5389 + Defaults to ChartVersion when omitted. 5390 + enum: 5391 + - ChartVersion 5392 + - Revision 5393 + type: string 5394 + sourceRef: 5395 + description: The reference to the Source the chart is available at. 5396 properties: 5397 - apiVersion: 5398 - description: |- 5399 - APIVersion defines the versioned schema of this representation of an object. 5400 - Servers should convert recognized schemas to the latest internal value, and 5401 - may reject unrecognized values. 5402 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5403 - type: string 5404 - kind: 5405 - description: |- 5406 - Kind is a string value representing the REST resource this object represents. 5407 - Servers may infer this from the endpoint the client submits requests to. 5408 - Cannot be updated. 5409 - In CamelCase. 5410 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5411 - type: string 5412 - metadata: 5413 - type: object 5414 - spec: 5415 - description: HelmChartSpec defines the desired state of a Helm chart. 5416 - properties: 5417 - accessFrom: 5418 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 5419 - to this object. 5420 - properties: 5421 - namespaceSelectors: 5422 - description: |- 5423 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5424 - Items in this list are evaluated using a logical OR operation. 5425 - items: 5426 - description: |- 5427 - NamespaceSelector selects the namespaces to which this ACL applies. 5428 - An empty map of MatchLabels matches all namespaces in a cluster. 5429 - properties: 5430 - matchLabels: 5431 - additionalProperties: 5432 - type: string 5433 - description: |- 5434 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5435 - map is equivalent to an element of matchExpressions, whose key field is "key", the 5436 - operator is "In", and the values array contains only "value". The requirements are ANDed. 5437 - type: object 5438 - type: object 5439 - type: array 5440 - required: 5441 - - namespaceSelectors 5442 - type: object 5443 - chart: 5444 - description: The name or path the Helm chart is available at in the SourceRef. 5445 - type: string 5446 - interval: 5447 - description: The interval at which to check the Source for updates. 5448 - type: string 5449 - reconcileStrategy: 5450 - default: ChartVersion 5451 - description: |- 5452 - Determines what enables the creation of a new artifact. Valid values are 5453 - ('ChartVersion', 'Revision'). 5454 - See the documentation of the values for an explanation on their behavior. 5455 - Defaults to ChartVersion when omitted. 5456 - enum: 5457 - - ChartVersion 5458 - - Revision 5459 - type: string 5460 - sourceRef: 5461 - description: The reference to the Source the chart is available at. 5462 - properties: 5463 - apiVersion: 5464 - description: APIVersion of the referent. 5465 - type: string 5466 - kind: 5467 - description: |- 5468 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5469 - 'Bucket'). 5470 - enum: 5471 - - HelmRepository 5472 - - GitRepository 5473 - - Bucket 5474 - type: string 5475 - name: 5476 - description: Name of the referent. 5477 - type: string 5478 - required: 5479 - - kind 5480 - - name 5481 - type: object 5482 - suspend: 5483 - description: This flag tells the controller to suspend the reconciliation of this source. 5484 - type: boolean 5485 - valuesFile: 5486 - description: |- 5487 - Alternative values file to use as the default chart values, expected to 5488 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 5489 - for backwards compatibility the file defined here is merged before the 5490 - ValuesFiles items. Ignored when omitted. 5491 - type: string 5492 - valuesFiles: 5493 - description: |- 5494 - Alternative list of values files to use as the chart values (values.yaml 5495 - is not included by default), expected to be a relative path in the SourceRef. 5496 - Values files are merged in the order of this list with the last file overriding 5497 - the first. Ignored when omitted. 5498 - items: 5499 - type: string 5500 - type: array 5501 - version: 5502 - default: '*' 5503 - description: |- 5504 - The chart version semver expression, ignored for charts from GitRepository 5505 - and Bucket sources. Defaults to latest when omitted. 5506 - type: string 5507 - required: 5508 - - chart 5509 - - interval 5510 - - sourceRef 5511 - type: object 5512 + apiVersion: 5513 + description: APIVersion of the referent. 5514 + type: string 5515 + kind: 5516 + description: |- 5517 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5518 + 'Bucket'). 5519 + enum: 5520 + - HelmRepository 5521 + - GitRepository 5522 + - Bucket 5523 + type: string 5524 + name: 5525 + description: Name of the referent. 5526 + type: string 5527 + required: 5528 + - kind 5529 + - name 5530 + type: object 5531 + suspend: 5532 + description: This flag tells the controller to suspend the reconciliation 5533 + of this source. 5534 + type: boolean 5535 + valuesFile: 5536 + description: |- 5537 + Alternative values file to use as the default chart values, expected to 5538 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 5539 + for backwards compatibility the file defined here is merged before the 5540 + ValuesFiles items. Ignored when omitted. 5541 + type: string 5542 + valuesFiles: 5543 + description: |- 5544 + Alternative list of values files to use as the chart values (values.yaml 5545 + is not included by default), expected to be a relative path in the SourceRef. 5546 + Values files are merged in the order of this list with the last file overriding 5547 + the first. Ignored when omitted. 5548 + items: 5549 + type: string 5550 + type: array 5551 + version: 5552 + default: '*' 5553 + description: |- 5554 + The chart version semver expression, ignored for charts from GitRepository 5555 + and Bucket sources. Defaults to latest when omitted. 5556 + type: string 5557 + required: 5558 + - chart 5559 + - interval 5560 + - sourceRef 5561 + type: object 5562 + status: 5563 + default: 5564 + observedGeneration: -1 5565 + description: HelmChartStatus defines the observed state of the HelmChart. 5566 + properties: 5567 + artifact: 5568 + description: Artifact represents the output of the last successful 5569 + chart sync. 5570 + properties: 5571 + checksum: 5572 + description: Checksum is the SHA256 checksum of the artifact. 5573 + type: string 5574 + lastUpdateTime: 5575 + description: |- 5576 + LastUpdateTime is the timestamp corresponding to the last update of this 5577 + artifact. 5578 + format: date-time 5579 + type: string 5580 + path: 5581 + description: Path is the relative file path of this artifact. 5582 + type: string 5583 + revision: 5584 + description: |- 5585 + Revision is a human readable identifier traceable in the origin source 5586 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 5587 + chart version, etc. 5588 + type: string 5589 + url: 5590 + description: URL is the HTTP address of this artifact. 5591 + type: string 5592 + required: 5593 + - lastUpdateTime 5594 + - path 5595 + - url 5596 + type: object 5597 + conditions: 5598 + description: Conditions holds the conditions for the HelmChart. 5599 + items: 5600 + description: Condition contains details for one aspect of the current 5601 + state of this API Resource. 5602 + properties: 5603 + lastTransitionTime: 5604 + description: |- 5605 + lastTransitionTime is the last time the condition transitioned from one status to another. 5606 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5607 + format: date-time 5608 + type: string 5609 + message: 5610 + description: |- 5611 + message is a human readable message indicating details about the transition. 5612 + This may be an empty string. 5613 + maxLength: 32768 5614 + type: string 5615 + observedGeneration: 5616 + description: |- 5617 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5618 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5619 + with respect to the current state of the instance. 5620 + format: int64 5621 + minimum: 0 5622 + type: integer 5623 + reason: 5624 + description: |- 5625 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5626 + Producers of specific condition types may define expected values and meanings for this field, 5627 + and whether the values are considered a guaranteed API. 5628 + The value should be a CamelCase string. 5629 + This field may not be empty. 5630 + maxLength: 1024 5631 + minLength: 1 5632 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5633 + type: string 5634 status: 5635 - default: 5636 - observedGeneration: -1 5637 - description: HelmChartStatus defines the observed state of the HelmChart. 5638 - properties: 5639 - artifact: 5640 - description: Artifact represents the output of the last successful chart sync. 5641 - properties: 5642 - checksum: 5643 - description: Checksum is the SHA256 checksum of the artifact. 5644 - type: string 5645 - lastUpdateTime: 5646 - description: |- 5647 - LastUpdateTime is the timestamp corresponding to the last update of this 5648 - artifact. 5649 - format: date-time 5650 - type: string 5651 - path: 5652 - description: Path is the relative file path of this artifact. 5653 - type: string 5654 - revision: 5655 - description: |- 5656 - Revision is a human readable identifier traceable in the origin source 5657 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 5658 - chart version, etc. 5659 - type: string 5660 - url: 5661 - description: URL is the HTTP address of this artifact. 5662 - type: string 5663 - required: 5664 - - path 5665 - - url 5666 - type: object 5667 - conditions: 5668 - description: Conditions holds the conditions for the HelmChart. 5669 - items: 5670 - description: "Condition contains details for one aspect of the current state of this API 5671 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 5672 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 5673 - the observations of a foo's current state.\n\t // Known .status.conditions.type 5674 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 5675 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 5676 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 5677 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 5678 - fields\n\t}" 5679 - properties: 5680 - lastTransitionTime: 5681 - description: |- 5682 - lastTransitionTime is the last time the condition transitioned from one status to another. 5683 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5684 - format: date-time 5685 - type: string 5686 - message: 5687 - description: |- 5688 - message is a human readable message indicating details about the transition. 5689 - This may be an empty string. 5690 - maxLength: 32768 5691 - type: string 5692 - observedGeneration: 5693 - description: |- 5694 - observedGeneration represents the .metadata.generation that the condition was set based upon. 5695 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5696 - with respect to the current state of the instance. 5697 - format: int64 5698 - minimum: 0 5699 - type: integer 5700 - reason: 5701 - description: |- 5702 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 5703 - Producers of specific condition types may define expected values and meanings for this field, 5704 - and whether the values are considered a guaranteed API. 5705 - The value should be a CamelCase string. 5706 - This field may not be empty. 5707 - maxLength: 1024 5708 - minLength: 1 5709 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5710 - type: string 5711 - status: 5712 - description: status of the condition, one of True, False, Unknown. 5713 - enum: 5714 - - "True" 5715 - - "False" 5716 - - Unknown 5717 - type: string 5718 - type: 5719 - description: |- 5720 - type of condition in CamelCase or in foo.example.com/CamelCase. 5721 - --- 5722 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 5723 - useful (see .node.status.conditions), the ability to deconflict is important. 5724 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 5725 - maxLength: 316 5726 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5727 - type: string 5728 - required: 5729 - - lastTransitionTime 5730 - - message 5731 - - reason 5732 - - status 5733 - - type 5734 - type: object 5735 - type: array 5736 - lastHandledReconcileAt: 5737 - description: |- 5738 - LastHandledReconcileAt holds the value of the most recent 5739 - reconcile request value, so a change of the annotation value 5740 - can be detected. 5741 - type: string 5742 - observedGeneration: 5743 - description: ObservedGeneration is the last observed generation. 5744 - format: int64 5745 - type: integer 5746 - url: 5747 - description: URL is the download link for the last chart pulled. 5748 - type: string 5749 - type: object 5750 + description: status of the condition, one of True, False, Unknown. 5751 + enum: 5752 + - "True" 5753 + - "False" 5754 + - Unknown 5755 + type: string 5756 + type: 5757 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 5758 + maxLength: 316 5759 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5760 + type: string 5761 + required: 5762 + - lastTransitionTime 5763 + - message 5764 + - reason 5765 + - status 5766 + - type 5767 + type: object 5768 + type: array 5769 + lastHandledReconcileAt: 5770 + description: |- 5771 + LastHandledReconcileAt holds the value of the most recent 5772 + reconcile request value, so a change of the annotation value 5773 + can be detected. 5774 + type: string 5775 + observedGeneration: 5776 + description: ObservedGeneration is the last observed generation. 5777 + format: int64 5778 + type: integer 5779 + url: 5780 + description: URL is the download link for the last chart pulled. 5781 + type: string 5782 + type: object 5783 + type: object 5784 + served: true 5785 + storage: false 5786 + subresources: 5787 + status: {} 5788 + - additionalPrinterColumns: 5789 + - jsonPath: .spec.chart 5790 + name: Chart 5791 + type: string 5792 + - jsonPath: .spec.version 5793 + name: Version 5794 + type: string 5795 + - jsonPath: .spec.sourceRef.kind 5796 + name: Source Kind 5797 + type: string 5798 + - jsonPath: .spec.sourceRef.name 5799 + name: Source Name 5800 + type: string 5801 + - jsonPath: .metadata.creationTimestamp 5802 + name: Age 5803 + type: date 5804 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 5805 + name: Ready 5806 + type: string 5807 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 5808 + name: Status 5809 + type: string 5810 + deprecated: true 5811 + deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 5812 + name: v1beta2 5813 + schema: 5814 + openAPIV3Schema: 5815 + description: HelmChart is the Schema for the helmcharts API. 5816 + properties: 5817 + apiVersion: 5818 + description: |- 5819 + APIVersion defines the versioned schema of this representation of an object. 5820 + Servers should convert recognized schemas to the latest internal value, and 5821 + may reject unrecognized values. 5822 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5823 + type: string 5824 + kind: 5825 + description: |- 5826 + Kind is a string value representing the REST resource this object represents. 5827 + Servers may infer this from the endpoint the client submits requests to. 5828 + Cannot be updated. 5829 + In CamelCase. 5830 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5831 + type: string 5832 + metadata: 5833 + type: object 5834 + spec: 5835 + description: HelmChartSpec specifies the desired state of a Helm chart. 5836 + properties: 5837 + accessFrom: 5838 + description: |- 5839 + AccessFrom specifies an Access Control List for allowing cross-namespace 5840 + references to this object. 5841 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 5842 + properties: 5843 + namespaceSelectors: 5844 + description: |- 5845 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 5846 + Items in this list are evaluated using a logical OR operation. 5847 + items: 5848 + description: |- 5849 + NamespaceSelector selects the namespaces to which this ACL applies. 5850 + An empty map of MatchLabels matches all namespaces in a cluster. 5851 + properties: 5852 + matchLabels: 5853 + additionalProperties: 5854 + type: string 5855 + description: |- 5856 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 5857 + map is equivalent to an element of matchExpressions, whose key field is "key", the 5858 + operator is "In", and the values array contains only "value". The requirements are ANDed. 5859 + type: object 5860 + type: object 5861 + type: array 5862 + required: 5863 + - namespaceSelectors 5864 type: object 5865 - served: true 5866 - storage: false 5867 - subresources: 5868 - status: {} 5869 - - additionalPrinterColumns: 5870 - - jsonPath: .spec.chart 5871 - name: Chart 5872 - type: string 5873 - - jsonPath: .spec.version 5874 - name: Version 5875 - type: string 5876 - - jsonPath: .spec.sourceRef.kind 5877 - name: Source Kind 5878 - type: string 5879 - - jsonPath: .spec.sourceRef.name 5880 - name: Source Name 5881 - type: string 5882 - - jsonPath: .metadata.creationTimestamp 5883 - name: Age 5884 - type: date 5885 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 5886 - name: Ready 5887 - type: string 5888 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 5889 - name: Status 5890 - type: string 5891 - deprecated: true 5892 - deprecationWarning: v1beta2 HelmChart is deprecated, upgrade to v1 5893 - name: v1beta2 5894 - schema: 5895 - openAPIV3Schema: 5896 - description: HelmChart is the Schema for the helmcharts API. 5897 + chart: 5898 + description: |- 5899 + Chart is the name or path the Helm chart is available at in the 5900 + SourceRef. 5901 + type: string 5902 + ignoreMissingValuesFiles: 5903 + description: |- 5904 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 5905 + files rather than failing. 5906 + type: boolean 5907 + interval: 5908 + description: |- 5909 + Interval at which the HelmChart SourceRef is checked for updates. 5910 + This interval is approximate and may be subject to jitter to ensure 5911 + efficient use of resources. 5912 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5913 + type: string 5914 + reconcileStrategy: 5915 + default: ChartVersion 5916 + description: |- 5917 + ReconcileStrategy determines what enables the creation of a new artifact. 5918 + Valid values are ('ChartVersion', 'Revision'). 5919 + See the documentation of the values for an explanation on their behavior. 5920 + Defaults to ChartVersion when omitted. 5921 + enum: 5922 + - ChartVersion 5923 + - Revision 5924 + type: string 5925 + sourceRef: 5926 + description: SourceRef is the reference to the Source the chart is 5927 + available at. 5928 properties: 5929 - apiVersion: 5930 - description: |- 5931 - APIVersion defines the versioned schema of this representation of an object. 5932 - Servers should convert recognized schemas to the latest internal value, and 5933 - may reject unrecognized values. 5934 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 5935 - type: string 5936 - kind: 5937 - description: |- 5938 - Kind is a string value representing the REST resource this object represents. 5939 - Servers may infer this from the endpoint the client submits requests to. 5940 - Cannot be updated. 5941 - In CamelCase. 5942 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 5943 + apiVersion: 5944 + description: APIVersion of the referent. 5945 + type: string 5946 + kind: 5947 + description: |- 5948 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 5949 + 'Bucket'). 5950 + enum: 5951 + - HelmRepository 5952 + - GitRepository 5953 + - Bucket 5954 + type: string 5955 + name: 5956 + description: Name of the referent. 5957 + type: string 5958 + required: 5959 + - kind 5960 + - name 5961 + type: object 5962 + suspend: 5963 + description: |- 5964 + Suspend tells the controller to suspend the reconciliation of this 5965 + source. 5966 + type: boolean 5967 + valuesFile: 5968 + description: |- 5969 + ValuesFile is an alternative values file to use as the default chart 5970 + values, expected to be a relative path in the SourceRef. Deprecated in 5971 + favor of ValuesFiles, for backwards compatibility the file specified here 5972 + is merged before the ValuesFiles items. Ignored when omitted. 5973 + type: string 5974 + valuesFiles: 5975 + description: |- 5976 + ValuesFiles is an alternative list of values files to use as the chart 5977 + values (values.yaml is not included by default), expected to be a 5978 + relative path in the SourceRef. 5979 + Values files are merged in the order of this list with the last file 5980 + overriding the first. Ignored when omitted. 5981 + items: 5982 + type: string 5983 + type: array 5984 + verify: 5985 + description: |- 5986 + Verify contains the secret name containing the trusted public keys 5987 + used to verify the signature and specifies which provider to use to check 5988 + whether OCI image is authentic. 5989 + This field is only supported when using HelmRepository source with spec.type 'oci'. 5990 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 5991 + properties: 5992 + matchOIDCIdentity: 5993 + description: |- 5994 + MatchOIDCIdentity specifies the identity matching criteria to use 5995 + while verifying an OCI artifact which was signed using Cosign keyless 5996 + signing. The artifact's identity is deemed to be verified if any of the 5997 + specified matchers match against the identity. 5998 + items: 5999 + description: |- 6000 + OIDCIdentityMatch specifies options for verifying the certificate identity, 6001 + i.e. the issuer and the subject of the certificate. 6002 + properties: 6003 + issuer: 6004 + description: |- 6005 + Issuer specifies the regex pattern to match against to verify 6006 + the OIDC issuer in the Fulcio certificate. The pattern must be a 6007 + valid Go regular expression. 6008 + type: string 6009 + subject: 6010 + description: |- 6011 + Subject specifies the regex pattern to match against to verify 6012 + the identity subject in the Fulcio certificate. The pattern must 6013 + be a valid Go regular expression. 6014 + type: string 6015 + required: 6016 + - issuer 6017 + - subject 6018 + type: object 6019 + type: array 6020 + provider: 6021 + default: cosign 6022 + description: Provider specifies the technology used to sign the 6023 + OCI Artifact. 6024 + enum: 6025 + - cosign 6026 + - notation 6027 + type: string 6028 + secretRef: 6029 + description: |- 6030 + SecretRef specifies the Kubernetes Secret containing the 6031 + trusted public keys. 6032 + properties: 6033 + name: 6034 + description: Name of the referent. 6035 type: string 6036 - metadata: 6037 - type: object 6038 - spec: 6039 - description: HelmChartSpec specifies the desired state of a Helm chart. 6040 - properties: 6041 - accessFrom: 6042 - description: |- 6043 - AccessFrom specifies an Access Control List for allowing cross-namespace 6044 - references to this object. 6045 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6046 - properties: 6047 - namespaceSelectors: 6048 - description: |- 6049 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6050 - Items in this list are evaluated using a logical OR operation. 6051 - items: 6052 - description: |- 6053 - NamespaceSelector selects the namespaces to which this ACL applies. 6054 - An empty map of MatchLabels matches all namespaces in a cluster. 6055 - properties: 6056 - matchLabels: 6057 - additionalProperties: 6058 - type: string 6059 - description: |- 6060 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6061 - map is equivalent to an element of matchExpressions, whose key field is "key", the 6062 - operator is "In", and the values array contains only "value". The requirements are ANDed. 6063 - type: object 6064 - type: object 6065 - type: array 6066 - required: 6067 - - namespaceSelectors 6068 - type: object 6069 - chart: 6070 - description: |- 6071 - Chart is the name or path the Helm chart is available at in the 6072 - SourceRef. 6073 - type: string 6074 - ignoreMissingValuesFiles: 6075 - description: |- 6076 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 6077 - files rather than failing. 6078 - type: boolean 6079 - interval: 6080 - description: |- 6081 - Interval at which the HelmChart SourceRef is checked for updates. 6082 - This interval is approximate and may be subject to jitter to ensure 6083 - efficient use of resources. 6084 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6085 - type: string 6086 - reconcileStrategy: 6087 - default: ChartVersion 6088 - description: |- 6089 - ReconcileStrategy determines what enables the creation of a new artifact. 6090 - Valid values are ('ChartVersion', 'Revision'). 6091 - See the documentation of the values for an explanation on their behavior. 6092 - Defaults to ChartVersion when omitted. 6093 - enum: 6094 - - ChartVersion 6095 - - Revision 6096 - type: string 6097 - sourceRef: 6098 - description: SourceRef is the reference to the Source the chart is available at. 6099 - properties: 6100 - apiVersion: 6101 - description: APIVersion of the referent. 6102 - type: string 6103 - kind: 6104 - description: |- 6105 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 6106 - 'Bucket'). 6107 - enum: 6108 - - HelmRepository 6109 - - GitRepository 6110 - - Bucket 6111 - type: string 6112 - name: 6113 - description: Name of the referent. 6114 - type: string 6115 - required: 6116 - - kind 6117 - - name 6118 - type: object 6119 - suspend: 6120 - description: |- 6121 - Suspend tells the controller to suspend the reconciliation of this 6122 - source. 6123 - type: boolean 6124 - valuesFile: 6125 - description: |- 6126 - ValuesFile is an alternative values file to use as the default chart 6127 - values, expected to be a relative path in the SourceRef. Deprecated in 6128 - favor of ValuesFiles, for backwards compatibility the file specified here 6129 - is merged before the ValuesFiles items. Ignored when omitted. 6130 - type: string 6131 - valuesFiles: 6132 - description: |- 6133 - ValuesFiles is an alternative list of values files to use as the chart 6134 - values (values.yaml is not included by default), expected to be a 6135 - relative path in the SourceRef. 6136 - Values files are merged in the order of this list with the last file 6137 - overriding the first. Ignored when omitted. 6138 - items: 6139 - type: string 6140 - type: array 6141 - verify: 6142 - description: |- 6143 - Verify contains the secret name containing the trusted public keys 6144 - used to verify the signature and specifies which provider to use to check 6145 - whether OCI image is authentic. 6146 - This field is only supported when using HelmRepository source with spec.type 'oci'. 6147 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 6148 - properties: 6149 - matchOIDCIdentity: 6150 - description: |- 6151 - MatchOIDCIdentity specifies the identity matching criteria to use 6152 - while verifying an OCI artifact which was signed using Cosign keyless 6153 - signing. The artifact's identity is deemed to be verified if any of the 6154 - specified matchers match against the identity. 6155 - items: 6156 - description: |- 6157 - OIDCIdentityMatch specifies options for verifying the certificate identity, 6158 - i.e. the issuer and the subject of the certificate. 6159 - properties: 6160 - issuer: 6161 - description: |- 6162 - Issuer specifies the regex pattern to match against to verify 6163 - the OIDC issuer in the Fulcio certificate. The pattern must be a 6164 - valid Go regular expression. 6165 - type: string 6166 - subject: 6167 - description: |- 6168 - Subject specifies the regex pattern to match against to verify 6169 - the identity subject in the Fulcio certificate. The pattern must 6170 - be a valid Go regular expression. 6171 - type: string 6172 - required: 6173 - - issuer 6174 - - subject 6175 - type: object 6176 - type: array 6177 - provider: 6178 - default: cosign 6179 - description: Provider specifies the technology used to sign the OCI Artifact. 6180 - enum: 6181 - - cosign 6182 - - notation 6183 - type: string 6184 - secretRef: 6185 - description: |- 6186 - SecretRef specifies the Kubernetes Secret containing the 6187 - trusted public keys. 6188 - properties: 6189 - name: 6190 - description: Name of the referent. 6191 - type: string 6192 - required: 6193 - - name 6194 - type: object 6195 - required: 6196 - - provider 6197 - type: object 6198 - version: 6199 - default: '*' 6200 - description: |- 6201 - Version is the chart version semver expression, ignored for charts from 6202 - GitRepository and Bucket sources. Defaults to latest when omitted. 6203 - type: string 6204 - required: 6205 - - chart 6206 - - interval 6207 - - sourceRef 6208 - type: object 6209 - status: 6210 - default: 6211 - observedGeneration: -1 6212 - description: HelmChartStatus records the observed state of the HelmChart. 6213 - properties: 6214 - artifact: 6215 - description: Artifact represents the output of the last successful reconciliation. 6216 - properties: 6217 - digest: 6218 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6219 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6220 - type: string 6221 - lastUpdateTime: 6222 - description: |- 6223 - LastUpdateTime is the timestamp corresponding to the last update of the 6224 - Artifact. 6225 - format: date-time 6226 - type: string 6227 - metadata: 6228 - additionalProperties: 6229 - type: string 6230 - description: Metadata holds upstream information such as OCI annotations. 6231 - type: object 6232 - path: 6233 - description: |- 6234 - Path is the relative file path of the Artifact. It can be used to locate 6235 - the file in the root of the Artifact storage on the local file system of 6236 - the controller managing the Source. 6237 - type: string 6238 - revision: 6239 - description: |- 6240 - Revision is a human-readable identifier traceable in the origin source 6241 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6242 - type: string 6243 - size: 6244 - description: Size is the number of bytes in the file. 6245 - format: int64 6246 - type: integer 6247 - url: 6248 - description: |- 6249 - URL is the HTTP address of the Artifact as exposed by the controller 6250 - managing the Source. It can be used to retrieve the Artifact for 6251 - consumption, e.g. by another controller applying the Artifact contents. 6252 - type: string 6253 - required: 6254 - - lastUpdateTime 6255 - - path 6256 - - revision 6257 - - url 6258 - type: object 6259 - conditions: 6260 - description: Conditions holds the conditions for the HelmChart. 6261 - items: 6262 - description: "Condition contains details for one aspect of the current state of this API 6263 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 6264 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 6265 - the observations of a foo's current state.\n\t // Known .status.conditions.type 6266 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 6267 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 6268 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 6269 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 6270 - fields\n\t}" 6271 - properties: 6272 - lastTransitionTime: 6273 - description: |- 6274 - lastTransitionTime is the last time the condition transitioned from one status to another. 6275 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6276 - format: date-time 6277 - type: string 6278 - message: 6279 - description: |- 6280 - message is a human readable message indicating details about the transition. 6281 - This may be an empty string. 6282 - maxLength: 32768 6283 - type: string 6284 - observedGeneration: 6285 - description: |- 6286 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6287 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6288 - with respect to the current state of the instance. 6289 - format: int64 6290 - minimum: 0 6291 - type: integer 6292 - reason: 6293 - description: |- 6294 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6295 - Producers of specific condition types may define expected values and meanings for this field, 6296 - and whether the values are considered a guaranteed API. 6297 - The value should be a CamelCase string. 6298 - This field may not be empty. 6299 - maxLength: 1024 6300 - minLength: 1 6301 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6302 - type: string 6303 - status: 6304 - description: status of the condition, one of True, False, Unknown. 6305 - enum: 6306 - - "True" 6307 - - "False" 6308 - - Unknown 6309 - type: string 6310 - type: 6311 - description: |- 6312 - type of condition in CamelCase or in foo.example.com/CamelCase. 6313 - --- 6314 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 6315 - useful (see .node.status.conditions), the ability to deconflict is important. 6316 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 6317 - maxLength: 316 6318 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6319 - type: string 6320 - required: 6321 - - lastTransitionTime 6322 - - message 6323 - - reason 6324 - - status 6325 - - type 6326 - type: object 6327 - type: array 6328 - lastHandledReconcileAt: 6329 - description: |- 6330 - LastHandledReconcileAt holds the value of the most recent 6331 - reconcile request value, so a change of the annotation value 6332 - can be detected. 6333 - type: string 6334 - observedChartName: 6335 - description: |- 6336 - ObservedChartName is the last observed chart name as specified by the 6337 - resolved chart reference. 6338 - type: string 6339 - observedGeneration: 6340 - description: |- 6341 - ObservedGeneration is the last observed generation of the HelmChart 6342 - object. 6343 - format: int64 6344 - type: integer 6345 - observedSourceArtifactRevision: 6346 - description: |- 6347 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 6348 - of the HelmChartSpec.SourceRef. 6349 - type: string 6350 - observedValuesFiles: 6351 - description: |- 6352 - ObservedValuesFiles are the observed value files of the last successful 6353 - reconciliation. 6354 - It matches the chart in the last successfully reconciled artifact. 6355 - items: 6356 - type: string 6357 - type: array 6358 - url: 6359 - description: |- 6360 - URL is the dynamic fetch link for the latest Artifact. 6361 - It is provided on a "best effort" basis, and using the precise 6362 - BucketStatus.Artifact data is recommended. 6363 - type: string 6364 - type: object 6365 + required: 6366 + - name 6367 + type: object 6368 + required: 6369 + - provider 6370 + type: object 6371 + version: 6372 + default: '*' 6373 + description: |- 6374 + Version is the chart version semver expression, ignored for charts from 6375 + GitRepository and Bucket sources. Defaults to latest when omitted. 6376 + type: string 6377 + required: 6378 + - chart 6379 + - interval 6380 + - sourceRef 6381 + type: object 6382 + status: 6383 + default: 6384 + observedGeneration: -1 6385 + description: HelmChartStatus records the observed state of the HelmChart. 6386 + properties: 6387 + artifact: 6388 + description: Artifact represents the output of the last successful 6389 + reconciliation. 6390 + properties: 6391 + digest: 6392 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6393 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6394 + type: string 6395 + lastUpdateTime: 6396 + description: |- 6397 + LastUpdateTime is the timestamp corresponding to the last update of the 6398 + Artifact. 6399 + format: date-time 6400 + type: string 6401 + metadata: 6402 + additionalProperties: 6403 + type: string 6404 + description: Metadata holds upstream information such as OCI annotations. 6405 + type: object 6406 + path: 6407 + description: |- 6408 + Path is the relative file path of the Artifact. It can be used to locate 6409 + the file in the root of the Artifact storage on the local file system of 6410 + the controller managing the Source. 6411 + type: string 6412 + revision: 6413 + description: |- 6414 + Revision is a human-readable identifier traceable in the origin source 6415 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6416 + type: string 6417 + size: 6418 + description: Size is the number of bytes in the file. 6419 + format: int64 6420 + type: integer 6421 + url: 6422 + description: |- 6423 + URL is the HTTP address of the Artifact as exposed by the controller 6424 + managing the Source. It can be used to retrieve the Artifact for 6425 + consumption, e.g. by another controller applying the Artifact contents. 6426 + type: string 6427 + required: 6428 + - lastUpdateTime 6429 + - path 6430 + - revision 6431 + - url 6432 type: object 6433 - served: true 6434 - storage: false 6435 - subresources: 6436 - status: {} 6437 + conditions: 6438 + description: Conditions holds the conditions for the HelmChart. 6439 + items: 6440 + description: Condition contains details for one aspect of the current 6441 + state of this API Resource. 6442 + properties: 6443 + lastTransitionTime: 6444 + description: |- 6445 + lastTransitionTime is the last time the condition transitioned from one status to another. 6446 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6447 + format: date-time 6448 + type: string 6449 + message: 6450 + description: |- 6451 + message is a human readable message indicating details about the transition. 6452 + This may be an empty string. 6453 + maxLength: 32768 6454 + type: string 6455 + observedGeneration: 6456 + description: |- 6457 + observedGeneration represents the .metadata.generation that the condition was set based upon. 6458 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6459 + with respect to the current state of the instance. 6460 + format: int64 6461 + minimum: 0 6462 + type: integer 6463 + reason: 6464 + description: |- 6465 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 6466 + Producers of specific condition types may define expected values and meanings for this field, 6467 + and whether the values are considered a guaranteed API. 6468 + The value should be a CamelCase string. 6469 + This field may not be empty. 6470 + maxLength: 1024 6471 + minLength: 1 6472 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6473 + type: string 6474 + status: 6475 + description: status of the condition, one of True, False, Unknown. 6476 + enum: 6477 + - "True" 6478 + - "False" 6479 + - Unknown 6480 + type: string 6481 + type: 6482 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 6483 + maxLength: 316 6484 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6485 + type: string 6486 + required: 6487 + - lastTransitionTime 6488 + - message 6489 + - reason 6490 + - status 6491 + - type 6492 + type: object 6493 + type: array 6494 + lastHandledReconcileAt: 6495 + description: |- 6496 + LastHandledReconcileAt holds the value of the most recent 6497 + reconcile request value, so a change of the annotation value 6498 + can be detected. 6499 + type: string 6500 + observedChartName: 6501 + description: |- 6502 + ObservedChartName is the last observed chart name as specified by the 6503 + resolved chart reference. 6504 + type: string 6505 + observedGeneration: 6506 + description: |- 6507 + ObservedGeneration is the last observed generation of the HelmChart 6508 + object. 6509 + format: int64 6510 + type: integer 6511 + observedSourceArtifactRevision: 6512 + description: |- 6513 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 6514 + of the HelmChartSpec.SourceRef. 6515 + type: string 6516 + observedValuesFiles: 6517 + description: |- 6518 + ObservedValuesFiles are the observed value files of the last successful 6519 + reconciliation. 6520 + It matches the chart in the last successfully reconciled artifact. 6521 + items: 6522 + type: string 6523 + type: array 6524 + url: 6525 + description: |- 6526 + URL is the dynamic fetch link for the latest Artifact. 6527 + It is provided on a "best effort" basis, and using the precise 6528 + BucketStatus.Artifact data is recommended. 6529 + type: string 6530 + type: object 6531 + type: object 6532 + served: true 6533 + storage: false 6534 + subresources: 6535 + status: {} 6536 --- 6537 apiVersion: apiextensions.k8s.io/v1 6538 kind: CustomResourceDefinition 6539 metadata: 6540 - annotations: 6541 - controller-gen.kubebuilder.io/version: v0.15.0 6542 - labels: 6543 - app.kubernetes.io/component: source-controller 6544 - app.kubernetes.io/instance: flux-system 6545 - app.kubernetes.io/part-of: flux 6546 - app.kubernetes.io/version: v2.3.0 6547 - name: helmrepositories.source.toolkit.fluxcd.io 6548 + annotations: 6549 + controller-gen.kubebuilder.io/version: v0.16.1 6550 + labels: 6551 + app.kubernetes.io/component: source-controller 6552 + app.kubernetes.io/instance: flux-system 6553 + app.kubernetes.io/part-of: flux 6554 + app.kubernetes.io/version: v2.4.0 6555 + name: helmrepositories.source.toolkit.fluxcd.io 6556 spec: 6557 - group: source.toolkit.fluxcd.io 6558 - names: 6559 - kind: HelmRepository 6560 - listKind: HelmRepositoryList 6561 - plural: helmrepositories 6562 - shortNames: 6563 - - helmrepo 6564 - singular: helmrepository 6565 - scope: Namespaced 6566 - versions: 6567 - - additionalPrinterColumns: 6568 - - jsonPath: .spec.url 6569 - name: URL 6570 - type: string 6571 - - jsonPath: .metadata.creationTimestamp 6572 - name: Age 6573 - type: date 6574 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6575 - name: Ready 6576 - type: string 6577 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6578 - name: Status 6579 - type: string 6580 - name: v1 6581 - schema: 6582 - openAPIV3Schema: 6583 - description: HelmRepository is the Schema for the helmrepositories API. 6584 + group: source.toolkit.fluxcd.io 6585 + names: 6586 + kind: HelmRepository 6587 + listKind: HelmRepositoryList 6588 + plural: helmrepositories 6589 + shortNames: 6590 + - helmrepo 6591 + singular: helmrepository 6592 + scope: Namespaced 6593 + versions: 6594 + - additionalPrinterColumns: 6595 + - jsonPath: .spec.url 6596 + name: URL 6597 + type: string 6598 + - jsonPath: .metadata.creationTimestamp 6599 + name: Age 6600 + type: date 6601 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 6602 + name: Ready 6603 + type: string 6604 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 6605 + name: Status 6606 + type: string 6607 + name: v1 6608 + schema: 6609 + openAPIV3Schema: 6610 + description: HelmRepository is the Schema for the helmrepositories API. 6611 + properties: 6612 + apiVersion: 6613 + description: |- 6614 + APIVersion defines the versioned schema of this representation of an object. 6615 + Servers should convert recognized schemas to the latest internal value, and 6616 + may reject unrecognized values. 6617 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6618 + type: string 6619 + kind: 6620 + description: |- 6621 + Kind is a string value representing the REST resource this object represents. 6622 + Servers may infer this from the endpoint the client submits requests to. 6623 + Cannot be updated. 6624 + In CamelCase. 6625 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6626 + type: string 6627 + metadata: 6628 + type: object 6629 + spec: 6630 + description: |- 6631 + HelmRepositorySpec specifies the required configuration to produce an 6632 + Artifact for a Helm repository index YAML. 6633 + properties: 6634 + accessFrom: 6635 + description: |- 6636 + AccessFrom specifies an Access Control List for allowing cross-namespace 6637 + references to this object. 6638 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6639 properties: 6640 - apiVersion: 6641 - description: |- 6642 - APIVersion defines the versioned schema of this representation of an object. 6643 - Servers should convert recognized schemas to the latest internal value, and 6644 - may reject unrecognized values. 6645 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6646 - type: string 6647 - kind: 6648 - description: |- 6649 - Kind is a string value representing the REST resource this object represents. 6650 - Servers may infer this from the endpoint the client submits requests to. 6651 - Cannot be updated. 6652 - In CamelCase. 6653 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6654 - type: string 6655 - metadata: 6656 - type: object 6657 - spec: 6658 - description: |- 6659 - HelmRepositorySpec specifies the required configuration to produce an 6660 - Artifact for a Helm repository index YAML. 6661 - properties: 6662 - accessFrom: 6663 - description: |- 6664 - AccessFrom specifies an Access Control List for allowing cross-namespace 6665 - references to this object. 6666 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 6667 - properties: 6668 - namespaceSelectors: 6669 - description: |- 6670 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6671 - Items in this list are evaluated using a logical OR operation. 6672 - items: 6673 - description: |- 6674 - NamespaceSelector selects the namespaces to which this ACL applies. 6675 - An empty map of MatchLabels matches all namespaces in a cluster. 6676 - properties: 6677 - matchLabels: 6678 - additionalProperties: 6679 - type: string 6680 - description: |- 6681 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6682 - map is equivalent to an element of matchExpressions, whose key field is "key", the 6683 - operator is "In", and the values array contains only "value". The requirements are ANDed. 6684 - type: object 6685 - type: object 6686 - type: array 6687 - required: 6688 - - namespaceSelectors 6689 - type: object 6690 - certSecretRef: 6691 - description: |- 6692 - CertSecretRef can be given the name of a Secret containing 6693 - either or both of 6694 - 6695 - 6696 - - a PEM-encoded client certificate (`tls.crt`) and private 6697 - key (`tls.key`); 6698 - - a PEM-encoded CA certificate (`ca.crt`) 6699 - 6700 - 6701 - and whichever are supplied, will be used for connecting to the 6702 - registry. The client cert and key are useful if you are 6703 - authenticating with a certificate; the CA cert is useful if 6704 - you are using a self-signed server certificate. The Secret must 6705 - be of type `Opaque` or `kubernetes.io/tls`. 6706 - 6707 - 6708 - It takes precedence over the values specified in the Secret referred 6709 - to by `.spec.secretRef`. 6710 - properties: 6711 - name: 6712 - description: Name of the referent. 6713 - type: string 6714 - required: 6715 - - name 6716 - type: object 6717 - insecure: 6718 - description: |- 6719 - Insecure allows connecting to a non-TLS HTTP container registry. 6720 - This field is only taken into account if the .spec.type field is set to 'oci'. 6721 - type: boolean 6722 - interval: 6723 - description: |- 6724 - Interval at which the HelmRepository URL is checked for updates. 6725 - This interval is approximate and may be subject to jitter to ensure 6726 - efficient use of resources. 6727 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6728 - type: string 6729 - passCredentials: 6730 - description: |- 6731 - PassCredentials allows the credentials from the SecretRef to be passed 6732 - on to a host that does not match the host as defined in URL. 6733 - This may be required if the host of the advertised chart URLs in the 6734 - index differ from the defined URL. 6735 - Enabling this should be done with caution, as it can potentially result 6736 - in credentials getting stolen in a MITM-attack. 6737 - type: boolean 6738 - provider: 6739 - default: generic 6740 - description: |- 6741 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 6742 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 6743 - When not specified, defaults to 'generic'. 6744 - enum: 6745 - - generic 6746 - - aws 6747 - - azure 6748 - - gcp 6749 - type: string 6750 - secretRef: 6751 - description: |- 6752 - SecretRef specifies the Secret containing authentication credentials 6753 - for the HelmRepository. 6754 - For HTTP/S basic auth the secret must contain 'username' and 'password' 6755 - fields. 6756 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 6757 - keys is deprecated. Please use `.spec.certSecretRef` instead. 6758 - properties: 6759 - name: 6760 - description: Name of the referent. 6761 - type: string 6762 - required: 6763 - - name 6764 - type: object 6765 - suspend: 6766 - description: |- 6767 - Suspend tells the controller to suspend the reconciliation of this 6768 - HelmRepository. 6769 - type: boolean 6770 - timeout: 6771 - description: |- 6772 - Timeout is used for the index fetch operation for an HTTPS helm repository, 6773 - and for remote OCI Repository operations like pulling for an OCI helm 6774 - chart by the associated HelmChart. 6775 - Its default value is 60s. 6776 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 6777 - type: string 6778 - type: 6779 - description: |- 6780 - Type of the HelmRepository. 6781 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 6782 - enum: 6783 - - default 6784 - - oci 6785 - type: string 6786 - url: 6787 - description: |- 6788 - URL of the Helm repository, a valid URL contains at least a protocol and 6789 - host. 6790 - pattern: ^(http|https|oci)://.*$ 6791 - type: string 6792 - required: 6793 - - url 6794 - type: object 6795 - status: 6796 - default: 6797 - observedGeneration: -1 6798 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 6799 - properties: 6800 - artifact: 6801 - description: Artifact represents the last successful HelmRepository reconciliation. 6802 - properties: 6803 - digest: 6804 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 6805 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 6806 - type: string 6807 - lastUpdateTime: 6808 - description: |- 6809 - LastUpdateTime is the timestamp corresponding to the last update of the 6810 - Artifact. 6811 - format: date-time 6812 - type: string 6813 - metadata: 6814 - additionalProperties: 6815 - type: string 6816 - description: Metadata holds upstream information such as OCI annotations. 6817 - type: object 6818 - path: 6819 - description: |- 6820 - Path is the relative file path of the Artifact. It can be used to locate 6821 - the file in the root of the Artifact storage on the local file system of 6822 - the controller managing the Source. 6823 - type: string 6824 - revision: 6825 - description: |- 6826 - Revision is a human-readable identifier traceable in the origin source 6827 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 6828 - type: string 6829 - size: 6830 - description: Size is the number of bytes in the file. 6831 - format: int64 6832 - type: integer 6833 - url: 6834 - description: |- 6835 - URL is the HTTP address of the Artifact as exposed by the controller 6836 - managing the Source. It can be used to retrieve the Artifact for 6837 - consumption, e.g. by another controller applying the Artifact contents. 6838 - type: string 6839 - required: 6840 - - lastUpdateTime 6841 - - path 6842 - - revision 6843 - - url 6844 - type: object 6845 - conditions: 6846 - description: Conditions holds the conditions for the HelmRepository. 6847 - items: 6848 - description: "Condition contains details for one aspect of the current state of this API 6849 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 6850 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 6851 - the observations of a foo's current state.\n\t // Known .status.conditions.type 6852 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 6853 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 6854 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 6855 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 6856 - fields\n\t}" 6857 - properties: 6858 - lastTransitionTime: 6859 - description: |- 6860 - lastTransitionTime is the last time the condition transitioned from one status to another. 6861 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 6862 - format: date-time 6863 - type: string 6864 - message: 6865 - description: |- 6866 - message is a human readable message indicating details about the transition. 6867 - This may be an empty string. 6868 - maxLength: 32768 6869 - type: string 6870 - observedGeneration: 6871 - description: |- 6872 - observedGeneration represents the .metadata.generation that the condition was set based upon. 6873 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 6874 - with respect to the current state of the instance. 6875 - format: int64 6876 - minimum: 0 6877 - type: integer 6878 - reason: 6879 - description: |- 6880 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 6881 - Producers of specific condition types may define expected values and meanings for this field, 6882 - and whether the values are considered a guaranteed API. 6883 - The value should be a CamelCase string. 6884 - This field may not be empty. 6885 - maxLength: 1024 6886 - minLength: 1 6887 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 6888 - type: string 6889 - status: 6890 - description: status of the condition, one of True, False, Unknown. 6891 - enum: 6892 - - "True" 6893 - - "False" 6894 - - Unknown 6895 - type: string 6896 - type: 6897 - description: |- 6898 - type of condition in CamelCase or in foo.example.com/CamelCase. 6899 - --- 6900 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 6901 - useful (see .node.status.conditions), the ability to deconflict is important. 6902 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 6903 - maxLength: 316 6904 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 6905 - type: string 6906 - required: 6907 - - lastTransitionTime 6908 - - message 6909 - - reason 6910 - - status 6911 - - type 6912 - type: object 6913 - type: array 6914 - lastHandledReconcileAt: 6915 - description: |- 6916 - LastHandledReconcileAt holds the value of the most recent 6917 - reconcile request value, so a change of the annotation value 6918 - can be detected. 6919 - type: string 6920 - observedGeneration: 6921 - description: |- 6922 - ObservedGeneration is the last observed generation of the HelmRepository 6923 - object. 6924 - format: int64 6925 - type: integer 6926 - url: 6927 - description: |- 6928 - URL is the dynamic fetch link for the latest Artifact. 6929 - It is provided on a "best effort" basis, and using the precise 6930 - HelmRepositoryStatus.Artifact data is recommended. 6931 - type: string 6932 - type: object 6933 + namespaceSelectors: 6934 + description: |- 6935 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 6936 + Items in this list are evaluated using a logical OR operation. 6937 + items: 6938 + description: |- 6939 + NamespaceSelector selects the namespaces to which this ACL applies. 6940 + An empty map of MatchLabels matches all namespaces in a cluster. 6941 + properties: 6942 + matchLabels: 6943 + additionalProperties: 6944 + type: string 6945 + description: |- 6946 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 6947 + map is equivalent to an element of matchExpressions, whose key field is "key", the 6948 + operator is "In", and the values array contains only "value". The requirements are ANDed. 6949 + type: object 6950 + type: object 6951 + type: array 6952 + required: 6953 + - namespaceSelectors 6954 type: object 6955 - served: true 6956 - storage: true 6957 - subresources: 6958 - status: {} 6959 - - additionalPrinterColumns: 6960 - - jsonPath: .spec.url 6961 - name: URL 6962 - type: string 6963 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6964 - name: Ready 6965 - type: string 6966 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6967 - name: Status 6968 - type: string 6969 - - jsonPath: .metadata.creationTimestamp 6970 - name: Age 6971 - type: date 6972 - deprecated: true 6973 - deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1 6974 - name: v1beta1 6975 - schema: 6976 - openAPIV3Schema: 6977 - description: HelmRepository is the Schema for the helmrepositories API 6978 + certSecretRef: 6979 + description: |- 6980 + CertSecretRef can be given the name of a Secret containing 6981 + either or both of 6982 + 6983 + - a PEM-encoded client certificate (`tls.crt`) and private 6984 + key (`tls.key`); 6985 + - a PEM-encoded CA certificate (`ca.crt`) 6986 + 6987 + and whichever are supplied, will be used for connecting to the 6988 + registry. The client cert and key are useful if you are 6989 + authenticating with a certificate; the CA cert is useful if 6990 + you are using a self-signed server certificate. The Secret must 6991 + be of type `Opaque` or `kubernetes.io/tls`. 6992 + 6993 + It takes precedence over the values specified in the Secret referred 6994 + to by `.spec.secretRef`. 6995 properties: 6996 - apiVersion: 6997 - description: |- 6998 - APIVersion defines the versioned schema of this representation of an object. 6999 - Servers should convert recognized schemas to the latest internal value, and 7000 - may reject unrecognized values. 7001 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7002 - type: string 7003 - kind: 7004 - description: |- 7005 - Kind is a string value representing the REST resource this object represents. 7006 - Servers may infer this from the endpoint the client submits requests to. 7007 - Cannot be updated. 7008 - In CamelCase. 7009 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7010 - type: string 7011 - metadata: 7012 - type: object 7013 - spec: 7014 - description: HelmRepositorySpec defines the reference to a Helm repository. 7015 - properties: 7016 - accessFrom: 7017 - description: AccessFrom defines an Access Control List for allowing cross-namespace references 7018 - to this object. 7019 - properties: 7020 - namespaceSelectors: 7021 - description: |- 7022 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7023 - Items in this list are evaluated using a logical OR operation. 7024 - items: 7025 - description: |- 7026 - NamespaceSelector selects the namespaces to which this ACL applies. 7027 - An empty map of MatchLabels matches all namespaces in a cluster. 7028 - properties: 7029 - matchLabels: 7030 - additionalProperties: 7031 - type: string 7032 - description: |- 7033 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7034 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7035 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7036 - type: object 7037 - type: object 7038 - type: array 7039 - required: 7040 - - namespaceSelectors 7041 - type: object 7042 - interval: 7043 - description: The interval at which to check the upstream for updates. 7044 - type: string 7045 - passCredentials: 7046 - description: |- 7047 - PassCredentials allows the credentials from the SecretRef to be passed on to 7048 - a host that does not match the host as defined in URL. 7049 - This may be required if the host of the advertised chart URLs in the index 7050 - differ from the defined URL. 7051 - Enabling this should be done with caution, as it can potentially result in 7052 - credentials getting stolen in a MITM-attack. 7053 - type: boolean 7054 - secretRef: 7055 - description: |- 7056 - The name of the secret containing authentication credentials for the Helm 7057 - repository. 7058 - For HTTP/S basic auth the secret must contain username and 7059 - password fields. 7060 - For TLS the secret must contain a certFile and keyFile, and/or 7061 - caFile fields. 7062 - properties: 7063 - name: 7064 - description: Name of the referent. 7065 - type: string 7066 - required: 7067 - - name 7068 - type: object 7069 - suspend: 7070 - description: This flag tells the controller to suspend the reconciliation of this source. 7071 - type: boolean 7072 - timeout: 7073 - default: 60s 7074 - description: The timeout of index downloading, defaults to 60s. 7075 - type: string 7076 - url: 7077 - description: The Helm repository URL, a valid URL contains at least a protocol and host. 7078 - type: string 7079 - required: 7080 - - interval 7081 - - url 7082 - type: object 7083 - status: 7084 - default: 7085 - observedGeneration: -1 7086 - description: HelmRepositoryStatus defines the observed state of the HelmRepository. 7087 - properties: 7088 - artifact: 7089 - description: Artifact represents the output of the last successful repository sync. 7090 - properties: 7091 - checksum: 7092 - description: Checksum is the SHA256 checksum of the artifact. 7093 - type: string 7094 - lastUpdateTime: 7095 - description: |- 7096 - LastUpdateTime is the timestamp corresponding to the last update of this 7097 - artifact. 7098 - format: date-time 7099 - type: string 7100 - path: 7101 - description: Path is the relative file path of this artifact. 7102 - type: string 7103 - revision: 7104 - description: |- 7105 - Revision is a human readable identifier traceable in the origin source 7106 - system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 7107 - chart version, etc. 7108 - type: string 7109 - url: 7110 - description: URL is the HTTP address of this artifact. 7111 - type: string 7112 - required: 7113 - - path 7114 - - url 7115 - type: object 7116 - conditions: 7117 - description: Conditions holds the conditions for the HelmRepository. 7118 - items: 7119 - description: "Condition contains details for one aspect of the current state of this API 7120 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 7121 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 7122 - the observations of a foo's current state.\n\t // Known .status.conditions.type 7123 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 7124 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 7125 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 7126 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 7127 - fields\n\t}" 7128 - properties: 7129 - lastTransitionTime: 7130 - description: |- 7131 - lastTransitionTime is the last time the condition transitioned from one status to another. 7132 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7133 - format: date-time 7134 - type: string 7135 - message: 7136 - description: |- 7137 - message is a human readable message indicating details about the transition. 7138 - This may be an empty string. 7139 - maxLength: 32768 7140 - type: string 7141 - observedGeneration: 7142 - description: |- 7143 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7144 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7145 - with respect to the current state of the instance. 7146 - format: int64 7147 - minimum: 0 7148 - type: integer 7149 - reason: 7150 - description: |- 7151 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7152 - Producers of specific condition types may define expected values and meanings for this field, 7153 - and whether the values are considered a guaranteed API. 7154 - The value should be a CamelCase string. 7155 - This field may not be empty. 7156 - maxLength: 1024 7157 - minLength: 1 7158 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7159 - type: string 7160 - status: 7161 - description: status of the condition, one of True, False, Unknown. 7162 - enum: 7163 - - "True" 7164 - - "False" 7165 - - Unknown 7166 - type: string 7167 - type: 7168 - description: |- 7169 - type of condition in CamelCase or in foo.example.com/CamelCase. 7170 - --- 7171 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 7172 - useful (see .node.status.conditions), the ability to deconflict is important. 7173 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 7174 - maxLength: 316 7175 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7176 - type: string 7177 - required: 7178 - - lastTransitionTime 7179 - - message 7180 - - reason 7181 - - status 7182 - - type 7183 - type: object 7184 - type: array 7185 - lastHandledReconcileAt: 7186 - description: |- 7187 - LastHandledReconcileAt holds the value of the most recent 7188 - reconcile request value, so a change of the annotation value 7189 - can be detected. 7190 - type: string 7191 - observedGeneration: 7192 - description: ObservedGeneration is the last observed generation. 7193 - format: int64 7194 - type: integer 7195 - url: 7196 - description: URL is the download link for the last index fetched. 7197 - type: string 7198 - type: object 7199 + name: 7200 + description: Name of the referent. 7201 + type: string 7202 + required: 7203 + - name 7204 type: object 7205 - served: true 7206 - storage: false 7207 - subresources: 7208 - status: {} 7209 - - additionalPrinterColumns: 7210 - - jsonPath: .spec.url 7211 - name: URL 7212 - type: string 7213 - - jsonPath: .metadata.creationTimestamp 7214 - name: Age 7215 - type: date 7216 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7217 - name: Ready 7218 - type: string 7219 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7220 - name: Status 7221 - type: string 7222 - deprecated: true 7223 - deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 7224 - name: v1beta2 7225 - schema: 7226 - openAPIV3Schema: 7227 - description: HelmRepository is the Schema for the helmrepositories API. 7228 + insecure: 7229 + description: |- 7230 + Insecure allows connecting to a non-TLS HTTP container registry. 7231 + This field is only taken into account if the .spec.type field is set to 'oci'. 7232 + type: boolean 7233 + interval: 7234 + description: |- 7235 + Interval at which the HelmRepository URL is checked for updates. 7236 + This interval is approximate and may be subject to jitter to ensure 7237 + efficient use of resources. 7238 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7239 + type: string 7240 + passCredentials: 7241 + description: |- 7242 + PassCredentials allows the credentials from the SecretRef to be passed 7243 + on to a host that does not match the host as defined in URL. 7244 + This may be required if the host of the advertised chart URLs in the 7245 + index differ from the defined URL. 7246 + Enabling this should be done with caution, as it can potentially result 7247 + in credentials getting stolen in a MITM-attack. 7248 + type: boolean 7249 + provider: 7250 + default: generic 7251 + description: |- 7252 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7253 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 7254 + When not specified, defaults to 'generic'. 7255 + enum: 7256 + - generic 7257 + - aws 7258 + - azure 7259 + - gcp 7260 + type: string 7261 + secretRef: 7262 + description: |- 7263 + SecretRef specifies the Secret containing authentication credentials 7264 + for the HelmRepository. 7265 + For HTTP/S basic auth the secret must contain 'username' and 'password' 7266 + fields. 7267 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 7268 + keys is deprecated. Please use `.spec.certSecretRef` instead. 7269 properties: 7270 - apiVersion: 7271 - description: |- 7272 - APIVersion defines the versioned schema of this representation of an object. 7273 - Servers should convert recognized schemas to the latest internal value, and 7274 - may reject unrecognized values. 7275 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7276 - type: string 7277 - kind: 7278 - description: |- 7279 - Kind is a string value representing the REST resource this object represents. 7280 - Servers may infer this from the endpoint the client submits requests to. 7281 - Cannot be updated. 7282 - In CamelCase. 7283 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7284 - type: string 7285 - metadata: 7286 - type: object 7287 - spec: 7288 - description: |- 7289 - HelmRepositorySpec specifies the required configuration to produce an 7290 - Artifact for a Helm repository index YAML. 7291 - properties: 7292 - accessFrom: 7293 - description: |- 7294 - AccessFrom specifies an Access Control List for allowing cross-namespace 7295 - references to this object. 7296 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 7297 - properties: 7298 - namespaceSelectors: 7299 - description: |- 7300 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 7301 - Items in this list are evaluated using a logical OR operation. 7302 - items: 7303 - description: |- 7304 - NamespaceSelector selects the namespaces to which this ACL applies. 7305 - An empty map of MatchLabels matches all namespaces in a cluster. 7306 - properties: 7307 - matchLabels: 7308 - additionalProperties: 7309 - type: string 7310 - description: |- 7311 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 7312 - map is equivalent to an element of matchExpressions, whose key field is "key", the 7313 - operator is "In", and the values array contains only "value". The requirements are ANDed. 7314 - type: object 7315 - type: object 7316 - type: array 7317 - required: 7318 - - namespaceSelectors 7319 - type: object 7320 - certSecretRef: 7321 - description: |- 7322 - CertSecretRef can be given the name of a Secret containing 7323 - either or both of 7324 - 7325 - 7326 - - a PEM-encoded client certificate (`tls.crt`) and private 7327 - key (`tls.key`); 7328 - - a PEM-encoded CA certificate (`ca.crt`) 7329 - 7330 - 7331 - and whichever are supplied, will be used for connecting to the 7332 - registry. The client cert and key are useful if you are 7333 - authenticating with a certificate; the CA cert is useful if 7334 - you are using a self-signed server certificate. The Secret must 7335 - be of type `Opaque` or `kubernetes.io/tls`. 7336 - 7337 - 7338 - It takes precedence over the values specified in the Secret referred 7339 - to by `.spec.secretRef`. 7340 - properties: 7341 - name: 7342 - description: Name of the referent. 7343 - type: string 7344 - required: 7345 - - name 7346 - type: object 7347 - insecure: 7348 - description: |- 7349 - Insecure allows connecting to a non-TLS HTTP container registry. 7350 - This field is only taken into account if the .spec.type field is set to 'oci'. 7351 - type: boolean 7352 - interval: 7353 - description: |- 7354 - Interval at which the HelmRepository URL is checked for updates. 7355 - This interval is approximate and may be subject to jitter to ensure 7356 - efficient use of resources. 7357 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7358 - type: string 7359 - passCredentials: 7360 - description: |- 7361 - PassCredentials allows the credentials from the SecretRef to be passed 7362 - on to a host that does not match the host as defined in URL. 7363 - This may be required if the host of the advertised chart URLs in the 7364 - index differ from the defined URL. 7365 - Enabling this should be done with caution, as it can potentially result 7366 - in credentials getting stolen in a MITM-attack. 7367 - type: boolean 7368 - provider: 7369 - default: generic 7370 - description: |- 7371 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7372 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 7373 - When not specified, defaults to 'generic'. 7374 - enum: 7375 - - generic 7376 - - aws 7377 - - azure 7378 - - gcp 7379 - type: string 7380 - secretRef: 7381 - description: |- 7382 - SecretRef specifies the Secret containing authentication credentials 7383 - for the HelmRepository. 7384 - For HTTP/S basic auth the secret must contain 'username' and 'password' 7385 - fields. 7386 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 7387 - keys is deprecated. Please use `.spec.certSecretRef` instead. 7388 - properties: 7389 - name: 7390 - description: Name of the referent. 7391 - type: string 7392 - required: 7393 - - name 7394 - type: object 7395 - suspend: 7396 - description: |- 7397 - Suspend tells the controller to suspend the reconciliation of this 7398 - HelmRepository. 7399 - type: boolean 7400 - timeout: 7401 - description: |- 7402 - Timeout is used for the index fetch operation for an HTTPS helm repository, 7403 - and for remote OCI Repository operations like pulling for an OCI helm 7404 - chart by the associated HelmChart. 7405 - Its default value is 60s. 7406 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7407 - type: string 7408 - type: 7409 - description: |- 7410 - Type of the HelmRepository. 7411 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 7412 - enum: 7413 - - default 7414 - - oci 7415 - type: string 7416 - url: 7417 - description: |- 7418 - URL of the Helm repository, a valid URL contains at least a protocol and 7419 - host. 7420 - pattern: ^(http|https|oci)://.*$ 7421 - type: string 7422 - required: 7423 - - url 7424 - type: object 7425 - status: 7426 - default: 7427 - observedGeneration: -1 7428 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 7429 - properties: 7430 - artifact: 7431 - description: Artifact represents the last successful HelmRepository reconciliation. 7432 - properties: 7433 - digest: 7434 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7435 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7436 - type: string 7437 - lastUpdateTime: 7438 - description: |- 7439 - LastUpdateTime is the timestamp corresponding to the last update of the 7440 - Artifact. 7441 - format: date-time 7442 - type: string 7443 - metadata: 7444 - additionalProperties: 7445 - type: string 7446 - description: Metadata holds upstream information such as OCI annotations. 7447 - type: object 7448 - path: 7449 - description: |- 7450 - Path is the relative file path of the Artifact. It can be used to locate 7451 - the file in the root of the Artifact storage on the local file system of 7452 - the controller managing the Source. 7453 - type: string 7454 - revision: 7455 - description: |- 7456 - Revision is a human-readable identifier traceable in the origin source 7457 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7458 - type: string 7459 - size: 7460 - description: Size is the number of bytes in the file. 7461 - format: int64 7462 - type: integer 7463 - url: 7464 - description: |- 7465 - URL is the HTTP address of the Artifact as exposed by the controller 7466 - managing the Source. It can be used to retrieve the Artifact for 7467 - consumption, e.g. by another controller applying the Artifact contents. 7468 - type: string 7469 - required: 7470 - - lastUpdateTime 7471 - - path 7472 - - revision 7473 - - url 7474 - type: object 7475 - conditions: 7476 - description: Conditions holds the conditions for the HelmRepository. 7477 - items: 7478 - description: "Condition contains details for one aspect of the current state of this API 7479 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 7480 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 7481 - the observations of a foo's current state.\n\t // Known .status.conditions.type 7482 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 7483 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 7484 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 7485 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 7486 - fields\n\t}" 7487 - properties: 7488 - lastTransitionTime: 7489 - description: |- 7490 - lastTransitionTime is the last time the condition transitioned from one status to another. 7491 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7492 - format: date-time 7493 - type: string 7494 - message: 7495 - description: |- 7496 - message is a human readable message indicating details about the transition. 7497 - This may be an empty string. 7498 - maxLength: 32768 7499 - type: string 7500 - observedGeneration: 7501 - description: |- 7502 - observedGeneration represents the .metadata.generation that the condition was set based upon. 7503 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7504 - with respect to the current state of the instance. 7505 - format: int64 7506 - minimum: 0 7507 - type: integer 7508 - reason: 7509 - description: |- 7510 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 7511 - Producers of specific condition types may define expected values and meanings for this field, 7512 - and whether the values are considered a guaranteed API. 7513 - The value should be a CamelCase string. 7514 - This field may not be empty. 7515 - maxLength: 1024 7516 - minLength: 1 7517 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7518 - type: string 7519 - status: 7520 - description: status of the condition, one of True, False, Unknown. 7521 - enum: 7522 - - "True" 7523 - - "False" 7524 - - Unknown 7525 - type: string 7526 - type: 7527 - description: |- 7528 - type of condition in CamelCase or in foo.example.com/CamelCase. 7529 - --- 7530 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 7531 - useful (see .node.status.conditions), the ability to deconflict is important. 7532 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 7533 - maxLength: 316 7534 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7535 - type: string 7536 - required: 7537 - - lastTransitionTime 7538 - - message 7539 - - reason 7540 - - status 7541 - - type 7542 - type: object 7543 - type: array 7544 - lastHandledReconcileAt: 7545 - description: |- 7546 - LastHandledReconcileAt holds the value of the most recent 7547 - reconcile request value, so a change of the annotation value 7548 - can be detected. 7549 - type: string 7550 - observedGeneration: 7551 - description: |- 7552 - ObservedGeneration is the last observed generation of the HelmRepository 7553 - object. 7554 - format: int64 7555 - type: integer 7556 - url: 7557 - description: |- 7558 - URL is the dynamic fetch link for the latest Artifact. 7559 - It is provided on a "best effort" basis, and using the precise 7560 - HelmRepositoryStatus.Artifact data is recommended. 7561 - type: string 7562 - type: object 7563 + name: 7564 + description: Name of the referent. 7565 + type: string 7566 + required: 7567 + - name 7568 type: object 7569 - served: true 7570 - storage: false 7571 - subresources: 7572 - status: {} 7573 ---- 7574 -apiVersion: apiextensions.k8s.io/v1 7575 -kind: CustomResourceDefinition 7576 -metadata: 7577 - annotations: 7578 - controller-gen.kubebuilder.io/version: v0.15.0 7579 - labels: 7580 - app.kubernetes.io/component: source-controller 7581 - app.kubernetes.io/instance: flux-system 7582 - app.kubernetes.io/part-of: flux 7583 - app.kubernetes.io/version: v2.3.0 7584 - name: ocirepositories.source.toolkit.fluxcd.io 7585 -spec: 7586 - group: source.toolkit.fluxcd.io 7587 - names: 7588 - kind: OCIRepository 7589 - listKind: OCIRepositoryList 7590 - plural: ocirepositories 7591 - shortNames: 7592 - - ocirepo 7593 - singular: ocirepository 7594 - scope: Namespaced 7595 - versions: 7596 - - additionalPrinterColumns: 7597 - - jsonPath: .spec.url 7598 - name: URL 7599 - type: string 7600 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 7601 - name: Ready 7602 - type: string 7603 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 7604 - name: Status 7605 - type: string 7606 - - jsonPath: .metadata.creationTimestamp 7607 - name: Age 7608 - type: date 7609 - name: v1beta2 7610 - schema: 7611 - openAPIV3Schema: 7612 - description: OCIRepository is the Schema for the ocirepositories API 7613 + suspend: 7614 + description: |- 7615 + Suspend tells the controller to suspend the reconciliation of this 7616 + HelmRepository. 7617 + type: boolean 7618 + timeout: 7619 + description: |- 7620 + Timeout is used for the index fetch operation for an HTTPS helm repository, 7621 + and for remote OCI Repository operations like pulling for an OCI helm 7622 + chart by the associated HelmChart. 7623 + Its default value is 60s. 7624 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7625 + type: string 7626 + type: 7627 + description: |- 7628 + Type of the HelmRepository. 7629 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 7630 + enum: 7631 + - default 7632 + - oci 7633 + type: string 7634 + url: 7635 + description: |- 7636 + URL of the Helm repository, a valid URL contains at least a protocol and 7637 + host. 7638 + pattern: ^(http|https|oci)://.*$ 7639 + type: string 7640 + required: 7641 + - url 7642 + type: object 7643 + status: 7644 + default: 7645 + observedGeneration: -1 7646 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 7647 + properties: 7648 + artifact: 7649 + description: Artifact represents the last successful HelmRepository 7650 + reconciliation. 7651 properties: 7652 - apiVersion: 7653 - description: |- 7654 - APIVersion defines the versioned schema of this representation of an object. 7655 - Servers should convert recognized schemas to the latest internal value, and 7656 - may reject unrecognized values. 7657 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 7658 - type: string 7659 - kind: 7660 - description: |- 7661 - Kind is a string value representing the REST resource this object represents. 7662 - Servers may infer this from the endpoint the client submits requests to. 7663 - Cannot be updated. 7664 - In CamelCase. 7665 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 7666 - type: string 7667 - metadata: 7668 - type: object 7669 - spec: 7670 - description: OCIRepositorySpec defines the desired state of OCIRepository 7671 - properties: 7672 - certSecretRef: 7673 - description: |- 7674 - CertSecretRef can be given the name of a Secret containing 7675 - either or both of 7676 - 7677 - 7678 - - a PEM-encoded client certificate (`tls.crt`) and private 7679 - key (`tls.key`); 7680 - - a PEM-encoded CA certificate (`ca.crt`) 7681 - 7682 - 7683 - and whichever are supplied, will be used for connecting to the 7684 - registry. The client cert and key are useful if you are 7685 - authenticating with a certificate; the CA cert is useful if 7686 - you are using a self-signed server certificate. The Secret must 7687 - be of type `Opaque` or `kubernetes.io/tls`. 7688 - 7689 - 7690 - Note: Support for the `caFile`, `certFile` and `keyFile` keys have 7691 - been deprecated. 7692 - properties: 7693 - name: 7694 - description: Name of the referent. 7695 - type: string 7696 - required: 7697 - - name 7698 - type: object 7699 - ignore: 7700 - description: |- 7701 - Ignore overrides the set of excluded patterns in the .sourceignore format 7702 - (which is the same as .gitignore). If not provided, a default will be used, 7703 - consult the documentation for your version to find out what those are. 7704 - type: string 7705 - insecure: 7706 - description: Insecure allows connecting to a non-TLS HTTP container registry. 7707 - type: boolean 7708 - interval: 7709 - description: |- 7710 - Interval at which the OCIRepository URL is checked for updates. 7711 - This interval is approximate and may be subject to jitter to ensure 7712 - efficient use of resources. 7713 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7714 - type: string 7715 - layerSelector: 7716 - description: |- 7717 - LayerSelector specifies which layer should be extracted from the OCI artifact. 7718 - When not specified, the first layer found in the artifact is selected. 7719 - properties: 7720 - mediaType: 7721 - description: |- 7722 - MediaType specifies the OCI media type of the layer 7723 - which should be extracted from the OCI Artifact. The 7724 - first layer matching this type is selected. 7725 - type: string 7726 - operation: 7727 - description: |- 7728 - Operation specifies how the selected layer should be processed. 7729 - By default, the layer compressed content is extracted to storage. 7730 - When the operation is set to 'copy', the layer compressed content 7731 - is persisted to storage as it is. 7732 - enum: 7733 - - extract 7734 - - copy 7735 - type: string 7736 - type: object 7737 - provider: 7738 - default: generic 7739 - description: |- 7740 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 7741 - When not specified, defaults to 'generic'. 7742 - enum: 7743 - - generic 7744 - - aws 7745 - - azure 7746 - - gcp 7747 - type: string 7748 - ref: 7749 - description: |- 7750 - The OCI reference to pull and monitor for changes, 7751 - defaults to the latest tag. 7752 - properties: 7753 - digest: 7754 - description: |- 7755 - Digest is the image digest to pull, takes precedence over SemVer. 7756 - The value should be in the format 'sha256:<HASH>'. 7757 - type: string 7758 - semver: 7759 - description: |- 7760 - SemVer is the range of tags to pull selecting the latest within 7761 - the range, takes precedence over Tag. 7762 - type: string 7763 - semverFilter: 7764 - description: SemverFilter is a regex pattern to filter the tags within the SemVer 7765 - range. 7766 - type: string 7767 - tag: 7768 - description: Tag is the image tag to pull, defaults to latest. 7769 - type: string 7770 - type: object 7771 - secretRef: 7772 - description: |- 7773 - SecretRef contains the secret name containing the registry login 7774 - credentials to resolve image metadata. 7775 - The secret must be of type kubernetes.io/dockerconfigjson. 7776 - properties: 7777 - name: 7778 - description: Name of the referent. 7779 - type: string 7780 - required: 7781 - - name 7782 - type: object 7783 - serviceAccountName: 7784 - description: |- 7785 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 7786 - the image pull if the service account has attached pull secrets. For more information: 7787 - https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 7788 - type: string 7789 - suspend: 7790 - description: This flag tells the controller to suspend the reconciliation of this source. 7791 - type: boolean 7792 - timeout: 7793 - default: 60s 7794 - description: The timeout for remote OCI Repository operations like pulling, defaults to 60s. 7795 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 7796 - type: string 7797 - url: 7798 - description: |- 7799 - URL is a reference to an OCI artifact repository hosted 7800 - on a remote container registry. 7801 - pattern: ^oci://.*$ 7802 - type: string 7803 - verify: 7804 - description: |- 7805 - Verify contains the secret name containing the trusted public keys 7806 - used to verify the signature and specifies which provider to use to check 7807 - whether OCI image is authentic. 7808 - properties: 7809 - matchOIDCIdentity: 7810 - description: |- 7811 - MatchOIDCIdentity specifies the identity matching criteria to use 7812 - while verifying an OCI artifact which was signed using Cosign keyless 7813 - signing. The artifact's identity is deemed to be verified if any of the 7814 - specified matchers match against the identity. 7815 - items: 7816 - description: |- 7817 - OIDCIdentityMatch specifies options for verifying the certificate identity, 7818 - i.e. the issuer and the subject of the certificate. 7819 - properties: 7820 - issuer: 7821 - description: |- 7822 - Issuer specifies the regex pattern to match against to verify 7823 - the OIDC issuer in the Fulcio certificate. The pattern must be a 7824 - valid Go regular expression. 7825 - type: string 7826 - subject: 7827 - description: |- 7828 - Subject specifies the regex pattern to match against to verify 7829 - the identity subject in the Fulcio certificate. The pattern must 7830 - be a valid Go regular expression. 7831 - type: string 7832 - required: 7833 - - issuer 7834 - - subject 7835 - type: object 7836 - type: array 7837 - provider: 7838 - default: cosign 7839 - description: Provider specifies the technology used to sign the OCI Artifact. 7840 - enum: 7841 - - cosign 7842 - - notation 7843 - type: string 7844 - secretRef: 7845 - description: |- 7846 - SecretRef specifies the Kubernetes Secret containing the 7847 - trusted public keys. 7848 - properties: 7849 - name: 7850 - description: Name of the referent. 7851 - type: string 7852 - required: 7853 - - name 7854 - type: object 7855 - required: 7856 - - provider 7857 - type: object 7858 - required: 7859 - - interval 7860 - - url 7861 - type: object 7862 + digest: 7863 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7864 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7865 + type: string 7866 + lastUpdateTime: 7867 + description: |- 7868 + LastUpdateTime is the timestamp corresponding to the last update of the 7869 + Artifact. 7870 + format: date-time 7871 + type: string 7872 + metadata: 7873 + additionalProperties: 7874 + type: string 7875 + description: Metadata holds upstream information such as OCI annotations. 7876 + type: object 7877 + path: 7878 + description: |- 7879 + Path is the relative file path of the Artifact. It can be used to locate 7880 + the file in the root of the Artifact storage on the local file system of 7881 + the controller managing the Source. 7882 + type: string 7883 + revision: 7884 + description: |- 7885 + Revision is a human-readable identifier traceable in the origin source 7886 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7887 + type: string 7888 + size: 7889 + description: Size is the number of bytes in the file. 7890 + format: int64 7891 + type: integer 7892 + url: 7893 + description: |- 7894 + URL is the HTTP address of the Artifact as exposed by the controller 7895 + managing the Source. It can be used to retrieve the Artifact for 7896 + consumption, e.g. by another controller applying the Artifact contents. 7897 + type: string 7898 + required: 7899 + - lastUpdateTime 7900 + - path 7901 + - revision 7902 + - url 7903 + type: object 7904 + conditions: 7905 + description: Conditions holds the conditions for the HelmRepository. 7906 + items: 7907 + description: Condition contains details for one aspect of the current 7908 + state of this API Resource. 7909 + properties: 7910 + lastTransitionTime: 7911 + description: |- 7912 + lastTransitionTime is the last time the condition transitioned from one status to another. 7913 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7914 + format: date-time 7915 + type: string 7916 + message: 7917 + description: |- 7918 + message is a human readable message indicating details about the transition. 7919 + This may be an empty string. 7920 + maxLength: 32768 7921 + type: string 7922 + observedGeneration: 7923 + description: |- 7924 + observedGeneration represents the .metadata.generation that the condition was set based upon. 7925 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7926 + with respect to the current state of the instance. 7927 + format: int64 7928 + minimum: 0 7929 + type: integer 7930 + reason: 7931 + description: |- 7932 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 7933 + Producers of specific condition types may define expected values and meanings for this field, 7934 + and whether the values are considered a guaranteed API. 7935 + The value should be a CamelCase string. 7936 + This field may not be empty. 7937 + maxLength: 1024 7938 + minLength: 1 7939 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7940 + type: string 7941 status: 7942 - default: 7943 - observedGeneration: -1 7944 - description: OCIRepositoryStatus defines the observed state of OCIRepository 7945 - properties: 7946 - artifact: 7947 - description: Artifact represents the output of the last successful OCI Repository sync. 7948 - properties: 7949 - digest: 7950 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 7951 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 7952 - type: string 7953 - lastUpdateTime: 7954 - description: |- 7955 - LastUpdateTime is the timestamp corresponding to the last update of the 7956 - Artifact. 7957 - format: date-time 7958 - type: string 7959 - metadata: 7960 - additionalProperties: 7961 - type: string 7962 - description: Metadata holds upstream information such as OCI annotations. 7963 - type: object 7964 - path: 7965 - description: |- 7966 - Path is the relative file path of the Artifact. It can be used to locate 7967 - the file in the root of the Artifact storage on the local file system of 7968 - the controller managing the Source. 7969 - type: string 7970 - revision: 7971 - description: |- 7972 - Revision is a human-readable identifier traceable in the origin source 7973 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 7974 - type: string 7975 - size: 7976 - description: Size is the number of bytes in the file. 7977 - format: int64 7978 - type: integer 7979 - url: 7980 - description: |- 7981 - URL is the HTTP address of the Artifact as exposed by the controller 7982 - managing the Source. It can be used to retrieve the Artifact for 7983 - consumption, e.g. by another controller applying the Artifact contents. 7984 - type: string 7985 - required: 7986 - - lastUpdateTime 7987 - - path 7988 - - revision 7989 - - url 7990 - type: object 7991 - conditions: 7992 - description: Conditions holds the conditions for the OCIRepository. 7993 - items: 7994 - description: "Condition contains details for one aspect of the current state of this API 7995 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 7996 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 7997 - the observations of a foo's current state.\n\t // Known .status.conditions.type 7998 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 7999 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 8000 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 8001 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 8002 - fields\n\t}" 8003 - properties: 8004 - lastTransitionTime: 8005 - description: |- 8006 - lastTransitionTime is the last time the condition transitioned from one status to another. 8007 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8008 - format: date-time 8009 - type: string 8010 - message: 8011 - description: |- 8012 - message is a human readable message indicating details about the transition. 8013 - This may be an empty string. 8014 - maxLength: 32768 8015 - type: string 8016 - observedGeneration: 8017 - description: |- 8018 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8019 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8020 - with respect to the current state of the instance. 8021 - format: int64 8022 - minimum: 0 8023 - type: integer 8024 - reason: 8025 - description: |- 8026 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8027 - Producers of specific condition types may define expected values and meanings for this field, 8028 - and whether the values are considered a guaranteed API. 8029 - The value should be a CamelCase string. 8030 - This field may not be empty. 8031 - maxLength: 1024 8032 - minLength: 1 8033 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8034 - type: string 8035 - status: 8036 - description: status of the condition, one of True, False, Unknown. 8037 - enum: 8038 - - "True" 8039 - - "False" 8040 - - Unknown 8041 - type: string 8042 - type: 8043 - description: |- 8044 - type of condition in CamelCase or in foo.example.com/CamelCase. 8045 - --- 8046 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 8047 - useful (see .node.status.conditions), the ability to deconflict is important. 8048 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 8049 - maxLength: 316 8050 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8051 - type: string 8052 - required: 8053 - - lastTransitionTime 8054 - - message 8055 - - reason 8056 - - status 8057 - - type 8058 - type: object 8059 - type: array 8060 - contentConfigChecksum: 8061 - description: |- 8062 - ContentConfigChecksum is a checksum of all the configurations related to 8063 - the content of the source artifact: 8064 - - .spec.ignore 8065 - - .spec.layerSelector 8066 - observed in .status.observedGeneration version of the object. This can 8067 - be used to determine if the content configuration has changed and the 8068 - artifact needs to be rebuilt. 8069 - It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 8070 - 8071 - 8072 - Deprecated: Replaced with explicit fields for observed artifact content 8073 - config in the status. 8074 - type: string 8075 - lastHandledReconcileAt: 8076 - description: |- 8077 - LastHandledReconcileAt holds the value of the most recent 8078 - reconcile request value, so a change of the annotation value 8079 - can be detected. 8080 - type: string 8081 - observedGeneration: 8082 - description: ObservedGeneration is the last observed generation. 8083 - format: int64 8084 - type: integer 8085 - observedIgnore: 8086 - description: |- 8087 - ObservedIgnore is the observed exclusion patterns used for constructing 8088 - the source artifact. 8089 - type: string 8090 - observedLayerSelector: 8091 - description: |- 8092 - ObservedLayerSelector is the observed layer selector used for constructing 8093 - the source artifact. 8094 - properties: 8095 - mediaType: 8096 - description: |- 8097 - MediaType specifies the OCI media type of the layer 8098 - which should be extracted from the OCI Artifact. The 8099 - first layer matching this type is selected. 8100 - type: string 8101 - operation: 8102 - description: |- 8103 - Operation specifies how the selected layer should be processed. 8104 - By default, the layer compressed content is extracted to storage. 8105 - When the operation is set to 'copy', the layer compressed content 8106 - is persisted to storage as it is. 8107 - enum: 8108 - - extract 8109 - - copy 8110 - type: string 8111 - type: object 8112 - url: 8113 - description: URL is the download link for the artifact output of the last OCI Repository sync. 8114 - type: string 8115 - type: object 8116 + description: status of the condition, one of True, False, Unknown. 8117 + enum: 8118 + - "True" 8119 + - "False" 8120 + - Unknown 8121 + type: string 8122 + type: 8123 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 8124 + maxLength: 316 8125 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8126 + type: string 8127 + required: 8128 + - lastTransitionTime 8129 + - message 8130 + - reason 8131 + - status 8132 + - type 8133 + type: object 8134 + type: array 8135 + lastHandledReconcileAt: 8136 + description: |- 8137 + LastHandledReconcileAt holds the value of the most recent 8138 + reconcile request value, so a change of the annotation value 8139 + can be detected. 8140 + type: string 8141 + observedGeneration: 8142 + description: |- 8143 + ObservedGeneration is the last observed generation of the HelmRepository 8144 + object. 8145 + format: int64 8146 + type: integer 8147 + url: 8148 + description: |- 8149 + URL is the dynamic fetch link for the latest Artifact. 8150 + It is provided on a "best effort" basis, and using the precise 8151 + HelmRepositoryStatus.Artifact data is recommended. 8152 + type: string 8153 + type: object 8154 + type: object 8155 + served: true 8156 + storage: true 8157 + subresources: 8158 + status: {} 8159 + - additionalPrinterColumns: 8160 + - jsonPath: .spec.url 8161 + name: URL 8162 + type: string 8163 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 8164 + name: Ready 8165 + type: string 8166 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 8167 + name: Status 8168 + type: string 8169 + - jsonPath: .metadata.creationTimestamp 8170 + name: Age 8171 + type: date 8172 + deprecated: true 8173 + deprecationWarning: v1beta1 HelmRepository is deprecated, upgrade to v1 8174 + name: v1beta1 8175 + schema: 8176 + openAPIV3Schema: 8177 + description: HelmRepository is the Schema for the helmrepositories API 8178 + properties: 8179 + apiVersion: 8180 + description: |- 8181 + APIVersion defines the versioned schema of this representation of an object. 8182 + Servers should convert recognized schemas to the latest internal value, and 8183 + may reject unrecognized values. 8184 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 8185 + type: string 8186 + kind: 8187 + description: |- 8188 + Kind is a string value representing the REST resource this object represents. 8189 + Servers may infer this from the endpoint the client submits requests to. 8190 + Cannot be updated. 8191 + In CamelCase. 8192 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 8193 + type: string 8194 + metadata: 8195 + type: object 8196 + spec: 8197 + description: HelmRepositorySpec defines the reference to a Helm repository. 8198 + properties: 8199 + accessFrom: 8200 + description: AccessFrom defines an Access Control List for allowing 8201 + cross-namespace references to this object. 8202 + properties: 8203 + namespaceSelectors: 8204 + description: |- 8205 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 8206 + Items in this list are evaluated using a logical OR operation. 8207 + items: 8208 + description: |- 8209 + NamespaceSelector selects the namespaces to which this ACL applies. 8210 + An empty map of MatchLabels matches all namespaces in a cluster. 8211 + properties: 8212 + matchLabels: 8213 + additionalProperties: 8214 + type: string 8215 + description: |- 8216 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 8217 + map is equivalent to an element of matchExpressions, whose key field is "key", the 8218 + operator is "In", and the values array contains only "value". The requirements are ANDed. 8219 + type: object 8220 + type: object 8221 + type: array 8222 + required: 8223 + - namespaceSelectors 8224 type: object 8225 - served: true 8226 - storage: true 8227 - subresources: 8228 - status: {} 8229 ---- 8230 -apiVersion: v1 8231 -kind: ServiceAccount 8232 -metadata: 8233 - labels: 8234 - app.kubernetes.io/component: source-controller 8235 - app.kubernetes.io/instance: flux-system 8236 - app.kubernetes.io/part-of: flux 8237 - app.kubernetes.io/version: v2.3.0 8238 - name: source-controller 8239 - namespace: flux-system 8240 ---- 8241 -apiVersion: v1 8242 -kind: Service 8243 -metadata: 8244 - labels: 8245 - app.kubernetes.io/component: source-controller 8246 - app.kubernetes.io/instance: flux-system 8247 - app.kubernetes.io/part-of: flux 8248 - app.kubernetes.io/version: v2.3.0 8249 - control-plane: controller 8250 - name: source-controller 8251 - namespace: flux-system 8252 -spec: 8253 - ports: 8254 - - name: http 8255 - port: 80 8256 - protocol: TCP 8257 - targetPort: http 8258 - selector: 8259 - app: source-controller 8260 - type: ClusterIP 8261 ---- 8262 -apiVersion: apps/v1 8263 -kind: Deployment 8264 -metadata: 8265 - labels: 8266 - app.kubernetes.io/component: source-controller 8267 - app.kubernetes.io/instance: flux-system 8268 - app.kubernetes.io/part-of: flux 8269 - app.kubernetes.io/version: v2.3.0 8270 - control-plane: controller 8271 - name: source-controller 8272 - namespace: flux-system 8273 -spec: 8274 - replicas: 1 8275 - selector: 8276 - matchLabels: 8277 - app: source-controller 8278 - strategy: 8279 - type: Recreate 8280 - template: 8281 - metadata: 8282 - annotations: 8283 - prometheus.io/port: "8080" 8284 - prometheus.io/scrape: "true" 8285 - labels: 8286 - app: source-controller 8287 - spec: 8288 - containers: 8289 - - args: 8290 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 8291 - - --watch-all-namespaces=true 8292 - - --log-level=info 8293 - - --log-encoding=json 8294 - - --enable-leader-election 8295 - - --storage-path=/data 8296 - - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 8297 - env: 8298 - - name: RUNTIME_NAMESPACE 8299 - valueFrom: 8300 - fieldRef: 8301 - fieldPath: metadata.namespace 8302 - - name: TUF_ROOT 8303 - value: /tmp/.sigstore 8304 - - name: GOMAXPROCS 8305 - valueFrom: 8306 - resourceFieldRef: 8307 - containerName: manager 8308 - resource: limits.cpu 8309 - - name: GOMEMLIMIT 8310 - valueFrom: 8311 - resourceFieldRef: 8312 - containerName: manager 8313 - resource: limits.memory 8314 - image: ghcr.io/fluxcd/source-controller:v1.3.0 8315 - imagePullPolicy: IfNotPresent 8316 - livenessProbe: 8317 - httpGet: 8318 - path: /healthz 8319 - port: healthz 8320 - name: manager 8321 - ports: 8322 - - containerPort: 9090 8323 - name: http 8324 - protocol: TCP 8325 - - containerPort: 8080 8326 - name: http-prom 8327 - protocol: TCP 8328 - - containerPort: 9440 8329 - name: healthz 8330 - protocol: TCP 8331 - readinessProbe: 8332 - httpGet: 8333 - path: / 8334 - port: http 8335 - resources: 8336 - limits: 8337 - cpu: 1000m 8338 - memory: 1Gi 8339 - requests: 8340 - cpu: 50m 8341 - memory: 64Mi 8342 - securityContext: 8343 - allowPrivilegeEscalation: false 8344 - capabilities: 8345 - drop: 8346 - - ALL 8347 - readOnlyRootFilesystem: true 8348 - runAsNonRoot: true 8349 - seccompProfile: 8350 - type: RuntimeDefault 8351 - volumeMounts: 8352 - - mountPath: /data 8353 - name: data 8354 - - mountPath: /tmp 8355 - name: tmp 8356 - nodeSelector: 8357 - kubernetes.io/os: linux 8358 - priorityClassName: system-cluster-critical 8359 - securityContext: 8360 - fsGroup: 1337 8361 - serviceAccountName: source-controller 8362 - terminationGracePeriodSeconds: 10 8363 - volumes: 8364 - - emptyDir: {} 8365 - name: data 8366 - - emptyDir: {} 8367 - name: tmp 8368 ---- 8369 -apiVersion: apiextensions.k8s.io/v1 8370 -kind: CustomResourceDefinition 8371 -metadata: 8372 - annotations: 8373 - controller-gen.kubebuilder.io/version: v0.15.0 8374 - labels: 8375 - app.kubernetes.io/component: kustomize-controller 8376 - app.kubernetes.io/instance: flux-system 8377 - app.kubernetes.io/part-of: flux 8378 - app.kubernetes.io/version: v2.3.0 8379 - name: kustomizations.kustomize.toolkit.fluxcd.io 8380 -spec: 8381 - group: kustomize.toolkit.fluxcd.io 8382 - names: 8383 - kind: Kustomization 8384 - listKind: KustomizationList 8385 - plural: kustomizations 8386 - shortNames: 8387 - - ks 8388 - singular: kustomization 8389 - scope: Namespaced 8390 - versions: 8391 - - additionalPrinterColumns: 8392 - - jsonPath: .metadata.creationTimestamp 8393 - name: Age 8394 - type: date 8395 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 8396 - name: Ready 8397 - type: string 8398 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 8399 - name: Status 8400 - type: string 8401 - name: v1 8402 - schema: 8403 - openAPIV3Schema: 8404 - description: Kustomization is the Schema for the kustomizations API. 8405 + interval: 8406 + description: The interval at which to check the upstream for updates. 8407 + type: string 8408 + passCredentials: 8409 + description: |- 8410 + PassCredentials allows the credentials from the SecretRef to be passed on to 8411 + a host that does not match the host as defined in URL. 8412 + This may be required if the host of the advertised chart URLs in the index 8413 + differ from the defined URL. 8414 + Enabling this should be done with caution, as it can potentially result in 8415 + credentials getting stolen in a MITM-attack. 8416 + type: boolean 8417 + secretRef: 8418 + description: |- 8419 + The name of the secret containing authentication credentials for the Helm 8420 + repository. 8421 + For HTTP/S basic auth the secret must contain username and 8422 + password fields. 8423 + For TLS the secret must contain a certFile and keyFile, and/or 8424 + caFile fields. 8425 properties: 8426 - apiVersion: 8427 - description: |- 8428 - APIVersion defines the versioned schema of this representation of an object. 8429 - Servers should convert recognized schemas to the latest internal value, and 8430 - may reject unrecognized values. 8431 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 8432 - type: string 8433 - kind: 8434 - description: |- 8435 - Kind is a string value representing the REST resource this object represents. 8436 - Servers may infer this from the endpoint the client submits requests to. 8437 - Cannot be updated. 8438 - In CamelCase. 8439 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 8440 - type: string 8441 - metadata: 8442 - type: object 8443 - spec: 8444 - description: |- 8445 - KustomizationSpec defines the configuration to calculate the desired state 8446 - from a Source using Kustomize. 8447 - properties: 8448 - commonMetadata: 8449 - description: |- 8450 - CommonMetadata specifies the common labels and annotations that are 8451 - applied to all resources. Any existing label or annotation will be 8452 - overridden if its key matches a common one. 8453 - properties: 8454 - annotations: 8455 - additionalProperties: 8456 - type: string 8457 - description: Annotations to be added to the object's metadata. 8458 - type: object 8459 - labels: 8460 - additionalProperties: 8461 - type: string 8462 - description: Labels to be added to the object's metadata. 8463 - type: object 8464 - type: object 8465 - components: 8466 - description: Components specifies relative paths to specifications of other Components. 8467 - items: 8468 - type: string 8469 - type: array 8470 - decryption: 8471 - description: Decrypt Kubernetes secrets before applying them on the cluster. 8472 - properties: 8473 - provider: 8474 - description: Provider is the name of the decryption engine. 8475 - enum: 8476 - - sops 8477 - type: string 8478 - secretRef: 8479 - description: The secret name containing the private OpenPGP keys used for decryption. 8480 - properties: 8481 - name: 8482 - description: Name of the referent. 8483 - type: string 8484 - required: 8485 - - name 8486 - type: object 8487 - required: 8488 - - provider 8489 - type: object 8490 - dependsOn: 8491 - description: |- 8492 - DependsOn may contain a meta.NamespacedObjectReference slice 8493 - with references to Kustomization resources that must be ready before this 8494 - Kustomization can be reconciled. 8495 - items: 8496 - description: |- 8497 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 8498 - namespace. 8499 - properties: 8500 - name: 8501 - description: Name of the referent. 8502 - type: string 8503 - namespace: 8504 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 8505 - type: string 8506 - required: 8507 - - name 8508 - type: object 8509 - type: array 8510 - force: 8511 - default: false 8512 - description: |- 8513 - Force instructs the controller to recreate resources 8514 - when patching fails due to an immutable field change. 8515 - type: boolean 8516 - healthChecks: 8517 - description: A list of resources to be included in the health assessment. 8518 - items: 8519 - description: |- 8520 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 8521 - in any namespace. 8522 - properties: 8523 - apiVersion: 8524 - description: API version of the referent, if not specified the Kubernetes preferred 8525 - version will be used. 8526 - type: string 8527 - kind: 8528 - description: Kind of the referent. 8529 - type: string 8530 - name: 8531 - description: Name of the referent. 8532 - type: string 8533 - namespace: 8534 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 8535 - type: string 8536 - required: 8537 - - kind 8538 - - name 8539 - type: object 8540 - type: array 8541 - images: 8542 - description: |- 8543 - Images is a list of (image name, new name, new tag or digest) 8544 - for changing image names, tags or digests. This can also be achieved with a 8545 - patch, but this operator is simpler to specify. 8546 - items: 8547 - description: Image contains an image name, a new name, a new tag or digest, which will 8548 - replace the original name and tag. 8549 - properties: 8550 - digest: 8551 - description: |- 8552 - Digest is the value used to replace the original image tag. 8553 - If digest is present NewTag value is ignored. 8554 - type: string 8555 - name: 8556 - description: Name is a tag-less image name. 8557 - type: string 8558 - newName: 8559 - description: NewName is the value used to replace the original name. 8560 - type: string 8561 - newTag: 8562 - description: NewTag is the value used to replace the original tag. 8563 - type: string 8564 - required: 8565 - - name 8566 - type: object 8567 - type: array 8568 - interval: 8569 - description: |- 8570 - The interval at which to reconcile the Kustomization. 8571 - This interval is approximate and may be subject to jitter to ensure 8572 - efficient use of resources. 8573 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8574 - type: string 8575 - kubeConfig: 8576 - description: |- 8577 - The KubeConfig for reconciling the Kustomization on a remote cluster. 8578 - When used in combination with KustomizationSpec.ServiceAccountName, 8579 - forces the controller to act on behalf of that Service Account at the 8580 - target cluster. 8581 - If the --default-service-account flag is set, its value will be used as 8582 - a controller level fallback for when KustomizationSpec.ServiceAccountName 8583 - is empty. 8584 - properties: 8585 - secretRef: 8586 - description: |- 8587 - SecretRef holds the name of a secret that contains a key with 8588 - the kubeconfig file as the value. If no key is set, the key will default 8589 - to 'value'. 8590 - It is recommended that the kubeconfig is self-contained, and the secret 8591 - is regularly updated if credentials such as a cloud-access-token expire. 8592 - Cloud specific `cmd-path` auth helpers will not function without adding 8593 - binaries and credentials to the Pod that is responsible for reconciling 8594 - Kubernetes resources. 8595 - properties: 8596 - key: 8597 - description: Key in the Secret, when not specified an implementation-specific 8598 - default key is used. 8599 - type: string 8600 - name: 8601 - description: Name of the Secret. 8602 - type: string 8603 - required: 8604 - - name 8605 - type: object 8606 - required: 8607 - - secretRef 8608 - type: object 8609 - namePrefix: 8610 - description: NamePrefix will prefix the names of all managed resources. 8611 - maxLength: 200 8612 - minLength: 1 8613 - type: string 8614 - nameSuffix: 8615 - description: NameSuffix will suffix the names of all managed resources. 8616 - maxLength: 200 8617 - minLength: 1 8618 - type: string 8619 - patches: 8620 - description: |- 8621 - Strategic merge and JSON patches, defined as inline YAML objects, 8622 - capable of targeting objects based on kind, label and annotation selectors. 8623 - items: 8624 - description: |- 8625 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 8626 - be applied to. 8627 - properties: 8628 - patch: 8629 - description: |- 8630 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 8631 - an array of operation objects. 8632 - type: string 8633 - target: 8634 - description: Target points to the resources that the patch document should be 8635 - applied to. 8636 - properties: 8637 - annotationSelector: 8638 - description: |- 8639 - AnnotationSelector is a string that follows the label selection expression 8640 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8641 - It matches with the resource annotations. 8642 - type: string 8643 - group: 8644 - description: |- 8645 - Group is the API group to select resources from. 8646 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 8647 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8648 - type: string 8649 - kind: 8650 - description: |- 8651 - Kind of the API Group to select resources from. 8652 - Together with Group and Version it is capable of unambiguously 8653 - identifying and/or selecting resources. 8654 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8655 - type: string 8656 - labelSelector: 8657 - description: |- 8658 - LabelSelector is a string that follows the label selection expression 8659 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8660 - It matches with the resource labels. 8661 - type: string 8662 - name: 8663 - description: Name to match resources with. 8664 - type: string 8665 - namespace: 8666 - description: Namespace to select resources from. 8667 - type: string 8668 - version: 8669 - description: |- 8670 - Version of the API Group to select resources from. 8671 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 8672 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8673 - type: string 8674 - type: object 8675 - required: 8676 - - patch 8677 - type: object 8678 - type: array 8679 - path: 8680 - description: |- 8681 - Path to the directory containing the kustomization.yaml file, or the 8682 - set of plain YAMLs a kustomization.yaml should be generated for. 8683 - Defaults to 'None', which translates to the root path of the SourceRef. 8684 - type: string 8685 - postBuild: 8686 - description: |- 8687 - PostBuild describes which actions to perform on the YAML manifest 8688 - generated by building the kustomize overlay. 8689 - properties: 8690 - substitute: 8691 - additionalProperties: 8692 - type: string 8693 - description: |- 8694 - Substitute holds a map of key/value pairs. 8695 - The variables defined in your YAML manifests that match any of the keys 8696 - defined in the map will be substituted with the set value. 8697 - Includes support for bash string replacement functions 8698 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 8699 - type: object 8700 - substituteFrom: 8701 - description: |- 8702 - SubstituteFrom holds references to ConfigMaps and Secrets containing 8703 - the variables and their values to be substituted in the YAML manifests. 8704 - The ConfigMap and the Secret data keys represent the var names, and they 8705 - must match the vars declared in the manifests for the substitution to 8706 - happen. 8707 - items: 8708 - description: |- 8709 - SubstituteReference contains a reference to a resource containing 8710 - the variables name and value. 8711 - properties: 8712 - kind: 8713 - description: Kind of the values referent, valid values are ('Secret', 8714 - 'ConfigMap'). 8715 - enum: 8716 - - Secret 8717 - - ConfigMap 8718 - type: string 8719 - name: 8720 - description: |- 8721 - Name of the values referent. Should reside in the same namespace as the 8722 - referring resource. 8723 - maxLength: 253 8724 - minLength: 1 8725 - type: string 8726 - optional: 8727 - default: false 8728 - description: |- 8729 - Optional indicates whether the referenced resource must exist, or whether to 8730 - tolerate its absence. If true and the referenced resource is absent, proceed 8731 - as if the resource was present but empty, without any variables defined. 8732 - type: boolean 8733 - required: 8734 - - kind 8735 - - name 8736 - type: object 8737 - type: array 8738 - type: object 8739 - prune: 8740 - description: Prune enables garbage collection. 8741 - type: boolean 8742 - retryInterval: 8743 - description: |- 8744 - The interval at which to retry a previously failed reconciliation. 8745 - When not specified, the controller uses the KustomizationSpec.Interval 8746 - value to retry failures. 8747 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8748 - type: string 8749 - serviceAccountName: 8750 - description: |- 8751 - The name of the Kubernetes service account to impersonate 8752 - when reconciling this Kustomization. 8753 - type: string 8754 - sourceRef: 8755 - description: Reference of the source where the kustomization file is. 8756 - properties: 8757 - apiVersion: 8758 - description: API version of the referent. 8759 - type: string 8760 - kind: 8761 - description: Kind of the referent. 8762 - enum: 8763 - - OCIRepository 8764 - - GitRepository 8765 - - Bucket 8766 - type: string 8767 - name: 8768 - description: Name of the referent. 8769 - type: string 8770 - namespace: 8771 - description: |- 8772 - Namespace of the referent, defaults to the namespace of the Kubernetes 8773 - resource object that contains the reference. 8774 - type: string 8775 - required: 8776 - - kind 8777 - - name 8778 - type: object 8779 - suspend: 8780 - description: |- 8781 - This flag tells the controller to suspend subsequent kustomize executions, 8782 - it does not apply to already started executions. Defaults to false. 8783 - type: boolean 8784 - targetNamespace: 8785 - description: |- 8786 - TargetNamespace sets or overrides the namespace in the 8787 - kustomization.yaml file. 8788 - maxLength: 63 8789 - minLength: 1 8790 - type: string 8791 - timeout: 8792 - description: |- 8793 - Timeout for validation, apply and health checking operations. 8794 - Defaults to 'Interval' duration. 8795 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8796 - type: string 8797 - wait: 8798 - description: |- 8799 - Wait instructs the controller to check the health of all the reconciled 8800 - resources. When enabled, the HealthChecks are ignored. Defaults to false. 8801 - type: boolean 8802 - required: 8803 - - interval 8804 - - prune 8805 - - sourceRef 8806 - type: object 8807 - status: 8808 - default: 8809 - observedGeneration: -1 8810 - description: KustomizationStatus defines the observed state of a kustomization. 8811 - properties: 8812 - conditions: 8813 - items: 8814 - description: "Condition contains details for one aspect of the current state of this API 8815 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 8816 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 8817 - the observations of a foo's current state.\n\t // Known .status.conditions.type 8818 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 8819 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 8820 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 8821 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 8822 - fields\n\t}" 8823 - properties: 8824 - lastTransitionTime: 8825 - description: |- 8826 - lastTransitionTime is the last time the condition transitioned from one status to another. 8827 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8828 - format: date-time 8829 - type: string 8830 - message: 8831 - description: |- 8832 - message is a human readable message indicating details about the transition. 8833 - This may be an empty string. 8834 - maxLength: 32768 8835 - type: string 8836 - observedGeneration: 8837 - description: |- 8838 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8839 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8840 - with respect to the current state of the instance. 8841 - format: int64 8842 - minimum: 0 8843 - type: integer 8844 - reason: 8845 - description: |- 8846 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8847 - Producers of specific condition types may define expected values and meanings for this field, 8848 - and whether the values are considered a guaranteed API. 8849 - The value should be a CamelCase string. 8850 - This field may not be empty. 8851 - maxLength: 1024 8852 - minLength: 1 8853 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8854 - type: string 8855 - status: 8856 - description: status of the condition, one of True, False, Unknown. 8857 - enum: 8858 - - "True" 8859 - - "False" 8860 - - Unknown 8861 - type: string 8862 - type: 8863 - description: |- 8864 - type of condition in CamelCase or in foo.example.com/CamelCase. 8865 - --- 8866 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 8867 - useful (see .node.status.conditions), the ability to deconflict is important. 8868 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 8869 - maxLength: 316 8870 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8871 - type: string 8872 - required: 8873 - - lastTransitionTime 8874 - - message 8875 - - reason 8876 - - status 8877 - - type 8878 - type: object 8879 - type: array 8880 - inventory: 8881 - description: |- 8882 - Inventory contains the list of Kubernetes resource object references that 8883 - have been successfully applied. 8884 - properties: 8885 - entries: 8886 - description: Entries of Kubernetes resource object references. 8887 - items: 8888 - description: ResourceRef contains the information necessary to locate a resource 8889 - within a cluster. 8890 - properties: 8891 - id: 8892 - description: |- 8893 - ID is the string representation of the Kubernetes resource object's metadata, 8894 - in the format '<namespace>_<name>_<group>_<kind>'. 8895 - type: string 8896 - v: 8897 - description: Version is the API version of the Kubernetes resource object's 8898 - kind. 8899 - type: string 8900 - required: 8901 - - id 8902 - - v 8903 - type: object 8904 - type: array 8905 - required: 8906 - - entries 8907 - type: object 8908 - lastAppliedRevision: 8909 - description: |- 8910 - The last successfully applied revision. 8911 - Equals the Revision of the applied Artifact from the referenced Source. 8912 - type: string 8913 - lastAttemptedRevision: 8914 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 8915 - type: string 8916 - lastHandledReconcileAt: 8917 - description: |- 8918 - LastHandledReconcileAt holds the value of the most recent 8919 - reconcile request value, so a change of the annotation value 8920 - can be detected. 8921 - type: string 8922 - observedGeneration: 8923 - description: ObservedGeneration is the last reconciled generation. 8924 - format: int64 8925 - type: integer 8926 - type: object 8927 + name: 8928 + description: Name of the referent. 8929 + type: string 8930 + required: 8931 + - name 8932 type: object 8933 - served: true 8934 - storage: true 8935 - subresources: 8936 - status: {} 8937 - - additionalPrinterColumns: 8938 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 8939 - name: Ready 8940 - type: string 8941 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 8942 - name: Status 8943 - type: string 8944 - - jsonPath: .metadata.creationTimestamp 8945 - name: Age 8946 - type: date 8947 - deprecated: true 8948 - deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1 8949 - name: v1beta1 8950 - schema: 8951 - openAPIV3Schema: 8952 - description: Kustomization is the Schema for the kustomizations API. 8953 + suspend: 8954 + description: This flag tells the controller to suspend the reconciliation 8955 + of this source. 8956 + type: boolean 8957 + timeout: 8958 + default: 60s 8959 + description: The timeout of index downloading, defaults to 60s. 8960 + type: string 8961 + url: 8962 + description: The Helm repository URL, a valid URL contains at least 8963 + a protocol and host. 8964 + type: string 8965 + required: 8966 + - interval 8967 + - url 8968 + type: object 8969 + status: 8970 + default: 8971 + observedGeneration: -1 8972 + description: HelmRepositoryStatus defines the observed state of the HelmRepository. 8973 + properties: 8974 + artifact: 8975 + description: Artifact represents the output of the last successful 8976 + repository sync. 8977 properties: 8978 - apiVersion: 8979 - description: |- 8980 - APIVersion defines the versioned schema of this representation of an object. 8981 - Servers should convert recognized schemas to the latest internal value, and 8982 - may reject unrecognized values. 8983 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 8984 - type: string 8985 - kind: 8986 - description: |- 8987 - Kind is a string value representing the REST resource this object represents. 8988 - Servers may infer this from the endpoint the client submits requests to. 8989 - Cannot be updated. 8990 - In CamelCase. 8991 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 8992 - type: string 8993 - metadata: 8994 - type: object 8995 - spec: 8996 - description: KustomizationSpec defines the desired state of a kustomization. 8997 - properties: 8998 - decryption: 8999 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9000 - properties: 9001 - provider: 9002 - description: Provider is the name of the decryption engine. 9003 - enum: 9004 - - sops 9005 - type: string 9006 - secretRef: 9007 - description: The secret name containing the private OpenPGP keys used for decryption. 9008 - properties: 9009 - name: 9010 - description: Name of the referent. 9011 - type: string 9012 - required: 9013 - - name 9014 - type: object 9015 - required: 9016 - - provider 9017 - type: object 9018 - dependsOn: 9019 - description: |- 9020 - DependsOn may contain a meta.NamespacedObjectReference slice 9021 - with references to Kustomization resources that must be ready before this 9022 - Kustomization can be reconciled. 9023 - items: 9024 - description: |- 9025 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 9026 - namespace. 9027 - properties: 9028 - name: 9029 - description: Name of the referent. 9030 - type: string 9031 - namespace: 9032 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9033 - type: string 9034 - required: 9035 - - name 9036 - type: object 9037 - type: array 9038 - force: 9039 - default: false 9040 - description: |- 9041 - Force instructs the controller to recreate resources 9042 - when patching fails due to an immutable field change. 9043 - type: boolean 9044 - healthChecks: 9045 - description: A list of resources to be included in the health assessment. 9046 - items: 9047 - description: |- 9048 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9049 - in any namespace. 9050 - properties: 9051 - apiVersion: 9052 - description: API version of the referent, if not specified the Kubernetes preferred 9053 - version will be used. 9054 - type: string 9055 - kind: 9056 - description: Kind of the referent. 9057 - type: string 9058 - name: 9059 - description: Name of the referent. 9060 - type: string 9061 - namespace: 9062 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9063 - type: string 9064 - required: 9065 - - kind 9066 - - name 9067 - type: object 9068 - type: array 9069 - images: 9070 - description: |- 9071 - Images is a list of (image name, new name, new tag or digest) 9072 - for changing image names, tags or digests. This can also be achieved with a 9073 - patch, but this operator is simpler to specify. 9074 - items: 9075 - description: Image contains an image name, a new name, a new tag or digest, which will 9076 - replace the original name and tag. 9077 - properties: 9078 - digest: 9079 - description: |- 9080 - Digest is the value used to replace the original image tag. 9081 - If digest is present NewTag value is ignored. 9082 - type: string 9083 - name: 9084 - description: Name is a tag-less image name. 9085 - type: string 9086 - newName: 9087 - description: NewName is the value used to replace the original name. 9088 - type: string 9089 - newTag: 9090 - description: NewTag is the value used to replace the original tag. 9091 - type: string 9092 - required: 9093 - - name 9094 - type: object 9095 - type: array 9096 - interval: 9097 - description: The interval at which to reconcile the Kustomization. 9098 - type: string 9099 - kubeConfig: 9100 - description: |- 9101 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9102 - When specified, KubeConfig takes precedence over ServiceAccountName. 9103 - properties: 9104 - secretRef: 9105 - description: |- 9106 - SecretRef holds the name to a secret that contains a 'value' key with 9107 - the kubeconfig file as the value. It must be in the same namespace as 9108 - the Kustomization. 9109 - It is recommended that the kubeconfig is self-contained, and the secret 9110 - is regularly updated if credentials such as a cloud-access-token expire. 9111 - Cloud specific `cmd-path` auth helpers will not function without adding 9112 - binaries and credentials to the Pod that is responsible for reconciling 9113 - the Kustomization. 9114 - properties: 9115 - name: 9116 - description: Name of the referent. 9117 - type: string 9118 - required: 9119 - - name 9120 - type: object 9121 - type: object 9122 - patches: 9123 - description: |- 9124 - Strategic merge and JSON patches, defined as inline YAML objects, 9125 - capable of targeting objects based on kind, label and annotation selectors. 9126 - items: 9127 - description: |- 9128 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9129 - be applied to. 9130 - properties: 9131 - patch: 9132 - description: |- 9133 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9134 - an array of operation objects. 9135 - type: string 9136 - target: 9137 - description: Target points to the resources that the patch document should be 9138 - applied to. 9139 - properties: 9140 - annotationSelector: 9141 - description: |- 9142 - AnnotationSelector is a string that follows the label selection expression 9143 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9144 - It matches with the resource annotations. 9145 - type: string 9146 - group: 9147 - description: |- 9148 - Group is the API group to select resources from. 9149 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9150 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9151 - type: string 9152 - kind: 9153 - description: |- 9154 - Kind of the API Group to select resources from. 9155 - Together with Group and Version it is capable of unambiguously 9156 - identifying and/or selecting resources. 9157 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9158 - type: string 9159 - labelSelector: 9160 - description: |- 9161 - LabelSelector is a string that follows the label selection expression 9162 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9163 - It matches with the resource labels. 9164 - type: string 9165 - name: 9166 - description: Name to match resources with. 9167 - type: string 9168 - namespace: 9169 - description: Namespace to select resources from. 9170 - type: string 9171 - version: 9172 - description: |- 9173 - Version of the API Group to select resources from. 9174 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9175 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9176 - type: string 9177 - type: object 9178 - required: 9179 - - patch 9180 - type: object 9181 - type: array 9182 - patchesJson6902: 9183 - description: JSON 6902 patches, defined as inline YAML objects. 9184 - items: 9185 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 9186 - applied to. 9187 - properties: 9188 - patch: 9189 - description: Patch contains the JSON6902 patch document with an array of operation 9190 - objects. 9191 - items: 9192 - description: |- 9193 - JSON6902 is a JSON6902 operation object. 9194 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9195 - properties: 9196 - from: 9197 - description: |- 9198 - From contains a JSON-pointer value that references a location within the target document where the operation is 9199 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 9200 - type: string 9201 - op: 9202 - description: |- 9203 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 9204 - "test". 9205 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9206 - enum: 9207 - - test 9208 - - remove 9209 - - add 9210 - - replace 9211 - - move 9212 - - copy 9213 - type: string 9214 - path: 9215 - description: |- 9216 - Path contains the JSON-pointer value that references a location within the target document where the operation 9217 - is performed. The meaning of the value depends on the value of Op. 9218 - type: string 9219 - value: 9220 - description: |- 9221 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 9222 - account by all operations. 9223 - x-kubernetes-preserve-unknown-fields: true 9224 - required: 9225 - - op 9226 - - path 9227 - type: object 9228 - type: array 9229 - target: 9230 - description: Target points to the resources that the patch document should be 9231 - applied to. 9232 - properties: 9233 - annotationSelector: 9234 - description: |- 9235 - AnnotationSelector is a string that follows the label selection expression 9236 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9237 - It matches with the resource annotations. 9238 - type: string 9239 - group: 9240 - description: |- 9241 - Group is the API group to select resources from. 9242 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9243 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9244 - type: string 9245 - kind: 9246 - description: |- 9247 - Kind of the API Group to select resources from. 9248 - Together with Group and Version it is capable of unambiguously 9249 - identifying and/or selecting resources. 9250 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9251 - type: string 9252 - labelSelector: 9253 - description: |- 9254 - LabelSelector is a string that follows the label selection expression 9255 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9256 - It matches with the resource labels. 9257 - type: string 9258 - name: 9259 - description: Name to match resources with. 9260 - type: string 9261 - namespace: 9262 - description: Namespace to select resources from. 9263 - type: string 9264 - version: 9265 - description: |- 9266 - Version of the API Group to select resources from. 9267 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9268 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9269 - type: string 9270 - type: object 9271 - required: 9272 - - patch 9273 - - target 9274 - type: object 9275 - type: array 9276 - patchesStrategicMerge: 9277 - description: Strategic merge patches, defined as inline YAML objects. 9278 - items: 9279 - x-kubernetes-preserve-unknown-fields: true 9280 - type: array 9281 - path: 9282 - description: |- 9283 - Path to the directory containing the kustomization.yaml file, or the 9284 - set of plain YAMLs a kustomization.yaml should be generated for. 9285 - Defaults to 'None', which translates to the root path of the SourceRef. 9286 - type: string 9287 - postBuild: 9288 - description: |- 9289 - PostBuild describes which actions to perform on the YAML manifest 9290 - generated by building the kustomize overlay. 9291 - properties: 9292 - substitute: 9293 - additionalProperties: 9294 - type: string 9295 - description: |- 9296 - Substitute holds a map of key/value pairs. 9297 - The variables defined in your YAML manifests 9298 - that match any of the keys defined in the map 9299 - will be substituted with the set value. 9300 - Includes support for bash string replacement functions 9301 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 9302 - type: object 9303 - substituteFrom: 9304 - description: |- 9305 - SubstituteFrom holds references to ConfigMaps and Secrets containing 9306 - the variables and their values to be substituted in the YAML manifests. 9307 - The ConfigMap and the Secret data keys represent the var names and they 9308 - must match the vars declared in the manifests for the substitution to happen. 9309 - items: 9310 - description: |- 9311 - SubstituteReference contains a reference to a resource containing 9312 - the variables name and value. 9313 - properties: 9314 - kind: 9315 - description: Kind of the values referent, valid values are ('Secret', 9316 - 'ConfigMap'). 9317 - enum: 9318 - - Secret 9319 - - ConfigMap 9320 - type: string 9321 - name: 9322 - description: |- 9323 - Name of the values referent. Should reside in the same namespace as the 9324 - referring resource. 9325 - maxLength: 253 9326 - minLength: 1 9327 - type: string 9328 - required: 9329 - - kind 9330 - - name 9331 - type: object 9332 - type: array 9333 - type: object 9334 - prune: 9335 - description: Prune enables garbage collection. 9336 - type: boolean 9337 - retryInterval: 9338 - description: |- 9339 - The interval at which to retry a previously failed reconciliation. 9340 - When not specified, the controller uses the KustomizationSpec.Interval 9341 - value to retry failures. 9342 - type: string 9343 - serviceAccountName: 9344 - description: |- 9345 - The name of the Kubernetes service account to impersonate 9346 - when reconciling this Kustomization. 9347 - type: string 9348 - sourceRef: 9349 - description: Reference of the source where the kustomization file is. 9350 - properties: 9351 - apiVersion: 9352 - description: API version of the referent 9353 - type: string 9354 - kind: 9355 - description: Kind of the referent 9356 - enum: 9357 - - GitRepository 9358 - - Bucket 9359 - type: string 9360 - name: 9361 - description: Name of the referent 9362 - type: string 9363 - namespace: 9364 - description: Namespace of the referent, defaults to the Kustomization namespace 9365 - type: string 9366 - required: 9367 - - kind 9368 - - name 9369 - type: object 9370 - suspend: 9371 - description: |- 9372 - This flag tells the controller to suspend subsequent kustomize executions, 9373 - it does not apply to already started executions. Defaults to false. 9374 - type: boolean 9375 - targetNamespace: 9376 - description: |- 9377 - TargetNamespace sets or overrides the namespace in the 9378 - kustomization.yaml file. 9379 - maxLength: 63 9380 - minLength: 1 9381 - type: string 9382 - timeout: 9383 - description: |- 9384 - Timeout for validation, apply and health checking operations. 9385 - Defaults to 'Interval' duration. 9386 - type: string 9387 - validation: 9388 - description: |- 9389 - Validate the Kubernetes objects before applying them on the cluster. 9390 - The validation strategy can be 'client' (local dry-run), 'server' 9391 - (APIServer dry-run) or 'none'. 9392 - When 'Force' is 'true', validation will fallback to 'client' if set to 9393 - 'server' because server-side validation is not supported in this scenario. 9394 - enum: 9395 - - none 9396 - - client 9397 - - server 9398 - type: string 9399 - required: 9400 - - interval 9401 - - prune 9402 - - sourceRef 9403 - type: object 9404 + checksum: 9405 + description: Checksum is the SHA256 checksum of the artifact. 9406 + type: string 9407 + lastUpdateTime: 9408 + description: |- 9409 + LastUpdateTime is the timestamp corresponding to the last update of this 9410 + artifact. 9411 + format: date-time 9412 + type: string 9413 + path: 9414 + description: Path is the relative file path of this artifact. 9415 + type: string 9416 + revision: 9417 + description: |- 9418 + Revision is a human readable identifier traceable in the origin source 9419 + system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm 9420 + chart version, etc. 9421 + type: string 9422 + url: 9423 + description: URL is the HTTP address of this artifact. 9424 + type: string 9425 + required: 9426 + - lastUpdateTime 9427 + - path 9428 + - url 9429 + type: object 9430 + conditions: 9431 + description: Conditions holds the conditions for the HelmRepository. 9432 + items: 9433 + description: Condition contains details for one aspect of the current 9434 + state of this API Resource. 9435 + properties: 9436 + lastTransitionTime: 9437 + description: |- 9438 + lastTransitionTime is the last time the condition transitioned from one status to another. 9439 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9440 + format: date-time 9441 + type: string 9442 + message: 9443 + description: |- 9444 + message is a human readable message indicating details about the transition. 9445 + This may be an empty string. 9446 + maxLength: 32768 9447 + type: string 9448 + observedGeneration: 9449 + description: |- 9450 + observedGeneration represents the .metadata.generation that the condition was set based upon. 9451 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9452 + with respect to the current state of the instance. 9453 + format: int64 9454 + minimum: 0 9455 + type: integer 9456 + reason: 9457 + description: |- 9458 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 9459 + Producers of specific condition types may define expected values and meanings for this field, 9460 + and whether the values are considered a guaranteed API. 9461 + The value should be a CamelCase string. 9462 + This field may not be empty. 9463 + maxLength: 1024 9464 + minLength: 1 9465 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9466 + type: string 9467 status: 9468 - default: 9469 - observedGeneration: -1 9470 - description: KustomizationStatus defines the observed state of a kustomization. 9471 - properties: 9472 - conditions: 9473 - items: 9474 - description: "Condition contains details for one aspect of the current state of this API 9475 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 9476 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 9477 - the observations of a foo's current state.\n\t // Known .status.conditions.type 9478 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 9479 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 9480 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 9481 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 9482 - fields\n\t}" 9483 - properties: 9484 - lastTransitionTime: 9485 - description: |- 9486 - lastTransitionTime is the last time the condition transitioned from one status to another. 9487 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9488 - format: date-time 9489 - type: string 9490 - message: 9491 - description: |- 9492 - message is a human readable message indicating details about the transition. 9493 - This may be an empty string. 9494 - maxLength: 32768 9495 - type: string 9496 - observedGeneration: 9497 - description: |- 9498 - observedGeneration represents the .metadata.generation that the condition was set based upon. 9499 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9500 - with respect to the current state of the instance. 9501 - format: int64 9502 - minimum: 0 9503 - type: integer 9504 - reason: 9505 - description: |- 9506 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 9507 - Producers of specific condition types may define expected values and meanings for this field, 9508 - and whether the values are considered a guaranteed API. 9509 - The value should be a CamelCase string. 9510 - This field may not be empty. 9511 - maxLength: 1024 9512 - minLength: 1 9513 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9514 - type: string 9515 - status: 9516 - description: status of the condition, one of True, False, Unknown. 9517 - enum: 9518 - - "True" 9519 - - "False" 9520 - - Unknown 9521 - type: string 9522 - type: 9523 - description: |- 9524 - type of condition in CamelCase or in foo.example.com/CamelCase. 9525 - --- 9526 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 9527 - useful (see .node.status.conditions), the ability to deconflict is important. 9528 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 9529 - maxLength: 316 9530 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9531 - type: string 9532 - required: 9533 - - lastTransitionTime 9534 - - message 9535 - - reason 9536 - - status 9537 - - type 9538 - type: object 9539 - type: array 9540 - lastAppliedRevision: 9541 - description: |- 9542 - The last successfully applied revision. 9543 - The revision format for Git sources is <branch|tag>/<commit-sha>. 9544 - type: string 9545 - lastAttemptedRevision: 9546 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 9547 - type: string 9548 - lastHandledReconcileAt: 9549 - description: |- 9550 - LastHandledReconcileAt holds the value of the most recent 9551 - reconcile request value, so a change of the annotation value 9552 - can be detected. 9553 - type: string 9554 - observedGeneration: 9555 - description: ObservedGeneration is the last reconciled generation. 9556 - format: int64 9557 - type: integer 9558 - snapshot: 9559 - description: The last successfully applied revision metadata. 9560 - properties: 9561 - checksum: 9562 - description: The manifests sha1 checksum. 9563 - type: string 9564 - entries: 9565 - description: A list of Kubernetes kinds grouped by namespace. 9566 - items: 9567 - description: |- 9568 - Snapshot holds the metadata of namespaced 9569 - Kubernetes objects 9570 - properties: 9571 - kinds: 9572 - additionalProperties: 9573 - type: string 9574 - description: The list of Kubernetes kinds. 9575 - type: object 9576 - namespace: 9577 - description: The namespace of this entry. 9578 - type: string 9579 - required: 9580 - - kinds 9581 - type: object 9582 - type: array 9583 - required: 9584 - - checksum 9585 - - entries 9586 - type: object 9587 - type: object 9588 + description: status of the condition, one of True, False, Unknown. 9589 + enum: 9590 + - "True" 9591 + - "False" 9592 + - Unknown 9593 + type: string 9594 + type: 9595 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 9596 + maxLength: 316 9597 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9598 + type: string 9599 + required: 9600 + - lastTransitionTime 9601 + - message 9602 + - reason 9603 + - status 9604 + - type 9605 + type: object 9606 + type: array 9607 + lastHandledReconcileAt: 9608 + description: |- 9609 + LastHandledReconcileAt holds the value of the most recent 9610 + reconcile request value, so a change of the annotation value 9611 + can be detected. 9612 + type: string 9613 + observedGeneration: 9614 + description: ObservedGeneration is the last observed generation. 9615 + format: int64 9616 + type: integer 9617 + url: 9618 + description: URL is the download link for the last index fetched. 9619 + type: string 9620 + type: object 9621 + type: object 9622 + served: true 9623 + storage: false 9624 + subresources: 9625 + status: {} 9626 + - additionalPrinterColumns: 9627 + - jsonPath: .spec.url 9628 + name: URL 9629 + type: string 9630 + - jsonPath: .metadata.creationTimestamp 9631 + name: Age 9632 + type: date 9633 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 9634 + name: Ready 9635 + type: string 9636 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 9637 + name: Status 9638 + type: string 9639 + deprecated: true 9640 + deprecationWarning: v1beta2 HelmRepository is deprecated, upgrade to v1 9641 + name: v1beta2 9642 + schema: 9643 + openAPIV3Schema: 9644 + description: HelmRepository is the Schema for the helmrepositories API. 9645 + properties: 9646 + apiVersion: 9647 + description: |- 9648 + APIVersion defines the versioned schema of this representation of an object. 9649 + Servers should convert recognized schemas to the latest internal value, and 9650 + may reject unrecognized values. 9651 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9652 + type: string 9653 + kind: 9654 + description: |- 9655 + Kind is a string value representing the REST resource this object represents. 9656 + Servers may infer this from the endpoint the client submits requests to. 9657 + Cannot be updated. 9658 + In CamelCase. 9659 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9660 + type: string 9661 + metadata: 9662 + type: object 9663 + spec: 9664 + description: |- 9665 + HelmRepositorySpec specifies the required configuration to produce an 9666 + Artifact for a Helm repository index YAML. 9667 + properties: 9668 + accessFrom: 9669 + description: |- 9670 + AccessFrom specifies an Access Control List for allowing cross-namespace 9671 + references to this object. 9672 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 9673 + properties: 9674 + namespaceSelectors: 9675 + description: |- 9676 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 9677 + Items in this list are evaluated using a logical OR operation. 9678 + items: 9679 + description: |- 9680 + NamespaceSelector selects the namespaces to which this ACL applies. 9681 + An empty map of MatchLabels matches all namespaces in a cluster. 9682 + properties: 9683 + matchLabels: 9684 + additionalProperties: 9685 + type: string 9686 + description: |- 9687 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 9688 + map is equivalent to an element of matchExpressions, whose key field is "key", the 9689 + operator is "In", and the values array contains only "value". The requirements are ANDed. 9690 + type: object 9691 + type: object 9692 + type: array 9693 + required: 9694 + - namespaceSelectors 9695 type: object 9696 - served: true 9697 - storage: false 9698 - subresources: 9699 - status: {} 9700 - - additionalPrinterColumns: 9701 - - jsonPath: .metadata.creationTimestamp 9702 - name: Age 9703 - type: date 9704 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9705 - name: Ready 9706 - type: string 9707 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9708 - name: Status 9709 - type: string 9710 - deprecated: true 9711 - deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 9712 - name: v1beta2 9713 - schema: 9714 - openAPIV3Schema: 9715 - description: Kustomization is the Schema for the kustomizations API. 9716 + certSecretRef: 9717 + description: |- 9718 + CertSecretRef can be given the name of a Secret containing 9719 + either or both of 9720 + 9721 + - a PEM-encoded client certificate (`tls.crt`) and private 9722 + key (`tls.key`); 9723 + - a PEM-encoded CA certificate (`ca.crt`) 9724 + 9725 + and whichever are supplied, will be used for connecting to the 9726 + registry. The client cert and key are useful if you are 9727 + authenticating with a certificate; the CA cert is useful if 9728 + you are using a self-signed server certificate. The Secret must 9729 + be of type `Opaque` or `kubernetes.io/tls`. 9730 + 9731 + It takes precedence over the values specified in the Secret referred 9732 + to by `.spec.secretRef`. 9733 properties: 9734 - apiVersion: 9735 - description: |- 9736 - APIVersion defines the versioned schema of this representation of an object. 9737 - Servers should convert recognized schemas to the latest internal value, and 9738 - may reject unrecognized values. 9739 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9740 - type: string 9741 - kind: 9742 - description: |- 9743 - Kind is a string value representing the REST resource this object represents. 9744 - Servers may infer this from the endpoint the client submits requests to. 9745 - Cannot be updated. 9746 - In CamelCase. 9747 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9748 - type: string 9749 - metadata: 9750 - type: object 9751 - spec: 9752 - description: KustomizationSpec defines the configuration to calculate the desired state from a Source 9753 - using Kustomize. 9754 - properties: 9755 - commonMetadata: 9756 - description: |- 9757 - CommonMetadata specifies the common labels and annotations that are applied to all resources. 9758 - Any existing label or annotation will be overridden if its key matches a common one. 9759 - properties: 9760 - annotations: 9761 - additionalProperties: 9762 - type: string 9763 - description: Annotations to be added to the object's metadata. 9764 - type: object 9765 - labels: 9766 - additionalProperties: 9767 - type: string 9768 - description: Labels to be added to the object's metadata. 9769 - type: object 9770 - type: object 9771 - components: 9772 - description: Components specifies relative paths to specifications of other Components. 9773 - items: 9774 - type: string 9775 - type: array 9776 - decryption: 9777 - description: Decrypt Kubernetes secrets before applying them on the cluster. 9778 - properties: 9779 - provider: 9780 - description: Provider is the name of the decryption engine. 9781 - enum: 9782 - - sops 9783 - type: string 9784 - secretRef: 9785 - description: The secret name containing the private OpenPGP keys used for decryption. 9786 - properties: 9787 - name: 9788 - description: Name of the referent. 9789 - type: string 9790 - required: 9791 - - name 9792 - type: object 9793 - required: 9794 - - provider 9795 - type: object 9796 - dependsOn: 9797 - description: |- 9798 - DependsOn may contain a meta.NamespacedObjectReference slice 9799 - with references to Kustomization resources that must be ready before this 9800 - Kustomization can be reconciled. 9801 - items: 9802 - description: |- 9803 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 9804 - namespace. 9805 - properties: 9806 - name: 9807 - description: Name of the referent. 9808 - type: string 9809 - namespace: 9810 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9811 - type: string 9812 - required: 9813 - - name 9814 - type: object 9815 - type: array 9816 - force: 9817 - default: false 9818 - description: |- 9819 - Force instructs the controller to recreate resources 9820 - when patching fails due to an immutable field change. 9821 - type: boolean 9822 - healthChecks: 9823 - description: A list of resources to be included in the health assessment. 9824 - items: 9825 - description: |- 9826 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 9827 - in any namespace. 9828 - properties: 9829 - apiVersion: 9830 - description: API version of the referent, if not specified the Kubernetes preferred 9831 - version will be used. 9832 - type: string 9833 - kind: 9834 - description: Kind of the referent. 9835 - type: string 9836 - name: 9837 - description: Name of the referent. 9838 - type: string 9839 - namespace: 9840 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 9841 - type: string 9842 - required: 9843 - - kind 9844 - - name 9845 - type: object 9846 - type: array 9847 - images: 9848 - description: |- 9849 - Images is a list of (image name, new name, new tag or digest) 9850 - for changing image names, tags or digests. This can also be achieved with a 9851 - patch, but this operator is simpler to specify. 9852 - items: 9853 - description: Image contains an image name, a new name, a new tag or digest, which will 9854 - replace the original name and tag. 9855 - properties: 9856 - digest: 9857 - description: |- 9858 - Digest is the value used to replace the original image tag. 9859 - If digest is present NewTag value is ignored. 9860 - type: string 9861 - name: 9862 - description: Name is a tag-less image name. 9863 - type: string 9864 - newName: 9865 - description: NewName is the value used to replace the original name. 9866 - type: string 9867 - newTag: 9868 - description: NewTag is the value used to replace the original tag. 9869 - type: string 9870 - required: 9871 - - name 9872 - type: object 9873 - type: array 9874 - interval: 9875 - description: The interval at which to reconcile the Kustomization. 9876 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9877 - type: string 9878 - kubeConfig: 9879 - description: |- 9880 - The KubeConfig for reconciling the Kustomization on a remote cluster. 9881 - When used in combination with KustomizationSpec.ServiceAccountName, 9882 - forces the controller to act on behalf of that Service Account at the 9883 - target cluster. 9884 - If the --default-service-account flag is set, its value will be used as 9885 - a controller level fallback for when KustomizationSpec.ServiceAccountName 9886 - is empty. 9887 - properties: 9888 - secretRef: 9889 - description: |- 9890 - SecretRef holds the name of a secret that contains a key with 9891 - the kubeconfig file as the value. If no key is set, the key will default 9892 - to 'value'. 9893 - It is recommended that the kubeconfig is self-contained, and the secret 9894 - is regularly updated if credentials such as a cloud-access-token expire. 9895 - Cloud specific `cmd-path` auth helpers will not function without adding 9896 - binaries and credentials to the Pod that is responsible for reconciling 9897 - Kubernetes resources. 9898 - properties: 9899 - key: 9900 - description: Key in the Secret, when not specified an implementation-specific 9901 - default key is used. 9902 - type: string 9903 - name: 9904 - description: Name of the Secret. 9905 - type: string 9906 - required: 9907 - - name 9908 - type: object 9909 - required: 9910 - - secretRef 9911 - type: object 9912 - patches: 9913 - description: |- 9914 - Strategic merge and JSON patches, defined as inline YAML objects, 9915 - capable of targeting objects based on kind, label and annotation selectors. 9916 - items: 9917 - description: |- 9918 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 9919 - be applied to. 9920 - properties: 9921 - patch: 9922 - description: |- 9923 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 9924 - an array of operation objects. 9925 - type: string 9926 - target: 9927 - description: Target points to the resources that the patch document should be 9928 - applied to. 9929 - properties: 9930 - annotationSelector: 9931 - description: |- 9932 - AnnotationSelector is a string that follows the label selection expression 9933 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9934 - It matches with the resource annotations. 9935 - type: string 9936 - group: 9937 - description: |- 9938 - Group is the API group to select resources from. 9939 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 9940 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9941 - type: string 9942 - kind: 9943 - description: |- 9944 - Kind of the API Group to select resources from. 9945 - Together with Group and Version it is capable of unambiguously 9946 - identifying and/or selecting resources. 9947 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9948 - type: string 9949 - labelSelector: 9950 - description: |- 9951 - LabelSelector is a string that follows the label selection expression 9952 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 9953 - It matches with the resource labels. 9954 - type: string 9955 - name: 9956 - description: Name to match resources with. 9957 - type: string 9958 - namespace: 9959 - description: Namespace to select resources from. 9960 - type: string 9961 - version: 9962 - description: |- 9963 - Version of the API Group to select resources from. 9964 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 9965 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 9966 - type: string 9967 - type: object 9968 - required: 9969 - - patch 9970 - type: object 9971 - type: array 9972 - patchesJson6902: 9973 - description: |- 9974 - JSON 6902 patches, defined as inline YAML objects. 9975 - Deprecated: Use Patches instead. 9976 - items: 9977 - description: JSON6902Patch contains a JSON6902 patch and the target the patch should be 9978 - applied to. 9979 - properties: 9980 - patch: 9981 - description: Patch contains the JSON6902 patch document with an array of operation 9982 - objects. 9983 - items: 9984 - description: |- 9985 - JSON6902 is a JSON6902 operation object. 9986 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9987 - properties: 9988 - from: 9989 - description: |- 9990 - From contains a JSON-pointer value that references a location within the target document where the operation is 9991 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 9992 - type: string 9993 - op: 9994 - description: |- 9995 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 9996 - "test". 9997 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 9998 - enum: 9999 - - test 10000 - - remove 10001 - - add 10002 - - replace 10003 - - move 10004 - - copy 10005 - type: string 10006 - path: 10007 - description: |- 10008 - Path contains the JSON-pointer value that references a location within the target document where the operation 10009 - is performed. The meaning of the value depends on the value of Op. 10010 - type: string 10011 - value: 10012 - description: |- 10013 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 10014 - account by all operations. 10015 - x-kubernetes-preserve-unknown-fields: true 10016 - required: 10017 - - op 10018 - - path 10019 - type: object 10020 - type: array 10021 - target: 10022 - description: Target points to the resources that the patch document should be 10023 - applied to. 10024 - properties: 10025 - annotationSelector: 10026 - description: |- 10027 - AnnotationSelector is a string that follows the label selection expression 10028 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10029 - It matches with the resource annotations. 10030 - type: string 10031 - group: 10032 - description: |- 10033 - Group is the API group to select resources from. 10034 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10035 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10036 - type: string 10037 - kind: 10038 - description: |- 10039 - Kind of the API Group to select resources from. 10040 - Together with Group and Version it is capable of unambiguously 10041 - identifying and/or selecting resources. 10042 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10043 - type: string 10044 - labelSelector: 10045 - description: |- 10046 - LabelSelector is a string that follows the label selection expression 10047 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10048 - It matches with the resource labels. 10049 - type: string 10050 - name: 10051 - description: Name to match resources with. 10052 - type: string 10053 - namespace: 10054 - description: Namespace to select resources from. 10055 - type: string 10056 - version: 10057 - description: |- 10058 - Version of the API Group to select resources from. 10059 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10060 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10061 - type: string 10062 - type: object 10063 - required: 10064 - - patch 10065 - - target 10066 - type: object 10067 - type: array 10068 - patchesStrategicMerge: 10069 - description: |- 10070 - Strategic merge patches, defined as inline YAML objects. 10071 - Deprecated: Use Patches instead. 10072 - items: 10073 - x-kubernetes-preserve-unknown-fields: true 10074 - type: array 10075 - path: 10076 - description: |- 10077 - Path to the directory containing the kustomization.yaml file, or the 10078 - set of plain YAMLs a kustomization.yaml should be generated for. 10079 - Defaults to 'None', which translates to the root path of the SourceRef. 10080 - type: string 10081 - postBuild: 10082 - description: |- 10083 - PostBuild describes which actions to perform on the YAML manifest 10084 - generated by building the kustomize overlay. 10085 - properties: 10086 - substitute: 10087 - additionalProperties: 10088 - type: string 10089 - description: |- 10090 - Substitute holds a map of key/value pairs. 10091 - The variables defined in your YAML manifests 10092 - that match any of the keys defined in the map 10093 - will be substituted with the set value. 10094 - Includes support for bash string replacement functions 10095 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 10096 - type: object 10097 - substituteFrom: 10098 - description: |- 10099 - SubstituteFrom holds references to ConfigMaps and Secrets containing 10100 - the variables and their values to be substituted in the YAML manifests. 10101 - The ConfigMap and the Secret data keys represent the var names and they 10102 - must match the vars declared in the manifests for the substitution to happen. 10103 - items: 10104 - description: |- 10105 - SubstituteReference contains a reference to a resource containing 10106 - the variables name and value. 10107 - properties: 10108 - kind: 10109 - description: Kind of the values referent, valid values are ('Secret', 10110 - 'ConfigMap'). 10111 - enum: 10112 - - Secret 10113 - - ConfigMap 10114 - type: string 10115 - name: 10116 - description: |- 10117 - Name of the values referent. Should reside in the same namespace as the 10118 - referring resource. 10119 - maxLength: 253 10120 - minLength: 1 10121 - type: string 10122 - optional: 10123 - default: false 10124 - description: |- 10125 - Optional indicates whether the referenced resource must exist, or whether to 10126 - tolerate its absence. If true and the referenced resource is absent, proceed 10127 - as if the resource was present but empty, without any variables defined. 10128 - type: boolean 10129 - required: 10130 - - kind 10131 - - name 10132 - type: object 10133 - type: array 10134 - type: object 10135 - prune: 10136 - description: Prune enables garbage collection. 10137 - type: boolean 10138 - retryInterval: 10139 - description: |- 10140 - The interval at which to retry a previously failed reconciliation. 10141 - When not specified, the controller uses the KustomizationSpec.Interval 10142 - value to retry failures. 10143 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10144 - type: string 10145 - serviceAccountName: 10146 - description: |- 10147 - The name of the Kubernetes service account to impersonate 10148 - when reconciling this Kustomization. 10149 - type: string 10150 - sourceRef: 10151 - description: Reference of the source where the kustomization file is. 10152 - properties: 10153 - apiVersion: 10154 - description: API version of the referent. 10155 - type: string 10156 - kind: 10157 - description: Kind of the referent. 10158 - enum: 10159 - - OCIRepository 10160 - - GitRepository 10161 - - Bucket 10162 - type: string 10163 - name: 10164 - description: Name of the referent. 10165 - type: string 10166 - namespace: 10167 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 10168 - resource object that contains the reference. 10169 - type: string 10170 - required: 10171 - - kind 10172 - - name 10173 - type: object 10174 - suspend: 10175 - description: |- 10176 - This flag tells the controller to suspend subsequent kustomize executions, 10177 - it does not apply to already started executions. Defaults to false. 10178 - type: boolean 10179 - targetNamespace: 10180 - description: |- 10181 - TargetNamespace sets or overrides the namespace in the 10182 - kustomization.yaml file. 10183 - maxLength: 63 10184 - minLength: 1 10185 - type: string 10186 - timeout: 10187 - description: |- 10188 - Timeout for validation, apply and health checking operations. 10189 - Defaults to 'Interval' duration. 10190 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10191 - type: string 10192 - validation: 10193 - description: 'Deprecated: Not used in v1beta2.' 10194 - enum: 10195 - - none 10196 - - client 10197 - - server 10198 - type: string 10199 - wait: 10200 - description: |- 10201 - Wait instructs the controller to check the health of all the reconciled resources. 10202 - When enabled, the HealthChecks are ignored. Defaults to false. 10203 - type: boolean 10204 - required: 10205 - - interval 10206 - - prune 10207 - - sourceRef 10208 - type: object 10209 - status: 10210 - default: 10211 - observedGeneration: -1 10212 - description: KustomizationStatus defines the observed state of a kustomization. 10213 - properties: 10214 - conditions: 10215 - items: 10216 - description: "Condition contains details for one aspect of the current state of this API 10217 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 10218 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 10219 - the observations of a foo's current state.\n\t // Known .status.conditions.type 10220 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 10221 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 10222 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 10223 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 10224 - fields\n\t}" 10225 - properties: 10226 - lastTransitionTime: 10227 - description: |- 10228 - lastTransitionTime is the last time the condition transitioned from one status to another. 10229 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 10230 - format: date-time 10231 - type: string 10232 - message: 10233 - description: |- 10234 - message is a human readable message indicating details about the transition. 10235 - This may be an empty string. 10236 - maxLength: 32768 10237 - type: string 10238 - observedGeneration: 10239 - description: |- 10240 - observedGeneration represents the .metadata.generation that the condition was set based upon. 10241 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10242 - with respect to the current state of the instance. 10243 - format: int64 10244 - minimum: 0 10245 - type: integer 10246 - reason: 10247 - description: |- 10248 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 10249 - Producers of specific condition types may define expected values and meanings for this field, 10250 - and whether the values are considered a guaranteed API. 10251 - The value should be a CamelCase string. 10252 - This field may not be empty. 10253 - maxLength: 1024 10254 - minLength: 1 10255 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10256 - type: string 10257 - status: 10258 - description: status of the condition, one of True, False, Unknown. 10259 - enum: 10260 - - "True" 10261 - - "False" 10262 - - Unknown 10263 - type: string 10264 - type: 10265 - description: |- 10266 - type of condition in CamelCase or in foo.example.com/CamelCase. 10267 - --- 10268 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 10269 - useful (see .node.status.conditions), the ability to deconflict is important. 10270 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 10271 - maxLength: 316 10272 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10273 - type: string 10274 - required: 10275 - - lastTransitionTime 10276 - - message 10277 - - reason 10278 - - status 10279 - - type 10280 - type: object 10281 - type: array 10282 - inventory: 10283 - description: Inventory contains the list of Kubernetes resource object references that have 10284 - been successfully applied. 10285 - properties: 10286 - entries: 10287 - description: Entries of Kubernetes resource object references. 10288 - items: 10289 - description: ResourceRef contains the information necessary to locate a resource 10290 - within a cluster. 10291 - properties: 10292 - id: 10293 - description: |- 10294 - ID is the string representation of the Kubernetes resource object's metadata, 10295 - in the format '<namespace>_<name>_<group>_<kind>'. 10296 - type: string 10297 - v: 10298 - description: Version is the API version of the Kubernetes resource object's 10299 - kind. 10300 - type: string 10301 - required: 10302 - - id 10303 - - v 10304 - type: object 10305 - type: array 10306 - required: 10307 - - entries 10308 - type: object 10309 - lastAppliedRevision: 10310 - description: |- 10311 - The last successfully applied revision. 10312 - Equals the Revision of the applied Artifact from the referenced Source. 10313 - type: string 10314 - lastAttemptedRevision: 10315 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 10316 - type: string 10317 - lastHandledReconcileAt: 10318 - description: |- 10319 - LastHandledReconcileAt holds the value of the most recent 10320 - reconcile request value, so a change of the annotation value 10321 - can be detected. 10322 - type: string 10323 - observedGeneration: 10324 - description: ObservedGeneration is the last reconciled generation. 10325 - format: int64 10326 - type: integer 10327 - type: object 10328 + name: 10329 + description: Name of the referent. 10330 + type: string 10331 + required: 10332 + - name 10333 type: object 10334 - served: true 10335 - storage: false 10336 - subresources: 10337 - status: {} 10338 ---- 10339 -apiVersion: v1 10340 -kind: ServiceAccount 10341 -metadata: 10342 - labels: 10343 - app.kubernetes.io/component: kustomize-controller 10344 - app.kubernetes.io/instance: flux-system 10345 - app.kubernetes.io/part-of: flux 10346 - app.kubernetes.io/version: v2.3.0 10347 - name: kustomize-controller 10348 - namespace: flux-system 10349 ---- 10350 -apiVersion: apps/v1 10351 -kind: Deployment 10352 -metadata: 10353 - labels: 10354 - app.kubernetes.io/component: kustomize-controller 10355 - app.kubernetes.io/instance: flux-system 10356 - app.kubernetes.io/part-of: flux 10357 - app.kubernetes.io/version: v2.3.0 10358 - control-plane: controller 10359 - name: kustomize-controller 10360 - namespace: flux-system 10361 -spec: 10362 - replicas: 1 10363 - selector: 10364 - matchLabels: 10365 - app: kustomize-controller 10366 - template: 10367 - metadata: 10368 - annotations: 10369 - prometheus.io/port: "8080" 10370 - prometheus.io/scrape: "true" 10371 - labels: 10372 - app: kustomize-controller 10373 - spec: 10374 - containers: 10375 - - args: 10376 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 10377 - - --watch-all-namespaces=true 10378 - - --log-level=info 10379 - - --log-encoding=json 10380 - - --enable-leader-election 10381 - env: 10382 - - name: RUNTIME_NAMESPACE 10383 - valueFrom: 10384 - fieldRef: 10385 - fieldPath: metadata.namespace 10386 - - name: GOMAXPROCS 10387 - valueFrom: 10388 - resourceFieldRef: 10389 - containerName: manager 10390 - resource: limits.cpu 10391 - - name: GOMEMLIMIT 10392 - valueFrom: 10393 - resourceFieldRef: 10394 - containerName: manager 10395 - resource: limits.memory 10396 - image: ghcr.io/fluxcd/kustomize-controller:v1.3.0 10397 - imagePullPolicy: IfNotPresent 10398 - livenessProbe: 10399 - httpGet: 10400 - path: /healthz 10401 - port: healthz 10402 - name: manager 10403 - ports: 10404 - - containerPort: 8080 10405 - name: http-prom 10406 - protocol: TCP 10407 - - containerPort: 9440 10408 - name: healthz 10409 - protocol: TCP 10410 - readinessProbe: 10411 - httpGet: 10412 - path: /readyz 10413 - port: healthz 10414 - resources: 10415 - limits: 10416 - cpu: 1000m 10417 - memory: 1Gi 10418 - requests: 10419 - cpu: 100m 10420 - memory: 64Mi 10421 - securityContext: 10422 - allowPrivilegeEscalation: false 10423 - capabilities: 10424 - drop: 10425 - - ALL 10426 - readOnlyRootFilesystem: true 10427 - runAsNonRoot: true 10428 - seccompProfile: 10429 - type: RuntimeDefault 10430 - volumeMounts: 10431 - - mountPath: /tmp 10432 - name: temp 10433 - nodeSelector: 10434 - kubernetes.io/os: linux 10435 - priorityClassName: system-cluster-critical 10436 - securityContext: 10437 - fsGroup: 1337 10438 - serviceAccountName: kustomize-controller 10439 - terminationGracePeriodSeconds: 60 10440 - volumes: 10441 - - emptyDir: {} 10442 - name: temp 10443 ---- 10444 -apiVersion: apiextensions.k8s.io/v1 10445 -kind: CustomResourceDefinition 10446 -metadata: 10447 - annotations: 10448 - controller-gen.kubebuilder.io/version: v0.15.0 10449 - labels: 10450 - app.kubernetes.io/component: helm-controller 10451 - app.kubernetes.io/instance: flux-system 10452 - app.kubernetes.io/part-of: flux 10453 - app.kubernetes.io/version: v2.3.0 10454 - name: helmreleases.helm.toolkit.fluxcd.io 10455 -spec: 10456 - group: helm.toolkit.fluxcd.io 10457 - names: 10458 - kind: HelmRelease 10459 - listKind: HelmReleaseList 10460 - plural: helmreleases 10461 - shortNames: 10462 - - hr 10463 - singular: helmrelease 10464 - scope: Namespaced 10465 - versions: 10466 - - additionalPrinterColumns: 10467 - - jsonPath: .metadata.creationTimestamp 10468 - name: Age 10469 - type: date 10470 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 10471 - name: Ready 10472 - type: string 10473 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 10474 - name: Status 10475 - type: string 10476 - name: v2 10477 - schema: 10478 - openAPIV3Schema: 10479 - description: HelmRelease is the Schema for the helmreleases API 10480 + insecure: 10481 + description: |- 10482 + Insecure allows connecting to a non-TLS HTTP container registry. 10483 + This field is only taken into account if the .spec.type field is set to 'oci'. 10484 + type: boolean 10485 + interval: 10486 + description: |- 10487 + Interval at which the HelmRepository URL is checked for updates. 10488 + This interval is approximate and may be subject to jitter to ensure 10489 + efficient use of resources. 10490 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10491 + type: string 10492 + passCredentials: 10493 + description: |- 10494 + PassCredentials allows the credentials from the SecretRef to be passed 10495 + on to a host that does not match the host as defined in URL. 10496 + This may be required if the host of the advertised chart URLs in the 10497 + index differ from the defined URL. 10498 + Enabling this should be done with caution, as it can potentially result 10499 + in credentials getting stolen in a MITM-attack. 10500 + type: boolean 10501 + provider: 10502 + default: generic 10503 + description: |- 10504 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 10505 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 10506 + When not specified, defaults to 'generic'. 10507 + enum: 10508 + - generic 10509 + - aws 10510 + - azure 10511 + - gcp 10512 + type: string 10513 + secretRef: 10514 + description: |- 10515 + SecretRef specifies the Secret containing authentication credentials 10516 + for the HelmRepository. 10517 + For HTTP/S basic auth the secret must contain 'username' and 'password' 10518 + fields. 10519 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 10520 + keys is deprecated. Please use `.spec.certSecretRef` instead. 10521 properties: 10522 - apiVersion: 10523 - description: |- 10524 - APIVersion defines the versioned schema of this representation of an object. 10525 - Servers should convert recognized schemas to the latest internal value, and 10526 - may reject unrecognized values. 10527 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10528 - type: string 10529 - kind: 10530 - description: |- 10531 - Kind is a string value representing the REST resource this object represents. 10532 - Servers may infer this from the endpoint the client submits requests to. 10533 - Cannot be updated. 10534 - In CamelCase. 10535 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10536 - type: string 10537 - metadata: 10538 - type: object 10539 - spec: 10540 - description: HelmReleaseSpec defines the desired state of a Helm release. 10541 - properties: 10542 - chart: 10543 - description: |- 10544 - Chart defines the template of the v1.HelmChart that should be created 10545 - for this HelmRelease. 10546 - properties: 10547 - metadata: 10548 - description: ObjectMeta holds the template for metadata like labels and annotations. 10549 - properties: 10550 - annotations: 10551 - additionalProperties: 10552 - type: string 10553 - description: |- 10554 - Annotations is an unstructured key value map stored with a resource that may be 10555 - set by external tools to store and retrieve arbitrary metadata. They are not 10556 - queryable and should be preserved when modifying objects. 10557 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 10558 - type: object 10559 - labels: 10560 - additionalProperties: 10561 - type: string 10562 - description: |- 10563 - Map of string keys and values that can be used to organize and categorize 10564 - (scope and select) objects. 10565 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 10566 - type: object 10567 - type: object 10568 - spec: 10569 - description: Spec holds the template for the v1.HelmChartSpec for this HelmRelease. 10570 - properties: 10571 - chart: 10572 - description: The name or path the Helm chart is available at in the SourceRef. 10573 - maxLength: 2048 10574 - minLength: 1 10575 - type: string 10576 - ignoreMissingValuesFiles: 10577 - description: IgnoreMissingValuesFiles controls whether to silently ignore 10578 - missing values files rather than failing. 10579 - type: boolean 10580 - interval: 10581 - description: |- 10582 - Interval at which to check the v1.Source for updates. Defaults to 10583 - 'HelmReleaseSpec.Interval'. 10584 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10585 - type: string 10586 - reconcileStrategy: 10587 - default: ChartVersion 10588 - description: |- 10589 - Determines what enables the creation of a new artifact. Valid values are 10590 - ('ChartVersion', 'Revision'). 10591 - See the documentation of the values for an explanation on their behavior. 10592 - Defaults to ChartVersion when omitted. 10593 - enum: 10594 - - ChartVersion 10595 - - Revision 10596 - type: string 10597 - sourceRef: 10598 - description: The name and namespace of the v1.Source the chart is available 10599 - at. 10600 - properties: 10601 - apiVersion: 10602 - description: APIVersion of the referent. 10603 - type: string 10604 - kind: 10605 - description: Kind of the referent. 10606 - enum: 10607 - - HelmRepository 10608 - - GitRepository 10609 - - Bucket 10610 - type: string 10611 - name: 10612 - description: Name of the referent. 10613 - maxLength: 253 10614 - minLength: 1 10615 - type: string 10616 - namespace: 10617 - description: Namespace of the referent. 10618 - maxLength: 63 10619 - minLength: 1 10620 - type: string 10621 - required: 10622 - - name 10623 - type: object 10624 - valuesFiles: 10625 - description: |- 10626 - Alternative list of values files to use as the chart values (values.yaml 10627 - is not included by default), expected to be a relative path in the SourceRef. 10628 - Values files are merged in the order of this list with the last file overriding 10629 - the first. Ignored when omitted. 10630 - items: 10631 - type: string 10632 - type: array 10633 - verify: 10634 - description: |- 10635 - Verify contains the secret name containing the trusted public keys 10636 - used to verify the signature and specifies which provider to use to check 10637 - whether OCI image is authentic. 10638 - This field is only supported for OCI sources. 10639 - Chart dependencies, which are not bundled in the umbrella chart artifact, 10640 - are not verified. 10641 - properties: 10642 - provider: 10643 - default: cosign 10644 - description: Provider specifies the technology used to sign the OCI 10645 - Helm chart. 10646 - enum: 10647 - - cosign 10648 - - notation 10649 - type: string 10650 - secretRef: 10651 - description: |- 10652 - SecretRef specifies the Kubernetes Secret containing the 10653 - trusted public keys. 10654 - properties: 10655 - name: 10656 - description: Name of the referent. 10657 - type: string 10658 - required: 10659 - - name 10660 - type: object 10661 - required: 10662 - - provider 10663 - type: object 10664 - version: 10665 - default: '*' 10666 - description: |- 10667 - Version semver expression, ignored for charts from v1.GitRepository and 10668 - v1beta2.Bucket sources. Defaults to latest when omitted. 10669 - type: string 10670 - required: 10671 - - chart 10672 - - sourceRef 10673 - type: object 10674 - required: 10675 - - spec 10676 - type: object 10677 - chartRef: 10678 - description: |- 10679 - ChartRef holds a reference to a source controller resource containing the 10680 - Helm chart artifact. 10681 - properties: 10682 - apiVersion: 10683 - description: APIVersion of the referent. 10684 - type: string 10685 - kind: 10686 - description: Kind of the referent. 10687 - enum: 10688 - - OCIRepository 10689 - - HelmChart 10690 - type: string 10691 - name: 10692 - description: Name of the referent. 10693 - maxLength: 253 10694 - minLength: 1 10695 - type: string 10696 - namespace: 10697 - description: |- 10698 - Namespace of the referent, defaults to the namespace of the Kubernetes 10699 - resource object that contains the reference. 10700 - maxLength: 63 10701 - minLength: 1 10702 - type: string 10703 - required: 10704 - - kind 10705 - - name 10706 - type: object 10707 - dependsOn: 10708 - description: |- 10709 - DependsOn may contain a meta.NamespacedObjectReference slice with 10710 - references to HelmRelease resources that must be ready before this HelmRelease 10711 - can be reconciled. 10712 - items: 10713 - description: |- 10714 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 10715 - namespace. 10716 - properties: 10717 - name: 10718 - description: Name of the referent. 10719 - type: string 10720 - namespace: 10721 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 10722 - type: string 10723 - required: 10724 - - name 10725 - type: object 10726 - type: array 10727 - driftDetection: 10728 - description: |- 10729 - DriftDetection holds the configuration for detecting and handling 10730 - differences between the manifest in the Helm storage and the resources 10731 - currently existing in the cluster. 10732 - properties: 10733 - ignore: 10734 - description: |- 10735 - Ignore contains a list of rules for specifying which changes to ignore 10736 - during diffing. 10737 - items: 10738 - description: |- 10739 - IgnoreRule defines a rule to selectively disregard specific changes during 10740 - the drift detection process. 10741 - properties: 10742 - paths: 10743 - description: |- 10744 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 10745 - consideration in a Kubernetes object. 10746 - items: 10747 - type: string 10748 - type: array 10749 - target: 10750 - description: |- 10751 - Target is a selector for specifying Kubernetes objects to which this 10752 - rule applies. 10753 - If Target is not set, the Paths will be ignored for all Kubernetes 10754 - objects within the manifest of the Helm release. 10755 - properties: 10756 - annotationSelector: 10757 - description: |- 10758 - AnnotationSelector is a string that follows the label selection expression 10759 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10760 - It matches with the resource annotations. 10761 - type: string 10762 - group: 10763 - description: |- 10764 - Group is the API group to select resources from. 10765 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 10766 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10767 - type: string 10768 - kind: 10769 - description: |- 10770 - Kind of the API Group to select resources from. 10771 - Together with Group and Version it is capable of unambiguously 10772 - identifying and/or selecting resources. 10773 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10774 - type: string 10775 - labelSelector: 10776 - description: |- 10777 - LabelSelector is a string that follows the label selection expression 10778 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 10779 - It matches with the resource labels. 10780 - type: string 10781 - name: 10782 - description: Name to match resources with. 10783 - type: string 10784 - namespace: 10785 - description: Namespace to select resources from. 10786 - type: string 10787 - version: 10788 - description: |- 10789 - Version of the API Group to select resources from. 10790 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 10791 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 10792 - type: string 10793 - type: object 10794 - required: 10795 - - paths 10796 - type: object 10797 - type: array 10798 - mode: 10799 - description: |- 10800 - Mode defines how differences should be handled between the Helm manifest 10801 - and the manifest currently applied to the cluster. 10802 - If not explicitly set, it defaults to DiffModeDisabled. 10803 - enum: 10804 - - enabled 10805 - - warn 10806 - - disabled 10807 - type: string 10808 - type: object 10809 - install: 10810 - description: Install holds the configuration for Helm install actions for this HelmRelease. 10811 - properties: 10812 - crds: 10813 - description: |- 10814 - CRDs upgrade CRDs from the Helm Chart's crds directory according 10815 - to the CRD upgrade policy provided here. Valid values are `Skip`, 10816 - `Create` or `CreateReplace`. Default is `Create` and if omitted 10817 - CRDs are installed but not updated. 10818 - 10819 - 10820 - Skip: do neither install nor replace (update) any CRDs. 10821 - 10822 - 10823 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 10824 - 10825 - 10826 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 10827 - but not deleted. 10828 - 10829 - 10830 - By default, CRDs are applied (installed) during Helm install action. 10831 - With this option users can opt in to CRD replace existing CRDs on Helm 10832 - install actions, which is not (yet) natively supported by Helm. 10833 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 10834 - enum: 10835 - - Skip 10836 - - Create 10837 - - CreateReplace 10838 - type: string 10839 - createNamespace: 10840 - description: |- 10841 - CreateNamespace tells the Helm install action to create the 10842 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 10843 - On uninstall, the namespace will not be garbage collected. 10844 - type: boolean 10845 - disableHooks: 10846 - description: DisableHooks prevents hooks from running during the Helm install action. 10847 - type: boolean 10848 - disableOpenAPIValidation: 10849 - description: |- 10850 - DisableOpenAPIValidation prevents the Helm install action from validating 10851 - rendered templates against the Kubernetes OpenAPI Schema. 10852 - type: boolean 10853 - disableWait: 10854 - description: |- 10855 - DisableWait disables the waiting for resources to be ready after a Helm 10856 - install has been performed. 10857 - type: boolean 10858 - disableWaitForJobs: 10859 - description: |- 10860 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 10861 - install has been performed. 10862 - type: boolean 10863 - remediation: 10864 - description: |- 10865 - Remediation holds the remediation configuration for when the Helm install 10866 - action for the HelmRelease fails. The default is to not perform any action. 10867 - properties: 10868 - ignoreTestFailures: 10869 - description: |- 10870 - IgnoreTestFailures tells the controller to skip remediation when the Helm 10871 - tests are run after an install action but fail. Defaults to 10872 - 'Test.IgnoreFailures'. 10873 - type: boolean 10874 - remediateLastFailure: 10875 - description: |- 10876 - RemediateLastFailure tells the controller to remediate the last failure, when 10877 - no retries remain. Defaults to 'false'. 10878 - type: boolean 10879 - retries: 10880 - description: |- 10881 - Retries is the number of retries that should be attempted on failures before 10882 - bailing. Remediation, using an uninstall, is performed between each attempt. 10883 - Defaults to '0', a negative integer equals to unlimited retries. 10884 - type: integer 10885 - type: object 10886 - replace: 10887 - description: |- 10888 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 10889 - if that name is a deleted release which remains in the history. 10890 - type: boolean 10891 - skipCRDs: 10892 - description: |- 10893 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 10894 - CRDs are installed if not already present. 10895 - 10896 - 10897 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 10898 - type: boolean 10899 - timeout: 10900 - description: |- 10901 - Timeout is the time to wait for any individual Kubernetes operation (like 10902 - Jobs for hooks) during the performance of a Helm install action. Defaults to 10903 - 'HelmReleaseSpec.Timeout'. 10904 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10905 - type: string 10906 - type: object 10907 - interval: 10908 - description: Interval at which to reconcile the Helm release. 10909 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10910 - type: string 10911 - kubeConfig: 10912 - description: |- 10913 - KubeConfig for reconciling the HelmRelease on a remote cluster. 10914 - When used in combination with HelmReleaseSpec.ServiceAccountName, 10915 - forces the controller to act on behalf of that Service Account at the 10916 - target cluster. 10917 - If the --default-service-account flag is set, its value will be used as 10918 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 10919 - is empty. 10920 - properties: 10921 - secretRef: 10922 - description: |- 10923 - SecretRef holds the name of a secret that contains a key with 10924 - the kubeconfig file as the value. If no key is set, the key will default 10925 - to 'value'. 10926 - It is recommended that the kubeconfig is self-contained, and the secret 10927 - is regularly updated if credentials such as a cloud-access-token expire. 10928 - Cloud specific `cmd-path` auth helpers will not function without adding 10929 - binaries and credentials to the Pod that is responsible for reconciling 10930 - Kubernetes resources. 10931 - properties: 10932 - key: 10933 - description: Key in the Secret, when not specified an implementation-specific 10934 - default key is used. 10935 - type: string 10936 - name: 10937 - description: Name of the Secret. 10938 - type: string 10939 - required: 10940 - - name 10941 - type: object 10942 - required: 10943 - - secretRef 10944 - type: object 10945 - maxHistory: 10946 - description: |- 10947 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 10948 - Use '0' for an unlimited number of revisions; defaults to '5'. 10949 - type: integer 10950 - persistentClient: 10951 - description: |- 10952 - PersistentClient tells the controller to use a persistent Kubernetes 10953 - client for this release. When enabled, the client will be reused for the 10954 - duration of the reconciliation, instead of being created and destroyed 10955 - for each (step of a) Helm action. 10956 - 10957 - 10958 - This can improve performance, but may cause issues with some Helm charts 10959 - that for example do create Custom Resource Definitions during installation 10960 - outside Helm's CRD lifecycle hooks, which are then not observed to be 10961 - available by e.g. post-install hooks. 10962 - 10963 - 10964 - If not set, it defaults to true. 10965 - type: boolean 10966 - postRenderers: 10967 - description: |- 10968 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 10969 - of their definition. 10970 - items: 10971 - description: PostRenderer contains a Helm PostRenderer specification. 10972 - properties: 10973 - kustomize: 10974 - description: Kustomization to apply as PostRenderer. 10975 - properties: 10976 - images: 10977 - description: |- 10978 - Images is a list of (image name, new name, new tag or digest) 10979 - for changing image names, tags or digests. This can also be achieved with a 10980 - patch, but this operator is simpler to specify. 10981 - items: 10982 - description: Image contains an image name, a new name, a new tag or 10983 - digest, which will replace the original name and tag. 10984 - properties: 10985 - digest: 10986 - description: |- 10987 - Digest is the value used to replace the original image tag. 10988 - If digest is present NewTag value is ignored. 10989 - type: string 10990 - name: 10991 - description: Name is a tag-less image name. 10992 - type: string 10993 - newName: 10994 - description: NewName is the value used to replace the original 10995 - name. 10996 - type: string 10997 - newTag: 10998 - description: NewTag is the value used to replace the original 10999 - tag. 11000 - type: string 11001 - required: 11002 - - name 11003 - type: object 11004 - type: array 11005 - patches: 11006 - description: |- 11007 - Strategic merge and JSON patches, defined as inline YAML objects, 11008 - capable of targeting objects based on kind, label and annotation selectors. 11009 - items: 11010 - description: |- 11011 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 11012 - be applied to. 11013 - properties: 11014 - patch: 11015 - description: |- 11016 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 11017 - an array of operation objects. 11018 - type: string 11019 - target: 11020 - description: Target points to the resources that the patch 11021 - document should be applied to. 11022 - properties: 11023 - annotationSelector: 11024 - description: |- 11025 - AnnotationSelector is a string that follows the label selection expression 11026 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11027 - It matches with the resource annotations. 11028 - type: string 11029 - group: 11030 - description: |- 11031 - Group is the API group to select resources from. 11032 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 11033 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11034 - type: string 11035 - kind: 11036 - description: |- 11037 - Kind of the API Group to select resources from. 11038 - Together with Group and Version it is capable of unambiguously 11039 - identifying and/or selecting resources. 11040 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11041 - type: string 11042 - labelSelector: 11043 - description: |- 11044 - LabelSelector is a string that follows the label selection expression 11045 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11046 - It matches with the resource labels. 11047 - type: string 11048 - name: 11049 - description: Name to match resources with. 11050 - type: string 11051 - namespace: 11052 - description: Namespace to select resources from. 11053 - type: string 11054 - version: 11055 - description: |- 11056 - Version of the API Group to select resources from. 11057 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 11058 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11059 - type: string 11060 - type: object 11061 - required: 11062 - - patch 11063 - type: object 11064 - type: array 11065 - type: object 11066 - type: object 11067 - type: array 11068 - releaseName: 11069 - description: |- 11070 - ReleaseName used for the Helm release. Defaults to a composition of 11071 - '[TargetNamespace-]Name'. 11072 - maxLength: 53 11073 - minLength: 1 11074 - type: string 11075 - rollback: 11076 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 11077 - properties: 11078 - cleanupOnFail: 11079 - description: |- 11080 - CleanupOnFail allows deletion of new resources created during the Helm 11081 - rollback action when it fails. 11082 - type: boolean 11083 - disableHooks: 11084 - description: DisableHooks prevents hooks from running during the Helm rollback action. 11085 - type: boolean 11086 - disableWait: 11087 - description: |- 11088 - DisableWait disables the waiting for resources to be ready after a Helm 11089 - rollback has been performed. 11090 - type: boolean 11091 - disableWaitForJobs: 11092 - description: |- 11093 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 11094 - rollback has been performed. 11095 - type: boolean 11096 - force: 11097 - description: Force forces resource updates through a replacement strategy. 11098 - type: boolean 11099 - recreate: 11100 - description: Recreate performs pod restarts for the resource if applicable. 11101 - type: boolean 11102 - timeout: 11103 - description: |- 11104 - Timeout is the time to wait for any individual Kubernetes operation (like 11105 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 11106 - 'HelmReleaseSpec.Timeout'. 11107 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11108 - type: string 11109 - type: object 11110 - serviceAccountName: 11111 - description: |- 11112 - The name of the Kubernetes service account to impersonate 11113 - when reconciling this HelmRelease. 11114 - maxLength: 253 11115 - minLength: 1 11116 - type: string 11117 - storageNamespace: 11118 - description: |- 11119 - StorageNamespace used for the Helm storage. 11120 - Defaults to the namespace of the HelmRelease. 11121 - maxLength: 63 11122 - minLength: 1 11123 - type: string 11124 - suspend: 11125 - description: |- 11126 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 11127 - it does not apply to already started reconciliations. Defaults to false. 11128 - type: boolean 11129 - targetNamespace: 11130 - description: |- 11131 - TargetNamespace to target when performing operations for the HelmRelease. 11132 - Defaults to the namespace of the HelmRelease. 11133 - maxLength: 63 11134 - minLength: 1 11135 - type: string 11136 - test: 11137 - description: Test holds the configuration for Helm test actions for this HelmRelease. 11138 - properties: 11139 - enable: 11140 - description: |- 11141 - Enable enables Helm test actions for this HelmRelease after an Helm install 11142 - or upgrade action has been performed. 11143 - type: boolean 11144 - filters: 11145 - description: Filters is a list of tests to run or exclude from running. 11146 - items: 11147 - description: Filter holds the configuration for individual Helm test filters. 11148 - properties: 11149 - exclude: 11150 - description: Exclude specifies whether the named test should be excluded. 11151 - type: boolean 11152 - name: 11153 - description: Name is the name of the test. 11154 - maxLength: 253 11155 - minLength: 1 11156 - type: string 11157 - required: 11158 - - name 11159 - type: object 11160 - type: array 11161 - ignoreFailures: 11162 - description: |- 11163 - IgnoreFailures tells the controller to skip remediation when the Helm tests 11164 - are run but fail. Can be overwritten for tests run after install or upgrade 11165 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 11166 - type: boolean 11167 - timeout: 11168 - description: |- 11169 - Timeout is the time to wait for any individual Kubernetes operation during 11170 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 11171 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11172 - type: string 11173 - type: object 11174 - timeout: 11175 - description: |- 11176 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 11177 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 11178 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11179 - type: string 11180 - uninstall: 11181 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 11182 - properties: 11183 - deletionPropagation: 11184 - default: background 11185 - description: |- 11186 - DeletionPropagation specifies the deletion propagation policy when 11187 - a Helm uninstall is performed. 11188 - enum: 11189 - - background 11190 - - foreground 11191 - - orphan 11192 - type: string 11193 - disableHooks: 11194 - description: DisableHooks prevents hooks from running during the Helm rollback action. 11195 - type: boolean 11196 - disableWait: 11197 - description: |- 11198 - DisableWait disables waiting for all the resources to be deleted after 11199 - a Helm uninstall is performed. 11200 - type: boolean 11201 - keepHistory: 11202 - description: |- 11203 - KeepHistory tells Helm to remove all associated resources and mark the 11204 - release as deleted, but retain the release history. 11205 - type: boolean 11206 - timeout: 11207 - description: |- 11208 - Timeout is the time to wait for any individual Kubernetes operation (like 11209 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 11210 - to 'HelmReleaseSpec.Timeout'. 11211 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11212 - type: string 11213 - type: object 11214 - upgrade: 11215 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 11216 - properties: 11217 - cleanupOnFail: 11218 - description: |- 11219 - CleanupOnFail allows deletion of new resources created during the Helm 11220 - upgrade action when it fails. 11221 - type: boolean 11222 - crds: 11223 - description: |- 11224 - CRDs upgrade CRDs from the Helm Chart's crds directory according 11225 - to the CRD upgrade policy provided here. Valid values are `Skip`, 11226 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 11227 - CRDs are neither installed nor upgraded. 11228 - 11229 - 11230 - Skip: do neither install nor replace (update) any CRDs. 11231 - 11232 - 11233 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 11234 - 11235 - 11236 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 11237 - but not deleted. 11238 - 11239 - 11240 - By default, CRDs are not applied during Helm upgrade action. With this 11241 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 11242 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 11243 - enum: 11244 - - Skip 11245 - - Create 11246 - - CreateReplace 11247 - type: string 11248 - disableHooks: 11249 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 11250 - type: boolean 11251 - disableOpenAPIValidation: 11252 - description: |- 11253 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 11254 - rendered templates against the Kubernetes OpenAPI Schema. 11255 - type: boolean 11256 - disableWait: 11257 - description: |- 11258 - DisableWait disables the waiting for resources to be ready after a Helm 11259 - upgrade has been performed. 11260 - type: boolean 11261 - disableWaitForJobs: 11262 - description: |- 11263 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 11264 - upgrade has been performed. 11265 - type: boolean 11266 - force: 11267 - description: Force forces resource updates through a replacement strategy. 11268 - type: boolean 11269 - preserveValues: 11270 - description: |- 11271 - PreserveValues will make Helm reuse the last release's values and merge in 11272 - overrides from 'Values'. Setting this flag makes the HelmRelease 11273 - non-declarative. 11274 - type: boolean 11275 - remediation: 11276 - description: |- 11277 - Remediation holds the remediation configuration for when the Helm upgrade 11278 - action for the HelmRelease fails. The default is to not perform any action. 11279 - properties: 11280 - ignoreTestFailures: 11281 - description: |- 11282 - IgnoreTestFailures tells the controller to skip remediation when the Helm 11283 - tests are run after an upgrade action but fail. 11284 - Defaults to 'Test.IgnoreFailures'. 11285 - type: boolean 11286 - remediateLastFailure: 11287 - description: |- 11288 - RemediateLastFailure tells the controller to remediate the last failure, when 11289 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 11290 - type: boolean 11291 - retries: 11292 - description: |- 11293 - Retries is the number of retries that should be attempted on failures before 11294 - bailing. Remediation, using 'Strategy', is performed between each attempt. 11295 - Defaults to '0', a negative integer equals to unlimited retries. 11296 - type: integer 11297 - strategy: 11298 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 11299 - enum: 11300 - - rollback 11301 - - uninstall 11302 - type: string 11303 - type: object 11304 - timeout: 11305 - description: |- 11306 - Timeout is the time to wait for any individual Kubernetes operation (like 11307 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 11308 - 'HelmReleaseSpec.Timeout'. 11309 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11310 - type: string 11311 - type: object 11312 - values: 11313 - description: Values holds the values for this Helm release. 11314 - x-kubernetes-preserve-unknown-fields: true 11315 - valuesFrom: 11316 - description: |- 11317 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 11318 - and information about how they should be merged. 11319 - items: 11320 - description: |- 11321 - ValuesReference contains a reference to a resource containing Helm values, 11322 - and optionally the key they can be found at. 11323 - properties: 11324 - kind: 11325 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 11326 - enum: 11327 - - Secret 11328 - - ConfigMap 11329 - type: string 11330 - name: 11331 - description: |- 11332 - Name of the values referent. Should reside in the same namespace as the 11333 - referring resource. 11334 - maxLength: 253 11335 - minLength: 1 11336 - type: string 11337 - optional: 11338 - description: |- 11339 - Optional marks this ValuesReference as optional. When set, a not found error 11340 - for the values reference is ignored, but any ValuesKey, TargetPath or 11341 - transient error will still result in a reconciliation failure. 11342 - type: boolean 11343 - targetPath: 11344 - description: |- 11345 - TargetPath is the YAML dot notation path the value should be merged at. When 11346 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 11347 - which results in the values getting merged at the root. 11348 - maxLength: 250 11349 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 11350 - type: string 11351 - valuesKey: 11352 - description: |- 11353 - ValuesKey is the data key where the values.yaml or a specific value can be 11354 - found at. Defaults to 'values.yaml'. 11355 - maxLength: 253 11356 - pattern: ^[\-._a-zA-Z0-9]+$ 11357 - type: string 11358 - required: 11359 - - kind 11360 - - name 11361 - type: object 11362 - type: array 11363 - required: 11364 - - interval 11365 - type: object 11366 - x-kubernetes-validations: 11367 - - message: either chart or chartRef must be set 11368 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 11369 - status: 11370 - default: 11371 - observedGeneration: -1 11372 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 11373 - properties: 11374 - conditions: 11375 - description: Conditions holds the conditions for the HelmRelease. 11376 - items: 11377 - description: "Condition contains details for one aspect of the current state of this API 11378 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 11379 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 11380 - the observations of a foo's current state.\n\t // Known .status.conditions.type 11381 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 11382 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 11383 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 11384 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 11385 - fields\n\t}" 11386 - properties: 11387 - lastTransitionTime: 11388 - description: |- 11389 - lastTransitionTime is the last time the condition transitioned from one status to another. 11390 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11391 - format: date-time 11392 - type: string 11393 - message: 11394 - description: |- 11395 - message is a human readable message indicating details about the transition. 11396 - This may be an empty string. 11397 - maxLength: 32768 11398 - type: string 11399 - observedGeneration: 11400 - description: |- 11401 - observedGeneration represents the .metadata.generation that the condition was set based upon. 11402 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11403 - with respect to the current state of the instance. 11404 - format: int64 11405 - minimum: 0 11406 - type: integer 11407 - reason: 11408 - description: |- 11409 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 11410 - Producers of specific condition types may define expected values and meanings for this field, 11411 - and whether the values are considered a guaranteed API. 11412 - The value should be a CamelCase string. 11413 - This field may not be empty. 11414 - maxLength: 1024 11415 - minLength: 1 11416 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11417 - type: string 11418 - status: 11419 - description: status of the condition, one of True, False, Unknown. 11420 - enum: 11421 - - "True" 11422 - - "False" 11423 - - Unknown 11424 - type: string 11425 - type: 11426 - description: |- 11427 - type of condition in CamelCase or in foo.example.com/CamelCase. 11428 - --- 11429 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 11430 - useful (see .node.status.conditions), the ability to deconflict is important. 11431 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 11432 - maxLength: 316 11433 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11434 - type: string 11435 - required: 11436 - - lastTransitionTime 11437 - - message 11438 - - reason 11439 - - status 11440 - - type 11441 - type: object 11442 - type: array 11443 - failures: 11444 - description: |- 11445 - Failures is the reconciliation failure count against the latest desired 11446 - state. It is reset after a successful reconciliation. 11447 - format: int64 11448 - type: integer 11449 - helmChart: 11450 - description: |- 11451 - HelmChart is the namespaced name of the HelmChart resource created by 11452 - the controller for the HelmRelease. 11453 - type: string 11454 - history: 11455 - description: |- 11456 - History holds the history of Helm releases performed for this HelmRelease 11457 - up to the last successfully completed release. 11458 - items: 11459 - description: |- 11460 - Snapshot captures a point-in-time copy of the status information for a Helm release, 11461 - as managed by the controller. 11462 - properties: 11463 - apiVersion: 11464 - description: |- 11465 - APIVersion is the API version of the Snapshot. 11466 - Provisional: when the calculation method of the Digest field is changed, 11467 - this field will be used to distinguish between the old and new methods. 11468 - type: string 11469 - appVersion: 11470 - description: AppVersion is the chart app version of the release object in storage. 11471 - type: string 11472 - chartName: 11473 - description: ChartName is the chart name of the release object in storage. 11474 - type: string 11475 - chartVersion: 11476 - description: |- 11477 - ChartVersion is the chart version of the release object in 11478 - storage. 11479 - type: string 11480 - configDigest: 11481 - description: |- 11482 - ConfigDigest is the checksum of the config (better known as 11483 - "values") of the release object in storage. 11484 - It has the format of `<algo>:<checksum>`. 11485 - type: string 11486 - deleted: 11487 - description: Deleted is when the release was deleted. 11488 - format: date-time 11489 - type: string 11490 - digest: 11491 - description: |- 11492 - Digest is the checksum of the release object in storage. 11493 - It has the format of `<algo>:<checksum>`. 11494 - type: string 11495 - firstDeployed: 11496 - description: FirstDeployed is when the release was first deployed. 11497 - format: date-time 11498 - type: string 11499 - lastDeployed: 11500 - description: LastDeployed is when the release was last deployed. 11501 - format: date-time 11502 - type: string 11503 - name: 11504 - description: Name is the name of the release. 11505 - type: string 11506 - namespace: 11507 - description: Namespace is the namespace the release is deployed to. 11508 - type: string 11509 - ociDigest: 11510 - description: OCIDigest is the digest of the OCI artifact associated with the release. 11511 - type: string 11512 - status: 11513 - description: Status is the current state of the release. 11514 - type: string 11515 - testHooks: 11516 - additionalProperties: 11517 - description: |- 11518 - TestHookStatus holds the status information for a test hook as observed 11519 - to be run by the controller. 11520 - properties: 11521 - lastCompleted: 11522 - description: LastCompleted is the time the test hook last completed. 11523 - format: date-time 11524 - type: string 11525 - lastStarted: 11526 - description: LastStarted is the time the test hook was last started. 11527 - format: date-time 11528 - type: string 11529 - phase: 11530 - description: Phase the test hook was observed to be in. 11531 - type: string 11532 - type: object 11533 - description: |- 11534 - TestHooks is the list of test hooks for the release as observed to be 11535 - run by the controller. 11536 - type: object 11537 - version: 11538 - description: Version is the version of the release object in storage. 11539 - type: integer 11540 - required: 11541 - - chartName 11542 - - chartVersion 11543 - - configDigest 11544 - - digest 11545 - - firstDeployed 11546 - - lastDeployed 11547 - - name 11548 - - namespace 11549 - - status 11550 - - version 11551 - type: object 11552 - type: array 11553 - installFailures: 11554 - description: |- 11555 - InstallFailures is the install failure count against the latest desired 11556 - state. It is reset after a successful reconciliation. 11557 - format: int64 11558 - type: integer 11559 - lastAttemptedConfigDigest: 11560 - description: |- 11561 - LastAttemptedConfigDigest is the digest for the config (better known as 11562 - "values") of the last reconciliation attempt. 11563 - type: string 11564 - lastAttemptedGeneration: 11565 - description: |- 11566 - LastAttemptedGeneration is the last generation the controller attempted 11567 - to reconcile. 11568 - format: int64 11569 - type: integer 11570 - lastAttemptedReleaseAction: 11571 - description: |- 11572 - LastAttemptedReleaseAction is the last release action performed for this 11573 - HelmRelease. It is used to determine the active remediation strategy. 11574 - enum: 11575 - - install 11576 - - upgrade 11577 - type: string 11578 - lastAttemptedRevision: 11579 - description: |- 11580 - LastAttemptedRevision is the Source revision of the last reconciliation 11581 - attempt. For OCIRepository sources, the 12 first characters of the digest are 11582 - appended to the chart version e.g. "1.2.3+1234567890ab". 11583 - type: string 11584 - lastAttemptedRevisionDigest: 11585 - description: |- 11586 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 11587 - This is only set for OCIRepository sources. 11588 - type: string 11589 - lastAttemptedValuesChecksum: 11590 - description: |- 11591 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 11592 - reconciliation attempt. 11593 - Deprecated: Use LastAttemptedConfigDigest instead. 11594 - type: string 11595 - lastHandledForceAt: 11596 - description: |- 11597 - LastHandledForceAt holds the value of the most recent force request 11598 - value, so a change of the annotation value can be detected. 11599 - type: string 11600 - lastHandledReconcileAt: 11601 - description: |- 11602 - LastHandledReconcileAt holds the value of the most recent 11603 - reconcile request value, so a change of the annotation value 11604 - can be detected. 11605 - type: string 11606 - lastHandledResetAt: 11607 - description: |- 11608 - LastHandledResetAt holds the value of the most recent reset request 11609 - value, so a change of the annotation value can be detected. 11610 - type: string 11611 - lastReleaseRevision: 11612 - description: |- 11613 - LastReleaseRevision is the revision of the last successful Helm release. 11614 - Deprecated: Use History instead. 11615 - type: integer 11616 - observedGeneration: 11617 - description: ObservedGeneration is the last observed generation. 11618 - format: int64 11619 - type: integer 11620 - observedPostRenderersDigest: 11621 - description: |- 11622 - ObservedPostRenderersDigest is the digest for the post-renderers of 11623 - the last successful reconciliation attempt. 11624 - type: string 11625 - storageNamespace: 11626 - description: |- 11627 - StorageNamespace is the namespace of the Helm release storage for the 11628 - current release. 11629 - maxLength: 63 11630 - minLength: 1 11631 - type: string 11632 - upgradeFailures: 11633 - description: |- 11634 - UpgradeFailures is the upgrade failure count against the latest desired 11635 - state. It is reset after a successful reconciliation. 11636 - format: int64 11637 - type: integer 11638 - type: object 11639 + name: 11640 + description: Name of the referent. 11641 + type: string 11642 + required: 11643 + - name 11644 type: object 11645 - served: true 11646 - storage: true 11647 - subresources: 11648 - status: {} 11649 - - additionalPrinterColumns: 11650 - - jsonPath: .metadata.creationTimestamp 11651 - name: Age 11652 - type: date 11653 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 11654 - name: Ready 11655 - type: string 11656 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 11657 - name: Status 11658 - type: string 11659 - deprecated: true 11660 - deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2 11661 - name: v2beta1 11662 - schema: 11663 - openAPIV3Schema: 11664 - description: HelmRelease is the Schema for the helmreleases API 11665 + suspend: 11666 + description: |- 11667 + Suspend tells the controller to suspend the reconciliation of this 11668 + HelmRepository. 11669 + type: boolean 11670 + timeout: 11671 + description: |- 11672 + Timeout is used for the index fetch operation for an HTTPS helm repository, 11673 + and for remote OCI Repository operations like pulling for an OCI helm 11674 + chart by the associated HelmChart. 11675 + Its default value is 60s. 11676 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 11677 + type: string 11678 + type: 11679 + description: |- 11680 + Type of the HelmRepository. 11681 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 11682 + enum: 11683 + - default 11684 + - oci 11685 + type: string 11686 + url: 11687 + description: |- 11688 + URL of the Helm repository, a valid URL contains at least a protocol and 11689 + host. 11690 + pattern: ^(http|https|oci)://.*$ 11691 + type: string 11692 + required: 11693 + - url 11694 + type: object 11695 + status: 11696 + default: 11697 + observedGeneration: -1 11698 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 11699 + properties: 11700 + artifact: 11701 + description: Artifact represents the last successful HelmRepository 11702 + reconciliation. 11703 properties: 11704 - apiVersion: 11705 - description: |- 11706 - APIVersion defines the versioned schema of this representation of an object. 11707 - Servers should convert recognized schemas to the latest internal value, and 11708 - may reject unrecognized values. 11709 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11710 - type: string 11711 - kind: 11712 - description: |- 11713 - Kind is a string value representing the REST resource this object represents. 11714 - Servers may infer this from the endpoint the client submits requests to. 11715 - Cannot be updated. 11716 - In CamelCase. 11717 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11718 - type: string 11719 - metadata: 11720 - type: object 11721 - spec: 11722 - description: HelmReleaseSpec defines the desired state of a Helm release. 11723 - properties: 11724 - chart: 11725 - description: |- 11726 - Chart defines the template of the v1beta2.HelmChart that should be created 11727 - for this HelmRelease. 11728 - properties: 11729 - metadata: 11730 - description: ObjectMeta holds the template for metadata like labels and annotations. 11731 - properties: 11732 - annotations: 11733 - additionalProperties: 11734 - type: string 11735 - description: |- 11736 - Annotations is an unstructured key value map stored with a resource that may be 11737 - set by external tools to store and retrieve arbitrary metadata. They are not 11738 - queryable and should be preserved when modifying objects. 11739 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 11740 - type: object 11741 - labels: 11742 - additionalProperties: 11743 - type: string 11744 - description: |- 11745 - Map of string keys and values that can be used to organize and categorize 11746 - (scope and select) objects. 11747 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 11748 - type: object 11749 - type: object 11750 - spec: 11751 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 11752 - properties: 11753 - chart: 11754 - description: The name or path the Helm chart is available at in the SourceRef. 11755 - type: string 11756 - interval: 11757 - description: |- 11758 - Interval at which to check the v1beta2.Source for updates. Defaults to 11759 - 'HelmReleaseSpec.Interval'. 11760 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11761 - type: string 11762 - reconcileStrategy: 11763 - default: ChartVersion 11764 - description: |- 11765 - Determines what enables the creation of a new artifact. Valid values are 11766 - ('ChartVersion', 'Revision'). 11767 - See the documentation of the values for an explanation on their behavior. 11768 - Defaults to ChartVersion when omitted. 11769 - enum: 11770 - - ChartVersion 11771 - - Revision 11772 - type: string 11773 - sourceRef: 11774 - description: The name and namespace of the v1beta2.Source the chart is available 11775 - at. 11776 - properties: 11777 - apiVersion: 11778 - description: APIVersion of the referent. 11779 - type: string 11780 - kind: 11781 - description: Kind of the referent. 11782 - enum: 11783 - - HelmRepository 11784 - - GitRepository 11785 - - Bucket 11786 - type: string 11787 - name: 11788 - description: Name of the referent. 11789 - maxLength: 253 11790 - minLength: 1 11791 - type: string 11792 - namespace: 11793 - description: Namespace of the referent. 11794 - maxLength: 63 11795 - minLength: 1 11796 - type: string 11797 - required: 11798 - - name 11799 - type: object 11800 - valuesFile: 11801 - description: |- 11802 - Alternative values file to use as the default chart values, expected to 11803 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 11804 - for backwards compatibility the file defined here is merged before the 11805 - ValuesFiles items. Ignored when omitted. 11806 - type: string 11807 - valuesFiles: 11808 - description: |- 11809 - Alternative list of values files to use as the chart values (values.yaml 11810 - is not included by default), expected to be a relative path in the SourceRef. 11811 - Values files are merged in the order of this list with the last file overriding 11812 - the first. Ignored when omitted. 11813 - items: 11814 - type: string 11815 - type: array 11816 - verify: 11817 - description: |- 11818 - Verify contains the secret name containing the trusted public keys 11819 - used to verify the signature and specifies which provider to use to check 11820 - whether OCI image is authentic. 11821 - This field is only supported for OCI sources. 11822 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 11823 - properties: 11824 - provider: 11825 - default: cosign 11826 - description: Provider specifies the technology used to sign the OCI 11827 - Helm chart. 11828 - enum: 11829 - - cosign 11830 - type: string 11831 - secretRef: 11832 - description: |- 11833 - SecretRef specifies the Kubernetes Secret containing the 11834 - trusted public keys. 11835 - properties: 11836 - name: 11837 - description: Name of the referent. 11838 - type: string 11839 - required: 11840 - - name 11841 - type: object 11842 - required: 11843 - - provider 11844 - type: object 11845 - version: 11846 - default: '*' 11847 - description: |- 11848 - Version semver expression, ignored for charts from v1beta2.GitRepository and 11849 - v1beta2.Bucket sources. Defaults to latest when omitted. 11850 - type: string 11851 - required: 11852 - - chart 11853 - - sourceRef 11854 - type: object 11855 - required: 11856 - - spec 11857 - type: object 11858 - chartRef: 11859 - description: |- 11860 - ChartRef holds a reference to a source controller resource containing the 11861 - Helm chart artifact. 11862 - 11863 - 11864 - Note: this field is provisional to the v2 API, and not actively used 11865 - by v2beta1 HelmReleases. 11866 - properties: 11867 - apiVersion: 11868 - description: APIVersion of the referent. 11869 - type: string 11870 - kind: 11871 - description: Kind of the referent. 11872 - enum: 11873 - - OCIRepository 11874 - - HelmChart 11875 - type: string 11876 - name: 11877 - description: Name of the referent. 11878 - maxLength: 253 11879 - minLength: 1 11880 - type: string 11881 - namespace: 11882 - description: |- 11883 - Namespace of the referent, defaults to the namespace of the Kubernetes 11884 - resource object that contains the reference. 11885 - maxLength: 63 11886 - minLength: 1 11887 - type: string 11888 - required: 11889 - - kind 11890 - - name 11891 - type: object 11892 - dependsOn: 11893 - description: |- 11894 - DependsOn may contain a meta.NamespacedObjectReference slice with 11895 - references to HelmRelease resources that must be ready before this HelmRelease 11896 - can be reconciled. 11897 - items: 11898 - description: |- 11899 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 11900 - namespace. 11901 - properties: 11902 - name: 11903 - description: Name of the referent. 11904 - type: string 11905 - namespace: 11906 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 11907 - type: string 11908 - required: 11909 - - name 11910 - type: object 11911 - type: array 11912 - driftDetection: 11913 - description: |- 11914 - DriftDetection holds the configuration for detecting and handling 11915 - differences between the manifest in the Helm storage and the resources 11916 - currently existing in the cluster. 11917 - 11918 - 11919 - Note: this field is provisional to the v2beta2 API, and not actively used 11920 - by v2beta1 HelmReleases. 11921 - properties: 11922 - ignore: 11923 - description: |- 11924 - Ignore contains a list of rules for specifying which changes to ignore 11925 - during diffing. 11926 - items: 11927 - description: |- 11928 - IgnoreRule defines a rule to selectively disregard specific changes during 11929 - the drift detection process. 11930 - properties: 11931 - paths: 11932 - description: |- 11933 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 11934 - consideration in a Kubernetes object. 11935 - items: 11936 - type: string 11937 - type: array 11938 - target: 11939 - description: |- 11940 - Target is a selector for specifying Kubernetes objects to which this 11941 - rule applies. 11942 - If Target is not set, the Paths will be ignored for all Kubernetes 11943 - objects within the manifest of the Helm release. 11944 - properties: 11945 - annotationSelector: 11946 - description: |- 11947 - AnnotationSelector is a string that follows the label selection expression 11948 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11949 - It matches with the resource annotations. 11950 - type: string 11951 - group: 11952 - description: |- 11953 - Group is the API group to select resources from. 11954 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 11955 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11956 - type: string 11957 - kind: 11958 - description: |- 11959 - Kind of the API Group to select resources from. 11960 - Together with Group and Version it is capable of unambiguously 11961 - identifying and/or selecting resources. 11962 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11963 - type: string 11964 - labelSelector: 11965 - description: |- 11966 - LabelSelector is a string that follows the label selection expression 11967 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 11968 - It matches with the resource labels. 11969 - type: string 11970 - name: 11971 - description: Name to match resources with. 11972 - type: string 11973 - namespace: 11974 - description: Namespace to select resources from. 11975 - type: string 11976 - version: 11977 - description: |- 11978 - Version of the API Group to select resources from. 11979 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 11980 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 11981 - type: string 11982 - type: object 11983 - required: 11984 - - paths 11985 - type: object 11986 - type: array 11987 - mode: 11988 - description: |- 11989 - Mode defines how differences should be handled between the Helm manifest 11990 - and the manifest currently applied to the cluster. 11991 - If not explicitly set, it defaults to DiffModeDisabled. 11992 - enum: 11993 - - enabled 11994 - - warn 11995 - - disabled 11996 - type: string 11997 - type: object 11998 - install: 11999 - description: Install holds the configuration for Helm install actions for this HelmRelease. 12000 - properties: 12001 - crds: 12002 - description: |- 12003 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12004 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12005 - `Create` or `CreateReplace`. Default is `Create` and if omitted 12006 - CRDs are installed but not updated. 12007 - 12008 - 12009 - Skip: do neither install nor replace (update) any CRDs. 12010 - 12011 - 12012 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12013 - 12014 - 12015 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12016 - but not deleted. 12017 - 12018 - 12019 - By default, CRDs are applied (installed) during Helm install action. 12020 - With this option users can opt-in to CRD replace existing CRDs on Helm 12021 - install actions, which is not (yet) natively supported by Helm. 12022 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12023 - enum: 12024 - - Skip 12025 - - Create 12026 - - CreateReplace 12027 - type: string 12028 - createNamespace: 12029 - description: |- 12030 - CreateNamespace tells the Helm install action to create the 12031 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 12032 - On uninstall, the namespace will not be garbage collected. 12033 - type: boolean 12034 - disableHooks: 12035 - description: DisableHooks prevents hooks from running during the Helm install action. 12036 - type: boolean 12037 - disableOpenAPIValidation: 12038 - description: |- 12039 - DisableOpenAPIValidation prevents the Helm install action from validating 12040 - rendered templates against the Kubernetes OpenAPI Schema. 12041 - type: boolean 12042 - disableWait: 12043 - description: |- 12044 - DisableWait disables the waiting for resources to be ready after a Helm 12045 - install has been performed. 12046 - type: boolean 12047 - disableWaitForJobs: 12048 - description: |- 12049 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12050 - install has been performed. 12051 - type: boolean 12052 - remediation: 12053 - description: |- 12054 - Remediation holds the remediation configuration for when the Helm install 12055 - action for the HelmRelease fails. The default is to not perform any action. 12056 - properties: 12057 - ignoreTestFailures: 12058 - description: |- 12059 - IgnoreTestFailures tells the controller to skip remediation when the Helm 12060 - tests are run after an install action but fail. Defaults to 12061 - 'Test.IgnoreFailures'. 12062 - type: boolean 12063 - remediateLastFailure: 12064 - description: |- 12065 - RemediateLastFailure tells the controller to remediate the last failure, when 12066 - no retries remain. Defaults to 'false'. 12067 - type: boolean 12068 - retries: 12069 - description: |- 12070 - Retries is the number of retries that should be attempted on failures before 12071 - bailing. Remediation, using an uninstall, is performed between each attempt. 12072 - Defaults to '0', a negative integer equals to unlimited retries. 12073 - type: integer 12074 - type: object 12075 - replace: 12076 - description: |- 12077 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 12078 - if that name is a deleted release which remains in the history. 12079 - type: boolean 12080 - skipCRDs: 12081 - description: |- 12082 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 12083 - CRDs are installed if not already present. 12084 - 12085 - 12086 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 12087 - type: boolean 12088 - timeout: 12089 - description: |- 12090 - Timeout is the time to wait for any individual Kubernetes operation (like 12091 - Jobs for hooks) during the performance of a Helm install action. Defaults to 12092 - 'HelmReleaseSpec.Timeout'. 12093 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12094 - type: string 12095 - type: object 12096 - interval: 12097 - description: |- 12098 - Interval at which to reconcile the Helm release. 12099 - This interval is approximate and may be subject to jitter to ensure 12100 - efficient use of resources. 12101 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12102 - type: string 12103 - kubeConfig: 12104 - description: |- 12105 - KubeConfig for reconciling the HelmRelease on a remote cluster. 12106 - When used in combination with HelmReleaseSpec.ServiceAccountName, 12107 - forces the controller to act on behalf of that Service Account at the 12108 - target cluster. 12109 - If the --default-service-account flag is set, its value will be used as 12110 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 12111 - is empty. 12112 - properties: 12113 - secretRef: 12114 - description: |- 12115 - SecretRef holds the name of a secret that contains a key with 12116 - the kubeconfig file as the value. If no key is set, the key will default 12117 - to 'value'. 12118 - It is recommended that the kubeconfig is self-contained, and the secret 12119 - is regularly updated if credentials such as a cloud-access-token expire. 12120 - Cloud specific `cmd-path` auth helpers will not function without adding 12121 - binaries and credentials to the Pod that is responsible for reconciling 12122 - Kubernetes resources. 12123 - properties: 12124 - key: 12125 - description: Key in the Secret, when not specified an implementation-specific 12126 - default key is used. 12127 - type: string 12128 - name: 12129 - description: Name of the Secret. 12130 - type: string 12131 - required: 12132 - - name 12133 - type: object 12134 - required: 12135 - - secretRef 12136 - type: object 12137 - maxHistory: 12138 - description: |- 12139 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 12140 - Use '0' for an unlimited number of revisions; defaults to '10'. 12141 - type: integer 12142 - persistentClient: 12143 - description: |- 12144 - PersistentClient tells the controller to use a persistent Kubernetes 12145 - client for this release. When enabled, the client will be reused for the 12146 - duration of the reconciliation, instead of being created and destroyed 12147 - for each (step of a) Helm action. 12148 - 12149 - 12150 - This can improve performance, but may cause issues with some Helm charts 12151 - that for example do create Custom Resource Definitions during installation 12152 - outside Helm's CRD lifecycle hooks, which are then not observed to be 12153 - available by e.g. post-install hooks. 12154 - 12155 - 12156 - If not set, it defaults to true. 12157 - type: boolean 12158 - postRenderers: 12159 - description: |- 12160 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 12161 - of their definition. 12162 - items: 12163 - description: PostRenderer contains a Helm PostRenderer specification. 12164 - properties: 12165 - kustomize: 12166 - description: Kustomization to apply as PostRenderer. 12167 - properties: 12168 - images: 12169 - description: |- 12170 - Images is a list of (image name, new name, new tag or digest) 12171 - for changing image names, tags or digests. This can also be achieved with a 12172 - patch, but this operator is simpler to specify. 12173 - items: 12174 - description: Image contains an image name, a new name, a new tag or 12175 - digest, which will replace the original name and tag. 12176 - properties: 12177 - digest: 12178 - description: |- 12179 - Digest is the value used to replace the original image tag. 12180 - If digest is present NewTag value is ignored. 12181 - type: string 12182 - name: 12183 - description: Name is a tag-less image name. 12184 - type: string 12185 - newName: 12186 - description: NewName is the value used to replace the original 12187 - name. 12188 - type: string 12189 - newTag: 12190 - description: NewTag is the value used to replace the original 12191 - tag. 12192 - type: string 12193 - required: 12194 - - name 12195 - type: object 12196 - type: array 12197 - patches: 12198 - description: |- 12199 - Strategic merge and JSON patches, defined as inline YAML objects, 12200 - capable of targeting objects based on kind, label and annotation selectors. 12201 - items: 12202 - description: |- 12203 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 12204 - be applied to. 12205 - properties: 12206 - patch: 12207 - description: |- 12208 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 12209 - an array of operation objects. 12210 - type: string 12211 - target: 12212 - description: Target points to the resources that the patch 12213 - document should be applied to. 12214 - properties: 12215 - annotationSelector: 12216 - description: |- 12217 - AnnotationSelector is a string that follows the label selection expression 12218 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12219 - It matches with the resource annotations. 12220 - type: string 12221 - group: 12222 - description: |- 12223 - Group is the API group to select resources from. 12224 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12225 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12226 - type: string 12227 - kind: 12228 - description: |- 12229 - Kind of the API Group to select resources from. 12230 - Together with Group and Version it is capable of unambiguously 12231 - identifying and/or selecting resources. 12232 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12233 - type: string 12234 - labelSelector: 12235 - description: |- 12236 - LabelSelector is a string that follows the label selection expression 12237 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12238 - It matches with the resource labels. 12239 - type: string 12240 - name: 12241 - description: Name to match resources with. 12242 - type: string 12243 - namespace: 12244 - description: Namespace to select resources from. 12245 - type: string 12246 - version: 12247 - description: |- 12248 - Version of the API Group to select resources from. 12249 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12250 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12251 - type: string 12252 - type: object 12253 - required: 12254 - - patch 12255 - type: object 12256 - type: array 12257 - patchesJson6902: 12258 - description: JSON 6902 patches, defined as inline YAML objects. 12259 - items: 12260 - description: JSON6902Patch contains a JSON6902 patch and the target 12261 - the patch should be applied to. 12262 - properties: 12263 - patch: 12264 - description: Patch contains the JSON6902 patch document with 12265 - an array of operation objects. 12266 - items: 12267 - description: |- 12268 - JSON6902 is a JSON6902 operation object. 12269 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 12270 - properties: 12271 - from: 12272 - description: |- 12273 - From contains a JSON-pointer value that references a location within the target document where the operation is 12274 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 12275 - type: string 12276 - op: 12277 - description: |- 12278 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 12279 - "test". 12280 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 12281 - enum: 12282 - - test 12283 - - remove 12284 - - add 12285 - - replace 12286 - - move 12287 - - copy 12288 - type: string 12289 - path: 12290 - description: |- 12291 - Path contains the JSON-pointer value that references a location within the target document where the operation 12292 - is performed. The meaning of the value depends on the value of Op. 12293 - type: string 12294 - value: 12295 - description: |- 12296 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 12297 - account by all operations. 12298 - x-kubernetes-preserve-unknown-fields: true 12299 - required: 12300 - - op 12301 - - path 12302 - type: object 12303 - type: array 12304 - target: 12305 - description: Target points to the resources that the patch 12306 - document should be applied to. 12307 - properties: 12308 - annotationSelector: 12309 - description: |- 12310 - AnnotationSelector is a string that follows the label selection expression 12311 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12312 - It matches with the resource annotations. 12313 - type: string 12314 - group: 12315 - description: |- 12316 - Group is the API group to select resources from. 12317 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 12318 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12319 - type: string 12320 - kind: 12321 - description: |- 12322 - Kind of the API Group to select resources from. 12323 - Together with Group and Version it is capable of unambiguously 12324 - identifying and/or selecting resources. 12325 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12326 - type: string 12327 - labelSelector: 12328 - description: |- 12329 - LabelSelector is a string that follows the label selection expression 12330 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 12331 - It matches with the resource labels. 12332 - type: string 12333 - name: 12334 - description: Name to match resources with. 12335 - type: string 12336 - namespace: 12337 - description: Namespace to select resources from. 12338 - type: string 12339 - version: 12340 - description: |- 12341 - Version of the API Group to select resources from. 12342 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 12343 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 12344 - type: string 12345 - type: object 12346 - required: 12347 - - patch 12348 - - target 12349 - type: object 12350 - type: array 12351 - patchesStrategicMerge: 12352 - description: Strategic merge patches, defined as inline YAML objects. 12353 - items: 12354 - x-kubernetes-preserve-unknown-fields: true 12355 - type: array 12356 - type: object 12357 - type: object 12358 - type: array 12359 - releaseName: 12360 - description: |- 12361 - ReleaseName used for the Helm release. Defaults to a composition of 12362 - '[TargetNamespace-]Name'. 12363 - maxLength: 53 12364 - minLength: 1 12365 - type: string 12366 - rollback: 12367 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 12368 - properties: 12369 - cleanupOnFail: 12370 - description: |- 12371 - CleanupOnFail allows deletion of new resources created during the Helm 12372 - rollback action when it fails. 12373 - type: boolean 12374 - disableHooks: 12375 - description: DisableHooks prevents hooks from running during the Helm rollback action. 12376 - type: boolean 12377 - disableWait: 12378 - description: |- 12379 - DisableWait disables the waiting for resources to be ready after a Helm 12380 - rollback has been performed. 12381 - type: boolean 12382 - disableWaitForJobs: 12383 - description: |- 12384 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12385 - rollback has been performed. 12386 - type: boolean 12387 - force: 12388 - description: Force forces resource updates through a replacement strategy. 12389 - type: boolean 12390 - recreate: 12391 - description: Recreate performs pod restarts for the resource if applicable. 12392 - type: boolean 12393 - timeout: 12394 - description: |- 12395 - Timeout is the time to wait for any individual Kubernetes operation (like 12396 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 12397 - 'HelmReleaseSpec.Timeout'. 12398 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12399 - type: string 12400 - type: object 12401 - serviceAccountName: 12402 - description: |- 12403 - The name of the Kubernetes service account to impersonate 12404 - when reconciling this HelmRelease. 12405 - type: string 12406 - storageNamespace: 12407 - description: |- 12408 - StorageNamespace used for the Helm storage. 12409 - Defaults to the namespace of the HelmRelease. 12410 - maxLength: 63 12411 - minLength: 1 12412 - type: string 12413 - suspend: 12414 - description: |- 12415 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 12416 - it does not apply to already started reconciliations. Defaults to false. 12417 - type: boolean 12418 - targetNamespace: 12419 - description: |- 12420 - TargetNamespace to target when performing operations for the HelmRelease. 12421 - Defaults to the namespace of the HelmRelease. 12422 - maxLength: 63 12423 - minLength: 1 12424 - type: string 12425 - test: 12426 - description: Test holds the configuration for Helm test actions for this HelmRelease. 12427 - properties: 12428 - enable: 12429 - description: |- 12430 - Enable enables Helm test actions for this HelmRelease after an Helm install 12431 - or upgrade action has been performed. 12432 - type: boolean 12433 - ignoreFailures: 12434 - description: |- 12435 - IgnoreFailures tells the controller to skip remediation when the Helm tests 12436 - are run but fail. Can be overwritten for tests run after install or upgrade 12437 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 12438 - type: boolean 12439 - timeout: 12440 - description: |- 12441 - Timeout is the time to wait for any individual Kubernetes operation during 12442 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 12443 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12444 - type: string 12445 - type: object 12446 - timeout: 12447 - description: |- 12448 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 12449 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 12450 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12451 - type: string 12452 - uninstall: 12453 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 12454 - properties: 12455 - deletionPropagation: 12456 - default: background 12457 - description: |- 12458 - DeletionPropagation specifies the deletion propagation policy when 12459 - a Helm uninstall is performed. 12460 - enum: 12461 - - background 12462 - - foreground 12463 - - orphan 12464 - type: string 12465 - disableHooks: 12466 - description: DisableHooks prevents hooks from running during the Helm rollback action. 12467 - type: boolean 12468 - disableWait: 12469 - description: |- 12470 - DisableWait disables waiting for all the resources to be deleted after 12471 - a Helm uninstall is performed. 12472 - type: boolean 12473 - keepHistory: 12474 - description: |- 12475 - KeepHistory tells Helm to remove all associated resources and mark the 12476 - release as deleted, but retain the release history. 12477 - type: boolean 12478 - timeout: 12479 - description: |- 12480 - Timeout is the time to wait for any individual Kubernetes operation (like 12481 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 12482 - to 'HelmReleaseSpec.Timeout'. 12483 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12484 - type: string 12485 - type: object 12486 - upgrade: 12487 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 12488 - properties: 12489 - cleanupOnFail: 12490 - description: |- 12491 - CleanupOnFail allows deletion of new resources created during the Helm 12492 - upgrade action when it fails. 12493 - type: boolean 12494 - crds: 12495 - description: |- 12496 - CRDs upgrade CRDs from the Helm Chart's crds directory according 12497 - to the CRD upgrade policy provided here. Valid values are `Skip`, 12498 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 12499 - CRDs are neither installed nor upgraded. 12500 - 12501 - 12502 - Skip: do neither install nor replace (update) any CRDs. 12503 - 12504 - 12505 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 12506 - 12507 - 12508 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 12509 - but not deleted. 12510 - 12511 - 12512 - By default, CRDs are not applied during Helm upgrade action. With this 12513 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 12514 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 12515 - enum: 12516 - - Skip 12517 - - Create 12518 - - CreateReplace 12519 - type: string 12520 - disableHooks: 12521 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 12522 - type: boolean 12523 - disableOpenAPIValidation: 12524 - description: |- 12525 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 12526 - rendered templates against the Kubernetes OpenAPI Schema. 12527 - type: boolean 12528 - disableWait: 12529 - description: |- 12530 - DisableWait disables the waiting for resources to be ready after a Helm 12531 - upgrade has been performed. 12532 - type: boolean 12533 - disableWaitForJobs: 12534 - description: |- 12535 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 12536 - upgrade has been performed. 12537 - type: boolean 12538 - force: 12539 - description: Force forces resource updates through a replacement strategy. 12540 - type: boolean 12541 - preserveValues: 12542 - description: |- 12543 - PreserveValues will make Helm reuse the last release's values and merge in 12544 - overrides from 'Values'. Setting this flag makes the HelmRelease 12545 - non-declarative. 12546 - type: boolean 12547 - remediation: 12548 - description: |- 12549 - Remediation holds the remediation configuration for when the Helm upgrade 12550 - action for the HelmRelease fails. The default is to not perform any action. 12551 - properties: 12552 - ignoreTestFailures: 12553 - description: |- 12554 - IgnoreTestFailures tells the controller to skip remediation when the Helm 12555 - tests are run after an upgrade action but fail. 12556 - Defaults to 'Test.IgnoreFailures'. 12557 - type: boolean 12558 - remediateLastFailure: 12559 - description: |- 12560 - RemediateLastFailure tells the controller to remediate the last failure, when 12561 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 12562 - type: boolean 12563 - retries: 12564 - description: |- 12565 - Retries is the number of retries that should be attempted on failures before 12566 - bailing. Remediation, using 'Strategy', is performed between each attempt. 12567 - Defaults to '0', a negative integer equals to unlimited retries. 12568 - type: integer 12569 - strategy: 12570 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 12571 - enum: 12572 - - rollback 12573 - - uninstall 12574 - type: string 12575 - type: object 12576 - timeout: 12577 - description: |- 12578 - Timeout is the time to wait for any individual Kubernetes operation (like 12579 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 12580 - 'HelmReleaseSpec.Timeout'. 12581 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12582 - type: string 12583 - type: object 12584 - values: 12585 - description: Values holds the values for this Helm release. 12586 - x-kubernetes-preserve-unknown-fields: true 12587 - valuesFrom: 12588 - description: |- 12589 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 12590 - and information about how they should be merged. 12591 - items: 12592 - description: |- 12593 - ValuesReference contains a reference to a resource containing Helm values, 12594 - and optionally the key they can be found at. 12595 - properties: 12596 - kind: 12597 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 12598 - enum: 12599 - - Secret 12600 - - ConfigMap 12601 - type: string 12602 - name: 12603 - description: |- 12604 - Name of the values referent. Should reside in the same namespace as the 12605 - referring resource. 12606 - maxLength: 253 12607 - minLength: 1 12608 - type: string 12609 - optional: 12610 - description: |- 12611 - Optional marks this ValuesReference as optional. When set, a not found error 12612 - for the values reference is ignored, but any ValuesKey, TargetPath or 12613 - transient error will still result in a reconciliation failure. 12614 - type: boolean 12615 - targetPath: 12616 - description: |- 12617 - TargetPath is the YAML dot notation path the value should be merged at. When 12618 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 12619 - which results in the values getting merged at the root. 12620 - maxLength: 250 12621 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 12622 - type: string 12623 - valuesKey: 12624 - description: |- 12625 - ValuesKey is the data key where the values.yaml or a specific value can be 12626 - found at. Defaults to 'values.yaml'. 12627 - When set, must be a valid Data Key, consisting of alphanumeric characters, 12628 - '-', '_' or '.'. 12629 - maxLength: 253 12630 - pattern: ^[\-._a-zA-Z0-9]+$ 12631 - type: string 12632 - required: 12633 - - kind 12634 - - name 12635 - type: object 12636 - type: array 12637 - required: 12638 - - interval 12639 - type: object 12640 + digest: 12641 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 12642 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 12643 + type: string 12644 + lastUpdateTime: 12645 + description: |- 12646 + LastUpdateTime is the timestamp corresponding to the last update of the 12647 + Artifact. 12648 + format: date-time 12649 + type: string 12650 + metadata: 12651 + additionalProperties: 12652 + type: string 12653 + description: Metadata holds upstream information such as OCI annotations. 12654 + type: object 12655 + path: 12656 + description: |- 12657 + Path is the relative file path of the Artifact. It can be used to locate 12658 + the file in the root of the Artifact storage on the local file system of 12659 + the controller managing the Source. 12660 + type: string 12661 + revision: 12662 + description: |- 12663 + Revision is a human-readable identifier traceable in the origin source 12664 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 12665 + type: string 12666 + size: 12667 + description: Size is the number of bytes in the file. 12668 + format: int64 12669 + type: integer 12670 + url: 12671 + description: |- 12672 + URL is the HTTP address of the Artifact as exposed by the controller 12673 + managing the Source. It can be used to retrieve the Artifact for 12674 + consumption, e.g. by another controller applying the Artifact contents. 12675 + type: string 12676 + required: 12677 + - lastUpdateTime 12678 + - path 12679 + - revision 12680 + - url 12681 + type: object 12682 + conditions: 12683 + description: Conditions holds the conditions for the HelmRepository. 12684 + items: 12685 + description: Condition contains details for one aspect of the current 12686 + state of this API Resource. 12687 + properties: 12688 + lastTransitionTime: 12689 + description: |- 12690 + lastTransitionTime is the last time the condition transitioned from one status to another. 12691 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12692 + format: date-time 12693 + type: string 12694 + message: 12695 + description: |- 12696 + message is a human readable message indicating details about the transition. 12697 + This may be an empty string. 12698 + maxLength: 32768 12699 + type: string 12700 + observedGeneration: 12701 + description: |- 12702 + observedGeneration represents the .metadata.generation that the condition was set based upon. 12703 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12704 + with respect to the current state of the instance. 12705 + format: int64 12706 + minimum: 0 12707 + type: integer 12708 + reason: 12709 + description: |- 12710 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 12711 + Producers of specific condition types may define expected values and meanings for this field, 12712 + and whether the values are considered a guaranteed API. 12713 + The value should be a CamelCase string. 12714 + This field may not be empty. 12715 + maxLength: 1024 12716 + minLength: 1 12717 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12718 + type: string 12719 status: 12720 - default: 12721 - observedGeneration: -1 12722 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 12723 - properties: 12724 - conditions: 12725 - description: Conditions holds the conditions for the HelmRelease. 12726 - items: 12727 - description: "Condition contains details for one aspect of the current state of this API 12728 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 12729 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 12730 - the observations of a foo's current state.\n\t // Known .status.conditions.type 12731 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 12732 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 12733 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 12734 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 12735 - fields\n\t}" 12736 - properties: 12737 - lastTransitionTime: 12738 - description: |- 12739 - lastTransitionTime is the last time the condition transitioned from one status to another. 12740 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12741 - format: date-time 12742 - type: string 12743 - message: 12744 - description: |- 12745 - message is a human readable message indicating details about the transition. 12746 - This may be an empty string. 12747 - maxLength: 32768 12748 - type: string 12749 - observedGeneration: 12750 - description: |- 12751 - observedGeneration represents the .metadata.generation that the condition was set based upon. 12752 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12753 - with respect to the current state of the instance. 12754 - format: int64 12755 - minimum: 0 12756 - type: integer 12757 - reason: 12758 - description: |- 12759 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 12760 - Producers of specific condition types may define expected values and meanings for this field, 12761 - and whether the values are considered a guaranteed API. 12762 - The value should be a CamelCase string. 12763 - This field may not be empty. 12764 - maxLength: 1024 12765 - minLength: 1 12766 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12767 - type: string 12768 - status: 12769 - description: status of the condition, one of True, False, Unknown. 12770 - enum: 12771 - - "True" 12772 - - "False" 12773 - - Unknown 12774 - type: string 12775 - type: 12776 - description: |- 12777 - type of condition in CamelCase or in foo.example.com/CamelCase. 12778 - --- 12779 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 12780 - useful (see .node.status.conditions), the ability to deconflict is important. 12781 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 12782 - maxLength: 316 12783 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12784 - type: string 12785 - required: 12786 - - lastTransitionTime 12787 - - message 12788 - - reason 12789 - - status 12790 - - type 12791 - type: object 12792 - type: array 12793 - failures: 12794 - description: |- 12795 - Failures is the reconciliation failure count against the latest desired 12796 - state. It is reset after a successful reconciliation. 12797 - format: int64 12798 - type: integer 12799 - helmChart: 12800 - description: |- 12801 - HelmChart is the namespaced name of the HelmChart resource created by 12802 - the controller for the HelmRelease. 12803 - type: string 12804 - history: 12805 - description: |- 12806 - History holds the history of Helm releases performed for this HelmRelease 12807 - up to the last successfully completed release. 12808 - 12809 - 12810 - Note: this field is provisional to the v2beta2 API, and not actively used 12811 - by v2beta1 HelmReleases. 12812 - items: 12813 - description: |- 12814 - Snapshot captures a point-in-time copy of the status information for a Helm release, 12815 - as managed by the controller. 12816 - properties: 12817 - apiVersion: 12818 - description: |- 12819 - APIVersion is the API version of the Snapshot. 12820 - Provisional: when the calculation method of the Digest field is changed, 12821 - this field will be used to distinguish between the old and new methods. 12822 - type: string 12823 - appVersion: 12824 - description: AppVersion is the chart app version of the release object in storage. 12825 - type: string 12826 - chartName: 12827 - description: ChartName is the chart name of the release object in storage. 12828 - type: string 12829 - chartVersion: 12830 - description: |- 12831 - ChartVersion is the chart version of the release object in 12832 - storage. 12833 - type: string 12834 - configDigest: 12835 - description: |- 12836 - ConfigDigest is the checksum of the config (better known as 12837 - "values") of the release object in storage. 12838 - It has the format of `<algo>:<checksum>`. 12839 - type: string 12840 - deleted: 12841 - description: Deleted is when the release was deleted. 12842 - format: date-time 12843 - type: string 12844 - digest: 12845 - description: |- 12846 - Digest is the checksum of the release object in storage. 12847 - It has the format of `<algo>:<checksum>`. 12848 - type: string 12849 - firstDeployed: 12850 - description: FirstDeployed is when the release was first deployed. 12851 - format: date-time 12852 - type: string 12853 - lastDeployed: 12854 - description: LastDeployed is when the release was last deployed. 12855 - format: date-time 12856 - type: string 12857 - name: 12858 - description: Name is the name of the release. 12859 - type: string 12860 - namespace: 12861 - description: Namespace is the namespace the release is deployed to. 12862 - type: string 12863 - ociDigest: 12864 - description: OCIDigest is the digest of the OCI artifact associated with the release. 12865 - type: string 12866 - status: 12867 - description: Status is the current state of the release. 12868 - type: string 12869 - testHooks: 12870 - additionalProperties: 12871 - description: |- 12872 - TestHookStatus holds the status information for a test hook as observed 12873 - to be run by the controller. 12874 - properties: 12875 - lastCompleted: 12876 - description: LastCompleted is the time the test hook last completed. 12877 - format: date-time 12878 - type: string 12879 - lastStarted: 12880 - description: LastStarted is the time the test hook was last started. 12881 - format: date-time 12882 - type: string 12883 - phase: 12884 - description: Phase the test hook was observed to be in. 12885 - type: string 12886 - type: object 12887 - description: |- 12888 - TestHooks is the list of test hooks for the release as observed to be 12889 - run by the controller. 12890 - type: object 12891 - version: 12892 - description: Version is the version of the release object in storage. 12893 - type: integer 12894 - required: 12895 - - chartName 12896 - - chartVersion 12897 - - configDigest 12898 - - digest 12899 - - firstDeployed 12900 - - lastDeployed 12901 - - name 12902 - - namespace 12903 - - status 12904 - - version 12905 - type: object 12906 - type: array 12907 - installFailures: 12908 - description: |- 12909 - InstallFailures is the install failure count against the latest desired 12910 - state. It is reset after a successful reconciliation. 12911 - format: int64 12912 - type: integer 12913 - lastAppliedRevision: 12914 - description: LastAppliedRevision is the revision of the last successfully applied source. 12915 - type: string 12916 - lastAttemptedConfigDigest: 12917 - description: |- 12918 - LastAttemptedConfigDigest is the digest for the config (better known as 12919 - "values") of the last reconciliation attempt. 12920 - 12921 - 12922 - Note: this field is provisional to the v2beta2 API, and not actively used 12923 - by v2beta1 HelmReleases. 12924 - type: string 12925 - lastAttemptedGeneration: 12926 - description: |- 12927 - LastAttemptedGeneration is the last generation the controller attempted 12928 - to reconcile. 12929 - 12930 - 12931 - Note: this field is provisional to the v2beta2 API, and not actively used 12932 - by v2beta1 HelmReleases. 12933 - format: int64 12934 - type: integer 12935 - lastAttemptedReleaseAction: 12936 - description: |- 12937 - LastAttemptedReleaseAction is the last release action performed for this 12938 - HelmRelease. It is used to determine the active remediation strategy. 12939 - 12940 - 12941 - Note: this field is provisional to the v2beta2 API, and not actively used 12942 - by v2beta1 HelmReleases. 12943 - type: string 12944 - lastAttemptedRevision: 12945 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 12946 - type: string 12947 - lastAttemptedValuesChecksum: 12948 - description: |- 12949 - LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last 12950 - reconciliation attempt. 12951 - type: string 12952 - lastHandledForceAt: 12953 - description: |- 12954 - LastHandledForceAt holds the value of the most recent force request 12955 - value, so a change of the annotation value can be detected. 12956 - 12957 - 12958 - Note: this field is provisional to the v2beta2 API, and not actively used 12959 - by v2beta1 HelmReleases. 12960 - type: string 12961 - lastHandledReconcileAt: 12962 - description: |- 12963 - LastHandledReconcileAt holds the value of the most recent 12964 - reconcile request value, so a change of the annotation value 12965 - can be detected. 12966 - type: string 12967 - lastHandledResetAt: 12968 - description: |- 12969 - LastHandledResetAt holds the value of the most recent reset request 12970 - value, so a change of the annotation value can be detected. 12971 - 12972 - 12973 - Note: this field is provisional to the v2beta2 API, and not actively used 12974 - by v2beta1 HelmReleases. 12975 - type: string 12976 - lastReleaseRevision: 12977 - description: LastReleaseRevision is the revision of the last successful Helm release. 12978 - type: integer 12979 - observedGeneration: 12980 - description: ObservedGeneration is the last observed generation. 12981 - format: int64 12982 - type: integer 12983 - observedPostRenderersDigest: 12984 - description: |- 12985 - ObservedPostRenderersDigest is the digest for the post-renderers of 12986 - the last successful reconciliation attempt. 12987 - type: string 12988 - storageNamespace: 12989 - description: |- 12990 - StorageNamespace is the namespace of the Helm release storage for the 12991 - current release. 12992 - 12993 - 12994 - Note: this field is provisional to the v2beta2 API, and not actively used 12995 - by v2beta1 HelmReleases. 12996 - type: string 12997 - upgradeFailures: 12998 - description: |- 12999 - UpgradeFailures is the upgrade failure count against the latest desired 13000 - state. It is reset after a successful reconciliation. 13001 - format: int64 13002 - type: integer 13003 - type: object 13004 + description: status of the condition, one of True, False, Unknown. 13005 + enum: 13006 + - "True" 13007 + - "False" 13008 + - Unknown 13009 + type: string 13010 + type: 13011 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13012 + maxLength: 316 13013 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13014 + type: string 13015 + required: 13016 + - lastTransitionTime 13017 + - message 13018 + - reason 13019 + - status 13020 + - type 13021 + type: object 13022 + type: array 13023 + lastHandledReconcileAt: 13024 + description: |- 13025 + LastHandledReconcileAt holds the value of the most recent 13026 + reconcile request value, so a change of the annotation value 13027 + can be detected. 13028 + type: string 13029 + observedGeneration: 13030 + description: |- 13031 + ObservedGeneration is the last observed generation of the HelmRepository 13032 + object. 13033 + format: int64 13034 + type: integer 13035 + url: 13036 + description: |- 13037 + URL is the dynamic fetch link for the latest Artifact. 13038 + It is provided on a "best effort" basis, and using the precise 13039 + HelmRepositoryStatus.Artifact data is recommended. 13040 + type: string 13041 + type: object 13042 + type: object 13043 + served: true 13044 + storage: false 13045 + subresources: 13046 + status: {} 13047 +--- 13048 +apiVersion: apiextensions.k8s.io/v1 13049 +kind: CustomResourceDefinition 13050 +metadata: 13051 + annotations: 13052 + controller-gen.kubebuilder.io/version: v0.16.1 13053 + labels: 13054 + app.kubernetes.io/component: source-controller 13055 + app.kubernetes.io/instance: flux-system 13056 + app.kubernetes.io/part-of: flux 13057 + app.kubernetes.io/version: v2.4.0 13058 + name: ocirepositories.source.toolkit.fluxcd.io 13059 +spec: 13060 + group: source.toolkit.fluxcd.io 13061 + names: 13062 + kind: OCIRepository 13063 + listKind: OCIRepositoryList 13064 + plural: ocirepositories 13065 + shortNames: 13066 + - ocirepo 13067 + singular: ocirepository 13068 + scope: Namespaced 13069 + versions: 13070 + - additionalPrinterColumns: 13071 + - jsonPath: .spec.url 13072 + name: URL 13073 + type: string 13074 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13075 + name: Ready 13076 + type: string 13077 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13078 + name: Status 13079 + type: string 13080 + - jsonPath: .metadata.creationTimestamp 13081 + name: Age 13082 + type: date 13083 + name: v1beta2 13084 + schema: 13085 + openAPIV3Schema: 13086 + description: OCIRepository is the Schema for the ocirepositories API 13087 + properties: 13088 + apiVersion: 13089 + description: |- 13090 + APIVersion defines the versioned schema of this representation of an object. 13091 + Servers should convert recognized schemas to the latest internal value, and 13092 + may reject unrecognized values. 13093 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13094 + type: string 13095 + kind: 13096 + description: |- 13097 + Kind is a string value representing the REST resource this object represents. 13098 + Servers may infer this from the endpoint the client submits requests to. 13099 + Cannot be updated. 13100 + In CamelCase. 13101 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13102 + type: string 13103 + metadata: 13104 + type: object 13105 + spec: 13106 + description: OCIRepositorySpec defines the desired state of OCIRepository 13107 + properties: 13108 + certSecretRef: 13109 + description: |- 13110 + CertSecretRef can be given the name of a Secret containing 13111 + either or both of 13112 + 13113 + - a PEM-encoded client certificate (`tls.crt`) and private 13114 + key (`tls.key`); 13115 + - a PEM-encoded CA certificate (`ca.crt`) 13116 + 13117 + and whichever are supplied, will be used for connecting to the 13118 + registry. The client cert and key are useful if you are 13119 + authenticating with a certificate; the CA cert is useful if 13120 + you are using a self-signed server certificate. The Secret must 13121 + be of type `Opaque` or `kubernetes.io/tls`. 13122 + 13123 + Note: Support for the `caFile`, `certFile` and `keyFile` keys have 13124 + been deprecated. 13125 + properties: 13126 + name: 13127 + description: Name of the referent. 13128 + type: string 13129 + required: 13130 + - name 13131 + type: object 13132 + ignore: 13133 + description: |- 13134 + Ignore overrides the set of excluded patterns in the .sourceignore format 13135 + (which is the same as .gitignore). If not provided, a default will be used, 13136 + consult the documentation for your version to find out what those are. 13137 + type: string 13138 + insecure: 13139 + description: Insecure allows connecting to a non-TLS HTTP container 13140 + registry. 13141 + type: boolean 13142 + interval: 13143 + description: |- 13144 + Interval at which the OCIRepository URL is checked for updates. 13145 + This interval is approximate and may be subject to jitter to ensure 13146 + efficient use of resources. 13147 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13148 + type: string 13149 + layerSelector: 13150 + description: |- 13151 + LayerSelector specifies which layer should be extracted from the OCI artifact. 13152 + When not specified, the first layer found in the artifact is selected. 13153 + properties: 13154 + mediaType: 13155 + description: |- 13156 + MediaType specifies the OCI media type of the layer 13157 + which should be extracted from the OCI Artifact. The 13158 + first layer matching this type is selected. 13159 + type: string 13160 + operation: 13161 + description: |- 13162 + Operation specifies how the selected layer should be processed. 13163 + By default, the layer compressed content is extracted to storage. 13164 + When the operation is set to 'copy', the layer compressed content 13165 + is persisted to storage as it is. 13166 + enum: 13167 + - extract 13168 + - copy 13169 + type: string 13170 + type: object 13171 + provider: 13172 + default: generic 13173 + description: |- 13174 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 13175 + When not specified, defaults to 'generic'. 13176 + enum: 13177 + - generic 13178 + - aws 13179 + - azure 13180 + - gcp 13181 + type: string 13182 + proxySecretRef: 13183 + description: |- 13184 + ProxySecretRef specifies the Secret containing the proxy configuration 13185 + to use while communicating with the container registry. 13186 + properties: 13187 + name: 13188 + description: Name of the referent. 13189 + type: string 13190 + required: 13191 + - name 13192 + type: object 13193 + ref: 13194 + description: |- 13195 + The OCI reference to pull and monitor for changes, 13196 + defaults to the latest tag. 13197 + properties: 13198 + digest: 13199 + description: |- 13200 + Digest is the image digest to pull, takes precedence over SemVer. 13201 + The value should be in the format 'sha256:<HASH>'. 13202 + type: string 13203 + semver: 13204 + description: |- 13205 + SemVer is the range of tags to pull selecting the latest within 13206 + the range, takes precedence over Tag. 13207 + type: string 13208 + semverFilter: 13209 + description: SemverFilter is a regex pattern to filter the tags 13210 + within the SemVer range. 13211 + type: string 13212 + tag: 13213 + description: Tag is the image tag to pull, defaults to latest. 13214 + type: string 13215 + type: object 13216 + secretRef: 13217 + description: |- 13218 + SecretRef contains the secret name containing the registry login 13219 + credentials to resolve image metadata. 13220 + The secret must be of type kubernetes.io/dockerconfigjson. 13221 + properties: 13222 + name: 13223 + description: Name of the referent. 13224 + type: string 13225 + required: 13226 + - name 13227 + type: object 13228 + serviceAccountName: 13229 + description: |- 13230 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 13231 + the image pull if the service account has attached pull secrets. For more information: 13232 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 13233 + type: string 13234 + suspend: 13235 + description: This flag tells the controller to suspend the reconciliation 13236 + of this source. 13237 + type: boolean 13238 + timeout: 13239 + default: 60s 13240 + description: The timeout for remote OCI Repository operations like 13241 + pulling, defaults to 60s. 13242 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 13243 + type: string 13244 + url: 13245 + description: |- 13246 + URL is a reference to an OCI artifact repository hosted 13247 + on a remote container registry. 13248 + pattern: ^oci://.*$ 13249 + type: string 13250 + verify: 13251 + description: |- 13252 + Verify contains the secret name containing the trusted public keys 13253 + used to verify the signature and specifies which provider to use to check 13254 + whether OCI image is authentic. 13255 + properties: 13256 + matchOIDCIdentity: 13257 + description: |- 13258 + MatchOIDCIdentity specifies the identity matching criteria to use 13259 + while verifying an OCI artifact which was signed using Cosign keyless 13260 + signing. The artifact's identity is deemed to be verified if any of the 13261 + specified matchers match against the identity. 13262 + items: 13263 + description: |- 13264 + OIDCIdentityMatch specifies options for verifying the certificate identity, 13265 + i.e. the issuer and the subject of the certificate. 13266 + properties: 13267 + issuer: 13268 + description: |- 13269 + Issuer specifies the regex pattern to match against to verify 13270 + the OIDC issuer in the Fulcio certificate. The pattern must be a 13271 + valid Go regular expression. 13272 + type: string 13273 + subject: 13274 + description: |- 13275 + Subject specifies the regex pattern to match against to verify 13276 + the identity subject in the Fulcio certificate. The pattern must 13277 + be a valid Go regular expression. 13278 + type: string 13279 + required: 13280 + - issuer 13281 + - subject 13282 + type: object 13283 + type: array 13284 + provider: 13285 + default: cosign 13286 + description: Provider specifies the technology used to sign the 13287 + OCI Artifact. 13288 + enum: 13289 + - cosign 13290 + - notation 13291 + type: string 13292 + secretRef: 13293 + description: |- 13294 + SecretRef specifies the Kubernetes Secret containing the 13295 + trusted public keys. 13296 + properties: 13297 + name: 13298 + description: Name of the referent. 13299 + type: string 13300 + required: 13301 + - name 13302 + type: object 13303 + required: 13304 + - provider 13305 + type: object 13306 + required: 13307 + - interval 13308 + - url 13309 + type: object 13310 + status: 13311 + default: 13312 + observedGeneration: -1 13313 + description: OCIRepositoryStatus defines the observed state of OCIRepository 13314 + properties: 13315 + artifact: 13316 + description: Artifact represents the output of the last successful 13317 + OCI Repository sync. 13318 + properties: 13319 + digest: 13320 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 13321 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 13322 + type: string 13323 + lastUpdateTime: 13324 + description: |- 13325 + LastUpdateTime is the timestamp corresponding to the last update of the 13326 + Artifact. 13327 + format: date-time 13328 + type: string 13329 + metadata: 13330 + additionalProperties: 13331 + type: string 13332 + description: Metadata holds upstream information such as OCI annotations. 13333 + type: object 13334 + path: 13335 + description: |- 13336 + Path is the relative file path of the Artifact. It can be used to locate 13337 + the file in the root of the Artifact storage on the local file system of 13338 + the controller managing the Source. 13339 + type: string 13340 + revision: 13341 + description: |- 13342 + Revision is a human-readable identifier traceable in the origin source 13343 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 13344 + type: string 13345 + size: 13346 + description: Size is the number of bytes in the file. 13347 + format: int64 13348 + type: integer 13349 + url: 13350 + description: |- 13351 + URL is the HTTP address of the Artifact as exposed by the controller 13352 + managing the Source. It can be used to retrieve the Artifact for 13353 + consumption, e.g. by another controller applying the Artifact contents. 13354 + type: string 13355 + required: 13356 + - lastUpdateTime 13357 + - path 13358 + - revision 13359 + - url 13360 + type: object 13361 + conditions: 13362 + description: Conditions holds the conditions for the OCIRepository. 13363 + items: 13364 + description: Condition contains details for one aspect of the current 13365 + state of this API Resource. 13366 + properties: 13367 + lastTransitionTime: 13368 + description: |- 13369 + lastTransitionTime is the last time the condition transitioned from one status to another. 13370 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13371 + format: date-time 13372 + type: string 13373 + message: 13374 + description: |- 13375 + message is a human readable message indicating details about the transition. 13376 + This may be an empty string. 13377 + maxLength: 32768 13378 + type: string 13379 + observedGeneration: 13380 + description: |- 13381 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13382 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13383 + with respect to the current state of the instance. 13384 + format: int64 13385 + minimum: 0 13386 + type: integer 13387 + reason: 13388 + description: |- 13389 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13390 + Producers of specific condition types may define expected values and meanings for this field, 13391 + and whether the values are considered a guaranteed API. 13392 + The value should be a CamelCase string. 13393 + This field may not be empty. 13394 + maxLength: 1024 13395 + minLength: 1 13396 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13397 + type: string 13398 + status: 13399 + description: status of the condition, one of True, False, Unknown. 13400 + enum: 13401 + - "True" 13402 + - "False" 13403 + - Unknown 13404 + type: string 13405 + type: 13406 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13407 + maxLength: 316 13408 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13409 + type: string 13410 + required: 13411 + - lastTransitionTime 13412 + - message 13413 + - reason 13414 + - status 13415 + - type 13416 + type: object 13417 + type: array 13418 + contentConfigChecksum: 13419 + description: |- 13420 + ContentConfigChecksum is a checksum of all the configurations related to 13421 + the content of the source artifact: 13422 + - .spec.ignore 13423 + - .spec.layerSelector 13424 + observed in .status.observedGeneration version of the object. This can 13425 + be used to determine if the content configuration has changed and the 13426 + artifact needs to be rebuilt. 13427 + It has the format of `<algo>:<checksum>`, for example: `sha256:<checksum>`. 13428 + 13429 + Deprecated: Replaced with explicit fields for observed artifact content 13430 + config in the status. 13431 + type: string 13432 + lastHandledReconcileAt: 13433 + description: |- 13434 + LastHandledReconcileAt holds the value of the most recent 13435 + reconcile request value, so a change of the annotation value 13436 + can be detected. 13437 + type: string 13438 + observedGeneration: 13439 + description: ObservedGeneration is the last observed generation. 13440 + format: int64 13441 + type: integer 13442 + observedIgnore: 13443 + description: |- 13444 + ObservedIgnore is the observed exclusion patterns used for constructing 13445 + the source artifact. 13446 + type: string 13447 + observedLayerSelector: 13448 + description: |- 13449 + ObservedLayerSelector is the observed layer selector used for constructing 13450 + the source artifact. 13451 + properties: 13452 + mediaType: 13453 + description: |- 13454 + MediaType specifies the OCI media type of the layer 13455 + which should be extracted from the OCI Artifact. The 13456 + first layer matching this type is selected. 13457 + type: string 13458 + operation: 13459 + description: |- 13460 + Operation specifies how the selected layer should be processed. 13461 + By default, the layer compressed content is extracted to storage. 13462 + When the operation is set to 'copy', the layer compressed content 13463 + is persisted to storage as it is. 13464 + enum: 13465 + - extract 13466 + - copy 13467 + type: string 13468 + type: object 13469 + url: 13470 + description: URL is the download link for the artifact output of the 13471 + last OCI Repository sync. 13472 + type: string 13473 + type: object 13474 + type: object 13475 + served: true 13476 + storage: true 13477 + subresources: 13478 + status: {} 13479 +--- 13480 +apiVersion: v1 13481 +kind: ServiceAccount 13482 +metadata: 13483 + labels: 13484 + app.kubernetes.io/component: source-controller 13485 + app.kubernetes.io/instance: flux-system 13486 + app.kubernetes.io/part-of: flux 13487 + app.kubernetes.io/version: v2.4.0 13488 + name: source-controller 13489 + namespace: flux-system 13490 +--- 13491 +apiVersion: v1 13492 +kind: Service 13493 +metadata: 13494 + labels: 13495 + app.kubernetes.io/component: source-controller 13496 + app.kubernetes.io/instance: flux-system 13497 + app.kubernetes.io/part-of: flux 13498 + app.kubernetes.io/version: v2.4.0 13499 + control-plane: controller 13500 + name: source-controller 13501 + namespace: flux-system 13502 +spec: 13503 + ports: 13504 + - name: http 13505 + port: 80 13506 + protocol: TCP 13507 + targetPort: http 13508 + selector: 13509 + app: source-controller 13510 + type: ClusterIP 13511 +--- 13512 +apiVersion: apps/v1 13513 +kind: Deployment 13514 +metadata: 13515 + labels: 13516 + app.kubernetes.io/component: source-controller 13517 + app.kubernetes.io/instance: flux-system 13518 + app.kubernetes.io/part-of: flux 13519 + app.kubernetes.io/version: v2.4.0 13520 + control-plane: controller 13521 + name: source-controller 13522 + namespace: flux-system 13523 +spec: 13524 + replicas: 1 13525 + selector: 13526 + matchLabels: 13527 + app: source-controller 13528 + strategy: 13529 + type: Recreate 13530 + template: 13531 + metadata: 13532 + annotations: 13533 + prometheus.io/port: "8080" 13534 + prometheus.io/scrape: "true" 13535 + labels: 13536 + app: source-controller 13537 + spec: 13538 + containers: 13539 + - args: 13540 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 13541 + - --watch-all-namespaces=true 13542 + - --log-level=info 13543 + - --log-encoding=json 13544 + - --enable-leader-election 13545 + - --storage-path=/data 13546 + - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 13547 + env: 13548 + - name: RUNTIME_NAMESPACE 13549 + valueFrom: 13550 + fieldRef: 13551 + fieldPath: metadata.namespace 13552 + - name: TUF_ROOT 13553 + value: /tmp/.sigstore 13554 + - name: GOMAXPROCS 13555 + valueFrom: 13556 + resourceFieldRef: 13557 + containerName: manager 13558 + resource: limits.cpu 13559 + - name: GOMEMLIMIT 13560 + valueFrom: 13561 + resourceFieldRef: 13562 + containerName: manager 13563 + resource: limits.memory 13564 + image: ghcr.io/fluxcd/source-controller:v1.4.1 13565 + imagePullPolicy: IfNotPresent 13566 + livenessProbe: 13567 + httpGet: 13568 + path: /healthz 13569 + port: healthz 13570 + name: manager 13571 + ports: 13572 + - containerPort: 9090 13573 + name: http 13574 + protocol: TCP 13575 + - containerPort: 8080 13576 + name: http-prom 13577 + protocol: TCP 13578 + - containerPort: 9440 13579 + name: healthz 13580 + protocol: TCP 13581 + readinessProbe: 13582 + httpGet: 13583 + path: / 13584 + port: http 13585 + resources: 13586 + limits: 13587 + cpu: 1000m 13588 + memory: 1Gi 13589 + requests: 13590 + cpu: 50m 13591 + memory: 64Mi 13592 + securityContext: 13593 + allowPrivilegeEscalation: false 13594 + capabilities: 13595 + drop: 13596 + - ALL 13597 + readOnlyRootFilesystem: true 13598 + runAsNonRoot: true 13599 + seccompProfile: 13600 + type: RuntimeDefault 13601 + volumeMounts: 13602 + - mountPath: /data 13603 + name: data 13604 + - mountPath: /tmp 13605 + name: tmp 13606 + nodeSelector: 13607 + kubernetes.io/os: linux 13608 + priorityClassName: system-cluster-critical 13609 + securityContext: 13610 + fsGroup: 1337 13611 + serviceAccountName: source-controller 13612 + terminationGracePeriodSeconds: 10 13613 + volumes: 13614 + - emptyDir: {} 13615 + name: data 13616 + - emptyDir: {} 13617 + name: tmp 13618 +--- 13619 +apiVersion: apiextensions.k8s.io/v1 13620 +kind: CustomResourceDefinition 13621 +metadata: 13622 + annotations: 13623 + controller-gen.kubebuilder.io/version: v0.16.1 13624 + labels: 13625 + app.kubernetes.io/component: kustomize-controller 13626 + app.kubernetes.io/instance: flux-system 13627 + app.kubernetes.io/part-of: flux 13628 + app.kubernetes.io/version: v2.4.0 13629 + name: kustomizations.kustomize.toolkit.fluxcd.io 13630 +spec: 13631 + group: kustomize.toolkit.fluxcd.io 13632 + names: 13633 + kind: Kustomization 13634 + listKind: KustomizationList 13635 + plural: kustomizations 13636 + shortNames: 13637 + - ks 13638 + singular: kustomization 13639 + scope: Namespaced 13640 + versions: 13641 + - additionalPrinterColumns: 13642 + - jsonPath: .metadata.creationTimestamp 13643 + name: Age 13644 + type: date 13645 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13646 + name: Ready 13647 + type: string 13648 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13649 + name: Status 13650 + type: string 13651 + name: v1 13652 + schema: 13653 + openAPIV3Schema: 13654 + description: Kustomization is the Schema for the kustomizations API. 13655 + properties: 13656 + apiVersion: 13657 + description: |- 13658 + APIVersion defines the versioned schema of this representation of an object. 13659 + Servers should convert recognized schemas to the latest internal value, and 13660 + may reject unrecognized values. 13661 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13662 + type: string 13663 + kind: 13664 + description: |- 13665 + Kind is a string value representing the REST resource this object represents. 13666 + Servers may infer this from the endpoint the client submits requests to. 13667 + Cannot be updated. 13668 + In CamelCase. 13669 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13670 + type: string 13671 + metadata: 13672 + type: object 13673 + spec: 13674 + description: |- 13675 + KustomizationSpec defines the configuration to calculate the desired state 13676 + from a Source using Kustomize. 13677 + properties: 13678 + commonMetadata: 13679 + description: |- 13680 + CommonMetadata specifies the common labels and annotations that are 13681 + applied to all resources. Any existing label or annotation will be 13682 + overridden if its key matches a common one. 13683 + properties: 13684 + annotations: 13685 + additionalProperties: 13686 + type: string 13687 + description: Annotations to be added to the object's metadata. 13688 + type: object 13689 + labels: 13690 + additionalProperties: 13691 + type: string 13692 + description: Labels to be added to the object's metadata. 13693 + type: object 13694 type: object 13695 - served: true 13696 - storage: false 13697 - subresources: 13698 - status: {} 13699 - - additionalPrinterColumns: 13700 - - jsonPath: .metadata.creationTimestamp 13701 - name: Age 13702 - type: date 13703 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 13704 - name: Ready 13705 - type: string 13706 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 13707 - name: Status 13708 - type: string 13709 - deprecated: true 13710 - deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 13711 - name: v2beta2 13712 - schema: 13713 - openAPIV3Schema: 13714 - description: HelmRelease is the Schema for the helmreleases API 13715 + components: 13716 + description: Components specifies relative paths to specifications 13717 + of other Components. 13718 + items: 13719 + type: string 13720 + type: array 13721 + decryption: 13722 + description: Decrypt Kubernetes secrets before applying them on the 13723 + cluster. 13724 properties: 13725 + provider: 13726 + description: Provider is the name of the decryption engine. 13727 + enum: 13728 + - sops 13729 + type: string 13730 + secretRef: 13731 + description: The secret name containing the private OpenPGP keys 13732 + used for decryption. 13733 + properties: 13734 + name: 13735 + description: Name of the referent. 13736 + type: string 13737 + required: 13738 + - name 13739 + type: object 13740 + required: 13741 + - provider 13742 + type: object 13743 + dependsOn: 13744 + description: |- 13745 + DependsOn may contain a meta.NamespacedObjectReference slice 13746 + with references to Kustomization resources that must be ready before this 13747 + Kustomization can be reconciled. 13748 + items: 13749 + description: |- 13750 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 13751 + namespace. 13752 + properties: 13753 + name: 13754 + description: Name of the referent. 13755 + type: string 13756 + namespace: 13757 + description: Namespace of the referent, when not specified it 13758 + acts as LocalObjectReference. 13759 + type: string 13760 + required: 13761 + - name 13762 + type: object 13763 + type: array 13764 + force: 13765 + default: false 13766 + description: |- 13767 + Force instructs the controller to recreate resources 13768 + when patching fails due to an immutable field change. 13769 + type: boolean 13770 + healthChecks: 13771 + description: A list of resources to be included in the health assessment. 13772 + items: 13773 + description: |- 13774 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 13775 + in any namespace. 13776 + properties: 13777 apiVersion: 13778 - description: |- 13779 - APIVersion defines the versioned schema of this representation of an object. 13780 - Servers should convert recognized schemas to the latest internal value, and 13781 - may reject unrecognized values. 13782 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13783 + description: API version of the referent, if not specified the 13784 + Kubernetes preferred version will be used. 13785 + type: string 13786 + kind: 13787 + description: Kind of the referent. 13788 + type: string 13789 + name: 13790 + description: Name of the referent. 13791 + type: string 13792 + namespace: 13793 + description: Namespace of the referent, when not specified it 13794 + acts as LocalObjectReference. 13795 + type: string 13796 + required: 13797 + - kind 13798 + - name 13799 + type: object 13800 + type: array 13801 + images: 13802 + description: |- 13803 + Images is a list of (image name, new name, new tag or digest) 13804 + for changing image names, tags or digests. This can also be achieved with a 13805 + patch, but this operator is simpler to specify. 13806 + items: 13807 + description: Image contains an image name, a new name, a new tag 13808 + or digest, which will replace the original name and tag. 13809 + properties: 13810 + digest: 13811 + description: |- 13812 + Digest is the value used to replace the original image tag. 13813 + If digest is present NewTag value is ignored. 13814 + type: string 13815 + name: 13816 + description: Name is a tag-less image name. 13817 + type: string 13818 + newName: 13819 + description: NewName is the value used to replace the original 13820 + name. 13821 + type: string 13822 + newTag: 13823 + description: NewTag is the value used to replace the original 13824 + tag. 13825 + type: string 13826 + required: 13827 + - name 13828 + type: object 13829 + type: array 13830 + interval: 13831 + description: |- 13832 + The interval at which to reconcile the Kustomization. 13833 + This interval is approximate and may be subject to jitter to ensure 13834 + efficient use of resources. 13835 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13836 + type: string 13837 + kubeConfig: 13838 + description: |- 13839 + The KubeConfig for reconciling the Kustomization on a remote cluster. 13840 + When used in combination with KustomizationSpec.ServiceAccountName, 13841 + forces the controller to act on behalf of that Service Account at the 13842 + target cluster. 13843 + If the --default-service-account flag is set, its value will be used as 13844 + a controller level fallback for when KustomizationSpec.ServiceAccountName 13845 + is empty. 13846 + properties: 13847 + secretRef: 13848 + description: |- 13849 + SecretRef holds the name of a secret that contains a key with 13850 + the kubeconfig file as the value. If no key is set, the key will default 13851 + to 'value'. 13852 + It is recommended that the kubeconfig is self-contained, and the secret 13853 + is regularly updated if credentials such as a cloud-access-token expire. 13854 + Cloud specific `cmd-path` auth helpers will not function without adding 13855 + binaries and credentials to the Pod that is responsible for reconciling 13856 + Kubernetes resources. 13857 + properties: 13858 + key: 13859 + description: Key in the Secret, when not specified an implementation-specific 13860 + default key is used. 13861 + type: string 13862 + name: 13863 + description: Name of the Secret. 13864 + type: string 13865 + required: 13866 + - name 13867 + type: object 13868 + required: 13869 + - secretRef 13870 + type: object 13871 + namePrefix: 13872 + description: NamePrefix will prefix the names of all managed resources. 13873 + maxLength: 200 13874 + minLength: 1 13875 + type: string 13876 + nameSuffix: 13877 + description: NameSuffix will suffix the names of all managed resources. 13878 + maxLength: 200 13879 + minLength: 1 13880 + type: string 13881 + patches: 13882 + description: |- 13883 + Strategic merge and JSON patches, defined as inline YAML objects, 13884 + capable of targeting objects based on kind, label and annotation selectors. 13885 + items: 13886 + description: |- 13887 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 13888 + be applied to. 13889 + properties: 13890 + patch: 13891 + description: |- 13892 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 13893 + an array of operation objects. 13894 + type: string 13895 + target: 13896 + description: Target points to the resources that the patch document 13897 + should be applied to. 13898 + properties: 13899 + annotationSelector: 13900 + description: |- 13901 + AnnotationSelector is a string that follows the label selection expression 13902 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13903 + It matches with the resource annotations. 13904 + type: string 13905 + group: 13906 + description: |- 13907 + Group is the API group to select resources from. 13908 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 13909 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13910 + type: string 13911 + kind: 13912 + description: |- 13913 + Kind of the API Group to select resources from. 13914 + Together with Group and Version it is capable of unambiguously 13915 + identifying and/or selecting resources. 13916 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13917 + type: string 13918 + labelSelector: 13919 + description: |- 13920 + LabelSelector is a string that follows the label selection expression 13921 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 13922 + It matches with the resource labels. 13923 + type: string 13924 + name: 13925 + description: Name to match resources with. 13926 + type: string 13927 + namespace: 13928 + description: Namespace to select resources from. 13929 + type: string 13930 + version: 13931 + description: |- 13932 + Version of the API Group to select resources from. 13933 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 13934 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 13935 + type: string 13936 + type: object 13937 + required: 13938 + - patch 13939 + type: object 13940 + type: array 13941 + path: 13942 + description: |- 13943 + Path to the directory containing the kustomization.yaml file, or the 13944 + set of plain YAMLs a kustomization.yaml should be generated for. 13945 + Defaults to 'None', which translates to the root path of the SourceRef. 13946 + type: string 13947 + postBuild: 13948 + description: |- 13949 + PostBuild describes which actions to perform on the YAML manifest 13950 + generated by building the kustomize overlay. 13951 + properties: 13952 + substitute: 13953 + additionalProperties: 13954 + type: string 13955 + description: |- 13956 + Substitute holds a map of key/value pairs. 13957 + The variables defined in your YAML manifests that match any of the keys 13958 + defined in the map will be substituted with the set value. 13959 + Includes support for bash string replacement functions 13960 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 13961 + type: object 13962 + substituteFrom: 13963 + description: |- 13964 + SubstituteFrom holds references to ConfigMaps and Secrets containing 13965 + the variables and their values to be substituted in the YAML manifests. 13966 + The ConfigMap and the Secret data keys represent the var names, and they 13967 + must match the vars declared in the manifests for the substitution to 13968 + happen. 13969 + items: 13970 + description: |- 13971 + SubstituteReference contains a reference to a resource containing 13972 + the variables name and value. 13973 + properties: 13974 + kind: 13975 + description: Kind of the values referent, valid values are 13976 + ('Secret', 'ConfigMap'). 13977 + enum: 13978 + - Secret 13979 + - ConfigMap 13980 + type: string 13981 + name: 13982 + description: |- 13983 + Name of the values referent. Should reside in the same namespace as the 13984 + referring resource. 13985 + maxLength: 253 13986 + minLength: 1 13987 + type: string 13988 + optional: 13989 + default: false 13990 + description: |- 13991 + Optional indicates whether the referenced resource must exist, or whether to 13992 + tolerate its absence. If true and the referenced resource is absent, proceed 13993 + as if the resource was present but empty, without any variables defined. 13994 + type: boolean 13995 + required: 13996 + - kind 13997 + - name 13998 + type: object 13999 + type: array 14000 + type: object 14001 + prune: 14002 + description: Prune enables garbage collection. 14003 + type: boolean 14004 + retryInterval: 14005 + description: |- 14006 + The interval at which to retry a previously failed reconciliation. 14007 + When not specified, the controller uses the KustomizationSpec.Interval 14008 + value to retry failures. 14009 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14010 + type: string 14011 + serviceAccountName: 14012 + description: |- 14013 + The name of the Kubernetes service account to impersonate 14014 + when reconciling this Kustomization. 14015 + type: string 14016 + sourceRef: 14017 + description: Reference of the source where the kustomization file 14018 + is. 14019 + properties: 14020 + apiVersion: 14021 + description: API version of the referent. 14022 + type: string 14023 + kind: 14024 + description: Kind of the referent. 14025 + enum: 14026 + - OCIRepository 14027 + - GitRepository 14028 + - Bucket 14029 + type: string 14030 + name: 14031 + description: Name of the referent. 14032 + type: string 14033 + namespace: 14034 + description: |- 14035 + Namespace of the referent, defaults to the namespace of the Kubernetes 14036 + resource object that contains the reference. 14037 + type: string 14038 + required: 14039 + - kind 14040 + - name 14041 + type: object 14042 + suspend: 14043 + description: |- 14044 + This flag tells the controller to suspend subsequent kustomize executions, 14045 + it does not apply to already started executions. Defaults to false. 14046 + type: boolean 14047 + targetNamespace: 14048 + description: |- 14049 + TargetNamespace sets or overrides the namespace in the 14050 + kustomization.yaml file. 14051 + maxLength: 63 14052 + minLength: 1 14053 + type: string 14054 + timeout: 14055 + description: |- 14056 + Timeout for validation, apply and health checking operations. 14057 + Defaults to 'Interval' duration. 14058 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14059 + type: string 14060 + wait: 14061 + description: |- 14062 + Wait instructs the controller to check the health of all the reconciled 14063 + resources. When enabled, the HealthChecks are ignored. Defaults to false. 14064 + type: boolean 14065 + required: 14066 + - interval 14067 + - prune 14068 + - sourceRef 14069 + type: object 14070 + status: 14071 + default: 14072 + observedGeneration: -1 14073 + description: KustomizationStatus defines the observed state of a kustomization. 14074 + properties: 14075 + conditions: 14076 + items: 14077 + description: Condition contains details for one aspect of the current 14078 + state of this API Resource. 14079 + properties: 14080 + lastTransitionTime: 14081 + description: |- 14082 + lastTransitionTime is the last time the condition transitioned from one status to another. 14083 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 14084 + format: date-time 14085 + type: string 14086 + message: 14087 + description: |- 14088 + message is a human readable message indicating details about the transition. 14089 + This may be an empty string. 14090 + maxLength: 32768 14091 + type: string 14092 + observedGeneration: 14093 + description: |- 14094 + observedGeneration represents the .metadata.generation that the condition was set based upon. 14095 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 14096 + with respect to the current state of the instance. 14097 + format: int64 14098 + minimum: 0 14099 + type: integer 14100 + reason: 14101 + description: |- 14102 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 14103 + Producers of specific condition types may define expected values and meanings for this field, 14104 + and whether the values are considered a guaranteed API. 14105 + The value should be a CamelCase string. 14106 + This field may not be empty. 14107 + maxLength: 1024 14108 + minLength: 1 14109 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 14110 + type: string 14111 + status: 14112 + description: status of the condition, one of True, False, Unknown. 14113 + enum: 14114 + - "True" 14115 + - "False" 14116 + - Unknown 14117 + type: string 14118 + type: 14119 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 14120 + maxLength: 316 14121 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 14122 + type: string 14123 + required: 14124 + - lastTransitionTime 14125 + - message 14126 + - reason 14127 + - status 14128 + - type 14129 + type: object 14130 + type: array 14131 + inventory: 14132 + description: |- 14133 + Inventory contains the list of Kubernetes resource object references that 14134 + have been successfully applied. 14135 + properties: 14136 + entries: 14137 + description: Entries of Kubernetes resource object references. 14138 + items: 14139 + description: ResourceRef contains the information necessary 14140 + to locate a resource within a cluster. 14141 + properties: 14142 + id: 14143 + description: |- 14144 + ID is the string representation of the Kubernetes resource object's metadata, 14145 + in the format '<namespace>_<name>_<group>_<kind>'. 14146 + type: string 14147 + v: 14148 + description: Version is the API version of the Kubernetes 14149 + resource object's kind. 14150 + type: string 14151 + required: 14152 + - id 14153 + - v 14154 + type: object 14155 + type: array 14156 + required: 14157 + - entries 14158 + type: object 14159 + lastAppliedRevision: 14160 + description: |- 14161 + The last successfully applied revision. 14162 + Equals the Revision of the applied Artifact from the referenced Source. 14163 + type: string 14164 + lastAttemptedRevision: 14165 + description: LastAttemptedRevision is the revision of the last reconciliation 14166 + attempt. 14167 + type: string 14168 + lastHandledReconcileAt: 14169 + description: |- 14170 + LastHandledReconcileAt holds the value of the most recent 14171 + reconcile request value, so a change of the annotation value 14172 + can be detected. 14173 + type: string 14174 + observedGeneration: 14175 + description: ObservedGeneration is the last reconciled generation. 14176 + format: int64 14177 + type: integer 14178 + type: object 14179 + type: object 14180 + served: true 14181 + storage: true 14182 + subresources: 14183 + status: {} 14184 + - additionalPrinterColumns: 14185 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 14186 + name: Ready 14187 + type: string 14188 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 14189 + name: Status 14190 + type: string 14191 + - jsonPath: .metadata.creationTimestamp 14192 + name: Age 14193 + type: date 14194 + deprecated: true 14195 + deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1 14196 + name: v1beta1 14197 + schema: 14198 + openAPIV3Schema: 14199 + description: Kustomization is the Schema for the kustomizations API. 14200 + properties: 14201 + apiVersion: 14202 + description: |- 14203 + APIVersion defines the versioned schema of this representation of an object. 14204 + Servers should convert recognized schemas to the latest internal value, and 14205 + may reject unrecognized values. 14206 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14207 + type: string 14208 + kind: 14209 + description: |- 14210 + Kind is a string value representing the REST resource this object represents. 14211 + Servers may infer this from the endpoint the client submits requests to. 14212 + Cannot be updated. 14213 + In CamelCase. 14214 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14215 + type: string 14216 + metadata: 14217 + type: object 14218 + spec: 14219 + description: KustomizationSpec defines the desired state of a kustomization. 14220 + properties: 14221 + decryption: 14222 + description: Decrypt Kubernetes secrets before applying them on the 14223 + cluster. 14224 + properties: 14225 + provider: 14226 + description: Provider is the name of the decryption engine. 14227 + enum: 14228 + - sops 14229 + type: string 14230 + secretRef: 14231 + description: The secret name containing the private OpenPGP keys 14232 + used for decryption. 14233 + properties: 14234 + name: 14235 + description: Name of the referent. 14236 type: string 14237 + required: 14238 + - name 14239 + type: object 14240 + required: 14241 + - provider 14242 + type: object 14243 + dependsOn: 14244 + description: |- 14245 + DependsOn may contain a meta.NamespacedObjectReference slice 14246 + with references to Kustomization resources that must be ready before this 14247 + Kustomization can be reconciled. 14248 + items: 14249 + description: |- 14250 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 14251 + namespace. 14252 + properties: 14253 + name: 14254 + description: Name of the referent. 14255 + type: string 14256 + namespace: 14257 + description: Namespace of the referent, when not specified it 14258 + acts as LocalObjectReference. 14259 + type: string 14260 + required: 14261 + - name 14262 + type: object 14263 + type: array 14264 + force: 14265 + default: false 14266 + description: |- 14267 + Force instructs the controller to recreate resources 14268 + when patching fails due to an immutable field change. 14269 + type: boolean 14270 + healthChecks: 14271 + description: A list of resources to be included in the health assessment. 14272 + items: 14273 + description: |- 14274 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 14275 + in any namespace. 14276 + properties: 14277 + apiVersion: 14278 + description: API version of the referent, if not specified the 14279 + Kubernetes preferred version will be used. 14280 + type: string 14281 kind: 14282 - description: |- 14283 - Kind is a string value representing the REST resource this object represents. 14284 - Servers may infer this from the endpoint the client submits requests to. 14285 - Cannot be updated. 14286 - In CamelCase. 14287 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14288 + description: Kind of the referent. 14289 + type: string 14290 + name: 14291 + description: Name of the referent. 14292 + type: string 14293 + namespace: 14294 + description: Namespace of the referent, when not specified it 14295 + acts as LocalObjectReference. 14296 + type: string 14297 + required: 14298 + - kind 14299 + - name 14300 + type: object 14301 + type: array 14302 + images: 14303 + description: |- 14304 + Images is a list of (image name, new name, new tag or digest) 14305 + for changing image names, tags or digests. This can also be achieved with a 14306 + patch, but this operator is simpler to specify. 14307 + items: 14308 + description: Image contains an image name, a new name, a new tag 14309 + or digest, which will replace the original name and tag. 14310 + properties: 14311 + digest: 14312 + description: |- 14313 + Digest is the value used to replace the original image tag. 14314 + If digest is present NewTag value is ignored. 14315 + type: string 14316 + name: 14317 + description: Name is a tag-less image name. 14318 + type: string 14319 + newName: 14320 + description: NewName is the value used to replace the original 14321 + name. 14322 + type: string 14323 + newTag: 14324 + description: NewTag is the value used to replace the original 14325 + tag. 14326 + type: string 14327 + required: 14328 + - name 14329 + type: object 14330 + type: array 14331 + interval: 14332 + description: The interval at which to reconcile the Kustomization. 14333 + type: string 14334 + kubeConfig: 14335 + description: |- 14336 + The KubeConfig for reconciling the Kustomization on a remote cluster. 14337 + When specified, KubeConfig takes precedence over ServiceAccountName. 14338 + properties: 14339 + secretRef: 14340 + description: |- 14341 + SecretRef holds the name to a secret that contains a 'value' key with 14342 + the kubeconfig file as the value. It must be in the same namespace as 14343 + the Kustomization. 14344 + It is recommended that the kubeconfig is self-contained, and the secret 14345 + is regularly updated if credentials such as a cloud-access-token expire. 14346 + Cloud specific `cmd-path` auth helpers will not function without adding 14347 + binaries and credentials to the Pod that is responsible for reconciling 14348 + the Kustomization. 14349 + properties: 14350 + name: 14351 + description: Name of the referent. 14352 type: string 14353 - metadata: 14354 - type: object 14355 - spec: 14356 - description: HelmReleaseSpec defines the desired state of a Helm release. 14357 + required: 14358 + - name 14359 + type: object 14360 + required: 14361 + - secretRef 14362 + type: object 14363 + patches: 14364 + description: |- 14365 + Strategic merge and JSON patches, defined as inline YAML objects, 14366 + capable of targeting objects based on kind, label and annotation selectors. 14367 + items: 14368 + description: |- 14369 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 14370 + be applied to. 14371 + properties: 14372 + patch: 14373 + description: |- 14374 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 14375 + an array of operation objects. 14376 + type: string 14377 + target: 14378 + description: Target points to the resources that the patch document 14379 + should be applied to. 14380 + properties: 14381 + annotationSelector: 14382 + description: |- 14383 + AnnotationSelector is a string that follows the label selection expression 14384 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14385 + It matches with the resource annotations. 14386 + type: string 14387 + group: 14388 + description: |- 14389 + Group is the API group to select resources from. 14390 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14391 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14392 + type: string 14393 + kind: 14394 + description: |- 14395 + Kind of the API Group to select resources from. 14396 + Together with Group and Version it is capable of unambiguously 14397 + identifying and/or selecting resources. 14398 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14399 + type: string 14400 + labelSelector: 14401 + description: |- 14402 + LabelSelector is a string that follows the label selection expression 14403 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14404 + It matches with the resource labels. 14405 + type: string 14406 + name: 14407 + description: Name to match resources with. 14408 + type: string 14409 + namespace: 14410 + description: Namespace to select resources from. 14411 + type: string 14412 + version: 14413 + description: |- 14414 + Version of the API Group to select resources from. 14415 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14416 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14417 + type: string 14418 + type: object 14419 + required: 14420 + - patch 14421 + type: object 14422 + type: array 14423 + patchesJson6902: 14424 + description: JSON 6902 patches, defined as inline YAML objects. 14425 + items: 14426 + description: JSON6902Patch contains a JSON6902 patch and the target 14427 + the patch should be applied to. 14428 + properties: 14429 + patch: 14430 + description: Patch contains the JSON6902 patch document with 14431 + an array of operation objects. 14432 + items: 14433 + description: |- 14434 + JSON6902 is a JSON6902 operation object. 14435 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 14436 properties: 14437 - chart: 14438 - description: |- 14439 - Chart defines the template of the v1beta2.HelmChart that should be created 14440 - for this HelmRelease. 14441 - properties: 14442 - metadata: 14443 - description: ObjectMeta holds the template for metadata like labels and annotations. 14444 - properties: 14445 - annotations: 14446 - additionalProperties: 14447 - type: string 14448 - description: |- 14449 - Annotations is an unstructured key value map stored with a resource that may be 14450 - set by external tools to store and retrieve arbitrary metadata. They are not 14451 - queryable and should be preserved when modifying objects. 14452 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 14453 - type: object 14454 - labels: 14455 - additionalProperties: 14456 - type: string 14457 - description: |- 14458 - Map of string keys and values that can be used to organize and categorize 14459 - (scope and select) objects. 14460 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 14461 - type: object 14462 - type: object 14463 - spec: 14464 - description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. 14465 - properties: 14466 - chart: 14467 - description: The name or path the Helm chart is available at in the SourceRef. 14468 - maxLength: 2048 14469 - minLength: 1 14470 - type: string 14471 - ignoreMissingValuesFiles: 14472 - description: IgnoreMissingValuesFiles controls whether to silently ignore 14473 - missing values files rather than failing. 14474 - type: boolean 14475 - interval: 14476 - description: |- 14477 - Interval at which to check the v1.Source for updates. Defaults to 14478 - 'HelmReleaseSpec.Interval'. 14479 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14480 - type: string 14481 - reconcileStrategy: 14482 - default: ChartVersion 14483 - description: |- 14484 - Determines what enables the creation of a new artifact. Valid values are 14485 - ('ChartVersion', 'Revision'). 14486 - See the documentation of the values for an explanation on their behavior. 14487 - Defaults to ChartVersion when omitted. 14488 - enum: 14489 - - ChartVersion 14490 - - Revision 14491 - type: string 14492 - sourceRef: 14493 - description: The name and namespace of the v1.Source the chart is available 14494 - at. 14495 - properties: 14496 - apiVersion: 14497 - description: APIVersion of the referent. 14498 - type: string 14499 - kind: 14500 - description: Kind of the referent. 14501 - enum: 14502 - - HelmRepository 14503 - - GitRepository 14504 - - Bucket 14505 - type: string 14506 - name: 14507 - description: Name of the referent. 14508 - maxLength: 253 14509 - minLength: 1 14510 - type: string 14511 - namespace: 14512 - description: Namespace of the referent. 14513 - maxLength: 63 14514 - minLength: 1 14515 - type: string 14516 - required: 14517 - - name 14518 - type: object 14519 - valuesFile: 14520 - description: |- 14521 - Alternative values file to use as the default chart values, expected to 14522 - be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 14523 - for backwards compatibility the file defined here is merged before the 14524 - ValuesFiles items. Ignored when omitted. 14525 - type: string 14526 - valuesFiles: 14527 - description: |- 14528 - Alternative list of values files to use as the chart values (values.yaml 14529 - is not included by default), expected to be a relative path in the SourceRef. 14530 - Values files are merged in the order of this list with the last file overriding 14531 - the first. Ignored when omitted. 14532 - items: 14533 - type: string 14534 - type: array 14535 - verify: 14536 - description: |- 14537 - Verify contains the secret name containing the trusted public keys 14538 - used to verify the signature and specifies which provider to use to check 14539 - whether OCI image is authentic. 14540 - This field is only supported for OCI sources. 14541 - Chart dependencies, which are not bundled in the umbrella chart artifact, 14542 - are not verified. 14543 - properties: 14544 - provider: 14545 - default: cosign 14546 - description: Provider specifies the technology used to sign the OCI 14547 - Helm chart. 14548 - enum: 14549 - - cosign 14550 - - notation 14551 - type: string 14552 - secretRef: 14553 - description: |- 14554 - SecretRef specifies the Kubernetes Secret containing the 14555 - trusted public keys. 14556 - properties: 14557 - name: 14558 - description: Name of the referent. 14559 - type: string 14560 - required: 14561 - - name 14562 - type: object 14563 - required: 14564 - - provider 14565 - type: object 14566 - version: 14567 - default: '*' 14568 - description: |- 14569 - Version semver expression, ignored for charts from v1beta2.GitRepository and 14570 - v1beta2.Bucket sources. Defaults to latest when omitted. 14571 - type: string 14572 - required: 14573 - - chart 14574 - - sourceRef 14575 - type: object 14576 - required: 14577 - - spec 14578 - type: object 14579 - chartRef: 14580 - description: |- 14581 - ChartRef holds a reference to a source controller resource containing the 14582 - Helm chart artifact. 14583 - 14584 - 14585 - Note: this field is provisional to the v2 API, and not actively used 14586 - by v2beta2 HelmReleases. 14587 - properties: 14588 - apiVersion: 14589 - description: APIVersion of the referent. 14590 - type: string 14591 - kind: 14592 - description: Kind of the referent. 14593 - enum: 14594 - - OCIRepository 14595 - - HelmChart 14596 - type: string 14597 - name: 14598 - description: Name of the referent. 14599 - maxLength: 253 14600 - minLength: 1 14601 - type: string 14602 - namespace: 14603 - description: |- 14604 - Namespace of the referent, defaults to the namespace of the Kubernetes 14605 - resource object that contains the reference. 14606 - maxLength: 63 14607 - minLength: 1 14608 - type: string 14609 - required: 14610 - - kind 14611 - - name 14612 - type: object 14613 - dependsOn: 14614 - description: |- 14615 - DependsOn may contain a meta.NamespacedObjectReference slice with 14616 - references to HelmRelease resources that must be ready before this HelmRelease 14617 - can be reconciled. 14618 - items: 14619 - description: |- 14620 - NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 14621 - namespace. 14622 - properties: 14623 - name: 14624 - description: Name of the referent. 14625 - type: string 14626 - namespace: 14627 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 14628 - type: string 14629 - required: 14630 - - name 14631 - type: object 14632 - type: array 14633 - driftDetection: 14634 - description: |- 14635 - DriftDetection holds the configuration for detecting and handling 14636 - differences between the manifest in the Helm storage and the resources 14637 - currently existing in the cluster. 14638 - properties: 14639 - ignore: 14640 - description: |- 14641 - Ignore contains a list of rules for specifying which changes to ignore 14642 - during diffing. 14643 - items: 14644 - description: |- 14645 - IgnoreRule defines a rule to selectively disregard specific changes during 14646 - the drift detection process. 14647 - properties: 14648 - paths: 14649 - description: |- 14650 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 14651 - consideration in a Kubernetes object. 14652 - items: 14653 - type: string 14654 - type: array 14655 - target: 14656 - description: |- 14657 - Target is a selector for specifying Kubernetes objects to which this 14658 - rule applies. 14659 - If Target is not set, the Paths will be ignored for all Kubernetes 14660 - objects within the manifest of the Helm release. 14661 - properties: 14662 - annotationSelector: 14663 - description: |- 14664 - AnnotationSelector is a string that follows the label selection expression 14665 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14666 - It matches with the resource annotations. 14667 - type: string 14668 - group: 14669 - description: |- 14670 - Group is the API group to select resources from. 14671 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14672 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14673 - type: string 14674 - kind: 14675 - description: |- 14676 - Kind of the API Group to select resources from. 14677 - Together with Group and Version it is capable of unambiguously 14678 - identifying and/or selecting resources. 14679 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14680 - type: string 14681 - labelSelector: 14682 - description: |- 14683 - LabelSelector is a string that follows the label selection expression 14684 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14685 - It matches with the resource labels. 14686 - type: string 14687 - name: 14688 - description: Name to match resources with. 14689 - type: string 14690 - namespace: 14691 - description: Namespace to select resources from. 14692 - type: string 14693 - version: 14694 - description: |- 14695 - Version of the API Group to select resources from. 14696 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14697 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14698 - type: string 14699 - type: object 14700 - required: 14701 - - paths 14702 - type: object 14703 - type: array 14704 - mode: 14705 - description: |- 14706 - Mode defines how differences should be handled between the Helm manifest 14707 - and the manifest currently applied to the cluster. 14708 - If not explicitly set, it defaults to DiffModeDisabled. 14709 - enum: 14710 - - enabled 14711 - - warn 14712 - - disabled 14713 - type: string 14714 - type: object 14715 - install: 14716 - description: Install holds the configuration for Helm install actions for this HelmRelease. 14717 - properties: 14718 - crds: 14719 - description: |- 14720 - CRDs upgrade CRDs from the Helm Chart's crds directory according 14721 - to the CRD upgrade policy provided here. Valid values are `Skip`, 14722 - `Create` or `CreateReplace`. Default is `Create` and if omitted 14723 - CRDs are installed but not updated. 14724 - 14725 - 14726 - Skip: do neither install nor replace (update) any CRDs. 14727 - 14728 - 14729 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 14730 - 14731 - 14732 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 14733 - but not deleted. 14734 - 14735 - 14736 - By default, CRDs are applied (installed) during Helm install action. 14737 - With this option users can opt in to CRD replace existing CRDs on Helm 14738 - install actions, which is not (yet) natively supported by Helm. 14739 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 14740 - enum: 14741 - - Skip 14742 - - Create 14743 - - CreateReplace 14744 - type: string 14745 - createNamespace: 14746 - description: |- 14747 - CreateNamespace tells the Helm install action to create the 14748 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 14749 - On uninstall, the namespace will not be garbage collected. 14750 - type: boolean 14751 - disableHooks: 14752 - description: DisableHooks prevents hooks from running during the Helm install action. 14753 - type: boolean 14754 - disableOpenAPIValidation: 14755 - description: |- 14756 - DisableOpenAPIValidation prevents the Helm install action from validating 14757 - rendered templates against the Kubernetes OpenAPI Schema. 14758 - type: boolean 14759 - disableWait: 14760 - description: |- 14761 - DisableWait disables the waiting for resources to be ready after a Helm 14762 - install has been performed. 14763 - type: boolean 14764 - disableWaitForJobs: 14765 - description: |- 14766 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 14767 - install has been performed. 14768 - type: boolean 14769 - remediation: 14770 - description: |- 14771 - Remediation holds the remediation configuration for when the Helm install 14772 - action for the HelmRelease fails. The default is to not perform any action. 14773 - properties: 14774 - ignoreTestFailures: 14775 - description: |- 14776 - IgnoreTestFailures tells the controller to skip remediation when the Helm 14777 - tests are run after an install action but fail. Defaults to 14778 - 'Test.IgnoreFailures'. 14779 - type: boolean 14780 - remediateLastFailure: 14781 - description: |- 14782 - RemediateLastFailure tells the controller to remediate the last failure, when 14783 - no retries remain. Defaults to 'false'. 14784 - type: boolean 14785 - retries: 14786 - description: |- 14787 - Retries is the number of retries that should be attempted on failures before 14788 - bailing. Remediation, using an uninstall, is performed between each attempt. 14789 - Defaults to '0', a negative integer equals to unlimited retries. 14790 - type: integer 14791 - type: object 14792 - replace: 14793 - description: |- 14794 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 14795 - if that name is a deleted release which remains in the history. 14796 - type: boolean 14797 - skipCRDs: 14798 - description: |- 14799 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 14800 - CRDs are installed if not already present. 14801 - 14802 - 14803 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 14804 - type: boolean 14805 - timeout: 14806 - description: |- 14807 - Timeout is the time to wait for any individual Kubernetes operation (like 14808 - Jobs for hooks) during the performance of a Helm install action. Defaults to 14809 - 'HelmReleaseSpec.Timeout'. 14810 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14811 - type: string 14812 - type: object 14813 - interval: 14814 - description: Interval at which to reconcile the Helm release. 14815 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14816 - type: string 14817 - kubeConfig: 14818 - description: |- 14819 - KubeConfig for reconciling the HelmRelease on a remote cluster. 14820 - When used in combination with HelmReleaseSpec.ServiceAccountName, 14821 - forces the controller to act on behalf of that Service Account at the 14822 - target cluster. 14823 - If the --default-service-account flag is set, its value will be used as 14824 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 14825 - is empty. 14826 - properties: 14827 - secretRef: 14828 - description: |- 14829 - SecretRef holds the name of a secret that contains a key with 14830 - the kubeconfig file as the value. If no key is set, the key will default 14831 - to 'value'. 14832 - It is recommended that the kubeconfig is self-contained, and the secret 14833 - is regularly updated if credentials such as a cloud-access-token expire. 14834 - Cloud specific `cmd-path` auth helpers will not function without adding 14835 - binaries and credentials to the Pod that is responsible for reconciling 14836 - Kubernetes resources. 14837 - properties: 14838 - key: 14839 - description: Key in the Secret, when not specified an implementation-specific 14840 - default key is used. 14841 - type: string 14842 - name: 14843 - description: Name of the Secret. 14844 - type: string 14845 - required: 14846 - - name 14847 - type: object 14848 - required: 14849 - - secretRef 14850 - type: object 14851 - maxHistory: 14852 - description: |- 14853 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 14854 - Use '0' for an unlimited number of revisions; defaults to '5'. 14855 - type: integer 14856 - persistentClient: 14857 - description: |- 14858 - PersistentClient tells the controller to use a persistent Kubernetes 14859 - client for this release. When enabled, the client will be reused for the 14860 - duration of the reconciliation, instead of being created and destroyed 14861 - for each (step of a) Helm action. 14862 - 14863 - 14864 - This can improve performance, but may cause issues with some Helm charts 14865 - that for example do create Custom Resource Definitions during installation 14866 - outside Helm's CRD lifecycle hooks, which are then not observed to be 14867 - available by e.g. post-install hooks. 14868 - 14869 - 14870 - If not set, it defaults to true. 14871 - type: boolean 14872 - postRenderers: 14873 - description: |- 14874 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 14875 - of their definition. 14876 - items: 14877 - description: PostRenderer contains a Helm PostRenderer specification. 14878 - properties: 14879 - kustomize: 14880 - description: Kustomization to apply as PostRenderer. 14881 - properties: 14882 - images: 14883 - description: |- 14884 - Images is a list of (image name, new name, new tag or digest) 14885 - for changing image names, tags or digests. This can also be achieved with a 14886 - patch, but this operator is simpler to specify. 14887 - items: 14888 - description: Image contains an image name, a new name, a new tag or 14889 - digest, which will replace the original name and tag. 14890 - properties: 14891 - digest: 14892 - description: |- 14893 - Digest is the value used to replace the original image tag. 14894 - If digest is present NewTag value is ignored. 14895 - type: string 14896 - name: 14897 - description: Name is a tag-less image name. 14898 - type: string 14899 - newName: 14900 - description: NewName is the value used to replace the original 14901 - name. 14902 - type: string 14903 - newTag: 14904 - description: NewTag is the value used to replace the original 14905 - tag. 14906 - type: string 14907 - required: 14908 - - name 14909 - type: object 14910 - type: array 14911 - patches: 14912 - description: |- 14913 - Strategic merge and JSON patches, defined as inline YAML objects, 14914 - capable of targeting objects based on kind, label and annotation selectors. 14915 - items: 14916 - description: |- 14917 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 14918 - be applied to. 14919 - properties: 14920 - patch: 14921 - description: |- 14922 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 14923 - an array of operation objects. 14924 - type: string 14925 - target: 14926 - description: Target points to the resources that the patch 14927 - document should be applied to. 14928 - properties: 14929 - annotationSelector: 14930 - description: |- 14931 - AnnotationSelector is a string that follows the label selection expression 14932 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14933 - It matches with the resource annotations. 14934 - type: string 14935 - group: 14936 - description: |- 14937 - Group is the API group to select resources from. 14938 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 14939 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14940 - type: string 14941 - kind: 14942 - description: |- 14943 - Kind of the API Group to select resources from. 14944 - Together with Group and Version it is capable of unambiguously 14945 - identifying and/or selecting resources. 14946 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14947 - type: string 14948 - labelSelector: 14949 - description: |- 14950 - LabelSelector is a string that follows the label selection expression 14951 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 14952 - It matches with the resource labels. 14953 - type: string 14954 - name: 14955 - description: Name to match resources with. 14956 - type: string 14957 - namespace: 14958 - description: Namespace to select resources from. 14959 - type: string 14960 - version: 14961 - description: |- 14962 - Version of the API Group to select resources from. 14963 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 14964 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 14965 - type: string 14966 - type: object 14967 - required: 14968 - - patch 14969 - type: object 14970 - type: array 14971 - patchesJson6902: 14972 - description: |- 14973 - JSON 6902 patches, defined as inline YAML objects. 14974 - Deprecated: use Patches instead. 14975 - items: 14976 - description: JSON6902Patch contains a JSON6902 patch and the target 14977 - the patch should be applied to. 14978 - properties: 14979 - patch: 14980 - description: Patch contains the JSON6902 patch document with 14981 - an array of operation objects. 14982 - items: 14983 - description: |- 14984 - JSON6902 is a JSON6902 operation object. 14985 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 14986 - properties: 14987 - from: 14988 - description: |- 14989 - From contains a JSON-pointer value that references a location within the target document where the operation is 14990 - performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 14991 - type: string 14992 - op: 14993 - description: |- 14994 - Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 14995 - "test". 14996 - https://datatracker.ietf.org/doc/html/rfc6902#section-4 14997 - enum: 14998 - - test 14999 - - remove 15000 - - add 15001 - - replace 15002 - - move 15003 - - copy 15004 - type: string 15005 - path: 15006 - description: |- 15007 - Path contains the JSON-pointer value that references a location within the target document where the operation 15008 - is performed. The meaning of the value depends on the value of Op. 15009 - type: string 15010 - value: 15011 - description: |- 15012 - Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 15013 - account by all operations. 15014 - x-kubernetes-preserve-unknown-fields: true 15015 - required: 15016 - - op 15017 - - path 15018 - type: object 15019 - type: array 15020 - target: 15021 - description: Target points to the resources that the patch 15022 - document should be applied to. 15023 - properties: 15024 - annotationSelector: 15025 - description: |- 15026 - AnnotationSelector is a string that follows the label selection expression 15027 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15028 - It matches with the resource annotations. 15029 - type: string 15030 - group: 15031 - description: |- 15032 - Group is the API group to select resources from. 15033 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15034 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15035 - type: string 15036 - kind: 15037 - description: |- 15038 - Kind of the API Group to select resources from. 15039 - Together with Group and Version it is capable of unambiguously 15040 - identifying and/or selecting resources. 15041 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15042 - type: string 15043 - labelSelector: 15044 - description: |- 15045 - LabelSelector is a string that follows the label selection expression 15046 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15047 - It matches with the resource labels. 15048 - type: string 15049 - name: 15050 - description: Name to match resources with. 15051 - type: string 15052 - namespace: 15053 - description: Namespace to select resources from. 15054 - type: string 15055 - version: 15056 - description: |- 15057 - Version of the API Group to select resources from. 15058 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15059 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15060 - type: string 15061 - type: object 15062 - required: 15063 - - patch 15064 - - target 15065 - type: object 15066 - type: array 15067 - patchesStrategicMerge: 15068 - description: |- 15069 - Strategic merge patches, defined as inline YAML objects. 15070 - Deprecated: use Patches instead. 15071 - items: 15072 - x-kubernetes-preserve-unknown-fields: true 15073 - type: array 15074 - type: object 15075 - type: object 15076 - type: array 15077 - releaseName: 15078 - description: |- 15079 - ReleaseName used for the Helm release. Defaults to a composition of 15080 - '[TargetNamespace-]Name'. 15081 - maxLength: 53 15082 - minLength: 1 15083 - type: string 15084 - rollback: 15085 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 15086 - properties: 15087 - cleanupOnFail: 15088 - description: |- 15089 - CleanupOnFail allows deletion of new resources created during the Helm 15090 - rollback action when it fails. 15091 - type: boolean 15092 - disableHooks: 15093 - description: DisableHooks prevents hooks from running during the Helm rollback action. 15094 - type: boolean 15095 - disableWait: 15096 - description: |- 15097 - DisableWait disables the waiting for resources to be ready after a Helm 15098 - rollback has been performed. 15099 - type: boolean 15100 - disableWaitForJobs: 15101 - description: |- 15102 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 15103 - rollback has been performed. 15104 - type: boolean 15105 - force: 15106 - description: Force forces resource updates through a replacement strategy. 15107 - type: boolean 15108 - recreate: 15109 - description: Recreate performs pod restarts for the resource if applicable. 15110 - type: boolean 15111 - timeout: 15112 - description: |- 15113 - Timeout is the time to wait for any individual Kubernetes operation (like 15114 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 15115 - 'HelmReleaseSpec.Timeout'. 15116 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15117 - type: string 15118 - type: object 15119 - serviceAccountName: 15120 - description: |- 15121 - The name of the Kubernetes service account to impersonate 15122 - when reconciling this HelmRelease. 15123 - maxLength: 253 15124 - minLength: 1 15125 - type: string 15126 - storageNamespace: 15127 - description: |- 15128 - StorageNamespace used for the Helm storage. 15129 - Defaults to the namespace of the HelmRelease. 15130 - maxLength: 63 15131 - minLength: 1 15132 - type: string 15133 - suspend: 15134 - description: |- 15135 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 15136 - it does not apply to already started reconciliations. Defaults to false. 15137 - type: boolean 15138 - targetNamespace: 15139 - description: |- 15140 - TargetNamespace to target when performing operations for the HelmRelease. 15141 - Defaults to the namespace of the HelmRelease. 15142 - maxLength: 63 15143 - minLength: 1 15144 - type: string 15145 - test: 15146 - description: Test holds the configuration for Helm test actions for this HelmRelease. 15147 - properties: 15148 - enable: 15149 - description: |- 15150 - Enable enables Helm test actions for this HelmRelease after an Helm install 15151 - or upgrade action has been performed. 15152 - type: boolean 15153 - filters: 15154 - description: Filters is a list of tests to run or exclude from running. 15155 - items: 15156 - description: Filter holds the configuration for individual Helm test filters. 15157 - properties: 15158 - exclude: 15159 - description: Exclude specifies whether the named test should be excluded. 15160 - type: boolean 15161 - name: 15162 - description: Name is the name of the test. 15163 - maxLength: 253 15164 - minLength: 1 15165 - type: string 15166 - required: 15167 - - name 15168 - type: object 15169 - type: array 15170 - ignoreFailures: 15171 - description: |- 15172 - IgnoreFailures tells the controller to skip remediation when the Helm tests 15173 - are run but fail. Can be overwritten for tests run after install or upgrade 15174 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 15175 - type: boolean 15176 - timeout: 15177 - description: |- 15178 - Timeout is the time to wait for any individual Kubernetes operation during 15179 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 15180 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15181 - type: string 15182 - type: object 15183 - timeout: 15184 - description: |- 15185 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 15186 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 15187 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15188 - type: string 15189 - uninstall: 15190 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 15191 - properties: 15192 - deletionPropagation: 15193 - default: background 15194 - description: |- 15195 - DeletionPropagation specifies the deletion propagation policy when 15196 - a Helm uninstall is performed. 15197 - enum: 15198 - - background 15199 - - foreground 15200 - - orphan 15201 - type: string 15202 - disableHooks: 15203 - description: DisableHooks prevents hooks from running during the Helm rollback action. 15204 - type: boolean 15205 - disableWait: 15206 - description: |- 15207 - DisableWait disables waiting for all the resources to be deleted after 15208 - a Helm uninstall is performed. 15209 - type: boolean 15210 - keepHistory: 15211 - description: |- 15212 - KeepHistory tells Helm to remove all associated resources and mark the 15213 - release as deleted, but retain the release history. 15214 - type: boolean 15215 - timeout: 15216 - description: |- 15217 - Timeout is the time to wait for any individual Kubernetes operation (like 15218 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 15219 - to 'HelmReleaseSpec.Timeout'. 15220 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15221 - type: string 15222 - type: object 15223 - upgrade: 15224 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 15225 - properties: 15226 - cleanupOnFail: 15227 - description: |- 15228 - CleanupOnFail allows deletion of new resources created during the Helm 15229 - upgrade action when it fails. 15230 - type: boolean 15231 - crds: 15232 - description: |- 15233 - CRDs upgrade CRDs from the Helm Chart's crds directory according 15234 - to the CRD upgrade policy provided here. Valid values are `Skip`, 15235 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 15236 - CRDs are neither installed nor upgraded. 15237 - 15238 - 15239 - Skip: do neither install nor replace (update) any CRDs. 15240 - 15241 - 15242 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 15243 - 15244 - 15245 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 15246 - but not deleted. 15247 - 15248 - 15249 - By default, CRDs are not applied during Helm upgrade action. With this 15250 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 15251 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 15252 - enum: 15253 - - Skip 15254 - - Create 15255 - - CreateReplace 15256 - type: string 15257 - disableHooks: 15258 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 15259 - type: boolean 15260 - disableOpenAPIValidation: 15261 - description: |- 15262 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 15263 - rendered templates against the Kubernetes OpenAPI Schema. 15264 - type: boolean 15265 - disableWait: 15266 - description: |- 15267 - DisableWait disables the waiting for resources to be ready after a Helm 15268 - upgrade has been performed. 15269 - type: boolean 15270 - disableWaitForJobs: 15271 - description: |- 15272 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 15273 - upgrade has been performed. 15274 - type: boolean 15275 - force: 15276 - description: Force forces resource updates through a replacement strategy. 15277 - type: boolean 15278 - preserveValues: 15279 - description: |- 15280 - PreserveValues will make Helm reuse the last release's values and merge in 15281 - overrides from 'Values'. Setting this flag makes the HelmRelease 15282 - non-declarative. 15283 - type: boolean 15284 - remediation: 15285 - description: |- 15286 - Remediation holds the remediation configuration for when the Helm upgrade 15287 - action for the HelmRelease fails. The default is to not perform any action. 15288 - properties: 15289 - ignoreTestFailures: 15290 - description: |- 15291 - IgnoreTestFailures tells the controller to skip remediation when the Helm 15292 - tests are run after an upgrade action but fail. 15293 - Defaults to 'Test.IgnoreFailures'. 15294 - type: boolean 15295 - remediateLastFailure: 15296 - description: |- 15297 - RemediateLastFailure tells the controller to remediate the last failure, when 15298 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 15299 - type: boolean 15300 - retries: 15301 - description: |- 15302 - Retries is the number of retries that should be attempted on failures before 15303 - bailing. Remediation, using 'Strategy', is performed between each attempt. 15304 - Defaults to '0', a negative integer equals to unlimited retries. 15305 - type: integer 15306 - strategy: 15307 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 15308 - enum: 15309 - - rollback 15310 - - uninstall 15311 - type: string 15312 - type: object 15313 - timeout: 15314 - description: |- 15315 - Timeout is the time to wait for any individual Kubernetes operation (like 15316 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 15317 - 'HelmReleaseSpec.Timeout'. 15318 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15319 - type: string 15320 - type: object 15321 - values: 15322 - description: Values holds the values for this Helm release. 15323 - x-kubernetes-preserve-unknown-fields: true 15324 - valuesFrom: 15325 - description: |- 15326 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 15327 - and information about how they should be merged. 15328 - items: 15329 - description: |- 15330 - ValuesReference contains a reference to a resource containing Helm values, 15331 - and optionally the key they can be found at. 15332 - properties: 15333 - kind: 15334 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 15335 - enum: 15336 - - Secret 15337 - - ConfigMap 15338 - type: string 15339 - name: 15340 - description: |- 15341 - Name of the values referent. Should reside in the same namespace as the 15342 - referring resource. 15343 - maxLength: 253 15344 - minLength: 1 15345 - type: string 15346 - optional: 15347 - description: |- 15348 - Optional marks this ValuesReference as optional. When set, a not found error 15349 - for the values reference is ignored, but any ValuesKey, TargetPath or 15350 - transient error will still result in a reconciliation failure. 15351 - type: boolean 15352 - targetPath: 15353 - description: |- 15354 - TargetPath is the YAML dot notation path the value should be merged at. When 15355 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 15356 - which results in the values getting merged at the root. 15357 - maxLength: 250 15358 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 15359 - type: string 15360 - valuesKey: 15361 - description: |- 15362 - ValuesKey is the data key where the values.yaml or a specific value can be 15363 - found at. Defaults to 'values.yaml'. 15364 - maxLength: 253 15365 - pattern: ^[\-._a-zA-Z0-9]+$ 15366 - type: string 15367 - required: 15368 - - kind 15369 - - name 15370 - type: object 15371 - type: array 15372 + from: 15373 + description: |- 15374 + From contains a JSON-pointer value that references a location within the target document where the operation is 15375 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 15376 + type: string 15377 + op: 15378 + description: |- 15379 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 15380 + "test". 15381 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 15382 + enum: 15383 + - test 15384 + - remove 15385 + - add 15386 + - replace 15387 + - move 15388 + - copy 15389 + type: string 15390 + path: 15391 + description: |- 15392 + Path contains the JSON-pointer value that references a location within the target document where the operation 15393 + is performed. The meaning of the value depends on the value of Op. 15394 + type: string 15395 + value: 15396 + description: |- 15397 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 15398 + account by all operations. 15399 + x-kubernetes-preserve-unknown-fields: true 15400 required: 15401 - - interval 15402 + - op 15403 + - path 15404 type: object 15405 - x-kubernetes-validations: 15406 - - message: either chart or chartRef must be set 15407 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 15408 + type: array 15409 + target: 15410 + description: Target points to the resources that the patch document 15411 + should be applied to. 15412 + properties: 15413 + annotationSelector: 15414 + description: |- 15415 + AnnotationSelector is a string that follows the label selection expression 15416 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15417 + It matches with the resource annotations. 15418 + type: string 15419 + group: 15420 + description: |- 15421 + Group is the API group to select resources from. 15422 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15423 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15424 + type: string 15425 + kind: 15426 + description: |- 15427 + Kind of the API Group to select resources from. 15428 + Together with Group and Version it is capable of unambiguously 15429 + identifying and/or selecting resources. 15430 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15431 + type: string 15432 + labelSelector: 15433 + description: |- 15434 + LabelSelector is a string that follows the label selection expression 15435 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15436 + It matches with the resource labels. 15437 + type: string 15438 + name: 15439 + description: Name to match resources with. 15440 + type: string 15441 + namespace: 15442 + description: Namespace to select resources from. 15443 + type: string 15444 + version: 15445 + description: |- 15446 + Version of the API Group to select resources from. 15447 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15448 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15449 + type: string 15450 + type: object 15451 + required: 15452 + - patch 15453 + - target 15454 + type: object 15455 + type: array 15456 + patchesStrategicMerge: 15457 + description: Strategic merge patches, defined as inline YAML objects. 15458 + items: 15459 + x-kubernetes-preserve-unknown-fields: true 15460 + type: array 15461 + path: 15462 + description: |- 15463 + Path to the directory containing the kustomization.yaml file, or the 15464 + set of plain YAMLs a kustomization.yaml should be generated for. 15465 + Defaults to 'None', which translates to the root path of the SourceRef. 15466 + type: string 15467 + postBuild: 15468 + description: |- 15469 + PostBuild describes which actions to perform on the YAML manifest 15470 + generated by building the kustomize overlay. 15471 + properties: 15472 + substitute: 15473 + additionalProperties: 15474 + type: string 15475 + description: |- 15476 + Substitute holds a map of key/value pairs. 15477 + The variables defined in your YAML manifests 15478 + that match any of the keys defined in the map 15479 + will be substituted with the set value. 15480 + Includes support for bash string replacement functions 15481 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 15482 + type: object 15483 + substituteFrom: 15484 + description: |- 15485 + SubstituteFrom holds references to ConfigMaps and Secrets containing 15486 + the variables and their values to be substituted in the YAML manifests. 15487 + The ConfigMap and the Secret data keys represent the var names and they 15488 + must match the vars declared in the manifests for the substitution to happen. 15489 + items: 15490 + description: |- 15491 + SubstituteReference contains a reference to a resource containing 15492 + the variables name and value. 15493 + properties: 15494 + kind: 15495 + description: Kind of the values referent, valid values are 15496 + ('Secret', 'ConfigMap'). 15497 + enum: 15498 + - Secret 15499 + - ConfigMap 15500 + type: string 15501 + name: 15502 + description: |- 15503 + Name of the values referent. Should reside in the same namespace as the 15504 + referring resource. 15505 + maxLength: 253 15506 + minLength: 1 15507 + type: string 15508 + required: 15509 + - kind 15510 + - name 15511 + type: object 15512 + type: array 15513 + type: object 15514 + prune: 15515 + description: Prune enables garbage collection. 15516 + type: boolean 15517 + retryInterval: 15518 + description: |- 15519 + The interval at which to retry a previously failed reconciliation. 15520 + When not specified, the controller uses the KustomizationSpec.Interval 15521 + value to retry failures. 15522 + type: string 15523 + serviceAccountName: 15524 + description: |- 15525 + The name of the Kubernetes service account to impersonate 15526 + when reconciling this Kustomization. 15527 + type: string 15528 + sourceRef: 15529 + description: Reference of the source where the kustomization file 15530 + is. 15531 + properties: 15532 + apiVersion: 15533 + description: API version of the referent 15534 + type: string 15535 + kind: 15536 + description: Kind of the referent 15537 + enum: 15538 + - GitRepository 15539 + - Bucket 15540 + type: string 15541 + name: 15542 + description: Name of the referent 15543 + type: string 15544 + namespace: 15545 + description: Namespace of the referent, defaults to the Kustomization 15546 + namespace 15547 + type: string 15548 + required: 15549 + - kind 15550 + - name 15551 + type: object 15552 + suspend: 15553 + description: |- 15554 + This flag tells the controller to suspend subsequent kustomize executions, 15555 + it does not apply to already started executions. Defaults to false. 15556 + type: boolean 15557 + targetNamespace: 15558 + description: |- 15559 + TargetNamespace sets or overrides the namespace in the 15560 + kustomization.yaml file. 15561 + maxLength: 63 15562 + minLength: 1 15563 + type: string 15564 + timeout: 15565 + description: |- 15566 + Timeout for validation, apply and health checking operations. 15567 + Defaults to 'Interval' duration. 15568 + type: string 15569 + validation: 15570 + description: |- 15571 + Validate the Kubernetes objects before applying them on the cluster. 15572 + The validation strategy can be 'client' (local dry-run), 'server' 15573 + (APIServer dry-run) or 'none'. 15574 + When 'Force' is 'true', validation will fallback to 'client' if set to 15575 + 'server' because server-side validation is not supported in this scenario. 15576 + enum: 15577 + - none 15578 + - client 15579 + - server 15580 + type: string 15581 + required: 15582 + - interval 15583 + - prune 15584 + - sourceRef 15585 + type: object 15586 + status: 15587 + default: 15588 + observedGeneration: -1 15589 + description: KustomizationStatus defines the observed state of a kustomization. 15590 + properties: 15591 + conditions: 15592 + items: 15593 + description: Condition contains details for one aspect of the current 15594 + state of this API Resource. 15595 + properties: 15596 + lastTransitionTime: 15597 + description: |- 15598 + lastTransitionTime is the last time the condition transitioned from one status to another. 15599 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 15600 + format: date-time 15601 + type: string 15602 + message: 15603 + description: |- 15604 + message is a human readable message indicating details about the transition. 15605 + This may be an empty string. 15606 + maxLength: 32768 15607 + type: string 15608 + observedGeneration: 15609 + description: |- 15610 + observedGeneration represents the .metadata.generation that the condition was set based upon. 15611 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 15612 + with respect to the current state of the instance. 15613 + format: int64 15614 + minimum: 0 15615 + type: integer 15616 + reason: 15617 + description: |- 15618 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 15619 + Producers of specific condition types may define expected values and meanings for this field, 15620 + and whether the values are considered a guaranteed API. 15621 + The value should be a CamelCase string. 15622 + This field may not be empty. 15623 + maxLength: 1024 15624 + minLength: 1 15625 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 15626 + type: string 15627 status: 15628 - default: 15629 - observedGeneration: -1 15630 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 15631 + description: status of the condition, one of True, False, Unknown. 15632 + enum: 15633 + - "True" 15634 + - "False" 15635 + - Unknown 15636 + type: string 15637 + type: 15638 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 15639 + maxLength: 316 15640 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 15641 + type: string 15642 + required: 15643 + - lastTransitionTime 15644 + - message 15645 + - reason 15646 + - status 15647 + - type 15648 + type: object 15649 + type: array 15650 + lastAppliedRevision: 15651 + description: |- 15652 + The last successfully applied revision. 15653 + The revision format for Git sources is <branch|tag>/<commit-sha>. 15654 + type: string 15655 + lastAttemptedRevision: 15656 + description: LastAttemptedRevision is the revision of the last reconciliation 15657 + attempt. 15658 + type: string 15659 + lastHandledReconcileAt: 15660 + description: |- 15661 + LastHandledReconcileAt holds the value of the most recent 15662 + reconcile request value, so a change of the annotation value 15663 + can be detected. 15664 + type: string 15665 + observedGeneration: 15666 + description: ObservedGeneration is the last reconciled generation. 15667 + format: int64 15668 + type: integer 15669 + snapshot: 15670 + description: The last successfully applied revision metadata. 15671 + properties: 15672 + checksum: 15673 + description: The manifests sha1 checksum. 15674 + type: string 15675 + entries: 15676 + description: A list of Kubernetes kinds grouped by namespace. 15677 + items: 15678 + description: |- 15679 + Snapshot holds the metadata of namespaced 15680 + Kubernetes objects 15681 + properties: 15682 + kinds: 15683 + additionalProperties: 15684 + type: string 15685 + description: The list of Kubernetes kinds. 15686 + type: object 15687 + namespace: 15688 + description: The namespace of this entry. 15689 + type: string 15690 + required: 15691 + - kinds 15692 + type: object 15693 + type: array 15694 + required: 15695 + - checksum 15696 + - entries 15697 + type: object 15698 + type: object 15699 + type: object 15700 + served: true 15701 + storage: false 15702 + subresources: 15703 + status: {} 15704 + - additionalPrinterColumns: 15705 + - jsonPath: .metadata.creationTimestamp 15706 + name: Age 15707 + type: date 15708 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 15709 + name: Ready 15710 + type: string 15711 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 15712 + name: Status 15713 + type: string 15714 + deprecated: true 15715 + deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1 15716 + name: v1beta2 15717 + schema: 15718 + openAPIV3Schema: 15719 + description: Kustomization is the Schema for the kustomizations API. 15720 + properties: 15721 + apiVersion: 15722 + description: |- 15723 + APIVersion defines the versioned schema of this representation of an object. 15724 + Servers should convert recognized schemas to the latest internal value, and 15725 + may reject unrecognized values. 15726 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 15727 + type: string 15728 + kind: 15729 + description: |- 15730 + Kind is a string value representing the REST resource this object represents. 15731 + Servers may infer this from the endpoint the client submits requests to. 15732 + Cannot be updated. 15733 + In CamelCase. 15734 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 15735 + type: string 15736 + metadata: 15737 + type: object 15738 + spec: 15739 + description: KustomizationSpec defines the configuration to calculate 15740 + the desired state from a Source using Kustomize. 15741 + properties: 15742 + commonMetadata: 15743 + description: |- 15744 + CommonMetadata specifies the common labels and annotations that are applied to all resources. 15745 + Any existing label or annotation will be overridden if its key matches a common one. 15746 + properties: 15747 + annotations: 15748 + additionalProperties: 15749 + type: string 15750 + description: Annotations to be added to the object's metadata. 15751 + type: object 15752 + labels: 15753 + additionalProperties: 15754 + type: string 15755 + description: Labels to be added to the object's metadata. 15756 + type: object 15757 + type: object 15758 + components: 15759 + description: Components specifies relative paths to specifications 15760 + of other Components. 15761 + items: 15762 + type: string 15763 + type: array 15764 + decryption: 15765 + description: Decrypt Kubernetes secrets before applying them on the 15766 + cluster. 15767 + properties: 15768 + provider: 15769 + description: Provider is the name of the decryption engine. 15770 + enum: 15771 + - sops 15772 + type: string 15773 + secretRef: 15774 + description: The secret name containing the private OpenPGP keys 15775 + used for decryption. 15776 + properties: 15777 + name: 15778 + description: Name of the referent. 15779 + type: string 15780 + required: 15781 + - name 15782 + type: object 15783 + required: 15784 + - provider 15785 + type: object 15786 + dependsOn: 15787 + description: |- 15788 + DependsOn may contain a meta.NamespacedObjectReference slice 15789 + with references to Kustomization resources that must be ready before this 15790 + Kustomization can be reconciled. 15791 + items: 15792 + description: |- 15793 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 15794 + namespace. 15795 + properties: 15796 + name: 15797 + description: Name of the referent. 15798 + type: string 15799 + namespace: 15800 + description: Namespace of the referent, when not specified it 15801 + acts as LocalObjectReference. 15802 + type: string 15803 + required: 15804 + - name 15805 + type: object 15806 + type: array 15807 + force: 15808 + default: false 15809 + description: |- 15810 + Force instructs the controller to recreate resources 15811 + when patching fails due to an immutable field change. 15812 + type: boolean 15813 + healthChecks: 15814 + description: A list of resources to be included in the health assessment. 15815 + items: 15816 + description: |- 15817 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 15818 + in any namespace. 15819 + properties: 15820 + apiVersion: 15821 + description: API version of the referent, if not specified the 15822 + Kubernetes preferred version will be used. 15823 + type: string 15824 + kind: 15825 + description: Kind of the referent. 15826 + type: string 15827 + name: 15828 + description: Name of the referent. 15829 + type: string 15830 + namespace: 15831 + description: Namespace of the referent, when not specified it 15832 + acts as LocalObjectReference. 15833 + type: string 15834 + required: 15835 + - kind 15836 + - name 15837 + type: object 15838 + type: array 15839 + images: 15840 + description: |- 15841 + Images is a list of (image name, new name, new tag or digest) 15842 + for changing image names, tags or digests. This can also be achieved with a 15843 + patch, but this operator is simpler to specify. 15844 + items: 15845 + description: Image contains an image name, a new name, a new tag 15846 + or digest, which will replace the original name and tag. 15847 + properties: 15848 + digest: 15849 + description: |- 15850 + Digest is the value used to replace the original image tag. 15851 + If digest is present NewTag value is ignored. 15852 + type: string 15853 + name: 15854 + description: Name is a tag-less image name. 15855 + type: string 15856 + newName: 15857 + description: NewName is the value used to replace the original 15858 + name. 15859 + type: string 15860 + newTag: 15861 + description: NewTag is the value used to replace the original 15862 + tag. 15863 + type: string 15864 + required: 15865 + - name 15866 + type: object 15867 + type: array 15868 + interval: 15869 + description: The interval at which to reconcile the Kustomization. 15870 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15871 + type: string 15872 + kubeConfig: 15873 + description: |- 15874 + The KubeConfig for reconciling the Kustomization on a remote cluster. 15875 + When used in combination with KustomizationSpec.ServiceAccountName, 15876 + forces the controller to act on behalf of that Service Account at the 15877 + target cluster. 15878 + If the --default-service-account flag is set, its value will be used as 15879 + a controller level fallback for when KustomizationSpec.ServiceAccountName 15880 + is empty. 15881 + properties: 15882 + secretRef: 15883 + description: |- 15884 + SecretRef holds the name of a secret that contains a key with 15885 + the kubeconfig file as the value. If no key is set, the key will default 15886 + to 'value'. 15887 + It is recommended that the kubeconfig is self-contained, and the secret 15888 + is regularly updated if credentials such as a cloud-access-token expire. 15889 + Cloud specific `cmd-path` auth helpers will not function without adding 15890 + binaries and credentials to the Pod that is responsible for reconciling 15891 + Kubernetes resources. 15892 + properties: 15893 + key: 15894 + description: Key in the Secret, when not specified an implementation-specific 15895 + default key is used. 15896 + type: string 15897 + name: 15898 + description: Name of the Secret. 15899 + type: string 15900 + required: 15901 + - name 15902 + type: object 15903 + required: 15904 + - secretRef 15905 + type: object 15906 + patches: 15907 + description: |- 15908 + Strategic merge and JSON patches, defined as inline YAML objects, 15909 + capable of targeting objects based on kind, label and annotation selectors. 15910 + items: 15911 + description: |- 15912 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 15913 + be applied to. 15914 + properties: 15915 + patch: 15916 + description: |- 15917 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 15918 + an array of operation objects. 15919 + type: string 15920 + target: 15921 + description: Target points to the resources that the patch document 15922 + should be applied to. 15923 + properties: 15924 + annotationSelector: 15925 + description: |- 15926 + AnnotationSelector is a string that follows the label selection expression 15927 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15928 + It matches with the resource annotations. 15929 + type: string 15930 + group: 15931 + description: |- 15932 + Group is the API group to select resources from. 15933 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 15934 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15935 + type: string 15936 + kind: 15937 + description: |- 15938 + Kind of the API Group to select resources from. 15939 + Together with Group and Version it is capable of unambiguously 15940 + identifying and/or selecting resources. 15941 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15942 + type: string 15943 + labelSelector: 15944 + description: |- 15945 + LabelSelector is a string that follows the label selection expression 15946 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 15947 + It matches with the resource labels. 15948 + type: string 15949 + name: 15950 + description: Name to match resources with. 15951 + type: string 15952 + namespace: 15953 + description: Namespace to select resources from. 15954 + type: string 15955 + version: 15956 + description: |- 15957 + Version of the API Group to select resources from. 15958 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 15959 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 15960 + type: string 15961 + type: object 15962 + required: 15963 + - patch 15964 + type: object 15965 + type: array 15966 + patchesJson6902: 15967 + description: |- 15968 + JSON 6902 patches, defined as inline YAML objects. 15969 + Deprecated: Use Patches instead. 15970 + items: 15971 + description: JSON6902Patch contains a JSON6902 patch and the target 15972 + the patch should be applied to. 15973 + properties: 15974 + patch: 15975 + description: Patch contains the JSON6902 patch document with 15976 + an array of operation objects. 15977 + items: 15978 + description: |- 15979 + JSON6902 is a JSON6902 operation object. 15980 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 15981 properties: 15982 - conditions: 15983 - description: Conditions holds the conditions for the HelmRelease. 15984 - items: 15985 - description: "Condition contains details for one aspect of the current state of this API 15986 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 15987 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 15988 - the observations of a foo's current state.\n\t // Known .status.conditions.type 15989 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 15990 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 15991 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 15992 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 15993 - fields\n\t}" 15994 - properties: 15995 - lastTransitionTime: 15996 - description: |- 15997 - lastTransitionTime is the last time the condition transitioned from one status to another. 15998 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 15999 - format: date-time 16000 - type: string 16001 - message: 16002 - description: |- 16003 - message is a human readable message indicating details about the transition. 16004 - This may be an empty string. 16005 - maxLength: 32768 16006 - type: string 16007 - observedGeneration: 16008 - description: |- 16009 - observedGeneration represents the .metadata.generation that the condition was set based upon. 16010 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16011 - with respect to the current state of the instance. 16012 - format: int64 16013 - minimum: 0 16014 - type: integer 16015 - reason: 16016 - description: |- 16017 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 16018 - Producers of specific condition types may define expected values and meanings for this field, 16019 - and whether the values are considered a guaranteed API. 16020 - The value should be a CamelCase string. 16021 - This field may not be empty. 16022 - maxLength: 1024 16023 - minLength: 1 16024 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16025 - type: string 16026 - status: 16027 - description: status of the condition, one of True, False, Unknown. 16028 - enum: 16029 - - "True" 16030 - - "False" 16031 - - Unknown 16032 - type: string 16033 - type: 16034 - description: |- 16035 - type of condition in CamelCase or in foo.example.com/CamelCase. 16036 - --- 16037 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 16038 - useful (see .node.status.conditions), the ability to deconflict is important. 16039 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 16040 - maxLength: 316 16041 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16042 - type: string 16043 - required: 16044 - - lastTransitionTime 16045 - - message 16046 - - reason 16047 - - status 16048 - - type 16049 - type: object 16050 - type: array 16051 - failures: 16052 - description: |- 16053 - Failures is the reconciliation failure count against the latest desired 16054 - state. It is reset after a successful reconciliation. 16055 - format: int64 16056 - type: integer 16057 - helmChart: 16058 - description: |- 16059 - HelmChart is the namespaced name of the HelmChart resource created by 16060 - the controller for the HelmRelease. 16061 - type: string 16062 - history: 16063 - description: |- 16064 - History holds the history of Helm releases performed for this HelmRelease 16065 - up to the last successfully completed release. 16066 - items: 16067 - description: |- 16068 - Snapshot captures a point-in-time copy of the status information for a Helm release, 16069 - as managed by the controller. 16070 - properties: 16071 - apiVersion: 16072 - description: |- 16073 - APIVersion is the API version of the Snapshot. 16074 - Provisional: when the calculation method of the Digest field is changed, 16075 - this field will be used to distinguish between the old and new methods. 16076 - type: string 16077 - appVersion: 16078 - description: AppVersion is the chart app version of the release object in storage. 16079 - type: string 16080 - chartName: 16081 - description: ChartName is the chart name of the release object in storage. 16082 - type: string 16083 - chartVersion: 16084 - description: |- 16085 - ChartVersion is the chart version of the release object in 16086 - storage. 16087 - type: string 16088 - configDigest: 16089 - description: |- 16090 - ConfigDigest is the checksum of the config (better known as 16091 - "values") of the release object in storage. 16092 - It has the format of `<algo>:<checksum>`. 16093 - type: string 16094 - deleted: 16095 - description: Deleted is when the release was deleted. 16096 - format: date-time 16097 - type: string 16098 - digest: 16099 - description: |- 16100 - Digest is the checksum of the release object in storage. 16101 - It has the format of `<algo>:<checksum>`. 16102 - type: string 16103 - firstDeployed: 16104 - description: FirstDeployed is when the release was first deployed. 16105 - format: date-time 16106 - type: string 16107 - lastDeployed: 16108 - description: LastDeployed is when the release was last deployed. 16109 - format: date-time 16110 - type: string 16111 - name: 16112 - description: Name is the name of the release. 16113 - type: string 16114 - namespace: 16115 - description: Namespace is the namespace the release is deployed to. 16116 - type: string 16117 - ociDigest: 16118 - description: OCIDigest is the digest of the OCI artifact associated with the release. 16119 - type: string 16120 - status: 16121 - description: Status is the current state of the release. 16122 - type: string 16123 - testHooks: 16124 - additionalProperties: 16125 - description: |- 16126 - TestHookStatus holds the status information for a test hook as observed 16127 - to be run by the controller. 16128 - properties: 16129 - lastCompleted: 16130 - description: LastCompleted is the time the test hook last completed. 16131 - format: date-time 16132 - type: string 16133 - lastStarted: 16134 - description: LastStarted is the time the test hook was last started. 16135 - format: date-time 16136 - type: string 16137 - phase: 16138 - description: Phase the test hook was observed to be in. 16139 - type: string 16140 - type: object 16141 - description: |- 16142 - TestHooks is the list of test hooks for the release as observed to be 16143 - run by the controller. 16144 - type: object 16145 - version: 16146 - description: Version is the version of the release object in storage. 16147 - type: integer 16148 - required: 16149 - - chartName 16150 - - chartVersion 16151 - - configDigest 16152 - - digest 16153 - - firstDeployed 16154 - - lastDeployed 16155 - - name 16156 - - namespace 16157 - - status 16158 - - version 16159 - type: object 16160 - type: array 16161 - installFailures: 16162 - description: |- 16163 - InstallFailures is the install failure count against the latest desired 16164 - state. It is reset after a successful reconciliation. 16165 - format: int64 16166 - type: integer 16167 - lastAppliedRevision: 16168 - description: |- 16169 - LastAppliedRevision is the revision of the last successfully applied 16170 - source. 16171 - Deprecated: the revision can now be found in the History. 16172 - type: string 16173 - lastAttemptedConfigDigest: 16174 - description: |- 16175 - LastAttemptedConfigDigest is the digest for the config (better known as 16176 - "values") of the last reconciliation attempt. 16177 - type: string 16178 - lastAttemptedGeneration: 16179 - description: |- 16180 - LastAttemptedGeneration is the last generation the controller attempted 16181 - to reconcile. 16182 - format: int64 16183 - type: integer 16184 - lastAttemptedReleaseAction: 16185 - description: |- 16186 - LastAttemptedReleaseAction is the last release action performed for this 16187 - HelmRelease. It is used to determine the active remediation strategy. 16188 - enum: 16189 - - install 16190 - - upgrade 16191 - type: string 16192 - lastAttemptedRevision: 16193 - description: |- 16194 - LastAttemptedRevision is the Source revision of the last reconciliation 16195 - attempt. For OCIRepository sources, the 12 first characters of the digest are 16196 - appended to the chart version e.g. "1.2.3+1234567890ab". 16197 - type: string 16198 - lastAttemptedRevisionDigest: 16199 - description: |- 16200 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 16201 - This is only set for OCIRepository sources. 16202 - type: string 16203 - lastAttemptedValuesChecksum: 16204 - description: |- 16205 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 16206 - reconciliation attempt. 16207 - Deprecated: Use LastAttemptedConfigDigest instead. 16208 - type: string 16209 - lastHandledForceAt: 16210 - description: |- 16211 - LastHandledForceAt holds the value of the most recent force request 16212 - value, so a change of the annotation value can be detected. 16213 - type: string 16214 - lastHandledReconcileAt: 16215 - description: |- 16216 - LastHandledReconcileAt holds the value of the most recent 16217 - reconcile request value, so a change of the annotation value 16218 - can be detected. 16219 - type: string 16220 - lastHandledResetAt: 16221 - description: |- 16222 - LastHandledResetAt holds the value of the most recent reset request 16223 - value, so a change of the annotation value can be detected. 16224 - type: string 16225 - lastReleaseRevision: 16226 - description: |- 16227 - LastReleaseRevision is the revision of the last successful Helm release. 16228 - Deprecated: Use History instead. 16229 - type: integer 16230 - observedGeneration: 16231 - description: ObservedGeneration is the last observed generation. 16232 - format: int64 16233 - type: integer 16234 - observedPostRenderersDigest: 16235 - description: |- 16236 - ObservedPostRenderersDigest is the digest for the post-renderers of 16237 - the last successful reconciliation attempt. 16238 - type: string 16239 - storageNamespace: 16240 - description: |- 16241 - StorageNamespace is the namespace of the Helm release storage for the 16242 - current release. 16243 - maxLength: 63 16244 - minLength: 1 16245 - type: string 16246 - upgradeFailures: 16247 - description: |- 16248 - UpgradeFailures is the upgrade failure count against the latest desired 16249 - state. It is reset after a successful reconciliation. 16250 - format: int64 16251 - type: integer 16252 + from: 16253 + description: |- 16254 + From contains a JSON-pointer value that references a location within the target document where the operation is 16255 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 16256 + type: string 16257 + op: 16258 + description: |- 16259 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 16260 + "test". 16261 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 16262 + enum: 16263 + - test 16264 + - remove 16265 + - add 16266 + - replace 16267 + - move 16268 + - copy 16269 + type: string 16270 + path: 16271 + description: |- 16272 + Path contains the JSON-pointer value that references a location within the target document where the operation 16273 + is performed. The meaning of the value depends on the value of Op. 16274 + type: string 16275 + value: 16276 + description: |- 16277 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 16278 + account by all operations. 16279 + x-kubernetes-preserve-unknown-fields: true 16280 + required: 16281 + - op 16282 + - path 16283 type: object 16284 + type: array 16285 + target: 16286 + description: Target points to the resources that the patch document 16287 + should be applied to. 16288 + properties: 16289 + annotationSelector: 16290 + description: |- 16291 + AnnotationSelector is a string that follows the label selection expression 16292 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16293 + It matches with the resource annotations. 16294 + type: string 16295 + group: 16296 + description: |- 16297 + Group is the API group to select resources from. 16298 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 16299 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16300 + type: string 16301 + kind: 16302 + description: |- 16303 + Kind of the API Group to select resources from. 16304 + Together with Group and Version it is capable of unambiguously 16305 + identifying and/or selecting resources. 16306 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16307 + type: string 16308 + labelSelector: 16309 + description: |- 16310 + LabelSelector is a string that follows the label selection expression 16311 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 16312 + It matches with the resource labels. 16313 + type: string 16314 + name: 16315 + description: Name to match resources with. 16316 + type: string 16317 + namespace: 16318 + description: Namespace to select resources from. 16319 + type: string 16320 + version: 16321 + description: |- 16322 + Version of the API Group to select resources from. 16323 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 16324 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 16325 + type: string 16326 + type: object 16327 + required: 16328 + - patch 16329 + - target 16330 + type: object 16331 + type: array 16332 + patchesStrategicMerge: 16333 + description: |- 16334 + Strategic merge patches, defined as inline YAML objects. 16335 + Deprecated: Use Patches instead. 16336 + items: 16337 + x-kubernetes-preserve-unknown-fields: true 16338 + type: array 16339 + path: 16340 + description: |- 16341 + Path to the directory containing the kustomization.yaml file, or the 16342 + set of plain YAMLs a kustomization.yaml should be generated for. 16343 + Defaults to 'None', which translates to the root path of the SourceRef. 16344 + type: string 16345 + postBuild: 16346 + description: |- 16347 + PostBuild describes which actions to perform on the YAML manifest 16348 + generated by building the kustomize overlay. 16349 + properties: 16350 + substitute: 16351 + additionalProperties: 16352 + type: string 16353 + description: |- 16354 + Substitute holds a map of key/value pairs. 16355 + The variables defined in your YAML manifests 16356 + that match any of the keys defined in the map 16357 + will be substituted with the set value. 16358 + Includes support for bash string replacement functions 16359 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 16360 + type: object 16361 + substituteFrom: 16362 + description: |- 16363 + SubstituteFrom holds references to ConfigMaps and Secrets containing 16364 + the variables and their values to be substituted in the YAML manifests. 16365 + The ConfigMap and the Secret data keys represent the var names and they 16366 + must match the vars declared in the manifests for the substitution to happen. 16367 + items: 16368 + description: |- 16369 + SubstituteReference contains a reference to a resource containing 16370 + the variables name and value. 16371 + properties: 16372 + kind: 16373 + description: Kind of the values referent, valid values are 16374 + ('Secret', 'ConfigMap'). 16375 + enum: 16376 + - Secret 16377 + - ConfigMap 16378 + type: string 16379 + name: 16380 + description: |- 16381 + Name of the values referent. Should reside in the same namespace as the 16382 + referring resource. 16383 + maxLength: 253 16384 + minLength: 1 16385 + type: string 16386 + optional: 16387 + default: false 16388 + description: |- 16389 + Optional indicates whether the referenced resource must exist, or whether to 16390 + tolerate its absence. If true and the referenced resource is absent, proceed 16391 + as if the resource was present but empty, without any variables defined. 16392 + type: boolean 16393 + required: 16394 + - kind 16395 + - name 16396 + type: object 16397 + type: array 16398 + type: object 16399 + prune: 16400 + description: Prune enables garbage collection. 16401 + type: boolean 16402 + retryInterval: 16403 + description: |- 16404 + The interval at which to retry a previously failed reconciliation. 16405 + When not specified, the controller uses the KustomizationSpec.Interval 16406 + value to retry failures. 16407 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16408 + type: string 16409 + serviceAccountName: 16410 + description: |- 16411 + The name of the Kubernetes service account to impersonate 16412 + when reconciling this Kustomization. 16413 + type: string 16414 + sourceRef: 16415 + description: Reference of the source where the kustomization file 16416 + is. 16417 + properties: 16418 + apiVersion: 16419 + description: API version of the referent. 16420 + type: string 16421 + kind: 16422 + description: Kind of the referent. 16423 + enum: 16424 + - OCIRepository 16425 + - GitRepository 16426 + - Bucket 16427 + type: string 16428 + name: 16429 + description: Name of the referent. 16430 + type: string 16431 + namespace: 16432 + description: Namespace of the referent, defaults to the namespace 16433 + of the Kubernetes resource object that contains the reference. 16434 + type: string 16435 + required: 16436 + - kind 16437 + - name 16438 + type: object 16439 + suspend: 16440 + description: |- 16441 + This flag tells the controller to suspend subsequent kustomize executions, 16442 + it does not apply to already started executions. Defaults to false. 16443 + type: boolean 16444 + targetNamespace: 16445 + description: |- 16446 + TargetNamespace sets or overrides the namespace in the 16447 + kustomization.yaml file. 16448 + maxLength: 63 16449 + minLength: 1 16450 + type: string 16451 + timeout: 16452 + description: |- 16453 + Timeout for validation, apply and health checking operations. 16454 + Defaults to 'Interval' duration. 16455 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16456 + type: string 16457 + validation: 16458 + description: 'Deprecated: Not used in v1beta2.' 16459 + enum: 16460 + - none 16461 + - client 16462 + - server 16463 + type: string 16464 + wait: 16465 + description: |- 16466 + Wait instructs the controller to check the health of all the reconciled resources. 16467 + When enabled, the HealthChecks are ignored. Defaults to false. 16468 + type: boolean 16469 + required: 16470 + - interval 16471 + - prune 16472 + - sourceRef 16473 + type: object 16474 + status: 16475 + default: 16476 + observedGeneration: -1 16477 + description: KustomizationStatus defines the observed state of a kustomization. 16478 + properties: 16479 + conditions: 16480 + items: 16481 + description: Condition contains details for one aspect of the current 16482 + state of this API Resource. 16483 + properties: 16484 + lastTransitionTime: 16485 + description: |- 16486 + lastTransitionTime is the last time the condition transitioned from one status to another. 16487 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 16488 + format: date-time 16489 + type: string 16490 + message: 16491 + description: |- 16492 + message is a human readable message indicating details about the transition. 16493 + This may be an empty string. 16494 + maxLength: 32768 16495 + type: string 16496 + observedGeneration: 16497 + description: |- 16498 + observedGeneration represents the .metadata.generation that the condition was set based upon. 16499 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 16500 + with respect to the current state of the instance. 16501 + format: int64 16502 + minimum: 0 16503 + type: integer 16504 + reason: 16505 + description: |- 16506 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 16507 + Producers of specific condition types may define expected values and meanings for this field, 16508 + and whether the values are considered a guaranteed API. 16509 + The value should be a CamelCase string. 16510 + This field may not be empty. 16511 + maxLength: 1024 16512 + minLength: 1 16513 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 16514 + type: string 16515 + status: 16516 + description: status of the condition, one of True, False, Unknown. 16517 + enum: 16518 + - "True" 16519 + - "False" 16520 + - Unknown 16521 + type: string 16522 + type: 16523 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 16524 + maxLength: 316 16525 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 16526 + type: string 16527 + required: 16528 + - lastTransitionTime 16529 + - message 16530 + - reason 16531 + - status 16532 + - type 16533 + type: object 16534 + type: array 16535 + inventory: 16536 + description: Inventory contains the list of Kubernetes resource object 16537 + references that have been successfully applied. 16538 + properties: 16539 + entries: 16540 + description: Entries of Kubernetes resource object references. 16541 + items: 16542 + description: ResourceRef contains the information necessary 16543 + to locate a resource within a cluster. 16544 + properties: 16545 + id: 16546 + description: |- 16547 + ID is the string representation of the Kubernetes resource object's metadata, 16548 + in the format '<namespace>_<name>_<group>_<kind>'. 16549 + type: string 16550 + v: 16551 + description: Version is the API version of the Kubernetes 16552 + resource object's kind. 16553 + type: string 16554 + required: 16555 + - id 16556 + - v 16557 + type: object 16558 + type: array 16559 + required: 16560 + - entries 16561 type: object 16562 - served: true 16563 - storage: false 16564 - subresources: 16565 - status: {} 16566 + lastAppliedRevision: 16567 + description: |- 16568 + The last successfully applied revision. 16569 + Equals the Revision of the applied Artifact from the referenced Source. 16570 + type: string 16571 + lastAttemptedRevision: 16572 + description: LastAttemptedRevision is the revision of the last reconciliation 16573 + attempt. 16574 + type: string 16575 + lastHandledReconcileAt: 16576 + description: |- 16577 + LastHandledReconcileAt holds the value of the most recent 16578 + reconcile request value, so a change of the annotation value 16579 + can be detected. 16580 + type: string 16581 + observedGeneration: 16582 + description: ObservedGeneration is the last reconciled generation. 16583 + format: int64 16584 + type: integer 16585 + type: object 16586 + type: object 16587 + served: true 16588 + storage: false 16589 + subresources: 16590 + status: {} 16591 --- 16592 apiVersion: v1 16593 kind: ServiceAccount 16594 metadata: 16595 - labels: 16596 - app.kubernetes.io/component: helm-controller 16597 - app.kubernetes.io/instance: flux-system 16598 - app.kubernetes.io/part-of: flux 16599 - app.kubernetes.io/version: v2.3.0 16600 - name: helm-controller 16601 - namespace: flux-system 16602 + labels: 16603 + app.kubernetes.io/component: kustomize-controller 16604 + app.kubernetes.io/instance: flux-system 16605 + app.kubernetes.io/part-of: flux 16606 + app.kubernetes.io/version: v2.4.0 16607 + name: kustomize-controller 16608 + namespace: flux-system 16609 --- 16610 apiVersion: apps/v1 16611 kind: Deployment 16612 metadata: 16613 - labels: 16614 - app.kubernetes.io/component: helm-controller 16615 - app.kubernetes.io/instance: flux-system 16616 - app.kubernetes.io/part-of: flux 16617 - app.kubernetes.io/version: v2.3.0 16618 - control-plane: controller 16619 - name: helm-controller 16620 - namespace: flux-system 16621 + labels: 16622 + app.kubernetes.io/component: kustomize-controller 16623 + app.kubernetes.io/instance: flux-system 16624 + app.kubernetes.io/part-of: flux 16625 + app.kubernetes.io/version: v2.4.0 16626 + control-plane: controller 16627 + name: kustomize-controller 16628 + namespace: flux-system 16629 spec: 16630 - replicas: 1 16631 - selector: 16632 - matchLabels: 16633 - app: helm-controller 16634 - template: 16635 - metadata: 16636 - annotations: 16637 - prometheus.io/port: "8080" 16638 - prometheus.io/scrape: "true" 16639 - labels: 16640 - app: helm-controller 16641 - spec: 16642 - containers: 16643 - - args: 16644 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 16645 - - --watch-all-namespaces=true 16646 - - --log-level=info 16647 - - --log-encoding=json 16648 - - --enable-leader-election 16649 - env: 16650 - - name: RUNTIME_NAMESPACE 16651 - valueFrom: 16652 - fieldRef: 16653 - fieldPath: metadata.namespace 16654 - - name: GOMAXPROCS 16655 - valueFrom: 16656 - resourceFieldRef: 16657 - containerName: manager 16658 - resource: limits.cpu 16659 - - name: GOMEMLIMIT 16660 - valueFrom: 16661 - resourceFieldRef: 16662 - containerName: manager 16663 - resource: limits.memory 16664 - image: ghcr.io/fluxcd/helm-controller:v1.0.1 16665 - imagePullPolicy: IfNotPresent 16666 - livenessProbe: 16667 - httpGet: 16668 - path: /healthz 16669 - port: healthz 16670 - name: manager 16671 - ports: 16672 - - containerPort: 8080 16673 - name: http-prom 16674 - protocol: TCP 16675 - - containerPort: 9440 16676 - name: healthz 16677 - protocol: TCP 16678 - readinessProbe: 16679 - httpGet: 16680 - path: /readyz 16681 - port: healthz 16682 - resources: 16683 - limits: 16684 - cpu: 1000m 16685 - memory: 1Gi 16686 - requests: 16687 - cpu: 100m 16688 - memory: 64Mi 16689 - securityContext: 16690 - allowPrivilegeEscalation: false 16691 - capabilities: 16692 - drop: 16693 - - ALL 16694 - readOnlyRootFilesystem: true 16695 - runAsNonRoot: true 16696 - seccompProfile: 16697 - type: RuntimeDefault 16698 - volumeMounts: 16699 - - mountPath: /tmp 16700 - name: temp 16701 - nodeSelector: 16702 - kubernetes.io/os: linux 16703 - priorityClassName: system-cluster-critical 16704 - securityContext: 16705 - fsGroup: 1337 16706 - serviceAccountName: helm-controller 16707 - terminationGracePeriodSeconds: 600 16708 - volumes: 16709 - - emptyDir: {} 16710 - name: temp 16711 + replicas: 1 16712 + selector: 16713 + matchLabels: 16714 + app: kustomize-controller 16715 + template: 16716 + metadata: 16717 + annotations: 16718 + prometheus.io/port: "8080" 16719 + prometheus.io/scrape: "true" 16720 + labels: 16721 + app: kustomize-controller 16722 + spec: 16723 + containers: 16724 + - args: 16725 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 16726 + - --watch-all-namespaces=true 16727 + - --log-level=info 16728 + - --log-encoding=json 16729 + - --enable-leader-election 16730 + env: 16731 + - name: RUNTIME_NAMESPACE 16732 + valueFrom: 16733 + fieldRef: 16734 + fieldPath: metadata.namespace 16735 + - name: GOMAXPROCS 16736 + valueFrom: 16737 + resourceFieldRef: 16738 + containerName: manager 16739 + resource: limits.cpu 16740 + - name: GOMEMLIMIT 16741 + valueFrom: 16742 + resourceFieldRef: 16743 + containerName: manager 16744 + resource: limits.memory 16745 + image: ghcr.io/fluxcd/kustomize-controller:v1.4.0 16746 + imagePullPolicy: IfNotPresent 16747 + livenessProbe: 16748 + httpGet: 16749 + path: /healthz 16750 + port: healthz 16751 + name: manager 16752 + ports: 16753 + - containerPort: 8080 16754 + name: http-prom 16755 + protocol: TCP 16756 + - containerPort: 9440 16757 + name: healthz 16758 + protocol: TCP 16759 + readinessProbe: 16760 + httpGet: 16761 + path: /readyz 16762 + port: healthz 16763 + resources: 16764 + limits: 16765 + cpu: 1000m 16766 + memory: 1Gi 16767 + requests: 16768 + cpu: 100m 16769 + memory: 64Mi 16770 + securityContext: 16771 + allowPrivilegeEscalation: false 16772 + capabilities: 16773 + drop: 16774 + - ALL 16775 + readOnlyRootFilesystem: true 16776 + runAsNonRoot: true 16777 + seccompProfile: 16778 + type: RuntimeDefault 16779 + volumeMounts: 16780 + - mountPath: /tmp 16781 + name: temp 16782 + nodeSelector: 16783 + kubernetes.io/os: linux 16784 + priorityClassName: system-cluster-critical 16785 + securityContext: 16786 + fsGroup: 1337 16787 + serviceAccountName: kustomize-controller 16788 + terminationGracePeriodSeconds: 60 16789 + volumes: 16790 + - emptyDir: {} 16791 + name: temp 16792 --- 16793 apiVersion: apiextensions.k8s.io/v1 16794 kind: CustomResourceDefinition 16795 metadata: 16796 - annotations: 16797 - controller-gen.kubebuilder.io/version: v0.15.0 16798 - labels: 16799 - app.kubernetes.io/component: notification-controller 16800 - app.kubernetes.io/instance: flux-system 16801 - app.kubernetes.io/part-of: flux 16802 - app.kubernetes.io/version: v2.3.0 16803 - name: alerts.notification.toolkit.fluxcd.io 16804 + annotations: 16805 + controller-gen.kubebuilder.io/version: v0.16.1 16806 + labels: 16807 + app.kubernetes.io/component: helm-controller 16808 + app.kubernetes.io/instance: flux-system 16809 + app.kubernetes.io/part-of: flux 16810 + app.kubernetes.io/version: v2.4.0 16811 + name: helmreleases.helm.toolkit.fluxcd.io 16812 spec: 16813 - group: notification.toolkit.fluxcd.io 16814 - names: 16815 - kind: Alert 16816 - listKind: AlertList 16817 - plural: alerts 16818 - singular: alert 16819 - scope: Namespaced 16820 - versions: 16821 - - additionalPrinterColumns: 16822 - - jsonPath: .metadata.creationTimestamp 16823 - name: Age 16824 - type: date 16825 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 16826 - name: Ready 16827 - type: string 16828 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 16829 - name: Status 16830 - type: string 16831 - deprecated: true 16832 - deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3 16833 - name: v1beta1 16834 - schema: 16835 - openAPIV3Schema: 16836 - description: Alert is the Schema for the alerts API 16837 + group: helm.toolkit.fluxcd.io 16838 + names: 16839 + kind: HelmRelease 16840 + listKind: HelmReleaseList 16841 + plural: helmreleases 16842 + shortNames: 16843 + - hr 16844 + singular: helmrelease 16845 + scope: Namespaced 16846 + versions: 16847 + - additionalPrinterColumns: 16848 + - jsonPath: .metadata.creationTimestamp 16849 + name: Age 16850 + type: date 16851 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 16852 + name: Ready 16853 + type: string 16854 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 16855 + name: Status 16856 + type: string 16857 + name: v2 16858 + schema: 16859 + openAPIV3Schema: 16860 + description: HelmRelease is the Schema for the helmreleases API 16861 + properties: 16862 + apiVersion: 16863 + description: |- 16864 + APIVersion defines the versioned schema of this representation of an object. 16865 + Servers should convert recognized schemas to the latest internal value, and 16866 + may reject unrecognized values. 16867 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 16868 + type: string 16869 + kind: 16870 + description: |- 16871 + Kind is a string value representing the REST resource this object represents. 16872 + Servers may infer this from the endpoint the client submits requests to. 16873 + Cannot be updated. 16874 + In CamelCase. 16875 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 16876 + type: string 16877 + metadata: 16878 + type: object 16879 + spec: 16880 + description: HelmReleaseSpec defines the desired state of a Helm release. 16881 + properties: 16882 + chart: 16883 + description: |- 16884 + Chart defines the template of the v1.HelmChart that should be created 16885 + for this HelmRelease. 16886 properties: 16887 - apiVersion: 16888 + metadata: 16889 + description: ObjectMeta holds the template for metadata like labels 16890 + and annotations. 16891 + properties: 16892 + annotations: 16893 + additionalProperties: 16894 + type: string 16895 + description: |- 16896 + Annotations is an unstructured key value map stored with a resource that may be 16897 + set by external tools to store and retrieve arbitrary metadata. They are not 16898 + queryable and should be preserved when modifying objects. 16899 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 16900 + type: object 16901 + labels: 16902 + additionalProperties: 16903 + type: string 16904 + description: |- 16905 + Map of string keys and values that can be used to organize and categorize 16906 + (scope and select) objects. 16907 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 16908 + type: object 16909 + type: object 16910 + spec: 16911 + description: Spec holds the template for the v1.HelmChartSpec 16912 + for this HelmRelease. 16913 + properties: 16914 + chart: 16915 + description: The name or path the Helm chart is available 16916 + at in the SourceRef. 16917 + maxLength: 2048 16918 + minLength: 1 16919 + type: string 16920 + ignoreMissingValuesFiles: 16921 + description: IgnoreMissingValuesFiles controls whether to 16922 + silently ignore missing values files rather than failing. 16923 + type: boolean 16924 + interval: 16925 description: |- 16926 - APIVersion defines the versioned schema of this representation of an object. 16927 - Servers should convert recognized schemas to the latest internal value, and 16928 - may reject unrecognized values. 16929 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 16930 + Interval at which to check the v1.Source for updates. Defaults to 16931 + 'HelmReleaseSpec.Interval'. 16932 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 16933 type: string 16934 - kind: 16935 + reconcileStrategy: 16936 + default: ChartVersion 16937 description: |- 16938 - Kind is a string value representing the REST resource this object represents. 16939 - Servers may infer this from the endpoint the client submits requests to. 16940 - Cannot be updated. 16941 - In CamelCase. 16942 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 16943 + Determines what enables the creation of a new artifact. Valid values are 16944 + ('ChartVersion', 'Revision'). 16945 + See the documentation of the values for an explanation on their behavior. 16946 + Defaults to ChartVersion when omitted. 16947 + enum: 16948 + - ChartVersion 16949 + - Revision 16950 type: string 16951 - metadata: 16952 - type: object 16953 - spec: 16954 - description: AlertSpec defines an alerting rule for events involving a list of objects 16955 + sourceRef: 16956 + description: The name and namespace of the v1.Source the chart 16957 + is available at. 16958 properties: 16959 - eventSeverity: 16960 - default: info 16961 - description: |- 16962 - Filter events based on severity, defaults to ('info'). 16963 - If set to 'info' no events will be filtered. 16964 - enum: 16965 - - info 16966 - - error 16967 - type: string 16968 - eventSources: 16969 - description: Filter events based on the involved objects. 16970 - items: 16971 - description: |- 16972 - CrossNamespaceObjectReference contains enough information to let you locate the 16973 - typed referenced object at cluster level 16974 - properties: 16975 - apiVersion: 16976 - description: API version of the referent 16977 - type: string 16978 - kind: 16979 - description: Kind of the referent 16980 - enum: 16981 - - Bucket 16982 - - GitRepository 16983 - - Kustomization 16984 - - HelmRelease 16985 - - HelmChart 16986 - - HelmRepository 16987 - - ImageRepository 16988 - - ImagePolicy 16989 - - ImageUpdateAutomation 16990 - - OCIRepository 16991 - type: string 16992 - matchLabels: 16993 - additionalProperties: 16994 - type: string 16995 - description: |- 16996 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 16997 - map is equivalent to an element of matchExpressions, whose key field is "key", the 16998 - operator is "In", and the values array contains only "value". The requirements are ANDed. 16999 - type: object 17000 - name: 17001 - description: Name of the referent 17002 - maxLength: 53 17003 - minLength: 1 17004 - type: string 17005 - namespace: 17006 - description: Namespace of the referent 17007 - maxLength: 53 17008 - minLength: 1 17009 - type: string 17010 - required: 17011 - - name 17012 - type: object 17013 - type: array 17014 - exclusionList: 17015 - description: A list of Golang regular expressions to be used for excluding messages. 17016 - items: 17017 - type: string 17018 - type: array 17019 - providerRef: 17020 - description: Send events using this provider. 17021 - properties: 17022 - name: 17023 - description: Name of the referent. 17024 - type: string 17025 - required: 17026 - - name 17027 - type: object 17028 - summary: 17029 - description: Short description of the impact and affected cluster. 17030 - type: string 17031 - suspend: 17032 - description: |- 17033 - This flag tells the controller to suspend subsequent events dispatching. 17034 - Defaults to false. 17035 - type: boolean 17036 + apiVersion: 17037 + description: APIVersion of the referent. 17038 + type: string 17039 + kind: 17040 + description: Kind of the referent. 17041 + enum: 17042 + - HelmRepository 17043 + - GitRepository 17044 + - Bucket 17045 + type: string 17046 + name: 17047 + description: Name of the referent. 17048 + maxLength: 253 17049 + minLength: 1 17050 + type: string 17051 + namespace: 17052 + description: Namespace of the referent. 17053 + maxLength: 63 17054 + minLength: 1 17055 + type: string 17056 required: 17057 - - eventSources 17058 - - providerRef 17059 + - kind 17060 + - name 17061 type: object 17062 - status: 17063 - default: 17064 - observedGeneration: -1 17065 - description: AlertStatus defines the observed state of Alert 17066 + valuesFiles: 17067 + description: |- 17068 + Alternative list of values files to use as the chart values (values.yaml 17069 + is not included by default), expected to be a relative path in the SourceRef. 17070 + Values files are merged in the order of this list with the last file overriding 17071 + the first. Ignored when omitted. 17072 + items: 17073 + type: string 17074 + type: array 17075 + verify: 17076 + description: |- 17077 + Verify contains the secret name containing the trusted public keys 17078 + used to verify the signature and specifies which provider to use to check 17079 + whether OCI image is authentic. 17080 + This field is only supported for OCI sources. 17081 + Chart dependencies, which are not bundled in the umbrella chart artifact, 17082 + are not verified. 17083 properties: 17084 - conditions: 17085 - items: 17086 - description: "Condition contains details for one aspect of the current state of this API 17087 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 17088 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 17089 - the observations of a foo's current state.\n\t // Known .status.conditions.type 17090 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 17091 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 17092 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 17093 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 17094 - fields\n\t}" 17095 - properties: 17096 - lastTransitionTime: 17097 - description: |- 17098 - lastTransitionTime is the last time the condition transitioned from one status to another. 17099 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17100 - format: date-time 17101 - type: string 17102 - message: 17103 - description: |- 17104 - message is a human readable message indicating details about the transition. 17105 - This may be an empty string. 17106 - maxLength: 32768 17107 - type: string 17108 - observedGeneration: 17109 - description: |- 17110 - observedGeneration represents the .metadata.generation that the condition was set based upon. 17111 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17112 - with respect to the current state of the instance. 17113 - format: int64 17114 - minimum: 0 17115 - type: integer 17116 - reason: 17117 - description: |- 17118 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 17119 - Producers of specific condition types may define expected values and meanings for this field, 17120 - and whether the values are considered a guaranteed API. 17121 - The value should be a CamelCase string. 17122 - This field may not be empty. 17123 - maxLength: 1024 17124 - minLength: 1 17125 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17126 - type: string 17127 - status: 17128 - description: status of the condition, one of True, False, Unknown. 17129 - enum: 17130 - - "True" 17131 - - "False" 17132 - - Unknown 17133 - type: string 17134 - type: 17135 - description: |- 17136 - type of condition in CamelCase or in foo.example.com/CamelCase. 17137 - --- 17138 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 17139 - useful (see .node.status.conditions), the ability to deconflict is important. 17140 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 17141 - maxLength: 316 17142 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17143 - type: string 17144 - required: 17145 - - lastTransitionTime 17146 - - message 17147 - - reason 17148 - - status 17149 - - type 17150 - type: object 17151 - type: array 17152 - observedGeneration: 17153 - description: ObservedGeneration is the last observed generation. 17154 - format: int64 17155 - type: integer 17156 + provider: 17157 + default: cosign 17158 + description: Provider specifies the technology used to 17159 + sign the OCI Helm chart. 17160 + enum: 17161 + - cosign 17162 + - notation 17163 + type: string 17164 + secretRef: 17165 + description: |- 17166 + SecretRef specifies the Kubernetes Secret containing the 17167 + trusted public keys. 17168 + properties: 17169 + name: 17170 + description: Name of the referent. 17171 + type: string 17172 + required: 17173 + - name 17174 + type: object 17175 + required: 17176 + - provider 17177 type: object 17178 + version: 17179 + default: '*' 17180 + description: |- 17181 + Version semver expression, ignored for charts from v1.GitRepository and 17182 + v1beta2.Bucket sources. Defaults to latest when omitted. 17183 + type: string 17184 + required: 17185 + - chart 17186 + - sourceRef 17187 + type: object 17188 + required: 17189 + - spec 17190 type: object 17191 - served: true 17192 - storage: false 17193 - subresources: 17194 - status: {} 17195 - - additionalPrinterColumns: 17196 - - jsonPath: .metadata.creationTimestamp 17197 - name: Age 17198 - type: date 17199 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 17200 - name: Ready 17201 - type: string 17202 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 17203 - name: Status 17204 - type: string 17205 - deprecated: true 17206 - deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 17207 - name: v1beta2 17208 - schema: 17209 - openAPIV3Schema: 17210 - description: Alert is the Schema for the alerts API 17211 + chartRef: 17212 + description: |- 17213 + ChartRef holds a reference to a source controller resource containing the 17214 + Helm chart artifact. 17215 properties: 17216 - apiVersion: 17217 + apiVersion: 17218 + description: APIVersion of the referent. 17219 + type: string 17220 + kind: 17221 + description: Kind of the referent. 17222 + enum: 17223 + - OCIRepository 17224 + - HelmChart 17225 + type: string 17226 + name: 17227 + description: Name of the referent. 17228 + maxLength: 253 17229 + minLength: 1 17230 + type: string 17231 + namespace: 17232 + description: |- 17233 + Namespace of the referent, defaults to the namespace of the Kubernetes 17234 + resource object that contains the reference. 17235 + maxLength: 63 17236 + minLength: 1 17237 + type: string 17238 + required: 17239 + - kind 17240 + - name 17241 + type: object 17242 + dependsOn: 17243 + description: |- 17244 + DependsOn may contain a meta.NamespacedObjectReference slice with 17245 + references to HelmRelease resources that must be ready before this HelmRelease 17246 + can be reconciled. 17247 + items: 17248 + description: |- 17249 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 17250 + namespace. 17251 + properties: 17252 + name: 17253 + description: Name of the referent. 17254 + type: string 17255 + namespace: 17256 + description: Namespace of the referent, when not specified it 17257 + acts as LocalObjectReference. 17258 + type: string 17259 + required: 17260 + - name 17261 + type: object 17262 + type: array 17263 + driftDetection: 17264 + description: |- 17265 + DriftDetection holds the configuration for detecting and handling 17266 + differences between the manifest in the Helm storage and the resources 17267 + currently existing in the cluster. 17268 + properties: 17269 + ignore: 17270 + description: |- 17271 + Ignore contains a list of rules for specifying which changes to ignore 17272 + during diffing. 17273 + items: 17274 + description: |- 17275 + IgnoreRule defines a rule to selectively disregard specific changes during 17276 + the drift detection process. 17277 + properties: 17278 + paths: 17279 + description: |- 17280 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 17281 + consideration in a Kubernetes object. 17282 + items: 17283 + type: string 17284 + type: array 17285 + target: 17286 + description: |- 17287 + Target is a selector for specifying Kubernetes objects to which this 17288 + rule applies. 17289 + If Target is not set, the Paths will be ignored for all Kubernetes 17290 + objects within the manifest of the Helm release. 17291 + properties: 17292 + annotationSelector: 17293 + description: |- 17294 + AnnotationSelector is a string that follows the label selection expression 17295 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17296 + It matches with the resource annotations. 17297 + type: string 17298 + group: 17299 + description: |- 17300 + Group is the API group to select resources from. 17301 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17302 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17303 + type: string 17304 + kind: 17305 + description: |- 17306 + Kind of the API Group to select resources from. 17307 + Together with Group and Version it is capable of unambiguously 17308 + identifying and/or selecting resources. 17309 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17310 + type: string 17311 + labelSelector: 17312 + description: |- 17313 + LabelSelector is a string that follows the label selection expression 17314 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17315 + It matches with the resource labels. 17316 + type: string 17317 + name: 17318 + description: Name to match resources with. 17319 + type: string 17320 + namespace: 17321 + description: Namespace to select resources from. 17322 + type: string 17323 + version: 17324 + description: |- 17325 + Version of the API Group to select resources from. 17326 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17327 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17328 + type: string 17329 + type: object 17330 + required: 17331 + - paths 17332 + type: object 17333 + type: array 17334 + mode: 17335 + description: |- 17336 + Mode defines how differences should be handled between the Helm manifest 17337 + and the manifest currently applied to the cluster. 17338 + If not explicitly set, it defaults to DiffModeDisabled. 17339 + enum: 17340 + - enabled 17341 + - warn 17342 + - disabled 17343 + type: string 17344 + type: object 17345 + install: 17346 + description: Install holds the configuration for Helm install actions 17347 + for this HelmRelease. 17348 + properties: 17349 + crds: 17350 + description: |- 17351 + CRDs upgrade CRDs from the Helm Chart's crds directory according 17352 + to the CRD upgrade policy provided here. Valid values are `Skip`, 17353 + `Create` or `CreateReplace`. Default is `Create` and if omitted 17354 + CRDs are installed but not updated. 17355 + 17356 + Skip: do neither install nor replace (update) any CRDs. 17357 + 17358 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 17359 + 17360 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 17361 + but not deleted. 17362 + 17363 + By default, CRDs are applied (installed) during Helm install action. 17364 + With this option users can opt in to CRD replace existing CRDs on Helm 17365 + install actions, which is not (yet) natively supported by Helm. 17366 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 17367 + enum: 17368 + - Skip 17369 + - Create 17370 + - CreateReplace 17371 + type: string 17372 + createNamespace: 17373 + description: |- 17374 + CreateNamespace tells the Helm install action to create the 17375 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 17376 + On uninstall, the namespace will not be garbage collected. 17377 + type: boolean 17378 + disableHooks: 17379 + description: DisableHooks prevents hooks from running during the 17380 + Helm install action. 17381 + type: boolean 17382 + disableOpenAPIValidation: 17383 + description: |- 17384 + DisableOpenAPIValidation prevents the Helm install action from validating 17385 + rendered templates against the Kubernetes OpenAPI Schema. 17386 + type: boolean 17387 + disableSchemaValidation: 17388 + description: |- 17389 + DisableSchemaValidation prevents the Helm install action from validating 17390 + the values against the JSON Schema. 17391 + type: boolean 17392 + disableWait: 17393 + description: |- 17394 + DisableWait disables the waiting for resources to be ready after a Helm 17395 + install has been performed. 17396 + type: boolean 17397 + disableWaitForJobs: 17398 + description: |- 17399 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 17400 + install has been performed. 17401 + type: boolean 17402 + remediation: 17403 + description: |- 17404 + Remediation holds the remediation configuration for when the Helm install 17405 + action for the HelmRelease fails. The default is to not perform any action. 17406 + properties: 17407 + ignoreTestFailures: 17408 description: |- 17409 - APIVersion defines the versioned schema of this representation of an object. 17410 - Servers should convert recognized schemas to the latest internal value, and 17411 - may reject unrecognized values. 17412 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 17413 - type: string 17414 - kind: 17415 + IgnoreTestFailures tells the controller to skip remediation when the Helm 17416 + tests are run after an install action but fail. Defaults to 17417 + 'Test.IgnoreFailures'. 17418 + type: boolean 17419 + remediateLastFailure: 17420 + description: |- 17421 + RemediateLastFailure tells the controller to remediate the last failure, when 17422 + no retries remain. Defaults to 'false'. 17423 + type: boolean 17424 + retries: 17425 description: |- 17426 - Kind is a string value representing the REST resource this object represents. 17427 - Servers may infer this from the endpoint the client submits requests to. 17428 - Cannot be updated. 17429 - In CamelCase. 17430 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 17431 + Retries is the number of retries that should be attempted on failures before 17432 + bailing. Remediation, using an uninstall, is performed between each attempt. 17433 + Defaults to '0', a negative integer equals to unlimited retries. 17434 + type: integer 17435 + type: object 17436 + replace: 17437 + description: |- 17438 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 17439 + if that name is a deleted release which remains in the history. 17440 + type: boolean 17441 + skipCRDs: 17442 + description: |- 17443 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 17444 + CRDs are installed if not already present. 17445 + 17446 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 17447 + type: boolean 17448 + timeout: 17449 + description: |- 17450 + Timeout is the time to wait for any individual Kubernetes operation (like 17451 + Jobs for hooks) during the performance of a Helm install action. Defaults to 17452 + 'HelmReleaseSpec.Timeout'. 17453 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17454 + type: string 17455 + type: object 17456 + interval: 17457 + description: Interval at which to reconcile the Helm release. 17458 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17459 + type: string 17460 + kubeConfig: 17461 + description: |- 17462 + KubeConfig for reconciling the HelmRelease on a remote cluster. 17463 + When used in combination with HelmReleaseSpec.ServiceAccountName, 17464 + forces the controller to act on behalf of that Service Account at the 17465 + target cluster. 17466 + If the --default-service-account flag is set, its value will be used as 17467 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 17468 + is empty. 17469 + properties: 17470 + secretRef: 17471 + description: |- 17472 + SecretRef holds the name of a secret that contains a key with 17473 + the kubeconfig file as the value. If no key is set, the key will default 17474 + to 'value'. 17475 + It is recommended that the kubeconfig is self-contained, and the secret 17476 + is regularly updated if credentials such as a cloud-access-token expire. 17477 + Cloud specific `cmd-path` auth helpers will not function without adding 17478 + binaries and credentials to the Pod that is responsible for reconciling 17479 + Kubernetes resources. 17480 + properties: 17481 + key: 17482 + description: Key in the Secret, when not specified an implementation-specific 17483 + default key is used. 17484 type: string 17485 - metadata: 17486 - type: object 17487 - spec: 17488 - description: AlertSpec defines an alerting rule for events involving a list of objects. 17489 - properties: 17490 - eventMetadata: 17491 - additionalProperties: 17492 + name: 17493 + description: Name of the Secret. 17494 + type: string 17495 + required: 17496 + - name 17497 + type: object 17498 + required: 17499 + - secretRef 17500 + type: object 17501 + maxHistory: 17502 + description: |- 17503 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 17504 + Use '0' for an unlimited number of revisions; defaults to '5'. 17505 + type: integer 17506 + persistentClient: 17507 + description: |- 17508 + PersistentClient tells the controller to use a persistent Kubernetes 17509 + client for this release. When enabled, the client will be reused for the 17510 + duration of the reconciliation, instead of being created and destroyed 17511 + for each (step of a) Helm action. 17512 + 17513 + This can improve performance, but may cause issues with some Helm charts 17514 + that for example do create Custom Resource Definitions during installation 17515 + outside Helm's CRD lifecycle hooks, which are then not observed to be 17516 + available by e.g. post-install hooks. 17517 + 17518 + If not set, it defaults to true. 17519 + type: boolean 17520 + postRenderers: 17521 + description: |- 17522 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 17523 + of their definition. 17524 + items: 17525 + description: PostRenderer contains a Helm PostRenderer specification. 17526 + properties: 17527 + kustomize: 17528 + description: Kustomization to apply as PostRenderer. 17529 + properties: 17530 + images: 17531 + description: |- 17532 + Images is a list of (image name, new name, new tag or digest) 17533 + for changing image names, tags or digests. This can also be achieved with a 17534 + patch, but this operator is simpler to specify. 17535 + items: 17536 + description: Image contains an image name, a new name, 17537 + a new tag or digest, which will replace the original 17538 + name and tag. 17539 + properties: 17540 + digest: 17541 + description: |- 17542 + Digest is the value used to replace the original image tag. 17543 + If digest is present NewTag value is ignored. 17544 + type: string 17545 + name: 17546 + description: Name is a tag-less image name. 17547 + type: string 17548 + newName: 17549 + description: NewName is the value used to replace 17550 + the original name. 17551 + type: string 17552 + newTag: 17553 + description: NewTag is the value used to replace the 17554 + original tag. 17555 + type: string 17556 + required: 17557 + - name 17558 + type: object 17559 + type: array 17560 + patches: 17561 + description: |- 17562 + Strategic merge and JSON patches, defined as inline YAML objects, 17563 + capable of targeting objects based on kind, label and annotation selectors. 17564 + items: 17565 + description: |- 17566 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 17567 + be applied to. 17568 + properties: 17569 + patch: 17570 + description: |- 17571 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 17572 + an array of operation objects. 17573 + type: string 17574 + target: 17575 + description: Target points to the resources that the 17576 + patch document should be applied to. 17577 + properties: 17578 + annotationSelector: 17579 + description: |- 17580 + AnnotationSelector is a string that follows the label selection expression 17581 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17582 + It matches with the resource annotations. 17583 type: string 17584 - description: |- 17585 - EventMetadata is an optional field for adding metadata to events dispatched by the 17586 - controller. This can be used for enhancing the context of the event. If a field 17587 - would override one already present on the original event as generated by the emitter, 17588 - then the override doesn't happen, i.e. the original value is preserved, and an info 17589 - log is printed. 17590 - type: object 17591 - eventSeverity: 17592 - default: info 17593 - description: |- 17594 - EventSeverity specifies how to filter events based on severity. 17595 - If set to 'info' no events will be filtered. 17596 - enum: 17597 - - info 17598 - - error 17599 - type: string 17600 - eventSources: 17601 - description: |- 17602 - EventSources specifies how to filter events based 17603 - on the involved object kind, name and namespace. 17604 - items: 17605 + group: 17606 description: |- 17607 - CrossNamespaceObjectReference contains enough information to let you locate the 17608 - typed referenced object at cluster level 17609 - properties: 17610 - apiVersion: 17611 - description: API version of the referent 17612 - type: string 17613 - kind: 17614 - description: Kind of the referent 17615 - enum: 17616 - - Bucket 17617 - - GitRepository 17618 - - Kustomization 17619 - - HelmRelease 17620 - - HelmChart 17621 - - HelmRepository 17622 - - ImageRepository 17623 - - ImagePolicy 17624 - - ImageUpdateAutomation 17625 - - OCIRepository 17626 - type: string 17627 - matchLabels: 17628 - additionalProperties: 17629 - type: string 17630 - description: |- 17631 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 17632 - map is equivalent to an element of matchExpressions, whose key field is "key", the 17633 - operator is "In", and the values array contains only "value". The requirements are ANDed. 17634 - MatchLabels requires the name to be set to `*`. 17635 - type: object 17636 - name: 17637 - description: |- 17638 - Name of the referent 17639 - If multiple resources are targeted `*` may be set. 17640 - maxLength: 53 17641 - minLength: 1 17642 - type: string 17643 - namespace: 17644 - description: Namespace of the referent 17645 - maxLength: 53 17646 - minLength: 1 17647 - type: string 17648 - required: 17649 - - kind 17650 - - name 17651 - type: object 17652 - type: array 17653 - exclusionList: 17654 - description: |- 17655 - ExclusionList specifies a list of Golang regular expressions 17656 - to be used for excluding messages. 17657 - items: 17658 + Group is the API group to select resources from. 17659 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 17660 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17661 type: string 17662 - type: array 17663 - inclusionList: 17664 - description: |- 17665 - InclusionList specifies a list of Golang regular expressions 17666 - to be used for including messages. 17667 - items: 17668 + kind: 17669 + description: |- 17670 + Kind of the API Group to select resources from. 17671 + Together with Group and Version it is capable of unambiguously 17672 + identifying and/or selecting resources. 17673 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17674 + type: string 17675 + labelSelector: 17676 + description: |- 17677 + LabelSelector is a string that follows the label selection expression 17678 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 17679 + It matches with the resource labels. 17680 + type: string 17681 + name: 17682 + description: Name to match resources with. 17683 + type: string 17684 + namespace: 17685 + description: Namespace to select resources from. 17686 + type: string 17687 + version: 17688 + description: |- 17689 + Version of the API Group to select resources from. 17690 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 17691 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 17692 type: string 17693 - type: array 17694 - providerRef: 17695 - description: ProviderRef specifies which Provider this Alert should use. 17696 - properties: 17697 - name: 17698 - description: Name of the referent. 17699 - type: string 17700 - required: 17701 - - name 17702 type: object 17703 - summary: 17704 - description: Summary holds a short description of the impact and affected cluster. 17705 - maxLength: 255 17706 - type: string 17707 - suspend: 17708 - description: |- 17709 - Suspend tells the controller to suspend subsequent 17710 - events handling for this Alert. 17711 - type: boolean 17712 - required: 17713 - - eventSources 17714 - - providerRef 17715 - type: object 17716 - status: 17717 - default: 17718 - observedGeneration: -1 17719 - description: AlertStatus defines the observed state of the Alert. 17720 - properties: 17721 - conditions: 17722 - description: Conditions holds the conditions for the Alert. 17723 - items: 17724 - description: "Condition contains details for one aspect of the current state of this API 17725 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 17726 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 17727 - the observations of a foo's current state.\n\t // Known .status.conditions.type 17728 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 17729 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 17730 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 17731 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 17732 - fields\n\t}" 17733 - properties: 17734 - lastTransitionTime: 17735 - description: |- 17736 - lastTransitionTime is the last time the condition transitioned from one status to another. 17737 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 17738 - format: date-time 17739 - type: string 17740 - message: 17741 - description: |- 17742 - message is a human readable message indicating details about the transition. 17743 - This may be an empty string. 17744 - maxLength: 32768 17745 - type: string 17746 - observedGeneration: 17747 - description: |- 17748 - observedGeneration represents the .metadata.generation that the condition was set based upon. 17749 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 17750 - with respect to the current state of the instance. 17751 - format: int64 17752 - minimum: 0 17753 - type: integer 17754 - reason: 17755 - description: |- 17756 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 17757 - Producers of specific condition types may define expected values and meanings for this field, 17758 - and whether the values are considered a guaranteed API. 17759 - The value should be a CamelCase string. 17760 - This field may not be empty. 17761 - maxLength: 1024 17762 - minLength: 1 17763 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 17764 - type: string 17765 - status: 17766 - description: status of the condition, one of True, False, Unknown. 17767 - enum: 17768 - - "True" 17769 - - "False" 17770 - - Unknown 17771 - type: string 17772 - type: 17773 - description: |- 17774 - type of condition in CamelCase or in foo.example.com/CamelCase. 17775 - --- 17776 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 17777 - useful (see .node.status.conditions), the ability to deconflict is important. 17778 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 17779 - maxLength: 316 17780 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 17781 - type: string 17782 - required: 17783 - - lastTransitionTime 17784 - - message 17785 - - reason 17786 - - status 17787 - - type 17788 - type: object 17789 - type: array 17790 - lastHandledReconcileAt: 17791 - description: |- 17792 - LastHandledReconcileAt holds the value of the most recent 17793 - reconcile request value, so a change of the annotation value 17794 - can be detected. 17795 - type: string 17796 - observedGeneration: 17797 - description: ObservedGeneration is the last observed generation. 17798 - format: int64 17799 - type: integer 17800 - type: object 17801 + required: 17802 + - patch 17803 + type: object 17804 + type: array 17805 + type: object 17806 + type: object 17807 + type: array 17808 + releaseName: 17809 + description: |- 17810 + ReleaseName used for the Helm release. Defaults to a composition of 17811 + '[TargetNamespace-]Name'. 17812 + maxLength: 53 17813 + minLength: 1 17814 + type: string 17815 + rollback: 17816 + description: Rollback holds the configuration for Helm rollback actions 17817 + for this HelmRelease. 17818 + properties: 17819 + cleanupOnFail: 17820 + description: |- 17821 + CleanupOnFail allows deletion of new resources created during the Helm 17822 + rollback action when it fails. 17823 + type: boolean 17824 + disableHooks: 17825 + description: DisableHooks prevents hooks from running during the 17826 + Helm rollback action. 17827 + type: boolean 17828 + disableWait: 17829 + description: |- 17830 + DisableWait disables the waiting for resources to be ready after a Helm 17831 + rollback has been performed. 17832 + type: boolean 17833 + disableWaitForJobs: 17834 + description: |- 17835 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 17836 + rollback has been performed. 17837 + type: boolean 17838 + force: 17839 + description: Force forces resource updates through a replacement 17840 + strategy. 17841 + type: boolean 17842 + recreate: 17843 + description: Recreate performs pod restarts for the resource if 17844 + applicable. 17845 + type: boolean 17846 + timeout: 17847 + description: |- 17848 + Timeout is the time to wait for any individual Kubernetes operation (like 17849 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 17850 + 'HelmReleaseSpec.Timeout'. 17851 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17852 + type: string 17853 type: object 17854 - served: true 17855 - storage: false 17856 - subresources: 17857 - status: {} 17858 - - additionalPrinterColumns: 17859 - - jsonPath: .metadata.creationTimestamp 17860 - name: Age 17861 - type: date 17862 - name: v1beta3 17863 - schema: 17864 - openAPIV3Schema: 17865 - description: Alert is the Schema for the alerts API 17866 + serviceAccountName: 17867 + description: |- 17868 + The name of the Kubernetes service account to impersonate 17869 + when reconciling this HelmRelease. 17870 + maxLength: 253 17871 + minLength: 1 17872 + type: string 17873 + storageNamespace: 17874 + description: |- 17875 + StorageNamespace used for the Helm storage. 17876 + Defaults to the namespace of the HelmRelease. 17877 + maxLength: 63 17878 + minLength: 1 17879 + type: string 17880 + suspend: 17881 + description: |- 17882 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 17883 + it does not apply to already started reconciliations. Defaults to false. 17884 + type: boolean 17885 + targetNamespace: 17886 + description: |- 17887 + TargetNamespace to target when performing operations for the HelmRelease. 17888 + Defaults to the namespace of the HelmRelease. 17889 + maxLength: 63 17890 + minLength: 1 17891 + type: string 17892 + test: 17893 + description: Test holds the configuration for Helm test actions for 17894 + this HelmRelease. 17895 properties: 17896 - apiVersion: 17897 + enable: 17898 + description: |- 17899 + Enable enables Helm test actions for this HelmRelease after an Helm install 17900 + or upgrade action has been performed. 17901 + type: boolean 17902 + filters: 17903 + description: Filters is a list of tests to run or exclude from 17904 + running. 17905 + items: 17906 + description: Filter holds the configuration for individual Helm 17907 + test filters. 17908 + properties: 17909 + exclude: 17910 + description: Exclude specifies whether the named test should 17911 + be excluded. 17912 + type: boolean 17913 + name: 17914 + description: Name is the name of the test. 17915 + maxLength: 253 17916 + minLength: 1 17917 + type: string 17918 + required: 17919 + - name 17920 + type: object 17921 + type: array 17922 + ignoreFailures: 17923 + description: |- 17924 + IgnoreFailures tells the controller to skip remediation when the Helm tests 17925 + are run but fail. Can be overwritten for tests run after install or upgrade 17926 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 17927 + type: boolean 17928 + timeout: 17929 + description: |- 17930 + Timeout is the time to wait for any individual Kubernetes operation during 17931 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 17932 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17933 + type: string 17934 + type: object 17935 + timeout: 17936 + description: |- 17937 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 17938 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 17939 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17940 + type: string 17941 + uninstall: 17942 + description: Uninstall holds the configuration for Helm uninstall 17943 + actions for this HelmRelease. 17944 + properties: 17945 + deletionPropagation: 17946 + default: background 17947 + description: |- 17948 + DeletionPropagation specifies the deletion propagation policy when 17949 + a Helm uninstall is performed. 17950 + enum: 17951 + - background 17952 + - foreground 17953 + - orphan 17954 + type: string 17955 + disableHooks: 17956 + description: DisableHooks prevents hooks from running during the 17957 + Helm rollback action. 17958 + type: boolean 17959 + disableWait: 17960 + description: |- 17961 + DisableWait disables waiting for all the resources to be deleted after 17962 + a Helm uninstall is performed. 17963 + type: boolean 17964 + keepHistory: 17965 + description: |- 17966 + KeepHistory tells Helm to remove all associated resources and mark the 17967 + release as deleted, but retain the release history. 17968 + type: boolean 17969 + timeout: 17970 + description: |- 17971 + Timeout is the time to wait for any individual Kubernetes operation (like 17972 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 17973 + to 'HelmReleaseSpec.Timeout'. 17974 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 17975 + type: string 17976 + type: object 17977 + upgrade: 17978 + description: Upgrade holds the configuration for Helm upgrade actions 17979 + for this HelmRelease. 17980 + properties: 17981 + cleanupOnFail: 17982 + description: |- 17983 + CleanupOnFail allows deletion of new resources created during the Helm 17984 + upgrade action when it fails. 17985 + type: boolean 17986 + crds: 17987 + description: |- 17988 + CRDs upgrade CRDs from the Helm Chart's crds directory according 17989 + to the CRD upgrade policy provided here. Valid values are `Skip`, 17990 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 17991 + CRDs are neither installed nor upgraded. 17992 + 17993 + Skip: do neither install nor replace (update) any CRDs. 17994 + 17995 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 17996 + 17997 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 17998 + but not deleted. 17999 + 18000 + By default, CRDs are not applied during Helm upgrade action. With this 18001 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 18002 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 18003 + enum: 18004 + - Skip 18005 + - Create 18006 + - CreateReplace 18007 + type: string 18008 + disableHooks: 18009 + description: DisableHooks prevents hooks from running during the 18010 + Helm upgrade action. 18011 + type: boolean 18012 + disableOpenAPIValidation: 18013 + description: |- 18014 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 18015 + rendered templates against the Kubernetes OpenAPI Schema. 18016 + type: boolean 18017 + disableSchemaValidation: 18018 + description: |- 18019 + DisableSchemaValidation prevents the Helm upgrade action from validating 18020 + the values against the JSON Schema. 18021 + type: boolean 18022 + disableWait: 18023 + description: |- 18024 + DisableWait disables the waiting for resources to be ready after a Helm 18025 + upgrade has been performed. 18026 + type: boolean 18027 + disableWaitForJobs: 18028 + description: |- 18029 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 18030 + upgrade has been performed. 18031 + type: boolean 18032 + force: 18033 + description: Force forces resource updates through a replacement 18034 + strategy. 18035 + type: boolean 18036 + preserveValues: 18037 + description: |- 18038 + PreserveValues will make Helm reuse the last release's values and merge in 18039 + overrides from 'Values'. Setting this flag makes the HelmRelease 18040 + non-declarative. 18041 + type: boolean 18042 + remediation: 18043 + description: |- 18044 + Remediation holds the remediation configuration for when the Helm upgrade 18045 + action for the HelmRelease fails. The default is to not perform any action. 18046 + properties: 18047 + ignoreTestFailures: 18048 + description: |- 18049 + IgnoreTestFailures tells the controller to skip remediation when the Helm 18050 + tests are run after an upgrade action but fail. 18051 + Defaults to 'Test.IgnoreFailures'. 18052 + type: boolean 18053 + remediateLastFailure: 18054 description: |- 18055 - APIVersion defines the versioned schema of this representation of an object. 18056 - Servers should convert recognized schemas to the latest internal value, and 18057 - may reject unrecognized values. 18058 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18059 + RemediateLastFailure tells the controller to remediate the last failure, when 18060 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 18061 + type: boolean 18062 + retries: 18063 + description: |- 18064 + Retries is the number of retries that should be attempted on failures before 18065 + bailing. Remediation, using 'Strategy', is performed between each attempt. 18066 + Defaults to '0', a negative integer equals to unlimited retries. 18067 + type: integer 18068 + strategy: 18069 + description: Strategy to use for failure remediation. Defaults 18070 + to 'rollback'. 18071 + enum: 18072 + - rollback 18073 + - uninstall 18074 type: string 18075 + type: object 18076 + timeout: 18077 + description: |- 18078 + Timeout is the time to wait for any individual Kubernetes operation (like 18079 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 18080 + 'HelmReleaseSpec.Timeout'. 18081 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18082 + type: string 18083 + type: object 18084 + values: 18085 + description: Values holds the values for this Helm release. 18086 + x-kubernetes-preserve-unknown-fields: true 18087 + valuesFrom: 18088 + description: |- 18089 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 18090 + and information about how they should be merged. 18091 + items: 18092 + description: |- 18093 + ValuesReference contains a reference to a resource containing Helm values, 18094 + and optionally the key they can be found at. 18095 + properties: 18096 kind: 18097 + description: Kind of the values referent, valid values are ('Secret', 18098 + 'ConfigMap'). 18099 + enum: 18100 + - Secret 18101 + - ConfigMap 18102 + type: string 18103 + name: 18104 + description: |- 18105 + Name of the values referent. Should reside in the same namespace as the 18106 + referring resource. 18107 + maxLength: 253 18108 + minLength: 1 18109 + type: string 18110 + optional: 18111 + description: |- 18112 + Optional marks this ValuesReference as optional. When set, a not found error 18113 + for the values reference is ignored, but any ValuesKey, TargetPath or 18114 + transient error will still result in a reconciliation failure. 18115 + type: boolean 18116 + targetPath: 18117 + description: |- 18118 + TargetPath is the YAML dot notation path the value should be merged at. When 18119 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 18120 + which results in the values getting merged at the root. 18121 + maxLength: 250 18122 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 18123 + type: string 18124 + valuesKey: 18125 + description: |- 18126 + ValuesKey is the data key where the values.yaml or a specific value can be 18127 + found at. Defaults to 'values.yaml'. 18128 + maxLength: 253 18129 + pattern: ^[\-._a-zA-Z0-9]+$ 18130 + type: string 18131 + required: 18132 + - kind 18133 + - name 18134 + type: object 18135 + type: array 18136 + required: 18137 + - interval 18138 + type: object 18139 + x-kubernetes-validations: 18140 + - message: either chart or chartRef must be set 18141 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 18142 + && has(self.chartRef)) 18143 + status: 18144 + default: 18145 + observedGeneration: -1 18146 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 18147 + properties: 18148 + conditions: 18149 + description: Conditions holds the conditions for the HelmRelease. 18150 + items: 18151 + description: Condition contains details for one aspect of the current 18152 + state of this API Resource. 18153 + properties: 18154 + lastTransitionTime: 18155 + description: |- 18156 + lastTransitionTime is the last time the condition transitioned from one status to another. 18157 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 18158 + format: date-time 18159 + type: string 18160 + message: 18161 + description: |- 18162 + message is a human readable message indicating details about the transition. 18163 + This may be an empty string. 18164 + maxLength: 32768 18165 + type: string 18166 + observedGeneration: 18167 + description: |- 18168 + observedGeneration represents the .metadata.generation that the condition was set based upon. 18169 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 18170 + with respect to the current state of the instance. 18171 + format: int64 18172 + minimum: 0 18173 + type: integer 18174 + reason: 18175 + description: |- 18176 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 18177 + Producers of specific condition types may define expected values and meanings for this field, 18178 + and whether the values are considered a guaranteed API. 18179 + The value should be a CamelCase string. 18180 + This field may not be empty. 18181 + maxLength: 1024 18182 + minLength: 1 18183 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 18184 + type: string 18185 + status: 18186 + description: status of the condition, one of True, False, Unknown. 18187 + enum: 18188 + - "True" 18189 + - "False" 18190 + - Unknown 18191 + type: string 18192 + type: 18193 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 18194 + maxLength: 316 18195 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 18196 + type: string 18197 + required: 18198 + - lastTransitionTime 18199 + - message 18200 + - reason 18201 + - status 18202 + - type 18203 + type: object 18204 + type: array 18205 + failures: 18206 + description: |- 18207 + Failures is the reconciliation failure count against the latest desired 18208 + state. It is reset after a successful reconciliation. 18209 + format: int64 18210 + type: integer 18211 + helmChart: 18212 + description: |- 18213 + HelmChart is the namespaced name of the HelmChart resource created by 18214 + the controller for the HelmRelease. 18215 + type: string 18216 + history: 18217 + description: |- 18218 + History holds the history of Helm releases performed for this HelmRelease 18219 + up to the last successfully completed release. 18220 + items: 18221 + description: |- 18222 + Snapshot captures a point-in-time copy of the status information for a Helm release, 18223 + as managed by the controller. 18224 + properties: 18225 + apiVersion: 18226 + description: |- 18227 + APIVersion is the API version of the Snapshot. 18228 + Provisional: when the calculation method of the Digest field is changed, 18229 + this field will be used to distinguish between the old and new methods. 18230 + type: string 18231 + appVersion: 18232 + description: AppVersion is the chart app version of the release 18233 + object in storage. 18234 + type: string 18235 + chartName: 18236 + description: ChartName is the chart name of the release object 18237 + in storage. 18238 + type: string 18239 + chartVersion: 18240 + description: |- 18241 + ChartVersion is the chart version of the release object in 18242 + storage. 18243 + type: string 18244 + configDigest: 18245 + description: |- 18246 + ConfigDigest is the checksum of the config (better known as 18247 + "values") of the release object in storage. 18248 + It has the format of `<algo>:<checksum>`. 18249 + type: string 18250 + deleted: 18251 + description: Deleted is when the release was deleted. 18252 + format: date-time 18253 + type: string 18254 + digest: 18255 + description: |- 18256 + Digest is the checksum of the release object in storage. 18257 + It has the format of `<algo>:<checksum>`. 18258 + type: string 18259 + firstDeployed: 18260 + description: FirstDeployed is when the release was first deployed. 18261 + format: date-time 18262 + type: string 18263 + lastDeployed: 18264 + description: LastDeployed is when the release was last deployed. 18265 + format: date-time 18266 + type: string 18267 + name: 18268 + description: Name is the name of the release. 18269 + type: string 18270 + namespace: 18271 + description: Namespace is the namespace the release is deployed 18272 + to. 18273 + type: string 18274 + ociDigest: 18275 + description: OCIDigest is the digest of the OCI artifact associated 18276 + with the release. 18277 + type: string 18278 + status: 18279 + description: Status is the current state of the release. 18280 + type: string 18281 + testHooks: 18282 + additionalProperties: 18283 description: |- 18284 - Kind is a string value representing the REST resource this object represents. 18285 - Servers may infer this from the endpoint the client submits requests to. 18286 - Cannot be updated. 18287 - In CamelCase. 18288 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18289 - type: string 18290 - metadata: 18291 - type: object 18292 - spec: 18293 - description: AlertSpec defines an alerting rule for events involving a list of objects. 18294 + TestHookStatus holds the status information for a test hook as observed 18295 + to be run by the controller. 18296 properties: 18297 - eventMetadata: 18298 - additionalProperties: 18299 - type: string 18300 - description: |- 18301 - EventMetadata is an optional field for adding metadata to events dispatched by the 18302 - controller. This can be used for enhancing the context of the event. If a field 18303 - would override one already present on the original event as generated by the emitter, 18304 - then the override doesn't happen, i.e. the original value is preserved, and an info 18305 - log is printed. 18306 - type: object 18307 - eventSeverity: 18308 - default: info 18309 - description: |- 18310 - EventSeverity specifies how to filter events based on severity. 18311 - If set to 'info' no events will be filtered. 18312 - enum: 18313 - - info 18314 - - error 18315 - type: string 18316 - eventSources: 18317 - description: |- 18318 - EventSources specifies how to filter events based 18319 - on the involved object kind, name and namespace. 18320 - items: 18321 - description: |- 18322 - CrossNamespaceObjectReference contains enough information to let you locate the 18323 - typed referenced object at cluster level 18324 - properties: 18325 - apiVersion: 18326 - description: API version of the referent 18327 - type: string 18328 - kind: 18329 - description: Kind of the referent 18330 - enum: 18331 - - Bucket 18332 - - GitRepository 18333 - - Kustomization 18334 - - HelmRelease 18335 - - HelmChart 18336 - - HelmRepository 18337 - - ImageRepository 18338 - - ImagePolicy 18339 - - ImageUpdateAutomation 18340 - - OCIRepository 18341 - type: string 18342 - matchLabels: 18343 - additionalProperties: 18344 - type: string 18345 - description: |- 18346 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 18347 - map is equivalent to an element of matchExpressions, whose key field is "key", the 18348 - operator is "In", and the values array contains only "value". The requirements are ANDed. 18349 - MatchLabels requires the name to be set to `*`. 18350 - type: object 18351 - name: 18352 - description: |- 18353 - Name of the referent 18354 - If multiple resources are targeted `*` may be set. 18355 - maxLength: 53 18356 - minLength: 1 18357 - type: string 18358 - namespace: 18359 - description: Namespace of the referent 18360 - maxLength: 53 18361 - minLength: 1 18362 - type: string 18363 - required: 18364 - - kind 18365 - - name 18366 - type: object 18367 - type: array 18368 - exclusionList: 18369 - description: |- 18370 - ExclusionList specifies a list of Golang regular expressions 18371 - to be used for excluding messages. 18372 - items: 18373 - type: string 18374 - type: array 18375 - inclusionList: 18376 - description: |- 18377 - InclusionList specifies a list of Golang regular expressions 18378 - to be used for including messages. 18379 - items: 18380 - type: string 18381 - type: array 18382 - providerRef: 18383 - description: ProviderRef specifies which Provider this Alert should use. 18384 - properties: 18385 - name: 18386 - description: Name of the referent. 18387 - type: string 18388 - required: 18389 - - name 18390 - type: object 18391 - summary: 18392 - description: Summary holds a short description of the impact and affected cluster. 18393 - maxLength: 255 18394 - type: string 18395 - suspend: 18396 - description: |- 18397 - Suspend tells the controller to suspend subsequent 18398 - events handling for this Alert. 18399 - type: boolean 18400 - required: 18401 - - eventSources 18402 - - providerRef 18403 + lastCompleted: 18404 + description: LastCompleted is the time the test hook last 18405 + completed. 18406 + format: date-time 18407 + type: string 18408 + lastStarted: 18409 + description: LastStarted is the time the test hook was 18410 + last started. 18411 + format: date-time 18412 + type: string 18413 + phase: 18414 + description: Phase the test hook was observed to be in. 18415 + type: string 18416 type: object 18417 - type: object 18418 - served: true 18419 - storage: true 18420 - subresources: {} 18421 ---- 18422 -apiVersion: apiextensions.k8s.io/v1 18423 -kind: CustomResourceDefinition 18424 -metadata: 18425 - annotations: 18426 - controller-gen.kubebuilder.io/version: v0.15.0 18427 - labels: 18428 - app.kubernetes.io/component: notification-controller 18429 - app.kubernetes.io/instance: flux-system 18430 - app.kubernetes.io/part-of: flux 18431 - app.kubernetes.io/version: v2.3.0 18432 - name: providers.notification.toolkit.fluxcd.io 18433 -spec: 18434 - group: notification.toolkit.fluxcd.io 18435 - names: 18436 - kind: Provider 18437 - listKind: ProviderList 18438 - plural: providers 18439 - singular: provider 18440 - scope: Namespaced 18441 - versions: 18442 - - additionalPrinterColumns: 18443 - - jsonPath: .metadata.creationTimestamp 18444 - name: Age 18445 - type: date 18446 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 18447 - name: Ready 18448 - type: string 18449 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 18450 - name: Status 18451 - type: string 18452 - deprecated: true 18453 - deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3 18454 - name: v1beta1 18455 - schema: 18456 - openAPIV3Schema: 18457 - description: Provider is the Schema for the providers API 18458 + description: |- 18459 + TestHooks is the list of test hooks for the release as observed to be 18460 + run by the controller. 18461 + type: object 18462 + version: 18463 + description: Version is the version of the release object in 18464 + storage. 18465 + type: integer 18466 + required: 18467 + - chartName 18468 + - chartVersion 18469 + - configDigest 18470 + - digest 18471 + - firstDeployed 18472 + - lastDeployed 18473 + - name 18474 + - namespace 18475 + - status 18476 + - version 18477 + type: object 18478 + type: array 18479 + installFailures: 18480 + description: |- 18481 + InstallFailures is the install failure count against the latest desired 18482 + state. It is reset after a successful reconciliation. 18483 + format: int64 18484 + type: integer 18485 + lastAttemptedConfigDigest: 18486 + description: |- 18487 + LastAttemptedConfigDigest is the digest for the config (better known as 18488 + "values") of the last reconciliation attempt. 18489 + type: string 18490 + lastAttemptedGeneration: 18491 + description: |- 18492 + LastAttemptedGeneration is the last generation the controller attempted 18493 + to reconcile. 18494 + format: int64 18495 + type: integer 18496 + lastAttemptedReleaseAction: 18497 + description: |- 18498 + LastAttemptedReleaseAction is the last release action performed for this 18499 + HelmRelease. It is used to determine the active remediation strategy. 18500 + enum: 18501 + - install 18502 + - upgrade 18503 + type: string 18504 + lastAttemptedRevision: 18505 + description: |- 18506 + LastAttemptedRevision is the Source revision of the last reconciliation 18507 + attempt. For OCIRepository sources, the 12 first characters of the digest are 18508 + appended to the chart version e.g. "1.2.3+1234567890ab". 18509 + type: string 18510 + lastAttemptedRevisionDigest: 18511 + description: |- 18512 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 18513 + This is only set for OCIRepository sources. 18514 + type: string 18515 + lastAttemptedValuesChecksum: 18516 + description: |- 18517 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 18518 + reconciliation attempt. 18519 + Deprecated: Use LastAttemptedConfigDigest instead. 18520 + type: string 18521 + lastHandledForceAt: 18522 + description: |- 18523 + LastHandledForceAt holds the value of the most recent force request 18524 + value, so a change of the annotation value can be detected. 18525 + type: string 18526 + lastHandledReconcileAt: 18527 + description: |- 18528 + LastHandledReconcileAt holds the value of the most recent 18529 + reconcile request value, so a change of the annotation value 18530 + can be detected. 18531 + type: string 18532 + lastHandledResetAt: 18533 + description: |- 18534 + LastHandledResetAt holds the value of the most recent reset request 18535 + value, so a change of the annotation value can be detected. 18536 + type: string 18537 + lastReleaseRevision: 18538 + description: |- 18539 + LastReleaseRevision is the revision of the last successful Helm release. 18540 + Deprecated: Use History instead. 18541 + type: integer 18542 + observedGeneration: 18543 + description: ObservedGeneration is the last observed generation. 18544 + format: int64 18545 + type: integer 18546 + observedPostRenderersDigest: 18547 + description: |- 18548 + ObservedPostRenderersDigest is the digest for the post-renderers of 18549 + the last successful reconciliation attempt. 18550 + type: string 18551 + storageNamespace: 18552 + description: |- 18553 + StorageNamespace is the namespace of the Helm release storage for the 18554 + current release. 18555 + maxLength: 63 18556 + minLength: 1 18557 + type: string 18558 + upgradeFailures: 18559 + description: |- 18560 + UpgradeFailures is the upgrade failure count against the latest desired 18561 + state. It is reset after a successful reconciliation. 18562 + format: int64 18563 + type: integer 18564 + type: object 18565 + type: object 18566 + served: true 18567 + storage: true 18568 + subresources: 18569 + status: {} 18570 + - additionalPrinterColumns: 18571 + - jsonPath: .metadata.creationTimestamp 18572 + name: Age 18573 + type: date 18574 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 18575 + name: Ready 18576 + type: string 18577 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 18578 + name: Status 18579 + type: string 18580 + deprecated: true 18581 + deprecationWarning: v2beta1 HelmRelease is deprecated, upgrade to v2 18582 + name: v2beta1 18583 + schema: 18584 + openAPIV3Schema: 18585 + description: HelmRelease is the Schema for the helmreleases API 18586 + properties: 18587 + apiVersion: 18588 + description: |- 18589 + APIVersion defines the versioned schema of this representation of an object. 18590 + Servers should convert recognized schemas to the latest internal value, and 18591 + may reject unrecognized values. 18592 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18593 + type: string 18594 + kind: 18595 + description: |- 18596 + Kind is a string value representing the REST resource this object represents. 18597 + Servers may infer this from the endpoint the client submits requests to. 18598 + Cannot be updated. 18599 + In CamelCase. 18600 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18601 + type: string 18602 + metadata: 18603 + type: object 18604 + spec: 18605 + description: HelmReleaseSpec defines the desired state of a Helm release. 18606 + properties: 18607 + chart: 18608 + description: |- 18609 + Chart defines the template of the v1beta2.HelmChart that should be created 18610 + for this HelmRelease. 18611 properties: 18612 - apiVersion: 18613 + metadata: 18614 + description: ObjectMeta holds the template for metadata like labels 18615 + and annotations. 18616 + properties: 18617 + annotations: 18618 + additionalProperties: 18619 + type: string 18620 + description: |- 18621 + Annotations is an unstructured key value map stored with a resource that may be 18622 + set by external tools to store and retrieve arbitrary metadata. They are not 18623 + queryable and should be preserved when modifying objects. 18624 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 18625 + type: object 18626 + labels: 18627 + additionalProperties: 18628 + type: string 18629 description: |- 18630 - APIVersion defines the versioned schema of this representation of an object. 18631 - Servers should convert recognized schemas to the latest internal value, and 18632 - may reject unrecognized values. 18633 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 18634 + Map of string keys and values that can be used to organize and categorize 18635 + (scope and select) objects. 18636 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 18637 + type: object 18638 + type: object 18639 + spec: 18640 + description: Spec holds the template for the v1beta2.HelmChartSpec 18641 + for this HelmRelease. 18642 + properties: 18643 + chart: 18644 + description: The name or path the Helm chart is available 18645 + at in the SourceRef. 18646 type: string 18647 - kind: 18648 + interval: 18649 description: |- 18650 - Kind is a string value representing the REST resource this object represents. 18651 - Servers may infer this from the endpoint the client submits requests to. 18652 - Cannot be updated. 18653 - In CamelCase. 18654 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 18655 + Interval at which to check the v1beta2.Source for updates. Defaults to 18656 + 'HelmReleaseSpec.Interval'. 18657 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 18658 type: string 18659 - metadata: 18660 - type: object 18661 - spec: 18662 - description: ProviderSpec defines the desired state of Provider 18663 + reconcileStrategy: 18664 + default: ChartVersion 18665 + description: |- 18666 + Determines what enables the creation of a new artifact. Valid values are 18667 + ('ChartVersion', 'Revision'). 18668 + See the documentation of the values for an explanation on their behavior. 18669 + Defaults to ChartVersion when omitted. 18670 + enum: 18671 + - ChartVersion 18672 + - Revision 18673 + type: string 18674 + sourceRef: 18675 + description: The name and namespace of the v1beta2.Source 18676 + the chart is available at. 18677 properties: 18678 - address: 18679 - description: HTTP/S webhook address of this provider 18680 - pattern: ^(http|https):// 18681 - type: string 18682 - certSecretRef: 18683 - description: |- 18684 - CertSecretRef can be given the name of a secret containing 18685 - a PEM-encoded CA certificate (`caFile`) 18686 - properties: 18687 - name: 18688 - description: Name of the referent. 18689 - type: string 18690 - required: 18691 - - name 18692 - type: object 18693 - channel: 18694 - description: Alert channel for this provider 18695 - type: string 18696 - proxy: 18697 - description: HTTP/S address of the proxy 18698 - pattern: ^(http|https):// 18699 - type: string 18700 - secretRef: 18701 - description: |- 18702 - Secret reference containing the provider webhook URL 18703 - using "address" as data key 18704 - properties: 18705 - name: 18706 - description: Name of the referent. 18707 - type: string 18708 - required: 18709 - - name 18710 - type: object 18711 - suspend: 18712 - description: |- 18713 - This flag tells the controller to suspend subsequent events handling. 18714 - Defaults to false. 18715 - type: boolean 18716 - timeout: 18717 - description: Timeout for sending alerts to the provider. 18718 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 18719 - type: string 18720 - type: 18721 - description: Type of provider 18722 - enum: 18723 - - slack 18724 - - discord 18725 - - msteams 18726 - - rocket 18727 - - generic 18728 - - generic-hmac 18729 - - github 18730 - - gitlab 18731 - - bitbucket 18732 - - azuredevops 18733 - - googlechat 18734 - - webex 18735 - - sentry 18736 - - azureeventhub 18737 - - telegram 18738 - - lark 18739 - - matrix 18740 - - opsgenie 18741 - - alertmanager 18742 - - grafana 18743 - - githubdispatch 18744 - type: string 18745 - username: 18746 - description: Bot username for this provider 18747 - type: string 18748 + apiVersion: 18749 + description: APIVersion of the referent. 18750 + type: string 18751 + kind: 18752 + description: Kind of the referent. 18753 + enum: 18754 + - HelmRepository 18755 + - GitRepository 18756 + - Bucket 18757 + type: string 18758 + name: 18759 + description: Name of the referent. 18760 + maxLength: 253 18761 + minLength: 1 18762 + type: string 18763 + namespace: 18764 + description: Namespace of the referent. 18765 + maxLength: 63 18766 + minLength: 1 18767 + type: string 18768 required: 18769 - - type 18770 + - kind 18771 + - name 18772 type: object 18773 - status: 18774 - default: 18775 - observedGeneration: -1 18776 - description: ProviderStatus defines the observed state of Provider 18777 + valuesFile: 18778 + description: |- 18779 + Alternative values file to use as the default chart values, expected to 18780 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 18781 + for backwards compatibility the file defined here is merged before the 18782 + ValuesFiles items. Ignored when omitted. 18783 + type: string 18784 + valuesFiles: 18785 + description: |- 18786 + Alternative list of values files to use as the chart values (values.yaml 18787 + is not included by default), expected to be a relative path in the SourceRef. 18788 + Values files are merged in the order of this list with the last file overriding 18789 + the first. Ignored when omitted. 18790 + items: 18791 + type: string 18792 + type: array 18793 + verify: 18794 + description: |- 18795 + Verify contains the secret name containing the trusted public keys 18796 + used to verify the signature and specifies which provider to use to check 18797 + whether OCI image is authentic. 18798 + This field is only supported for OCI sources. 18799 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 18800 properties: 18801 - conditions: 18802 - items: 18803 - description: "Condition contains details for one aspect of the current state of this API 18804 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 18805 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 18806 - the observations of a foo's current state.\n\t // Known .status.conditions.type 18807 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 18808 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 18809 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 18810 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 18811 - fields\n\t}" 18812 - properties: 18813 - lastTransitionTime: 18814 - description: |- 18815 - lastTransitionTime is the last time the condition transitioned from one status to another. 18816 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 18817 - format: date-time 18818 - type: string 18819 - message: 18820 - description: |- 18821 - message is a human readable message indicating details about the transition. 18822 - This may be an empty string. 18823 - maxLength: 32768 18824 - type: string 18825 - observedGeneration: 18826 - description: |- 18827 - observedGeneration represents the .metadata.generation that the condition was set based upon. 18828 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 18829 - with respect to the current state of the instance. 18830 - format: int64 18831 - minimum: 0 18832 - type: integer 18833 - reason: 18834 - description: |- 18835 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 18836 - Producers of specific condition types may define expected values and meanings for this field, 18837 - and whether the values are considered a guaranteed API. 18838 - The value should be a CamelCase string. 18839 - This field may not be empty. 18840 - maxLength: 1024 18841 - minLength: 1 18842 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 18843 - type: string 18844 - status: 18845 - description: status of the condition, one of True, False, Unknown. 18846 - enum: 18847 - - "True" 18848 - - "False" 18849 - - Unknown 18850 - type: string 18851 - type: 18852 - description: |- 18853 - type of condition in CamelCase or in foo.example.com/CamelCase. 18854 - --- 18855 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 18856 - useful (see .node.status.conditions), the ability to deconflict is important. 18857 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 18858 - maxLength: 316 18859 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 18860 - type: string 18861 - required: 18862 - - lastTransitionTime 18863 - - message 18864 - - reason 18865 - - status 18866 - - type 18867 - type: object 18868 - type: array 18869 - observedGeneration: 18870 - description: ObservedGeneration is the last reconciled generation. 18871 - format: int64 18872 - type: integer 18873 + provider: 18874 + default: cosign 18875 + description: Provider specifies the technology used to 18876 + sign the OCI Helm chart. 18877 + enum: 18878 + - cosign 18879 + type: string 18880 + secretRef: 18881 + description: |- 18882 + SecretRef specifies the Kubernetes Secret containing the 18883 + trusted public keys. 18884 + properties: 18885 + name: 18886 + description: Name of the referent. 18887 + type: string 18888 + required: 18889 + - name 18890 + type: object 18891 + required: 18892 + - provider 18893 type: object 18894 + version: 18895 + default: '*' 18896 + description: |- 18897 + Version semver expression, ignored for charts from v1beta2.GitRepository and 18898 + v1beta2.Bucket sources. Defaults to latest when omitted. 18899 + type: string 18900 + required: 18901 + - chart 18902 + - sourceRef 18903 + type: object 18904 + required: 18905 + - spec 18906 type: object 18907 - served: true 18908 - storage: false 18909 - subresources: 18910 - status: {} 18911 - - additionalPrinterColumns: 18912 - - jsonPath: .metadata.creationTimestamp 18913 - name: Age 18914 - type: date 18915 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 18916 - name: Ready 18917 - type: string 18918 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 18919 - name: Status 18920 - type: string 18921 - deprecated: true 18922 - deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 18923 - name: v1beta2 18924 - schema: 18925 - openAPIV3Schema: 18926 - description: Provider is the Schema for the providers API. 18927 + chartRef: 18928 + description: |- 18929 + ChartRef holds a reference to a source controller resource containing the 18930 + Helm chart artifact. 18931 + 18932 + Note: this field is provisional to the v2 API, and not actively used 18933 + by v2beta1 HelmReleases. 18934 properties: 18935 - apiVersion: 18936 + apiVersion: 18937 + description: APIVersion of the referent. 18938 + type: string 18939 + kind: 18940 + description: Kind of the referent. 18941 + enum: 18942 + - OCIRepository 18943 + - HelmChart 18944 + type: string 18945 + name: 18946 + description: Name of the referent. 18947 + maxLength: 253 18948 + minLength: 1 18949 + type: string 18950 + namespace: 18951 + description: |- 18952 + Namespace of the referent, defaults to the namespace of the Kubernetes 18953 + resource object that contains the reference. 18954 + maxLength: 63 18955 + minLength: 1 18956 + type: string 18957 + required: 18958 + - kind 18959 + - name 18960 + type: object 18961 + dependsOn: 18962 + description: |- 18963 + DependsOn may contain a meta.NamespacedObjectReference slice with 18964 + references to HelmRelease resources that must be ready before this HelmRelease 18965 + can be reconciled. 18966 + items: 18967 + description: |- 18968 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 18969 + namespace. 18970 + properties: 18971 + name: 18972 + description: Name of the referent. 18973 + type: string 18974 + namespace: 18975 + description: Namespace of the referent, when not specified it 18976 + acts as LocalObjectReference. 18977 + type: string 18978 + required: 18979 + - name 18980 + type: object 18981 + type: array 18982 + driftDetection: 18983 + description: |- 18984 + DriftDetection holds the configuration for detecting and handling 18985 + differences between the manifest in the Helm storage and the resources 18986 + currently existing in the cluster. 18987 + 18988 + Note: this field is provisional to the v2beta2 API, and not actively used 18989 + by v2beta1 HelmReleases. 18990 + properties: 18991 + ignore: 18992 + description: |- 18993 + Ignore contains a list of rules for specifying which changes to ignore 18994 + during diffing. 18995 + items: 18996 + description: |- 18997 + IgnoreRule defines a rule to selectively disregard specific changes during 18998 + the drift detection process. 18999 + properties: 19000 + paths: 19001 + description: |- 19002 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 19003 + consideration in a Kubernetes object. 19004 + items: 19005 + type: string 19006 + type: array 19007 + target: 19008 + description: |- 19009 + Target is a selector for specifying Kubernetes objects to which this 19010 + rule applies. 19011 + If Target is not set, the Paths will be ignored for all Kubernetes 19012 + objects within the manifest of the Helm release. 19013 + properties: 19014 + annotationSelector: 19015 + description: |- 19016 + AnnotationSelector is a string that follows the label selection expression 19017 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19018 + It matches with the resource annotations. 19019 + type: string 19020 + group: 19021 + description: |- 19022 + Group is the API group to select resources from. 19023 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 19024 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19025 + type: string 19026 + kind: 19027 + description: |- 19028 + Kind of the API Group to select resources from. 19029 + Together with Group and Version it is capable of unambiguously 19030 + identifying and/or selecting resources. 19031 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19032 + type: string 19033 + labelSelector: 19034 + description: |- 19035 + LabelSelector is a string that follows the label selection expression 19036 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19037 + It matches with the resource labels. 19038 + type: string 19039 + name: 19040 + description: Name to match resources with. 19041 + type: string 19042 + namespace: 19043 + description: Namespace to select resources from. 19044 + type: string 19045 + version: 19046 + description: |- 19047 + Version of the API Group to select resources from. 19048 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 19049 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19050 + type: string 19051 + type: object 19052 + required: 19053 + - paths 19054 + type: object 19055 + type: array 19056 + mode: 19057 + description: |- 19058 + Mode defines how differences should be handled between the Helm manifest 19059 + and the manifest currently applied to the cluster. 19060 + If not explicitly set, it defaults to DiffModeDisabled. 19061 + enum: 19062 + - enabled 19063 + - warn 19064 + - disabled 19065 + type: string 19066 + type: object 19067 + install: 19068 + description: Install holds the configuration for Helm install actions 19069 + for this HelmRelease. 19070 + properties: 19071 + crds: 19072 + description: |- 19073 + CRDs upgrade CRDs from the Helm Chart's crds directory according 19074 + to the CRD upgrade policy provided here. Valid values are `Skip`, 19075 + `Create` or `CreateReplace`. Default is `Create` and if omitted 19076 + CRDs are installed but not updated. 19077 + 19078 + Skip: do neither install nor replace (update) any CRDs. 19079 + 19080 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 19081 + 19082 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 19083 + but not deleted. 19084 + 19085 + By default, CRDs are applied (installed) during Helm install action. 19086 + With this option users can opt-in to CRD replace existing CRDs on Helm 19087 + install actions, which is not (yet) natively supported by Helm. 19088 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 19089 + enum: 19090 + - Skip 19091 + - Create 19092 + - CreateReplace 19093 + type: string 19094 + createNamespace: 19095 + description: |- 19096 + CreateNamespace tells the Helm install action to create the 19097 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 19098 + On uninstall, the namespace will not be garbage collected. 19099 + type: boolean 19100 + disableHooks: 19101 + description: DisableHooks prevents hooks from running during the 19102 + Helm install action. 19103 + type: boolean 19104 + disableOpenAPIValidation: 19105 + description: |- 19106 + DisableOpenAPIValidation prevents the Helm install action from validating 19107 + rendered templates against the Kubernetes OpenAPI Schema. 19108 + type: boolean 19109 + disableWait: 19110 + description: |- 19111 + DisableWait disables the waiting for resources to be ready after a Helm 19112 + install has been performed. 19113 + type: boolean 19114 + disableWaitForJobs: 19115 + description: |- 19116 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 19117 + install has been performed. 19118 + type: boolean 19119 + remediation: 19120 + description: |- 19121 + Remediation holds the remediation configuration for when the Helm install 19122 + action for the HelmRelease fails. The default is to not perform any action. 19123 + properties: 19124 + ignoreTestFailures: 19125 description: |- 19126 - APIVersion defines the versioned schema of this representation of an object. 19127 - Servers should convert recognized schemas to the latest internal value, and 19128 - may reject unrecognized values. 19129 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19130 - type: string 19131 - kind: 19132 + IgnoreTestFailures tells the controller to skip remediation when the Helm 19133 + tests are run after an install action but fail. Defaults to 19134 + 'Test.IgnoreFailures'. 19135 + type: boolean 19136 + remediateLastFailure: 19137 description: |- 19138 - Kind is a string value representing the REST resource this object represents. 19139 - Servers may infer this from the endpoint the client submits requests to. 19140 - Cannot be updated. 19141 - In CamelCase. 19142 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 19143 + RemediateLastFailure tells the controller to remediate the last failure, when 19144 + no retries remain. Defaults to 'false'. 19145 + type: boolean 19146 + retries: 19147 + description: |- 19148 + Retries is the number of retries that should be attempted on failures before 19149 + bailing. Remediation, using an uninstall, is performed between each attempt. 19150 + Defaults to '0', a negative integer equals to unlimited retries. 19151 + type: integer 19152 + type: object 19153 + replace: 19154 + description: |- 19155 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 19156 + if that name is a deleted release which remains in the history. 19157 + type: boolean 19158 + skipCRDs: 19159 + description: |- 19160 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 19161 + CRDs are installed if not already present. 19162 + 19163 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 19164 + type: boolean 19165 + timeout: 19166 + description: |- 19167 + Timeout is the time to wait for any individual Kubernetes operation (like 19168 + Jobs for hooks) during the performance of a Helm install action. Defaults to 19169 + 'HelmReleaseSpec.Timeout'. 19170 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19171 + type: string 19172 + type: object 19173 + interval: 19174 + description: |- 19175 + Interval at which to reconcile the Helm release. 19176 + This interval is approximate and may be subject to jitter to ensure 19177 + efficient use of resources. 19178 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19179 + type: string 19180 + kubeConfig: 19181 + description: |- 19182 + KubeConfig for reconciling the HelmRelease on a remote cluster. 19183 + When used in combination with HelmReleaseSpec.ServiceAccountName, 19184 + forces the controller to act on behalf of that Service Account at the 19185 + target cluster. 19186 + If the --default-service-account flag is set, its value will be used as 19187 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 19188 + is empty. 19189 + properties: 19190 + secretRef: 19191 + description: |- 19192 + SecretRef holds the name of a secret that contains a key with 19193 + the kubeconfig file as the value. If no key is set, the key will default 19194 + to 'value'. 19195 + It is recommended that the kubeconfig is self-contained, and the secret 19196 + is regularly updated if credentials such as a cloud-access-token expire. 19197 + Cloud specific `cmd-path` auth helpers will not function without adding 19198 + binaries and credentials to the Pod that is responsible for reconciling 19199 + Kubernetes resources. 19200 + properties: 19201 + key: 19202 + description: Key in the Secret, when not specified an implementation-specific 19203 + default key is used. 19204 type: string 19205 - metadata: 19206 - type: object 19207 - spec: 19208 - description: ProviderSpec defines the desired state of the Provider. 19209 - properties: 19210 - address: 19211 - description: |- 19212 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 19213 - What kind of endpoint depends on the specific Provider type being used. 19214 - For the generic Provider, for example, this is an HTTP/S address. 19215 - For other Provider types this could be a project ID or a namespace. 19216 - maxLength: 2048 19217 - type: string 19218 - certSecretRef: 19219 - description: |- 19220 - CertSecretRef specifies the Secret containing 19221 - a PEM-encoded CA certificate (in the `ca.crt` key). 19222 - 19223 - 19224 - Note: Support for the `caFile` key has 19225 - been deprecated. 19226 - properties: 19227 - name: 19228 - description: Name of the referent. 19229 - type: string 19230 - required: 19231 - - name 19232 - type: object 19233 - channel: 19234 - description: Channel specifies the destination channel where events should be posted. 19235 - maxLength: 2048 19236 - type: string 19237 - interval: 19238 - description: Interval at which to reconcile the Provider with its Secret references. 19239 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19240 - type: string 19241 - proxy: 19242 - description: Proxy the HTTP/S address of the proxy server. 19243 - maxLength: 2048 19244 - pattern: ^(http|https)://.*$ 19245 - type: string 19246 - secretRef: 19247 - description: |- 19248 - SecretRef specifies the Secret containing the authentication 19249 - credentials for this Provider. 19250 + name: 19251 + description: Name of the Secret. 19252 + type: string 19253 + required: 19254 + - name 19255 + type: object 19256 + required: 19257 + - secretRef 19258 + type: object 19259 + maxHistory: 19260 + description: |- 19261 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 19262 + Use '0' for an unlimited number of revisions; defaults to '10'. 19263 + type: integer 19264 + persistentClient: 19265 + description: |- 19266 + PersistentClient tells the controller to use a persistent Kubernetes 19267 + client for this release. When enabled, the client will be reused for the 19268 + duration of the reconciliation, instead of being created and destroyed 19269 + for each (step of a) Helm action. 19270 + 19271 + This can improve performance, but may cause issues with some Helm charts 19272 + that for example do create Custom Resource Definitions during installation 19273 + outside Helm's CRD lifecycle hooks, which are then not observed to be 19274 + available by e.g. post-install hooks. 19275 + 19276 + If not set, it defaults to true. 19277 + type: boolean 19278 + postRenderers: 19279 + description: |- 19280 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 19281 + of their definition. 19282 + items: 19283 + description: PostRenderer contains a Helm PostRenderer specification. 19284 + properties: 19285 + kustomize: 19286 + description: Kustomization to apply as PostRenderer. 19287 + properties: 19288 + images: 19289 + description: |- 19290 + Images is a list of (image name, new name, new tag or digest) 19291 + for changing image names, tags or digests. This can also be achieved with a 19292 + patch, but this operator is simpler to specify. 19293 + items: 19294 + description: Image contains an image name, a new name, 19295 + a new tag or digest, which will replace the original 19296 + name and tag. 19297 + properties: 19298 + digest: 19299 + description: |- 19300 + Digest is the value used to replace the original image tag. 19301 + If digest is present NewTag value is ignored. 19302 + type: string 19303 + name: 19304 + description: Name is a tag-less image name. 19305 + type: string 19306 + newName: 19307 + description: NewName is the value used to replace 19308 + the original name. 19309 + type: string 19310 + newTag: 19311 + description: NewTag is the value used to replace the 19312 + original tag. 19313 + type: string 19314 + required: 19315 + - name 19316 + type: object 19317 + type: array 19318 + patches: 19319 + description: |- 19320 + Strategic merge and JSON patches, defined as inline YAML objects, 19321 + capable of targeting objects based on kind, label and annotation selectors. 19322 + items: 19323 + description: |- 19324 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 19325 + be applied to. 19326 + properties: 19327 + patch: 19328 + description: |- 19329 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 19330 + an array of operation objects. 19331 + type: string 19332 + target: 19333 + description: Target points to the resources that the 19334 + patch document should be applied to. 19335 properties: 19336 - name: 19337 - description: Name of the referent. 19338 - type: string 19339 - required: 19340 - - name 19341 + annotationSelector: 19342 + description: |- 19343 + AnnotationSelector is a string that follows the label selection expression 19344 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19345 + It matches with the resource annotations. 19346 + type: string 19347 + group: 19348 + description: |- 19349 + Group is the API group to select resources from. 19350 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 19351 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19352 + type: string 19353 + kind: 19354 + description: |- 19355 + Kind of the API Group to select resources from. 19356 + Together with Group and Version it is capable of unambiguously 19357 + identifying and/or selecting resources. 19358 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19359 + type: string 19360 + labelSelector: 19361 + description: |- 19362 + LabelSelector is a string that follows the label selection expression 19363 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19364 + It matches with the resource labels. 19365 + type: string 19366 + name: 19367 + description: Name to match resources with. 19368 + type: string 19369 + namespace: 19370 + description: Namespace to select resources from. 19371 + type: string 19372 + version: 19373 + description: |- 19374 + Version of the API Group to select resources from. 19375 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 19376 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19377 + type: string 19378 type: object 19379 - suspend: 19380 - description: |- 19381 - Suspend tells the controller to suspend subsequent 19382 - events handling for this Provider. 19383 - type: boolean 19384 - timeout: 19385 - description: Timeout for sending alerts to the Provider. 19386 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 19387 - type: string 19388 - type: 19389 - description: Type specifies which Provider implementation to use. 19390 - enum: 19391 - - slack 19392 - - discord 19393 - - msteams 19394 - - rocket 19395 - - generic 19396 - - generic-hmac 19397 - - github 19398 - - gitlab 19399 - - gitea 19400 - - bitbucketserver 19401 - - bitbucket 19402 - - azuredevops 19403 - - googlechat 19404 - - googlepubsub 19405 - - webex 19406 - - sentry 19407 - - azureeventhub 19408 - - telegram 19409 - - lark 19410 - - matrix 19411 - - opsgenie 19412 - - alertmanager 19413 - - grafana 19414 - - githubdispatch 19415 - - pagerduty 19416 - - datadog 19417 - type: string 19418 - username: 19419 - description: Username specifies the name under which events are posted. 19420 - maxLength: 2048 19421 - type: string 19422 - required: 19423 - - type 19424 - type: object 19425 - status: 19426 - default: 19427 - observedGeneration: -1 19428 - description: ProviderStatus defines the observed state of the Provider. 19429 - properties: 19430 - conditions: 19431 - description: Conditions holds the conditions for the Provider. 19432 + required: 19433 + - patch 19434 + type: object 19435 + type: array 19436 + patchesJson6902: 19437 + description: JSON 6902 patches, defined as inline YAML objects. 19438 + items: 19439 + description: JSON6902Patch contains a JSON6902 patch and 19440 + the target the patch should be applied to. 19441 + properties: 19442 + patch: 19443 + description: Patch contains the JSON6902 patch document 19444 + with an array of operation objects. 19445 items: 19446 - description: "Condition contains details for one aspect of the current state of this API 19447 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 19448 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 19449 - the observations of a foo's current state.\n\t // Known .status.conditions.type 19450 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 19451 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 19452 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 19453 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 19454 - fields\n\t}" 19455 - properties: 19456 - lastTransitionTime: 19457 - description: |- 19458 - lastTransitionTime is the last time the condition transitioned from one status to another. 19459 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19460 - format: date-time 19461 - type: string 19462 - message: 19463 - description: |- 19464 - message is a human readable message indicating details about the transition. 19465 - This may be an empty string. 19466 - maxLength: 32768 19467 - type: string 19468 - observedGeneration: 19469 - description: |- 19470 - observedGeneration represents the .metadata.generation that the condition was set based upon. 19471 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19472 - with respect to the current state of the instance. 19473 - format: int64 19474 - minimum: 0 19475 - type: integer 19476 - reason: 19477 - description: |- 19478 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 19479 - Producers of specific condition types may define expected values and meanings for this field, 19480 - and whether the values are considered a guaranteed API. 19481 - The value should be a CamelCase string. 19482 - This field may not be empty. 19483 - maxLength: 1024 19484 - minLength: 1 19485 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19486 - type: string 19487 - status: 19488 - description: status of the condition, one of True, False, Unknown. 19489 - enum: 19490 - - "True" 19491 - - "False" 19492 - - Unknown 19493 - type: string 19494 - type: 19495 - description: |- 19496 - type of condition in CamelCase or in foo.example.com/CamelCase. 19497 - --- 19498 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 19499 - useful (see .node.status.conditions), the ability to deconflict is important. 19500 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 19501 - maxLength: 316 19502 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19503 - type: string 19504 - required: 19505 - - lastTransitionTime 19506 - - message 19507 - - reason 19508 - - status 19509 - - type 19510 - type: object 19511 + description: |- 19512 + JSON6902 is a JSON6902 operation object. 19513 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 19514 + properties: 19515 + from: 19516 + description: |- 19517 + From contains a JSON-pointer value that references a location within the target document where the operation is 19518 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 19519 + type: string 19520 + op: 19521 + description: |- 19522 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 19523 + "test". 19524 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 19525 + enum: 19526 + - test 19527 + - remove 19528 + - add 19529 + - replace 19530 + - move 19531 + - copy 19532 + type: string 19533 + path: 19534 + description: |- 19535 + Path contains the JSON-pointer value that references a location within the target document where the operation 19536 + is performed. The meaning of the value depends on the value of Op. 19537 + type: string 19538 + value: 19539 + description: |- 19540 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 19541 + account by all operations. 19542 + x-kubernetes-preserve-unknown-fields: true 19543 + required: 19544 + - op 19545 + - path 19546 + type: object 19547 type: array 19548 - lastHandledReconcileAt: 19549 - description: |- 19550 - LastHandledReconcileAt holds the value of the most recent 19551 - reconcile request value, so a change of the annotation value 19552 - can be detected. 19553 - type: string 19554 - observedGeneration: 19555 - description: ObservedGeneration is the last reconciled generation. 19556 - format: int64 19557 - type: integer 19558 - type: object 19559 + target: 19560 + description: Target points to the resources that the 19561 + patch document should be applied to. 19562 + properties: 19563 + annotationSelector: 19564 + description: |- 19565 + AnnotationSelector is a string that follows the label selection expression 19566 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19567 + It matches with the resource annotations. 19568 + type: string 19569 + group: 19570 + description: |- 19571 + Group is the API group to select resources from. 19572 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 19573 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19574 + type: string 19575 + kind: 19576 + description: |- 19577 + Kind of the API Group to select resources from. 19578 + Together with Group and Version it is capable of unambiguously 19579 + identifying and/or selecting resources. 19580 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19581 + type: string 19582 + labelSelector: 19583 + description: |- 19584 + LabelSelector is a string that follows the label selection expression 19585 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 19586 + It matches with the resource labels. 19587 + type: string 19588 + name: 19589 + description: Name to match resources with. 19590 + type: string 19591 + namespace: 19592 + description: Namespace to select resources from. 19593 + type: string 19594 + version: 19595 + description: |- 19596 + Version of the API Group to select resources from. 19597 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 19598 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 19599 + type: string 19600 + type: object 19601 + required: 19602 + - patch 19603 + - target 19604 + type: object 19605 + type: array 19606 + patchesStrategicMerge: 19607 + description: Strategic merge patches, defined as inline 19608 + YAML objects. 19609 + items: 19610 + x-kubernetes-preserve-unknown-fields: true 19611 + type: array 19612 + type: object 19613 + type: object 19614 + type: array 19615 + releaseName: 19616 + description: |- 19617 + ReleaseName used for the Helm release. Defaults to a composition of 19618 + '[TargetNamespace-]Name'. 19619 + maxLength: 53 19620 + minLength: 1 19621 + type: string 19622 + rollback: 19623 + description: Rollback holds the configuration for Helm rollback actions 19624 + for this HelmRelease. 19625 + properties: 19626 + cleanupOnFail: 19627 + description: |- 19628 + CleanupOnFail allows deletion of new resources created during the Helm 19629 + rollback action when it fails. 19630 + type: boolean 19631 + disableHooks: 19632 + description: DisableHooks prevents hooks from running during the 19633 + Helm rollback action. 19634 + type: boolean 19635 + disableWait: 19636 + description: |- 19637 + DisableWait disables the waiting for resources to be ready after a Helm 19638 + rollback has been performed. 19639 + type: boolean 19640 + disableWaitForJobs: 19641 + description: |- 19642 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 19643 + rollback has been performed. 19644 + type: boolean 19645 + force: 19646 + description: Force forces resource updates through a replacement 19647 + strategy. 19648 + type: boolean 19649 + recreate: 19650 + description: Recreate performs pod restarts for the resource if 19651 + applicable. 19652 + type: boolean 19653 + timeout: 19654 + description: |- 19655 + Timeout is the time to wait for any individual Kubernetes operation (like 19656 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 19657 + 'HelmReleaseSpec.Timeout'. 19658 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19659 + type: string 19660 type: object 19661 - served: true 19662 - storage: false 19663 - subresources: 19664 - status: {} 19665 - - additionalPrinterColumns: 19666 - - jsonPath: .metadata.creationTimestamp 19667 - name: Age 19668 - type: date 19669 - name: v1beta3 19670 - schema: 19671 - openAPIV3Schema: 19672 - description: Provider is the Schema for the providers API 19673 + serviceAccountName: 19674 + description: |- 19675 + The name of the Kubernetes service account to impersonate 19676 + when reconciling this HelmRelease. 19677 + type: string 19678 + storageNamespace: 19679 + description: |- 19680 + StorageNamespace used for the Helm storage. 19681 + Defaults to the namespace of the HelmRelease. 19682 + maxLength: 63 19683 + minLength: 1 19684 + type: string 19685 + suspend: 19686 + description: |- 19687 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 19688 + it does not apply to already started reconciliations. Defaults to false. 19689 + type: boolean 19690 + targetNamespace: 19691 + description: |- 19692 + TargetNamespace to target when performing operations for the HelmRelease. 19693 + Defaults to the namespace of the HelmRelease. 19694 + maxLength: 63 19695 + minLength: 1 19696 + type: string 19697 + test: 19698 + description: Test holds the configuration for Helm test actions for 19699 + this HelmRelease. 19700 properties: 19701 - apiVersion: 19702 + enable: 19703 + description: |- 19704 + Enable enables Helm test actions for this HelmRelease after an Helm install 19705 + or upgrade action has been performed. 19706 + type: boolean 19707 + ignoreFailures: 19708 + description: |- 19709 + IgnoreFailures tells the controller to skip remediation when the Helm tests 19710 + are run but fail. Can be overwritten for tests run after install or upgrade 19711 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 19712 + type: boolean 19713 + timeout: 19714 + description: |- 19715 + Timeout is the time to wait for any individual Kubernetes operation during 19716 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 19717 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19718 + type: string 19719 + type: object 19720 + timeout: 19721 + description: |- 19722 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 19723 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 19724 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19725 + type: string 19726 + uninstall: 19727 + description: Uninstall holds the configuration for Helm uninstall 19728 + actions for this HelmRelease. 19729 + properties: 19730 + deletionPropagation: 19731 + default: background 19732 + description: |- 19733 + DeletionPropagation specifies the deletion propagation policy when 19734 + a Helm uninstall is performed. 19735 + enum: 19736 + - background 19737 + - foreground 19738 + - orphan 19739 + type: string 19740 + disableHooks: 19741 + description: DisableHooks prevents hooks from running during the 19742 + Helm rollback action. 19743 + type: boolean 19744 + disableWait: 19745 + description: |- 19746 + DisableWait disables waiting for all the resources to be deleted after 19747 + a Helm uninstall is performed. 19748 + type: boolean 19749 + keepHistory: 19750 + description: |- 19751 + KeepHistory tells Helm to remove all associated resources and mark the 19752 + release as deleted, but retain the release history. 19753 + type: boolean 19754 + timeout: 19755 + description: |- 19756 + Timeout is the time to wait for any individual Kubernetes operation (like 19757 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 19758 + to 'HelmReleaseSpec.Timeout'. 19759 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19760 + type: string 19761 + type: object 19762 + upgrade: 19763 + description: Upgrade holds the configuration for Helm upgrade actions 19764 + for this HelmRelease. 19765 + properties: 19766 + cleanupOnFail: 19767 + description: |- 19768 + CleanupOnFail allows deletion of new resources created during the Helm 19769 + upgrade action when it fails. 19770 + type: boolean 19771 + crds: 19772 + description: |- 19773 + CRDs upgrade CRDs from the Helm Chart's crds directory according 19774 + to the CRD upgrade policy provided here. Valid values are `Skip`, 19775 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 19776 + CRDs are neither installed nor upgraded. 19777 + 19778 + Skip: do neither install nor replace (update) any CRDs. 19779 + 19780 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 19781 + 19782 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 19783 + but not deleted. 19784 + 19785 + By default, CRDs are not applied during Helm upgrade action. With this 19786 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 19787 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 19788 + enum: 19789 + - Skip 19790 + - Create 19791 + - CreateReplace 19792 + type: string 19793 + disableHooks: 19794 + description: DisableHooks prevents hooks from running during the 19795 + Helm upgrade action. 19796 + type: boolean 19797 + disableOpenAPIValidation: 19798 + description: |- 19799 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 19800 + rendered templates against the Kubernetes OpenAPI Schema. 19801 + type: boolean 19802 + disableWait: 19803 + description: |- 19804 + DisableWait disables the waiting for resources to be ready after a Helm 19805 + upgrade has been performed. 19806 + type: boolean 19807 + disableWaitForJobs: 19808 + description: |- 19809 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 19810 + upgrade has been performed. 19811 + type: boolean 19812 + force: 19813 + description: Force forces resource updates through a replacement 19814 + strategy. 19815 + type: boolean 19816 + preserveValues: 19817 + description: |- 19818 + PreserveValues will make Helm reuse the last release's values and merge in 19819 + overrides from 'Values'. Setting this flag makes the HelmRelease 19820 + non-declarative. 19821 + type: boolean 19822 + remediation: 19823 + description: |- 19824 + Remediation holds the remediation configuration for when the Helm upgrade 19825 + action for the HelmRelease fails. The default is to not perform any action. 19826 + properties: 19827 + ignoreTestFailures: 19828 + description: |- 19829 + IgnoreTestFailures tells the controller to skip remediation when the Helm 19830 + tests are run after an upgrade action but fail. 19831 + Defaults to 'Test.IgnoreFailures'. 19832 + type: boolean 19833 + remediateLastFailure: 19834 description: |- 19835 - APIVersion defines the versioned schema of this representation of an object. 19836 - Servers should convert recognized schemas to the latest internal value, and 19837 - may reject unrecognized values. 19838 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 19839 + RemediateLastFailure tells the controller to remediate the last failure, when 19840 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 19841 + type: boolean 19842 + retries: 19843 + description: |- 19844 + Retries is the number of retries that should be attempted on failures before 19845 + bailing. Remediation, using 'Strategy', is performed between each attempt. 19846 + Defaults to '0', a negative integer equals to unlimited retries. 19847 + type: integer 19848 + strategy: 19849 + description: Strategy to use for failure remediation. Defaults 19850 + to 'rollback'. 19851 + enum: 19852 + - rollback 19853 + - uninstall 19854 type: string 19855 + type: object 19856 + timeout: 19857 + description: |- 19858 + Timeout is the time to wait for any individual Kubernetes operation (like 19859 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 19860 + 'HelmReleaseSpec.Timeout'. 19861 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 19862 + type: string 19863 + type: object 19864 + values: 19865 + description: Values holds the values for this Helm release. 19866 + x-kubernetes-preserve-unknown-fields: true 19867 + valuesFrom: 19868 + description: |- 19869 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 19870 + and information about how they should be merged. 19871 + items: 19872 + description: |- 19873 + ValuesReference contains a reference to a resource containing Helm values, 19874 + and optionally the key they can be found at. 19875 + properties: 19876 kind: 19877 + description: Kind of the values referent, valid values are ('Secret', 19878 + 'ConfigMap'). 19879 + enum: 19880 + - Secret 19881 + - ConfigMap 19882 + type: string 19883 + name: 19884 + description: |- 19885 + Name of the values referent. Should reside in the same namespace as the 19886 + referring resource. 19887 + maxLength: 253 19888 + minLength: 1 19889 + type: string 19890 + optional: 19891 + description: |- 19892 + Optional marks this ValuesReference as optional. When set, a not found error 19893 + for the values reference is ignored, but any ValuesKey, TargetPath or 19894 + transient error will still result in a reconciliation failure. 19895 + type: boolean 19896 + targetPath: 19897 + description: |- 19898 + TargetPath is the YAML dot notation path the value should be merged at. When 19899 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 19900 + which results in the values getting merged at the root. 19901 + maxLength: 250 19902 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 19903 + type: string 19904 + valuesKey: 19905 + description: |- 19906 + ValuesKey is the data key where the values.yaml or a specific value can be 19907 + found at. Defaults to 'values.yaml'. 19908 + When set, must be a valid Data Key, consisting of alphanumeric characters, 19909 + '-', '_' or '.'. 19910 + maxLength: 253 19911 + pattern: ^[\-._a-zA-Z0-9]+$ 19912 + type: string 19913 + required: 19914 + - kind 19915 + - name 19916 + type: object 19917 + type: array 19918 + required: 19919 + - chart 19920 + - interval 19921 + type: object 19922 + status: 19923 + default: 19924 + observedGeneration: -1 19925 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 19926 + properties: 19927 + conditions: 19928 + description: Conditions holds the conditions for the HelmRelease. 19929 + items: 19930 + description: Condition contains details for one aspect of the current 19931 + state of this API Resource. 19932 + properties: 19933 + lastTransitionTime: 19934 + description: |- 19935 + lastTransitionTime is the last time the condition transitioned from one status to another. 19936 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 19937 + format: date-time 19938 + type: string 19939 + message: 19940 + description: |- 19941 + message is a human readable message indicating details about the transition. 19942 + This may be an empty string. 19943 + maxLength: 32768 19944 + type: string 19945 + observedGeneration: 19946 + description: |- 19947 + observedGeneration represents the .metadata.generation that the condition was set based upon. 19948 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 19949 + with respect to the current state of the instance. 19950 + format: int64 19951 + minimum: 0 19952 + type: integer 19953 + reason: 19954 + description: |- 19955 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 19956 + Producers of specific condition types may define expected values and meanings for this field, 19957 + and whether the values are considered a guaranteed API. 19958 + The value should be a CamelCase string. 19959 + This field may not be empty. 19960 + maxLength: 1024 19961 + minLength: 1 19962 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 19963 + type: string 19964 + status: 19965 + description: status of the condition, one of True, False, Unknown. 19966 + enum: 19967 + - "True" 19968 + - "False" 19969 + - Unknown 19970 + type: string 19971 + type: 19972 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 19973 + maxLength: 316 19974 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 19975 + type: string 19976 + required: 19977 + - lastTransitionTime 19978 + - message 19979 + - reason 19980 + - status 19981 + - type 19982 + type: object 19983 + type: array 19984 + failures: 19985 + description: |- 19986 + Failures is the reconciliation failure count against the latest desired 19987 + state. It is reset after a successful reconciliation. 19988 + format: int64 19989 + type: integer 19990 + helmChart: 19991 + description: |- 19992 + HelmChart is the namespaced name of the HelmChart resource created by 19993 + the controller for the HelmRelease. 19994 + type: string 19995 + history: 19996 + description: |- 19997 + History holds the history of Helm releases performed for this HelmRelease 19998 + up to the last successfully completed release. 19999 + 20000 + Note: this field is provisional to the v2beta2 API, and not actively used 20001 + by v2beta1 HelmReleases. 20002 + items: 20003 + description: |- 20004 + Snapshot captures a point-in-time copy of the status information for a Helm release, 20005 + as managed by the controller. 20006 + properties: 20007 + apiVersion: 20008 + description: |- 20009 + APIVersion is the API version of the Snapshot. 20010 + Provisional: when the calculation method of the Digest field is changed, 20011 + this field will be used to distinguish between the old and new methods. 20012 + type: string 20013 + appVersion: 20014 + description: AppVersion is the chart app version of the release 20015 + object in storage. 20016 + type: string 20017 + chartName: 20018 + description: ChartName is the chart name of the release object 20019 + in storage. 20020 + type: string 20021 + chartVersion: 20022 + description: |- 20023 + ChartVersion is the chart version of the release object in 20024 + storage. 20025 + type: string 20026 + configDigest: 20027 + description: |- 20028 + ConfigDigest is the checksum of the config (better known as 20029 + "values") of the release object in storage. 20030 + It has the format of `<algo>:<checksum>`. 20031 + type: string 20032 + deleted: 20033 + description: Deleted is when the release was deleted. 20034 + format: date-time 20035 + type: string 20036 + digest: 20037 + description: |- 20038 + Digest is the checksum of the release object in storage. 20039 + It has the format of `<algo>:<checksum>`. 20040 + type: string 20041 + firstDeployed: 20042 + description: FirstDeployed is when the release was first deployed. 20043 + format: date-time 20044 + type: string 20045 + lastDeployed: 20046 + description: LastDeployed is when the release was last deployed. 20047 + format: date-time 20048 + type: string 20049 + name: 20050 + description: Name is the name of the release. 20051 + type: string 20052 + namespace: 20053 + description: Namespace is the namespace the release is deployed 20054 + to. 20055 + type: string 20056 + ociDigest: 20057 + description: OCIDigest is the digest of the OCI artifact associated 20058 + with the release. 20059 + type: string 20060 + status: 20061 + description: Status is the current state of the release. 20062 + type: string 20063 + testHooks: 20064 + additionalProperties: 20065 description: |- 20066 - Kind is a string value representing the REST resource this object represents. 20067 - Servers may infer this from the endpoint the client submits requests to. 20068 - Cannot be updated. 20069 - In CamelCase. 20070 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20071 - type: string 20072 - metadata: 20073 - type: object 20074 - spec: 20075 - description: ProviderSpec defines the desired state of the Provider. 20076 + TestHookStatus holds the status information for a test hook as observed 20077 + to be run by the controller. 20078 properties: 20079 - address: 20080 - description: |- 20081 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 20082 - What kind of endpoint depends on the specific Provider type being used. 20083 - For the generic Provider, for example, this is an HTTP/S address. 20084 - For other Provider types this could be a project ID or a namespace. 20085 - maxLength: 2048 20086 - type: string 20087 - certSecretRef: 20088 - description: |- 20089 - CertSecretRef specifies the Secret containing 20090 - a PEM-encoded CA certificate (in the `ca.crt` key). 20091 - 20092 - 20093 - Note: Support for the `caFile` key has 20094 - been deprecated. 20095 - properties: 20096 - name: 20097 - description: Name of the referent. 20098 - type: string 20099 - required: 20100 - - name 20101 - type: object 20102 - channel: 20103 - description: Channel specifies the destination channel where events should be posted. 20104 - maxLength: 2048 20105 - type: string 20106 - interval: 20107 - description: |- 20108 - Interval at which to reconcile the Provider with its Secret references. 20109 - Deprecated and not used in v1beta3. 20110 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20111 - type: string 20112 - proxy: 20113 - description: Proxy the HTTP/S address of the proxy server. 20114 - maxLength: 2048 20115 - pattern: ^(http|https)://.*$ 20116 - type: string 20117 - secretRef: 20118 - description: |- 20119 - SecretRef specifies the Secret containing the authentication 20120 - credentials for this Provider. 20121 - properties: 20122 - name: 20123 - description: Name of the referent. 20124 - type: string 20125 - required: 20126 - - name 20127 - type: object 20128 - suspend: 20129 - description: |- 20130 - Suspend tells the controller to suspend subsequent 20131 - events handling for this Provider. 20132 - type: boolean 20133 - timeout: 20134 - description: Timeout for sending alerts to the Provider. 20135 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 20136 - type: string 20137 - type: 20138 - description: Type specifies which Provider implementation to use. 20139 - enum: 20140 - - slack 20141 - - discord 20142 - - msteams 20143 - - rocket 20144 - - generic 20145 - - generic-hmac 20146 - - github 20147 - - gitlab 20148 - - gitea 20149 - - bitbucketserver 20150 - - bitbucket 20151 - - azuredevops 20152 - - googlechat 20153 - - googlepubsub 20154 - - webex 20155 - - sentry 20156 - - azureeventhub 20157 - - telegram 20158 - - lark 20159 - - matrix 20160 - - opsgenie 20161 - - alertmanager 20162 - - grafana 20163 - - githubdispatch 20164 - - pagerduty 20165 - - datadog 20166 - - nats 20167 - type: string 20168 - username: 20169 - description: Username specifies the name under which events are posted. 20170 - maxLength: 2048 20171 - type: string 20172 - required: 20173 - - type 20174 + lastCompleted: 20175 + description: LastCompleted is the time the test hook last 20176 + completed. 20177 + format: date-time 20178 + type: string 20179 + lastStarted: 20180 + description: LastStarted is the time the test hook was 20181 + last started. 20182 + format: date-time 20183 + type: string 20184 + phase: 20185 + description: Phase the test hook was observed to be in. 20186 + type: string 20187 type: object 20188 - type: object 20189 - served: true 20190 - storage: true 20191 - subresources: {} 20192 ---- 20193 -apiVersion: apiextensions.k8s.io/v1 20194 -kind: CustomResourceDefinition 20195 -metadata: 20196 - annotations: 20197 - controller-gen.kubebuilder.io/version: v0.15.0 20198 - labels: 20199 - app.kubernetes.io/component: notification-controller 20200 - app.kubernetes.io/instance: flux-system 20201 - app.kubernetes.io/part-of: flux 20202 - app.kubernetes.io/version: v2.3.0 20203 - name: receivers.notification.toolkit.fluxcd.io 20204 -spec: 20205 - group: notification.toolkit.fluxcd.io 20206 - names: 20207 - kind: Receiver 20208 - listKind: ReceiverList 20209 - plural: receivers 20210 - singular: receiver 20211 - scope: Namespaced 20212 - versions: 20213 - - additionalPrinterColumns: 20214 - - jsonPath: .metadata.creationTimestamp 20215 - name: Age 20216 - type: date 20217 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 20218 - name: Ready 20219 - type: string 20220 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 20221 - name: Status 20222 - type: string 20223 - name: v1 20224 - schema: 20225 - openAPIV3Schema: 20226 - description: Receiver is the Schema for the receivers API. 20227 + description: |- 20228 + TestHooks is the list of test hooks for the release as observed to be 20229 + run by the controller. 20230 + type: object 20231 + version: 20232 + description: Version is the version of the release object in 20233 + storage. 20234 + type: integer 20235 + required: 20236 + - chartName 20237 + - chartVersion 20238 + - configDigest 20239 + - digest 20240 + - firstDeployed 20241 + - lastDeployed 20242 + - name 20243 + - namespace 20244 + - status 20245 + - version 20246 + type: object 20247 + type: array 20248 + installFailures: 20249 + description: |- 20250 + InstallFailures is the install failure count against the latest desired 20251 + state. It is reset after a successful reconciliation. 20252 + format: int64 20253 + type: integer 20254 + lastAppliedRevision: 20255 + description: LastAppliedRevision is the revision of the last successfully 20256 + applied source. 20257 + type: string 20258 + lastAttemptedConfigDigest: 20259 + description: |- 20260 + LastAttemptedConfigDigest is the digest for the config (better known as 20261 + "values") of the last reconciliation attempt. 20262 + 20263 + Note: this field is provisional to the v2beta2 API, and not actively used 20264 + by v2beta1 HelmReleases. 20265 + type: string 20266 + lastAttemptedGeneration: 20267 + description: |- 20268 + LastAttemptedGeneration is the last generation the controller attempted 20269 + to reconcile. 20270 + 20271 + Note: this field is provisional to the v2beta2 API, and not actively used 20272 + by v2beta1 HelmReleases. 20273 + format: int64 20274 + type: integer 20275 + lastAttemptedReleaseAction: 20276 + description: |- 20277 + LastAttemptedReleaseAction is the last release action performed for this 20278 + HelmRelease. It is used to determine the active remediation strategy. 20279 + 20280 + Note: this field is provisional to the v2beta2 API, and not actively used 20281 + by v2beta1 HelmReleases. 20282 + type: string 20283 + lastAttemptedRevision: 20284 + description: LastAttemptedRevision is the revision of the last reconciliation 20285 + attempt. 20286 + type: string 20287 + lastAttemptedValuesChecksum: 20288 + description: |- 20289 + LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last 20290 + reconciliation attempt. 20291 + type: string 20292 + lastHandledForceAt: 20293 + description: |- 20294 + LastHandledForceAt holds the value of the most recent force request 20295 + value, so a change of the annotation value can be detected. 20296 + 20297 + Note: this field is provisional to the v2beta2 API, and not actively used 20298 + by v2beta1 HelmReleases. 20299 + type: string 20300 + lastHandledReconcileAt: 20301 + description: |- 20302 + LastHandledReconcileAt holds the value of the most recent 20303 + reconcile request value, so a change of the annotation value 20304 + can be detected. 20305 + type: string 20306 + lastHandledResetAt: 20307 + description: |- 20308 + LastHandledResetAt holds the value of the most recent reset request 20309 + value, so a change of the annotation value can be detected. 20310 + 20311 + Note: this field is provisional to the v2beta2 API, and not actively used 20312 + by v2beta1 HelmReleases. 20313 + type: string 20314 + lastReleaseRevision: 20315 + description: LastReleaseRevision is the revision of the last successful 20316 + Helm release. 20317 + type: integer 20318 + observedGeneration: 20319 + description: ObservedGeneration is the last observed generation. 20320 + format: int64 20321 + type: integer 20322 + observedPostRenderersDigest: 20323 + description: |- 20324 + ObservedPostRenderersDigest is the digest for the post-renderers of 20325 + the last successful reconciliation attempt. 20326 + type: string 20327 + storageNamespace: 20328 + description: |- 20329 + StorageNamespace is the namespace of the Helm release storage for the 20330 + current release. 20331 + 20332 + Note: this field is provisional to the v2beta2 API, and not actively used 20333 + by v2beta1 HelmReleases. 20334 + type: string 20335 + upgradeFailures: 20336 + description: |- 20337 + UpgradeFailures is the upgrade failure count against the latest desired 20338 + state. It is reset after a successful reconciliation. 20339 + format: int64 20340 + type: integer 20341 + type: object 20342 + type: object 20343 + served: true 20344 + storage: false 20345 + subresources: 20346 + status: {} 20347 + - additionalPrinterColumns: 20348 + - jsonPath: .metadata.creationTimestamp 20349 + name: Age 20350 + type: date 20351 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 20352 + name: Ready 20353 + type: string 20354 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 20355 + name: Status 20356 + type: string 20357 + deprecated: true 20358 + deprecationWarning: v2beta2 HelmRelease is deprecated, upgrade to v2 20359 + name: v2beta2 20360 + schema: 20361 + openAPIV3Schema: 20362 + description: HelmRelease is the Schema for the helmreleases API 20363 + properties: 20364 + apiVersion: 20365 + description: |- 20366 + APIVersion defines the versioned schema of this representation of an object. 20367 + Servers should convert recognized schemas to the latest internal value, and 20368 + may reject unrecognized values. 20369 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20370 + type: string 20371 + kind: 20372 + description: |- 20373 + Kind is a string value representing the REST resource this object represents. 20374 + Servers may infer this from the endpoint the client submits requests to. 20375 + Cannot be updated. 20376 + In CamelCase. 20377 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20378 + type: string 20379 + metadata: 20380 + type: object 20381 + spec: 20382 + description: HelmReleaseSpec defines the desired state of a Helm release. 20383 + properties: 20384 + chart: 20385 + description: |- 20386 + Chart defines the template of the v1beta2.HelmChart that should be created 20387 + for this HelmRelease. 20388 properties: 20389 - apiVersion: 20390 + metadata: 20391 + description: ObjectMeta holds the template for metadata like labels 20392 + and annotations. 20393 + properties: 20394 + annotations: 20395 + additionalProperties: 20396 + type: string 20397 + description: |- 20398 + Annotations is an unstructured key value map stored with a resource that may be 20399 + set by external tools to store and retrieve arbitrary metadata. They are not 20400 + queryable and should be preserved when modifying objects. 20401 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 20402 + type: object 20403 + labels: 20404 + additionalProperties: 20405 + type: string 20406 description: |- 20407 - APIVersion defines the versioned schema of this representation of an object. 20408 - Servers should convert recognized schemas to the latest internal value, and 20409 - may reject unrecognized values. 20410 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20411 + Map of string keys and values that can be used to organize and categorize 20412 + (scope and select) objects. 20413 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 20414 + type: object 20415 + type: object 20416 + spec: 20417 + description: Spec holds the template for the v1beta2.HelmChartSpec 20418 + for this HelmRelease. 20419 + properties: 20420 + chart: 20421 + description: The name or path the Helm chart is available 20422 + at in the SourceRef. 20423 + maxLength: 2048 20424 + minLength: 1 20425 type: string 20426 - kind: 20427 + ignoreMissingValuesFiles: 20428 + description: IgnoreMissingValuesFiles controls whether to 20429 + silently ignore missing values files rather than failing. 20430 + type: boolean 20431 + interval: 20432 description: |- 20433 - Kind is a string value representing the REST resource this object represents. 20434 - Servers may infer this from the endpoint the client submits requests to. 20435 - Cannot be updated. 20436 - In CamelCase. 20437 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20438 + Interval at which to check the v1.Source for updates. Defaults to 20439 + 'HelmReleaseSpec.Interval'. 20440 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20441 type: string 20442 - metadata: 20443 - type: object 20444 - spec: 20445 - description: ReceiverSpec defines the desired state of the Receiver. 20446 + reconcileStrategy: 20447 + default: ChartVersion 20448 + description: |- 20449 + Determines what enables the creation of a new artifact. Valid values are 20450 + ('ChartVersion', 'Revision'). 20451 + See the documentation of the values for an explanation on their behavior. 20452 + Defaults to ChartVersion when omitted. 20453 + enum: 20454 + - ChartVersion 20455 + - Revision 20456 + type: string 20457 + sourceRef: 20458 + description: The name and namespace of the v1.Source the chart 20459 + is available at. 20460 properties: 20461 - events: 20462 - description: |- 20463 - Events specifies the list of event types to handle, 20464 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 20465 - items: 20466 - type: string 20467 - type: array 20468 - interval: 20469 - default: 10m 20470 - description: Interval at which to reconcile the Receiver with its Secret references. 20471 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20472 - type: string 20473 - resources: 20474 - description: A list of resources to be notified about changes. 20475 - items: 20476 - description: |- 20477 - CrossNamespaceObjectReference contains enough information to let you locate the 20478 - typed referenced object at cluster level 20479 - properties: 20480 - apiVersion: 20481 - description: API version of the referent 20482 - type: string 20483 - kind: 20484 - description: Kind of the referent 20485 - enum: 20486 - - Bucket 20487 - - GitRepository 20488 - - Kustomization 20489 - - HelmRelease 20490 - - HelmChart 20491 - - HelmRepository 20492 - - ImageRepository 20493 - - ImagePolicy 20494 - - ImageUpdateAutomation 20495 - - OCIRepository 20496 - type: string 20497 - matchLabels: 20498 - additionalProperties: 20499 - type: string 20500 - description: |- 20501 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 20502 - map is equivalent to an element of matchExpressions, whose key field is "key", the 20503 - operator is "In", and the values array contains only "value". The requirements are ANDed. 20504 - MatchLabels requires the name to be set to `*`. 20505 - type: object 20506 - name: 20507 - description: |- 20508 - Name of the referent 20509 - If multiple resources are targeted `*` may be set. 20510 - maxLength: 53 20511 - minLength: 1 20512 - type: string 20513 - namespace: 20514 - description: Namespace of the referent 20515 - maxLength: 53 20516 - minLength: 1 20517 - type: string 20518 - required: 20519 - - kind 20520 - - name 20521 - type: object 20522 - type: array 20523 - secretRef: 20524 - description: |- 20525 - SecretRef specifies the Secret containing the token used 20526 - to validate the payload authenticity. 20527 - properties: 20528 - name: 20529 - description: Name of the referent. 20530 - type: string 20531 - required: 20532 - - name 20533 - type: object 20534 - suspend: 20535 - description: |- 20536 - Suspend tells the controller to suspend subsequent 20537 - events handling for this receiver. 20538 - type: boolean 20539 - type: 20540 - description: |- 20541 - Type of webhook sender, used to determine 20542 - the validation procedure and payload deserialization. 20543 - enum: 20544 - - generic 20545 - - generic-hmac 20546 - - github 20547 - - gitlab 20548 - - bitbucket 20549 - - harbor 20550 - - dockerhub 20551 - - quay 20552 - - gcr 20553 - - nexus 20554 - - acr 20555 - - cdevents 20556 - type: string 20557 + apiVersion: 20558 + description: APIVersion of the referent. 20559 + type: string 20560 + kind: 20561 + description: Kind of the referent. 20562 + enum: 20563 + - HelmRepository 20564 + - GitRepository 20565 + - Bucket 20566 + type: string 20567 + name: 20568 + description: Name of the referent. 20569 + maxLength: 253 20570 + minLength: 1 20571 + type: string 20572 + namespace: 20573 + description: Namespace of the referent. 20574 + maxLength: 63 20575 + minLength: 1 20576 + type: string 20577 required: 20578 - - resources 20579 - - secretRef 20580 - - type 20581 + - kind 20582 + - name 20583 type: object 20584 - status: 20585 - default: 20586 - observedGeneration: -1 20587 - description: ReceiverStatus defines the observed state of the Receiver. 20588 + valuesFile: 20589 + description: |- 20590 + Alternative values file to use as the default chart values, expected to 20591 + be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, 20592 + for backwards compatibility the file defined here is merged before the 20593 + ValuesFiles items. Ignored when omitted. 20594 + type: string 20595 + valuesFiles: 20596 + description: |- 20597 + Alternative list of values files to use as the chart values (values.yaml 20598 + is not included by default), expected to be a relative path in the SourceRef. 20599 + Values files are merged in the order of this list with the last file overriding 20600 + the first. Ignored when omitted. 20601 + items: 20602 + type: string 20603 + type: array 20604 + verify: 20605 + description: |- 20606 + Verify contains the secret name containing the trusted public keys 20607 + used to verify the signature and specifies which provider to use to check 20608 + whether OCI image is authentic. 20609 + This field is only supported for OCI sources. 20610 + Chart dependencies, which are not bundled in the umbrella chart artifact, 20611 + are not verified. 20612 properties: 20613 - conditions: 20614 - description: Conditions holds the conditions for the Receiver. 20615 - items: 20616 - description: "Condition contains details for one aspect of the current state of this API 20617 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 20618 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 20619 - the observations of a foo's current state.\n\t // Known .status.conditions.type 20620 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 20621 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 20622 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 20623 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 20624 - fields\n\t}" 20625 - properties: 20626 - lastTransitionTime: 20627 - description: |- 20628 - lastTransitionTime is the last time the condition transitioned from one status to another. 20629 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 20630 - format: date-time 20631 - type: string 20632 - message: 20633 - description: |- 20634 - message is a human readable message indicating details about the transition. 20635 - This may be an empty string. 20636 - maxLength: 32768 20637 - type: string 20638 - observedGeneration: 20639 - description: |- 20640 - observedGeneration represents the .metadata.generation that the condition was set based upon. 20641 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 20642 - with respect to the current state of the instance. 20643 - format: int64 20644 - minimum: 0 20645 - type: integer 20646 - reason: 20647 - description: |- 20648 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 20649 - Producers of specific condition types may define expected values and meanings for this field, 20650 - and whether the values are considered a guaranteed API. 20651 - The value should be a CamelCase string. 20652 - This field may not be empty. 20653 - maxLength: 1024 20654 - minLength: 1 20655 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 20656 - type: string 20657 - status: 20658 - description: status of the condition, one of True, False, Unknown. 20659 - enum: 20660 - - "True" 20661 - - "False" 20662 - - Unknown 20663 - type: string 20664 - type: 20665 - description: |- 20666 - type of condition in CamelCase or in foo.example.com/CamelCase. 20667 - --- 20668 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 20669 - useful (see .node.status.conditions), the ability to deconflict is important. 20670 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 20671 - maxLength: 316 20672 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 20673 - type: string 20674 - required: 20675 - - lastTransitionTime 20676 - - message 20677 - - reason 20678 - - status 20679 - - type 20680 - type: object 20681 - type: array 20682 - lastHandledReconcileAt: 20683 - description: |- 20684 - LastHandledReconcileAt holds the value of the most recent 20685 - reconcile request value, so a change of the annotation value 20686 - can be detected. 20687 - type: string 20688 - observedGeneration: 20689 - description: ObservedGeneration is the last observed generation of the Receiver object. 20690 - format: int64 20691 - type: integer 20692 - webhookPath: 20693 - description: |- 20694 - WebhookPath is the generated incoming webhook address in the format 20695 - of '/hook/sha256sum(token+name+namespace)'. 20696 - type: string 20697 + provider: 20698 + default: cosign 20699 + description: Provider specifies the technology used to 20700 + sign the OCI Helm chart. 20701 + enum: 20702 + - cosign 20703 + - notation 20704 + type: string 20705 + secretRef: 20706 + description: |- 20707 + SecretRef specifies the Kubernetes Secret containing the 20708 + trusted public keys. 20709 + properties: 20710 + name: 20711 + description: Name of the referent. 20712 + type: string 20713 + required: 20714 + - name 20715 + type: object 20716 + required: 20717 + - provider 20718 type: object 20719 + version: 20720 + default: '*' 20721 + description: |- 20722 + Version semver expression, ignored for charts from v1beta2.GitRepository and 20723 + v1beta2.Bucket sources. Defaults to latest when omitted. 20724 + type: string 20725 + required: 20726 + - chart 20727 + - sourceRef 20728 + type: object 20729 + required: 20730 + - spec 20731 type: object 20732 - served: true 20733 - storage: true 20734 - subresources: 20735 - status: {} 20736 - - additionalPrinterColumns: 20737 - - jsonPath: .metadata.creationTimestamp 20738 - name: Age 20739 - type: date 20740 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 20741 - name: Ready 20742 - type: string 20743 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 20744 - name: Status 20745 - type: string 20746 - deprecated: true 20747 - deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1 20748 - name: v1beta1 20749 - schema: 20750 - openAPIV3Schema: 20751 - description: Receiver is the Schema for the receivers API 20752 + chartRef: 20753 + description: |- 20754 + ChartRef holds a reference to a source controller resource containing the 20755 + Helm chart artifact. 20756 + 20757 + Note: this field is provisional to the v2 API, and not actively used 20758 + by v2beta2 HelmReleases. 20759 properties: 20760 - apiVersion: 20761 + apiVersion: 20762 + description: APIVersion of the referent. 20763 + type: string 20764 + kind: 20765 + description: Kind of the referent. 20766 + enum: 20767 + - OCIRepository 20768 + - HelmChart 20769 + type: string 20770 + name: 20771 + description: Name of the referent. 20772 + maxLength: 253 20773 + minLength: 1 20774 + type: string 20775 + namespace: 20776 + description: |- 20777 + Namespace of the referent, defaults to the namespace of the Kubernetes 20778 + resource object that contains the reference. 20779 + maxLength: 63 20780 + minLength: 1 20781 + type: string 20782 + required: 20783 + - kind 20784 + - name 20785 + type: object 20786 + dependsOn: 20787 + description: |- 20788 + DependsOn may contain a meta.NamespacedObjectReference slice with 20789 + references to HelmRelease resources that must be ready before this HelmRelease 20790 + can be reconciled. 20791 + items: 20792 + description: |- 20793 + NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any 20794 + namespace. 20795 + properties: 20796 + name: 20797 + description: Name of the referent. 20798 + type: string 20799 + namespace: 20800 + description: Namespace of the referent, when not specified it 20801 + acts as LocalObjectReference. 20802 + type: string 20803 + required: 20804 + - name 20805 + type: object 20806 + type: array 20807 + driftDetection: 20808 + description: |- 20809 + DriftDetection holds the configuration for detecting and handling 20810 + differences between the manifest in the Helm storage and the resources 20811 + currently existing in the cluster. 20812 + properties: 20813 + ignore: 20814 + description: |- 20815 + Ignore contains a list of rules for specifying which changes to ignore 20816 + during diffing. 20817 + items: 20818 + description: |- 20819 + IgnoreRule defines a rule to selectively disregard specific changes during 20820 + the drift detection process. 20821 + properties: 20822 + paths: 20823 + description: |- 20824 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 20825 + consideration in a Kubernetes object. 20826 + items: 20827 + type: string 20828 + type: array 20829 + target: 20830 + description: |- 20831 + Target is a selector for specifying Kubernetes objects to which this 20832 + rule applies. 20833 + If Target is not set, the Paths will be ignored for all Kubernetes 20834 + objects within the manifest of the Helm release. 20835 + properties: 20836 + annotationSelector: 20837 + description: |- 20838 + AnnotationSelector is a string that follows the label selection expression 20839 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20840 + It matches with the resource annotations. 20841 + type: string 20842 + group: 20843 + description: |- 20844 + Group is the API group to select resources from. 20845 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 20846 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20847 + type: string 20848 + kind: 20849 + description: |- 20850 + Kind of the API Group to select resources from. 20851 + Together with Group and Version it is capable of unambiguously 20852 + identifying and/or selecting resources. 20853 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20854 + type: string 20855 + labelSelector: 20856 + description: |- 20857 + LabelSelector is a string that follows the label selection expression 20858 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 20859 + It matches with the resource labels. 20860 + type: string 20861 + name: 20862 + description: Name to match resources with. 20863 + type: string 20864 + namespace: 20865 + description: Namespace to select resources from. 20866 + type: string 20867 + version: 20868 + description: |- 20869 + Version of the API Group to select resources from. 20870 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 20871 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 20872 + type: string 20873 + type: object 20874 + required: 20875 + - paths 20876 + type: object 20877 + type: array 20878 + mode: 20879 + description: |- 20880 + Mode defines how differences should be handled between the Helm manifest 20881 + and the manifest currently applied to the cluster. 20882 + If not explicitly set, it defaults to DiffModeDisabled. 20883 + enum: 20884 + - enabled 20885 + - warn 20886 + - disabled 20887 + type: string 20888 + type: object 20889 + install: 20890 + description: Install holds the configuration for Helm install actions 20891 + for this HelmRelease. 20892 + properties: 20893 + crds: 20894 + description: |- 20895 + CRDs upgrade CRDs from the Helm Chart's crds directory according 20896 + to the CRD upgrade policy provided here. Valid values are `Skip`, 20897 + `Create` or `CreateReplace`. Default is `Create` and if omitted 20898 + CRDs are installed but not updated. 20899 + 20900 + Skip: do neither install nor replace (update) any CRDs. 20901 + 20902 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 20903 + 20904 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 20905 + but not deleted. 20906 + 20907 + By default, CRDs are applied (installed) during Helm install action. 20908 + With this option users can opt in to CRD replace existing CRDs on Helm 20909 + install actions, which is not (yet) natively supported by Helm. 20910 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 20911 + enum: 20912 + - Skip 20913 + - Create 20914 + - CreateReplace 20915 + type: string 20916 + createNamespace: 20917 + description: |- 20918 + CreateNamespace tells the Helm install action to create the 20919 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 20920 + On uninstall, the namespace will not be garbage collected. 20921 + type: boolean 20922 + disableHooks: 20923 + description: DisableHooks prevents hooks from running during the 20924 + Helm install action. 20925 + type: boolean 20926 + disableOpenAPIValidation: 20927 + description: |- 20928 + DisableOpenAPIValidation prevents the Helm install action from validating 20929 + rendered templates against the Kubernetes OpenAPI Schema. 20930 + type: boolean 20931 + disableWait: 20932 + description: |- 20933 + DisableWait disables the waiting for resources to be ready after a Helm 20934 + install has been performed. 20935 + type: boolean 20936 + disableWaitForJobs: 20937 + description: |- 20938 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 20939 + install has been performed. 20940 + type: boolean 20941 + remediation: 20942 + description: |- 20943 + Remediation holds the remediation configuration for when the Helm install 20944 + action for the HelmRelease fails. The default is to not perform any action. 20945 + properties: 20946 + ignoreTestFailures: 20947 description: |- 20948 - APIVersion defines the versioned schema of this representation of an object. 20949 - Servers should convert recognized schemas to the latest internal value, and 20950 - may reject unrecognized values. 20951 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 20952 - type: string 20953 - kind: 20954 + IgnoreTestFailures tells the controller to skip remediation when the Helm 20955 + tests are run after an install action but fail. Defaults to 20956 + 'Test.IgnoreFailures'. 20957 + type: boolean 20958 + remediateLastFailure: 20959 description: |- 20960 - Kind is a string value representing the REST resource this object represents. 20961 - Servers may infer this from the endpoint the client submits requests to. 20962 - Cannot be updated. 20963 - In CamelCase. 20964 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 20965 + RemediateLastFailure tells the controller to remediate the last failure, when 20966 + no retries remain. Defaults to 'false'. 20967 + type: boolean 20968 + retries: 20969 + description: |- 20970 + Retries is the number of retries that should be attempted on failures before 20971 + bailing. Remediation, using an uninstall, is performed between each attempt. 20972 + Defaults to '0', a negative integer equals to unlimited retries. 20973 + type: integer 20974 + type: object 20975 + replace: 20976 + description: |- 20977 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 20978 + if that name is a deleted release which remains in the history. 20979 + type: boolean 20980 + skipCRDs: 20981 + description: |- 20982 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 20983 + CRDs are installed if not already present. 20984 + 20985 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 20986 + type: boolean 20987 + timeout: 20988 + description: |- 20989 + Timeout is the time to wait for any individual Kubernetes operation (like 20990 + Jobs for hooks) during the performance of a Helm install action. Defaults to 20991 + 'HelmReleaseSpec.Timeout'. 20992 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20993 + type: string 20994 + type: object 20995 + interval: 20996 + description: Interval at which to reconcile the Helm release. 20997 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 20998 + type: string 20999 + kubeConfig: 21000 + description: |- 21001 + KubeConfig for reconciling the HelmRelease on a remote cluster. 21002 + When used in combination with HelmReleaseSpec.ServiceAccountName, 21003 + forces the controller to act on behalf of that Service Account at the 21004 + target cluster. 21005 + If the --default-service-account flag is set, its value will be used as 21006 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 21007 + is empty. 21008 + properties: 21009 + secretRef: 21010 + description: |- 21011 + SecretRef holds the name of a secret that contains a key with 21012 + the kubeconfig file as the value. If no key is set, the key will default 21013 + to 'value'. 21014 + It is recommended that the kubeconfig is self-contained, and the secret 21015 + is regularly updated if credentials such as a cloud-access-token expire. 21016 + Cloud specific `cmd-path` auth helpers will not function without adding 21017 + binaries and credentials to the Pod that is responsible for reconciling 21018 + Kubernetes resources. 21019 + properties: 21020 + key: 21021 + description: Key in the Secret, when not specified an implementation-specific 21022 + default key is used. 21023 type: string 21024 - metadata: 21025 - type: object 21026 - spec: 21027 - description: ReceiverSpec defines the desired state of Receiver 21028 - properties: 21029 - events: 21030 - description: |- 21031 - A list of events to handle, 21032 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 21033 - items: 21034 + name: 21035 + description: Name of the Secret. 21036 + type: string 21037 + required: 21038 + - name 21039 + type: object 21040 + required: 21041 + - secretRef 21042 + type: object 21043 + maxHistory: 21044 + description: |- 21045 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 21046 + Use '0' for an unlimited number of revisions; defaults to '5'. 21047 + type: integer 21048 + persistentClient: 21049 + description: |- 21050 + PersistentClient tells the controller to use a persistent Kubernetes 21051 + client for this release. When enabled, the client will be reused for the 21052 + duration of the reconciliation, instead of being created and destroyed 21053 + for each (step of a) Helm action. 21054 + 21055 + This can improve performance, but may cause issues with some Helm charts 21056 + that for example do create Custom Resource Definitions during installation 21057 + outside Helm's CRD lifecycle hooks, which are then not observed to be 21058 + available by e.g. post-install hooks. 21059 + 21060 + If not set, it defaults to true. 21061 + type: boolean 21062 + postRenderers: 21063 + description: |- 21064 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 21065 + of their definition. 21066 + items: 21067 + description: PostRenderer contains a Helm PostRenderer specification. 21068 + properties: 21069 + kustomize: 21070 + description: Kustomization to apply as PostRenderer. 21071 + properties: 21072 + images: 21073 + description: |- 21074 + Images is a list of (image name, new name, new tag or digest) 21075 + for changing image names, tags or digests. This can also be achieved with a 21076 + patch, but this operator is simpler to specify. 21077 + items: 21078 + description: Image contains an image name, a new name, 21079 + a new tag or digest, which will replace the original 21080 + name and tag. 21081 + properties: 21082 + digest: 21083 + description: |- 21084 + Digest is the value used to replace the original image tag. 21085 + If digest is present NewTag value is ignored. 21086 + type: string 21087 + name: 21088 + description: Name is a tag-less image name. 21089 + type: string 21090 + newName: 21091 + description: NewName is the value used to replace 21092 + the original name. 21093 + type: string 21094 + newTag: 21095 + description: NewTag is the value used to replace the 21096 + original tag. 21097 + type: string 21098 + required: 21099 + - name 21100 + type: object 21101 + type: array 21102 + patches: 21103 + description: |- 21104 + Strategic merge and JSON patches, defined as inline YAML objects, 21105 + capable of targeting objects based on kind, label and annotation selectors. 21106 + items: 21107 + description: |- 21108 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 21109 + be applied to. 21110 + properties: 21111 + patch: 21112 + description: |- 21113 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 21114 + an array of operation objects. 21115 + type: string 21116 + target: 21117 + description: Target points to the resources that the 21118 + patch document should be applied to. 21119 + properties: 21120 + annotationSelector: 21121 + description: |- 21122 + AnnotationSelector is a string that follows the label selection expression 21123 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 21124 + It matches with the resource annotations. 21125 type: string 21126 - type: array 21127 - resources: 21128 - description: A list of resources to be notified about changes. 21129 - items: 21130 + group: 21131 description: |- 21132 - CrossNamespaceObjectReference contains enough information to let you locate the 21133 - typed referenced object at cluster level 21134 - properties: 21135 - apiVersion: 21136 - description: API version of the referent 21137 - type: string 21138 - kind: 21139 - description: Kind of the referent 21140 - enum: 21141 - - Bucket 21142 - - GitRepository 21143 - - Kustomization 21144 - - HelmRelease 21145 - - HelmChart 21146 - - HelmRepository 21147 - - ImageRepository 21148 - - ImagePolicy 21149 - - ImageUpdateAutomation 21150 - - OCIRepository 21151 - type: string 21152 - matchLabels: 21153 - additionalProperties: 21154 - type: string 21155 - description: |- 21156 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21157 - map is equivalent to an element of matchExpressions, whose key field is "key", the 21158 - operator is "In", and the values array contains only "value". The requirements are ANDed. 21159 - type: object 21160 - name: 21161 - description: Name of the referent 21162 - maxLength: 53 21163 - minLength: 1 21164 - type: string 21165 - namespace: 21166 - description: Namespace of the referent 21167 - maxLength: 53 21168 - minLength: 1 21169 - type: string 21170 - required: 21171 - - name 21172 - type: object 21173 - type: array 21174 - secretRef: 21175 - description: |- 21176 - Secret reference containing the token used 21177 - to validate the payload authenticity 21178 - properties: 21179 - name: 21180 - description: Name of the referent. 21181 - type: string 21182 - required: 21183 - - name 21184 + Group is the API group to select resources from. 21185 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 21186 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21187 + type: string 21188 + kind: 21189 + description: |- 21190 + Kind of the API Group to select resources from. 21191 + Together with Group and Version it is capable of unambiguously 21192 + identifying and/or selecting resources. 21193 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21194 + type: string 21195 + labelSelector: 21196 + description: |- 21197 + LabelSelector is a string that follows the label selection expression 21198 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 21199 + It matches with the resource labels. 21200 + type: string 21201 + name: 21202 + description: Name to match resources with. 21203 + type: string 21204 + namespace: 21205 + description: Namespace to select resources from. 21206 + type: string 21207 + version: 21208 + description: |- 21209 + Version of the API Group to select resources from. 21210 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 21211 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21212 + type: string 21213 type: object 21214 - suspend: 21215 - description: |- 21216 - This flag tells the controller to suspend subsequent events handling. 21217 - Defaults to false. 21218 - type: boolean 21219 - type: 21220 - description: |- 21221 - Type of webhook sender, used to determine 21222 - the validation procedure and payload deserialization. 21223 - enum: 21224 - - generic 21225 - - generic-hmac 21226 - - github 21227 - - gitlab 21228 - - bitbucket 21229 - - harbor 21230 - - dockerhub 21231 - - quay 21232 - - gcr 21233 - - nexus 21234 - - acr 21235 - type: string 21236 - required: 21237 - - resources 21238 - - type 21239 - type: object 21240 - status: 21241 - default: 21242 - observedGeneration: -1 21243 - description: ReceiverStatus defines the observed state of Receiver 21244 - properties: 21245 - conditions: 21246 + required: 21247 + - patch 21248 + type: object 21249 + type: array 21250 + patchesJson6902: 21251 + description: |- 21252 + JSON 6902 patches, defined as inline YAML objects. 21253 + Deprecated: use Patches instead. 21254 + items: 21255 + description: JSON6902Patch contains a JSON6902 patch and 21256 + the target the patch should be applied to. 21257 + properties: 21258 + patch: 21259 + description: Patch contains the JSON6902 patch document 21260 + with an array of operation objects. 21261 items: 21262 - description: "Condition contains details for one aspect of the current state of this API 21263 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 21264 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 21265 - the observations of a foo's current state.\n\t // Known .status.conditions.type 21266 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 21267 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 21268 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 21269 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 21270 - fields\n\t}" 21271 - properties: 21272 - lastTransitionTime: 21273 - description: |- 21274 - lastTransitionTime is the last time the condition transitioned from one status to another. 21275 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21276 - format: date-time 21277 - type: string 21278 - message: 21279 - description: |- 21280 - message is a human readable message indicating details about the transition. 21281 - This may be an empty string. 21282 - maxLength: 32768 21283 - type: string 21284 - observedGeneration: 21285 - description: |- 21286 - observedGeneration represents the .metadata.generation that the condition was set based upon. 21287 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21288 - with respect to the current state of the instance. 21289 - format: int64 21290 - minimum: 0 21291 - type: integer 21292 - reason: 21293 - description: |- 21294 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 21295 - Producers of specific condition types may define expected values and meanings for this field, 21296 - and whether the values are considered a guaranteed API. 21297 - The value should be a CamelCase string. 21298 - This field may not be empty. 21299 - maxLength: 1024 21300 - minLength: 1 21301 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21302 - type: string 21303 - status: 21304 - description: status of the condition, one of True, False, Unknown. 21305 - enum: 21306 - - "True" 21307 - - "False" 21308 - - Unknown 21309 - type: string 21310 - type: 21311 - description: |- 21312 - type of condition in CamelCase or in foo.example.com/CamelCase. 21313 - --- 21314 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 21315 - useful (see .node.status.conditions), the ability to deconflict is important. 21316 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 21317 - maxLength: 316 21318 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21319 - type: string 21320 - required: 21321 - - lastTransitionTime 21322 - - message 21323 - - reason 21324 - - status 21325 - - type 21326 - type: object 21327 + description: |- 21328 + JSON6902 is a JSON6902 operation object. 21329 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 21330 + properties: 21331 + from: 21332 + description: |- 21333 + From contains a JSON-pointer value that references a location within the target document where the operation is 21334 + performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. 21335 + type: string 21336 + op: 21337 + description: |- 21338 + Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or 21339 + "test". 21340 + https://datatracker.ietf.org/doc/html/rfc6902#section-4 21341 + enum: 21342 + - test 21343 + - remove 21344 + - add 21345 + - replace 21346 + - move 21347 + - copy 21348 + type: string 21349 + path: 21350 + description: |- 21351 + Path contains the JSON-pointer value that references a location within the target document where the operation 21352 + is performed. The meaning of the value depends on the value of Op. 21353 + type: string 21354 + value: 21355 + description: |- 21356 + Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into 21357 + account by all operations. 21358 + x-kubernetes-preserve-unknown-fields: true 21359 + required: 21360 + - op 21361 + - path 21362 + type: object 21363 type: array 21364 - observedGeneration: 21365 - description: ObservedGeneration is the last observed generation. 21366 - format: int64 21367 - type: integer 21368 - url: 21369 - description: |- 21370 - Generated webhook URL in the format 21371 - of '/hook/sha256sum(token+name+namespace)'. 21372 - type: string 21373 - type: object 21374 + target: 21375 + description: Target points to the resources that the 21376 + patch document should be applied to. 21377 + properties: 21378 + annotationSelector: 21379 + description: |- 21380 + AnnotationSelector is a string that follows the label selection expression 21381 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 21382 + It matches with the resource annotations. 21383 + type: string 21384 + group: 21385 + description: |- 21386 + Group is the API group to select resources from. 21387 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 21388 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21389 + type: string 21390 + kind: 21391 + description: |- 21392 + Kind of the API Group to select resources from. 21393 + Together with Group and Version it is capable of unambiguously 21394 + identifying and/or selecting resources. 21395 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21396 + type: string 21397 + labelSelector: 21398 + description: |- 21399 + LabelSelector is a string that follows the label selection expression 21400 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 21401 + It matches with the resource labels. 21402 + type: string 21403 + name: 21404 + description: Name to match resources with. 21405 + type: string 21406 + namespace: 21407 + description: Namespace to select resources from. 21408 + type: string 21409 + version: 21410 + description: |- 21411 + Version of the API Group to select resources from. 21412 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 21413 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 21414 + type: string 21415 + type: object 21416 + required: 21417 + - patch 21418 + - target 21419 + type: object 21420 + type: array 21421 + patchesStrategicMerge: 21422 + description: |- 21423 + Strategic merge patches, defined as inline YAML objects. 21424 + Deprecated: use Patches instead. 21425 + items: 21426 + x-kubernetes-preserve-unknown-fields: true 21427 + type: array 21428 + type: object 21429 + type: object 21430 + type: array 21431 + releaseName: 21432 + description: |- 21433 + ReleaseName used for the Helm release. Defaults to a composition of 21434 + '[TargetNamespace-]Name'. 21435 + maxLength: 53 21436 + minLength: 1 21437 + type: string 21438 + rollback: 21439 + description: Rollback holds the configuration for Helm rollback actions 21440 + for this HelmRelease. 21441 + properties: 21442 + cleanupOnFail: 21443 + description: |- 21444 + CleanupOnFail allows deletion of new resources created during the Helm 21445 + rollback action when it fails. 21446 + type: boolean 21447 + disableHooks: 21448 + description: DisableHooks prevents hooks from running during the 21449 + Helm rollback action. 21450 + type: boolean 21451 + disableWait: 21452 + description: |- 21453 + DisableWait disables the waiting for resources to be ready after a Helm 21454 + rollback has been performed. 21455 + type: boolean 21456 + disableWaitForJobs: 21457 + description: |- 21458 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 21459 + rollback has been performed. 21460 + type: boolean 21461 + force: 21462 + description: Force forces resource updates through a replacement 21463 + strategy. 21464 + type: boolean 21465 + recreate: 21466 + description: Recreate performs pod restarts for the resource if 21467 + applicable. 21468 + type: boolean 21469 + timeout: 21470 + description: |- 21471 + Timeout is the time to wait for any individual Kubernetes operation (like 21472 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 21473 + 'HelmReleaseSpec.Timeout'. 21474 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21475 + type: string 21476 type: object 21477 - served: true 21478 - storage: false 21479 - subresources: 21480 - status: {} 21481 - - additionalPrinterColumns: 21482 - - jsonPath: .metadata.creationTimestamp 21483 - name: Age 21484 - type: date 21485 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 21486 - name: Ready 21487 - type: string 21488 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 21489 - name: Status 21490 - type: string 21491 - deprecated: true 21492 - deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 21493 - name: v1beta2 21494 - schema: 21495 - openAPIV3Schema: 21496 - description: Receiver is the Schema for the receivers API. 21497 + serviceAccountName: 21498 + description: |- 21499 + The name of the Kubernetes service account to impersonate 21500 + when reconciling this HelmRelease. 21501 + maxLength: 253 21502 + minLength: 1 21503 + type: string 21504 + storageNamespace: 21505 + description: |- 21506 + StorageNamespace used for the Helm storage. 21507 + Defaults to the namespace of the HelmRelease. 21508 + maxLength: 63 21509 + minLength: 1 21510 + type: string 21511 + suspend: 21512 + description: |- 21513 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 21514 + it does not apply to already started reconciliations. Defaults to false. 21515 + type: boolean 21516 + targetNamespace: 21517 + description: |- 21518 + TargetNamespace to target when performing operations for the HelmRelease. 21519 + Defaults to the namespace of the HelmRelease. 21520 + maxLength: 63 21521 + minLength: 1 21522 + type: string 21523 + test: 21524 + description: Test holds the configuration for Helm test actions for 21525 + this HelmRelease. 21526 properties: 21527 - apiVersion: 21528 + enable: 21529 + description: |- 21530 + Enable enables Helm test actions for this HelmRelease after an Helm install 21531 + or upgrade action has been performed. 21532 + type: boolean 21533 + filters: 21534 + description: Filters is a list of tests to run or exclude from 21535 + running. 21536 + items: 21537 + description: Filter holds the configuration for individual Helm 21538 + test filters. 21539 + properties: 21540 + exclude: 21541 + description: Exclude specifies whether the named test should 21542 + be excluded. 21543 + type: boolean 21544 + name: 21545 + description: Name is the name of the test. 21546 + maxLength: 253 21547 + minLength: 1 21548 + type: string 21549 + required: 21550 + - name 21551 + type: object 21552 + type: array 21553 + ignoreFailures: 21554 + description: |- 21555 + IgnoreFailures tells the controller to skip remediation when the Helm tests 21556 + are run but fail. Can be overwritten for tests run after install or upgrade 21557 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 21558 + type: boolean 21559 + timeout: 21560 + description: |- 21561 + Timeout is the time to wait for any individual Kubernetes operation during 21562 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 21563 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21564 + type: string 21565 + type: object 21566 + timeout: 21567 + description: |- 21568 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 21569 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 21570 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21571 + type: string 21572 + uninstall: 21573 + description: Uninstall holds the configuration for Helm uninstall 21574 + actions for this HelmRelease. 21575 + properties: 21576 + deletionPropagation: 21577 + default: background 21578 + description: |- 21579 + DeletionPropagation specifies the deletion propagation policy when 21580 + a Helm uninstall is performed. 21581 + enum: 21582 + - background 21583 + - foreground 21584 + - orphan 21585 + type: string 21586 + disableHooks: 21587 + description: DisableHooks prevents hooks from running during the 21588 + Helm rollback action. 21589 + type: boolean 21590 + disableWait: 21591 + description: |- 21592 + DisableWait disables waiting for all the resources to be deleted after 21593 + a Helm uninstall is performed. 21594 + type: boolean 21595 + keepHistory: 21596 + description: |- 21597 + KeepHistory tells Helm to remove all associated resources and mark the 21598 + release as deleted, but retain the release history. 21599 + type: boolean 21600 + timeout: 21601 + description: |- 21602 + Timeout is the time to wait for any individual Kubernetes operation (like 21603 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 21604 + to 'HelmReleaseSpec.Timeout'. 21605 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21606 + type: string 21607 + type: object 21608 + upgrade: 21609 + description: Upgrade holds the configuration for Helm upgrade actions 21610 + for this HelmRelease. 21611 + properties: 21612 + cleanupOnFail: 21613 + description: |- 21614 + CleanupOnFail allows deletion of new resources created during the Helm 21615 + upgrade action when it fails. 21616 + type: boolean 21617 + crds: 21618 + description: |- 21619 + CRDs upgrade CRDs from the Helm Chart's crds directory according 21620 + to the CRD upgrade policy provided here. Valid values are `Skip`, 21621 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 21622 + CRDs are neither installed nor upgraded. 21623 + 21624 + Skip: do neither install nor replace (update) any CRDs. 21625 + 21626 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 21627 + 21628 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 21629 + but not deleted. 21630 + 21631 + By default, CRDs are not applied during Helm upgrade action. With this 21632 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 21633 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 21634 + enum: 21635 + - Skip 21636 + - Create 21637 + - CreateReplace 21638 + type: string 21639 + disableHooks: 21640 + description: DisableHooks prevents hooks from running during the 21641 + Helm upgrade action. 21642 + type: boolean 21643 + disableOpenAPIValidation: 21644 + description: |- 21645 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 21646 + rendered templates against the Kubernetes OpenAPI Schema. 21647 + type: boolean 21648 + disableWait: 21649 + description: |- 21650 + DisableWait disables the waiting for resources to be ready after a Helm 21651 + upgrade has been performed. 21652 + type: boolean 21653 + disableWaitForJobs: 21654 + description: |- 21655 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 21656 + upgrade has been performed. 21657 + type: boolean 21658 + force: 21659 + description: Force forces resource updates through a replacement 21660 + strategy. 21661 + type: boolean 21662 + preserveValues: 21663 + description: |- 21664 + PreserveValues will make Helm reuse the last release's values and merge in 21665 + overrides from 'Values'. Setting this flag makes the HelmRelease 21666 + non-declarative. 21667 + type: boolean 21668 + remediation: 21669 + description: |- 21670 + Remediation holds the remediation configuration for when the Helm upgrade 21671 + action for the HelmRelease fails. The default is to not perform any action. 21672 + properties: 21673 + ignoreTestFailures: 21674 description: |- 21675 - APIVersion defines the versioned schema of this representation of an object. 21676 - Servers should convert recognized schemas to the latest internal value, and 21677 - may reject unrecognized values. 21678 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 21679 - type: string 21680 - kind: 21681 + IgnoreTestFailures tells the controller to skip remediation when the Helm 21682 + tests are run after an upgrade action but fail. 21683 + Defaults to 'Test.IgnoreFailures'. 21684 + type: boolean 21685 + remediateLastFailure: 21686 + description: |- 21687 + RemediateLastFailure tells the controller to remediate the last failure, when 21688 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 21689 + type: boolean 21690 + retries: 21691 description: |- 21692 - Kind is a string value representing the REST resource this object represents. 21693 - Servers may infer this from the endpoint the client submits requests to. 21694 - Cannot be updated. 21695 - In CamelCase. 21696 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 21697 + Retries is the number of retries that should be attempted on failures before 21698 + bailing. Remediation, using 'Strategy', is performed between each attempt. 21699 + Defaults to '0', a negative integer equals to unlimited retries. 21700 + type: integer 21701 + strategy: 21702 + description: Strategy to use for failure remediation. Defaults 21703 + to 'rollback'. 21704 + enum: 21705 + - rollback 21706 + - uninstall 21707 type: string 21708 - metadata: 21709 - type: object 21710 - spec: 21711 - description: ReceiverSpec defines the desired state of the Receiver. 21712 - properties: 21713 - events: 21714 - description: |- 21715 - Events specifies the list of event types to handle, 21716 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 21717 - items: 21718 - type: string 21719 - type: array 21720 - interval: 21721 - description: Interval at which to reconcile the Receiver with its Secret references. 21722 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21723 - type: string 21724 - resources: 21725 - description: A list of resources to be notified about changes. 21726 - items: 21727 - description: |- 21728 - CrossNamespaceObjectReference contains enough information to let you locate the 21729 - typed referenced object at cluster level 21730 - properties: 21731 - apiVersion: 21732 - description: API version of the referent 21733 - type: string 21734 - kind: 21735 - description: Kind of the referent 21736 - enum: 21737 - - Bucket 21738 - - GitRepository 21739 - - Kustomization 21740 - - HelmRelease 21741 - - HelmChart 21742 - - HelmRepository 21743 - - ImageRepository 21744 - - ImagePolicy 21745 - - ImageUpdateAutomation 21746 - - OCIRepository 21747 - type: string 21748 - matchLabels: 21749 - additionalProperties: 21750 - type: string 21751 - description: |- 21752 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 21753 - map is equivalent to an element of matchExpressions, whose key field is "key", the 21754 - operator is "In", and the values array contains only "value". The requirements are ANDed. 21755 - MatchLabels requires the name to be set to `*`. 21756 - type: object 21757 - name: 21758 - description: |- 21759 - Name of the referent 21760 - If multiple resources are targeted `*` may be set. 21761 - maxLength: 53 21762 - minLength: 1 21763 - type: string 21764 - namespace: 21765 - description: Namespace of the referent 21766 - maxLength: 53 21767 - minLength: 1 21768 - type: string 21769 - required: 21770 - - kind 21771 - - name 21772 - type: object 21773 - type: array 21774 - secretRef: 21775 - description: |- 21776 - SecretRef specifies the Secret containing the token used 21777 - to validate the payload authenticity. 21778 - properties: 21779 - name: 21780 - description: Name of the referent. 21781 - type: string 21782 - required: 21783 - - name 21784 - type: object 21785 - suspend: 21786 - description: |- 21787 - Suspend tells the controller to suspend subsequent 21788 - events handling for this receiver. 21789 - type: boolean 21790 - type: 21791 - description: |- 21792 - Type of webhook sender, used to determine 21793 - the validation procedure and payload deserialization. 21794 - enum: 21795 - - generic 21796 - - generic-hmac 21797 - - github 21798 - - gitlab 21799 - - bitbucket 21800 - - harbor 21801 - - dockerhub 21802 - - quay 21803 - - gcr 21804 - - nexus 21805 - - acr 21806 - type: string 21807 - required: 21808 - - resources 21809 - - type 21810 - type: object 21811 + type: object 21812 + timeout: 21813 + description: |- 21814 + Timeout is the time to wait for any individual Kubernetes operation (like 21815 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 21816 + 'HelmReleaseSpec.Timeout'. 21817 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 21818 + type: string 21819 + type: object 21820 + values: 21821 + description: Values holds the values for this Helm release. 21822 + x-kubernetes-preserve-unknown-fields: true 21823 + valuesFrom: 21824 + description: |- 21825 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 21826 + and information about how they should be merged. 21827 + items: 21828 + description: |- 21829 + ValuesReference contains a reference to a resource containing Helm values, 21830 + and optionally the key they can be found at. 21831 + properties: 21832 + kind: 21833 + description: Kind of the values referent, valid values are ('Secret', 21834 + 'ConfigMap'). 21835 + enum: 21836 + - Secret 21837 + - ConfigMap 21838 + type: string 21839 + name: 21840 + description: |- 21841 + Name of the values referent. Should reside in the same namespace as the 21842 + referring resource. 21843 + maxLength: 253 21844 + minLength: 1 21845 + type: string 21846 + optional: 21847 + description: |- 21848 + Optional marks this ValuesReference as optional. When set, a not found error 21849 + for the values reference is ignored, but any ValuesKey, TargetPath or 21850 + transient error will still result in a reconciliation failure. 21851 + type: boolean 21852 + targetPath: 21853 + description: |- 21854 + TargetPath is the YAML dot notation path the value should be merged at. When 21855 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 21856 + which results in the values getting merged at the root. 21857 + maxLength: 250 21858 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 21859 + type: string 21860 + valuesKey: 21861 + description: |- 21862 + ValuesKey is the data key where the values.yaml or a specific value can be 21863 + found at. Defaults to 'values.yaml'. 21864 + maxLength: 253 21865 + pattern: ^[\-._a-zA-Z0-9]+$ 21866 + type: string 21867 + required: 21868 + - kind 21869 + - name 21870 + type: object 21871 + type: array 21872 + required: 21873 + - interval 21874 + type: object 21875 + x-kubernetes-validations: 21876 + - message: either chart or chartRef must be set 21877 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 21878 + && has(self.chartRef)) 21879 + status: 21880 + default: 21881 + observedGeneration: -1 21882 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 21883 + properties: 21884 + conditions: 21885 + description: Conditions holds the conditions for the HelmRelease. 21886 + items: 21887 + description: Condition contains details for one aspect of the current 21888 + state of this API Resource. 21889 + properties: 21890 + lastTransitionTime: 21891 + description: |- 21892 + lastTransitionTime is the last time the condition transitioned from one status to another. 21893 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 21894 + format: date-time 21895 + type: string 21896 + message: 21897 + description: |- 21898 + message is a human readable message indicating details about the transition. 21899 + This may be an empty string. 21900 + maxLength: 32768 21901 + type: string 21902 + observedGeneration: 21903 + description: |- 21904 + observedGeneration represents the .metadata.generation that the condition was set based upon. 21905 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 21906 + with respect to the current state of the instance. 21907 + format: int64 21908 + minimum: 0 21909 + type: integer 21910 + reason: 21911 + description: |- 21912 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 21913 + Producers of specific condition types may define expected values and meanings for this field, 21914 + and whether the values are considered a guaranteed API. 21915 + The value should be a CamelCase string. 21916 + This field may not be empty. 21917 + maxLength: 1024 21918 + minLength: 1 21919 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 21920 + type: string 21921 status: 21922 - default: 21923 - observedGeneration: -1 21924 - description: ReceiverStatus defines the observed state of the Receiver. 21925 + description: status of the condition, one of True, False, Unknown. 21926 + enum: 21927 + - "True" 21928 + - "False" 21929 + - Unknown 21930 + type: string 21931 + type: 21932 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 21933 + maxLength: 316 21934 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 21935 + type: string 21936 + required: 21937 + - lastTransitionTime 21938 + - message 21939 + - reason 21940 + - status 21941 + - type 21942 + type: object 21943 + type: array 21944 + failures: 21945 + description: |- 21946 + Failures is the reconciliation failure count against the latest desired 21947 + state. It is reset after a successful reconciliation. 21948 + format: int64 21949 + type: integer 21950 + helmChart: 21951 + description: |- 21952 + HelmChart is the namespaced name of the HelmChart resource created by 21953 + the controller for the HelmRelease. 21954 + type: string 21955 + history: 21956 + description: |- 21957 + History holds the history of Helm releases performed for this HelmRelease 21958 + up to the last successfully completed release. 21959 + items: 21960 + description: |- 21961 + Snapshot captures a point-in-time copy of the status information for a Helm release, 21962 + as managed by the controller. 21963 + properties: 21964 + apiVersion: 21965 + description: |- 21966 + APIVersion is the API version of the Snapshot. 21967 + Provisional: when the calculation method of the Digest field is changed, 21968 + this field will be used to distinguish between the old and new methods. 21969 + type: string 21970 + appVersion: 21971 + description: AppVersion is the chart app version of the release 21972 + object in storage. 21973 + type: string 21974 + chartName: 21975 + description: ChartName is the chart name of the release object 21976 + in storage. 21977 + type: string 21978 + chartVersion: 21979 + description: |- 21980 + ChartVersion is the chart version of the release object in 21981 + storage. 21982 + type: string 21983 + configDigest: 21984 + description: |- 21985 + ConfigDigest is the checksum of the config (better known as 21986 + "values") of the release object in storage. 21987 + It has the format of `<algo>:<checksum>`. 21988 + type: string 21989 + deleted: 21990 + description: Deleted is when the release was deleted. 21991 + format: date-time 21992 + type: string 21993 + digest: 21994 + description: |- 21995 + Digest is the checksum of the release object in storage. 21996 + It has the format of `<algo>:<checksum>`. 21997 + type: string 21998 + firstDeployed: 21999 + description: FirstDeployed is when the release was first deployed. 22000 + format: date-time 22001 + type: string 22002 + lastDeployed: 22003 + description: LastDeployed is when the release was last deployed. 22004 + format: date-time 22005 + type: string 22006 + name: 22007 + description: Name is the name of the release. 22008 + type: string 22009 + namespace: 22010 + description: Namespace is the namespace the release is deployed 22011 + to. 22012 + type: string 22013 + ociDigest: 22014 + description: OCIDigest is the digest of the OCI artifact associated 22015 + with the release. 22016 + type: string 22017 + status: 22018 + description: Status is the current state of the release. 22019 + type: string 22020 + testHooks: 22021 + additionalProperties: 22022 + description: |- 22023 + TestHookStatus holds the status information for a test hook as observed 22024 + to be run by the controller. 22025 properties: 22026 - conditions: 22027 - description: Conditions holds the conditions for the Receiver. 22028 - items: 22029 - description: "Condition contains details for one aspect of the current state of this API 22030 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 22031 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 22032 - the observations of a foo's current state.\n\t // Known .status.conditions.type 22033 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 22034 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 22035 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 22036 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 22037 - fields\n\t}" 22038 - properties: 22039 - lastTransitionTime: 22040 - description: |- 22041 - lastTransitionTime is the last time the condition transitioned from one status to another. 22042 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22043 - format: date-time 22044 - type: string 22045 - message: 22046 - description: |- 22047 - message is a human readable message indicating details about the transition. 22048 - This may be an empty string. 22049 - maxLength: 32768 22050 - type: string 22051 - observedGeneration: 22052 - description: |- 22053 - observedGeneration represents the .metadata.generation that the condition was set based upon. 22054 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22055 - with respect to the current state of the instance. 22056 - format: int64 22057 - minimum: 0 22058 - type: integer 22059 - reason: 22060 - description: |- 22061 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 22062 - Producers of specific condition types may define expected values and meanings for this field, 22063 - and whether the values are considered a guaranteed API. 22064 - The value should be a CamelCase string. 22065 - This field may not be empty. 22066 - maxLength: 1024 22067 - minLength: 1 22068 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22069 - type: string 22070 - status: 22071 - description: status of the condition, one of True, False, Unknown. 22072 - enum: 22073 - - "True" 22074 - - "False" 22075 - - Unknown 22076 - type: string 22077 - type: 22078 - description: |- 22079 - type of condition in CamelCase or in foo.example.com/CamelCase. 22080 - --- 22081 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 22082 - useful (see .node.status.conditions), the ability to deconflict is important. 22083 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 22084 - maxLength: 316 22085 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22086 - type: string 22087 - required: 22088 - - lastTransitionTime 22089 - - message 22090 - - reason 22091 - - status 22092 - - type 22093 - type: object 22094 - type: array 22095 - lastHandledReconcileAt: 22096 - description: |- 22097 - LastHandledReconcileAt holds the value of the most recent 22098 - reconcile request value, so a change of the annotation value 22099 - can be detected. 22100 - type: string 22101 - observedGeneration: 22102 - description: ObservedGeneration is the last observed generation of the Receiver object. 22103 - format: int64 22104 - type: integer 22105 - url: 22106 - description: |- 22107 - URL is the generated incoming webhook address in the format 22108 - of '/hook/sha256sum(token+name+namespace)'. 22109 - Deprecated: Replaced by WebhookPath. 22110 - type: string 22111 - webhookPath: 22112 - description: |- 22113 - WebhookPath is the generated incoming webhook address in the format 22114 - of '/hook/sha256sum(token+name+namespace)'. 22115 - type: string 22116 + lastCompleted: 22117 + description: LastCompleted is the time the test hook last 22118 + completed. 22119 + format: date-time 22120 + type: string 22121 + lastStarted: 22122 + description: LastStarted is the time the test hook was 22123 + last started. 22124 + format: date-time 22125 + type: string 22126 + phase: 22127 + description: Phase the test hook was observed to be in. 22128 + type: string 22129 type: object 22130 - type: object 22131 - served: true 22132 - storage: false 22133 - subresources: 22134 - status: {} 22135 + description: |- 22136 + TestHooks is the list of test hooks for the release as observed to be 22137 + run by the controller. 22138 + type: object 22139 + version: 22140 + description: Version is the version of the release object in 22141 + storage. 22142 + type: integer 22143 + required: 22144 + - chartName 22145 + - chartVersion 22146 + - configDigest 22147 + - digest 22148 + - firstDeployed 22149 + - lastDeployed 22150 + - name 22151 + - namespace 22152 + - status 22153 + - version 22154 + type: object 22155 + type: array 22156 + installFailures: 22157 + description: |- 22158 + InstallFailures is the install failure count against the latest desired 22159 + state. It is reset after a successful reconciliation. 22160 + format: int64 22161 + type: integer 22162 + lastAppliedRevision: 22163 + description: |- 22164 + LastAppliedRevision is the revision of the last successfully applied 22165 + source. 22166 + Deprecated: the revision can now be found in the History. 22167 + type: string 22168 + lastAttemptedConfigDigest: 22169 + description: |- 22170 + LastAttemptedConfigDigest is the digest for the config (better known as 22171 + "values") of the last reconciliation attempt. 22172 + type: string 22173 + lastAttemptedGeneration: 22174 + description: |- 22175 + LastAttemptedGeneration is the last generation the controller attempted 22176 + to reconcile. 22177 + format: int64 22178 + type: integer 22179 + lastAttemptedReleaseAction: 22180 + description: |- 22181 + LastAttemptedReleaseAction is the last release action performed for this 22182 + HelmRelease. It is used to determine the active remediation strategy. 22183 + enum: 22184 + - install 22185 + - upgrade 22186 + type: string 22187 + lastAttemptedRevision: 22188 + description: |- 22189 + LastAttemptedRevision is the Source revision of the last reconciliation 22190 + attempt. For OCIRepository sources, the 12 first characters of the digest are 22191 + appended to the chart version e.g. "1.2.3+1234567890ab". 22192 + type: string 22193 + lastAttemptedRevisionDigest: 22194 + description: |- 22195 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 22196 + This is only set for OCIRepository sources. 22197 + type: string 22198 + lastAttemptedValuesChecksum: 22199 + description: |- 22200 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 22201 + reconciliation attempt. 22202 + Deprecated: Use LastAttemptedConfigDigest instead. 22203 + type: string 22204 + lastHandledForceAt: 22205 + description: |- 22206 + LastHandledForceAt holds the value of the most recent force request 22207 + value, so a change of the annotation value can be detected. 22208 + type: string 22209 + lastHandledReconcileAt: 22210 + description: |- 22211 + LastHandledReconcileAt holds the value of the most recent 22212 + reconcile request value, so a change of the annotation value 22213 + can be detected. 22214 + type: string 22215 + lastHandledResetAt: 22216 + description: |- 22217 + LastHandledResetAt holds the value of the most recent reset request 22218 + value, so a change of the annotation value can be detected. 22219 + type: string 22220 + lastReleaseRevision: 22221 + description: |- 22222 + LastReleaseRevision is the revision of the last successful Helm release. 22223 + Deprecated: Use History instead. 22224 + type: integer 22225 + observedGeneration: 22226 + description: ObservedGeneration is the last observed generation. 22227 + format: int64 22228 + type: integer 22229 + observedPostRenderersDigest: 22230 + description: |- 22231 + ObservedPostRenderersDigest is the digest for the post-renderers of 22232 + the last successful reconciliation attempt. 22233 + type: string 22234 + storageNamespace: 22235 + description: |- 22236 + StorageNamespace is the namespace of the Helm release storage for the 22237 + current release. 22238 + maxLength: 63 22239 + minLength: 1 22240 + type: string 22241 + upgradeFailures: 22242 + description: |- 22243 + UpgradeFailures is the upgrade failure count against the latest desired 22244 + state. It is reset after a successful reconciliation. 22245 + format: int64 22246 + type: integer 22247 + type: object 22248 + type: object 22249 + served: true 22250 + storage: false 22251 + subresources: 22252 + status: {} 22253 --- 22254 apiVersion: v1 22255 kind: ServiceAccount 22256 metadata: 22257 - labels: 22258 - app.kubernetes.io/component: notification-controller 22259 - app.kubernetes.io/instance: flux-system 22260 - app.kubernetes.io/part-of: flux 22261 - app.kubernetes.io/version: v2.3.0 22262 - name: notification-controller 22263 - namespace: flux-system 22264 ---- 22265 -apiVersion: v1 22266 -kind: Service 22267 -metadata: 22268 - labels: 22269 - app.kubernetes.io/component: notification-controller 22270 - app.kubernetes.io/instance: flux-system 22271 - app.kubernetes.io/part-of: flux 22272 - app.kubernetes.io/version: v2.3.0 22273 - control-plane: controller 22274 - name: notification-controller 22275 - namespace: flux-system 22276 -spec: 22277 - ports: 22278 - - name: http 22279 - port: 80 22280 - protocol: TCP 22281 - targetPort: http 22282 - selector: 22283 - app: notification-controller 22284 - type: ClusterIP 22285 ---- 22286 -apiVersion: v1 22287 -kind: Service 22288 -metadata: 22289 - labels: 22290 - app.kubernetes.io/component: notification-controller 22291 - app.kubernetes.io/instance: flux-system 22292 - app.kubernetes.io/part-of: flux 22293 - app.kubernetes.io/version: v2.3.0 22294 - control-plane: controller 22295 - name: webhook-receiver 22296 - namespace: flux-system 22297 -spec: 22298 - ports: 22299 - - name: http 22300 - port: 80 22301 - protocol: TCP 22302 - targetPort: http-webhook 22303 - selector: 22304 - app: notification-controller 22305 - type: ClusterIP 22306 + labels: 22307 + app.kubernetes.io/component: helm-controller 22308 + app.kubernetes.io/instance: flux-system 22309 + app.kubernetes.io/part-of: flux 22310 + app.kubernetes.io/version: v2.4.0 22311 + name: helm-controller 22312 + namespace: flux-system 22313 --- 22314 apiVersion: apps/v1 22315 kind: Deployment 22316 metadata: 22317 - labels: 22318 - app.kubernetes.io/component: notification-controller 22319 - app.kubernetes.io/instance: flux-system 22320 - app.kubernetes.io/part-of: flux 22321 - app.kubernetes.io/version: v2.3.0 22322 - control-plane: controller 22323 - name: notification-controller 22324 - namespace: flux-system 22325 + labels: 22326 + app.kubernetes.io/component: helm-controller 22327 + app.kubernetes.io/instance: flux-system 22328 + app.kubernetes.io/part-of: flux 22329 + app.kubernetes.io/version: v2.4.0 22330 + control-plane: controller 22331 + name: helm-controller 22332 + namespace: flux-system 22333 spec: 22334 - replicas: 1 22335 - selector: 22336 - matchLabels: 22337 - app: notification-controller 22338 - template: 22339 - metadata: 22340 - annotations: 22341 - prometheus.io/port: "8080" 22342 - prometheus.io/scrape: "true" 22343 - labels: 22344 - app: notification-controller 22345 - spec: 22346 - containers: 22347 - - args: 22348 - - --watch-all-namespaces=true 22349 - - --log-level=info 22350 - - --log-encoding=json 22351 - - --enable-leader-election 22352 - env: 22353 - - name: RUNTIME_NAMESPACE 22354 - valueFrom: 22355 - fieldRef: 22356 - fieldPath: metadata.namespace 22357 - - name: GOMAXPROCS 22358 - valueFrom: 22359 - resourceFieldRef: 22360 - containerName: manager 22361 - resource: limits.cpu 22362 - - name: GOMEMLIMIT 22363 - valueFrom: 22364 - resourceFieldRef: 22365 - containerName: manager 22366 - resource: limits.memory 22367 - image: ghcr.io/fluxcd/notification-controller:v1.3.0 22368 - imagePullPolicy: IfNotPresent 22369 - livenessProbe: 22370 - httpGet: 22371 - path: /healthz 22372 - port: healthz 22373 - name: manager 22374 - ports: 22375 - - containerPort: 9090 22376 - name: http 22377 - protocol: TCP 22378 - - containerPort: 9292 22379 - name: http-webhook 22380 - protocol: TCP 22381 - - containerPort: 8080 22382 - name: http-prom 22383 - protocol: TCP 22384 - - containerPort: 9440 22385 - name: healthz 22386 - protocol: TCP 22387 - readinessProbe: 22388 - httpGet: 22389 - path: /readyz 22390 - port: healthz 22391 - resources: 22392 - limits: 22393 - cpu: 1000m 22394 - memory: 1Gi 22395 - requests: 22396 - cpu: 100m 22397 - memory: 64Mi 22398 - securityContext: 22399 - allowPrivilegeEscalation: false 22400 - capabilities: 22401 - drop: 22402 - - ALL 22403 - readOnlyRootFilesystem: true 22404 - runAsNonRoot: true 22405 - seccompProfile: 22406 - type: RuntimeDefault 22407 - volumeMounts: 22408 - - mountPath: /tmp 22409 - name: temp 22410 - nodeSelector: 22411 - kubernetes.io/os: linux 22412 - securityContext: 22413 - fsGroup: 1337 22414 - serviceAccountName: notification-controller 22415 - terminationGracePeriodSeconds: 10 22416 - volumes: 22417 - - emptyDir: {} 22418 - name: temp 22419 + replicas: 1 22420 + selector: 22421 + matchLabels: 22422 + app: helm-controller 22423 + template: 22424 + metadata: 22425 + annotations: 22426 + prometheus.io/port: "8080" 22427 + prometheus.io/scrape: "true" 22428 + labels: 22429 + app: helm-controller 22430 + spec: 22431 + containers: 22432 + - args: 22433 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 22434 + - --watch-all-namespaces=true 22435 + - --log-level=info 22436 + - --log-encoding=json 22437 + - --enable-leader-election 22438 + env: 22439 + - name: RUNTIME_NAMESPACE 22440 + valueFrom: 22441 + fieldRef: 22442 + fieldPath: metadata.namespace 22443 + - name: GOMAXPROCS 22444 + valueFrom: 22445 + resourceFieldRef: 22446 + containerName: manager 22447 + resource: limits.cpu 22448 + - name: GOMEMLIMIT 22449 + valueFrom: 22450 + resourceFieldRef: 22451 + containerName: manager 22452 + resource: limits.memory 22453 + image: ghcr.io/fluxcd/helm-controller:v1.1.0 22454 + imagePullPolicy: IfNotPresent 22455 + livenessProbe: 22456 + httpGet: 22457 + path: /healthz 22458 + port: healthz 22459 + name: manager 22460 + ports: 22461 + - containerPort: 8080 22462 + name: http-prom 22463 + protocol: TCP 22464 + - containerPort: 9440 22465 + name: healthz 22466 + protocol: TCP 22467 + readinessProbe: 22468 + httpGet: 22469 + path: /readyz 22470 + port: healthz 22471 + resources: 22472 + limits: 22473 + cpu: 1000m 22474 + memory: 1Gi 22475 + requests: 22476 + cpu: 100m 22477 + memory: 64Mi 22478 + securityContext: 22479 + allowPrivilegeEscalation: false 22480 + capabilities: 22481 + drop: 22482 + - ALL 22483 + readOnlyRootFilesystem: true 22484 + runAsNonRoot: true 22485 + seccompProfile: 22486 + type: RuntimeDefault 22487 + volumeMounts: 22488 + - mountPath: /tmp 22489 + name: temp 22490 + nodeSelector: 22491 + kubernetes.io/os: linux 22492 + priorityClassName: system-cluster-critical 22493 + securityContext: 22494 + fsGroup: 1337 22495 + serviceAccountName: helm-controller 22496 + terminationGracePeriodSeconds: 600 22497 + volumes: 22498 + - emptyDir: {} 22499 + name: temp 22500 --- 22501 apiVersion: apiextensions.k8s.io/v1 22502 kind: CustomResourceDefinition 22503 metadata: 22504 - annotations: 22505 - controller-gen.kubebuilder.io/version: v0.15.0 22506 - labels: 22507 - app.kubernetes.io/component: image-reflector-controller 22508 - app.kubernetes.io/instance: flux-system 22509 - app.kubernetes.io/part-of: flux 22510 - app.kubernetes.io/version: v2.3.0 22511 - name: imagepolicies.image.toolkit.fluxcd.io 22512 + annotations: 22513 + controller-gen.kubebuilder.io/version: v0.16.1 22514 + labels: 22515 + app.kubernetes.io/component: notification-controller 22516 + app.kubernetes.io/instance: flux-system 22517 + app.kubernetes.io/part-of: flux 22518 + app.kubernetes.io/version: v2.4.0 22519 + name: alerts.notification.toolkit.fluxcd.io 22520 spec: 22521 - group: image.toolkit.fluxcd.io 22522 - names: 22523 - kind: ImagePolicy 22524 - listKind: ImagePolicyList 22525 - plural: imagepolicies 22526 - singular: imagepolicy 22527 - scope: Namespaced 22528 - versions: 22529 - - additionalPrinterColumns: 22530 - - jsonPath: .status.latestImage 22531 - name: LatestImage 22532 - type: string 22533 - name: v1beta1 22534 - schema: 22535 - openAPIV3Schema: 22536 - description: ImagePolicy is the Schema for the imagepolicies API 22537 + group: notification.toolkit.fluxcd.io 22538 + names: 22539 + kind: Alert 22540 + listKind: AlertList 22541 + plural: alerts 22542 + singular: alert 22543 + scope: Namespaced 22544 + versions: 22545 + - additionalPrinterColumns: 22546 + - jsonPath: .metadata.creationTimestamp 22547 + name: Age 22548 + type: date 22549 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 22550 + name: Ready 22551 + type: string 22552 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 22553 + name: Status 22554 + type: string 22555 + deprecated: true 22556 + deprecationWarning: v1beta1 Alert is deprecated, upgrade to v1beta3 22557 + name: v1beta1 22558 + schema: 22559 + openAPIV3Schema: 22560 + description: Alert is the Schema for the alerts API 22561 + properties: 22562 + apiVersion: 22563 + description: |- 22564 + APIVersion defines the versioned schema of this representation of an object. 22565 + Servers should convert recognized schemas to the latest internal value, and 22566 + may reject unrecognized values. 22567 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22568 + type: string 22569 + kind: 22570 + description: |- 22571 + Kind is a string value representing the REST resource this object represents. 22572 + Servers may infer this from the endpoint the client submits requests to. 22573 + Cannot be updated. 22574 + In CamelCase. 22575 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22576 + type: string 22577 + metadata: 22578 + type: object 22579 + spec: 22580 + description: AlertSpec defines an alerting rule for events involving a 22581 + list of objects 22582 + properties: 22583 + eventSeverity: 22584 + default: info 22585 + description: |- 22586 + Filter events based on severity, defaults to ('info'). 22587 + If set to 'info' no events will be filtered. 22588 + enum: 22589 + - info 22590 + - error 22591 + type: string 22592 + eventSources: 22593 + description: Filter events based on the involved objects. 22594 + items: 22595 + description: |- 22596 + CrossNamespaceObjectReference contains enough information to let you locate the 22597 + typed referenced object at cluster level 22598 + properties: 22599 + apiVersion: 22600 + description: API version of the referent 22601 + type: string 22602 + kind: 22603 + description: Kind of the referent 22604 + enum: 22605 + - Bucket 22606 + - GitRepository 22607 + - Kustomization 22608 + - HelmRelease 22609 + - HelmChart 22610 + - HelmRepository 22611 + - ImageRepository 22612 + - ImagePolicy 22613 + - ImageUpdateAutomation 22614 + - OCIRepository 22615 + type: string 22616 + matchLabels: 22617 + additionalProperties: 22618 + type: string 22619 + description: |- 22620 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 22621 + map is equivalent to an element of matchExpressions, whose key field is "key", the 22622 + operator is "In", and the values array contains only "value". The requirements are ANDed. 22623 + type: object 22624 + name: 22625 + description: Name of the referent 22626 + maxLength: 53 22627 + minLength: 1 22628 + type: string 22629 + namespace: 22630 + description: Namespace of the referent 22631 + maxLength: 53 22632 + minLength: 1 22633 + type: string 22634 + required: 22635 + - kind 22636 + - name 22637 + type: object 22638 + type: array 22639 + exclusionList: 22640 + description: A list of Golang regular expressions to be used for excluding 22641 + messages. 22642 + items: 22643 + type: string 22644 + type: array 22645 + providerRef: 22646 + description: Send events using this provider. 22647 properties: 22648 + name: 22649 + description: Name of the referent. 22650 + type: string 22651 + required: 22652 + - name 22653 + type: object 22654 + summary: 22655 + description: Short description of the impact and affected cluster. 22656 + type: string 22657 + suspend: 22658 + description: |- 22659 + This flag tells the controller to suspend subsequent events dispatching. 22660 + Defaults to false. 22661 + type: boolean 22662 + required: 22663 + - eventSources 22664 + - providerRef 22665 + type: object 22666 + status: 22667 + default: 22668 + observedGeneration: -1 22669 + description: AlertStatus defines the observed state of Alert 22670 + properties: 22671 + conditions: 22672 + items: 22673 + description: Condition contains details for one aspect of the current 22674 + state of this API Resource. 22675 + properties: 22676 + lastTransitionTime: 22677 + description: |- 22678 + lastTransitionTime is the last time the condition transitioned from one status to another. 22679 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22680 + format: date-time 22681 + type: string 22682 + message: 22683 + description: |- 22684 + message is a human readable message indicating details about the transition. 22685 + This may be an empty string. 22686 + maxLength: 32768 22687 + type: string 22688 + observedGeneration: 22689 + description: |- 22690 + observedGeneration represents the .metadata.generation that the condition was set based upon. 22691 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22692 + with respect to the current state of the instance. 22693 + format: int64 22694 + minimum: 0 22695 + type: integer 22696 + reason: 22697 + description: |- 22698 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 22699 + Producers of specific condition types may define expected values and meanings for this field, 22700 + and whether the values are considered a guaranteed API. 22701 + The value should be a CamelCase string. 22702 + This field may not be empty. 22703 + maxLength: 1024 22704 + minLength: 1 22705 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22706 + type: string 22707 + status: 22708 + description: status of the condition, one of True, False, Unknown. 22709 + enum: 22710 + - "True" 22711 + - "False" 22712 + - Unknown 22713 + type: string 22714 + type: 22715 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 22716 + maxLength: 316 22717 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22718 + type: string 22719 + required: 22720 + - lastTransitionTime 22721 + - message 22722 + - reason 22723 + - status 22724 + - type 22725 + type: object 22726 + type: array 22727 + observedGeneration: 22728 + description: ObservedGeneration is the last observed generation. 22729 + format: int64 22730 + type: integer 22731 + type: object 22732 + type: object 22733 + served: true 22734 + storage: false 22735 + subresources: 22736 + status: {} 22737 + - additionalPrinterColumns: 22738 + - jsonPath: .metadata.creationTimestamp 22739 + name: Age 22740 + type: date 22741 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 22742 + name: Ready 22743 + type: string 22744 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 22745 + name: Status 22746 + type: string 22747 + deprecated: true 22748 + deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 22749 + name: v1beta2 22750 + schema: 22751 + openAPIV3Schema: 22752 + description: Alert is the Schema for the alerts API 22753 + properties: 22754 + apiVersion: 22755 + description: |- 22756 + APIVersion defines the versioned schema of this representation of an object. 22757 + Servers should convert recognized schemas to the latest internal value, and 22758 + may reject unrecognized values. 22759 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22760 + type: string 22761 + kind: 22762 + description: |- 22763 + Kind is a string value representing the REST resource this object represents. 22764 + Servers may infer this from the endpoint the client submits requests to. 22765 + Cannot be updated. 22766 + In CamelCase. 22767 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22768 + type: string 22769 + metadata: 22770 + type: object 22771 + spec: 22772 + description: AlertSpec defines an alerting rule for events involving a 22773 + list of objects. 22774 + properties: 22775 + eventMetadata: 22776 + additionalProperties: 22777 + type: string 22778 + description: |- 22779 + EventMetadata is an optional field for adding metadata to events dispatched by the 22780 + controller. This can be used for enhancing the context of the event. If a field 22781 + would override one already present on the original event as generated by the emitter, 22782 + then the override doesn't happen, i.e. the original value is preserved, and an info 22783 + log is printed. 22784 + type: object 22785 + eventSeverity: 22786 + default: info 22787 + description: |- 22788 + EventSeverity specifies how to filter events based on severity. 22789 + If set to 'info' no events will be filtered. 22790 + enum: 22791 + - info 22792 + - error 22793 + type: string 22794 + eventSources: 22795 + description: |- 22796 + EventSources specifies how to filter events based 22797 + on the involved object kind, name and namespace. 22798 + items: 22799 + description: |- 22800 + CrossNamespaceObjectReference contains enough information to let you locate the 22801 + typed referenced object at cluster level 22802 + properties: 22803 apiVersion: 22804 - description: |- 22805 - APIVersion defines the versioned schema of this representation of an object. 22806 - Servers should convert recognized schemas to the latest internal value, and 22807 - may reject unrecognized values. 22808 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22809 + description: API version of the referent 22810 + type: string 22811 + kind: 22812 + description: Kind of the referent 22813 + enum: 22814 + - Bucket 22815 + - GitRepository 22816 + - Kustomization 22817 + - HelmRelease 22818 + - HelmChart 22819 + - HelmRepository 22820 + - ImageRepository 22821 + - ImagePolicy 22822 + - ImageUpdateAutomation 22823 + - OCIRepository 22824 + type: string 22825 + matchLabels: 22826 + additionalProperties: 22827 type: string 22828 + description: |- 22829 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 22830 + map is equivalent to an element of matchExpressions, whose key field is "key", the 22831 + operator is "In", and the values array contains only "value". The requirements are ANDed. 22832 + MatchLabels requires the name to be set to `*`. 22833 + type: object 22834 + name: 22835 + description: |- 22836 + Name of the referent 22837 + If multiple resources are targeted `*` may be set. 22838 + maxLength: 53 22839 + minLength: 1 22840 + type: string 22841 + namespace: 22842 + description: Namespace of the referent 22843 + maxLength: 53 22844 + minLength: 1 22845 + type: string 22846 + required: 22847 + - kind 22848 + - name 22849 + type: object 22850 + type: array 22851 + exclusionList: 22852 + description: |- 22853 + ExclusionList specifies a list of Golang regular expressions 22854 + to be used for excluding messages. 22855 + items: 22856 + type: string 22857 + type: array 22858 + inclusionList: 22859 + description: |- 22860 + InclusionList specifies a list of Golang regular expressions 22861 + to be used for including messages. 22862 + items: 22863 + type: string 22864 + type: array 22865 + providerRef: 22866 + description: ProviderRef specifies which Provider this Alert should 22867 + use. 22868 + properties: 22869 + name: 22870 + description: Name of the referent. 22871 + type: string 22872 + required: 22873 + - name 22874 + type: object 22875 + summary: 22876 + description: Summary holds a short description of the impact and affected 22877 + cluster. 22878 + maxLength: 255 22879 + type: string 22880 + suspend: 22881 + description: |- 22882 + Suspend tells the controller to suspend subsequent 22883 + events handling for this Alert. 22884 + type: boolean 22885 + required: 22886 + - eventSources 22887 + - providerRef 22888 + type: object 22889 + status: 22890 + default: 22891 + observedGeneration: -1 22892 + description: AlertStatus defines the observed state of the Alert. 22893 + properties: 22894 + conditions: 22895 + description: Conditions holds the conditions for the Alert. 22896 + items: 22897 + description: Condition contains details for one aspect of the current 22898 + state of this API Resource. 22899 + properties: 22900 + lastTransitionTime: 22901 + description: |- 22902 + lastTransitionTime is the last time the condition transitioned from one status to another. 22903 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 22904 + format: date-time 22905 + type: string 22906 + message: 22907 + description: |- 22908 + message is a human readable message indicating details about the transition. 22909 + This may be an empty string. 22910 + maxLength: 32768 22911 + type: string 22912 + observedGeneration: 22913 + description: |- 22914 + observedGeneration represents the .metadata.generation that the condition was set based upon. 22915 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 22916 + with respect to the current state of the instance. 22917 + format: int64 22918 + minimum: 0 22919 + type: integer 22920 + reason: 22921 + description: |- 22922 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 22923 + Producers of specific condition types may define expected values and meanings for this field, 22924 + and whether the values are considered a guaranteed API. 22925 + The value should be a CamelCase string. 22926 + This field may not be empty. 22927 + maxLength: 1024 22928 + minLength: 1 22929 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 22930 + type: string 22931 + status: 22932 + description: status of the condition, one of True, False, Unknown. 22933 + enum: 22934 + - "True" 22935 + - "False" 22936 + - Unknown 22937 + type: string 22938 + type: 22939 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 22940 + maxLength: 316 22941 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 22942 + type: string 22943 + required: 22944 + - lastTransitionTime 22945 + - message 22946 + - reason 22947 + - status 22948 + - type 22949 + type: object 22950 + type: array 22951 + lastHandledReconcileAt: 22952 + description: |- 22953 + LastHandledReconcileAt holds the value of the most recent 22954 + reconcile request value, so a change of the annotation value 22955 + can be detected. 22956 + type: string 22957 + observedGeneration: 22958 + description: ObservedGeneration is the last observed generation. 22959 + format: int64 22960 + type: integer 22961 + type: object 22962 + type: object 22963 + served: true 22964 + storage: false 22965 + subresources: 22966 + status: {} 22967 + - additionalPrinterColumns: 22968 + - jsonPath: .metadata.creationTimestamp 22969 + name: Age 22970 + type: date 22971 + name: v1beta3 22972 + schema: 22973 + openAPIV3Schema: 22974 + description: Alert is the Schema for the alerts API 22975 + properties: 22976 + apiVersion: 22977 + description: |- 22978 + APIVersion defines the versioned schema of this representation of an object. 22979 + Servers should convert recognized schemas to the latest internal value, and 22980 + may reject unrecognized values. 22981 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 22982 + type: string 22983 + kind: 22984 + description: |- 22985 + Kind is a string value representing the REST resource this object represents. 22986 + Servers may infer this from the endpoint the client submits requests to. 22987 + Cannot be updated. 22988 + In CamelCase. 22989 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 22990 + type: string 22991 + metadata: 22992 + type: object 22993 + spec: 22994 + description: AlertSpec defines an alerting rule for events involving a 22995 + list of objects. 22996 + properties: 22997 + eventMetadata: 22998 + additionalProperties: 22999 + type: string 23000 + description: |- 23001 + EventMetadata is an optional field for adding metadata to events dispatched by the 23002 + controller. This can be used for enhancing the context of the event. If a field 23003 + would override one already present on the original event as generated by the emitter, 23004 + then the override doesn't happen, i.e. the original value is preserved, and an info 23005 + log is printed. 23006 + type: object 23007 + eventSeverity: 23008 + default: info 23009 + description: |- 23010 + EventSeverity specifies how to filter events based on severity. 23011 + If set to 'info' no events will be filtered. 23012 + enum: 23013 + - info 23014 + - error 23015 + type: string 23016 + eventSources: 23017 + description: |- 23018 + EventSources specifies how to filter events based 23019 + on the involved object kind, name and namespace. 23020 + items: 23021 + description: |- 23022 + CrossNamespaceObjectReference contains enough information to let you locate the 23023 + typed referenced object at cluster level 23024 + properties: 23025 + apiVersion: 23026 + description: API version of the referent 23027 + type: string 23028 kind: 23029 - description: |- 23030 - Kind is a string value representing the REST resource this object represents. 23031 - Servers may infer this from the endpoint the client submits requests to. 23032 - Cannot be updated. 23033 - In CamelCase. 23034 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23035 + description: Kind of the referent 23036 + enum: 23037 + - Bucket 23038 + - GitRepository 23039 + - Kustomization 23040 + - HelmRelease 23041 + - HelmChart 23042 + - HelmRepository 23043 + - ImageRepository 23044 + - ImagePolicy 23045 + - ImageUpdateAutomation 23046 + - OCIRepository 23047 + type: string 23048 + matchLabels: 23049 + additionalProperties: 23050 type: string 23051 - metadata: 23052 - type: object 23053 - spec: 23054 - description: |- 23055 - ImagePolicySpec defines the parameters for calculating the 23056 - ImagePolicy 23057 - properties: 23058 - filterTags: 23059 - description: |- 23060 - FilterTags enables filtering for only a subset of tags based on a set of 23061 - rules. If no rules are provided, all the tags from the repository will be 23062 - ordered and compared. 23063 - properties: 23064 - extract: 23065 - description: |- 23066 - Extract allows a capture group to be extracted from the specified regular 23067 - expression pattern, useful before tag evaluation. 23068 - type: string 23069 - pattern: 23070 - description: |- 23071 - Pattern specifies a regular expression pattern used to filter for image 23072 - tags. 23073 - type: string 23074 - type: object 23075 - imageRepositoryRef: 23076 - description: |- 23077 - ImageRepositoryRef points at the object specifying the image 23078 - being scanned 23079 - properties: 23080 - name: 23081 - description: Name of the referent. 23082 - type: string 23083 - namespace: 23084 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 23085 - type: string 23086 - required: 23087 - - name 23088 - type: object 23089 - policy: 23090 - description: |- 23091 - Policy gives the particulars of the policy to be followed in 23092 - selecting the most recent image 23093 - properties: 23094 - alphabetical: 23095 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 23096 - properties: 23097 - order: 23098 - default: asc 23099 - description: |- 23100 - Order specifies the sorting order of the tags. Given the letters of the 23101 - alphabet as tags, ascending order would select Z, and descending order 23102 - would select A. 23103 - enum: 23104 - - asc 23105 - - desc 23106 - type: string 23107 - type: object 23108 - numerical: 23109 - description: Numerical set of rules to use for numerical ordering of the tags. 23110 - properties: 23111 - order: 23112 - default: asc 23113 - description: |- 23114 - Order specifies the sorting order of the tags. Given the integer values 23115 - from 0 to 9 as tags, ascending order would select 9, and descending order 23116 - would select 0. 23117 - enum: 23118 - - asc 23119 - - desc 23120 - type: string 23121 - type: object 23122 - semver: 23123 - description: |- 23124 - SemVer gives a semantic version range to check against the tags 23125 - available. 23126 - properties: 23127 - range: 23128 - description: |- 23129 - Range gives a semver range for the image tag; the highest 23130 - version within the range that's a tag yields the latest image. 23131 - type: string 23132 - required: 23133 - - range 23134 - type: object 23135 - type: object 23136 - required: 23137 - - imageRepositoryRef 23138 - - policy 23139 - type: object 23140 + description: |- 23141 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23142 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23143 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23144 + MatchLabels requires the name to be set to `*`. 23145 + type: object 23146 + name: 23147 + description: |- 23148 + Name of the referent 23149 + If multiple resources are targeted `*` may be set. 23150 + maxLength: 53 23151 + minLength: 1 23152 + type: string 23153 + namespace: 23154 + description: Namespace of the referent 23155 + maxLength: 53 23156 + minLength: 1 23157 + type: string 23158 + required: 23159 + - kind 23160 + - name 23161 + type: object 23162 + type: array 23163 + exclusionList: 23164 + description: |- 23165 + ExclusionList specifies a list of Golang regular expressions 23166 + to be used for excluding messages. 23167 + items: 23168 + type: string 23169 + type: array 23170 + inclusionList: 23171 + description: |- 23172 + InclusionList specifies a list of Golang regular expressions 23173 + to be used for including messages. 23174 + items: 23175 + type: string 23176 + type: array 23177 + providerRef: 23178 + description: ProviderRef specifies which Provider this Alert should 23179 + use. 23180 + properties: 23181 + name: 23182 + description: Name of the referent. 23183 + type: string 23184 + required: 23185 + - name 23186 + type: object 23187 + summary: 23188 + description: Summary holds a short description of the impact and affected 23189 + cluster. 23190 + maxLength: 255 23191 + type: string 23192 + suspend: 23193 + description: |- 23194 + Suspend tells the controller to suspend subsequent 23195 + events handling for this Alert. 23196 + type: boolean 23197 + required: 23198 + - eventSources 23199 + - providerRef 23200 + type: object 23201 + type: object 23202 + served: true 23203 + storage: true 23204 + subresources: {} 23205 +--- 23206 +apiVersion: apiextensions.k8s.io/v1 23207 +kind: CustomResourceDefinition 23208 +metadata: 23209 + annotations: 23210 + controller-gen.kubebuilder.io/version: v0.16.1 23211 + labels: 23212 + app.kubernetes.io/component: notification-controller 23213 + app.kubernetes.io/instance: flux-system 23214 + app.kubernetes.io/part-of: flux 23215 + app.kubernetes.io/version: v2.4.0 23216 + name: providers.notification.toolkit.fluxcd.io 23217 +spec: 23218 + group: notification.toolkit.fluxcd.io 23219 + names: 23220 + kind: Provider 23221 + listKind: ProviderList 23222 + plural: providers 23223 + singular: provider 23224 + scope: Namespaced 23225 + versions: 23226 + - additionalPrinterColumns: 23227 + - jsonPath: .metadata.creationTimestamp 23228 + name: Age 23229 + type: date 23230 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23231 + name: Ready 23232 + type: string 23233 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23234 + name: Status 23235 + type: string 23236 + deprecated: true 23237 + deprecationWarning: v1beta1 Provider is deprecated, upgrade to v1beta3 23238 + name: v1beta1 23239 + schema: 23240 + openAPIV3Schema: 23241 + description: Provider is the Schema for the providers API 23242 + properties: 23243 + apiVersion: 23244 + description: |- 23245 + APIVersion defines the versioned schema of this representation of an object. 23246 + Servers should convert recognized schemas to the latest internal value, and 23247 + may reject unrecognized values. 23248 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23249 + type: string 23250 + kind: 23251 + description: |- 23252 + Kind is a string value representing the REST resource this object represents. 23253 + Servers may infer this from the endpoint the client submits requests to. 23254 + Cannot be updated. 23255 + In CamelCase. 23256 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23257 + type: string 23258 + metadata: 23259 + type: object 23260 + spec: 23261 + description: ProviderSpec defines the desired state of Provider 23262 + properties: 23263 + address: 23264 + description: HTTP/S webhook address of this provider 23265 + pattern: ^(http|https):// 23266 + type: string 23267 + certSecretRef: 23268 + description: |- 23269 + CertSecretRef can be given the name of a secret containing 23270 + a PEM-encoded CA certificate (`caFile`) 23271 + properties: 23272 + name: 23273 + description: Name of the referent. 23274 + type: string 23275 + required: 23276 + - name 23277 + type: object 23278 + channel: 23279 + description: Alert channel for this provider 23280 + type: string 23281 + proxy: 23282 + description: HTTP/S address of the proxy 23283 + pattern: ^(http|https):// 23284 + type: string 23285 + secretRef: 23286 + description: |- 23287 + Secret reference containing the provider webhook URL 23288 + using "address" as data key 23289 + properties: 23290 + name: 23291 + description: Name of the referent. 23292 + type: string 23293 + required: 23294 + - name 23295 + type: object 23296 + suspend: 23297 + description: |- 23298 + This flag tells the controller to suspend subsequent events handling. 23299 + Defaults to false. 23300 + type: boolean 23301 + timeout: 23302 + description: Timeout for sending alerts to the provider. 23303 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 23304 + type: string 23305 + type: 23306 + description: Type of provider 23307 + enum: 23308 + - slack 23309 + - discord 23310 + - msteams 23311 + - rocket 23312 + - generic 23313 + - generic-hmac 23314 + - github 23315 + - gitlab 23316 + - bitbucket 23317 + - azuredevops 23318 + - googlechat 23319 + - webex 23320 + - sentry 23321 + - azureeventhub 23322 + - telegram 23323 + - lark 23324 + - matrix 23325 + - opsgenie 23326 + - alertmanager 23327 + - grafana 23328 + - githubdispatch 23329 + type: string 23330 + username: 23331 + description: Bot username for this provider 23332 + type: string 23333 + required: 23334 + - type 23335 + type: object 23336 + status: 23337 + default: 23338 + observedGeneration: -1 23339 + description: ProviderStatus defines the observed state of Provider 23340 + properties: 23341 + conditions: 23342 + items: 23343 + description: Condition contains details for one aspect of the current 23344 + state of this API Resource. 23345 + properties: 23346 + lastTransitionTime: 23347 + description: |- 23348 + lastTransitionTime is the last time the condition transitioned from one status to another. 23349 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23350 + format: date-time 23351 + type: string 23352 + message: 23353 + description: |- 23354 + message is a human readable message indicating details about the transition. 23355 + This may be an empty string. 23356 + maxLength: 32768 23357 + type: string 23358 + observedGeneration: 23359 + description: |- 23360 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23361 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23362 + with respect to the current state of the instance. 23363 + format: int64 23364 + minimum: 0 23365 + type: integer 23366 + reason: 23367 + description: |- 23368 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23369 + Producers of specific condition types may define expected values and meanings for this field, 23370 + and whether the values are considered a guaranteed API. 23371 + The value should be a CamelCase string. 23372 + This field may not be empty. 23373 + maxLength: 1024 23374 + minLength: 1 23375 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23376 + type: string 23377 status: 23378 - default: 23379 - observedGeneration: -1 23380 - description: ImagePolicyStatus defines the observed state of ImagePolicy 23381 - properties: 23382 - conditions: 23383 - items: 23384 - description: "Condition contains details for one aspect of the current state of this API 23385 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 23386 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 23387 - the observations of a foo's current state.\n\t // Known .status.conditions.type 23388 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 23389 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 23390 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 23391 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 23392 - fields\n\t}" 23393 - properties: 23394 - lastTransitionTime: 23395 - description: |- 23396 - lastTransitionTime is the last time the condition transitioned from one status to another. 23397 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23398 - format: date-time 23399 - type: string 23400 - message: 23401 - description: |- 23402 - message is a human readable message indicating details about the transition. 23403 - This may be an empty string. 23404 - maxLength: 32768 23405 - type: string 23406 - observedGeneration: 23407 - description: |- 23408 - observedGeneration represents the .metadata.generation that the condition was set based upon. 23409 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23410 - with respect to the current state of the instance. 23411 - format: int64 23412 - minimum: 0 23413 - type: integer 23414 - reason: 23415 - description: |- 23416 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 23417 - Producers of specific condition types may define expected values and meanings for this field, 23418 - and whether the values are considered a guaranteed API. 23419 - The value should be a CamelCase string. 23420 - This field may not be empty. 23421 - maxLength: 1024 23422 - minLength: 1 23423 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23424 - type: string 23425 - status: 23426 - description: status of the condition, one of True, False, Unknown. 23427 - enum: 23428 - - "True" 23429 - - "False" 23430 - - Unknown 23431 - type: string 23432 - type: 23433 - description: |- 23434 - type of condition in CamelCase or in foo.example.com/CamelCase. 23435 - --- 23436 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 23437 - useful (see .node.status.conditions), the ability to deconflict is important. 23438 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 23439 - maxLength: 316 23440 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23441 - type: string 23442 - required: 23443 - - lastTransitionTime 23444 - - message 23445 - - reason 23446 - - status 23447 - - type 23448 - type: object 23449 - type: array 23450 - latestImage: 23451 - description: |- 23452 - LatestImage gives the first in the list of images scanned by 23453 - the image repository, when filtered and ordered according to 23454 - the policy. 23455 - type: string 23456 - observedGeneration: 23457 - format: int64 23458 - type: integer 23459 - type: object 23460 + description: status of the condition, one of True, False, Unknown. 23461 + enum: 23462 + - "True" 23463 + - "False" 23464 + - Unknown 23465 + type: string 23466 + type: 23467 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23468 + maxLength: 316 23469 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23470 + type: string 23471 + required: 23472 + - lastTransitionTime 23473 + - message 23474 + - reason 23475 + - status 23476 + - type 23477 + type: object 23478 + type: array 23479 + observedGeneration: 23480 + description: ObservedGeneration is the last reconciled generation. 23481 + format: int64 23482 + type: integer 23483 + type: object 23484 + type: object 23485 + served: true 23486 + storage: false 23487 + subresources: 23488 + status: {} 23489 + - additionalPrinterColumns: 23490 + - jsonPath: .metadata.creationTimestamp 23491 + name: Age 23492 + type: date 23493 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23494 + name: Ready 23495 + type: string 23496 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23497 + name: Status 23498 + type: string 23499 + deprecated: true 23500 + deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 23501 + name: v1beta2 23502 + schema: 23503 + openAPIV3Schema: 23504 + description: Provider is the Schema for the providers API. 23505 + properties: 23506 + apiVersion: 23507 + description: |- 23508 + APIVersion defines the versioned schema of this representation of an object. 23509 + Servers should convert recognized schemas to the latest internal value, and 23510 + may reject unrecognized values. 23511 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23512 + type: string 23513 + kind: 23514 + description: |- 23515 + Kind is a string value representing the REST resource this object represents. 23516 + Servers may infer this from the endpoint the client submits requests to. 23517 + Cannot be updated. 23518 + In CamelCase. 23519 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23520 + type: string 23521 + metadata: 23522 + type: object 23523 + spec: 23524 + description: ProviderSpec defines the desired state of the Provider. 23525 + properties: 23526 + address: 23527 + description: |- 23528 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 23529 + What kind of endpoint depends on the specific Provider type being used. 23530 + For the generic Provider, for example, this is an HTTP/S address. 23531 + For other Provider types this could be a project ID or a namespace. 23532 + maxLength: 2048 23533 + type: string 23534 + certSecretRef: 23535 + description: |- 23536 + CertSecretRef specifies the Secret containing 23537 + a PEM-encoded CA certificate (in the `ca.crt` key). 23538 + 23539 + Note: Support for the `caFile` key has 23540 + been deprecated. 23541 + properties: 23542 + name: 23543 + description: Name of the referent. 23544 + type: string 23545 + required: 23546 + - name 23547 + type: object 23548 + channel: 23549 + description: Channel specifies the destination channel where events 23550 + should be posted. 23551 + maxLength: 2048 23552 + type: string 23553 + interval: 23554 + description: Interval at which to reconcile the Provider with its 23555 + Secret references. 23556 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23557 + type: string 23558 + proxy: 23559 + description: Proxy the HTTP/S address of the proxy server. 23560 + maxLength: 2048 23561 + pattern: ^(http|https)://.*$ 23562 + type: string 23563 + secretRef: 23564 + description: |- 23565 + SecretRef specifies the Secret containing the authentication 23566 + credentials for this Provider. 23567 + properties: 23568 + name: 23569 + description: Name of the referent. 23570 + type: string 23571 + required: 23572 + - name 23573 + type: object 23574 + suspend: 23575 + description: |- 23576 + Suspend tells the controller to suspend subsequent 23577 + events handling for this Provider. 23578 + type: boolean 23579 + timeout: 23580 + description: Timeout for sending alerts to the Provider. 23581 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 23582 + type: string 23583 + type: 23584 + description: Type specifies which Provider implementation to use. 23585 + enum: 23586 + - slack 23587 + - discord 23588 + - msteams 23589 + - rocket 23590 + - generic 23591 + - generic-hmac 23592 + - github 23593 + - gitlab 23594 + - gitea 23595 + - bitbucketserver 23596 + - bitbucket 23597 + - azuredevops 23598 + - googlechat 23599 + - googlepubsub 23600 + - webex 23601 + - sentry 23602 + - azureeventhub 23603 + - telegram 23604 + - lark 23605 + - matrix 23606 + - opsgenie 23607 + - alertmanager 23608 + - grafana 23609 + - githubdispatch 23610 + - pagerduty 23611 + - datadog 23612 + type: string 23613 + username: 23614 + description: Username specifies the name under which events are posted. 23615 + maxLength: 2048 23616 + type: string 23617 + required: 23618 + - type 23619 + type: object 23620 + status: 23621 + default: 23622 + observedGeneration: -1 23623 + description: ProviderStatus defines the observed state of the Provider. 23624 + properties: 23625 + conditions: 23626 + description: Conditions holds the conditions for the Provider. 23627 + items: 23628 + description: Condition contains details for one aspect of the current 23629 + state of this API Resource. 23630 + properties: 23631 + lastTransitionTime: 23632 + description: |- 23633 + lastTransitionTime is the last time the condition transitioned from one status to another. 23634 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 23635 + format: date-time 23636 + type: string 23637 + message: 23638 + description: |- 23639 + message is a human readable message indicating details about the transition. 23640 + This may be an empty string. 23641 + maxLength: 32768 23642 + type: string 23643 + observedGeneration: 23644 + description: |- 23645 + observedGeneration represents the .metadata.generation that the condition was set based upon. 23646 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 23647 + with respect to the current state of the instance. 23648 + format: int64 23649 + minimum: 0 23650 + type: integer 23651 + reason: 23652 + description: |- 23653 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 23654 + Producers of specific condition types may define expected values and meanings for this field, 23655 + and whether the values are considered a guaranteed API. 23656 + The value should be a CamelCase string. 23657 + This field may not be empty. 23658 + maxLength: 1024 23659 + minLength: 1 23660 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 23661 + type: string 23662 + status: 23663 + description: status of the condition, one of True, False, Unknown. 23664 + enum: 23665 + - "True" 23666 + - "False" 23667 + - Unknown 23668 + type: string 23669 + type: 23670 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 23671 + maxLength: 316 23672 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 23673 + type: string 23674 + required: 23675 + - lastTransitionTime 23676 + - message 23677 + - reason 23678 + - status 23679 + - type 23680 + type: object 23681 + type: array 23682 + lastHandledReconcileAt: 23683 + description: |- 23684 + LastHandledReconcileAt holds the value of the most recent 23685 + reconcile request value, so a change of the annotation value 23686 + can be detected. 23687 + type: string 23688 + observedGeneration: 23689 + description: ObservedGeneration is the last reconciled generation. 23690 + format: int64 23691 + type: integer 23692 + type: object 23693 + type: object 23694 + served: true 23695 + storage: false 23696 + subresources: 23697 + status: {} 23698 + - additionalPrinterColumns: 23699 + - jsonPath: .metadata.creationTimestamp 23700 + name: Age 23701 + type: date 23702 + name: v1beta3 23703 + schema: 23704 + openAPIV3Schema: 23705 + description: Provider is the Schema for the providers API 23706 + properties: 23707 + apiVersion: 23708 + description: |- 23709 + APIVersion defines the versioned schema of this representation of an object. 23710 + Servers should convert recognized schemas to the latest internal value, and 23711 + may reject unrecognized values. 23712 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23713 + type: string 23714 + kind: 23715 + description: |- 23716 + Kind is a string value representing the REST resource this object represents. 23717 + Servers may infer this from the endpoint the client submits requests to. 23718 + Cannot be updated. 23719 + In CamelCase. 23720 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23721 + type: string 23722 + metadata: 23723 + type: object 23724 + spec: 23725 + description: ProviderSpec defines the desired state of the Provider. 23726 + properties: 23727 + address: 23728 + description: |- 23729 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 23730 + What kind of endpoint depends on the specific Provider type being used. 23731 + For the generic Provider, for example, this is an HTTP/S address. 23732 + For other Provider types this could be a project ID or a namespace. 23733 + maxLength: 2048 23734 + type: string 23735 + certSecretRef: 23736 + description: |- 23737 + CertSecretRef specifies the Secret containing 23738 + a PEM-encoded CA certificate (in the `ca.crt` key). 23739 + 23740 + Note: Support for the `caFile` key has 23741 + been deprecated. 23742 + properties: 23743 + name: 23744 + description: Name of the referent. 23745 + type: string 23746 + required: 23747 + - name 23748 type: object 23749 - served: true 23750 - storage: false 23751 - subresources: 23752 - status: {} 23753 - - additionalPrinterColumns: 23754 - - jsonPath: .status.latestImage 23755 - name: LatestImage 23756 - type: string 23757 - name: v1beta2 23758 - schema: 23759 - openAPIV3Schema: 23760 - description: ImagePolicy is the Schema for the imagepolicies API 23761 + channel: 23762 + description: Channel specifies the destination channel where events 23763 + should be posted. 23764 + maxLength: 2048 23765 + type: string 23766 + interval: 23767 + description: |- 23768 + Interval at which to reconcile the Provider with its Secret references. 23769 + Deprecated and not used in v1beta3. 23770 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23771 + type: string 23772 + proxy: 23773 + description: Proxy the HTTP/S address of the proxy server. 23774 + maxLength: 2048 23775 + pattern: ^(http|https)://.*$ 23776 + type: string 23777 + secretRef: 23778 + description: |- 23779 + SecretRef specifies the Secret containing the authentication 23780 + credentials for this Provider. 23781 properties: 23782 + name: 23783 + description: Name of the referent. 23784 + type: string 23785 + required: 23786 + - name 23787 + type: object 23788 + suspend: 23789 + description: |- 23790 + Suspend tells the controller to suspend subsequent 23791 + events handling for this Provider. 23792 + type: boolean 23793 + timeout: 23794 + description: Timeout for sending alerts to the Provider. 23795 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 23796 + type: string 23797 + type: 23798 + description: Type specifies which Provider implementation to use. 23799 + enum: 23800 + - slack 23801 + - discord 23802 + - msteams 23803 + - rocket 23804 + - generic 23805 + - generic-hmac 23806 + - github 23807 + - gitlab 23808 + - gitea 23809 + - bitbucketserver 23810 + - bitbucket 23811 + - azuredevops 23812 + - googlechat 23813 + - googlepubsub 23814 + - webex 23815 + - sentry 23816 + - azureeventhub 23817 + - telegram 23818 + - lark 23819 + - matrix 23820 + - opsgenie 23821 + - alertmanager 23822 + - grafana 23823 + - githubdispatch 23824 + - pagerduty 23825 + - datadog 23826 + - nats 23827 + type: string 23828 + username: 23829 + description: Username specifies the name under which events are posted. 23830 + maxLength: 2048 23831 + type: string 23832 + required: 23833 + - type 23834 + type: object 23835 + type: object 23836 + served: true 23837 + storage: true 23838 + subresources: {} 23839 +--- 23840 +apiVersion: apiextensions.k8s.io/v1 23841 +kind: CustomResourceDefinition 23842 +metadata: 23843 + annotations: 23844 + controller-gen.kubebuilder.io/version: v0.16.1 23845 + labels: 23846 + app.kubernetes.io/component: notification-controller 23847 + app.kubernetes.io/instance: flux-system 23848 + app.kubernetes.io/part-of: flux 23849 + app.kubernetes.io/version: v2.4.0 23850 + name: receivers.notification.toolkit.fluxcd.io 23851 +spec: 23852 + group: notification.toolkit.fluxcd.io 23853 + names: 23854 + kind: Receiver 23855 + listKind: ReceiverList 23856 + plural: receivers 23857 + singular: receiver 23858 + scope: Namespaced 23859 + versions: 23860 + - additionalPrinterColumns: 23861 + - jsonPath: .metadata.creationTimestamp 23862 + name: Age 23863 + type: date 23864 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 23865 + name: Ready 23866 + type: string 23867 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 23868 + name: Status 23869 + type: string 23870 + name: v1 23871 + schema: 23872 + openAPIV3Schema: 23873 + description: Receiver is the Schema for the receivers API. 23874 + properties: 23875 + apiVersion: 23876 + description: |- 23877 + APIVersion defines the versioned schema of this representation of an object. 23878 + Servers should convert recognized schemas to the latest internal value, and 23879 + may reject unrecognized values. 23880 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23881 + type: string 23882 + kind: 23883 + description: |- 23884 + Kind is a string value representing the REST resource this object represents. 23885 + Servers may infer this from the endpoint the client submits requests to. 23886 + Cannot be updated. 23887 + In CamelCase. 23888 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 23889 + type: string 23890 + metadata: 23891 + type: object 23892 + spec: 23893 + description: ReceiverSpec defines the desired state of the Receiver. 23894 + properties: 23895 + events: 23896 + description: |- 23897 + Events specifies the list of event types to handle, 23898 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 23899 + items: 23900 + type: string 23901 + type: array 23902 + interval: 23903 + default: 10m 23904 + description: Interval at which to reconcile the Receiver with its 23905 + Secret references. 23906 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 23907 + type: string 23908 + resources: 23909 + description: A list of resources to be notified about changes. 23910 + items: 23911 + description: |- 23912 + CrossNamespaceObjectReference contains enough information to let you locate the 23913 + typed referenced object at cluster level 23914 + properties: 23915 apiVersion: 23916 - description: |- 23917 - APIVersion defines the versioned schema of this representation of an object. 23918 - Servers should convert recognized schemas to the latest internal value, and 23919 - may reject unrecognized values. 23920 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 23921 + description: API version of the referent 23922 + type: string 23923 + kind: 23924 + description: Kind of the referent 23925 + enum: 23926 + - Bucket 23927 + - GitRepository 23928 + - Kustomization 23929 + - HelmRelease 23930 + - HelmChart 23931 + - HelmRepository 23932 + - ImageRepository 23933 + - ImagePolicy 23934 + - ImageUpdateAutomation 23935 + - OCIRepository 23936 + type: string 23937 + matchLabels: 23938 + additionalProperties: 23939 type: string 23940 + description: |- 23941 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 23942 + map is equivalent to an element of matchExpressions, whose key field is "key", the 23943 + operator is "In", and the values array contains only "value". The requirements are ANDed. 23944 + MatchLabels requires the name to be set to `*`. 23945 + type: object 23946 + name: 23947 + description: |- 23948 + Name of the referent 23949 + If multiple resources are targeted `*` may be set. 23950 + maxLength: 53 23951 + minLength: 1 23952 + type: string 23953 + namespace: 23954 + description: Namespace of the referent 23955 + maxLength: 53 23956 + minLength: 1 23957 + type: string 23958 + required: 23959 + - kind 23960 + - name 23961 + type: object 23962 + type: array 23963 + secretRef: 23964 + description: |- 23965 + SecretRef specifies the Secret containing the token used 23966 + to validate the payload authenticity. 23967 + properties: 23968 + name: 23969 + description: Name of the referent. 23970 + type: string 23971 + required: 23972 + - name 23973 + type: object 23974 + suspend: 23975 + description: |- 23976 + Suspend tells the controller to suspend subsequent 23977 + events handling for this receiver. 23978 + type: boolean 23979 + type: 23980 + description: |- 23981 + Type of webhook sender, used to determine 23982 + the validation procedure and payload deserialization. 23983 + enum: 23984 + - generic 23985 + - generic-hmac 23986 + - github 23987 + - gitlab 23988 + - bitbucket 23989 + - harbor 23990 + - dockerhub 23991 + - quay 23992 + - gcr 23993 + - nexus 23994 + - acr 23995 + - cdevents 23996 + type: string 23997 + required: 23998 + - resources 23999 + - secretRef 24000 + - type 24001 + type: object 24002 + status: 24003 + default: 24004 + observedGeneration: -1 24005 + description: ReceiverStatus defines the observed state of the Receiver. 24006 + properties: 24007 + conditions: 24008 + description: Conditions holds the conditions for the Receiver. 24009 + items: 24010 + description: Condition contains details for one aspect of the current 24011 + state of this API Resource. 24012 + properties: 24013 + lastTransitionTime: 24014 + description: |- 24015 + lastTransitionTime is the last time the condition transitioned from one status to another. 24016 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24017 + format: date-time 24018 + type: string 24019 + message: 24020 + description: |- 24021 + message is a human readable message indicating details about the transition. 24022 + This may be an empty string. 24023 + maxLength: 32768 24024 + type: string 24025 + observedGeneration: 24026 + description: |- 24027 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24028 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24029 + with respect to the current state of the instance. 24030 + format: int64 24031 + minimum: 0 24032 + type: integer 24033 + reason: 24034 + description: |- 24035 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24036 + Producers of specific condition types may define expected values and meanings for this field, 24037 + and whether the values are considered a guaranteed API. 24038 + The value should be a CamelCase string. 24039 + This field may not be empty. 24040 + maxLength: 1024 24041 + minLength: 1 24042 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24043 + type: string 24044 + status: 24045 + description: status of the condition, one of True, False, Unknown. 24046 + enum: 24047 + - "True" 24048 + - "False" 24049 + - Unknown 24050 + type: string 24051 + type: 24052 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24053 + maxLength: 316 24054 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24055 + type: string 24056 + required: 24057 + - lastTransitionTime 24058 + - message 24059 + - reason 24060 + - status 24061 + - type 24062 + type: object 24063 + type: array 24064 + lastHandledReconcileAt: 24065 + description: |- 24066 + LastHandledReconcileAt holds the value of the most recent 24067 + reconcile request value, so a change of the annotation value 24068 + can be detected. 24069 + type: string 24070 + observedGeneration: 24071 + description: ObservedGeneration is the last observed generation of 24072 + the Receiver object. 24073 + format: int64 24074 + type: integer 24075 + webhookPath: 24076 + description: |- 24077 + WebhookPath is the generated incoming webhook address in the format 24078 + of '/hook/sha256sum(token+name+namespace)'. 24079 + type: string 24080 + type: object 24081 + type: object 24082 + served: true 24083 + storage: true 24084 + subresources: 24085 + status: {} 24086 + - additionalPrinterColumns: 24087 + - jsonPath: .metadata.creationTimestamp 24088 + name: Age 24089 + type: date 24090 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 24091 + name: Ready 24092 + type: string 24093 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 24094 + name: Status 24095 + type: string 24096 + deprecated: true 24097 + deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1 24098 + name: v1beta1 24099 + schema: 24100 + openAPIV3Schema: 24101 + description: Receiver is the Schema for the receivers API 24102 + properties: 24103 + apiVersion: 24104 + description: |- 24105 + APIVersion defines the versioned schema of this representation of an object. 24106 + Servers should convert recognized schemas to the latest internal value, and 24107 + may reject unrecognized values. 24108 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24109 + type: string 24110 + kind: 24111 + description: |- 24112 + Kind is a string value representing the REST resource this object represents. 24113 + Servers may infer this from the endpoint the client submits requests to. 24114 + Cannot be updated. 24115 + In CamelCase. 24116 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24117 + type: string 24118 + metadata: 24119 + type: object 24120 + spec: 24121 + description: ReceiverSpec defines the desired state of Receiver 24122 + properties: 24123 + events: 24124 + description: |- 24125 + A list of events to handle, 24126 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 24127 + items: 24128 + type: string 24129 + type: array 24130 + resources: 24131 + description: A list of resources to be notified about changes. 24132 + items: 24133 + description: |- 24134 + CrossNamespaceObjectReference contains enough information to let you locate the 24135 + typed referenced object at cluster level 24136 + properties: 24137 + apiVersion: 24138 + description: API version of the referent 24139 + type: string 24140 kind: 24141 - description: |- 24142 - Kind is a string value representing the REST resource this object represents. 24143 - Servers may infer this from the endpoint the client submits requests to. 24144 - Cannot be updated. 24145 - In CamelCase. 24146 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24147 + description: Kind of the referent 24148 + enum: 24149 + - Bucket 24150 + - GitRepository 24151 + - Kustomization 24152 + - HelmRelease 24153 + - HelmChart 24154 + - HelmRepository 24155 + - ImageRepository 24156 + - ImagePolicy 24157 + - ImageUpdateAutomation 24158 + - OCIRepository 24159 + type: string 24160 + matchLabels: 24161 + additionalProperties: 24162 type: string 24163 - metadata: 24164 - type: object 24165 - spec: 24166 - description: |- 24167 - ImagePolicySpec defines the parameters for calculating the 24168 - ImagePolicy. 24169 - properties: 24170 - filterTags: 24171 - description: |- 24172 - FilterTags enables filtering for only a subset of tags based on a set of 24173 - rules. If no rules are provided, all the tags from the repository will be 24174 - ordered and compared. 24175 - properties: 24176 - extract: 24177 - description: |- 24178 - Extract allows a capture group to be extracted from the specified regular 24179 - expression pattern, useful before tag evaluation. 24180 - type: string 24181 - pattern: 24182 - description: |- 24183 - Pattern specifies a regular expression pattern used to filter for image 24184 - tags. 24185 - type: string 24186 - type: object 24187 - imageRepositoryRef: 24188 - description: |- 24189 - ImageRepositoryRef points at the object specifying the image 24190 - being scanned 24191 - properties: 24192 - name: 24193 - description: Name of the referent. 24194 - type: string 24195 - namespace: 24196 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 24197 - type: string 24198 - required: 24199 - - name 24200 - type: object 24201 - policy: 24202 - description: |- 24203 - Policy gives the particulars of the policy to be followed in 24204 - selecting the most recent image 24205 - properties: 24206 - alphabetical: 24207 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 24208 - properties: 24209 - order: 24210 - default: asc 24211 - description: |- 24212 - Order specifies the sorting order of the tags. Given the letters of the 24213 - alphabet as tags, ascending order would select Z, and descending order 24214 - would select A. 24215 - enum: 24216 - - asc 24217 - - desc 24218 - type: string 24219 - type: object 24220 - numerical: 24221 - description: Numerical set of rules to use for numerical ordering of the tags. 24222 - properties: 24223 - order: 24224 - default: asc 24225 - description: |- 24226 - Order specifies the sorting order of the tags. Given the integer values 24227 - from 0 to 9 as tags, ascending order would select 9, and descending order 24228 - would select 0. 24229 - enum: 24230 - - asc 24231 - - desc 24232 - type: string 24233 - type: object 24234 - semver: 24235 - description: |- 24236 - SemVer gives a semantic version range to check against the tags 24237 - available. 24238 - properties: 24239 - range: 24240 - description: |- 24241 - Range gives a semver range for the image tag; the highest 24242 - version within the range that's a tag yields the latest image. 24243 - type: string 24244 - required: 24245 - - range 24246 - type: object 24247 - type: object 24248 - required: 24249 - - imageRepositoryRef 24250 - - policy 24251 - type: object 24252 + description: |- 24253 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 24254 + map is equivalent to an element of matchExpressions, whose key field is "key", the 24255 + operator is "In", and the values array contains only "value". The requirements are ANDed. 24256 + type: object 24257 + name: 24258 + description: Name of the referent 24259 + maxLength: 53 24260 + minLength: 1 24261 + type: string 24262 + namespace: 24263 + description: Namespace of the referent 24264 + maxLength: 53 24265 + minLength: 1 24266 + type: string 24267 + required: 24268 + - kind 24269 + - name 24270 + type: object 24271 + type: array 24272 + secretRef: 24273 + description: |- 24274 + Secret reference containing the token used 24275 + to validate the payload authenticity 24276 + properties: 24277 + name: 24278 + description: Name of the referent. 24279 + type: string 24280 + required: 24281 + - name 24282 + type: object 24283 + suspend: 24284 + description: |- 24285 + This flag tells the controller to suspend subsequent events handling. 24286 + Defaults to false. 24287 + type: boolean 24288 + type: 24289 + description: |- 24290 + Type of webhook sender, used to determine 24291 + the validation procedure and payload deserialization. 24292 + enum: 24293 + - generic 24294 + - generic-hmac 24295 + - github 24296 + - gitlab 24297 + - bitbucket 24298 + - harbor 24299 + - dockerhub 24300 + - quay 24301 + - gcr 24302 + - nexus 24303 + - acr 24304 + type: string 24305 + required: 24306 + - resources 24307 + - secretRef 24308 + - type 24309 + type: object 24310 + status: 24311 + default: 24312 + observedGeneration: -1 24313 + description: ReceiverStatus defines the observed state of Receiver 24314 + properties: 24315 + conditions: 24316 + items: 24317 + description: Condition contains details for one aspect of the current 24318 + state of this API Resource. 24319 + properties: 24320 + lastTransitionTime: 24321 + description: |- 24322 + lastTransitionTime is the last time the condition transitioned from one status to another. 24323 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24324 + format: date-time 24325 + type: string 24326 + message: 24327 + description: |- 24328 + message is a human readable message indicating details about the transition. 24329 + This may be an empty string. 24330 + maxLength: 32768 24331 + type: string 24332 + observedGeneration: 24333 + description: |- 24334 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24335 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24336 + with respect to the current state of the instance. 24337 + format: int64 24338 + minimum: 0 24339 + type: integer 24340 + reason: 24341 + description: |- 24342 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24343 + Producers of specific condition types may define expected values and meanings for this field, 24344 + and whether the values are considered a guaranteed API. 24345 + The value should be a CamelCase string. 24346 + This field may not be empty. 24347 + maxLength: 1024 24348 + minLength: 1 24349 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24350 + type: string 24351 status: 24352 - default: 24353 - observedGeneration: -1 24354 - description: ImagePolicyStatus defines the observed state of ImagePolicy 24355 - properties: 24356 - conditions: 24357 - items: 24358 - description: "Condition contains details for one aspect of the current state of this API 24359 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 24360 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 24361 - the observations of a foo's current state.\n\t // Known .status.conditions.type 24362 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 24363 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 24364 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 24365 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 24366 - fields\n\t}" 24367 - properties: 24368 - lastTransitionTime: 24369 - description: |- 24370 - lastTransitionTime is the last time the condition transitioned from one status to another. 24371 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24372 - format: date-time 24373 - type: string 24374 - message: 24375 - description: |- 24376 - message is a human readable message indicating details about the transition. 24377 - This may be an empty string. 24378 - maxLength: 32768 24379 - type: string 24380 - observedGeneration: 24381 - description: |- 24382 - observedGeneration represents the .metadata.generation that the condition was set based upon. 24383 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24384 - with respect to the current state of the instance. 24385 - format: int64 24386 - minimum: 0 24387 - type: integer 24388 - reason: 24389 - description: |- 24390 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 24391 - Producers of specific condition types may define expected values and meanings for this field, 24392 - and whether the values are considered a guaranteed API. 24393 - The value should be a CamelCase string. 24394 - This field may not be empty. 24395 - maxLength: 1024 24396 - minLength: 1 24397 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24398 - type: string 24399 - status: 24400 - description: status of the condition, one of True, False, Unknown. 24401 - enum: 24402 - - "True" 24403 - - "False" 24404 - - Unknown 24405 - type: string 24406 - type: 24407 - description: |- 24408 - type of condition in CamelCase or in foo.example.com/CamelCase. 24409 - --- 24410 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 24411 - useful (see .node.status.conditions), the ability to deconflict is important. 24412 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 24413 - maxLength: 316 24414 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24415 - type: string 24416 - required: 24417 - - lastTransitionTime 24418 - - message 24419 - - reason 24420 - - status 24421 - - type 24422 - type: object 24423 - type: array 24424 - latestImage: 24425 - description: |- 24426 - LatestImage gives the first in the list of images scanned by 24427 - the image repository, when filtered and ordered according to 24428 - the policy. 24429 - type: string 24430 - observedGeneration: 24431 - format: int64 24432 - type: integer 24433 - observedPreviousImage: 24434 - description: |- 24435 - ObservedPreviousImage is the observed previous LatestImage. It is used 24436 - to keep track of the previous and current images. 24437 - type: string 24438 - type: object 24439 + description: status of the condition, one of True, False, Unknown. 24440 + enum: 24441 + - "True" 24442 + - "False" 24443 + - Unknown 24444 + type: string 24445 + type: 24446 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24447 + maxLength: 316 24448 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24449 + type: string 24450 + required: 24451 + - lastTransitionTime 24452 + - message 24453 + - reason 24454 + - status 24455 + - type 24456 + type: object 24457 + type: array 24458 + observedGeneration: 24459 + description: ObservedGeneration is the last observed generation. 24460 + format: int64 24461 + type: integer 24462 + url: 24463 + description: |- 24464 + Generated webhook URL in the format 24465 + of '/hook/sha256sum(token+name+namespace)'. 24466 + type: string 24467 + type: object 24468 + type: object 24469 + served: true 24470 + storage: false 24471 + subresources: 24472 + status: {} 24473 + - additionalPrinterColumns: 24474 + - jsonPath: .metadata.creationTimestamp 24475 + name: Age 24476 + type: date 24477 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 24478 + name: Ready 24479 + type: string 24480 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 24481 + name: Status 24482 + type: string 24483 + deprecated: true 24484 + deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 24485 + name: v1beta2 24486 + schema: 24487 + openAPIV3Schema: 24488 + description: Receiver is the Schema for the receivers API. 24489 + properties: 24490 + apiVersion: 24491 + description: |- 24492 + APIVersion defines the versioned schema of this representation of an object. 24493 + Servers should convert recognized schemas to the latest internal value, and 24494 + may reject unrecognized values. 24495 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24496 + type: string 24497 + kind: 24498 + description: |- 24499 + Kind is a string value representing the REST resource this object represents. 24500 + Servers may infer this from the endpoint the client submits requests to. 24501 + Cannot be updated. 24502 + In CamelCase. 24503 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24504 + type: string 24505 + metadata: 24506 + type: object 24507 + spec: 24508 + description: ReceiverSpec defines the desired state of the Receiver. 24509 + properties: 24510 + events: 24511 + description: |- 24512 + Events specifies the list of event types to handle, 24513 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 24514 + items: 24515 + type: string 24516 + type: array 24517 + interval: 24518 + description: Interval at which to reconcile the Receiver with its 24519 + Secret references. 24520 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 24521 + type: string 24522 + resources: 24523 + description: A list of resources to be notified about changes. 24524 + items: 24525 + description: |- 24526 + CrossNamespaceObjectReference contains enough information to let you locate the 24527 + typed referenced object at cluster level 24528 + properties: 24529 + apiVersion: 24530 + description: API version of the referent 24531 + type: string 24532 + kind: 24533 + description: Kind of the referent 24534 + enum: 24535 + - Bucket 24536 + - GitRepository 24537 + - Kustomization 24538 + - HelmRelease 24539 + - HelmChart 24540 + - HelmRepository 24541 + - ImageRepository 24542 + - ImagePolicy 24543 + - ImageUpdateAutomation 24544 + - OCIRepository 24545 + type: string 24546 + matchLabels: 24547 + additionalProperties: 24548 + type: string 24549 + description: |- 24550 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 24551 + map is equivalent to an element of matchExpressions, whose key field is "key", the 24552 + operator is "In", and the values array contains only "value". The requirements are ANDed. 24553 + MatchLabels requires the name to be set to `*`. 24554 + type: object 24555 + name: 24556 + description: |- 24557 + Name of the referent 24558 + If multiple resources are targeted `*` may be set. 24559 + maxLength: 53 24560 + minLength: 1 24561 + type: string 24562 + namespace: 24563 + description: Namespace of the referent 24564 + maxLength: 53 24565 + minLength: 1 24566 + type: string 24567 + required: 24568 + - kind 24569 + - name 24570 + type: object 24571 + type: array 24572 + secretRef: 24573 + description: |- 24574 + SecretRef specifies the Secret containing the token used 24575 + to validate the payload authenticity. 24576 + properties: 24577 + name: 24578 + description: Name of the referent. 24579 + type: string 24580 + required: 24581 + - name 24582 type: object 24583 - served: true 24584 - storage: true 24585 - subresources: 24586 - status: {} 24587 + suspend: 24588 + description: |- 24589 + Suspend tells the controller to suspend subsequent 24590 + events handling for this receiver. 24591 + type: boolean 24592 + type: 24593 + description: |- 24594 + Type of webhook sender, used to determine 24595 + the validation procedure and payload deserialization. 24596 + enum: 24597 + - generic 24598 + - generic-hmac 24599 + - github 24600 + - gitlab 24601 + - bitbucket 24602 + - harbor 24603 + - dockerhub 24604 + - quay 24605 + - gcr 24606 + - nexus 24607 + - acr 24608 + type: string 24609 + required: 24610 + - resources 24611 + - secretRef 24612 + - type 24613 + type: object 24614 + status: 24615 + default: 24616 + observedGeneration: -1 24617 + description: ReceiverStatus defines the observed state of the Receiver. 24618 + properties: 24619 + conditions: 24620 + description: Conditions holds the conditions for the Receiver. 24621 + items: 24622 + description: Condition contains details for one aspect of the current 24623 + state of this API Resource. 24624 + properties: 24625 + lastTransitionTime: 24626 + description: |- 24627 + lastTransitionTime is the last time the condition transitioned from one status to another. 24628 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 24629 + format: date-time 24630 + type: string 24631 + message: 24632 + description: |- 24633 + message is a human readable message indicating details about the transition. 24634 + This may be an empty string. 24635 + maxLength: 32768 24636 + type: string 24637 + observedGeneration: 24638 + description: |- 24639 + observedGeneration represents the .metadata.generation that the condition was set based upon. 24640 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 24641 + with respect to the current state of the instance. 24642 + format: int64 24643 + minimum: 0 24644 + type: integer 24645 + reason: 24646 + description: |- 24647 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 24648 + Producers of specific condition types may define expected values and meanings for this field, 24649 + and whether the values are considered a guaranteed API. 24650 + The value should be a CamelCase string. 24651 + This field may not be empty. 24652 + maxLength: 1024 24653 + minLength: 1 24654 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 24655 + type: string 24656 + status: 24657 + description: status of the condition, one of True, False, Unknown. 24658 + enum: 24659 + - "True" 24660 + - "False" 24661 + - Unknown 24662 + type: string 24663 + type: 24664 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 24665 + maxLength: 316 24666 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 24667 + type: string 24668 + required: 24669 + - lastTransitionTime 24670 + - message 24671 + - reason 24672 + - status 24673 + - type 24674 + type: object 24675 + type: array 24676 + lastHandledReconcileAt: 24677 + description: |- 24678 + LastHandledReconcileAt holds the value of the most recent 24679 + reconcile request value, so a change of the annotation value 24680 + can be detected. 24681 + type: string 24682 + observedGeneration: 24683 + description: ObservedGeneration is the last observed generation of 24684 + the Receiver object. 24685 + format: int64 24686 + type: integer 24687 + url: 24688 + description: |- 24689 + URL is the generated incoming webhook address in the format 24690 + of '/hook/sha256sum(token+name+namespace)'. 24691 + Deprecated: Replaced by WebhookPath. 24692 + type: string 24693 + webhookPath: 24694 + description: |- 24695 + WebhookPath is the generated incoming webhook address in the format 24696 + of '/hook/sha256sum(token+name+namespace)'. 24697 + type: string 24698 + type: object 24699 + type: object 24700 + served: true 24701 + storage: false 24702 + subresources: 24703 + status: {} 24704 +--- 24705 +apiVersion: v1 24706 +kind: ServiceAccount 24707 +metadata: 24708 + labels: 24709 + app.kubernetes.io/component: notification-controller 24710 + app.kubernetes.io/instance: flux-system 24711 + app.kubernetes.io/part-of: flux 24712 + app.kubernetes.io/version: v2.4.0 24713 + name: notification-controller 24714 + namespace: flux-system 24715 +--- 24716 +apiVersion: v1 24717 +kind: Service 24718 +metadata: 24719 + labels: 24720 + app.kubernetes.io/component: notification-controller 24721 + app.kubernetes.io/instance: flux-system 24722 + app.kubernetes.io/part-of: flux 24723 + app.kubernetes.io/version: v2.4.0 24724 + control-plane: controller 24725 + name: notification-controller 24726 + namespace: flux-system 24727 +spec: 24728 + ports: 24729 + - name: http 24730 + port: 80 24731 + protocol: TCP 24732 + targetPort: http 24733 + selector: 24734 + app: notification-controller 24735 + type: ClusterIP 24736 +--- 24737 +apiVersion: v1 24738 +kind: Service 24739 +metadata: 24740 + labels: 24741 + app.kubernetes.io/component: notification-controller 24742 + app.kubernetes.io/instance: flux-system 24743 + app.kubernetes.io/part-of: flux 24744 + app.kubernetes.io/version: v2.4.0 24745 + control-plane: controller 24746 + name: webhook-receiver 24747 + namespace: flux-system 24748 +spec: 24749 + ports: 24750 + - name: http 24751 + port: 80 24752 + protocol: TCP 24753 + targetPort: http-webhook 24754 + selector: 24755 + app: notification-controller 24756 + type: ClusterIP 24757 +--- 24758 +apiVersion: apps/v1 24759 +kind: Deployment 24760 +metadata: 24761 + labels: 24762 + app.kubernetes.io/component: notification-controller 24763 + app.kubernetes.io/instance: flux-system 24764 + app.kubernetes.io/part-of: flux 24765 + app.kubernetes.io/version: v2.4.0 24766 + control-plane: controller 24767 + name: notification-controller 24768 + namespace: flux-system 24769 +spec: 24770 + replicas: 1 24771 + selector: 24772 + matchLabels: 24773 + app: notification-controller 24774 + template: 24775 + metadata: 24776 + annotations: 24777 + prometheus.io/port: "8080" 24778 + prometheus.io/scrape: "true" 24779 + labels: 24780 + app: notification-controller 24781 + spec: 24782 + containers: 24783 + - args: 24784 + - --watch-all-namespaces=true 24785 + - --log-level=info 24786 + - --log-encoding=json 24787 + - --enable-leader-election 24788 + env: 24789 + - name: RUNTIME_NAMESPACE 24790 + valueFrom: 24791 + fieldRef: 24792 + fieldPath: metadata.namespace 24793 + - name: GOMAXPROCS 24794 + valueFrom: 24795 + resourceFieldRef: 24796 + containerName: manager 24797 + resource: limits.cpu 24798 + - name: GOMEMLIMIT 24799 + valueFrom: 24800 + resourceFieldRef: 24801 + containerName: manager 24802 + resource: limits.memory 24803 + image: ghcr.io/fluxcd/notification-controller:v1.4.0 24804 + imagePullPolicy: IfNotPresent 24805 + livenessProbe: 24806 + httpGet: 24807 + path: /healthz 24808 + port: healthz 24809 + name: manager 24810 + ports: 24811 + - containerPort: 9090 24812 + name: http 24813 + protocol: TCP 24814 + - containerPort: 9292 24815 + name: http-webhook 24816 + protocol: TCP 24817 + - containerPort: 8080 24818 + name: http-prom 24819 + protocol: TCP 24820 + - containerPort: 9440 24821 + name: healthz 24822 + protocol: TCP 24823 + readinessProbe: 24824 + httpGet: 24825 + path: /readyz 24826 + port: healthz 24827 + resources: 24828 + limits: 24829 + cpu: 1000m 24830 + memory: 1Gi 24831 + requests: 24832 + cpu: 100m 24833 + memory: 64Mi 24834 + securityContext: 24835 + allowPrivilegeEscalation: false 24836 + capabilities: 24837 + drop: 24838 + - ALL 24839 + readOnlyRootFilesystem: true 24840 + runAsNonRoot: true 24841 + seccompProfile: 24842 + type: RuntimeDefault 24843 + volumeMounts: 24844 + - mountPath: /tmp 24845 + name: temp 24846 + nodeSelector: 24847 + kubernetes.io/os: linux 24848 + securityContext: 24849 + fsGroup: 1337 24850 + serviceAccountName: notification-controller 24851 + terminationGracePeriodSeconds: 10 24852 + volumes: 24853 + - emptyDir: {} 24854 + name: temp 24855 --- 24856 apiVersion: apiextensions.k8s.io/v1 24857 kind: CustomResourceDefinition 24858 metadata: 24859 - annotations: 24860 - controller-gen.kubebuilder.io/version: v0.15.0 24861 - labels: 24862 - app.kubernetes.io/component: image-reflector-controller 24863 - app.kubernetes.io/instance: flux-system 24864 - app.kubernetes.io/part-of: flux 24865 - app.kubernetes.io/version: v2.3.0 24866 - name: imagerepositories.image.toolkit.fluxcd.io 24867 + annotations: 24868 + controller-gen.kubebuilder.io/version: v0.16.1 24869 + labels: 24870 + app.kubernetes.io/component: image-reflector-controller 24871 + app.kubernetes.io/instance: flux-system 24872 + app.kubernetes.io/part-of: flux 24873 + app.kubernetes.io/version: v2.4.0 24874 + name: imagepolicies.image.toolkit.fluxcd.io 24875 spec: 24876 - group: image.toolkit.fluxcd.io 24877 - names: 24878 - kind: ImageRepository 24879 - listKind: ImageRepositoryList 24880 - plural: imagerepositories 24881 - singular: imagerepository 24882 - scope: Namespaced 24883 - versions: 24884 - - additionalPrinterColumns: 24885 - - jsonPath: .status.lastScanResult.scanTime 24886 - name: Last scan 24887 - type: string 24888 - - jsonPath: .status.lastScanResult.tagCount 24889 - name: Tags 24890 - type: string 24891 - name: v1beta1 24892 - schema: 24893 - openAPIV3Schema: 24894 - description: ImageRepository is the Schema for the imagerepositories API 24895 + group: image.toolkit.fluxcd.io 24896 + names: 24897 + kind: ImagePolicy 24898 + listKind: ImagePolicyList 24899 + plural: imagepolicies 24900 + singular: imagepolicy 24901 + scope: Namespaced 24902 + versions: 24903 + - additionalPrinterColumns: 24904 + - jsonPath: .status.latestImage 24905 + name: LatestImage 24906 + type: string 24907 + name: v1beta1 24908 + schema: 24909 + openAPIV3Schema: 24910 + description: ImagePolicy is the Schema for the imagepolicies API 24911 + properties: 24912 + apiVersion: 24913 + description: |- 24914 + APIVersion defines the versioned schema of this representation of an object. 24915 + Servers should convert recognized schemas to the latest internal value, and 24916 + may reject unrecognized values. 24917 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24918 + type: string 24919 + kind: 24920 + description: |- 24921 + Kind is a string value representing the REST resource this object represents. 24922 + Servers may infer this from the endpoint the client submits requests to. 24923 + Cannot be updated. 24924 + In CamelCase. 24925 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 24926 + type: string 24927 + metadata: 24928 + type: object 24929 + spec: 24930 + description: |- 24931 + ImagePolicySpec defines the parameters for calculating the 24932 + ImagePolicy 24933 + properties: 24934 + filterTags: 24935 + description: |- 24936 + FilterTags enables filtering for only a subset of tags based on a set of 24937 + rules. If no rules are provided, all the tags from the repository will be 24938 + ordered and compared. 24939 properties: 24940 - apiVersion: 24941 + extract: 24942 + description: |- 24943 + Extract allows a capture group to be extracted from the specified regular 24944 + expression pattern, useful before tag evaluation. 24945 + type: string 24946 + pattern: 24947 + description: |- 24948 + Pattern specifies a regular expression pattern used to filter for image 24949 + tags. 24950 + type: string 24951 + type: object 24952 + imageRepositoryRef: 24953 + description: |- 24954 + ImageRepositoryRef points at the object specifying the image 24955 + being scanned 24956 + properties: 24957 + name: 24958 + description: Name of the referent. 24959 + type: string 24960 + namespace: 24961 + description: Namespace of the referent, when not specified it 24962 + acts as LocalObjectReference. 24963 + type: string 24964 + required: 24965 + - name 24966 + type: object 24967 + policy: 24968 + description: |- 24969 + Policy gives the particulars of the policy to be followed in 24970 + selecting the most recent image 24971 + properties: 24972 + alphabetical: 24973 + description: Alphabetical set of rules to use for alphabetical 24974 + ordering of the tags. 24975 + properties: 24976 + order: 24977 + default: asc 24978 description: |- 24979 - APIVersion defines the versioned schema of this representation of an object. 24980 - Servers should convert recognized schemas to the latest internal value, and 24981 - may reject unrecognized values. 24982 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 24983 + Order specifies the sorting order of the tags. Given the letters of the 24984 + alphabet as tags, ascending order would select Z, and descending order 24985 + would select A. 24986 + enum: 24987 + - asc 24988 + - desc 24989 type: string 24990 - kind: 24991 + type: object 24992 + numerical: 24993 + description: Numerical set of rules to use for numerical ordering 24994 + of the tags. 24995 + properties: 24996 + order: 24997 + default: asc 24998 description: |- 24999 - Kind is a string value representing the REST resource this object represents. 25000 - Servers may infer this from the endpoint the client submits requests to. 25001 - Cannot be updated. 25002 - In CamelCase. 25003 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25004 + Order specifies the sorting order of the tags. Given the integer values 25005 + from 0 to 9 as tags, ascending order would select 9, and descending order 25006 + would select 0. 25007 + enum: 25008 + - asc 25009 + - desc 25010 type: string 25011 - metadata: 25012 - type: object 25013 - spec: 25014 + type: object 25015 + semver: 25016 + description: |- 25017 + SemVer gives a semantic version range to check against the tags 25018 + available. 25019 + properties: 25020 + range: 25021 description: |- 25022 - ImageRepositorySpec defines the parameters for scanning an image 25023 - repository, e.g., `fluxcd/flux`. 25024 - properties: 25025 - accessFrom: 25026 - description: |- 25027 - AccessFrom defines an ACL for allowing cross-namespace references 25028 - to the ImageRepository object based on the caller's namespace labels. 25029 - properties: 25030 - namespaceSelectors: 25031 - description: |- 25032 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25033 - Items in this list are evaluated using a logical OR operation. 25034 - items: 25035 - description: |- 25036 - NamespaceSelector selects the namespaces to which this ACL applies. 25037 - An empty map of MatchLabels matches all namespaces in a cluster. 25038 - properties: 25039 - matchLabels: 25040 - additionalProperties: 25041 - type: string 25042 - description: |- 25043 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25044 - map is equivalent to an element of matchExpressions, whose key field is "key", the 25045 - operator is "In", and the values array contains only "value". The requirements are ANDed. 25046 - type: object 25047 - type: object 25048 - type: array 25049 - required: 25050 - - namespaceSelectors 25051 - type: object 25052 - certSecretRef: 25053 - description: |- 25054 - CertSecretRef can be given the name of a secret containing 25055 - either or both of 25056 - 25057 - 25058 - - a PEM-encoded client certificate (`certFile`) and private 25059 - key (`keyFile`); 25060 - - a PEM-encoded CA certificate (`caFile`) 25061 - 25062 - 25063 - and whichever are supplied, will be used for connecting to the 25064 - registry. The client cert and key are useful if you are 25065 - authenticating with a certificate; the CA cert is useful if 25066 - you are using a self-signed server certificate. 25067 - properties: 25068 - name: 25069 - description: Name of the referent. 25070 - type: string 25071 - required: 25072 - - name 25073 - type: object 25074 - exclusionList: 25075 - description: |- 25076 - ExclusionList is a list of regex strings used to exclude certain tags 25077 - from being stored in the database. 25078 - items: 25079 - type: string 25080 - type: array 25081 - image: 25082 - description: Image is the name of the image repository 25083 - type: string 25084 - interval: 25085 - description: |- 25086 - Interval is the length of time to wait between 25087 - scans of the image repository. 25088 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25089 - type: string 25090 - secretRef: 25091 - description: |- 25092 - SecretRef can be given the name of a secret containing 25093 - credentials to use for the image registry. The secret should be 25094 - created with `kubectl create secret docker-registry`, or the 25095 - equivalent. 25096 - properties: 25097 - name: 25098 - description: Name of the referent. 25099 - type: string 25100 - required: 25101 - - name 25102 - type: object 25103 - serviceAccountName: 25104 - description: |- 25105 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 25106 - the image pull if the service account has attached pull secrets. 25107 - maxLength: 253 25108 - type: string 25109 - suspend: 25110 - description: |- 25111 - This flag tells the controller to suspend subsequent image scans. 25112 - It does not apply to already started scans. Defaults to false. 25113 - type: boolean 25114 - timeout: 25115 - description: |- 25116 - Timeout for image scanning. 25117 - Defaults to 'Interval' duration. 25118 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 25119 - type: string 25120 - type: object 25121 + Range gives a semver range for the image tag; the highest 25122 + version within the range that's a tag yields the latest image. 25123 + type: string 25124 + required: 25125 + - range 25126 + type: object 25127 + type: object 25128 + required: 25129 + - imageRepositoryRef 25130 + - policy 25131 + type: object 25132 + status: 25133 + default: 25134 + observedGeneration: -1 25135 + description: ImagePolicyStatus defines the observed state of ImagePolicy 25136 + properties: 25137 + conditions: 25138 + items: 25139 + description: Condition contains details for one aspect of the current 25140 + state of this API Resource. 25141 + properties: 25142 + lastTransitionTime: 25143 + description: |- 25144 + lastTransitionTime is the last time the condition transitioned from one status to another. 25145 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25146 + format: date-time 25147 + type: string 25148 + message: 25149 + description: |- 25150 + message is a human readable message indicating details about the transition. 25151 + This may be an empty string. 25152 + maxLength: 32768 25153 + type: string 25154 + observedGeneration: 25155 + description: |- 25156 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25157 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25158 + with respect to the current state of the instance. 25159 + format: int64 25160 + minimum: 0 25161 + type: integer 25162 + reason: 25163 + description: |- 25164 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25165 + Producers of specific condition types may define expected values and meanings for this field, 25166 + and whether the values are considered a guaranteed API. 25167 + The value should be a CamelCase string. 25168 + This field may not be empty. 25169 + maxLength: 1024 25170 + minLength: 1 25171 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25172 + type: string 25173 status: 25174 - default: 25175 - observedGeneration: -1 25176 - description: ImageRepositoryStatus defines the observed state of ImageRepository 25177 - properties: 25178 - canonicalImageName: 25179 - description: |- 25180 - CanonicalName is the name of the image repository with all the 25181 - implied bits made explicit; e.g., `docker.io/library/alpine` 25182 - rather than `alpine`. 25183 - type: string 25184 - conditions: 25185 - items: 25186 - description: "Condition contains details for one aspect of the current state of this API 25187 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 25188 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 25189 - the observations of a foo's current state.\n\t // Known .status.conditions.type 25190 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 25191 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 25192 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 25193 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 25194 - fields\n\t}" 25195 - properties: 25196 - lastTransitionTime: 25197 - description: |- 25198 - lastTransitionTime is the last time the condition transitioned from one status to another. 25199 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25200 - format: date-time 25201 - type: string 25202 - message: 25203 - description: |- 25204 - message is a human readable message indicating details about the transition. 25205 - This may be an empty string. 25206 - maxLength: 32768 25207 - type: string 25208 - observedGeneration: 25209 - description: |- 25210 - observedGeneration represents the .metadata.generation that the condition was set based upon. 25211 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25212 - with respect to the current state of the instance. 25213 - format: int64 25214 - minimum: 0 25215 - type: integer 25216 - reason: 25217 - description: |- 25218 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 25219 - Producers of specific condition types may define expected values and meanings for this field, 25220 - and whether the values are considered a guaranteed API. 25221 - The value should be a CamelCase string. 25222 - This field may not be empty. 25223 - maxLength: 1024 25224 - minLength: 1 25225 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25226 - type: string 25227 - status: 25228 - description: status of the condition, one of True, False, Unknown. 25229 - enum: 25230 - - "True" 25231 - - "False" 25232 - - Unknown 25233 - type: string 25234 - type: 25235 - description: |- 25236 - type of condition in CamelCase or in foo.example.com/CamelCase. 25237 - --- 25238 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 25239 - useful (see .node.status.conditions), the ability to deconflict is important. 25240 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 25241 - maxLength: 316 25242 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25243 - type: string 25244 - required: 25245 - - lastTransitionTime 25246 - - message 25247 - - reason 25248 - - status 25249 - - type 25250 - type: object 25251 - type: array 25252 - lastHandledReconcileAt: 25253 - description: |- 25254 - LastHandledReconcileAt holds the value of the most recent 25255 - reconcile request value, so a change of the annotation value 25256 - can be detected. 25257 - type: string 25258 - lastScanResult: 25259 - description: LastScanResult contains the number of fetched tags. 25260 - properties: 25261 - scanTime: 25262 - format: date-time 25263 - type: string 25264 - tagCount: 25265 - type: integer 25266 - required: 25267 - - tagCount 25268 - type: object 25269 - observedGeneration: 25270 - description: ObservedGeneration is the last reconciled generation. 25271 - format: int64 25272 - type: integer 25273 - type: object 25274 + description: status of the condition, one of True, False, Unknown. 25275 + enum: 25276 + - "True" 25277 + - "False" 25278 + - Unknown 25279 + type: string 25280 + type: 25281 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25282 + maxLength: 316 25283 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25284 + type: string 25285 + required: 25286 + - lastTransitionTime 25287 + - message 25288 + - reason 25289 + - status 25290 + - type 25291 + type: object 25292 + type: array 25293 + latestImage: 25294 + description: |- 25295 + LatestImage gives the first in the list of images scanned by 25296 + the image repository, when filtered and ordered according to 25297 + the policy. 25298 + type: string 25299 + observedGeneration: 25300 + format: int64 25301 + type: integer 25302 + type: object 25303 + type: object 25304 + served: true 25305 + storage: false 25306 + subresources: 25307 + status: {} 25308 + - additionalPrinterColumns: 25309 + - jsonPath: .status.latestImage 25310 + name: LatestImage 25311 + type: string 25312 + name: v1beta2 25313 + schema: 25314 + openAPIV3Schema: 25315 + description: ImagePolicy is the Schema for the imagepolicies API 25316 + properties: 25317 + apiVersion: 25318 + description: |- 25319 + APIVersion defines the versioned schema of this representation of an object. 25320 + Servers should convert recognized schemas to the latest internal value, and 25321 + may reject unrecognized values. 25322 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25323 + type: string 25324 + kind: 25325 + description: |- 25326 + Kind is a string value representing the REST resource this object represents. 25327 + Servers may infer this from the endpoint the client submits requests to. 25328 + Cannot be updated. 25329 + In CamelCase. 25330 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25331 + type: string 25332 + metadata: 25333 + type: object 25334 + spec: 25335 + description: |- 25336 + ImagePolicySpec defines the parameters for calculating the 25337 + ImagePolicy. 25338 + properties: 25339 + filterTags: 25340 + description: |- 25341 + FilterTags enables filtering for only a subset of tags based on a set of 25342 + rules. If no rules are provided, all the tags from the repository will be 25343 + ordered and compared. 25344 + properties: 25345 + extract: 25346 + description: |- 25347 + Extract allows a capture group to be extracted from the specified regular 25348 + expression pattern, useful before tag evaluation. 25349 + type: string 25350 + pattern: 25351 + description: |- 25352 + Pattern specifies a regular expression pattern used to filter for image 25353 + tags. 25354 + type: string 25355 type: object 25356 - served: true 25357 - storage: false 25358 - subresources: 25359 - status: {} 25360 - - additionalPrinterColumns: 25361 - - jsonPath: .status.lastScanResult.scanTime 25362 - name: Last scan 25363 - type: string 25364 - - jsonPath: .status.lastScanResult.tagCount 25365 - name: Tags 25366 - type: string 25367 - name: v1beta2 25368 - schema: 25369 - openAPIV3Schema: 25370 - description: ImageRepository is the Schema for the imagerepositories API 25371 + imageRepositoryRef: 25372 + description: |- 25373 + ImageRepositoryRef points at the object specifying the image 25374 + being scanned 25375 properties: 25376 - apiVersion: 25377 + name: 25378 + description: Name of the referent. 25379 + type: string 25380 + namespace: 25381 + description: Namespace of the referent, when not specified it 25382 + acts as LocalObjectReference. 25383 + type: string 25384 + required: 25385 + - name 25386 + type: object 25387 + policy: 25388 + description: |- 25389 + Policy gives the particulars of the policy to be followed in 25390 + selecting the most recent image 25391 + properties: 25392 + alphabetical: 25393 + description: Alphabetical set of rules to use for alphabetical 25394 + ordering of the tags. 25395 + properties: 25396 + order: 25397 + default: asc 25398 description: |- 25399 - APIVersion defines the versioned schema of this representation of an object. 25400 - Servers should convert recognized schemas to the latest internal value, and 25401 - may reject unrecognized values. 25402 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25403 + Order specifies the sorting order of the tags. Given the letters of the 25404 + alphabet as tags, ascending order would select Z, and descending order 25405 + would select A. 25406 + enum: 25407 + - asc 25408 + - desc 25409 type: string 25410 - kind: 25411 + type: object 25412 + numerical: 25413 + description: Numerical set of rules to use for numerical ordering 25414 + of the tags. 25415 + properties: 25416 + order: 25417 + default: asc 25418 description: |- 25419 - Kind is a string value representing the REST resource this object represents. 25420 - Servers may infer this from the endpoint the client submits requests to. 25421 - Cannot be updated. 25422 - In CamelCase. 25423 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25424 + Order specifies the sorting order of the tags. Given the integer values 25425 + from 0 to 9 as tags, ascending order would select 9, and descending order 25426 + would select 0. 25427 + enum: 25428 + - asc 25429 + - desc 25430 type: string 25431 - metadata: 25432 - type: object 25433 - spec: 25434 + type: object 25435 + semver: 25436 + description: |- 25437 + SemVer gives a semantic version range to check against the tags 25438 + available. 25439 + properties: 25440 + range: 25441 description: |- 25442 - ImageRepositorySpec defines the parameters for scanning an image 25443 - repository, e.g., `fluxcd/flux`. 25444 - properties: 25445 - accessFrom: 25446 - description: |- 25447 - AccessFrom defines an ACL for allowing cross-namespace references 25448 - to the ImageRepository object based on the caller's namespace labels. 25449 - properties: 25450 - namespaceSelectors: 25451 - description: |- 25452 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25453 - Items in this list are evaluated using a logical OR operation. 25454 - items: 25455 - description: |- 25456 - NamespaceSelector selects the namespaces to which this ACL applies. 25457 - An empty map of MatchLabels matches all namespaces in a cluster. 25458 - properties: 25459 - matchLabels: 25460 - additionalProperties: 25461 - type: string 25462 - description: |- 25463 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25464 - map is equivalent to an element of matchExpressions, whose key field is "key", the 25465 - operator is "In", and the values array contains only "value". The requirements are ANDed. 25466 - type: object 25467 - type: object 25468 - type: array 25469 - required: 25470 - - namespaceSelectors 25471 - type: object 25472 - certSecretRef: 25473 - description: |- 25474 - CertSecretRef can be given the name of a Secret containing 25475 - either or both of 25476 - 25477 - 25478 - - a PEM-encoded client certificate (`tls.crt`) and private 25479 - key (`tls.key`); 25480 - - a PEM-encoded CA certificate (`ca.crt`) 25481 - 25482 - 25483 - and whichever are supplied, will be used for connecting to the 25484 - registry. The client cert and key are useful if you are 25485 - authenticating with a certificate; the CA cert is useful if 25486 - you are using a self-signed server certificate. The Secret must 25487 - be of type `Opaque` or `kubernetes.io/tls`. 25488 - 25489 - 25490 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 25491 - been deprecated. 25492 - properties: 25493 - name: 25494 - description: Name of the referent. 25495 - type: string 25496 - required: 25497 - - name 25498 - type: object 25499 - exclusionList: 25500 - default: 25501 - - ^.*\.sig$ 25502 - description: |- 25503 - ExclusionList is a list of regex strings used to exclude certain tags 25504 - from being stored in the database. 25505 - items: 25506 - type: string 25507 - maxItems: 25 25508 - type: array 25509 - image: 25510 - description: Image is the name of the image repository 25511 - type: string 25512 - insecure: 25513 - description: Insecure allows connecting to a non-TLS HTTP container registry. 25514 - type: boolean 25515 - interval: 25516 - description: |- 25517 - Interval is the length of time to wait between 25518 - scans of the image repository. 25519 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25520 - type: string 25521 - provider: 25522 - default: generic 25523 - description: |- 25524 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 25525 - When not specified, defaults to 'generic'. 25526 - enum: 25527 - - generic 25528 - - aws 25529 - - azure 25530 - - gcp 25531 - type: string 25532 - secretRef: 25533 - description: |- 25534 - SecretRef can be given the name of a secret containing 25535 - credentials to use for the image registry. The secret should be 25536 - created with `kubectl create secret docker-registry`, or the 25537 - equivalent. 25538 - properties: 25539 - name: 25540 - description: Name of the referent. 25541 - type: string 25542 - required: 25543 - - name 25544 - type: object 25545 - serviceAccountName: 25546 - description: |- 25547 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 25548 - the image pull if the service account has attached pull secrets. 25549 - maxLength: 253 25550 - type: string 25551 - suspend: 25552 - description: |- 25553 - This flag tells the controller to suspend subsequent image scans. 25554 - It does not apply to already started scans. Defaults to false. 25555 - type: boolean 25556 - timeout: 25557 - description: |- 25558 - Timeout for image scanning. 25559 - Defaults to 'Interval' duration. 25560 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 25561 - type: string 25562 - type: object 25563 + Range gives a semver range for the image tag; the highest 25564 + version within the range that's a tag yields the latest image. 25565 + type: string 25566 + required: 25567 + - range 25568 + type: object 25569 + type: object 25570 + required: 25571 + - imageRepositoryRef 25572 + - policy 25573 + type: object 25574 + status: 25575 + default: 25576 + observedGeneration: -1 25577 + description: ImagePolicyStatus defines the observed state of ImagePolicy 25578 + properties: 25579 + conditions: 25580 + items: 25581 + description: Condition contains details for one aspect of the current 25582 + state of this API Resource. 25583 + properties: 25584 + lastTransitionTime: 25585 + description: |- 25586 + lastTransitionTime is the last time the condition transitioned from one status to another. 25587 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25588 + format: date-time 25589 + type: string 25590 + message: 25591 + description: |- 25592 + message is a human readable message indicating details about the transition. 25593 + This may be an empty string. 25594 + maxLength: 32768 25595 + type: string 25596 + observedGeneration: 25597 + description: |- 25598 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25599 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25600 + with respect to the current state of the instance. 25601 + format: int64 25602 + minimum: 0 25603 + type: integer 25604 + reason: 25605 + description: |- 25606 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25607 + Producers of specific condition types may define expected values and meanings for this field, 25608 + and whether the values are considered a guaranteed API. 25609 + The value should be a CamelCase string. 25610 + This field may not be empty. 25611 + maxLength: 1024 25612 + minLength: 1 25613 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25614 + type: string 25615 status: 25616 - default: 25617 - observedGeneration: -1 25618 - description: ImageRepositoryStatus defines the observed state of ImageRepository 25619 - properties: 25620 - canonicalImageName: 25621 - description: |- 25622 - CanonicalName is the name of the image repository with all the 25623 - implied bits made explicit; e.g., `docker.io/library/alpine` 25624 - rather than `alpine`. 25625 - type: string 25626 - conditions: 25627 - items: 25628 - description: "Condition contains details for one aspect of the current state of this API 25629 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 25630 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 25631 - the observations of a foo's current state.\n\t // Known .status.conditions.type 25632 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 25633 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 25634 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 25635 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 25636 - fields\n\t}" 25637 - properties: 25638 - lastTransitionTime: 25639 - description: |- 25640 - lastTransitionTime is the last time the condition transitioned from one status to another. 25641 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25642 - format: date-time 25643 - type: string 25644 - message: 25645 - description: |- 25646 - message is a human readable message indicating details about the transition. 25647 - This may be an empty string. 25648 - maxLength: 32768 25649 - type: string 25650 - observedGeneration: 25651 - description: |- 25652 - observedGeneration represents the .metadata.generation that the condition was set based upon. 25653 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25654 - with respect to the current state of the instance. 25655 - format: int64 25656 - minimum: 0 25657 - type: integer 25658 - reason: 25659 - description: |- 25660 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 25661 - Producers of specific condition types may define expected values and meanings for this field, 25662 - and whether the values are considered a guaranteed API. 25663 - The value should be a CamelCase string. 25664 - This field may not be empty. 25665 - maxLength: 1024 25666 - minLength: 1 25667 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25668 - type: string 25669 - status: 25670 - description: status of the condition, one of True, False, Unknown. 25671 - enum: 25672 - - "True" 25673 - - "False" 25674 - - Unknown 25675 - type: string 25676 - type: 25677 - description: |- 25678 - type of condition in CamelCase or in foo.example.com/CamelCase. 25679 - --- 25680 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 25681 - useful (see .node.status.conditions), the ability to deconflict is important. 25682 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 25683 - maxLength: 316 25684 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25685 - type: string 25686 - required: 25687 - - lastTransitionTime 25688 - - message 25689 - - reason 25690 - - status 25691 - - type 25692 - type: object 25693 - type: array 25694 - lastHandledReconcileAt: 25695 - description: |- 25696 - LastHandledReconcileAt holds the value of the most recent 25697 - reconcile request value, so a change of the annotation value 25698 - can be detected. 25699 - type: string 25700 - lastScanResult: 25701 - description: LastScanResult contains the number of fetched tags. 25702 - properties: 25703 - latestTags: 25704 - items: 25705 - type: string 25706 - type: array 25707 - scanTime: 25708 - format: date-time 25709 - type: string 25710 - tagCount: 25711 - type: integer 25712 - required: 25713 - - tagCount 25714 - type: object 25715 - observedExclusionList: 25716 - description: |- 25717 - ObservedExclusionList is a list of observed exclusion list. It reflects 25718 - the exclusion rules used for the observed scan result in 25719 - spec.lastScanResult. 25720 - items: 25721 - type: string 25722 - type: array 25723 - observedGeneration: 25724 - description: ObservedGeneration is the last reconciled generation. 25725 - format: int64 25726 - type: integer 25727 - type: object 25728 + description: status of the condition, one of True, False, Unknown. 25729 + enum: 25730 + - "True" 25731 + - "False" 25732 + - Unknown 25733 + type: string 25734 + type: 25735 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25736 + maxLength: 316 25737 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25738 + type: string 25739 + required: 25740 + - lastTransitionTime 25741 + - message 25742 + - reason 25743 + - status 25744 + - type 25745 + type: object 25746 + type: array 25747 + latestImage: 25748 + description: |- 25749 + LatestImage gives the first in the list of images scanned by 25750 + the image repository, when filtered and ordered according to 25751 + the policy. 25752 + type: string 25753 + observedGeneration: 25754 + format: int64 25755 + type: integer 25756 + observedPreviousImage: 25757 + description: |- 25758 + ObservedPreviousImage is the observed previous LatestImage. It is used 25759 + to keep track of the previous and current images. 25760 + type: string 25761 + type: object 25762 + type: object 25763 + served: true 25764 + storage: true 25765 + subresources: 25766 + status: {} 25767 +--- 25768 +apiVersion: apiextensions.k8s.io/v1 25769 +kind: CustomResourceDefinition 25770 +metadata: 25771 + annotations: 25772 + controller-gen.kubebuilder.io/version: v0.16.1 25773 + labels: 25774 + app.kubernetes.io/component: image-reflector-controller 25775 + app.kubernetes.io/instance: flux-system 25776 + app.kubernetes.io/part-of: flux 25777 + app.kubernetes.io/version: v2.4.0 25778 + name: imagerepositories.image.toolkit.fluxcd.io 25779 +spec: 25780 + group: image.toolkit.fluxcd.io 25781 + names: 25782 + kind: ImageRepository 25783 + listKind: ImageRepositoryList 25784 + plural: imagerepositories 25785 + singular: imagerepository 25786 + scope: Namespaced 25787 + versions: 25788 + - additionalPrinterColumns: 25789 + - jsonPath: .status.lastScanResult.scanTime 25790 + name: Last scan 25791 + type: string 25792 + - jsonPath: .status.lastScanResult.tagCount 25793 + name: Tags 25794 + type: string 25795 + name: v1beta1 25796 + schema: 25797 + openAPIV3Schema: 25798 + description: ImageRepository is the Schema for the imagerepositories API 25799 + properties: 25800 + apiVersion: 25801 + description: |- 25802 + APIVersion defines the versioned schema of this representation of an object. 25803 + Servers should convert recognized schemas to the latest internal value, and 25804 + may reject unrecognized values. 25805 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 25806 + type: string 25807 + kind: 25808 + description: |- 25809 + Kind is a string value representing the REST resource this object represents. 25810 + Servers may infer this from the endpoint the client submits requests to. 25811 + Cannot be updated. 25812 + In CamelCase. 25813 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 25814 + type: string 25815 + metadata: 25816 + type: object 25817 + spec: 25818 + description: |- 25819 + ImageRepositorySpec defines the parameters for scanning an image 25820 + repository, e.g., `fluxcd/flux`. 25821 + properties: 25822 + accessFrom: 25823 + description: |- 25824 + AccessFrom defines an ACL for allowing cross-namespace references 25825 + to the ImageRepository object based on the caller's namespace labels. 25826 + properties: 25827 + namespaceSelectors: 25828 + description: |- 25829 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 25830 + Items in this list are evaluated using a logical OR operation. 25831 + items: 25832 + description: |- 25833 + NamespaceSelector selects the namespaces to which this ACL applies. 25834 + An empty map of MatchLabels matches all namespaces in a cluster. 25835 + properties: 25836 + matchLabels: 25837 + additionalProperties: 25838 + type: string 25839 + description: |- 25840 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 25841 + map is equivalent to an element of matchExpressions, whose key field is "key", the 25842 + operator is "In", and the values array contains only "value". The requirements are ANDed. 25843 + type: object 25844 + type: object 25845 + type: array 25846 + required: 25847 + - namespaceSelectors 25848 type: object 25849 - served: true 25850 - storage: true 25851 - subresources: 25852 - status: {} 25853 + certSecretRef: 25854 + description: |- 25855 + CertSecretRef can be given the name of a secret containing 25856 + either or both of 25857 + 25858 + - a PEM-encoded client certificate (`certFile`) and private 25859 + key (`keyFile`); 25860 + - a PEM-encoded CA certificate (`caFile`) 25861 + 25862 + and whichever are supplied, will be used for connecting to the 25863 + registry. The client cert and key are useful if you are 25864 + authenticating with a certificate; the CA cert is useful if 25865 + you are using a self-signed server certificate. 25866 + properties: 25867 + name: 25868 + description: Name of the referent. 25869 + type: string 25870 + required: 25871 + - name 25872 + type: object 25873 + exclusionList: 25874 + description: |- 25875 + ExclusionList is a list of regex strings used to exclude certain tags 25876 + from being stored in the database. 25877 + items: 25878 + type: string 25879 + type: array 25880 + image: 25881 + description: Image is the name of the image repository 25882 + type: string 25883 + interval: 25884 + description: |- 25885 + Interval is the length of time to wait between 25886 + scans of the image repository. 25887 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 25888 + type: string 25889 + secretRef: 25890 + description: |- 25891 + SecretRef can be given the name of a secret containing 25892 + credentials to use for the image registry. The secret should be 25893 + created with `kubectl create secret docker-registry`, or the 25894 + equivalent. 25895 + properties: 25896 + name: 25897 + description: Name of the referent. 25898 + type: string 25899 + required: 25900 + - name 25901 + type: object 25902 + serviceAccountName: 25903 + description: |- 25904 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 25905 + the image pull if the service account has attached pull secrets. 25906 + maxLength: 253 25907 + type: string 25908 + suspend: 25909 + description: |- 25910 + This flag tells the controller to suspend subsequent image scans. 25911 + It does not apply to already started scans. Defaults to false. 25912 + type: boolean 25913 + timeout: 25914 + description: |- 25915 + Timeout for image scanning. 25916 + Defaults to 'Interval' duration. 25917 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 25918 + type: string 25919 + required: 25920 + - image 25921 + - interval 25922 + type: object 25923 + status: 25924 + default: 25925 + observedGeneration: -1 25926 + description: ImageRepositoryStatus defines the observed state of ImageRepository 25927 + properties: 25928 + canonicalImageName: 25929 + description: |- 25930 + CanonicalName is the name of the image repository with all the 25931 + implied bits made explicit; e.g., `docker.io/library/alpine` 25932 + rather than `alpine`. 25933 + type: string 25934 + conditions: 25935 + items: 25936 + description: Condition contains details for one aspect of the current 25937 + state of this API Resource. 25938 + properties: 25939 + lastTransitionTime: 25940 + description: |- 25941 + lastTransitionTime is the last time the condition transitioned from one status to another. 25942 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 25943 + format: date-time 25944 + type: string 25945 + message: 25946 + description: |- 25947 + message is a human readable message indicating details about the transition. 25948 + This may be an empty string. 25949 + maxLength: 32768 25950 + type: string 25951 + observedGeneration: 25952 + description: |- 25953 + observedGeneration represents the .metadata.generation that the condition was set based upon. 25954 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 25955 + with respect to the current state of the instance. 25956 + format: int64 25957 + minimum: 0 25958 + type: integer 25959 + reason: 25960 + description: |- 25961 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 25962 + Producers of specific condition types may define expected values and meanings for this field, 25963 + and whether the values are considered a guaranteed API. 25964 + The value should be a CamelCase string. 25965 + This field may not be empty. 25966 + maxLength: 1024 25967 + minLength: 1 25968 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 25969 + type: string 25970 + status: 25971 + description: status of the condition, one of True, False, Unknown. 25972 + enum: 25973 + - "True" 25974 + - "False" 25975 + - Unknown 25976 + type: string 25977 + type: 25978 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 25979 + maxLength: 316 25980 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 25981 + type: string 25982 + required: 25983 + - lastTransitionTime 25984 + - message 25985 + - reason 25986 + - status 25987 + - type 25988 + type: object 25989 + type: array 25990 + lastHandledReconcileAt: 25991 + description: |- 25992 + LastHandledReconcileAt holds the value of the most recent 25993 + reconcile request value, so a change of the annotation value 25994 + can be detected. 25995 + type: string 25996 + lastScanResult: 25997 + description: LastScanResult contains the number of fetched tags. 25998 + properties: 25999 + scanTime: 26000 + format: date-time 26001 + type: string 26002 + tagCount: 26003 + type: integer 26004 + required: 26005 + - tagCount 26006 + type: object 26007 + observedGeneration: 26008 + description: ObservedGeneration is the last reconciled generation. 26009 + format: int64 26010 + type: integer 26011 + type: object 26012 + type: object 26013 + served: true 26014 + storage: false 26015 + subresources: 26016 + status: {} 26017 + - additionalPrinterColumns: 26018 + - jsonPath: .status.lastScanResult.scanTime 26019 + name: Last scan 26020 + type: string 26021 + - jsonPath: .status.lastScanResult.tagCount 26022 + name: Tags 26023 + type: string 26024 + name: v1beta2 26025 + schema: 26026 + openAPIV3Schema: 26027 + description: ImageRepository is the Schema for the imagerepositories API 26028 + properties: 26029 + apiVersion: 26030 + description: |- 26031 + APIVersion defines the versioned schema of this representation of an object. 26032 + Servers should convert recognized schemas to the latest internal value, and 26033 + may reject unrecognized values. 26034 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26035 + type: string 26036 + kind: 26037 + description: |- 26038 + Kind is a string value representing the REST resource this object represents. 26039 + Servers may infer this from the endpoint the client submits requests to. 26040 + Cannot be updated. 26041 + In CamelCase. 26042 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26043 + type: string 26044 + metadata: 26045 + type: object 26046 + spec: 26047 + description: |- 26048 + ImageRepositorySpec defines the parameters for scanning an image 26049 + repository, e.g., `fluxcd/flux`. 26050 + properties: 26051 + accessFrom: 26052 + description: |- 26053 + AccessFrom defines an ACL for allowing cross-namespace references 26054 + to the ImageRepository object based on the caller's namespace labels. 26055 + properties: 26056 + namespaceSelectors: 26057 + description: |- 26058 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 26059 + Items in this list are evaluated using a logical OR operation. 26060 + items: 26061 + description: |- 26062 + NamespaceSelector selects the namespaces to which this ACL applies. 26063 + An empty map of MatchLabels matches all namespaces in a cluster. 26064 + properties: 26065 + matchLabels: 26066 + additionalProperties: 26067 + type: string 26068 + description: |- 26069 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 26070 + map is equivalent to an element of matchExpressions, whose key field is "key", the 26071 + operator is "In", and the values array contains only "value". The requirements are ANDed. 26072 + type: object 26073 + type: object 26074 + type: array 26075 + required: 26076 + - namespaceSelectors 26077 + type: object 26078 + certSecretRef: 26079 + description: |- 26080 + CertSecretRef can be given the name of a Secret containing 26081 + either or both of 26082 + 26083 + - a PEM-encoded client certificate (`tls.crt`) and private 26084 + key (`tls.key`); 26085 + - a PEM-encoded CA certificate (`ca.crt`) 26086 + 26087 + and whichever are supplied, will be used for connecting to the 26088 + registry. The client cert and key are useful if you are 26089 + authenticating with a certificate; the CA cert is useful if 26090 + you are using a self-signed server certificate. The Secret must 26091 + be of type `Opaque` or `kubernetes.io/tls`. 26092 + 26093 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 26094 + been deprecated. 26095 + properties: 26096 + name: 26097 + description: Name of the referent. 26098 + type: string 26099 + required: 26100 + - name 26101 + type: object 26102 + exclusionList: 26103 + default: 26104 + - ^.*\.sig$ 26105 + description: |- 26106 + ExclusionList is a list of regex strings used to exclude certain tags 26107 + from being stored in the database. 26108 + items: 26109 + type: string 26110 + maxItems: 25 26111 + type: array 26112 + image: 26113 + description: Image is the name of the image repository 26114 + type: string 26115 + insecure: 26116 + description: Insecure allows connecting to a non-TLS HTTP container 26117 + registry. 26118 + type: boolean 26119 + interval: 26120 + description: |- 26121 + Interval is the length of time to wait between 26122 + scans of the image repository. 26123 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26124 + type: string 26125 + provider: 26126 + default: generic 26127 + description: |- 26128 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 26129 + When not specified, defaults to 'generic'. 26130 + enum: 26131 + - generic 26132 + - aws 26133 + - azure 26134 + - gcp 26135 + type: string 26136 + proxySecretRef: 26137 + description: |- 26138 + ProxySecretRef specifies the Secret containing the proxy configuration 26139 + to use while communicating with the container registry. 26140 + properties: 26141 + name: 26142 + description: Name of the referent. 26143 + type: string 26144 + required: 26145 + - name 26146 + type: object 26147 + secretRef: 26148 + description: |- 26149 + SecretRef can be given the name of a secret containing 26150 + credentials to use for the image registry. The secret should be 26151 + created with `kubectl create secret docker-registry`, or the 26152 + equivalent. 26153 + properties: 26154 + name: 26155 + description: Name of the referent. 26156 + type: string 26157 + required: 26158 + - name 26159 + type: object 26160 + serviceAccountName: 26161 + description: |- 26162 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 26163 + the image pull if the service account has attached pull secrets. 26164 + maxLength: 253 26165 + type: string 26166 + suspend: 26167 + description: |- 26168 + This flag tells the controller to suspend subsequent image scans. 26169 + It does not apply to already started scans. Defaults to false. 26170 + type: boolean 26171 + timeout: 26172 + description: |- 26173 + Timeout for image scanning. 26174 + Defaults to 'Interval' duration. 26175 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 26176 + type: string 26177 + required: 26178 + - image 26179 + - interval 26180 + type: object 26181 + status: 26182 + default: 26183 + observedGeneration: -1 26184 + description: ImageRepositoryStatus defines the observed state of ImageRepository 26185 + properties: 26186 + canonicalImageName: 26187 + description: |- 26188 + CanonicalName is the name of the image repository with all the 26189 + implied bits made explicit; e.g., `docker.io/library/alpine` 26190 + rather than `alpine`. 26191 + type: string 26192 + conditions: 26193 + items: 26194 + description: Condition contains details for one aspect of the current 26195 + state of this API Resource. 26196 + properties: 26197 + lastTransitionTime: 26198 + description: |- 26199 + lastTransitionTime is the last time the condition transitioned from one status to another. 26200 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26201 + format: date-time 26202 + type: string 26203 + message: 26204 + description: |- 26205 + message is a human readable message indicating details about the transition. 26206 + This may be an empty string. 26207 + maxLength: 32768 26208 + type: string 26209 + observedGeneration: 26210 + description: |- 26211 + observedGeneration represents the .metadata.generation that the condition was set based upon. 26212 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26213 + with respect to the current state of the instance. 26214 + format: int64 26215 + minimum: 0 26216 + type: integer 26217 + reason: 26218 + description: |- 26219 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 26220 + Producers of specific condition types may define expected values and meanings for this field, 26221 + and whether the values are considered a guaranteed API. 26222 + The value should be a CamelCase string. 26223 + This field may not be empty. 26224 + maxLength: 1024 26225 + minLength: 1 26226 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26227 + type: string 26228 + status: 26229 + description: status of the condition, one of True, False, Unknown. 26230 + enum: 26231 + - "True" 26232 + - "False" 26233 + - Unknown 26234 + type: string 26235 + type: 26236 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 26237 + maxLength: 316 26238 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26239 + type: string 26240 + required: 26241 + - lastTransitionTime 26242 + - message 26243 + - reason 26244 + - status 26245 + - type 26246 + type: object 26247 + type: array 26248 + lastHandledReconcileAt: 26249 + description: |- 26250 + LastHandledReconcileAt holds the value of the most recent 26251 + reconcile request value, so a change of the annotation value 26252 + can be detected. 26253 + type: string 26254 + lastScanResult: 26255 + description: LastScanResult contains the number of fetched tags. 26256 + properties: 26257 + latestTags: 26258 + items: 26259 + type: string 26260 + type: array 26261 + scanTime: 26262 + format: date-time 26263 + type: string 26264 + tagCount: 26265 + type: integer 26266 + required: 26267 + - tagCount 26268 + type: object 26269 + observedExclusionList: 26270 + description: |- 26271 + ObservedExclusionList is a list of observed exclusion list. It reflects 26272 + the exclusion rules used for the observed scan result in 26273 + spec.lastScanResult. 26274 + items: 26275 + type: string 26276 + type: array 26277 + observedGeneration: 26278 + description: ObservedGeneration is the last reconciled generation. 26279 + format: int64 26280 + type: integer 26281 + type: object 26282 + type: object 26283 + served: true 26284 + storage: true 26285 + subresources: 26286 + status: {} 26287 --- 26288 apiVersion: v1 26289 kind: ServiceAccount 26290 metadata: 26291 - labels: 26292 - app.kubernetes.io/component: image-reflector-controller 26293 - app.kubernetes.io/instance: flux-system 26294 - app.kubernetes.io/part-of: flux 26295 - app.kubernetes.io/version: v2.3.0 26296 - name: image-reflector-controller 26297 - namespace: flux-system 26298 + labels: 26299 + app.kubernetes.io/component: image-reflector-controller 26300 + app.kubernetes.io/instance: flux-system 26301 + app.kubernetes.io/part-of: flux 26302 + app.kubernetes.io/version: v2.4.0 26303 + name: image-reflector-controller 26304 + namespace: flux-system 26305 --- 26306 apiVersion: apps/v1 26307 kind: Deployment 26308 metadata: 26309 - labels: 26310 - app.kubernetes.io/component: image-reflector-controller 26311 - app.kubernetes.io/instance: flux-system 26312 - app.kubernetes.io/part-of: flux 26313 - app.kubernetes.io/version: v2.3.0 26314 - control-plane: controller 26315 - name: image-reflector-controller 26316 - namespace: flux-system 26317 + labels: 26318 + app.kubernetes.io/component: image-reflector-controller 26319 + app.kubernetes.io/instance: flux-system 26320 + app.kubernetes.io/part-of: flux 26321 + app.kubernetes.io/version: v2.4.0 26322 + control-plane: controller 26323 + name: image-reflector-controller 26324 + namespace: flux-system 26325 spec: 26326 - replicas: 1 26327 - selector: 26328 - matchLabels: 26329 - app: image-reflector-controller 26330 - template: 26331 - metadata: 26332 - annotations: 26333 - prometheus.io/port: "8080" 26334 - prometheus.io/scrape: "true" 26335 - labels: 26336 - app: image-reflector-controller 26337 - spec: 26338 - containers: 26339 - - args: 26340 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 26341 - - --watch-all-namespaces=true 26342 - - --log-level=info 26343 - - --log-encoding=json 26344 - - --enable-leader-election 26345 - env: 26346 - - name: RUNTIME_NAMESPACE 26347 - valueFrom: 26348 - fieldRef: 26349 - fieldPath: metadata.namespace 26350 - - name: GOMAXPROCS 26351 - valueFrom: 26352 - resourceFieldRef: 26353 - containerName: manager 26354 - resource: limits.cpu 26355 - - name: GOMEMLIMIT 26356 - valueFrom: 26357 - resourceFieldRef: 26358 - containerName: manager 26359 - resource: limits.memory 26360 - image: ghcr.io/fluxcd/image-reflector-controller:v0.32.0 26361 - imagePullPolicy: IfNotPresent 26362 - livenessProbe: 26363 - httpGet: 26364 - path: /healthz 26365 - port: healthz 26366 - name: manager 26367 - ports: 26368 - - containerPort: 8080 26369 - name: http-prom 26370 - protocol: TCP 26371 - - containerPort: 9440 26372 - name: healthz 26373 - protocol: TCP 26374 - readinessProbe: 26375 - httpGet: 26376 - path: /readyz 26377 - port: healthz 26378 - resources: 26379 - limits: 26380 - cpu: 1000m 26381 - memory: 1Gi 26382 - requests: 26383 - cpu: 100m 26384 - memory: 64Mi 26385 - securityContext: 26386 - allowPrivilegeEscalation: false 26387 - capabilities: 26388 - drop: 26389 - - ALL 26390 - readOnlyRootFilesystem: true 26391 - runAsNonRoot: true 26392 - seccompProfile: 26393 - type: RuntimeDefault 26394 - volumeMounts: 26395 - - mountPath: /tmp 26396 - name: temp 26397 - - mountPath: /data 26398 - name: data 26399 - nodeSelector: 26400 - kubernetes.io/os: linux 26401 - securityContext: 26402 - fsGroup: 1337 26403 - serviceAccountName: image-reflector-controller 26404 - terminationGracePeriodSeconds: 10 26405 - volumes: 26406 - - emptyDir: {} 26407 - name: temp 26408 - - emptyDir: {} 26409 - name: data 26410 + replicas: 1 26411 + selector: 26412 + matchLabels: 26413 + app: image-reflector-controller 26414 + template: 26415 + metadata: 26416 + annotations: 26417 + prometheus.io/port: "8080" 26418 + prometheus.io/scrape: "true" 26419 + labels: 26420 + app: image-reflector-controller 26421 + spec: 26422 + containers: 26423 + - args: 26424 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 26425 + - --watch-all-namespaces=true 26426 + - --log-level=info 26427 + - --log-encoding=json 26428 + - --enable-leader-election 26429 + env: 26430 + - name: RUNTIME_NAMESPACE 26431 + valueFrom: 26432 + fieldRef: 26433 + fieldPath: metadata.namespace 26434 + - name: GOMAXPROCS 26435 + valueFrom: 26436 + resourceFieldRef: 26437 + containerName: manager 26438 + resource: limits.cpu 26439 + - name: GOMEMLIMIT 26440 + valueFrom: 26441 + resourceFieldRef: 26442 + containerName: manager 26443 + resource: limits.memory 26444 + image: ghcr.io/fluxcd/image-reflector-controller:v0.33.0 26445 + imagePullPolicy: IfNotPresent 26446 + livenessProbe: 26447 + httpGet: 26448 + path: /healthz 26449 + port: healthz 26450 + name: manager 26451 + ports: 26452 + - containerPort: 8080 26453 + name: http-prom 26454 + protocol: TCP 26455 + - containerPort: 9440 26456 + name: healthz 26457 + protocol: TCP 26458 + readinessProbe: 26459 + httpGet: 26460 + path: /readyz 26461 + port: healthz 26462 + resources: 26463 + limits: 26464 + cpu: 1000m 26465 + memory: 1Gi 26466 + requests: 26467 + cpu: 100m 26468 + memory: 64Mi 26469 + securityContext: 26470 + allowPrivilegeEscalation: false 26471 + capabilities: 26472 + drop: 26473 + - ALL 26474 + readOnlyRootFilesystem: true 26475 + runAsNonRoot: true 26476 + seccompProfile: 26477 + type: RuntimeDefault 26478 + volumeMounts: 26479 + - mountPath: /tmp 26480 + name: temp 26481 + - mountPath: /data 26482 + name: data 26483 + nodeSelector: 26484 + kubernetes.io/os: linux 26485 + securityContext: 26486 + fsGroup: 1337 26487 + serviceAccountName: image-reflector-controller 26488 + terminationGracePeriodSeconds: 10 26489 + volumes: 26490 + - emptyDir: {} 26491 + name: temp 26492 + - emptyDir: {} 26493 + name: data 26494 --- 26495 apiVersion: apiextensions.k8s.io/v1 26496 kind: CustomResourceDefinition 26497 metadata: 26498 - annotations: 26499 - controller-gen.kubebuilder.io/version: v0.15.0 26500 - labels: 26501 - app.kubernetes.io/component: image-automation-controller 26502 - app.kubernetes.io/instance: flux-system 26503 - app.kubernetes.io/part-of: flux 26504 - app.kubernetes.io/version: v2.3.0 26505 - name: imageupdateautomations.image.toolkit.fluxcd.io 26506 + annotations: 26507 + controller-gen.kubebuilder.io/version: v0.16.1 26508 + labels: 26509 + app.kubernetes.io/component: image-automation-controller 26510 + app.kubernetes.io/instance: flux-system 26511 + app.kubernetes.io/part-of: flux 26512 + app.kubernetes.io/version: v2.4.0 26513 + name: imageupdateautomations.image.toolkit.fluxcd.io 26514 spec: 26515 - group: image.toolkit.fluxcd.io 26516 - names: 26517 - kind: ImageUpdateAutomation 26518 - listKind: ImageUpdateAutomationList 26519 - plural: imageupdateautomations 26520 - singular: imageupdateautomation 26521 - scope: Namespaced 26522 - versions: 26523 - - additionalPrinterColumns: 26524 - - jsonPath: .status.lastAutomationRunTime 26525 - name: Last run 26526 - type: string 26527 - deprecated: true 26528 - deprecationWarning: v1beta1 ImageUpdateAutomation is deprecated, upgrade to v1beta2 26529 - name: v1beta1 26530 - schema: 26531 - openAPIV3Schema: 26532 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 26533 + group: image.toolkit.fluxcd.io 26534 + names: 26535 + kind: ImageUpdateAutomation 26536 + listKind: ImageUpdateAutomationList 26537 + plural: imageupdateautomations 26538 + singular: imageupdateautomation 26539 + scope: Namespaced 26540 + versions: 26541 + - additionalPrinterColumns: 26542 + - jsonPath: .status.lastAutomationRunTime 26543 + name: Last run 26544 + type: string 26545 + deprecated: true 26546 + deprecationWarning: v1beta1 ImageUpdateAutomation is deprecated, upgrade to v1beta2 26547 + name: v1beta1 26548 + schema: 26549 + openAPIV3Schema: 26550 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 26551 + API 26552 + properties: 26553 + apiVersion: 26554 + description: |- 26555 + APIVersion defines the versioned schema of this representation of an object. 26556 + Servers should convert recognized schemas to the latest internal value, and 26557 + may reject unrecognized values. 26558 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26559 + type: string 26560 + kind: 26561 + description: |- 26562 + Kind is a string value representing the REST resource this object represents. 26563 + Servers may infer this from the endpoint the client submits requests to. 26564 + Cannot be updated. 26565 + In CamelCase. 26566 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26567 + type: string 26568 + metadata: 26569 + type: object 26570 + spec: 26571 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 26572 + properties: 26573 + git: 26574 + description: |- 26575 + GitSpec contains all the git-specific definitions. This is 26576 + technically optional, but in practice mandatory until there are 26577 + other kinds of source allowed. 26578 properties: 26579 - apiVersion: 26580 - description: |- 26581 - APIVersion defines the versioned schema of this representation of an object. 26582 - Servers should convert recognized schemas to the latest internal value, and 26583 - may reject unrecognized values. 26584 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26585 - type: string 26586 - kind: 26587 + checkout: 26588 + description: |- 26589 + Checkout gives the parameters for cloning the git repository, 26590 + ready to make changes. If not present, the `spec.ref` field from the 26591 + referenced `GitRepository` or its default will be used. 26592 + properties: 26593 + ref: 26594 description: |- 26595 - Kind is a string value representing the REST resource this object represents. 26596 - Servers may infer this from the endpoint the client submits requests to. 26597 - Cannot be updated. 26598 - In CamelCase. 26599 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 26600 - type: string 26601 - metadata: 26602 + Reference gives a branch, tag or commit to clone from the Git 26603 + repository. 26604 + properties: 26605 + branch: 26606 + description: Branch to check out, defaults to 'master' 26607 + if no other field is defined. 26608 + type: string 26609 + commit: 26610 + description: |- 26611 + Commit SHA to check out, takes precedence over all reference fields. 26612 + 26613 + This can be combined with Branch to shallow clone the branch, in which 26614 + the commit is expected to exist. 26615 + type: string 26616 + name: 26617 + description: |- 26618 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 26619 + 26620 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 26621 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 26622 + type: string 26623 + semver: 26624 + description: SemVer tag expression to check out, takes 26625 + precedence over Tag. 26626 + type: string 26627 + tag: 26628 + description: Tag to check out, takes precedence over Branch. 26629 + type: string 26630 type: object 26631 - spec: 26632 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 26633 + required: 26634 + - ref 26635 + type: object 26636 + commit: 26637 + description: Commit specifies how to commit to the git repository. 26638 + properties: 26639 + author: 26640 + description: |- 26641 + Author gives the email and optionally the name to use as the 26642 + author of commits. 26643 properties: 26644 - git: 26645 - description: |- 26646 - GitSpec contains all the git-specific definitions. This is 26647 - technically optional, but in practice mandatory until there are 26648 - other kinds of source allowed. 26649 - properties: 26650 - checkout: 26651 - description: |- 26652 - Checkout gives the parameters for cloning the git repository, 26653 - ready to make changes. If not present, the `spec.ref` field from the 26654 - referenced `GitRepository` or its default will be used. 26655 - properties: 26656 - ref: 26657 - description: |- 26658 - Reference gives a branch, tag or commit to clone from the Git 26659 - repository. 26660 - properties: 26661 - branch: 26662 - description: Branch to check out, defaults to 'master' if no other 26663 - field is defined. 26664 - type: string 26665 - commit: 26666 - description: |- 26667 - Commit SHA to check out, takes precedence over all reference fields. 26668 - 26669 - 26670 - This can be combined with Branch to shallow clone the branch, in which 26671 - the commit is expected to exist. 26672 - type: string 26673 - name: 26674 - description: |- 26675 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 26676 - 26677 - 26678 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 26679 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 26680 - type: string 26681 - semver: 26682 - description: SemVer tag expression to check out, takes precedence 26683 - over Tag. 26684 - type: string 26685 - tag: 26686 - description: Tag to check out, takes precedence over Branch. 26687 - type: string 26688 - type: object 26689 - required: 26690 - - ref 26691 - type: object 26692 - commit: 26693 - description: Commit specifies how to commit to the git repository. 26694 - properties: 26695 - author: 26696 - description: |- 26697 - Author gives the email and optionally the name to use as the 26698 - author of commits. 26699 - properties: 26700 - email: 26701 - description: Email gives the email to provide when making a commit. 26702 - type: string 26703 - name: 26704 - description: Name gives the name to provide when making a commit. 26705 - type: string 26706 - required: 26707 - - email 26708 - type: object 26709 - messageTemplate: 26710 - description: |- 26711 - MessageTemplate provides a template for the commit message, 26712 - into which will be interpolated the details of the change made. 26713 - type: string 26714 - signingKey: 26715 - description: SigningKey provides the option to sign commits with a GPG key 26716 - properties: 26717 - secretRef: 26718 - description: |- 26719 - SecretRef holds the name to a secret that contains a 'git.asc' key 26720 - corresponding to the ASCII Armored file containing the GPG signing 26721 - keypair as the value. It must be in the same namespace as the 26722 - ImageUpdateAutomation. 26723 - properties: 26724 - name: 26725 - description: Name of the referent. 26726 - type: string 26727 - required: 26728 - - name 26729 - type: object 26730 - type: object 26731 - required: 26732 - - author 26733 - type: object 26734 - push: 26735 - description: |- 26736 - Push specifies how and where to push commits made by the 26737 - automation. If missing, commits are pushed (back) to 26738 - `.spec.checkout.branch` or its default. 26739 - properties: 26740 - branch: 26741 - description: |- 26742 - Branch specifies that commits should be pushed to the branch 26743 - named. The branch is created using `.spec.checkout.branch` as the 26744 - starting point, if it doesn't already exist. 26745 - type: string 26746 - options: 26747 - additionalProperties: 26748 - type: string 26749 - description: |- 26750 - Options specifies the push options that are sent to the Git 26751 - server when performing a push operation. For details, see: 26752 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 26753 - type: object 26754 - refspec: 26755 - description: |- 26756 - Refspec specifies the Git Refspec to use for a push operation. 26757 - If both Branch and Refspec are provided, then the commit is pushed 26758 - to the branch and also using the specified refspec. 26759 - For more details about Git Refspecs, see: 26760 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 26761 - type: string 26762 - type: object 26763 - required: 26764 - - commit 26765 - type: object 26766 - interval: 26767 - description: |- 26768 - Interval gives an lower bound for how often the automation 26769 - run should be attempted. 26770 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 26771 - type: string 26772 - sourceRef: 26773 - description: |- 26774 - SourceRef refers to the resource giving access details 26775 - to a git repository. 26776 - properties: 26777 - apiVersion: 26778 - description: API version of the referent. 26779 - type: string 26780 - kind: 26781 - default: GitRepository 26782 - description: Kind of the referent. 26783 - enum: 26784 - - GitRepository 26785 - type: string 26786 - name: 26787 - description: Name of the referent. 26788 - type: string 26789 - namespace: 26790 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 26791 - resource object that contains the reference. 26792 - type: string 26793 - required: 26794 - - kind 26795 - - name 26796 - type: object 26797 - suspend: 26798 - description: |- 26799 - Suspend tells the controller to not run this automation, until 26800 - it is unset (or set to false). Defaults to false. 26801 - type: boolean 26802 - update: 26803 - default: 26804 - strategy: Setters 26805 - description: |- 26806 - Update gives the specification for how to update the files in 26807 - the repository. This can be left empty, to use the default 26808 - value. 26809 - properties: 26810 - path: 26811 - description: |- 26812 - Path to the directory containing the manifests to be updated. 26813 - Defaults to 'None', which translates to the root path 26814 - of the GitRepositoryRef. 26815 - type: string 26816 - strategy: 26817 - default: Setters 26818 - description: Strategy names the strategy to be used. 26819 - enum: 26820 - - Setters 26821 - type: string 26822 - required: 26823 - - strategy 26824 - type: object 26825 + email: 26826 + description: Email gives the email to provide when making 26827 + a commit. 26828 + type: string 26829 + name: 26830 + description: Name gives the name to provide when making 26831 + a commit. 26832 + type: string 26833 required: 26834 - - interval 26835 - - sourceRef 26836 + - email 26837 type: object 26838 - status: 26839 - default: 26840 - observedGeneration: -1 26841 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 26842 + messageTemplate: 26843 + description: |- 26844 + MessageTemplate provides a template for the commit message, 26845 + into which will be interpolated the details of the change made. 26846 + type: string 26847 + signingKey: 26848 + description: SigningKey provides the option to sign commits 26849 + with a GPG key 26850 properties: 26851 - conditions: 26852 - items: 26853 - description: "Condition contains details for one aspect of the current state of this API 26854 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 26855 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 26856 - the observations of a foo's current state.\n\t // Known .status.conditions.type 26857 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 26858 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 26859 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 26860 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 26861 - fields\n\t}" 26862 - properties: 26863 - lastTransitionTime: 26864 - description: |- 26865 - lastTransitionTime is the last time the condition transitioned from one status to another. 26866 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 26867 - format: date-time 26868 - type: string 26869 - message: 26870 - description: |- 26871 - message is a human readable message indicating details about the transition. 26872 - This may be an empty string. 26873 - maxLength: 32768 26874 - type: string 26875 - observedGeneration: 26876 - description: |- 26877 - observedGeneration represents the .metadata.generation that the condition was set based upon. 26878 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 26879 - with respect to the current state of the instance. 26880 - format: int64 26881 - minimum: 0 26882 - type: integer 26883 - reason: 26884 - description: |- 26885 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 26886 - Producers of specific condition types may define expected values and meanings for this field, 26887 - and whether the values are considered a guaranteed API. 26888 - The value should be a CamelCase string. 26889 - This field may not be empty. 26890 - maxLength: 1024 26891 - minLength: 1 26892 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 26893 - type: string 26894 - status: 26895 - description: status of the condition, one of True, False, Unknown. 26896 - enum: 26897 - - "True" 26898 - - "False" 26899 - - Unknown 26900 - type: string 26901 - type: 26902 - description: |- 26903 - type of condition in CamelCase or in foo.example.com/CamelCase. 26904 - --- 26905 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 26906 - useful (see .node.status.conditions), the ability to deconflict is important. 26907 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 26908 - maxLength: 316 26909 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 26910 - type: string 26911 - required: 26912 - - lastTransitionTime 26913 - - message 26914 - - reason 26915 - - status 26916 - - type 26917 - type: object 26918 - type: array 26919 - lastAutomationRunTime: 26920 - description: |- 26921 - LastAutomationRunTime records the last time the controller ran 26922 - this automation through to completion (even if no updates were 26923 - made). 26924 - format: date-time 26925 - type: string 26926 - lastHandledReconcileAt: 26927 - description: |- 26928 - LastHandledReconcileAt holds the value of the most recent 26929 - reconcile request value, so a change of the annotation value 26930 - can be detected. 26931 - type: string 26932 - lastPushCommit: 26933 - description: |- 26934 - LastPushCommit records the SHA1 of the last commit made by the 26935 - controller, for this automation object 26936 - type: string 26937 - lastPushTime: 26938 - description: LastPushTime records the time of the last pushed change. 26939 - format: date-time 26940 - type: string 26941 - observedGeneration: 26942 - format: int64 26943 - type: integer 26944 + secretRef: 26945 + description: |- 26946 + SecretRef holds the name to a secret that contains a 'git.asc' key 26947 + corresponding to the ASCII Armored file containing the GPG signing 26948 + keypair as the value. It must be in the same namespace as the 26949 + ImageUpdateAutomation. 26950 + properties: 26951 + name: 26952 + description: Name of the referent. 26953 + type: string 26954 + required: 26955 + - name 26956 + type: object 26957 + required: 26958 + - secretRef 26959 type: object 26960 - type: object 26961 - served: true 26962 - storage: false 26963 - subresources: 26964 - status: {} 26965 - - additionalPrinterColumns: 26966 - - jsonPath: .status.lastAutomationRunTime 26967 - name: Last run 26968 - type: string 26969 - name: v1beta2 26970 - schema: 26971 - openAPIV3Schema: 26972 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 26973 - properties: 26974 - apiVersion: 26975 + required: 26976 + - author 26977 + type: object 26978 + push: 26979 + description: |- 26980 + Push specifies how and where to push commits made by the 26981 + automation. If missing, commits are pushed (back) to 26982 + `.spec.checkout.branch` or its default. 26983 + properties: 26984 + branch: 26985 description: |- 26986 - APIVersion defines the versioned schema of this representation of an object. 26987 - Servers should convert recognized schemas to the latest internal value, and 26988 - may reject unrecognized values. 26989 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 26990 + Branch specifies that commits should be pushed to the branch 26991 + named. The branch is created using `.spec.checkout.branch` as the 26992 + starting point, if it doesn't already exist. 26993 type: string 26994 - kind: 26995 + options: 26996 + additionalProperties: 26997 + type: string 26998 + description: |- 26999 + Options specifies the push options that are sent to the Git 27000 + server when performing a push operation. For details, see: 27001 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27002 + type: object 27003 + refspec: 27004 description: |- 27005 - Kind is a string value representing the REST resource this object represents. 27006 - Servers may infer this from the endpoint the client submits requests to. 27007 - Cannot be updated. 27008 - In CamelCase. 27009 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27010 + Refspec specifies the Git Refspec to use for a push operation. 27011 + If both Branch and Refspec are provided, then the commit is pushed 27012 + to the branch and also using the specified refspec. 27013 + For more details about Git Refspecs, see: 27014 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27015 type: string 27016 - metadata: 27017 + type: object 27018 + required: 27019 + - commit 27020 + type: object 27021 + interval: 27022 + description: |- 27023 + Interval gives an lower bound for how often the automation 27024 + run should be attempted. 27025 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27026 + type: string 27027 + sourceRef: 27028 + description: |- 27029 + SourceRef refers to the resource giving access details 27030 + to a git repository. 27031 + properties: 27032 + apiVersion: 27033 + description: API version of the referent. 27034 + type: string 27035 + kind: 27036 + default: GitRepository 27037 + description: Kind of the referent. 27038 + enum: 27039 + - GitRepository 27040 + type: string 27041 + name: 27042 + description: Name of the referent. 27043 + type: string 27044 + namespace: 27045 + description: Namespace of the referent, defaults to the namespace 27046 + of the Kubernetes resource object that contains the reference. 27047 + type: string 27048 + required: 27049 + - kind 27050 + - name 27051 + type: object 27052 + suspend: 27053 + description: |- 27054 + Suspend tells the controller to not run this automation, until 27055 + it is unset (or set to false). Defaults to false. 27056 + type: boolean 27057 + update: 27058 + default: 27059 + strategy: Setters 27060 + description: |- 27061 + Update gives the specification for how to update the files in 27062 + the repository. This can be left empty, to use the default 27063 + value. 27064 + properties: 27065 + path: 27066 + description: |- 27067 + Path to the directory containing the manifests to be updated. 27068 + Defaults to 'None', which translates to the root path 27069 + of the GitRepositoryRef. 27070 + type: string 27071 + strategy: 27072 + default: Setters 27073 + description: Strategy names the strategy to be used. 27074 + enum: 27075 + - Setters 27076 + type: string 27077 + required: 27078 + - strategy 27079 + type: object 27080 + required: 27081 + - interval 27082 + - sourceRef 27083 + type: object 27084 + status: 27085 + default: 27086 + observedGeneration: -1 27087 + description: ImageUpdateAutomationStatus defines the observed state of 27088 + ImageUpdateAutomation 27089 + properties: 27090 + conditions: 27091 + items: 27092 + description: Condition contains details for one aspect of the current 27093 + state of this API Resource. 27094 + properties: 27095 + lastTransitionTime: 27096 + description: |- 27097 + lastTransitionTime is the last time the condition transitioned from one status to another. 27098 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27099 + format: date-time 27100 + type: string 27101 + message: 27102 + description: |- 27103 + message is a human readable message indicating details about the transition. 27104 + This may be an empty string. 27105 + maxLength: 32768 27106 + type: string 27107 + observedGeneration: 27108 + description: |- 27109 + observedGeneration represents the .metadata.generation that the condition was set based upon. 27110 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27111 + with respect to the current state of the instance. 27112 + format: int64 27113 + minimum: 0 27114 + type: integer 27115 + reason: 27116 + description: |- 27117 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 27118 + Producers of specific condition types may define expected values and meanings for this field, 27119 + and whether the values are considered a guaranteed API. 27120 + The value should be a CamelCase string. 27121 + This field may not be empty. 27122 + maxLength: 1024 27123 + minLength: 1 27124 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27125 + type: string 27126 + status: 27127 + description: status of the condition, one of True, False, Unknown. 27128 + enum: 27129 + - "True" 27130 + - "False" 27131 + - Unknown 27132 + type: string 27133 + type: 27134 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 27135 + maxLength: 316 27136 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27137 + type: string 27138 + required: 27139 + - lastTransitionTime 27140 + - message 27141 + - reason 27142 + - status 27143 + - type 27144 + type: object 27145 + type: array 27146 + lastAutomationRunTime: 27147 + description: |- 27148 + LastAutomationRunTime records the last time the controller ran 27149 + this automation through to completion (even if no updates were 27150 + made). 27151 + format: date-time 27152 + type: string 27153 + lastHandledReconcileAt: 27154 + description: |- 27155 + LastHandledReconcileAt holds the value of the most recent 27156 + reconcile request value, so a change of the annotation value 27157 + can be detected. 27158 + type: string 27159 + lastPushCommit: 27160 + description: |- 27161 + LastPushCommit records the SHA1 of the last commit made by the 27162 + controller, for this automation object 27163 + type: string 27164 + lastPushTime: 27165 + description: LastPushTime records the time of the last pushed change. 27166 + format: date-time 27167 + type: string 27168 + observedGeneration: 27169 + format: int64 27170 + type: integer 27171 + type: object 27172 + type: object 27173 + served: true 27174 + storage: false 27175 + subresources: 27176 + status: {} 27177 + - additionalPrinterColumns: 27178 + - jsonPath: .status.lastAutomationRunTime 27179 + name: Last run 27180 + type: string 27181 + name: v1beta2 27182 + schema: 27183 + openAPIV3Schema: 27184 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 27185 + API 27186 + properties: 27187 + apiVersion: 27188 + description: |- 27189 + APIVersion defines the versioned schema of this representation of an object. 27190 + Servers should convert recognized schemas to the latest internal value, and 27191 + may reject unrecognized values. 27192 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 27193 + type: string 27194 + kind: 27195 + description: |- 27196 + Kind is a string value representing the REST resource this object represents. 27197 + Servers may infer this from the endpoint the client submits requests to. 27198 + Cannot be updated. 27199 + In CamelCase. 27200 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 27201 + type: string 27202 + metadata: 27203 + type: object 27204 + spec: 27205 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27206 + properties: 27207 + git: 27208 + description: |- 27209 + GitSpec contains all the git-specific definitions. This is 27210 + technically optional, but in practice mandatory until there are 27211 + other kinds of source allowed. 27212 + properties: 27213 + checkout: 27214 + description: |- 27215 + Checkout gives the parameters for cloning the git repository, 27216 + ready to make changes. If not present, the `spec.ref` field from the 27217 + referenced `GitRepository` or its default will be used. 27218 + properties: 27219 + ref: 27220 + description: |- 27221 + Reference gives a branch, tag or commit to clone from the Git 27222 + repository. 27223 + properties: 27224 + branch: 27225 + description: Branch to check out, defaults to 'master' 27226 + if no other field is defined. 27227 + type: string 27228 + commit: 27229 + description: |- 27230 + Commit SHA to check out, takes precedence over all reference fields. 27231 + 27232 + This can be combined with Branch to shallow clone the branch, in which 27233 + the commit is expected to exist. 27234 + type: string 27235 + name: 27236 + description: |- 27237 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 27238 + 27239 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 27240 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 27241 + type: string 27242 + semver: 27243 + description: SemVer tag expression to check out, takes 27244 + precedence over Tag. 27245 + type: string 27246 + tag: 27247 + description: Tag to check out, takes precedence over Branch. 27248 + type: string 27249 type: object 27250 - spec: 27251 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 27252 + required: 27253 + - ref 27254 + type: object 27255 + commit: 27256 + description: Commit specifies how to commit to the git repository. 27257 + properties: 27258 + author: 27259 + description: |- 27260 + Author gives the email and optionally the name to use as the 27261 + author of commits. 27262 properties: 27263 - git: 27264 - description: |- 27265 - GitSpec contains all the git-specific definitions. This is 27266 - technically optional, but in practice mandatory until there are 27267 - other kinds of source allowed. 27268 - properties: 27269 - checkout: 27270 - description: |- 27271 - Checkout gives the parameters for cloning the git repository, 27272 - ready to make changes. If not present, the `spec.ref` field from the 27273 - referenced `GitRepository` or its default will be used. 27274 - properties: 27275 - ref: 27276 - description: |- 27277 - Reference gives a branch, tag or commit to clone from the Git 27278 - repository. 27279 - properties: 27280 - branch: 27281 - description: Branch to check out, defaults to 'master' if no other 27282 - field is defined. 27283 - type: string 27284 - commit: 27285 - description: |- 27286 - Commit SHA to check out, takes precedence over all reference fields. 27287 - 27288 - 27289 - This can be combined with Branch to shallow clone the branch, in which 27290 - the commit is expected to exist. 27291 - type: string 27292 - name: 27293 - description: |- 27294 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 27295 - 27296 - 27297 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 27298 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 27299 - type: string 27300 - semver: 27301 - description: SemVer tag expression to check out, takes precedence 27302 - over Tag. 27303 - type: string 27304 - tag: 27305 - description: Tag to check out, takes precedence over Branch. 27306 - type: string 27307 - type: object 27308 - required: 27309 - - ref 27310 - type: object 27311 - commit: 27312 - description: Commit specifies how to commit to the git repository. 27313 - properties: 27314 - author: 27315 - description: |- 27316 - Author gives the email and optionally the name to use as the 27317 - author of commits. 27318 - properties: 27319 - email: 27320 - description: Email gives the email to provide when making a commit. 27321 - type: string 27322 - name: 27323 - description: Name gives the name to provide when making a commit. 27324 - type: string 27325 - required: 27326 - - email 27327 - type: object 27328 - messageTemplate: 27329 - description: |- 27330 - MessageTemplate provides a template for the commit message, 27331 - into which will be interpolated the details of the change made. 27332 - type: string 27333 - signingKey: 27334 - description: SigningKey provides the option to sign commits with a GPG key 27335 - properties: 27336 - secretRef: 27337 - description: |- 27338 - SecretRef holds the name to a secret that contains a 'git.asc' key 27339 - corresponding to the ASCII Armored file containing the GPG signing 27340 - keypair as the value. It must be in the same namespace as the 27341 - ImageUpdateAutomation. 27342 - properties: 27343 - name: 27344 - description: Name of the referent. 27345 - type: string 27346 - required: 27347 - - name 27348 - type: object 27349 - type: object 27350 - required: 27351 - - author 27352 - type: object 27353 - push: 27354 - description: |- 27355 - Push specifies how and where to push commits made by the 27356 - automation. If missing, commits are pushed (back) to 27357 - `.spec.checkout.branch` or its default. 27358 - properties: 27359 - branch: 27360 - description: |- 27361 - Branch specifies that commits should be pushed to the branch 27362 - named. The branch is created using `.spec.checkout.branch` as the 27363 - starting point, if it doesn't already exist. 27364 - type: string 27365 - options: 27366 - additionalProperties: 27367 - type: string 27368 - description: |- 27369 - Options specifies the push options that are sent to the Git 27370 - server when performing a push operation. For details, see: 27371 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27372 - type: object 27373 - refspec: 27374 - description: |- 27375 - Refspec specifies the Git Refspec to use for a push operation. 27376 - If both Branch and Refspec are provided, then the commit is pushed 27377 - to the branch and also using the specified refspec. 27378 - For more details about Git Refspecs, see: 27379 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27380 - type: string 27381 - type: object 27382 - required: 27383 - - commit 27384 - type: object 27385 - interval: 27386 - description: |- 27387 - Interval gives an lower bound for how often the automation 27388 - run should be attempted. 27389 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27390 - type: string 27391 - policySelector: 27392 - description: |- 27393 - PolicySelector allows to filter applied policies based on labels. 27394 - By default includes all policies in namespace. 27395 - properties: 27396 - matchExpressions: 27397 - description: matchExpressions is a list of label selector requirements. The requirements 27398 - are ANDed. 27399 - items: 27400 - description: |- 27401 - A label selector requirement is a selector that contains values, a key, and an operator that 27402 - relates the key and values. 27403 - properties: 27404 - key: 27405 - description: key is the label key that the selector applies to. 27406 - type: string 27407 - operator: 27408 - description: |- 27409 - operator represents a key's relationship to a set of values. 27410 - Valid operators are In, NotIn, Exists and DoesNotExist. 27411 - type: string 27412 - values: 27413 - description: |- 27414 - values is an array of string values. If the operator is In or NotIn, 27415 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 27416 - the values array must be empty. This array is replaced during a strategic 27417 - merge patch. 27418 - items: 27419 - type: string 27420 - type: array 27421 - x-kubernetes-list-type: atomic 27422 - required: 27423 - - key 27424 - - operator 27425 - type: object 27426 - type: array 27427 - x-kubernetes-list-type: atomic 27428 - matchLabels: 27429 - additionalProperties: 27430 - type: string 27431 - description: |- 27432 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 27433 - map is equivalent to an element of matchExpressions, whose key field is "key", the 27434 - operator is "In", and the values array contains only "value". The requirements are ANDed. 27435 - type: object 27436 - type: object 27437 - x-kubernetes-map-type: atomic 27438 - sourceRef: 27439 - description: |- 27440 - SourceRef refers to the resource giving access details 27441 - to a git repository. 27442 - properties: 27443 - apiVersion: 27444 - description: API version of the referent. 27445 - type: string 27446 - kind: 27447 - default: GitRepository 27448 - description: Kind of the referent. 27449 - enum: 27450 - - GitRepository 27451 - type: string 27452 - name: 27453 - description: Name of the referent. 27454 - type: string 27455 - namespace: 27456 - description: Namespace of the referent, defaults to the namespace of the Kubernetes 27457 - resource object that contains the reference. 27458 - type: string 27459 - required: 27460 - - kind 27461 - - name 27462 - type: object 27463 - suspend: 27464 - description: |- 27465 - Suspend tells the controller to not run this automation, until 27466 - it is unset (or set to false). Defaults to false. 27467 - type: boolean 27468 - update: 27469 - default: 27470 - strategy: Setters 27471 - description: |- 27472 - Update gives the specification for how to update the files in 27473 - the repository. This can be left empty, to use the default 27474 - value. 27475 - properties: 27476 - path: 27477 - description: |- 27478 - Path to the directory containing the manifests to be updated. 27479 - Defaults to 'None', which translates to the root path 27480 - of the GitRepositoryRef. 27481 - type: string 27482 - strategy: 27483 - default: Setters 27484 - description: Strategy names the strategy to be used. 27485 - enum: 27486 - - Setters 27487 - type: string 27488 - required: 27489 - - strategy 27490 - type: object 27491 + email: 27492 + description: Email gives the email to provide when making 27493 + a commit. 27494 + type: string 27495 + name: 27496 + description: Name gives the name to provide when making 27497 + a commit. 27498 + type: string 27499 required: 27500 - - interval 27501 - - sourceRef 27502 + - email 27503 type: object 27504 - status: 27505 - default: 27506 - observedGeneration: -1 27507 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 27508 + messageTemplate: 27509 + description: |- 27510 + MessageTemplate provides a template for the commit message, 27511 + into which will be interpolated the details of the change made. 27512 + type: string 27513 + signingKey: 27514 + description: SigningKey provides the option to sign commits 27515 + with a GPG key 27516 properties: 27517 - conditions: 27518 - items: 27519 - description: "Condition contains details for one aspect of the current state of this API 27520 - Resource.\n---\nThis struct is intended for direct use as an array at the field path 27521 - .status.conditions. For example,\n\n\n\ttype FooStatus struct{\n\t // Represents 27522 - the observations of a foo's current state.\n\t // Known .status.conditions.type 27523 - are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // +patchMergeKey=type\n\t 27524 - \ // +patchStrategy=merge\n\t // +listType=map\n\t // +listMapKey=type\n\t 27525 - \ Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" 27526 - patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t // other 27527 - fields\n\t}" 27528 - properties: 27529 - lastTransitionTime: 27530 - description: |- 27531 - lastTransitionTime is the last time the condition transitioned from one status to another. 27532 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27533 - format: date-time 27534 - type: string 27535 - message: 27536 - description: |- 27537 - message is a human readable message indicating details about the transition. 27538 - This may be an empty string. 27539 - maxLength: 32768 27540 - type: string 27541 - observedGeneration: 27542 - description: |- 27543 - observedGeneration represents the .metadata.generation that the condition was set based upon. 27544 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27545 - with respect to the current state of the instance. 27546 - format: int64 27547 - minimum: 0 27548 - type: integer 27549 - reason: 27550 - description: |- 27551 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 27552 - Producers of specific condition types may define expected values and meanings for this field, 27553 - and whether the values are considered a guaranteed API. 27554 - The value should be a CamelCase string. 27555 - This field may not be empty. 27556 - maxLength: 1024 27557 - minLength: 1 27558 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27559 - type: string 27560 - status: 27561 - description: status of the condition, one of True, False, Unknown. 27562 - enum: 27563 - - "True" 27564 - - "False" 27565 - - Unknown 27566 - type: string 27567 - type: 27568 - description: |- 27569 - type of condition in CamelCase or in foo.example.com/CamelCase. 27570 - --- 27571 - Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be 27572 - useful (see .node.status.conditions), the ability to deconflict is important. 27573 - The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) 27574 - maxLength: 316 27575 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27576 - type: string 27577 - required: 27578 - - lastTransitionTime 27579 - - message 27580 - - reason 27581 - - status 27582 - - type 27583 - type: object 27584 - type: array 27585 - lastAutomationRunTime: 27586 - description: |- 27587 - LastAutomationRunTime records the last time the controller ran 27588 - this automation through to completion (even if no updates were 27589 - made). 27590 - format: date-time 27591 - type: string 27592 - lastHandledReconcileAt: 27593 - description: |- 27594 - LastHandledReconcileAt holds the value of the most recent 27595 - reconcile request value, so a change of the annotation value 27596 - can be detected. 27597 - type: string 27598 - lastPushCommit: 27599 - description: |- 27600 - LastPushCommit records the SHA1 of the last commit made by the 27601 - controller, for this automation object 27602 - type: string 27603 - lastPushTime: 27604 - description: LastPushTime records the time of the last pushed change. 27605 - format: date-time 27606 - type: string 27607 - observedGeneration: 27608 - format: int64 27609 - type: integer 27610 - observedPolicies: 27611 - additionalProperties: 27612 - description: ImageRef represents an image reference. 27613 - properties: 27614 - name: 27615 - description: Name is the bare image's name. 27616 - type: string 27617 - tag: 27618 - description: Tag is the image's tag. 27619 - type: string 27620 - required: 27621 - - name 27622 - - tag 27623 - type: object 27624 - description: |- 27625 - ObservedPolicies is the list of observed ImagePolicies that were 27626 - considered by the ImageUpdateAutomation update process. 27627 - type: object 27628 - observedSourceRevision: 27629 - description: |- 27630 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 27631 - ObservedSourceRevision is the last observed source revision. This can be 27632 - used to determine if the source has been updated since last observation. 27633 - type: string 27634 + secretRef: 27635 + description: |- 27636 + SecretRef holds the name to a secret that contains a 'git.asc' key 27637 + corresponding to the ASCII Armored file containing the GPG signing 27638 + keypair as the value. It must be in the same namespace as the 27639 + ImageUpdateAutomation. 27640 + properties: 27641 + name: 27642 + description: Name of the referent. 27643 + type: string 27644 + required: 27645 + - name 27646 + type: object 27647 + required: 27648 + - secretRef 27649 type: object 27650 + required: 27651 + - author 27652 + type: object 27653 + push: 27654 + description: |- 27655 + Push specifies how and where to push commits made by the 27656 + automation. If missing, commits are pushed (back) to 27657 + `.spec.checkout.branch` or its default. 27658 + properties: 27659 + branch: 27660 + description: |- 27661 + Branch specifies that commits should be pushed to the branch 27662 + named. The branch is created using `.spec.checkout.branch` as the 27663 + starting point, if it doesn't already exist. 27664 + type: string 27665 + options: 27666 + additionalProperties: 27667 + type: string 27668 + description: |- 27669 + Options specifies the push options that are sent to the Git 27670 + server when performing a push operation. For details, see: 27671 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 27672 + type: object 27673 + refspec: 27674 + description: |- 27675 + Refspec specifies the Git Refspec to use for a push operation. 27676 + If both Branch and Refspec are provided, then the commit is pushed 27677 + to the branch and also using the specified refspec. 27678 + For more details about Git Refspecs, see: 27679 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 27680 + type: string 27681 + type: object 27682 + required: 27683 + - commit 27684 + type: object 27685 + interval: 27686 + description: |- 27687 + Interval gives an lower bound for how often the automation 27688 + run should be attempted. 27689 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 27690 + type: string 27691 + policySelector: 27692 + description: |- 27693 + PolicySelector allows to filter applied policies based on labels. 27694 + By default includes all policies in namespace. 27695 + properties: 27696 + matchExpressions: 27697 + description: matchExpressions is a list of label selector requirements. 27698 + The requirements are ANDed. 27699 + items: 27700 + description: |- 27701 + A label selector requirement is a selector that contains values, a key, and an operator that 27702 + relates the key and values. 27703 + properties: 27704 + key: 27705 + description: key is the label key that the selector applies 27706 + to. 27707 + type: string 27708 + operator: 27709 + description: |- 27710 + operator represents a key's relationship to a set of values. 27711 + Valid operators are In, NotIn, Exists and DoesNotExist. 27712 + type: string 27713 + values: 27714 + description: |- 27715 + values is an array of string values. If the operator is In or NotIn, 27716 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 27717 + the values array must be empty. This array is replaced during a strategic 27718 + merge patch. 27719 + items: 27720 + type: string 27721 + type: array 27722 + x-kubernetes-list-type: atomic 27723 + required: 27724 + - key 27725 + - operator 27726 + type: object 27727 + type: array 27728 + x-kubernetes-list-type: atomic 27729 + matchLabels: 27730 + additionalProperties: 27731 + type: string 27732 + description: |- 27733 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 27734 + map is equivalent to an element of matchExpressions, whose key field is "key", the 27735 + operator is "In", and the values array contains only "value". The requirements are ANDed. 27736 + type: object 27737 type: object 27738 - served: true 27739 - storage: true 27740 - subresources: 27741 - status: {} 27742 + x-kubernetes-map-type: atomic 27743 + sourceRef: 27744 + description: |- 27745 + SourceRef refers to the resource giving access details 27746 + to a git repository. 27747 + properties: 27748 + apiVersion: 27749 + description: API version of the referent. 27750 + type: string 27751 + kind: 27752 + default: GitRepository 27753 + description: Kind of the referent. 27754 + enum: 27755 + - GitRepository 27756 + type: string 27757 + name: 27758 + description: Name of the referent. 27759 + type: string 27760 + namespace: 27761 + description: Namespace of the referent, defaults to the namespace 27762 + of the Kubernetes resource object that contains the reference. 27763 + type: string 27764 + required: 27765 + - kind 27766 + - name 27767 + type: object 27768 + suspend: 27769 + description: |- 27770 + Suspend tells the controller to not run this automation, until 27771 + it is unset (or set to false). Defaults to false. 27772 + type: boolean 27773 + update: 27774 + default: 27775 + strategy: Setters 27776 + description: |- 27777 + Update gives the specification for how to update the files in 27778 + the repository. This can be left empty, to use the default 27779 + value. 27780 + properties: 27781 + path: 27782 + description: |- 27783 + Path to the directory containing the manifests to be updated. 27784 + Defaults to 'None', which translates to the root path 27785 + of the GitRepositoryRef. 27786 + type: string 27787 + strategy: 27788 + default: Setters 27789 + description: Strategy names the strategy to be used. 27790 + enum: 27791 + - Setters 27792 + type: string 27793 + required: 27794 + - strategy 27795 + type: object 27796 + required: 27797 + - interval 27798 + - sourceRef 27799 + type: object 27800 + status: 27801 + default: 27802 + observedGeneration: -1 27803 + description: ImageUpdateAutomationStatus defines the observed state of 27804 + ImageUpdateAutomation 27805 + properties: 27806 + conditions: 27807 + items: 27808 + description: Condition contains details for one aspect of the current 27809 + state of this API Resource. 27810 + properties: 27811 + lastTransitionTime: 27812 + description: |- 27813 + lastTransitionTime is the last time the condition transitioned from one status to another. 27814 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 27815 + format: date-time 27816 + type: string 27817 + message: 27818 + description: |- 27819 + message is a human readable message indicating details about the transition. 27820 + This may be an empty string. 27821 + maxLength: 32768 27822 + type: string 27823 + observedGeneration: 27824 + description: |- 27825 + observedGeneration represents the .metadata.generation that the condition was set based upon. 27826 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 27827 + with respect to the current state of the instance. 27828 + format: int64 27829 + minimum: 0 27830 + type: integer 27831 + reason: 27832 + description: |- 27833 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 27834 + Producers of specific condition types may define expected values and meanings for this field, 27835 + and whether the values are considered a guaranteed API. 27836 + The value should be a CamelCase string. 27837 + This field may not be empty. 27838 + maxLength: 1024 27839 + minLength: 1 27840 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 27841 + type: string 27842 + status: 27843 + description: status of the condition, one of True, False, Unknown. 27844 + enum: 27845 + - "True" 27846 + - "False" 27847 + - Unknown 27848 + type: string 27849 + type: 27850 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 27851 + maxLength: 316 27852 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 27853 + type: string 27854 + required: 27855 + - lastTransitionTime 27856 + - message 27857 + - reason 27858 + - status 27859 + - type 27860 + type: object 27861 + type: array 27862 + lastAutomationRunTime: 27863 + description: |- 27864 + LastAutomationRunTime records the last time the controller ran 27865 + this automation through to completion (even if no updates were 27866 + made). 27867 + format: date-time 27868 + type: string 27869 + lastHandledReconcileAt: 27870 + description: |- 27871 + LastHandledReconcileAt holds the value of the most recent 27872 + reconcile request value, so a change of the annotation value 27873 + can be detected. 27874 + type: string 27875 + lastPushCommit: 27876 + description: |- 27877 + LastPushCommit records the SHA1 of the last commit made by the 27878 + controller, for this automation object 27879 + type: string 27880 + lastPushTime: 27881 + description: LastPushTime records the time of the last pushed change. 27882 + format: date-time 27883 + type: string 27884 + observedGeneration: 27885 + format: int64 27886 + type: integer 27887 + observedPolicies: 27888 + additionalProperties: 27889 + description: ImageRef represents an image reference. 27890 + properties: 27891 + name: 27892 + description: Name is the bare image's name. 27893 + type: string 27894 + tag: 27895 + description: Tag is the image's tag. 27896 + type: string 27897 + required: 27898 + - name 27899 + - tag 27900 + type: object 27901 + description: |- 27902 + ObservedPolicies is the list of observed ImagePolicies that were 27903 + considered by the ImageUpdateAutomation update process. 27904 + type: object 27905 + observedSourceRevision: 27906 + description: |- 27907 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 27908 + ObservedSourceRevision is the last observed source revision. This can be 27909 + used to determine if the source has been updated since last observation. 27910 + type: string 27911 + type: object 27912 + type: object 27913 + served: true 27914 + storage: true 27915 + subresources: 27916 + status: {} 27917 --- 27918 apiVersion: v1 27919 kind: ServiceAccount 27920 metadata: 27921 - labels: 27922 - app.kubernetes.io/component: image-automation-controller 27923 - app.kubernetes.io/instance: flux-system 27924 - app.kubernetes.io/part-of: flux 27925 - app.kubernetes.io/version: v2.3.0 27926 - name: image-automation-controller 27927 - namespace: flux-system 27928 + labels: 27929 + app.kubernetes.io/component: image-automation-controller 27930 + app.kubernetes.io/instance: flux-system 27931 + app.kubernetes.io/part-of: flux 27932 + app.kubernetes.io/version: v2.4.0 27933 + name: image-automation-controller 27934 + namespace: flux-system 27935 --- 27936 apiVersion: apps/v1 27937 kind: Deployment 27938 metadata: 27939 - labels: 27940 - app.kubernetes.io/component: image-automation-controller 27941 - app.kubernetes.io/instance: flux-system 27942 - app.kubernetes.io/part-of: flux 27943 - app.kubernetes.io/version: v2.3.0 27944 - control-plane: controller 27945 - name: image-automation-controller 27946 - namespace: flux-system 27947 + labels: 27948 + app.kubernetes.io/component: image-automation-controller 27949 + app.kubernetes.io/instance: flux-system 27950 + app.kubernetes.io/part-of: flux 27951 + app.kubernetes.io/version: v2.4.0 27952 + control-plane: controller 27953 + name: image-automation-controller 27954 + namespace: flux-system 27955 spec: 27956 - replicas: 1 27957 - selector: 27958 - matchLabels: 27959 - app: image-automation-controller 27960 - template: 27961 - metadata: 27962 - annotations: 27963 - prometheus.io/port: "8080" 27964 - prometheus.io/scrape: "true" 27965 - labels: 27966 - app: image-automation-controller 27967 - spec: 27968 - containers: 27969 - - args: 27970 - - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 27971 - - --watch-all-namespaces=true 27972 - - --log-level=info 27973 - - --log-encoding=json 27974 - - --enable-leader-election 27975 - env: 27976 - - name: RUNTIME_NAMESPACE 27977 - valueFrom: 27978 - fieldRef: 27979 - fieldPath: metadata.namespace 27980 - - name: GOMAXPROCS 27981 - valueFrom: 27982 - resourceFieldRef: 27983 - containerName: manager 27984 - resource: limits.cpu 27985 - - name: GOMEMLIMIT 27986 - valueFrom: 27987 - resourceFieldRef: 27988 - containerName: manager 27989 - resource: limits.memory 27990 - image: ghcr.io/fluxcd/image-automation-controller:v0.38.0 27991 - imagePullPolicy: IfNotPresent 27992 - livenessProbe: 27993 - httpGet: 27994 - path: /healthz 27995 - port: healthz 27996 - name: manager 27997 - ports: 27998 - - containerPort: 8080 27999 - name: http-prom 28000 - protocol: TCP 28001 - - containerPort: 9440 28002 - name: healthz 28003 - protocol: TCP 28004 - readinessProbe: 28005 - httpGet: 28006 - path: /readyz 28007 - port: healthz 28008 - resources: 28009 - limits: 28010 - cpu: 1000m 28011 - memory: 1Gi 28012 - requests: 28013 - cpu: 100m 28014 - memory: 64Mi 28015 - securityContext: 28016 - allowPrivilegeEscalation: false 28017 - capabilities: 28018 - drop: 28019 - - ALL 28020 - readOnlyRootFilesystem: true 28021 - runAsNonRoot: true 28022 - seccompProfile: 28023 - type: RuntimeDefault 28024 - volumeMounts: 28025 - - mountPath: /tmp 28026 - name: temp 28027 - nodeSelector: 28028 - kubernetes.io/os: linux 28029 - securityContext: 28030 - fsGroup: 1337 28031 - serviceAccountName: image-automation-controller 28032 - terminationGracePeriodSeconds: 10 28033 - volumes: 28034 - - emptyDir: {} 28035 - name: temp 28036 + replicas: 1 28037 + selector: 28038 + matchLabels: 28039 + app: image-automation-controller 28040 + template: 28041 + metadata: 28042 + annotations: 28043 + prometheus.io/port: "8080" 28044 + prometheus.io/scrape: "true" 28045 + labels: 28046 + app: image-automation-controller 28047 + spec: 28048 + containers: 28049 + - args: 28050 + - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ 28051 + - --watch-all-namespaces=true 28052 + - --log-level=info 28053 + - --log-encoding=json 28054 + - --enable-leader-election 28055 + env: 28056 + - name: RUNTIME_NAMESPACE 28057 + valueFrom: 28058 + fieldRef: 28059 + fieldPath: metadata.namespace 28060 + - name: GOMAXPROCS 28061 + valueFrom: 28062 + resourceFieldRef: 28063 + containerName: manager 28064 + resource: limits.cpu 28065 + - name: GOMEMLIMIT 28066 + valueFrom: 28067 + resourceFieldRef: 28068 + containerName: manager 28069 + resource: limits.memory 28070 + image: ghcr.io/fluxcd/image-automation-controller:v0.39.0 28071 + imagePullPolicy: IfNotPresent 28072 + livenessProbe: 28073 + httpGet: 28074 + path: /healthz 28075 + port: healthz 28076 + name: manager 28077 + ports: 28078 + - containerPort: 8080 28079 + name: http-prom 28080 + protocol: TCP 28081 + - containerPort: 9440 28082 + name: healthz 28083 + protocol: TCP 28084 + readinessProbe: 28085 + httpGet: 28086 + path: /readyz 28087 + port: healthz 28088 + resources: 28089 + limits: 28090 + cpu: 1000m 28091 + memory: 1Gi 28092 + requests: 28093 + cpu: 100m 28094 + memory: 64Mi 28095 + securityContext: 28096 + allowPrivilegeEscalation: false 28097 + capabilities: 28098 + drop: 28099 + - ALL 28100 + readOnlyRootFilesystem: true 28101 + runAsNonRoot: true 28102 + seccompProfile: 28103 + type: RuntimeDefault 28104 + volumeMounts: 28105 + - mountPath: /tmp 28106 + name: temp 28107 + nodeSelector: 28108 + kubernetes.io/os: linux 28109 + securityContext: 28110 + fsGroup: 1337 28111 + serviceAccountName: image-automation-controller 28112 + terminationGracePeriodSeconds: 10 28113 + volumes: 28114 + - emptyDir: {} 28115 + name: temp