95.diff (752681B)
1 diff --git a/clusters/talos_cluster/flux-system/gotk-components.yaml b/clusters/talos_cluster/flux-system/gotk-components.yaml 2 index 8f445beb..05dfff4f 100644 3 --- a/clusters/talos_cluster/flux-system/gotk-components.yaml 4 +++ b/clusters/talos_cluster/flux-system/gotk-components.yaml 5 @@ -1,5 +1,6 @@ 6 +--- 7 # This manifest was generated by flux. DO NOT EDIT. 8 -# Flux Version: v2.8.0 9 +# Flux Version: v2.8.1 10 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller 11 apiVersion: v1 12 kind: Namespace 13 @@ -7,7 +8,7 @@ metadata: 14 labels: 15 app.kubernetes.io/instance: flux-system 16 app.kubernetes.io/part-of: flux 17 - app.kubernetes.io/version: v2.8.0 18 + app.kubernetes.io/version: v2.8.1 19 pod-security.kubernetes.io/warn: restricted 20 pod-security.kubernetes.io/warn-version: latest 21 name: flux-system 22 @@ -18,19 +19,19 @@ metadata: 23 labels: 24 app.kubernetes.io/instance: flux-system 25 app.kubernetes.io/part-of: flux 26 - app.kubernetes.io/version: v2.8.0 27 + app.kubernetes.io/version: v2.8.1 28 name: allow-egress 29 namespace: flux-system 30 spec: 31 egress: 32 - - {} 33 + - {} 34 ingress: 35 - - from: 36 - - podSelector: {} 37 + - from: 38 + - podSelector: {} 39 podSelector: {} 40 policyTypes: 41 - - Ingress 42 - - Egress 43 + - Ingress 44 + - Egress 45 --- 46 apiVersion: networking.k8s.io/v1 47 kind: NetworkPolicy 48 @@ -38,19 +39,19 @@ metadata: 49 labels: 50 app.kubernetes.io/instance: flux-system 51 app.kubernetes.io/part-of: flux 52 - app.kubernetes.io/version: v2.8.0 53 + app.kubernetes.io/version: v2.8.1 54 name: allow-scraping 55 namespace: flux-system 56 spec: 57 ingress: 58 - - from: 59 - - namespaceSelector: {} 60 - ports: 61 - - port: 8080 62 - protocol: TCP 63 + - from: 64 + - namespaceSelector: {} 65 + ports: 66 + - port: 8080 67 + protocol: TCP 68 podSelector: {} 69 policyTypes: 70 - - Ingress 71 + - Ingress 72 --- 73 apiVersion: networking.k8s.io/v1 74 kind: NetworkPolicy 75 @@ -58,18 +59,18 @@ metadata: 76 labels: 77 app.kubernetes.io/instance: flux-system 78 app.kubernetes.io/part-of: flux 79 - app.kubernetes.io/version: v2.8.0 80 + app.kubernetes.io/version: v2.8.1 81 name: allow-webhooks 82 namespace: flux-system 83 spec: 84 ingress: 85 - - from: 86 - - namespaceSelector: {} 87 + - from: 88 + - namespaceSelector: {} 89 podSelector: 90 matchLabels: 91 app: notification-controller 92 policyTypes: 93 - - Ingress 94 + - Ingress 95 --- 96 apiVersion: v1 97 kind: ResourceQuota 98 @@ -77,7 +78,7 @@ metadata: 99 labels: 100 app.kubernetes.io/instance: flux-system 101 app.kubernetes.io/part-of: flux 102 - app.kubernetes.io/version: v2.8.0 103 + app.kubernetes.io/version: v2.8.1 104 name: critical-pods-flux-system 105 namespace: flux-system 106 spec: 107 @@ -85,11 +86,11 @@ spec: 108 pods: "1000" 109 scopeSelector: 110 matchExpressions: 111 - - operator: In 112 - scopeName: PriorityClass 113 - values: 114 - - system-node-critical 115 - - system-cluster-critical 116 + - operator: In 117 + scopeName: PriorityClass 118 + values: 119 + - system-node-critical 120 + - system-cluster-critical 121 --- 122 apiVersion: rbac.authorization.k8s.io/v1 123 kind: ClusterRole 124 @@ -97,105 +98,105 @@ metadata: 125 labels: 126 app.kubernetes.io/instance: flux-system 127 app.kubernetes.io/part-of: flux 128 - app.kubernetes.io/version: v2.8.0 129 + app.kubernetes.io/version: v2.8.1 130 name: crd-controller-flux-system 131 rules: 132 - - apiGroups: 133 - - source.toolkit.fluxcd.io 134 - resources: 135 - - '*' 136 - verbs: 137 - - '*' 138 - - apiGroups: 139 - - kustomize.toolkit.fluxcd.io 140 - resources: 141 - - '*' 142 - verbs: 143 - - '*' 144 - - apiGroups: 145 - - helm.toolkit.fluxcd.io 146 - resources: 147 - - '*' 148 - verbs: 149 - - '*' 150 - - apiGroups: 151 - - notification.toolkit.fluxcd.io 152 - resources: 153 - - '*' 154 - verbs: 155 - - '*' 156 - - apiGroups: 157 - - image.toolkit.fluxcd.io 158 - resources: 159 - - '*' 160 - verbs: 161 - - '*' 162 - - apiGroups: 163 - - source.extensions.fluxcd.io 164 - resources: 165 - - '*' 166 - verbs: 167 - - '*' 168 - - apiGroups: 169 - - "" 170 - resources: 171 - - namespaces 172 - - secrets 173 - - configmaps 174 - - serviceaccounts 175 - verbs: 176 - - get 177 - - list 178 - - watch 179 - - apiGroups: 180 - - "" 181 - resources: 182 - - events 183 - verbs: 184 - - create 185 - - patch 186 - - apiGroups: 187 - - "" 188 - resources: 189 - - configmaps 190 - verbs: 191 - - get 192 - - list 193 - - watch 194 - - create 195 - - update 196 - - patch 197 - - delete 198 - - apiGroups: 199 - - "" 200 - resources: 201 - - configmaps/status 202 - verbs: 203 - - get 204 - - update 205 - - patch 206 - - apiGroups: 207 - - coordination.k8s.io 208 - resources: 209 - - leases 210 - verbs: 211 - - get 212 - - list 213 - - watch 214 - - create 215 - - update 216 - - patch 217 - - delete 218 - - apiGroups: 219 - - "" 220 - resources: 221 - - serviceaccounts/token 222 - verbs: 223 - - create 224 - - nonResourceURLs: 225 - - /livez/ping 226 - verbs: 227 - - head 228 +- apiGroups: 229 + - source.toolkit.fluxcd.io 230 + resources: 231 + - '*' 232 + verbs: 233 + - '*' 234 +- apiGroups: 235 + - kustomize.toolkit.fluxcd.io 236 + resources: 237 + - '*' 238 + verbs: 239 + - '*' 240 +- apiGroups: 241 + - helm.toolkit.fluxcd.io 242 + resources: 243 + - '*' 244 + verbs: 245 + - '*' 246 +- apiGroups: 247 + - notification.toolkit.fluxcd.io 248 + resources: 249 + - '*' 250 + verbs: 251 + - '*' 252 +- apiGroups: 253 + - image.toolkit.fluxcd.io 254 + resources: 255 + - '*' 256 + verbs: 257 + - '*' 258 +- apiGroups: 259 + - source.extensions.fluxcd.io 260 + resources: 261 + - '*' 262 + verbs: 263 + - '*' 264 +- apiGroups: 265 + - "" 266 + resources: 267 + - namespaces 268 + - secrets 269 + - configmaps 270 + - serviceaccounts 271 + verbs: 272 + - get 273 + - list 274 + - watch 275 +- apiGroups: 276 + - "" 277 + resources: 278 + - events 279 + verbs: 280 + - create 281 + - patch 282 +- apiGroups: 283 + - "" 284 + resources: 285 + - configmaps 286 + verbs: 287 + - get 288 + - list 289 + - watch 290 + - create 291 + - update 292 + - patch 293 + - delete 294 +- apiGroups: 295 + - "" 296 + resources: 297 + - configmaps/status 298 + verbs: 299 + - get 300 + - update 301 + - patch 302 +- apiGroups: 303 + - coordination.k8s.io 304 + resources: 305 + - leases 306 + verbs: 307 + - get 308 + - list 309 + - watch 310 + - create 311 + - update 312 + - patch 313 + - delete 314 +- apiGroups: 315 + - "" 316 + resources: 317 + - serviceaccounts/token 318 + verbs: 319 + - create 320 +- nonResourceURLs: 321 + - /livez/ping 322 + verbs: 323 + - head 324 --- 325 apiVersion: rbac.authorization.k8s.io/v1 326 kind: ClusterRole 327 @@ -203,26 +204,26 @@ metadata: 328 labels: 329 app.kubernetes.io/instance: flux-system 330 app.kubernetes.io/part-of: flux 331 - app.kubernetes.io/version: v2.8.0 332 + app.kubernetes.io/version: v2.8.1 333 rbac.authorization.k8s.io/aggregate-to-admin: "true" 334 rbac.authorization.k8s.io/aggregate-to-edit: "true" 335 name: flux-edit-flux-system 336 rules: 337 - - apiGroups: 338 - - notification.toolkit.fluxcd.io 339 - - source.toolkit.fluxcd.io 340 - - source.extensions.fluxcd.io 341 - - helm.toolkit.fluxcd.io 342 - - image.toolkit.fluxcd.io 343 - - kustomize.toolkit.fluxcd.io 344 - resources: 345 - - '*' 346 - verbs: 347 - - create 348 - - delete 349 - - deletecollection 350 - - patch 351 - - update 352 +- apiGroups: 353 + - notification.toolkit.fluxcd.io 354 + - source.toolkit.fluxcd.io 355 + - source.extensions.fluxcd.io 356 + - helm.toolkit.fluxcd.io 357 + - image.toolkit.fluxcd.io 358 + - kustomize.toolkit.fluxcd.io 359 + resources: 360 + - '*' 361 + verbs: 362 + - create 363 + - delete 364 + - deletecollection 365 + - patch 366 + - update 367 --- 368 apiVersion: rbac.authorization.k8s.io/v1 369 kind: ClusterRole 370 @@ -230,25 +231,25 @@ metadata: 371 labels: 372 app.kubernetes.io/instance: flux-system 373 app.kubernetes.io/part-of: flux 374 - app.kubernetes.io/version: v2.8.0 375 + app.kubernetes.io/version: v2.8.1 376 rbac.authorization.k8s.io/aggregate-to-admin: "true" 377 rbac.authorization.k8s.io/aggregate-to-edit: "true" 378 rbac.authorization.k8s.io/aggregate-to-view: "true" 379 name: flux-view-flux-system 380 rules: 381 - - apiGroups: 382 - - notification.toolkit.fluxcd.io 383 - - source.toolkit.fluxcd.io 384 - - source.extensions.fluxcd.io 385 - - helm.toolkit.fluxcd.io 386 - - image.toolkit.fluxcd.io 387 - - kustomize.toolkit.fluxcd.io 388 - resources: 389 - - '*' 390 - verbs: 391 - - get 392 - - list 393 - - watch 394 +- apiGroups: 395 + - notification.toolkit.fluxcd.io 396 + - source.toolkit.fluxcd.io 397 + - source.extensions.fluxcd.io 398 + - helm.toolkit.fluxcd.io 399 + - image.toolkit.fluxcd.io 400 + - kustomize.toolkit.fluxcd.io 401 + resources: 402 + - '*' 403 + verbs: 404 + - get 405 + - list 406 + - watch 407 --- 408 apiVersion: rbac.authorization.k8s.io/v1 409 kind: ClusterRoleBinding 410 @@ -256,19 +257,19 @@ metadata: 411 labels: 412 app.kubernetes.io/instance: flux-system 413 app.kubernetes.io/part-of: flux 414 - app.kubernetes.io/version: v2.8.0 415 + app.kubernetes.io/version: v2.8.1 416 name: cluster-reconciler-flux-system 417 roleRef: 418 apiGroup: rbac.authorization.k8s.io 419 kind: ClusterRole 420 name: cluster-admin 421 subjects: 422 - - kind: ServiceAccount 423 - name: kustomize-controller 424 - namespace: flux-system 425 - - kind: ServiceAccount 426 - name: helm-controller 427 - namespace: flux-system 428 +- kind: ServiceAccount 429 + name: kustomize-controller 430 + namespace: flux-system 431 +- kind: ServiceAccount 432 + name: helm-controller 433 + namespace: flux-system 434 --- 435 apiVersion: rbac.authorization.k8s.io/v1 436 kind: ClusterRoleBinding 437 @@ -276,34 +277,34 @@ metadata: 438 labels: 439 app.kubernetes.io/instance: flux-system 440 app.kubernetes.io/part-of: flux 441 - app.kubernetes.io/version: v2.8.0 442 + app.kubernetes.io/version: v2.8.1 443 name: crd-controller-flux-system 444 roleRef: 445 apiGroup: rbac.authorization.k8s.io 446 kind: ClusterRole 447 name: crd-controller-flux-system 448 subjects: 449 - - kind: ServiceAccount 450 - name: kustomize-controller 451 - namespace: flux-system 452 - - kind: ServiceAccount 453 - name: helm-controller 454 - namespace: flux-system 455 - - kind: ServiceAccount 456 - name: source-controller 457 - namespace: flux-system 458 - - kind: ServiceAccount 459 - name: notification-controller 460 - namespace: flux-system 461 - - kind: ServiceAccount 462 - name: image-reflector-controller 463 - namespace: flux-system 464 - - kind: ServiceAccount 465 - name: image-automation-controller 466 - namespace: flux-system 467 - - kind: ServiceAccount 468 - name: source-watcher 469 - namespace: flux-system 470 +- kind: ServiceAccount 471 + name: kustomize-controller 472 + namespace: flux-system 473 +- kind: ServiceAccount 474 + name: helm-controller 475 + namespace: flux-system 476 +- kind: ServiceAccount 477 + name: source-controller 478 + namespace: flux-system 479 +- kind: ServiceAccount 480 + name: notification-controller 481 + namespace: flux-system 482 +- kind: ServiceAccount 483 + name: image-reflector-controller 484 + namespace: flux-system 485 +- kind: ServiceAccount 486 + name: image-automation-controller 487 + namespace: flux-system 488 +- kind: ServiceAccount 489 + name: source-watcher 490 + namespace: flux-system 491 --- 492 apiVersion: apiextensions.k8s.io/v1 493 kind: CustomResourceDefinition 494 @@ -314,7 +315,7 @@ metadata: 495 app.kubernetes.io/component: source-controller 496 app.kubernetes.io/instance: flux-system 497 app.kubernetes.io/part-of: flux 498 - app.kubernetes.io/version: v2.8.0 499 + app.kubernetes.io/version: v2.8.1 500 name: buckets.source.toolkit.fluxcd.io 501 spec: 502 group: source.toolkit.fluxcd.io 503 @@ -325,361 +326,372 @@ spec: 504 singular: bucket 505 scope: Namespaced 506 versions: 507 - - additionalPrinterColumns: 508 - - jsonPath: .spec.endpoint 509 - name: Endpoint 510 - type: string 511 - - jsonPath: .metadata.creationTimestamp 512 - name: Age 513 - type: date 514 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 515 - name: Ready 516 - type: string 517 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 518 - name: Status 519 - type: string 520 - name: v1 521 - schema: 522 - openAPIV3Schema: 523 - description: Bucket is the Schema for the buckets API. 524 - properties: 525 - apiVersion: 526 - description: |- 527 - APIVersion defines the versioned schema of this representation of an object. 528 - Servers should convert recognized schemas to the latest internal value, and 529 - may reject unrecognized values. 530 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 531 - type: string 532 - kind: 533 - description: |- 534 - Kind is a string value representing the REST resource this object represents. 535 - Servers may infer this from the endpoint the client submits requests to. 536 - Cannot be updated. 537 - In CamelCase. 538 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 539 - type: string 540 - metadata: 541 - type: object 542 - spec: 543 - description: |- 544 - BucketSpec specifies the required configuration to produce an Artifact for 545 - an object storage bucket. 546 - properties: 547 - bucketName: 548 - description: BucketName is the name of the object storage bucket. 549 - type: string 550 - certSecretRef: 551 - description: |- 552 - CertSecretRef can be given the name of a Secret containing 553 - either or both of 554 + - additionalPrinterColumns: 555 + - jsonPath: .spec.endpoint 556 + name: Endpoint 557 + type: string 558 + - jsonPath: .metadata.creationTimestamp 559 + name: Age 560 + type: date 561 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 562 + name: Ready 563 + type: string 564 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 565 + name: Status 566 + type: string 567 + name: v1 568 + schema: 569 + openAPIV3Schema: 570 + description: Bucket is the Schema for the buckets API. 571 + properties: 572 + apiVersion: 573 + description: |- 574 + APIVersion defines the versioned schema of this representation of an object. 575 + Servers should convert recognized schemas to the latest internal value, and 576 + may reject unrecognized values. 577 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 578 + type: string 579 + kind: 580 + description: |- 581 + Kind is a string value representing the REST resource this object represents. 582 + Servers may infer this from the endpoint the client submits requests to. 583 + Cannot be updated. 584 + In CamelCase. 585 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 586 + type: string 587 + metadata: 588 + type: object 589 + spec: 590 + description: |- 591 + BucketSpec specifies the required configuration to produce an Artifact for 592 + an object storage bucket. 593 + properties: 594 + bucketName: 595 + description: BucketName is the name of the object storage bucket. 596 + type: string 597 + certSecretRef: 598 + description: |- 599 + CertSecretRef can be given the name of a Secret containing 600 + either or both of 601 602 - - a PEM-encoded client certificate (`tls.crt`) and private 603 - key (`tls.key`); 604 - - a PEM-encoded CA certificate (`ca.crt`) 605 + - a PEM-encoded client certificate (`tls.crt`) and private 606 + key (`tls.key`); 607 + - a PEM-encoded CA certificate (`ca.crt`) 608 609 - and whichever are supplied, will be used for connecting to the 610 - bucket. The client cert and key are useful if you are 611 - authenticating with a certificate; the CA cert is useful if 612 - you are using a self-signed server certificate. The Secret must 613 - be of type `Opaque` or `kubernetes.io/tls`. 614 + and whichever are supplied, will be used for connecting to the 615 + bucket. The client cert and key are useful if you are 616 + authenticating with a certificate; the CA cert is useful if 617 + you are using a self-signed server certificate. The Secret must 618 + be of type `Opaque` or `kubernetes.io/tls`. 619 620 - This field is only supported for the `generic` provider. 621 - properties: 622 - name: 623 - description: Name of the referent. 624 - type: string 625 - required: 626 - - name 627 - type: object 628 - endpoint: 629 - description: Endpoint is the object storage address the BucketName is located at. 630 - type: string 631 - ignore: 632 - description: |- 633 - Ignore overrides the set of excluded patterns in the .sourceignore format 634 - (which is the same as .gitignore). If not provided, a default will be used, 635 - consult the documentation for your version to find out what those are. 636 - type: string 637 - insecure: 638 - description: Insecure allows connecting to a non-TLS HTTP Endpoint. 639 - type: boolean 640 - interval: 641 - description: |- 642 - Interval at which the Bucket Endpoint is checked for updates. 643 - This interval is approximate and may be subject to jitter to ensure 644 - efficient use of resources. 645 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 646 - type: string 647 - prefix: 648 - description: Prefix to use for server-side filtering of files in the Bucket. 649 - type: string 650 - provider: 651 - default: generic 652 - description: |- 653 - Provider of the object storage bucket. 654 - Defaults to 'generic', which expects an S3 (API) compatible object 655 - storage. 656 - enum: 657 - - generic 658 - - aws 659 - - gcp 660 - - azure 661 - type: string 662 - proxySecretRef: 663 - description: |- 664 - ProxySecretRef specifies the Secret containing the proxy configuration 665 - to use while communicating with the Bucket server. 666 - properties: 667 - name: 668 - description: Name of the referent. 669 - type: string 670 - required: 671 - - name 672 - type: object 673 - region: 674 - description: Region of the Endpoint where the BucketName is located in. 675 - type: string 676 - secretRef: 677 - description: |- 678 - SecretRef specifies the Secret containing authentication credentials 679 - for the Bucket. 680 - properties: 681 - name: 682 - description: Name of the referent. 683 - type: string 684 - required: 685 - - name 686 - type: object 687 - serviceAccountName: 688 - description: |- 689 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 690 - the bucket. This field is only supported for the 'gcp' and 'aws' providers. 691 - For more information about workload identity: 692 - https://fluxcd.io/flux/components/source/buckets/#workload-identity 693 - type: string 694 - sts: 695 - description: |- 696 - STS specifies the required configuration to use a Security Token 697 - Service for fetching temporary credentials to authenticate in a 698 - Bucket provider. 699 + This field is only supported for the `generic` provider. 700 + properties: 701 + name: 702 + description: Name of the referent. 703 + type: string 704 + required: 705 + - name 706 + type: object 707 + endpoint: 708 + description: Endpoint is the object storage address the BucketName 709 + is located at. 710 + type: string 711 + ignore: 712 + description: |- 713 + Ignore overrides the set of excluded patterns in the .sourceignore format 714 + (which is the same as .gitignore). If not provided, a default will be used, 715 + consult the documentation for your version to find out what those are. 716 + type: string 717 + insecure: 718 + description: Insecure allows connecting to a non-TLS HTTP Endpoint. 719 + type: boolean 720 + interval: 721 + description: |- 722 + Interval at which the Bucket Endpoint is checked for updates. 723 + This interval is approximate and may be subject to jitter to ensure 724 + efficient use of resources. 725 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 726 + type: string 727 + prefix: 728 + description: Prefix to use for server-side filtering of files in the 729 + Bucket. 730 + type: string 731 + provider: 732 + default: generic 733 + description: |- 734 + Provider of the object storage bucket. 735 + Defaults to 'generic', which expects an S3 (API) compatible object 736 + storage. 737 + enum: 738 + - generic 739 + - aws 740 + - gcp 741 + - azure 742 + type: string 743 + proxySecretRef: 744 + description: |- 745 + ProxySecretRef specifies the Secret containing the proxy configuration 746 + to use while communicating with the Bucket server. 747 + properties: 748 + name: 749 + description: Name of the referent. 750 + type: string 751 + required: 752 + - name 753 + type: object 754 + region: 755 + description: Region of the Endpoint where the BucketName is located 756 + in. 757 + type: string 758 + secretRef: 759 + description: |- 760 + SecretRef specifies the Secret containing authentication credentials 761 + for the Bucket. 762 + properties: 763 + name: 764 + description: Name of the referent. 765 + type: string 766 + required: 767 + - name 768 + type: object 769 + serviceAccountName: 770 + description: |- 771 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 772 + the bucket. This field is only supported for the 'gcp' and 'aws' providers. 773 + For more information about workload identity: 774 + https://fluxcd.io/flux/components/source/buckets/#workload-identity 775 + type: string 776 + sts: 777 + description: |- 778 + STS specifies the required configuration to use a Security Token 779 + Service for fetching temporary credentials to authenticate in a 780 + Bucket provider. 781 782 - This field is only supported for the `aws` and `generic` providers. 783 - properties: 784 - certSecretRef: 785 - description: |- 786 - CertSecretRef can be given the name of a Secret containing 787 - either or both of 788 + This field is only supported for the `aws` and `generic` providers. 789 + properties: 790 + certSecretRef: 791 + description: |- 792 + CertSecretRef can be given the name of a Secret containing 793 + either or both of 794 795 - - a PEM-encoded client certificate (`tls.crt`) and private 796 - key (`tls.key`); 797 - - a PEM-encoded CA certificate (`ca.crt`) 798 + - a PEM-encoded client certificate (`tls.crt`) and private 799 + key (`tls.key`); 800 + - a PEM-encoded CA certificate (`ca.crt`) 801 802 - and whichever are supplied, will be used for connecting to the 803 - STS endpoint. The client cert and key are useful if you are 804 - authenticating with a certificate; the CA cert is useful if 805 - you are using a self-signed server certificate. The Secret must 806 - be of type `Opaque` or `kubernetes.io/tls`. 807 + and whichever are supplied, will be used for connecting to the 808 + STS endpoint. The client cert and key are useful if you are 809 + authenticating with a certificate; the CA cert is useful if 810 + you are using a self-signed server certificate. The Secret must 811 + be of type `Opaque` or `kubernetes.io/tls`. 812 813 - This field is only supported for the `ldap` provider. 814 - properties: 815 - name: 816 - description: Name of the referent. 817 - type: string 818 - required: 819 - - name 820 - type: object 821 - endpoint: 822 - description: |- 823 - Endpoint is the HTTP/S endpoint of the Security Token Service from 824 - where temporary credentials will be fetched. 825 - pattern: ^(http|https)://.*$ 826 - type: string 827 - provider: 828 - description: Provider of the Security Token Service. 829 - enum: 830 - - aws 831 - - ldap 832 - type: string 833 - secretRef: 834 - description: |- 835 - SecretRef specifies the Secret containing authentication credentials 836 - for the STS endpoint. This Secret must contain the fields `username` 837 - and `password` and is supported only for the `ldap` provider. 838 - properties: 839 - name: 840 - description: Name of the referent. 841 - type: string 842 - required: 843 - - name 844 - type: object 845 - required: 846 - - endpoint 847 - - provider 848 - type: object 849 - suspend: 850 - description: |- 851 - Suspend tells the controller to suspend the reconciliation of this 852 - Bucket. 853 - type: boolean 854 - timeout: 855 - default: 60s 856 - description: Timeout for fetch operations, defaults to 60s. 857 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 858 - type: string 859 - required: 860 - - bucketName 861 + This field is only supported for the `ldap` provider. 862 + properties: 863 + name: 864 + description: Name of the referent. 865 + type: string 866 + required: 867 + - name 868 + type: object 869 + endpoint: 870 + description: |- 871 + Endpoint is the HTTP/S endpoint of the Security Token Service from 872 + where temporary credentials will be fetched. 873 + pattern: ^(http|https)://.*$ 874 + type: string 875 + provider: 876 + description: Provider of the Security Token Service. 877 + enum: 878 + - aws 879 + - ldap 880 + type: string 881 + secretRef: 882 + description: |- 883 + SecretRef specifies the Secret containing authentication credentials 884 + for the STS endpoint. This Secret must contain the fields `username` 885 + and `password` and is supported only for the `ldap` provider. 886 + properties: 887 + name: 888 + description: Name of the referent. 889 + type: string 890 + required: 891 + - name 892 + type: object 893 + required: 894 - endpoint 895 - - interval 896 - type: object 897 - x-kubernetes-validations: 898 - - message: STS configuration is only supported for the 'aws' and 'generic' Bucket providers 899 - rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 900 - - message: '''aws'' is the only supported STS provider for the ''aws'' Bucket provider' 901 - rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider == 'aws' 902 - - message: '''ldap'' is the only supported STS provider for the ''generic'' Bucket provider' 903 - rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider == 'ldap' 904 - - message: spec.sts.secretRef is not required for the 'aws' STS provider 905 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 906 - - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 907 - rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 908 - - message: ServiceAccountName is not supported for the 'generic' Bucket provider 909 - rule: self.provider != 'generic' || !has(self.serviceAccountName) 910 - - message: cannot set both .spec.secretRef and .spec.serviceAccountName 911 - rule: '!has(self.secretRef) || !has(self.serviceAccountName)' 912 - status: 913 - default: 914 - observedGeneration: -1 915 - description: BucketStatus records the observed state of a Bucket. 916 - properties: 917 - artifact: 918 - description: Artifact represents the last successful Bucket reconciliation. 919 - properties: 920 - digest: 921 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 922 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 923 + - provider 924 + type: object 925 + suspend: 926 + description: |- 927 + Suspend tells the controller to suspend the reconciliation of this 928 + Bucket. 929 + type: boolean 930 + timeout: 931 + default: 60s 932 + description: Timeout for fetch operations, defaults to 60s. 933 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 934 + type: string 935 + required: 936 + - bucketName 937 + - endpoint 938 + - interval 939 + type: object 940 + x-kubernetes-validations: 941 + - message: STS configuration is only supported for the 'aws' and 'generic' 942 + Bucket providers 943 + rule: self.provider == 'aws' || self.provider == 'generic' || !has(self.sts) 944 + - message: '''aws'' is the only supported STS provider for the ''aws'' 945 + Bucket provider' 946 + rule: self.provider != 'aws' || !has(self.sts) || self.sts.provider 947 + == 'aws' 948 + - message: '''ldap'' is the only supported STS provider for the ''generic'' 949 + Bucket provider' 950 + rule: self.provider != 'generic' || !has(self.sts) || self.sts.provider 951 + == 'ldap' 952 + - message: spec.sts.secretRef is not required for the 'aws' STS provider 953 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.secretRef)' 954 + - message: spec.sts.certSecretRef is not required for the 'aws' STS provider 955 + rule: '!has(self.sts) || self.sts.provider != ''aws'' || !has(self.sts.certSecretRef)' 956 + - message: ServiceAccountName is not supported for the 'generic' Bucket 957 + provider 958 + rule: self.provider != 'generic' || !has(self.serviceAccountName) 959 + - message: cannot set both .spec.secretRef and .spec.serviceAccountName 960 + rule: '!has(self.secretRef) || !has(self.serviceAccountName)' 961 + status: 962 + default: 963 + observedGeneration: -1 964 + description: BucketStatus records the observed state of a Bucket. 965 + properties: 966 + artifact: 967 + description: Artifact represents the last successful Bucket reconciliation. 968 + properties: 969 + digest: 970 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 971 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 972 + type: string 973 + lastUpdateTime: 974 + description: |- 975 + LastUpdateTime is the timestamp corresponding to the last update of the 976 + Artifact. 977 + format: date-time 978 + type: string 979 + metadata: 980 + additionalProperties: 981 type: string 982 - lastUpdateTime: 983 + description: Metadata holds upstream information such as OCI annotations. 984 + type: object 985 + path: 986 + description: |- 987 + Path is the relative file path of the Artifact. It can be used to locate 988 + the file in the root of the Artifact storage on the local file system of 989 + the controller managing the Source. 990 + type: string 991 + revision: 992 + description: |- 993 + Revision is a human-readable identifier traceable in the origin source 994 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 995 + type: string 996 + size: 997 + description: Size is the number of bytes in the file. 998 + format: int64 999 + type: integer 1000 + url: 1001 + description: |- 1002 + URL is the HTTP address of the Artifact as exposed by the controller 1003 + managing the Source. It can be used to retrieve the Artifact for 1004 + consumption, e.g. by another controller applying the Artifact contents. 1005 + type: string 1006 + required: 1007 + - digest 1008 + - lastUpdateTime 1009 + - path 1010 + - revision 1011 + - url 1012 + type: object 1013 + conditions: 1014 + description: Conditions holds the conditions for the Bucket. 1015 + items: 1016 + description: Condition contains details for one aspect of the current 1017 + state of this API Resource. 1018 + properties: 1019 + lastTransitionTime: 1020 description: |- 1021 - LastUpdateTime is the timestamp corresponding to the last update of the 1022 - Artifact. 1023 + lastTransitionTime is the last time the condition transitioned from one status to another. 1024 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1025 format: date-time 1026 type: string 1027 - metadata: 1028 - additionalProperties: 1029 - type: string 1030 - description: Metadata holds upstream information such as OCI annotations. 1031 - type: object 1032 - path: 1033 + message: 1034 description: |- 1035 - Path is the relative file path of the Artifact. It can be used to locate 1036 - the file in the root of the Artifact storage on the local file system of 1037 - the controller managing the Source. 1038 + message is a human readable message indicating details about the transition. 1039 + This may be an empty string. 1040 + maxLength: 32768 1041 type: string 1042 - revision: 1043 + observedGeneration: 1044 description: |- 1045 - Revision is a human-readable identifier traceable in the origin source 1046 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1047 - type: string 1048 - size: 1049 - description: Size is the number of bytes in the file. 1050 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1051 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1052 + with respect to the current state of the instance. 1053 format: int64 1054 + minimum: 0 1055 type: integer 1056 - url: 1057 + reason: 1058 description: |- 1059 - URL is the HTTP address of the Artifact as exposed by the controller 1060 - managing the Source. It can be used to retrieve the Artifact for 1061 - consumption, e.g. by another controller applying the Artifact contents. 1062 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1063 + Producers of specific condition types may define expected values and meanings for this field, 1064 + and whether the values are considered a guaranteed API. 1065 + The value should be a CamelCase string. 1066 + This field may not be empty. 1067 + maxLength: 1024 1068 + minLength: 1 1069 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1070 + type: string 1071 + status: 1072 + description: status of the condition, one of True, False, Unknown. 1073 + enum: 1074 + - "True" 1075 + - "False" 1076 + - Unknown 1077 + type: string 1078 + type: 1079 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1080 + maxLength: 316 1081 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1082 type: string 1083 required: 1084 - - digest 1085 - - lastUpdateTime 1086 - - path 1087 - - revision 1088 - - url 1089 + - lastTransitionTime 1090 + - message 1091 + - reason 1092 + - status 1093 + - type 1094 type: object 1095 - conditions: 1096 - description: Conditions holds the conditions for the Bucket. 1097 - items: 1098 - description: Condition contains details for one aspect of the current state of this API Resource. 1099 - properties: 1100 - lastTransitionTime: 1101 - description: |- 1102 - lastTransitionTime is the last time the condition transitioned from one status to another. 1103 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1104 - format: date-time 1105 - type: string 1106 - message: 1107 - description: |- 1108 - message is a human readable message indicating details about the transition. 1109 - This may be an empty string. 1110 - maxLength: 32768 1111 - type: string 1112 - observedGeneration: 1113 - description: |- 1114 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1115 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1116 - with respect to the current state of the instance. 1117 - format: int64 1118 - minimum: 0 1119 - type: integer 1120 - reason: 1121 - description: |- 1122 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1123 - Producers of specific condition types may define expected values and meanings for this field, 1124 - and whether the values are considered a guaranteed API. 1125 - The value should be a CamelCase string. 1126 - This field may not be empty. 1127 - maxLength: 1024 1128 - minLength: 1 1129 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1130 - type: string 1131 - status: 1132 - description: status of the condition, one of True, False, Unknown. 1133 - enum: 1134 - - "True" 1135 - - "False" 1136 - - Unknown 1137 - type: string 1138 - type: 1139 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1140 - maxLength: 316 1141 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1142 - type: string 1143 - required: 1144 - - lastTransitionTime 1145 - - message 1146 - - reason 1147 - - status 1148 - - type 1149 - type: object 1150 - type: array 1151 - lastHandledReconcileAt: 1152 - description: |- 1153 - LastHandledReconcileAt holds the value of the most recent 1154 - reconcile request value, so a change of the annotation value 1155 - can be detected. 1156 - type: string 1157 - observedGeneration: 1158 - description: ObservedGeneration is the last observed generation of the Bucket object. 1159 - format: int64 1160 - type: integer 1161 - observedIgnore: 1162 - description: |- 1163 - ObservedIgnore is the observed exclusion patterns used for constructing 1164 - the source artifact. 1165 - type: string 1166 - url: 1167 - description: |- 1168 - URL is the dynamic fetch link for the latest Artifact. 1169 - It is provided on a "best effort" basis, and using the precise 1170 - BucketStatus.Artifact data is recommended. 1171 - type: string 1172 - type: object 1173 - type: object 1174 - served: true 1175 - storage: true 1176 - subresources: 1177 - status: {} 1178 + type: array 1179 + lastHandledReconcileAt: 1180 + description: |- 1181 + LastHandledReconcileAt holds the value of the most recent 1182 + reconcile request value, so a change of the annotation value 1183 + can be detected. 1184 + type: string 1185 + observedGeneration: 1186 + description: ObservedGeneration is the last observed generation of 1187 + the Bucket object. 1188 + format: int64 1189 + type: integer 1190 + observedIgnore: 1191 + description: |- 1192 + ObservedIgnore is the observed exclusion patterns used for constructing 1193 + the source artifact. 1194 + type: string 1195 + url: 1196 + description: |- 1197 + URL is the dynamic fetch link for the latest Artifact. 1198 + It is provided on a "best effort" basis, and using the precise 1199 + BucketStatus.Artifact data is recommended. 1200 + type: string 1201 + type: object 1202 + type: object 1203 + served: true 1204 + storage: true 1205 + subresources: 1206 + status: {} 1207 --- 1208 apiVersion: apiextensions.k8s.io/v1 1209 kind: CustomResourceDefinition 1210 @@ -690,7 +702,7 @@ metadata: 1211 app.kubernetes.io/component: source-controller 1212 app.kubernetes.io/instance: flux-system 1213 app.kubernetes.io/part-of: flux 1214 - app.kubernetes.io/version: v2.8.0 1215 + app.kubernetes.io/version: v2.8.1 1216 name: externalartifacts.source.toolkit.fluxcd.io 1217 spec: 1218 group: source.toolkit.fluxcd.io 1219 @@ -701,177 +713,181 @@ spec: 1220 singular: externalartifact 1221 scope: Namespaced 1222 versions: 1223 - - additionalPrinterColumns: 1224 - - jsonPath: .metadata.creationTimestamp 1225 - name: Age 1226 - type: date 1227 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1228 - name: Ready 1229 - type: string 1230 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1231 - name: Status 1232 - type: string 1233 - - jsonPath: .spec.sourceRef.name 1234 - name: Source 1235 - type: string 1236 - name: v1 1237 - schema: 1238 - openAPIV3Schema: 1239 - description: ExternalArtifact is the Schema for the external artifacts API 1240 - properties: 1241 - apiVersion: 1242 - description: |- 1243 - APIVersion defines the versioned schema of this representation of an object. 1244 - Servers should convert recognized schemas to the latest internal value, and 1245 - may reject unrecognized values. 1246 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1247 - type: string 1248 - kind: 1249 - description: |- 1250 - Kind is a string value representing the REST resource this object represents. 1251 - Servers may infer this from the endpoint the client submits requests to. 1252 - Cannot be updated. 1253 - In CamelCase. 1254 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1255 - type: string 1256 - metadata: 1257 - type: object 1258 - spec: 1259 - description: ExternalArtifactSpec defines the desired state of ExternalArtifact 1260 - properties: 1261 - sourceRef: 1262 - description: |- 1263 - SourceRef points to the Kubernetes custom resource for 1264 - which the artifact is generated. 1265 - properties: 1266 - apiVersion: 1267 - description: API version of the referent, if not specified the Kubernetes preferred version will be used. 1268 - type: string 1269 - kind: 1270 - description: Kind of the referent. 1271 - type: string 1272 - name: 1273 - description: Name of the referent. 1274 - type: string 1275 - namespace: 1276 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 1277 + - additionalPrinterColumns: 1278 + - jsonPath: .metadata.creationTimestamp 1279 + name: Age 1280 + type: date 1281 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1282 + name: Ready 1283 + type: string 1284 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1285 + name: Status 1286 + type: string 1287 + - jsonPath: .spec.sourceRef.name 1288 + name: Source 1289 + type: string 1290 + name: v1 1291 + schema: 1292 + openAPIV3Schema: 1293 + description: ExternalArtifact is the Schema for the external artifacts API 1294 + properties: 1295 + apiVersion: 1296 + description: |- 1297 + APIVersion defines the versioned schema of this representation of an object. 1298 + Servers should convert recognized schemas to the latest internal value, and 1299 + may reject unrecognized values. 1300 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1301 + type: string 1302 + kind: 1303 + description: |- 1304 + Kind is a string value representing the REST resource this object represents. 1305 + Servers may infer this from the endpoint the client submits requests to. 1306 + Cannot be updated. 1307 + In CamelCase. 1308 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1309 + type: string 1310 + metadata: 1311 + type: object 1312 + spec: 1313 + description: ExternalArtifactSpec defines the desired state of ExternalArtifact 1314 + properties: 1315 + sourceRef: 1316 + description: |- 1317 + SourceRef points to the Kubernetes custom resource for 1318 + which the artifact is generated. 1319 + properties: 1320 + apiVersion: 1321 + description: API version of the referent, if not specified the 1322 + Kubernetes preferred version will be used. 1323 + type: string 1324 + kind: 1325 + description: Kind of the referent. 1326 + type: string 1327 + name: 1328 + description: Name of the referent. 1329 + type: string 1330 + namespace: 1331 + description: Namespace of the referent, when not specified it 1332 + acts as LocalObjectReference. 1333 + type: string 1334 + required: 1335 + - kind 1336 + - name 1337 + type: object 1338 + type: object 1339 + status: 1340 + description: ExternalArtifactStatus defines the observed state of ExternalArtifact 1341 + properties: 1342 + artifact: 1343 + description: Artifact represents the output of an ExternalArtifact 1344 + reconciliation. 1345 + properties: 1346 + digest: 1347 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1348 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1349 + type: string 1350 + lastUpdateTime: 1351 + description: |- 1352 + LastUpdateTime is the timestamp corresponding to the last update of the 1353 + Artifact. 1354 + format: date-time 1355 + type: string 1356 + metadata: 1357 + additionalProperties: 1358 type: string 1359 - required: 1360 - - kind 1361 - - name 1362 - type: object 1363 - type: object 1364 - status: 1365 - description: ExternalArtifactStatus defines the observed state of ExternalArtifact 1366 - properties: 1367 - artifact: 1368 - description: Artifact represents the output of an ExternalArtifact reconciliation. 1369 + description: Metadata holds upstream information such as OCI annotations. 1370 + type: object 1371 + path: 1372 + description: |- 1373 + Path is the relative file path of the Artifact. It can be used to locate 1374 + the file in the root of the Artifact storage on the local file system of 1375 + the controller managing the Source. 1376 + type: string 1377 + revision: 1378 + description: |- 1379 + Revision is a human-readable identifier traceable in the origin source 1380 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1381 + type: string 1382 + size: 1383 + description: Size is the number of bytes in the file. 1384 + format: int64 1385 + type: integer 1386 + url: 1387 + description: |- 1388 + URL is the HTTP address of the Artifact as exposed by the controller 1389 + managing the Source. It can be used to retrieve the Artifact for 1390 + consumption, e.g. by another controller applying the Artifact contents. 1391 + type: string 1392 + required: 1393 + - digest 1394 + - lastUpdateTime 1395 + - path 1396 + - revision 1397 + - url 1398 + type: object 1399 + conditions: 1400 + description: Conditions holds the conditions for the ExternalArtifact. 1401 + items: 1402 + description: Condition contains details for one aspect of the current 1403 + state of this API Resource. 1404 properties: 1405 - digest: 1406 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1407 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1408 - type: string 1409 - lastUpdateTime: 1410 + lastTransitionTime: 1411 description: |- 1412 - LastUpdateTime is the timestamp corresponding to the last update of the 1413 - Artifact. 1414 + lastTransitionTime is the last time the condition transitioned from one status to another. 1415 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1416 format: date-time 1417 type: string 1418 - metadata: 1419 - additionalProperties: 1420 - type: string 1421 - description: Metadata holds upstream information such as OCI annotations. 1422 - type: object 1423 - path: 1424 + message: 1425 description: |- 1426 - Path is the relative file path of the Artifact. It can be used to locate 1427 - the file in the root of the Artifact storage on the local file system of 1428 - the controller managing the Source. 1429 + message is a human readable message indicating details about the transition. 1430 + This may be an empty string. 1431 + maxLength: 32768 1432 type: string 1433 - revision: 1434 + observedGeneration: 1435 description: |- 1436 - Revision is a human-readable identifier traceable in the origin source 1437 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 1438 - type: string 1439 - size: 1440 - description: Size is the number of bytes in the file. 1441 + observedGeneration represents the .metadata.generation that the condition was set based upon. 1442 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1443 + with respect to the current state of the instance. 1444 format: int64 1445 + minimum: 0 1446 type: integer 1447 - url: 1448 + reason: 1449 description: |- 1450 - URL is the HTTP address of the Artifact as exposed by the controller 1451 - managing the Source. It can be used to retrieve the Artifact for 1452 - consumption, e.g. by another controller applying the Artifact contents. 1453 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 1454 + Producers of specific condition types may define expected values and meanings for this field, 1455 + and whether the values are considered a guaranteed API. 1456 + The value should be a CamelCase string. 1457 + This field may not be empty. 1458 + maxLength: 1024 1459 + minLength: 1 1460 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1461 + type: string 1462 + status: 1463 + description: status of the condition, one of True, False, Unknown. 1464 + enum: 1465 + - "True" 1466 + - "False" 1467 + - Unknown 1468 + type: string 1469 + type: 1470 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 1471 + maxLength: 316 1472 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1473 type: string 1474 required: 1475 - - digest 1476 - - lastUpdateTime 1477 - - path 1478 - - revision 1479 - - url 1480 + - lastTransitionTime 1481 + - message 1482 + - reason 1483 + - status 1484 + - type 1485 type: object 1486 - conditions: 1487 - description: Conditions holds the conditions for the ExternalArtifact. 1488 - items: 1489 - description: Condition contains details for one aspect of the current state of this API Resource. 1490 - properties: 1491 - lastTransitionTime: 1492 - description: |- 1493 - lastTransitionTime is the last time the condition transitioned from one status to another. 1494 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 1495 - format: date-time 1496 - type: string 1497 - message: 1498 - description: |- 1499 - message is a human readable message indicating details about the transition. 1500 - This may be an empty string. 1501 - maxLength: 32768 1502 - type: string 1503 - observedGeneration: 1504 - description: |- 1505 - observedGeneration represents the .metadata.generation that the condition was set based upon. 1506 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 1507 - with respect to the current state of the instance. 1508 - format: int64 1509 - minimum: 0 1510 - type: integer 1511 - reason: 1512 - description: |- 1513 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 1514 - Producers of specific condition types may define expected values and meanings for this field, 1515 - and whether the values are considered a guaranteed API. 1516 - The value should be a CamelCase string. 1517 - This field may not be empty. 1518 - maxLength: 1024 1519 - minLength: 1 1520 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 1521 - type: string 1522 - status: 1523 - description: status of the condition, one of True, False, Unknown. 1524 - enum: 1525 - - "True" 1526 - - "False" 1527 - - Unknown 1528 - type: string 1529 - type: 1530 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 1531 - maxLength: 316 1532 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 1533 - type: string 1534 - required: 1535 - - lastTransitionTime 1536 - - message 1537 - - reason 1538 - - status 1539 - - type 1540 - type: object 1541 - type: array 1542 - type: object 1543 - type: object 1544 - served: true 1545 - storage: true 1546 - subresources: 1547 - status: {} 1548 + type: array 1549 + type: object 1550 + type: object 1551 + served: true 1552 + storage: true 1553 + subresources: 1554 + status: {} 1555 --- 1556 apiVersion: apiextensions.k8s.io/v1 1557 kind: CustomResourceDefinition 1558 @@ -882,7 +898,7 @@ metadata: 1559 app.kubernetes.io/component: source-controller 1560 app.kubernetes.io/instance: flux-system 1561 app.kubernetes.io/part-of: flux 1562 - app.kubernetes.io/version: v2.8.0 1563 + app.kubernetes.io/version: v2.8.1 1564 name: gitrepositories.source.toolkit.fluxcd.io 1565 spec: 1566 group: source.toolkit.fluxcd.io 1567 @@ -891,243 +907,357 @@ spec: 1568 listKind: GitRepositoryList 1569 plural: gitrepositories 1570 shortNames: 1571 - - gitrepo 1572 + - gitrepo 1573 singular: gitrepository 1574 scope: Namespaced 1575 versions: 1576 - - additionalPrinterColumns: 1577 - - jsonPath: .spec.url 1578 - name: URL 1579 - type: string 1580 - - jsonPath: .metadata.creationTimestamp 1581 - name: Age 1582 - type: date 1583 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 1584 - name: Ready 1585 - type: string 1586 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 1587 - name: Status 1588 - type: string 1589 - name: v1 1590 - schema: 1591 - openAPIV3Schema: 1592 - description: GitRepository is the Schema for the gitrepositories API. 1593 - properties: 1594 - apiVersion: 1595 - description: |- 1596 - APIVersion defines the versioned schema of this representation of an object. 1597 - Servers should convert recognized schemas to the latest internal value, and 1598 - may reject unrecognized values. 1599 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1600 - type: string 1601 - kind: 1602 - description: |- 1603 - Kind is a string value representing the REST resource this object represents. 1604 - Servers may infer this from the endpoint the client submits requests to. 1605 - Cannot be updated. 1606 - In CamelCase. 1607 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1608 - type: string 1609 - metadata: 1610 - type: object 1611 - spec: 1612 - description: |- 1613 - GitRepositorySpec specifies the required configuration to produce an 1614 - Artifact for a Git repository. 1615 - properties: 1616 - ignore: 1617 - description: |- 1618 - Ignore overrides the set of excluded patterns in the .sourceignore format 1619 - (which is the same as .gitignore). If not provided, a default will be used, 1620 - consult the documentation for your version to find out what those are. 1621 - type: string 1622 - include: 1623 - description: |- 1624 - Include specifies a list of GitRepository resources which Artifacts 1625 - should be included in the Artifact produced for this GitRepository. 1626 - items: 1627 - description: |- 1628 - GitRepositoryInclude specifies a local reference to a GitRepository which 1629 - Artifact (sub-)contents must be included, and where they should be placed. 1630 - properties: 1631 - fromPath: 1632 - description: |- 1633 - FromPath specifies the path to copy contents from, defaults to the root 1634 - of the Artifact. 1635 - type: string 1636 - repository: 1637 - description: |- 1638 - GitRepositoryRef specifies the GitRepository which Artifact contents 1639 - must be included. 1640 - properties: 1641 - name: 1642 - description: Name of the referent. 1643 - type: string 1644 - required: 1645 - - name 1646 - type: object 1647 - toPath: 1648 - description: |- 1649 - ToPath specifies the path to copy contents to, defaults to the name of 1650 - the GitRepositoryRef. 1651 - type: string 1652 - required: 1653 - - repository 1654 - type: object 1655 - type: array 1656 - interval: 1657 - description: |- 1658 - Interval at which the GitRepository URL is checked for updates. 1659 - This interval is approximate and may be subject to jitter to ensure 1660 - efficient use of resources. 1661 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1662 - type: string 1663 - provider: 1664 - description: |- 1665 - Provider used for authentication, can be 'azure', 'github', 'generic'. 1666 - When not specified, defaults to 'generic'. 1667 - enum: 1668 - - generic 1669 - - azure 1670 - - github 1671 - type: string 1672 - proxySecretRef: 1673 - description: |- 1674 - ProxySecretRef specifies the Secret containing the proxy configuration 1675 - to use while communicating with the Git server. 1676 - properties: 1677 - name: 1678 - description: Name of the referent. 1679 - type: string 1680 - required: 1681 - - name 1682 - type: object 1683 - recurseSubmodules: 1684 - description: |- 1685 - RecurseSubmodules enables the initialization of all submodules within 1686 - the GitRepository as cloned from the URL, using their default settings. 1687 - type: boolean 1688 - ref: 1689 - description: |- 1690 - Reference specifies the Git reference to resolve and monitor for 1691 - changes, defaults to the 'master' branch. 1692 + - additionalPrinterColumns: 1693 + - jsonPath: .spec.url 1694 + name: URL 1695 + type: string 1696 + - jsonPath: .metadata.creationTimestamp 1697 + name: Age 1698 + type: date 1699 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 1700 + name: Ready 1701 + type: string 1702 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 1703 + name: Status 1704 + type: string 1705 + name: v1 1706 + schema: 1707 + openAPIV3Schema: 1708 + description: GitRepository is the Schema for the gitrepositories API. 1709 + properties: 1710 + apiVersion: 1711 + description: |- 1712 + APIVersion defines the versioned schema of this representation of an object. 1713 + Servers should convert recognized schemas to the latest internal value, and 1714 + may reject unrecognized values. 1715 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 1716 + type: string 1717 + kind: 1718 + description: |- 1719 + Kind is a string value representing the REST resource this object represents. 1720 + Servers may infer this from the endpoint the client submits requests to. 1721 + Cannot be updated. 1722 + In CamelCase. 1723 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 1724 + type: string 1725 + metadata: 1726 + type: object 1727 + spec: 1728 + description: |- 1729 + GitRepositorySpec specifies the required configuration to produce an 1730 + Artifact for a Git repository. 1731 + properties: 1732 + ignore: 1733 + description: |- 1734 + Ignore overrides the set of excluded patterns in the .sourceignore format 1735 + (which is the same as .gitignore). If not provided, a default will be used, 1736 + consult the documentation for your version to find out what those are. 1737 + type: string 1738 + include: 1739 + description: |- 1740 + Include specifies a list of GitRepository resources which Artifacts 1741 + should be included in the Artifact produced for this GitRepository. 1742 + items: 1743 + description: |- 1744 + GitRepositoryInclude specifies a local reference to a GitRepository which 1745 + Artifact (sub-)contents must be included, and where they should be placed. 1746 properties: 1747 - branch: 1748 - description: Branch to check out, defaults to 'master' if no other field is defined. 1749 - type: string 1750 - commit: 1751 + fromPath: 1752 description: |- 1753 - Commit SHA to check out, takes precedence over all reference fields. 1754 - 1755 - This can be combined with Branch to shallow clone the branch, in which 1756 - the commit is expected to exist. 1757 + FromPath specifies the path to copy contents from, defaults to the root 1758 + of the Artifact. 1759 type: string 1760 - name: 1761 + repository: 1762 description: |- 1763 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 1764 - 1765 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 1766 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 1767 - type: string 1768 - semver: 1769 - description: SemVer tag expression to check out, takes precedence over Tag. 1770 - type: string 1771 - tag: 1772 - description: Tag to check out, takes precedence over Branch. 1773 - type: string 1774 - type: object 1775 - secretRef: 1776 - description: |- 1777 - SecretRef specifies the Secret containing authentication credentials for 1778 - the GitRepository. 1779 - For HTTPS repositories the Secret must contain 'username' and 'password' 1780 - fields for basic auth or 'bearerToken' field for token auth. 1781 - For SSH repositories the Secret must contain 'identity' 1782 - and 'known_hosts' fields. 1783 - properties: 1784 - name: 1785 - description: Name of the referent. 1786 + GitRepositoryRef specifies the GitRepository which Artifact contents 1787 + must be included. 1788 + properties: 1789 + name: 1790 + description: Name of the referent. 1791 + type: string 1792 + required: 1793 + - name 1794 + type: object 1795 + toPath: 1796 + description: |- 1797 + ToPath specifies the path to copy contents to, defaults to the name of 1798 + the GitRepositoryRef. 1799 type: string 1800 required: 1801 - - name 1802 + - repository 1803 type: object 1804 - serviceAccountName: 1805 - description: |- 1806 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to 1807 - authenticate to the GitRepository. This field is only supported for 'azure' provider. 1808 - type: string 1809 - sparseCheckout: 1810 - description: |- 1811 - SparseCheckout specifies a list of directories to checkout when cloning 1812 - the repository. If specified, only these directories are included in the 1813 - Artifact produced for this GitRepository. 1814 - items: 1815 + type: array 1816 + interval: 1817 + description: |- 1818 + Interval at which the GitRepository URL is checked for updates. 1819 + This interval is approximate and may be subject to jitter to ensure 1820 + efficient use of resources. 1821 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 1822 + type: string 1823 + provider: 1824 + description: |- 1825 + Provider used for authentication, can be 'azure', 'github', 'generic'. 1826 + When not specified, defaults to 'generic'. 1827 + enum: 1828 + - generic 1829 + - azure 1830 + - github 1831 + type: string 1832 + proxySecretRef: 1833 + description: |- 1834 + ProxySecretRef specifies the Secret containing the proxy configuration 1835 + to use while communicating with the Git server. 1836 + properties: 1837 + name: 1838 + description: Name of the referent. 1839 type: string 1840 - type: array 1841 - suspend: 1842 - description: |- 1843 - Suspend tells the controller to suspend the reconciliation of this 1844 - GitRepository. 1845 - type: boolean 1846 - timeout: 1847 - default: 60s 1848 - description: Timeout for Git operations like cloning, defaults to 60s. 1849 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1850 - type: string 1851 - url: 1852 - description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. 1853 - pattern: ^(http|https|ssh)://.*$ 1854 - type: string 1855 - verify: 1856 - description: |- 1857 - Verification specifies the configuration to verify the Git commit 1858 - signature(s). 1859 + required: 1860 + - name 1861 + type: object 1862 + recurseSubmodules: 1863 + description: |- 1864 + RecurseSubmodules enables the initialization of all submodules within 1865 + the GitRepository as cloned from the URL, using their default settings. 1866 + type: boolean 1867 + ref: 1868 + description: |- 1869 + Reference specifies the Git reference to resolve and monitor for 1870 + changes, defaults to the 'master' branch. 1871 + properties: 1872 + branch: 1873 + description: Branch to check out, defaults to 'master' if no other 1874 + field is defined. 1875 + type: string 1876 + commit: 1877 + description: |- 1878 + Commit SHA to check out, takes precedence over all reference fields. 1879 + 1880 + This can be combined with Branch to shallow clone the branch, in which 1881 + the commit is expected to exist. 1882 + type: string 1883 + name: 1884 + description: |- 1885 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 1886 + 1887 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 1888 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 1889 + type: string 1890 + semver: 1891 + description: SemVer tag expression to check out, takes precedence 1892 + over Tag. 1893 + type: string 1894 + tag: 1895 + description: Tag to check out, takes precedence over Branch. 1896 + type: string 1897 + type: object 1898 + secretRef: 1899 + description: |- 1900 + SecretRef specifies the Secret containing authentication credentials for 1901 + the GitRepository. 1902 + For HTTPS repositories the Secret must contain 'username' and 'password' 1903 + fields for basic auth or 'bearerToken' field for token auth. 1904 + For SSH repositories the Secret must contain 'identity' 1905 + and 'known_hosts' fields. 1906 + properties: 1907 + name: 1908 + description: Name of the referent. 1909 + type: string 1910 + required: 1911 + - name 1912 + type: object 1913 + serviceAccountName: 1914 + description: |- 1915 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to 1916 + authenticate to the GitRepository. This field is only supported for 'azure' provider. 1917 + type: string 1918 + sparseCheckout: 1919 + description: |- 1920 + SparseCheckout specifies a list of directories to checkout when cloning 1921 + the repository. If specified, only these directories are included in the 1922 + Artifact produced for this GitRepository. 1923 + items: 1924 + type: string 1925 + type: array 1926 + suspend: 1927 + description: |- 1928 + Suspend tells the controller to suspend the reconciliation of this 1929 + GitRepository. 1930 + type: boolean 1931 + timeout: 1932 + default: 60s 1933 + description: Timeout for Git operations like cloning, defaults to 1934 + 60s. 1935 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 1936 + type: string 1937 + url: 1938 + description: URL specifies the Git repository URL, it can be an HTTP/S 1939 + or SSH address. 1940 + pattern: ^(http|https|ssh)://.*$ 1941 + type: string 1942 + verify: 1943 + description: |- 1944 + Verification specifies the configuration to verify the Git commit 1945 + signature(s). 1946 + properties: 1947 + mode: 1948 + default: HEAD 1949 + description: |- 1950 + Mode specifies which Git object(s) should be verified. 1951 + 1952 + The variants "head" and "HEAD" both imply the same thing, i.e. verify 1953 + the commit that the HEAD of the Git repository points to. The variant 1954 + "head" solely exists to ensure backwards compatibility. 1955 + enum: 1956 + - head 1957 + - HEAD 1958 + - Tag 1959 + - TagAndHEAD 1960 + type: string 1961 + secretRef: 1962 + description: |- 1963 + SecretRef specifies the Secret containing the public keys of trusted Git 1964 + authors. 1965 + properties: 1966 + name: 1967 + description: Name of the referent. 1968 + type: string 1969 + required: 1970 + - name 1971 + type: object 1972 + required: 1973 + - secretRef 1974 + type: object 1975 + required: 1976 + - interval 1977 + - url 1978 + type: object 1979 + x-kubernetes-validations: 1980 + - message: serviceAccountName can only be set when provider is 'azure' 1981 + rule: '!has(self.serviceAccountName) || (has(self.provider) && self.provider 1982 + == ''azure'')' 1983 + status: 1984 + default: 1985 + observedGeneration: -1 1986 + description: GitRepositoryStatus records the observed state of a Git repository. 1987 + properties: 1988 + artifact: 1989 + description: Artifact represents the last successful GitRepository 1990 + reconciliation. 1991 + properties: 1992 + digest: 1993 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 1994 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 1995 + type: string 1996 + lastUpdateTime: 1997 + description: |- 1998 + LastUpdateTime is the timestamp corresponding to the last update of the 1999 + Artifact. 2000 + format: date-time 2001 + type: string 2002 + metadata: 2003 + additionalProperties: 2004 + type: string 2005 + description: Metadata holds upstream information such as OCI annotations. 2006 + type: object 2007 + path: 2008 + description: |- 2009 + Path is the relative file path of the Artifact. It can be used to locate 2010 + the file in the root of the Artifact storage on the local file system of 2011 + the controller managing the Source. 2012 + type: string 2013 + revision: 2014 + description: |- 2015 + Revision is a human-readable identifier traceable in the origin source 2016 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2017 + type: string 2018 + size: 2019 + description: Size is the number of bytes in the file. 2020 + format: int64 2021 + type: integer 2022 + url: 2023 + description: |- 2024 + URL is the HTTP address of the Artifact as exposed by the controller 2025 + managing the Source. It can be used to retrieve the Artifact for 2026 + consumption, e.g. by another controller applying the Artifact contents. 2027 + type: string 2028 + required: 2029 + - digest 2030 + - lastUpdateTime 2031 + - path 2032 + - revision 2033 + - url 2034 + type: object 2035 + conditions: 2036 + description: Conditions holds the conditions for the GitRepository. 2037 + items: 2038 + description: Condition contains details for one aspect of the current 2039 + state of this API Resource. 2040 properties: 2041 - mode: 2042 - default: HEAD 2043 + lastTransitionTime: 2044 description: |- 2045 - Mode specifies which Git object(s) should be verified. 2046 - 2047 - The variants "head" and "HEAD" both imply the same thing, i.e. verify 2048 - the commit that the HEAD of the Git repository points to. The variant 2049 - "head" solely exists to ensure backwards compatibility. 2050 - enum: 2051 - - head 2052 - - HEAD 2053 - - Tag 2054 - - TagAndHEAD 2055 + lastTransitionTime is the last time the condition transitioned from one status to another. 2056 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2057 + format: date-time 2058 type: string 2059 - secretRef: 2060 + message: 2061 description: |- 2062 - SecretRef specifies the Secret containing the public keys of trusted Git 2063 - authors. 2064 - properties: 2065 - name: 2066 - description: Name of the referent. 2067 - type: string 2068 - required: 2069 - - name 2070 - type: object 2071 + message is a human readable message indicating details about the transition. 2072 + This may be an empty string. 2073 + maxLength: 32768 2074 + type: string 2075 + observedGeneration: 2076 + description: |- 2077 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2078 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2079 + with respect to the current state of the instance. 2080 + format: int64 2081 + minimum: 0 2082 + type: integer 2083 + reason: 2084 + description: |- 2085 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2086 + Producers of specific condition types may define expected values and meanings for this field, 2087 + and whether the values are considered a guaranteed API. 2088 + The value should be a CamelCase string. 2089 + This field may not be empty. 2090 + maxLength: 1024 2091 + minLength: 1 2092 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2093 + type: string 2094 + status: 2095 + description: status of the condition, one of True, False, Unknown. 2096 + enum: 2097 + - "True" 2098 + - "False" 2099 + - Unknown 2100 + type: string 2101 + type: 2102 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2103 + maxLength: 316 2104 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2105 + type: string 2106 required: 2107 - - secretRef 2108 + - lastTransitionTime 2109 + - message 2110 + - reason 2111 + - status 2112 + - type 2113 type: object 2114 - required: 2115 - - interval 2116 - - url 2117 - type: object 2118 - x-kubernetes-validations: 2119 - - message: serviceAccountName can only be set when provider is 'azure' 2120 - rule: '!has(self.serviceAccountName) || (has(self.provider) && self.provider == ''azure'')' 2121 - status: 2122 - default: 2123 - observedGeneration: -1 2124 - description: GitRepositoryStatus records the observed state of a Git repository. 2125 - properties: 2126 - artifact: 2127 - description: Artifact represents the last successful GitRepository reconciliation. 2128 + type: array 2129 + includedArtifacts: 2130 + description: |- 2131 + IncludedArtifacts contains a list of the last successfully included 2132 + Artifacts as instructed by GitRepositorySpec.Include. 2133 + items: 2134 + description: Artifact represents the output of a Source reconciliation. 2135 properties: 2136 digest: 2137 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2138 + description: Digest is the digest of the file in the form of 2139 + '<algorithm>:<checksum>'. 2140 pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2141 type: string 2142 lastUpdateTime: 2143 @@ -1139,7 +1269,8 @@ spec: 2144 metadata: 2145 additionalProperties: 2146 type: string 2147 - description: Metadata holds upstream information such as OCI annotations. 2148 + description: Metadata holds upstream information such as OCI 2149 + annotations. 2150 type: object 2151 path: 2152 description: |- 2153 @@ -1163,193 +1294,87 @@ spec: 2154 consumption, e.g. by another controller applying the Artifact contents. 2155 type: string 2156 required: 2157 - - digest 2158 - - lastUpdateTime 2159 - - path 2160 - - revision 2161 - - url 2162 + - digest 2163 + - lastUpdateTime 2164 + - path 2165 + - revision 2166 + - url 2167 type: object 2168 - conditions: 2169 - description: Conditions holds the conditions for the GitRepository. 2170 - items: 2171 - description: Condition contains details for one aspect of the current state of this API Resource. 2172 - properties: 2173 - lastTransitionTime: 2174 - description: |- 2175 - lastTransitionTime is the last time the condition transitioned from one status to another. 2176 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2177 - format: date-time 2178 - type: string 2179 - message: 2180 - description: |- 2181 - message is a human readable message indicating details about the transition. 2182 - This may be an empty string. 2183 - maxLength: 32768 2184 - type: string 2185 - observedGeneration: 2186 - description: |- 2187 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2188 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2189 - with respect to the current state of the instance. 2190 - format: int64 2191 - minimum: 0 2192 - type: integer 2193 - reason: 2194 - description: |- 2195 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2196 - Producers of specific condition types may define expected values and meanings for this field, 2197 - and whether the values are considered a guaranteed API. 2198 - The value should be a CamelCase string. 2199 - This field may not be empty. 2200 - maxLength: 1024 2201 - minLength: 1 2202 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2203 - type: string 2204 - status: 2205 - description: status of the condition, one of True, False, Unknown. 2206 - enum: 2207 - - "True" 2208 - - "False" 2209 - - Unknown 2210 - type: string 2211 - type: 2212 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 2213 - maxLength: 316 2214 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2215 - type: string 2216 - required: 2217 - - lastTransitionTime 2218 - - message 2219 - - reason 2220 - - status 2221 - - type 2222 - type: object 2223 - type: array 2224 - includedArtifacts: 2225 - description: |- 2226 - IncludedArtifacts contains a list of the last successfully included 2227 - Artifacts as instructed by GitRepositorySpec.Include. 2228 - items: 2229 - description: Artifact represents the output of a Source reconciliation. 2230 - properties: 2231 - digest: 2232 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2233 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2234 - type: string 2235 - lastUpdateTime: 2236 - description: |- 2237 - LastUpdateTime is the timestamp corresponding to the last update of the 2238 - Artifact. 2239 - format: date-time 2240 - type: string 2241 - metadata: 2242 - additionalProperties: 2243 + type: array 2244 + lastHandledReconcileAt: 2245 + description: |- 2246 + LastHandledReconcileAt holds the value of the most recent 2247 + reconcile request value, so a change of the annotation value 2248 + can be detected. 2249 + type: string 2250 + observedGeneration: 2251 + description: |- 2252 + ObservedGeneration is the last observed generation of the GitRepository 2253 + object. 2254 + format: int64 2255 + type: integer 2256 + observedIgnore: 2257 + description: |- 2258 + ObservedIgnore is the observed exclusion patterns used for constructing 2259 + the source artifact. 2260 + type: string 2261 + observedInclude: 2262 + description: |- 2263 + ObservedInclude is the observed list of GitRepository resources used to 2264 + produce the current Artifact. 2265 + items: 2266 + description: |- 2267 + GitRepositoryInclude specifies a local reference to a GitRepository which 2268 + Artifact (sub-)contents must be included, and where they should be placed. 2269 + properties: 2270 + fromPath: 2271 + description: |- 2272 + FromPath specifies the path to copy contents from, defaults to the root 2273 + of the Artifact. 2274 + type: string 2275 + repository: 2276 + description: |- 2277 + GitRepositoryRef specifies the GitRepository which Artifact contents 2278 + must be included. 2279 + properties: 2280 + name: 2281 + description: Name of the referent. 2282 type: string 2283 - description: Metadata holds upstream information such as OCI annotations. 2284 - type: object 2285 - path: 2286 - description: |- 2287 - Path is the relative file path of the Artifact. It can be used to locate 2288 - the file in the root of the Artifact storage on the local file system of 2289 - the controller managing the Source. 2290 - type: string 2291 - revision: 2292 - description: |- 2293 - Revision is a human-readable identifier traceable in the origin source 2294 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2295 - type: string 2296 - size: 2297 - description: Size is the number of bytes in the file. 2298 - format: int64 2299 - type: integer 2300 - url: 2301 - description: |- 2302 - URL is the HTTP address of the Artifact as exposed by the controller 2303 - managing the Source. It can be used to retrieve the Artifact for 2304 - consumption, e.g. by another controller applying the Artifact contents. 2305 - type: string 2306 - required: 2307 - - digest 2308 - - lastUpdateTime 2309 - - path 2310 - - revision 2311 - - url 2312 - type: object 2313 - type: array 2314 - lastHandledReconcileAt: 2315 - description: |- 2316 - LastHandledReconcileAt holds the value of the most recent 2317 - reconcile request value, so a change of the annotation value 2318 - can be detected. 2319 - type: string 2320 - observedGeneration: 2321 - description: |- 2322 - ObservedGeneration is the last observed generation of the GitRepository 2323 - object. 2324 - format: int64 2325 - type: integer 2326 - observedIgnore: 2327 - description: |- 2328 - ObservedIgnore is the observed exclusion patterns used for constructing 2329 - the source artifact. 2330 - type: string 2331 - observedInclude: 2332 - description: |- 2333 - ObservedInclude is the observed list of GitRepository resources used to 2334 - produce the current Artifact. 2335 - items: 2336 - description: |- 2337 - GitRepositoryInclude specifies a local reference to a GitRepository which 2338 - Artifact (sub-)contents must be included, and where they should be placed. 2339 - properties: 2340 - fromPath: 2341 - description: |- 2342 - FromPath specifies the path to copy contents from, defaults to the root 2343 - of the Artifact. 2344 - type: string 2345 - repository: 2346 - description: |- 2347 - GitRepositoryRef specifies the GitRepository which Artifact contents 2348 - must be included. 2349 - properties: 2350 - name: 2351 - description: Name of the referent. 2352 - type: string 2353 - required: 2354 - - name 2355 - type: object 2356 - toPath: 2357 - description: |- 2358 - ToPath specifies the path to copy contents to, defaults to the name of 2359 - the GitRepositoryRef. 2360 - type: string 2361 - required: 2362 - - repository 2363 - type: object 2364 - type: array 2365 - observedRecurseSubmodules: 2366 - description: |- 2367 - ObservedRecurseSubmodules is the observed resource submodules 2368 - configuration used to produce the current Artifact. 2369 - type: boolean 2370 - observedSparseCheckout: 2371 - description: |- 2372 - ObservedSparseCheckout is the observed list of directories used to 2373 - produce the current Artifact. 2374 - items: 2375 - type: string 2376 - type: array 2377 - sourceVerificationMode: 2378 - description: |- 2379 - SourceVerificationMode is the last used verification mode indicating 2380 - which Git object(s) have been verified. 2381 - type: string 2382 - type: object 2383 - type: object 2384 - served: true 2385 - storage: true 2386 - subresources: 2387 - status: {} 2388 + required: 2389 + - name 2390 + type: object 2391 + toPath: 2392 + description: |- 2393 + ToPath specifies the path to copy contents to, defaults to the name of 2394 + the GitRepositoryRef. 2395 + type: string 2396 + required: 2397 + - repository 2398 + type: object 2399 + type: array 2400 + observedRecurseSubmodules: 2401 + description: |- 2402 + ObservedRecurseSubmodules is the observed resource submodules 2403 + configuration used to produce the current Artifact. 2404 + type: boolean 2405 + observedSparseCheckout: 2406 + description: |- 2407 + ObservedSparseCheckout is the observed list of directories used to 2408 + produce the current Artifact. 2409 + items: 2410 + type: string 2411 + type: array 2412 + sourceVerificationMode: 2413 + description: |- 2414 + SourceVerificationMode is the last used verification mode indicating 2415 + which Git object(s) have been verified. 2416 + type: string 2417 + type: object 2418 + type: object 2419 + served: true 2420 + storage: true 2421 + subresources: 2422 + status: {} 2423 --- 2424 apiVersion: apiextensions.k8s.io/v1 2425 kind: CustomResourceDefinition 2426 @@ -1360,7 +1385,7 @@ metadata: 2427 app.kubernetes.io/component: source-controller 2428 app.kubernetes.io/instance: flux-system 2429 app.kubernetes.io/part-of: flux 2430 - app.kubernetes.io/version: v2.8.0 2431 + app.kubernetes.io/version: v2.8.1 2432 name: helmcharts.source.toolkit.fluxcd.io 2433 spec: 2434 group: source.toolkit.fluxcd.io 2435 @@ -1369,342 +1394,346 @@ spec: 2436 listKind: HelmChartList 2437 plural: helmcharts 2438 shortNames: 2439 - - hc 2440 + - hc 2441 singular: helmchart 2442 scope: Namespaced 2443 versions: 2444 - - additionalPrinterColumns: 2445 - - jsonPath: .spec.chart 2446 - name: Chart 2447 - type: string 2448 - - jsonPath: .spec.version 2449 - name: Version 2450 - type: string 2451 - - jsonPath: .spec.sourceRef.kind 2452 - name: Source Kind 2453 - type: string 2454 - - jsonPath: .spec.sourceRef.name 2455 - name: Source Name 2456 - type: string 2457 - - jsonPath: .metadata.creationTimestamp 2458 - name: Age 2459 - type: date 2460 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 2461 - name: Ready 2462 - type: string 2463 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 2464 - name: Status 2465 - type: string 2466 - name: v1 2467 - schema: 2468 - openAPIV3Schema: 2469 - description: HelmChart is the Schema for the helmcharts API. 2470 - properties: 2471 - apiVersion: 2472 - description: |- 2473 - APIVersion defines the versioned schema of this representation of an object. 2474 - Servers should convert recognized schemas to the latest internal value, and 2475 - may reject unrecognized values. 2476 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2477 - type: string 2478 - kind: 2479 - description: |- 2480 - Kind is a string value representing the REST resource this object represents. 2481 - Servers may infer this from the endpoint the client submits requests to. 2482 - Cannot be updated. 2483 - In CamelCase. 2484 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2485 - type: string 2486 - metadata: 2487 - type: object 2488 - spec: 2489 - description: HelmChartSpec specifies the desired state of a Helm chart. 2490 - properties: 2491 - chart: 2492 - description: |- 2493 - Chart is the name or path the Helm chart is available at in the 2494 - SourceRef. 2495 - type: string 2496 - ignoreMissingValuesFiles: 2497 - description: |- 2498 - IgnoreMissingValuesFiles controls whether to silently ignore missing values 2499 - files rather than failing. 2500 - type: boolean 2501 - interval: 2502 - description: |- 2503 - Interval at which the HelmChart SourceRef is checked for updates. 2504 - This interval is approximate and may be subject to jitter to ensure 2505 - efficient use of resources. 2506 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2507 - type: string 2508 - reconcileStrategy: 2509 - default: ChartVersion 2510 - description: |- 2511 - ReconcileStrategy determines what enables the creation of a new artifact. 2512 - Valid values are ('ChartVersion', 'Revision'). 2513 - See the documentation of the values for an explanation on their behavior. 2514 - Defaults to ChartVersion when omitted. 2515 - enum: 2516 - - ChartVersion 2517 - - Revision 2518 - type: string 2519 - sourceRef: 2520 - description: SourceRef is the reference to the Source the chart is available at. 2521 - properties: 2522 - apiVersion: 2523 - description: APIVersion of the referent. 2524 - type: string 2525 - kind: 2526 - description: |- 2527 - Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 2528 - 'Bucket'). 2529 - enum: 2530 - - HelmRepository 2531 - - GitRepository 2532 - - Bucket 2533 - type: string 2534 - name: 2535 - description: Name of the referent. 2536 - type: string 2537 - required: 2538 - - kind 2539 - - name 2540 - type: object 2541 - suspend: 2542 - description: |- 2543 - Suspend tells the controller to suspend the reconciliation of this 2544 - source. 2545 - type: boolean 2546 - valuesFiles: 2547 - description: |- 2548 - ValuesFiles is an alternative list of values files to use as the chart 2549 - values (values.yaml is not included by default), expected to be a 2550 - relative path in the SourceRef. 2551 - Values files are merged in the order of this list with the last file 2552 - overriding the first. Ignored when omitted. 2553 - items: 2554 - type: string 2555 - type: array 2556 - verify: 2557 - description: |- 2558 - Verify contains the secret name containing the trusted public keys 2559 - used to verify the signature and specifies which provider to use to check 2560 - whether OCI image is authentic. 2561 - This field is only supported when using HelmRepository source with spec.type 'oci'. 2562 - Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 2563 - properties: 2564 - matchOIDCIdentity: 2565 - description: |- 2566 - MatchOIDCIdentity specifies the identity matching criteria to use 2567 - while verifying an OCI artifact which was signed using Cosign keyless 2568 - signing. The artifact's identity is deemed to be verified if any of the 2569 - specified matchers match against the identity. 2570 - items: 2571 - description: |- 2572 - OIDCIdentityMatch specifies options for verifying the certificate identity, 2573 - i.e. the issuer and the subject of the certificate. 2574 - properties: 2575 - issuer: 2576 - description: |- 2577 - Issuer specifies the regex pattern to match against to verify 2578 - the OIDC issuer in the Fulcio certificate. The pattern must be a 2579 - valid Go regular expression. 2580 - type: string 2581 - subject: 2582 - description: |- 2583 - Subject specifies the regex pattern to match against to verify 2584 - the identity subject in the Fulcio certificate. The pattern must 2585 - be a valid Go regular expression. 2586 - type: string 2587 - required: 2588 - - issuer 2589 - - subject 2590 - type: object 2591 - type: array 2592 - provider: 2593 - default: cosign 2594 - description: Provider specifies the technology used to sign the OCI Artifact. 2595 - enum: 2596 - - cosign 2597 - - notation 2598 - type: string 2599 - secretRef: 2600 + - additionalPrinterColumns: 2601 + - jsonPath: .spec.chart 2602 + name: Chart 2603 + type: string 2604 + - jsonPath: .spec.version 2605 + name: Version 2606 + type: string 2607 + - jsonPath: .spec.sourceRef.kind 2608 + name: Source Kind 2609 + type: string 2610 + - jsonPath: .spec.sourceRef.name 2611 + name: Source Name 2612 + type: string 2613 + - jsonPath: .metadata.creationTimestamp 2614 + name: Age 2615 + type: date 2616 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 2617 + name: Ready 2618 + type: string 2619 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 2620 + name: Status 2621 + type: string 2622 + name: v1 2623 + schema: 2624 + openAPIV3Schema: 2625 + description: HelmChart is the Schema for the helmcharts API. 2626 + properties: 2627 + apiVersion: 2628 + description: |- 2629 + APIVersion defines the versioned schema of this representation of an object. 2630 + Servers should convert recognized schemas to the latest internal value, and 2631 + may reject unrecognized values. 2632 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 2633 + type: string 2634 + kind: 2635 + description: |- 2636 + Kind is a string value representing the REST resource this object represents. 2637 + Servers may infer this from the endpoint the client submits requests to. 2638 + Cannot be updated. 2639 + In CamelCase. 2640 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 2641 + type: string 2642 + metadata: 2643 + type: object 2644 + spec: 2645 + description: HelmChartSpec specifies the desired state of a Helm chart. 2646 + properties: 2647 + chart: 2648 + description: |- 2649 + Chart is the name or path the Helm chart is available at in the 2650 + SourceRef. 2651 + type: string 2652 + ignoreMissingValuesFiles: 2653 + description: |- 2654 + IgnoreMissingValuesFiles controls whether to silently ignore missing values 2655 + files rather than failing. 2656 + type: boolean 2657 + interval: 2658 + description: |- 2659 + Interval at which the HelmChart SourceRef is checked for updates. 2660 + This interval is approximate and may be subject to jitter to ensure 2661 + efficient use of resources. 2662 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 2663 + type: string 2664 + reconcileStrategy: 2665 + default: ChartVersion 2666 + description: |- 2667 + ReconcileStrategy determines what enables the creation of a new artifact. 2668 + Valid values are ('ChartVersion', 'Revision'). 2669 + See the documentation of the values for an explanation on their behavior. 2670 + Defaults to ChartVersion when omitted. 2671 + enum: 2672 + - ChartVersion 2673 + - Revision 2674 + type: string 2675 + sourceRef: 2676 + description: SourceRef is the reference to the Source the chart is 2677 + available at. 2678 + properties: 2679 + apiVersion: 2680 + description: APIVersion of the referent. 2681 + type: string 2682 + kind: 2683 + description: |- 2684 + Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 2685 + 'Bucket'). 2686 + enum: 2687 + - HelmRepository 2688 + - GitRepository 2689 + - Bucket 2690 + type: string 2691 + name: 2692 + description: Name of the referent. 2693 + type: string 2694 + required: 2695 + - kind 2696 + - name 2697 + type: object 2698 + suspend: 2699 + description: |- 2700 + Suspend tells the controller to suspend the reconciliation of this 2701 + source. 2702 + type: boolean 2703 + valuesFiles: 2704 + description: |- 2705 + ValuesFiles is an alternative list of values files to use as the chart 2706 + values (values.yaml is not included by default), expected to be a 2707 + relative path in the SourceRef. 2708 + Values files are merged in the order of this list with the last file 2709 + overriding the first. Ignored when omitted. 2710 + items: 2711 + type: string 2712 + type: array 2713 + verify: 2714 + description: |- 2715 + Verify contains the secret name containing the trusted public keys 2716 + used to verify the signature and specifies which provider to use to check 2717 + whether OCI image is authentic. 2718 + This field is only supported when using HelmRepository source with spec.type 'oci'. 2719 + Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified. 2720 + properties: 2721 + matchOIDCIdentity: 2722 + description: |- 2723 + MatchOIDCIdentity specifies the identity matching criteria to use 2724 + while verifying an OCI artifact which was signed using Cosign keyless 2725 + signing. The artifact's identity is deemed to be verified if any of the 2726 + specified matchers match against the identity. 2727 + items: 2728 description: |- 2729 - SecretRef specifies the Kubernetes Secret containing the 2730 - trusted public keys. 2731 + OIDCIdentityMatch specifies options for verifying the certificate identity, 2732 + i.e. the issuer and the subject of the certificate. 2733 properties: 2734 - name: 2735 - description: Name of the referent. 2736 + issuer: 2737 + description: |- 2738 + Issuer specifies the regex pattern to match against to verify 2739 + the OIDC issuer in the Fulcio certificate. The pattern must be a 2740 + valid Go regular expression. 2741 + type: string 2742 + subject: 2743 + description: |- 2744 + Subject specifies the regex pattern to match against to verify 2745 + the identity subject in the Fulcio certificate. The pattern must 2746 + be a valid Go regular expression. 2747 type: string 2748 required: 2749 - - name 2750 + - issuer 2751 + - subject 2752 type: object 2753 - required: 2754 - - provider 2755 - type: object 2756 - version: 2757 - default: '*' 2758 - description: |- 2759 - Version is the chart version semver expression, ignored for charts from 2760 - GitRepository and Bucket sources. Defaults to latest when omitted. 2761 - type: string 2762 - required: 2763 - - chart 2764 - - interval 2765 - - sourceRef 2766 - type: object 2767 - x-kubernetes-validations: 2768 - - message: spec.verify is only supported when spec.sourceRef.kind is 'HelmRepository' 2769 - rule: '!has(self.verify) || self.sourceRef.kind == ''HelmRepository''' 2770 - status: 2771 - default: 2772 - observedGeneration: -1 2773 - description: HelmChartStatus records the observed state of the HelmChart. 2774 - properties: 2775 - artifact: 2776 - description: Artifact represents the output of the last successful reconciliation. 2777 - properties: 2778 - digest: 2779 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2780 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2781 + type: array 2782 + provider: 2783 + default: cosign 2784 + description: Provider specifies the technology used to sign the 2785 + OCI Artifact. 2786 + enum: 2787 + - cosign 2788 + - notation 2789 + type: string 2790 + secretRef: 2791 + description: |- 2792 + SecretRef specifies the Kubernetes Secret containing the 2793 + trusted public keys. 2794 + properties: 2795 + name: 2796 + description: Name of the referent. 2797 + type: string 2798 + required: 2799 + - name 2800 + type: object 2801 + required: 2802 + - provider 2803 + type: object 2804 + version: 2805 + default: '*' 2806 + description: |- 2807 + Version is the chart version semver expression, ignored for charts from 2808 + GitRepository and Bucket sources. Defaults to latest when omitted. 2809 + type: string 2810 + required: 2811 + - chart 2812 + - interval 2813 + - sourceRef 2814 + type: object 2815 + x-kubernetes-validations: 2816 + - message: spec.verify is only supported when spec.sourceRef.kind is 'HelmRepository' 2817 + rule: '!has(self.verify) || self.sourceRef.kind == ''HelmRepository''' 2818 + status: 2819 + default: 2820 + observedGeneration: -1 2821 + description: HelmChartStatus records the observed state of the HelmChart. 2822 + properties: 2823 + artifact: 2824 + description: Artifact represents the output of the last successful 2825 + reconciliation. 2826 + properties: 2827 + digest: 2828 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 2829 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 2830 + type: string 2831 + lastUpdateTime: 2832 + description: |- 2833 + LastUpdateTime is the timestamp corresponding to the last update of the 2834 + Artifact. 2835 + format: date-time 2836 + type: string 2837 + metadata: 2838 + additionalProperties: 2839 type: string 2840 - lastUpdateTime: 2841 + description: Metadata holds upstream information such as OCI annotations. 2842 + type: object 2843 + path: 2844 + description: |- 2845 + Path is the relative file path of the Artifact. It can be used to locate 2846 + the file in the root of the Artifact storage on the local file system of 2847 + the controller managing the Source. 2848 + type: string 2849 + revision: 2850 + description: |- 2851 + Revision is a human-readable identifier traceable in the origin source 2852 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2853 + type: string 2854 + size: 2855 + description: Size is the number of bytes in the file. 2856 + format: int64 2857 + type: integer 2858 + url: 2859 + description: |- 2860 + URL is the HTTP address of the Artifact as exposed by the controller 2861 + managing the Source. It can be used to retrieve the Artifact for 2862 + consumption, e.g. by another controller applying the Artifact contents. 2863 + type: string 2864 + required: 2865 + - digest 2866 + - lastUpdateTime 2867 + - path 2868 + - revision 2869 + - url 2870 + type: object 2871 + conditions: 2872 + description: Conditions holds the conditions for the HelmChart. 2873 + items: 2874 + description: Condition contains details for one aspect of the current 2875 + state of this API Resource. 2876 + properties: 2877 + lastTransitionTime: 2878 description: |- 2879 - LastUpdateTime is the timestamp corresponding to the last update of the 2880 - Artifact. 2881 + lastTransitionTime is the last time the condition transitioned from one status to another. 2882 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2883 format: date-time 2884 type: string 2885 - metadata: 2886 - additionalProperties: 2887 - type: string 2888 - description: Metadata holds upstream information such as OCI annotations. 2889 - type: object 2890 - path: 2891 + message: 2892 description: |- 2893 - Path is the relative file path of the Artifact. It can be used to locate 2894 - the file in the root of the Artifact storage on the local file system of 2895 - the controller managing the Source. 2896 + message is a human readable message indicating details about the transition. 2897 + This may be an empty string. 2898 + maxLength: 32768 2899 type: string 2900 - revision: 2901 + observedGeneration: 2902 description: |- 2903 - Revision is a human-readable identifier traceable in the origin source 2904 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 2905 - type: string 2906 - size: 2907 - description: Size is the number of bytes in the file. 2908 + observedGeneration represents the .metadata.generation that the condition was set based upon. 2909 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2910 + with respect to the current state of the instance. 2911 format: int64 2912 + minimum: 0 2913 type: integer 2914 - url: 2915 + reason: 2916 description: |- 2917 - URL is the HTTP address of the Artifact as exposed by the controller 2918 - managing the Source. It can be used to retrieve the Artifact for 2919 - consumption, e.g. by another controller applying the Artifact contents. 2920 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 2921 + Producers of specific condition types may define expected values and meanings for this field, 2922 + and whether the values are considered a guaranteed API. 2923 + The value should be a CamelCase string. 2924 + This field may not be empty. 2925 + maxLength: 1024 2926 + minLength: 1 2927 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2928 + type: string 2929 + status: 2930 + description: status of the condition, one of True, False, Unknown. 2931 + enum: 2932 + - "True" 2933 + - "False" 2934 + - Unknown 2935 + type: string 2936 + type: 2937 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 2938 + maxLength: 316 2939 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 2940 type: string 2941 required: 2942 - - digest 2943 - - lastUpdateTime 2944 - - path 2945 - - revision 2946 - - url 2947 + - lastTransitionTime 2948 + - message 2949 + - reason 2950 + - status 2951 + - type 2952 type: object 2953 - conditions: 2954 - description: Conditions holds the conditions for the HelmChart. 2955 - items: 2956 - description: Condition contains details for one aspect of the current state of this API Resource. 2957 - properties: 2958 - lastTransitionTime: 2959 - description: |- 2960 - lastTransitionTime is the last time the condition transitioned from one status to another. 2961 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 2962 - format: date-time 2963 - type: string 2964 - message: 2965 - description: |- 2966 - message is a human readable message indicating details about the transition. 2967 - This may be an empty string. 2968 - maxLength: 32768 2969 - type: string 2970 - observedGeneration: 2971 - description: |- 2972 - observedGeneration represents the .metadata.generation that the condition was set based upon. 2973 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 2974 - with respect to the current state of the instance. 2975 - format: int64 2976 - minimum: 0 2977 - type: integer 2978 - reason: 2979 - description: |- 2980 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 2981 - Producers of specific condition types may define expected values and meanings for this field, 2982 - and whether the values are considered a guaranteed API. 2983 - The value should be a CamelCase string. 2984 - This field may not be empty. 2985 - maxLength: 1024 2986 - minLength: 1 2987 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 2988 - type: string 2989 - status: 2990 - description: status of the condition, one of True, False, Unknown. 2991 - enum: 2992 - - "True" 2993 - - "False" 2994 - - Unknown 2995 - type: string 2996 - type: 2997 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 2998 - maxLength: 316 2999 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3000 - type: string 3001 - required: 3002 - - lastTransitionTime 3003 - - message 3004 - - reason 3005 - - status 3006 - - type 3007 - type: object 3008 - type: array 3009 - lastHandledReconcileAt: 3010 - description: |- 3011 - LastHandledReconcileAt holds the value of the most recent 3012 - reconcile request value, so a change of the annotation value 3013 - can be detected. 3014 - type: string 3015 - observedChartName: 3016 - description: |- 3017 - ObservedChartName is the last observed chart name as specified by the 3018 - resolved chart reference. 3019 - type: string 3020 - observedGeneration: 3021 - description: |- 3022 - ObservedGeneration is the last observed generation of the HelmChart 3023 - object. 3024 - format: int64 3025 - type: integer 3026 - observedSourceArtifactRevision: 3027 - description: |- 3028 - ObservedSourceArtifactRevision is the last observed Artifact.Revision 3029 - of the HelmChartSpec.SourceRef. 3030 - type: string 3031 - observedValuesFiles: 3032 - description: |- 3033 - ObservedValuesFiles are the observed value files of the last successful 3034 - reconciliation. 3035 - It matches the chart in the last successfully reconciled artifact. 3036 - items: 3037 - type: string 3038 - type: array 3039 - url: 3040 - description: |- 3041 - URL is the dynamic fetch link for the latest Artifact. 3042 - It is provided on a "best effort" basis, and using the precise 3043 - BucketStatus.Artifact data is recommended. 3044 - type: string 3045 - type: object 3046 - type: object 3047 - served: true 3048 - storage: true 3049 - subresources: 3050 - status: {} 3051 + type: array 3052 + lastHandledReconcileAt: 3053 + description: |- 3054 + LastHandledReconcileAt holds the value of the most recent 3055 + reconcile request value, so a change of the annotation value 3056 + can be detected. 3057 + type: string 3058 + observedChartName: 3059 + description: |- 3060 + ObservedChartName is the last observed chart name as specified by the 3061 + resolved chart reference. 3062 + type: string 3063 + observedGeneration: 3064 + description: |- 3065 + ObservedGeneration is the last observed generation of the HelmChart 3066 + object. 3067 + format: int64 3068 + type: integer 3069 + observedSourceArtifactRevision: 3070 + description: |- 3071 + ObservedSourceArtifactRevision is the last observed Artifact.Revision 3072 + of the HelmChartSpec.SourceRef. 3073 + type: string 3074 + observedValuesFiles: 3075 + description: |- 3076 + ObservedValuesFiles are the observed value files of the last successful 3077 + reconciliation. 3078 + It matches the chart in the last successfully reconciled artifact. 3079 + items: 3080 + type: string 3081 + type: array 3082 + url: 3083 + description: |- 3084 + URL is the dynamic fetch link for the latest Artifact. 3085 + It is provided on a "best effort" basis, and using the precise 3086 + BucketStatus.Artifact data is recommended. 3087 + type: string 3088 + type: object 3089 + type: object 3090 + served: true 3091 + storage: true 3092 + subresources: 3093 + status: {} 3094 --- 3095 apiVersion: apiextensions.k8s.io/v1 3096 kind: CustomResourceDefinition 3097 @@ -1715,7 +1744,7 @@ metadata: 3098 app.kubernetes.io/component: source-controller 3099 app.kubernetes.io/instance: flux-system 3100 app.kubernetes.io/part-of: flux 3101 - app.kubernetes.io/version: v2.8.0 3102 + app.kubernetes.io/version: v2.8.1 3103 name: helmrepositories.source.toolkit.fluxcd.io 3104 spec: 3105 group: source.toolkit.fluxcd.io 3106 @@ -1724,311 +1753,313 @@ spec: 3107 listKind: HelmRepositoryList 3108 plural: helmrepositories 3109 shortNames: 3110 - - helmrepo 3111 + - helmrepo 3112 singular: helmrepository 3113 scope: Namespaced 3114 versions: 3115 - - additionalPrinterColumns: 3116 - - jsonPath: .spec.url 3117 - name: URL 3118 - type: string 3119 - - jsonPath: .metadata.creationTimestamp 3120 - name: Age 3121 - type: date 3122 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 3123 - name: Ready 3124 - type: string 3125 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 3126 - name: Status 3127 - type: string 3128 - name: v1 3129 - schema: 3130 - openAPIV3Schema: 3131 - description: HelmRepository is the Schema for the helmrepositories API. 3132 - properties: 3133 - apiVersion: 3134 - description: |- 3135 - APIVersion defines the versioned schema of this representation of an object. 3136 - Servers should convert recognized schemas to the latest internal value, and 3137 - may reject unrecognized values. 3138 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3139 - type: string 3140 - kind: 3141 - description: |- 3142 - Kind is a string value representing the REST resource this object represents. 3143 - Servers may infer this from the endpoint the client submits requests to. 3144 - Cannot be updated. 3145 - In CamelCase. 3146 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3147 - type: string 3148 - metadata: 3149 - type: object 3150 - spec: 3151 - description: |- 3152 - HelmRepositorySpec specifies the required configuration to produce an 3153 - Artifact for a Helm repository index YAML. 3154 - properties: 3155 - accessFrom: 3156 - description: |- 3157 - AccessFrom specifies an Access Control List for allowing cross-namespace 3158 - references to this object. 3159 - NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 3160 - properties: 3161 - namespaceSelectors: 3162 + - additionalPrinterColumns: 3163 + - jsonPath: .spec.url 3164 + name: URL 3165 + type: string 3166 + - jsonPath: .metadata.creationTimestamp 3167 + name: Age 3168 + type: date 3169 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 3170 + name: Ready 3171 + type: string 3172 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3173 + name: Status 3174 + type: string 3175 + name: v1 3176 + schema: 3177 + openAPIV3Schema: 3178 + description: HelmRepository is the Schema for the helmrepositories API. 3179 + properties: 3180 + apiVersion: 3181 + description: |- 3182 + APIVersion defines the versioned schema of this representation of an object. 3183 + Servers should convert recognized schemas to the latest internal value, and 3184 + may reject unrecognized values. 3185 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3186 + type: string 3187 + kind: 3188 + description: |- 3189 + Kind is a string value representing the REST resource this object represents. 3190 + Servers may infer this from the endpoint the client submits requests to. 3191 + Cannot be updated. 3192 + In CamelCase. 3193 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3194 + type: string 3195 + metadata: 3196 + type: object 3197 + spec: 3198 + description: |- 3199 + HelmRepositorySpec specifies the required configuration to produce an 3200 + Artifact for a Helm repository index YAML. 3201 + properties: 3202 + accessFrom: 3203 + description: |- 3204 + AccessFrom specifies an Access Control List for allowing cross-namespace 3205 + references to this object. 3206 + NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092 3207 + properties: 3208 + namespaceSelectors: 3209 + description: |- 3210 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3211 + Items in this list are evaluated using a logical OR operation. 3212 + items: 3213 description: |- 3214 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 3215 - Items in this list are evaluated using a logical OR operation. 3216 - items: 3217 - description: |- 3218 - NamespaceSelector selects the namespaces to which this ACL applies. 3219 - An empty map of MatchLabels matches all namespaces in a cluster. 3220 - properties: 3221 - matchLabels: 3222 - additionalProperties: 3223 - type: string 3224 - description: |- 3225 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3226 - map is equivalent to an element of matchExpressions, whose key field is "key", the 3227 - operator is "In", and the values array contains only "value". The requirements are ANDed. 3228 - type: object 3229 - type: object 3230 - type: array 3231 - required: 3232 - - namespaceSelectors 3233 - type: object 3234 - certSecretRef: 3235 - description: |- 3236 - CertSecretRef can be given the name of a Secret containing 3237 - either or both of 3238 + NamespaceSelector selects the namespaces to which this ACL applies. 3239 + An empty map of MatchLabels matches all namespaces in a cluster. 3240 + properties: 3241 + matchLabels: 3242 + additionalProperties: 3243 + type: string 3244 + description: |- 3245 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 3246 + map is equivalent to an element of matchExpressions, whose key field is "key", the 3247 + operator is "In", and the values array contains only "value". The requirements are ANDed. 3248 + type: object 3249 + type: object 3250 + type: array 3251 + required: 3252 + - namespaceSelectors 3253 + type: object 3254 + certSecretRef: 3255 + description: |- 3256 + CertSecretRef can be given the name of a Secret containing 3257 + either or both of 3258 3259 - - a PEM-encoded client certificate (`tls.crt`) and private 3260 - key (`tls.key`); 3261 - - a PEM-encoded CA certificate (`ca.crt`) 3262 + - a PEM-encoded client certificate (`tls.crt`) and private 3263 + key (`tls.key`); 3264 + - a PEM-encoded CA certificate (`ca.crt`) 3265 3266 - and whichever are supplied, will be used for connecting to the 3267 - registry. The client cert and key are useful if you are 3268 - authenticating with a certificate; the CA cert is useful if 3269 - you are using a self-signed server certificate. The Secret must 3270 - be of type `Opaque` or `kubernetes.io/tls`. 3271 + and whichever are supplied, will be used for connecting to the 3272 + registry. The client cert and key are useful if you are 3273 + authenticating with a certificate; the CA cert is useful if 3274 + you are using a self-signed server certificate. The Secret must 3275 + be of type `Opaque` or `kubernetes.io/tls`. 3276 3277 - It takes precedence over the values specified in the Secret referred 3278 - to by `.spec.secretRef`. 3279 - properties: 3280 - name: 3281 - description: Name of the referent. 3282 - type: string 3283 - required: 3284 - - name 3285 - type: object 3286 - insecure: 3287 - description: |- 3288 - Insecure allows connecting to a non-TLS HTTP container registry. 3289 - This field is only taken into account if the .spec.type field is set to 'oci'. 3290 - type: boolean 3291 - interval: 3292 - description: |- 3293 - Interval at which the HelmRepository URL is checked for updates. 3294 - This interval is approximate and may be subject to jitter to ensure 3295 - efficient use of resources. 3296 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 3297 - type: string 3298 - passCredentials: 3299 - description: |- 3300 - PassCredentials allows the credentials from the SecretRef to be passed 3301 - on to a host that does not match the host as defined in URL. 3302 - This may be required if the host of the advertised chart URLs in the 3303 - index differ from the defined URL. 3304 - Enabling this should be done with caution, as it can potentially result 3305 - in credentials getting stolen in a MITM-attack. 3306 - type: boolean 3307 - provider: 3308 - default: generic 3309 - description: |- 3310 - Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 3311 - This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 3312 - When not specified, defaults to 'generic'. 3313 - enum: 3314 - - generic 3315 - - aws 3316 - - azure 3317 - - gcp 3318 - type: string 3319 - secretRef: 3320 - description: |- 3321 - SecretRef specifies the Secret containing authentication credentials 3322 - for the HelmRepository. 3323 - For HTTP/S basic auth the secret must contain 'username' and 'password' 3324 - fields. 3325 - Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 3326 - keys is deprecated. Please use `.spec.certSecretRef` instead. 3327 - properties: 3328 - name: 3329 - description: Name of the referent. 3330 + It takes precedence over the values specified in the Secret referred 3331 + to by `.spec.secretRef`. 3332 + properties: 3333 + name: 3334 + description: Name of the referent. 3335 + type: string 3336 + required: 3337 + - name 3338 + type: object 3339 + insecure: 3340 + description: |- 3341 + Insecure allows connecting to a non-TLS HTTP container registry. 3342 + This field is only taken into account if the .spec.type field is set to 'oci'. 3343 + type: boolean 3344 + interval: 3345 + description: |- 3346 + Interval at which the HelmRepository URL is checked for updates. 3347 + This interval is approximate and may be subject to jitter to ensure 3348 + efficient use of resources. 3349 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 3350 + type: string 3351 + passCredentials: 3352 + description: |- 3353 + PassCredentials allows the credentials from the SecretRef to be passed 3354 + on to a host that does not match the host as defined in URL. 3355 + This may be required if the host of the advertised chart URLs in the 3356 + index differ from the defined URL. 3357 + Enabling this should be done with caution, as it can potentially result 3358 + in credentials getting stolen in a MITM-attack. 3359 + type: boolean 3360 + provider: 3361 + default: generic 3362 + description: |- 3363 + Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 3364 + This field is optional, and only taken into account if the .spec.type field is set to 'oci'. 3365 + When not specified, defaults to 'generic'. 3366 + enum: 3367 + - generic 3368 + - aws 3369 + - azure 3370 + - gcp 3371 + type: string 3372 + secretRef: 3373 + description: |- 3374 + SecretRef specifies the Secret containing authentication credentials 3375 + for the HelmRepository. 3376 + For HTTP/S basic auth the secret must contain 'username' and 'password' 3377 + fields. 3378 + Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile' 3379 + keys is deprecated. Please use `.spec.certSecretRef` instead. 3380 + properties: 3381 + name: 3382 + description: Name of the referent. 3383 + type: string 3384 + required: 3385 + - name 3386 + type: object 3387 + suspend: 3388 + description: |- 3389 + Suspend tells the controller to suspend the reconciliation of this 3390 + HelmRepository. 3391 + type: boolean 3392 + timeout: 3393 + description: |- 3394 + Timeout is used for the index fetch operation for an HTTPS helm repository, 3395 + and for remote OCI Repository operations like pulling for an OCI helm 3396 + chart by the associated HelmChart. 3397 + Its default value is 60s. 3398 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3399 + type: string 3400 + type: 3401 + description: |- 3402 + Type of the HelmRepository. 3403 + When this field is set to "oci", the URL field value must be prefixed with "oci://". 3404 + enum: 3405 + - default 3406 + - oci 3407 + type: string 3408 + url: 3409 + description: |- 3410 + URL of the Helm repository, a valid URL contains at least a protocol and 3411 + host. 3412 + pattern: ^(http|https|oci)://.*$ 3413 + type: string 3414 + required: 3415 + - url 3416 + type: object 3417 + status: 3418 + default: 3419 + observedGeneration: -1 3420 + description: HelmRepositoryStatus records the observed state of the HelmRepository. 3421 + properties: 3422 + artifact: 3423 + description: Artifact represents the last successful HelmRepository 3424 + reconciliation. 3425 + properties: 3426 + digest: 3427 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3428 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3429 + type: string 3430 + lastUpdateTime: 3431 + description: |- 3432 + LastUpdateTime is the timestamp corresponding to the last update of the 3433 + Artifact. 3434 + format: date-time 3435 + type: string 3436 + metadata: 3437 + additionalProperties: 3438 type: string 3439 - required: 3440 - - name 3441 - type: object 3442 - suspend: 3443 - description: |- 3444 - Suspend tells the controller to suspend the reconciliation of this 3445 - HelmRepository. 3446 - type: boolean 3447 - timeout: 3448 - description: |- 3449 - Timeout is used for the index fetch operation for an HTTPS helm repository, 3450 - and for remote OCI Repository operations like pulling for an OCI helm 3451 - chart by the associated HelmChart. 3452 - Its default value is 60s. 3453 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3454 - type: string 3455 - type: 3456 - description: |- 3457 - Type of the HelmRepository. 3458 - When this field is set to "oci", the URL field value must be prefixed with "oci://". 3459 - enum: 3460 - - default 3461 - - oci 3462 - type: string 3463 - url: 3464 - description: |- 3465 - URL of the Helm repository, a valid URL contains at least a protocol and 3466 - host. 3467 - pattern: ^(http|https|oci)://.*$ 3468 - type: string 3469 - required: 3470 + description: Metadata holds upstream information such as OCI annotations. 3471 + type: object 3472 + path: 3473 + description: |- 3474 + Path is the relative file path of the Artifact. It can be used to locate 3475 + the file in the root of the Artifact storage on the local file system of 3476 + the controller managing the Source. 3477 + type: string 3478 + revision: 3479 + description: |- 3480 + Revision is a human-readable identifier traceable in the origin source 3481 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3482 + type: string 3483 + size: 3484 + description: Size is the number of bytes in the file. 3485 + format: int64 3486 + type: integer 3487 + url: 3488 + description: |- 3489 + URL is the HTTP address of the Artifact as exposed by the controller 3490 + managing the Source. It can be used to retrieve the Artifact for 3491 + consumption, e.g. by another controller applying the Artifact contents. 3492 + type: string 3493 + required: 3494 + - digest 3495 + - lastUpdateTime 3496 + - path 3497 + - revision 3498 - url 3499 - type: object 3500 - status: 3501 - default: 3502 - observedGeneration: -1 3503 - description: HelmRepositoryStatus records the observed state of the HelmRepository. 3504 - properties: 3505 - artifact: 3506 - description: Artifact represents the last successful HelmRepository reconciliation. 3507 + type: object 3508 + conditions: 3509 + description: Conditions holds the conditions for the HelmRepository. 3510 + items: 3511 + description: Condition contains details for one aspect of the current 3512 + state of this API Resource. 3513 properties: 3514 - digest: 3515 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 3516 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 3517 - type: string 3518 - lastUpdateTime: 3519 + lastTransitionTime: 3520 description: |- 3521 - LastUpdateTime is the timestamp corresponding to the last update of the 3522 - Artifact. 3523 + lastTransitionTime is the last time the condition transitioned from one status to another. 3524 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3525 format: date-time 3526 type: string 3527 - metadata: 3528 - additionalProperties: 3529 - type: string 3530 - description: Metadata holds upstream information such as OCI annotations. 3531 - type: object 3532 - path: 3533 + message: 3534 description: |- 3535 - Path is the relative file path of the Artifact. It can be used to locate 3536 - the file in the root of the Artifact storage on the local file system of 3537 - the controller managing the Source. 3538 + message is a human readable message indicating details about the transition. 3539 + This may be an empty string. 3540 + maxLength: 32768 3541 type: string 3542 - revision: 3543 + observedGeneration: 3544 description: |- 3545 - Revision is a human-readable identifier traceable in the origin source 3546 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 3547 - type: string 3548 - size: 3549 - description: Size is the number of bytes in the file. 3550 + observedGeneration represents the .metadata.generation that the condition was set based upon. 3551 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3552 + with respect to the current state of the instance. 3553 format: int64 3554 + minimum: 0 3555 type: integer 3556 - url: 3557 + reason: 3558 description: |- 3559 - URL is the HTTP address of the Artifact as exposed by the controller 3560 - managing the Source. It can be used to retrieve the Artifact for 3561 - consumption, e.g. by another controller applying the Artifact contents. 3562 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 3563 + Producers of specific condition types may define expected values and meanings for this field, 3564 + and whether the values are considered a guaranteed API. 3565 + The value should be a CamelCase string. 3566 + This field may not be empty. 3567 + maxLength: 1024 3568 + minLength: 1 3569 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3570 + type: string 3571 + status: 3572 + description: status of the condition, one of True, False, Unknown. 3573 + enum: 3574 + - "True" 3575 + - "False" 3576 + - Unknown 3577 + type: string 3578 + type: 3579 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 3580 + maxLength: 316 3581 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3582 type: string 3583 required: 3584 - - digest 3585 - - lastUpdateTime 3586 - - path 3587 - - revision 3588 - - url 3589 + - lastTransitionTime 3590 + - message 3591 + - reason 3592 + - status 3593 + - type 3594 type: object 3595 - conditions: 3596 - description: Conditions holds the conditions for the HelmRepository. 3597 - items: 3598 - description: Condition contains details for one aspect of the current state of this API Resource. 3599 - properties: 3600 - lastTransitionTime: 3601 - description: |- 3602 - lastTransitionTime is the last time the condition transitioned from one status to another. 3603 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 3604 - format: date-time 3605 - type: string 3606 - message: 3607 - description: |- 3608 - message is a human readable message indicating details about the transition. 3609 - This may be an empty string. 3610 - maxLength: 32768 3611 - type: string 3612 - observedGeneration: 3613 - description: |- 3614 - observedGeneration represents the .metadata.generation that the condition was set based upon. 3615 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 3616 - with respect to the current state of the instance. 3617 - format: int64 3618 - minimum: 0 3619 - type: integer 3620 - reason: 3621 - description: |- 3622 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 3623 - Producers of specific condition types may define expected values and meanings for this field, 3624 - and whether the values are considered a guaranteed API. 3625 - The value should be a CamelCase string. 3626 - This field may not be empty. 3627 - maxLength: 1024 3628 - minLength: 1 3629 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 3630 - type: string 3631 - status: 3632 - description: status of the condition, one of True, False, Unknown. 3633 - enum: 3634 - - "True" 3635 - - "False" 3636 - - Unknown 3637 - type: string 3638 - type: 3639 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 3640 - maxLength: 316 3641 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 3642 - type: string 3643 - required: 3644 - - lastTransitionTime 3645 - - message 3646 - - reason 3647 - - status 3648 - - type 3649 - type: object 3650 - type: array 3651 - lastHandledReconcileAt: 3652 - description: |- 3653 - LastHandledReconcileAt holds the value of the most recent 3654 - reconcile request value, so a change of the annotation value 3655 - can be detected. 3656 - type: string 3657 - observedGeneration: 3658 - description: |- 3659 - ObservedGeneration is the last observed generation of the HelmRepository 3660 - object. 3661 - format: int64 3662 - type: integer 3663 - url: 3664 - description: |- 3665 - URL is the dynamic fetch link for the latest Artifact. 3666 - It is provided on a "best effort" basis, and using the precise 3667 - HelmRepositoryStatus.Artifact data is recommended. 3668 - type: string 3669 - type: object 3670 - type: object 3671 - served: true 3672 - storage: true 3673 - subresources: 3674 - status: {} 3675 + type: array 3676 + lastHandledReconcileAt: 3677 + description: |- 3678 + LastHandledReconcileAt holds the value of the most recent 3679 + reconcile request value, so a change of the annotation value 3680 + can be detected. 3681 + type: string 3682 + observedGeneration: 3683 + description: |- 3684 + ObservedGeneration is the last observed generation of the HelmRepository 3685 + object. 3686 + format: int64 3687 + type: integer 3688 + url: 3689 + description: |- 3690 + URL is the dynamic fetch link for the latest Artifact. 3691 + It is provided on a "best effort" basis, and using the precise 3692 + HelmRepositoryStatus.Artifact data is recommended. 3693 + type: string 3694 + type: object 3695 + type: object 3696 + served: true 3697 + storage: true 3698 + subresources: 3699 + status: {} 3700 --- 3701 apiVersion: apiextensions.k8s.io/v1 3702 kind: CustomResourceDefinition 3703 @@ -2039,7 +2070,7 @@ metadata: 3704 app.kubernetes.io/component: source-controller 3705 app.kubernetes.io/instance: flux-system 3706 app.kubernetes.io/part-of: flux 3707 - app.kubernetes.io/version: v2.8.0 3708 + app.kubernetes.io/version: v2.8.1 3709 name: ocirepositories.source.toolkit.fluxcd.io 3710 spec: 3711 group: source.toolkit.fluxcd.io 3712 @@ -2048,395 +2079,403 @@ spec: 3713 listKind: OCIRepositoryList 3714 plural: ocirepositories 3715 shortNames: 3716 - - ocirepo 3717 + - ocirepo 3718 singular: ocirepository 3719 scope: Namespaced 3720 versions: 3721 - - additionalPrinterColumns: 3722 - - jsonPath: .spec.url 3723 - name: URL 3724 - type: string 3725 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 3726 - name: Ready 3727 - type: string 3728 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 3729 - name: Status 3730 - type: string 3731 - - jsonPath: .metadata.creationTimestamp 3732 - name: Age 3733 - type: date 3734 - name: v1 3735 - schema: 3736 - openAPIV3Schema: 3737 - description: OCIRepository is the Schema for the ocirepositories API 3738 - properties: 3739 - apiVersion: 3740 - description: |- 3741 - APIVersion defines the versioned schema of this representation of an object. 3742 - Servers should convert recognized schemas to the latest internal value, and 3743 - may reject unrecognized values. 3744 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3745 - type: string 3746 - kind: 3747 - description: |- 3748 - Kind is a string value representing the REST resource this object represents. 3749 - Servers may infer this from the endpoint the client submits requests to. 3750 - Cannot be updated. 3751 - In CamelCase. 3752 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3753 - type: string 3754 - metadata: 3755 - type: object 3756 - spec: 3757 - description: OCIRepositorySpec defines the desired state of OCIRepository 3758 - properties: 3759 - certSecretRef: 3760 - description: |- 3761 - CertSecretRef can be given the name of a Secret containing 3762 - either or both of 3763 + - additionalPrinterColumns: 3764 + - jsonPath: .spec.url 3765 + name: URL 3766 + type: string 3767 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 3768 + name: Ready 3769 + type: string 3770 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 3771 + name: Status 3772 + type: string 3773 + - jsonPath: .metadata.creationTimestamp 3774 + name: Age 3775 + type: date 3776 + name: v1 3777 + schema: 3778 + openAPIV3Schema: 3779 + description: OCIRepository is the Schema for the ocirepositories API 3780 + properties: 3781 + apiVersion: 3782 + description: |- 3783 + APIVersion defines the versioned schema of this representation of an object. 3784 + Servers should convert recognized schemas to the latest internal value, and 3785 + may reject unrecognized values. 3786 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 3787 + type: string 3788 + kind: 3789 + description: |- 3790 + Kind is a string value representing the REST resource this object represents. 3791 + Servers may infer this from the endpoint the client submits requests to. 3792 + Cannot be updated. 3793 + In CamelCase. 3794 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 3795 + type: string 3796 + metadata: 3797 + type: object 3798 + spec: 3799 + description: OCIRepositorySpec defines the desired state of OCIRepository 3800 + properties: 3801 + certSecretRef: 3802 + description: |- 3803 + CertSecretRef can be given the name of a Secret containing 3804 + either or both of 3805 3806 - - a PEM-encoded client certificate (`tls.crt`) and private 3807 - key (`tls.key`); 3808 - - a PEM-encoded CA certificate (`ca.crt`) 3809 + - a PEM-encoded client certificate (`tls.crt`) and private 3810 + key (`tls.key`); 3811 + - a PEM-encoded CA certificate (`ca.crt`) 3812 3813 - and whichever are supplied, will be used for connecting to the 3814 - registry. The client cert and key are useful if you are 3815 - authenticating with a certificate; the CA cert is useful if 3816 - you are using a self-signed server certificate. The Secret must 3817 - be of type `Opaque` or `kubernetes.io/tls`. 3818 - properties: 3819 - name: 3820 - description: Name of the referent. 3821 - type: string 3822 - required: 3823 + and whichever are supplied, will be used for connecting to the 3824 + registry. The client cert and key are useful if you are 3825 + authenticating with a certificate; the CA cert is useful if 3826 + you are using a self-signed server certificate. The Secret must 3827 + be of type `Opaque` or `kubernetes.io/tls`. 3828 + properties: 3829 + name: 3830 + description: Name of the referent. 3831 + type: string 3832 + required: 3833 + - name 3834 + type: object 3835 + ignore: 3836 + description: |- 3837 + Ignore overrides the set of excluded patterns in the .sourceignore format 3838 + (which is the same as .gitignore). If not provided, a default will be used, 3839 + consult the documentation for your version to find out what those are. 3840 + type: string 3841 + insecure: 3842 + description: Insecure allows connecting to a non-TLS HTTP container 3843 + registry. 3844 + type: boolean 3845 + interval: 3846 + description: |- 3847 + Interval at which the OCIRepository URL is checked for updates. 3848 + This interval is approximate and may be subject to jitter to ensure 3849 + efficient use of resources. 3850 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 3851 + type: string 3852 + layerSelector: 3853 + description: |- 3854 + LayerSelector specifies which layer should be extracted from the OCI artifact. 3855 + When not specified, the first layer found in the artifact is selected. 3856 + properties: 3857 + mediaType: 3858 + description: |- 3859 + MediaType specifies the OCI media type of the layer 3860 + which should be extracted from the OCI Artifact. The 3861 + first layer matching this type is selected. 3862 + type: string 3863 + operation: 3864 + description: |- 3865 + Operation specifies how the selected layer should be processed. 3866 + By default, the layer compressed content is extracted to storage. 3867 + When the operation is set to 'copy', the layer compressed content 3868 + is persisted to storage as it is. 3869 + enum: 3870 + - extract 3871 + - copy 3872 + type: string 3873 + type: object 3874 + provider: 3875 + default: generic 3876 + description: |- 3877 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 3878 + When not specified, defaults to 'generic'. 3879 + enum: 3880 + - generic 3881 + - aws 3882 + - azure 3883 + - gcp 3884 + type: string 3885 + proxySecretRef: 3886 + description: |- 3887 + ProxySecretRef specifies the Secret containing the proxy configuration 3888 + to use while communicating with the container registry. 3889 + properties: 3890 + name: 3891 + description: Name of the referent. 3892 + type: string 3893 + required: 3894 + - name 3895 + type: object 3896 + ref: 3897 + description: |- 3898 + The OCI reference to pull and monitor for changes, 3899 + defaults to the latest tag. 3900 + properties: 3901 + digest: 3902 + description: |- 3903 + Digest is the image digest to pull, takes precedence over SemVer. 3904 + The value should be in the format 'sha256:<HASH>'. 3905 + type: string 3906 + semver: 3907 + description: |- 3908 + SemVer is the range of tags to pull selecting the latest within 3909 + the range, takes precedence over Tag. 3910 + type: string 3911 + semverFilter: 3912 + description: SemverFilter is a regex pattern to filter the tags 3913 + within the SemVer range. 3914 + type: string 3915 + tag: 3916 + description: Tag is the image tag to pull, defaults to latest. 3917 + type: string 3918 + type: object 3919 + secretRef: 3920 + description: |- 3921 + SecretRef contains the secret name containing the registry login 3922 + credentials to resolve image metadata. 3923 + The secret must be of type kubernetes.io/dockerconfigjson. 3924 + properties: 3925 + name: 3926 + description: Name of the referent. 3927 + type: string 3928 + required: 3929 + - name 3930 + type: object 3931 + serviceAccountName: 3932 + description: |- 3933 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 3934 + the image pull if the service account has attached pull secrets. For more information: 3935 + https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 3936 + type: string 3937 + suspend: 3938 + description: This flag tells the controller to suspend the reconciliation 3939 + of this source. 3940 + type: boolean 3941 + timeout: 3942 + default: 60s 3943 + description: The timeout for remote OCI Repository operations like 3944 + pulling, defaults to 60s. 3945 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 3946 + type: string 3947 + url: 3948 + description: |- 3949 + URL is a reference to an OCI artifact repository hosted 3950 + on a remote container registry. 3951 + pattern: ^oci://.*$ 3952 + type: string 3953 + verify: 3954 + description: |- 3955 + Verify contains the secret name containing the trusted public keys 3956 + used to verify the signature and specifies which provider to use to check 3957 + whether OCI image is authentic. 3958 + properties: 3959 + matchOIDCIdentity: 3960 + description: |- 3961 + MatchOIDCIdentity specifies the identity matching criteria to use 3962 + while verifying an OCI artifact which was signed using Cosign keyless 3963 + signing. The artifact's identity is deemed to be verified if any of the 3964 + specified matchers match against the identity. 3965 + items: 3966 + description: |- 3967 + OIDCIdentityMatch specifies options for verifying the certificate identity, 3968 + i.e. the issuer and the subject of the certificate. 3969 + properties: 3970 + issuer: 3971 + description: |- 3972 + Issuer specifies the regex pattern to match against to verify 3973 + the OIDC issuer in the Fulcio certificate. The pattern must be a 3974 + valid Go regular expression. 3975 + type: string 3976 + subject: 3977 + description: |- 3978 + Subject specifies the regex pattern to match against to verify 3979 + the identity subject in the Fulcio certificate. The pattern must 3980 + be a valid Go regular expression. 3981 + type: string 3982 + required: 3983 + - issuer 3984 + - subject 3985 + type: object 3986 + type: array 3987 + provider: 3988 + default: cosign 3989 + description: Provider specifies the technology used to sign the 3990 + OCI Artifact. 3991 + enum: 3992 + - cosign 3993 + - notation 3994 + type: string 3995 + secretRef: 3996 + description: |- 3997 + SecretRef specifies the Kubernetes Secret containing the 3998 + trusted public keys. 3999 + properties: 4000 + name: 4001 + description: Name of the referent. 4002 + type: string 4003 + required: 4004 - name 4005 - type: object 4006 - ignore: 4007 - description: |- 4008 - Ignore overrides the set of excluded patterns in the .sourceignore format 4009 - (which is the same as .gitignore). If not provided, a default will be used, 4010 - consult the documentation for your version to find out what those are. 4011 - type: string 4012 - insecure: 4013 - description: Insecure allows connecting to a non-TLS HTTP container registry. 4014 - type: boolean 4015 - interval: 4016 - description: |- 4017 - Interval at which the OCIRepository URL is checked for updates. 4018 - This interval is approximate and may be subject to jitter to ensure 4019 - efficient use of resources. 4020 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 4021 - type: string 4022 - layerSelector: 4023 - description: |- 4024 - LayerSelector specifies which layer should be extracted from the OCI artifact. 4025 - When not specified, the first layer found in the artifact is selected. 4026 + type: object 4027 + required: 4028 + - provider 4029 + type: object 4030 + required: 4031 + - interval 4032 + - url 4033 + type: object 4034 + status: 4035 + default: 4036 + observedGeneration: -1 4037 + description: OCIRepositoryStatus defines the observed state of OCIRepository 4038 + properties: 4039 + artifact: 4040 + description: Artifact represents the output of the last successful 4041 + OCI Repository sync. 4042 + properties: 4043 + digest: 4044 + description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4045 + pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4046 + type: string 4047 + lastUpdateTime: 4048 + description: |- 4049 + LastUpdateTime is the timestamp corresponding to the last update of the 4050 + Artifact. 4051 + format: date-time 4052 + type: string 4053 + metadata: 4054 + additionalProperties: 4055 + type: string 4056 + description: Metadata holds upstream information such as OCI annotations. 4057 + type: object 4058 + path: 4059 + description: |- 4060 + Path is the relative file path of the Artifact. It can be used to locate 4061 + the file in the root of the Artifact storage on the local file system of 4062 + the controller managing the Source. 4063 + type: string 4064 + revision: 4065 + description: |- 4066 + Revision is a human-readable identifier traceable in the origin source 4067 + system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4068 + type: string 4069 + size: 4070 + description: Size is the number of bytes in the file. 4071 + format: int64 4072 + type: integer 4073 + url: 4074 + description: |- 4075 + URL is the HTTP address of the Artifact as exposed by the controller 4076 + managing the Source. It can be used to retrieve the Artifact for 4077 + consumption, e.g. by another controller applying the Artifact contents. 4078 + type: string 4079 + required: 4080 + - digest 4081 + - lastUpdateTime 4082 + - path 4083 + - revision 4084 + - url 4085 + type: object 4086 + conditions: 4087 + description: Conditions holds the conditions for the OCIRepository. 4088 + items: 4089 + description: Condition contains details for one aspect of the current 4090 + state of this API Resource. 4091 properties: 4092 - mediaType: 4093 + lastTransitionTime: 4094 description: |- 4095 - MediaType specifies the OCI media type of the layer 4096 - which should be extracted from the OCI Artifact. The 4097 - first layer matching this type is selected. 4098 + lastTransitionTime is the last time the condition transitioned from one status to another. 4099 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4100 + format: date-time 4101 type: string 4102 - operation: 4103 + message: 4104 description: |- 4105 - Operation specifies how the selected layer should be processed. 4106 - By default, the layer compressed content is extracted to storage. 4107 - When the operation is set to 'copy', the layer compressed content 4108 - is persisted to storage as it is. 4109 - enum: 4110 - - extract 4111 - - copy 4112 - type: string 4113 - type: object 4114 - provider: 4115 - default: generic 4116 - description: |- 4117 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 4118 - When not specified, defaults to 'generic'. 4119 - enum: 4120 - - generic 4121 - - aws 4122 - - azure 4123 - - gcp 4124 - type: string 4125 - proxySecretRef: 4126 - description: |- 4127 - ProxySecretRef specifies the Secret containing the proxy configuration 4128 - to use while communicating with the container registry. 4129 - properties: 4130 - name: 4131 - description: Name of the referent. 4132 + message is a human readable message indicating details about the transition. 4133 + This may be an empty string. 4134 + maxLength: 32768 4135 type: string 4136 - required: 4137 - - name 4138 - type: object 4139 - ref: 4140 - description: |- 4141 - The OCI reference to pull and monitor for changes, 4142 - defaults to the latest tag. 4143 - properties: 4144 - digest: 4145 + observedGeneration: 4146 description: |- 4147 - Digest is the image digest to pull, takes precedence over SemVer. 4148 - The value should be in the format 'sha256:<HASH>'. 4149 - type: string 4150 - semver: 4151 + observedGeneration represents the .metadata.generation that the condition was set based upon. 4152 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4153 + with respect to the current state of the instance. 4154 + format: int64 4155 + minimum: 0 4156 + type: integer 4157 + reason: 4158 description: |- 4159 - SemVer is the range of tags to pull selecting the latest within 4160 - the range, takes precedence over Tag. 4161 - type: string 4162 - semverFilter: 4163 - description: SemverFilter is a regex pattern to filter the tags within the SemVer range. 4164 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 4165 + Producers of specific condition types may define expected values and meanings for this field, 4166 + and whether the values are considered a guaranteed API. 4167 + The value should be a CamelCase string. 4168 + This field may not be empty. 4169 + maxLength: 1024 4170 + minLength: 1 4171 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4172 type: string 4173 - tag: 4174 - description: Tag is the image tag to pull, defaults to latest. 4175 + status: 4176 + description: status of the condition, one of True, False, Unknown. 4177 + enum: 4178 + - "True" 4179 + - "False" 4180 + - Unknown 4181 type: string 4182 - type: object 4183 - secretRef: 4184 - description: |- 4185 - SecretRef contains the secret name containing the registry login 4186 - credentials to resolve image metadata. 4187 - The secret must be of type kubernetes.io/dockerconfigjson. 4188 - properties: 4189 - name: 4190 - description: Name of the referent. 4191 + type: 4192 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 4193 + maxLength: 316 4194 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4195 type: string 4196 required: 4197 - - name 4198 + - lastTransitionTime 4199 + - message 4200 + - reason 4201 + - status 4202 + - type 4203 type: object 4204 - serviceAccountName: 4205 - description: |- 4206 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 4207 - the image pull if the service account has attached pull secrets. For more information: 4208 - https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account 4209 - type: string 4210 - suspend: 4211 - description: This flag tells the controller to suspend the reconciliation of this source. 4212 - type: boolean 4213 - timeout: 4214 - default: 60s 4215 - description: The timeout for remote OCI Repository operations like pulling, defaults to 60s. 4216 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 4217 - type: string 4218 - url: 4219 - description: |- 4220 - URL is a reference to an OCI artifact repository hosted 4221 - on a remote container registry. 4222 - pattern: ^oci://.*$ 4223 - type: string 4224 - verify: 4225 - description: |- 4226 - Verify contains the secret name containing the trusted public keys 4227 - used to verify the signature and specifies which provider to use to check 4228 - whether OCI image is authentic. 4229 - properties: 4230 - matchOIDCIdentity: 4231 - description: |- 4232 - MatchOIDCIdentity specifies the identity matching criteria to use 4233 - while verifying an OCI artifact which was signed using Cosign keyless 4234 - signing. The artifact's identity is deemed to be verified if any of the 4235 - specified matchers match against the identity. 4236 - items: 4237 - description: |- 4238 - OIDCIdentityMatch specifies options for verifying the certificate identity, 4239 - i.e. the issuer and the subject of the certificate. 4240 - properties: 4241 - issuer: 4242 - description: |- 4243 - Issuer specifies the regex pattern to match against to verify 4244 - the OIDC issuer in the Fulcio certificate. The pattern must be a 4245 - valid Go regular expression. 4246 - type: string 4247 - subject: 4248 - description: |- 4249 - Subject specifies the regex pattern to match against to verify 4250 - the identity subject in the Fulcio certificate. The pattern must 4251 - be a valid Go regular expression. 4252 - type: string 4253 - required: 4254 - - issuer 4255 - - subject 4256 - type: object 4257 - type: array 4258 - provider: 4259 - default: cosign 4260 - description: Provider specifies the technology used to sign the OCI Artifact. 4261 - enum: 4262 - - cosign 4263 - - notation 4264 - type: string 4265 - secretRef: 4266 - description: |- 4267 - SecretRef specifies the Kubernetes Secret containing the 4268 - trusted public keys. 4269 - properties: 4270 - name: 4271 - description: Name of the referent. 4272 - type: string 4273 - required: 4274 - - name 4275 - type: object 4276 - required: 4277 - - provider 4278 - type: object 4279 - required: 4280 - - interval 4281 - - url 4282 - type: object 4283 - status: 4284 - default: 4285 - observedGeneration: -1 4286 - description: OCIRepositoryStatus defines the observed state of OCIRepository 4287 - properties: 4288 - artifact: 4289 - description: Artifact represents the output of the last successful OCI Repository sync. 4290 - properties: 4291 - digest: 4292 - description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'. 4293 - pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$ 4294 - type: string 4295 - lastUpdateTime: 4296 - description: |- 4297 - LastUpdateTime is the timestamp corresponding to the last update of the 4298 - Artifact. 4299 - format: date-time 4300 - type: string 4301 - metadata: 4302 - additionalProperties: 4303 - type: string 4304 - description: Metadata holds upstream information such as OCI annotations. 4305 - type: object 4306 - path: 4307 - description: |- 4308 - Path is the relative file path of the Artifact. It can be used to locate 4309 - the file in the root of the Artifact storage on the local file system of 4310 - the controller managing the Source. 4311 - type: string 4312 - revision: 4313 - description: |- 4314 - Revision is a human-readable identifier traceable in the origin source 4315 - system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. 4316 - type: string 4317 - size: 4318 - description: Size is the number of bytes in the file. 4319 - format: int64 4320 - type: integer 4321 - url: 4322 - description: |- 4323 - URL is the HTTP address of the Artifact as exposed by the controller 4324 - managing the Source. It can be used to retrieve the Artifact for 4325 - consumption, e.g. by another controller applying the Artifact contents. 4326 - type: string 4327 - required: 4328 - - digest 4329 - - lastUpdateTime 4330 - - path 4331 - - revision 4332 - - url 4333 - type: object 4334 - conditions: 4335 - description: Conditions holds the conditions for the OCIRepository. 4336 - items: 4337 - description: Condition contains details for one aspect of the current state of this API Resource. 4338 - properties: 4339 - lastTransitionTime: 4340 - description: |- 4341 - lastTransitionTime is the last time the condition transitioned from one status to another. 4342 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 4343 - format: date-time 4344 - type: string 4345 - message: 4346 - description: |- 4347 - message is a human readable message indicating details about the transition. 4348 - This may be an empty string. 4349 - maxLength: 32768 4350 - type: string 4351 - observedGeneration: 4352 - description: |- 4353 - observedGeneration represents the .metadata.generation that the condition was set based upon. 4354 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 4355 - with respect to the current state of the instance. 4356 - format: int64 4357 - minimum: 0 4358 - type: integer 4359 - reason: 4360 - description: |- 4361 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 4362 - Producers of specific condition types may define expected values and meanings for this field, 4363 - and whether the values are considered a guaranteed API. 4364 - The value should be a CamelCase string. 4365 - This field may not be empty. 4366 - maxLength: 1024 4367 - minLength: 1 4368 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 4369 - type: string 4370 - status: 4371 - description: status of the condition, one of True, False, Unknown. 4372 - enum: 4373 - - "True" 4374 - - "False" 4375 - - Unknown 4376 - type: string 4377 - type: 4378 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 4379 - maxLength: 316 4380 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 4381 - type: string 4382 - required: 4383 - - lastTransitionTime 4384 - - message 4385 - - reason 4386 - - status 4387 - - type 4388 - type: object 4389 - type: array 4390 - lastHandledReconcileAt: 4391 - description: |- 4392 - LastHandledReconcileAt holds the value of the most recent 4393 - reconcile request value, so a change of the annotation value 4394 - can be detected. 4395 - type: string 4396 - observedGeneration: 4397 - description: ObservedGeneration is the last observed generation. 4398 - format: int64 4399 - type: integer 4400 - observedIgnore: 4401 - description: |- 4402 - ObservedIgnore is the observed exclusion patterns used for constructing 4403 - the source artifact. 4404 - type: string 4405 - observedLayerSelector: 4406 - description: |- 4407 - ObservedLayerSelector is the observed layer selector used for constructing 4408 - the source artifact. 4409 - properties: 4410 - mediaType: 4411 - description: |- 4412 - MediaType specifies the OCI media type of the layer 4413 - which should be extracted from the OCI Artifact. The 4414 - first layer matching this type is selected. 4415 - type: string 4416 - operation: 4417 - description: |- 4418 - Operation specifies how the selected layer should be processed. 4419 - By default, the layer compressed content is extracted to storage. 4420 - When the operation is set to 'copy', the layer compressed content 4421 - is persisted to storage as it is. 4422 - enum: 4423 - - extract 4424 - - copy 4425 - type: string 4426 - type: object 4427 - url: 4428 - description: URL is the download link for the artifact output of the last OCI Repository sync. 4429 - type: string 4430 - type: object 4431 - type: object 4432 - served: true 4433 - storage: true 4434 - subresources: 4435 - status: {} 4436 + type: array 4437 + lastHandledReconcileAt: 4438 + description: |- 4439 + LastHandledReconcileAt holds the value of the most recent 4440 + reconcile request value, so a change of the annotation value 4441 + can be detected. 4442 + type: string 4443 + observedGeneration: 4444 + description: ObservedGeneration is the last observed generation. 4445 + format: int64 4446 + type: integer 4447 + observedIgnore: 4448 + description: |- 4449 + ObservedIgnore is the observed exclusion patterns used for constructing 4450 + the source artifact. 4451 + type: string 4452 + observedLayerSelector: 4453 + description: |- 4454 + ObservedLayerSelector is the observed layer selector used for constructing 4455 + the source artifact. 4456 + properties: 4457 + mediaType: 4458 + description: |- 4459 + MediaType specifies the OCI media type of the layer 4460 + which should be extracted from the OCI Artifact. The 4461 + first layer matching this type is selected. 4462 + type: string 4463 + operation: 4464 + description: |- 4465 + Operation specifies how the selected layer should be processed. 4466 + By default, the layer compressed content is extracted to storage. 4467 + When the operation is set to 'copy', the layer compressed content 4468 + is persisted to storage as it is. 4469 + enum: 4470 + - extract 4471 + - copy 4472 + type: string 4473 + type: object 4474 + url: 4475 + description: URL is the download link for the artifact output of the 4476 + last OCI Repository sync. 4477 + type: string 4478 + type: object 4479 + type: object 4480 + served: true 4481 + storage: true 4482 + subresources: 4483 + status: {} 4484 --- 4485 apiVersion: v1 4486 kind: ServiceAccount 4487 @@ -2445,7 +2484,7 @@ metadata: 4488 app.kubernetes.io/component: source-controller 4489 app.kubernetes.io/instance: flux-system 4490 app.kubernetes.io/part-of: flux 4491 - app.kubernetes.io/version: v2.8.0 4492 + app.kubernetes.io/version: v2.8.1 4493 name: source-controller 4494 namespace: flux-system 4495 --- 4496 @@ -2456,16 +2495,16 @@ metadata: 4497 app.kubernetes.io/component: source-controller 4498 app.kubernetes.io/instance: flux-system 4499 app.kubernetes.io/part-of: flux 4500 - app.kubernetes.io/version: v2.8.0 4501 + app.kubernetes.io/version: v2.8.1 4502 control-plane: controller 4503 name: source-controller 4504 namespace: flux-system 4505 spec: 4506 ports: 4507 - - name: http 4508 - port: 80 4509 - protocol: TCP 4510 - targetPort: http 4511 + - name: http 4512 + port: 80 4513 + protocol: TCP 4514 + targetPort: http 4515 selector: 4516 app: source-controller 4517 type: ClusterIP 4518 @@ -2477,7 +2516,7 @@ metadata: 4519 app.kubernetes.io/component: source-controller 4520 app.kubernetes.io/instance: flux-system 4521 app.kubernetes.io/part-of: flux 4522 - app.kubernetes.io/version: v2.8.0 4523 + app.kubernetes.io/version: v2.8.1 4524 control-plane: controller 4525 name: source-controller 4526 namespace: flux-system 4527 @@ -2498,71 +2537,71 @@ spec: 4528 app.kubernetes.io/component: source-controller 4529 app.kubernetes.io/instance: flux-system 4530 app.kubernetes.io/part-of: flux 4531 - app.kubernetes.io/version: v2.8.0 4532 + app.kubernetes.io/version: v2.8.1 4533 spec: 4534 containers: 4535 - - args: 4536 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 4537 - - --watch-all-namespaces=true 4538 - - --log-level=info 4539 - - --log-encoding=json 4540 - - --enable-leader-election 4541 - - --storage-path=/data 4542 - - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 4543 - env: 4544 - - name: RUNTIME_NAMESPACE 4545 - valueFrom: 4546 - fieldRef: 4547 - fieldPath: metadata.namespace 4548 - - name: TUF_ROOT 4549 - value: /tmp/.sigstore 4550 - - name: GOMEMLIMIT 4551 - valueFrom: 4552 - resourceFieldRef: 4553 - containerName: manager 4554 - resource: limits.memory 4555 - image: ghcr.io/fluxcd/source-controller:v1.8.0 4556 - imagePullPolicy: IfNotPresent 4557 - livenessProbe: 4558 - httpGet: 4559 - path: /healthz 4560 - port: healthz 4561 - name: manager 4562 - ports: 4563 - - containerPort: 9090 4564 - name: http 4565 - protocol: TCP 4566 - - containerPort: 8080 4567 - name: http-prom 4568 - protocol: TCP 4569 - - containerPort: 9440 4570 - name: healthz 4571 - protocol: TCP 4572 - readinessProbe: 4573 - httpGet: 4574 - path: / 4575 - port: http 4576 - resources: 4577 - limits: 4578 - cpu: 1000m 4579 - memory: 1Gi 4580 - requests: 4581 - cpu: 50m 4582 - memory: 64Mi 4583 - securityContext: 4584 - allowPrivilegeEscalation: false 4585 - capabilities: 4586 - drop: 4587 - - ALL 4588 - readOnlyRootFilesystem: true 4589 - runAsNonRoot: true 4590 - seccompProfile: 4591 - type: RuntimeDefault 4592 - volumeMounts: 4593 - - mountPath: /data 4594 - name: data 4595 - - mountPath: /tmp 4596 - name: tmp 4597 + - args: 4598 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 4599 + - --watch-all-namespaces=true 4600 + - --log-level=info 4601 + - --log-encoding=json 4602 + - --enable-leader-election 4603 + - --storage-path=/data 4604 + - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. 4605 + env: 4606 + - name: RUNTIME_NAMESPACE 4607 + valueFrom: 4608 + fieldRef: 4609 + fieldPath: metadata.namespace 4610 + - name: TUF_ROOT 4611 + value: /tmp/.sigstore 4612 + - name: GOMEMLIMIT 4613 + valueFrom: 4614 + resourceFieldRef: 4615 + containerName: manager 4616 + resource: limits.memory 4617 + image: ghcr.io/fluxcd/source-controller:v1.8.0 4618 + imagePullPolicy: IfNotPresent 4619 + livenessProbe: 4620 + httpGet: 4621 + path: /healthz 4622 + port: healthz 4623 + name: manager 4624 + ports: 4625 + - containerPort: 9090 4626 + name: http 4627 + protocol: TCP 4628 + - containerPort: 8080 4629 + name: http-prom 4630 + protocol: TCP 4631 + - containerPort: 9440 4632 + name: healthz 4633 + protocol: TCP 4634 + readinessProbe: 4635 + httpGet: 4636 + path: / 4637 + port: http 4638 + resources: 4639 + limits: 4640 + cpu: 1000m 4641 + memory: 1Gi 4642 + requests: 4643 + cpu: 50m 4644 + memory: 64Mi 4645 + securityContext: 4646 + allowPrivilegeEscalation: false 4647 + capabilities: 4648 + drop: 4649 + - ALL 4650 + readOnlyRootFilesystem: true 4651 + runAsNonRoot: true 4652 + seccompProfile: 4653 + type: RuntimeDefault 4654 + volumeMounts: 4655 + - mountPath: /data 4656 + name: data 4657 + - mountPath: /tmp 4658 + name: tmp 4659 nodeSelector: 4660 kubernetes.io/os: linux 4661 priorityClassName: system-cluster-critical 4662 @@ -2571,10 +2610,10 @@ spec: 4663 serviceAccountName: source-controller 4664 terminationGracePeriodSeconds: 10 4665 volumes: 4666 - - emptyDir: {} 4667 - name: data 4668 - - emptyDir: {} 4669 - name: tmp 4670 + - emptyDir: {} 4671 + name: data 4672 + - emptyDir: {} 4673 + name: tmp 4674 --- 4675 apiVersion: apiextensions.k8s.io/v1 4676 kind: CustomResourceDefinition 4677 @@ -2585,7 +2624,7 @@ metadata: 4678 app.kubernetes.io/component: kustomize-controller 4679 app.kubernetes.io/instance: flux-system 4680 app.kubernetes.io/part-of: flux 4681 - app.kubernetes.io/version: v2.8.0 4682 + app.kubernetes.io/version: v2.8.1 4683 name: kustomizations.kustomize.toolkit.fluxcd.io 4684 spec: 4685 group: kustomize.toolkit.fluxcd.io 4686 @@ -2594,678 +2633,703 @@ spec: 4687 listKind: KustomizationList 4688 plural: kustomizations 4689 shortNames: 4690 - - ks 4691 + - ks 4692 singular: kustomization 4693 scope: Namespaced 4694 versions: 4695 - - additionalPrinterColumns: 4696 - - jsonPath: .metadata.creationTimestamp 4697 - name: Age 4698 - type: date 4699 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 4700 - name: Ready 4701 - type: string 4702 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 4703 - name: Status 4704 - type: string 4705 - name: v1 4706 - schema: 4707 - openAPIV3Schema: 4708 - description: Kustomization is the Schema for the kustomizations API. 4709 - properties: 4710 - apiVersion: 4711 - description: |- 4712 - APIVersion defines the versioned schema of this representation of an object. 4713 - Servers should convert recognized schemas to the latest internal value, and 4714 - may reject unrecognized values. 4715 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4716 - type: string 4717 - kind: 4718 - description: |- 4719 - Kind is a string value representing the REST resource this object represents. 4720 - Servers may infer this from the endpoint the client submits requests to. 4721 - Cannot be updated. 4722 - In CamelCase. 4723 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4724 - type: string 4725 - metadata: 4726 - type: object 4727 - spec: 4728 - description: |- 4729 - KustomizationSpec defines the configuration to calculate the desired state 4730 - from a Source using Kustomize. 4731 - properties: 4732 - commonMetadata: 4733 - description: |- 4734 - CommonMetadata specifies the common labels and annotations that are 4735 - applied to all resources. Any existing label or annotation will be 4736 - overridden if its key matches a common one. 4737 - properties: 4738 - annotations: 4739 - additionalProperties: 4740 - type: string 4741 - description: Annotations to be added to the object's metadata. 4742 - type: object 4743 - labels: 4744 - additionalProperties: 4745 + - additionalPrinterColumns: 4746 + - jsonPath: .metadata.creationTimestamp 4747 + name: Age 4748 + type: date 4749 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 4750 + name: Ready 4751 + type: string 4752 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 4753 + name: Status 4754 + type: string 4755 + name: v1 4756 + schema: 4757 + openAPIV3Schema: 4758 + description: Kustomization is the Schema for the kustomizations API. 4759 + properties: 4760 + apiVersion: 4761 + description: |- 4762 + APIVersion defines the versioned schema of this representation of an object. 4763 + Servers should convert recognized schemas to the latest internal value, and 4764 + may reject unrecognized values. 4765 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 4766 + type: string 4767 + kind: 4768 + description: |- 4769 + Kind is a string value representing the REST resource this object represents. 4770 + Servers may infer this from the endpoint the client submits requests to. 4771 + Cannot be updated. 4772 + In CamelCase. 4773 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 4774 + type: string 4775 + metadata: 4776 + type: object 4777 + spec: 4778 + description: |- 4779 + KustomizationSpec defines the configuration to calculate the desired state 4780 + from a Source using Kustomize. 4781 + properties: 4782 + commonMetadata: 4783 + description: |- 4784 + CommonMetadata specifies the common labels and annotations that are 4785 + applied to all resources. Any existing label or annotation will be 4786 + overridden if its key matches a common one. 4787 + properties: 4788 + annotations: 4789 + additionalProperties: 4790 + type: string 4791 + description: Annotations to be added to the object's metadata. 4792 + type: object 4793 + labels: 4794 + additionalProperties: 4795 + type: string 4796 + description: Labels to be added to the object's metadata. 4797 + type: object 4798 + type: object 4799 + components: 4800 + description: Components specifies relative paths to kustomize Components. 4801 + items: 4802 + type: string 4803 + type: array 4804 + decryption: 4805 + description: Decrypt Kubernetes secrets before applying them on the 4806 + cluster. 4807 + properties: 4808 + provider: 4809 + description: Provider is the name of the decryption engine. 4810 + enum: 4811 + - sops 4812 + type: string 4813 + secretRef: 4814 + description: |- 4815 + The secret name containing the private OpenPGP keys used for decryption. 4816 + A static credential for a cloud provider defined inside the Secret 4817 + takes priority to secret-less authentication with the ServiceAccountName 4818 + field. 4819 + properties: 4820 + name: 4821 + description: Name of the referent. 4822 type: string 4823 - description: Labels to be added to the object's metadata. 4824 - type: object 4825 - type: object 4826 - components: 4827 - description: Components specifies relative paths to kustomize Components. 4828 - items: 4829 + required: 4830 + - name 4831 + type: object 4832 + serviceAccountName: 4833 + description: |- 4834 + ServiceAccountName is the name of the service account used to 4835 + authenticate with KMS services from cloud providers. If a 4836 + static credential for a given cloud provider is defined 4837 + inside the Secret referenced by SecretRef, that static 4838 + credential takes priority. 4839 type: string 4840 - type: array 4841 - decryption: 4842 - description: Decrypt Kubernetes secrets before applying them on the cluster. 4843 + required: 4844 + - provider 4845 + type: object 4846 + deletionPolicy: 4847 + description: |- 4848 + DeletionPolicy can be used to control garbage collection when this 4849 + Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 4850 + 'WaitForTermination', 'Orphan'). 'MirrorPrune' mirrors the Prune field 4851 + (orphan if false, delete if true). Defaults to 'MirrorPrune'. 4852 + enum: 4853 + - MirrorPrune 4854 + - Delete 4855 + - WaitForTermination 4856 + - Orphan 4857 + type: string 4858 + dependsOn: 4859 + description: |- 4860 + DependsOn may contain a DependencyReference slice 4861 + with references to Kustomization resources that must be ready before this 4862 + Kustomization can be reconciled. 4863 + items: 4864 + description: DependencyReference defines a Kustomization dependency 4865 + on another Kustomization resource. 4866 properties: 4867 - provider: 4868 - description: Provider is the name of the decryption engine. 4869 - enum: 4870 - - sops 4871 + name: 4872 + description: Name of the referent. 4873 type: string 4874 - secretRef: 4875 + namespace: 4876 description: |- 4877 - The secret name containing the private OpenPGP keys used for decryption. 4878 - A static credential for a cloud provider defined inside the Secret 4879 - takes priority to secret-less authentication with the ServiceAccountName 4880 - field. 4881 - properties: 4882 - name: 4883 - description: Name of the referent. 4884 - type: string 4885 - required: 4886 - - name 4887 - type: object 4888 - serviceAccountName: 4889 + Namespace of the referent, defaults to the namespace of the Kustomization 4890 + resource object that contains the reference. 4891 + type: string 4892 + readyExpr: 4893 description: |- 4894 - ServiceAccountName is the name of the service account used to 4895 - authenticate with KMS services from cloud providers. If a 4896 - static credential for a given cloud provider is defined 4897 - inside the Secret referenced by SecretRef, that static 4898 - credential takes priority. 4899 + ReadyExpr is a CEL expression that can be used to assess the readiness 4900 + of a dependency. When specified, the built-in readiness check 4901 + is replaced by the logic defined in the CEL expression. 4902 + To make the CEL expression additive to the built-in readiness check, 4903 + the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 4904 type: string 4905 required: 4906 - - provider 4907 + - name 4908 type: object 4909 - deletionPolicy: 4910 - description: |- 4911 - DeletionPolicy can be used to control garbage collection when this 4912 - Kustomization is deleted. Valid values are ('MirrorPrune', 'Delete', 4913 - 'WaitForTermination', 'Orphan'). 'MirrorPrune' mirrors the Prune field 4914 - (orphan if false, delete if true). Defaults to 'MirrorPrune'. 4915 - enum: 4916 - - MirrorPrune 4917 - - Delete 4918 - - WaitForTermination 4919 - - Orphan 4920 - type: string 4921 - dependsOn: 4922 - description: |- 4923 - DependsOn may contain a DependencyReference slice 4924 - with references to Kustomization resources that must be ready before this 4925 - Kustomization can be reconciled. 4926 - items: 4927 - description: DependencyReference defines a Kustomization dependency on another Kustomization resource. 4928 - properties: 4929 - name: 4930 - description: Name of the referent. 4931 - type: string 4932 - namespace: 4933 - description: |- 4934 - Namespace of the referent, defaults to the namespace of the Kustomization 4935 - resource object that contains the reference. 4936 - type: string 4937 - readyExpr: 4938 - description: |- 4939 - ReadyExpr is a CEL expression that can be used to assess the readiness 4940 - of a dependency. When specified, the built-in readiness check 4941 - is replaced by the logic defined in the CEL expression. 4942 - To make the CEL expression additive to the built-in readiness check, 4943 - the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 4944 - type: string 4945 - required: 4946 - - name 4947 - type: object 4948 - type: array 4949 - force: 4950 - default: false 4951 - description: |- 4952 - Force instructs the controller to recreate resources 4953 - when patching fails due to an immutable field change. 4954 - type: boolean 4955 - healthCheckExprs: 4956 + type: array 4957 + force: 4958 + default: false 4959 + description: |- 4960 + Force instructs the controller to recreate resources 4961 + when patching fails due to an immutable field change. 4962 + type: boolean 4963 + healthCheckExprs: 4964 + description: |- 4965 + HealthCheckExprs is a list of healthcheck expressions for evaluating the 4966 + health of custom resources using Common Expression Language (CEL). 4967 + The expressions are evaluated only when Wait or HealthChecks are specified. 4968 + items: 4969 + description: CustomHealthCheck defines the health check for custom 4970 + resources. 4971 + properties: 4972 + apiVersion: 4973 + description: APIVersion of the custom resource under evaluation. 4974 + type: string 4975 + current: 4976 + description: |- 4977 + Current is the CEL expression that determines if the status 4978 + of the custom resource has reached the desired state. 4979 + type: string 4980 + failed: 4981 + description: |- 4982 + Failed is the CEL expression that determines if the status 4983 + of the custom resource has failed to reach the desired state. 4984 + type: string 4985 + inProgress: 4986 + description: |- 4987 + InProgress is the CEL expression that determines if the status 4988 + of the custom resource has not yet reached the desired state. 4989 + type: string 4990 + kind: 4991 + description: Kind of the custom resource under evaluation. 4992 + type: string 4993 + required: 4994 + - apiVersion 4995 + - current 4996 + - kind 4997 + type: object 4998 + type: array 4999 + healthChecks: 5000 + description: A list of resources to be included in the health assessment. 5001 + items: 5002 description: |- 5003 - HealthCheckExprs is a list of healthcheck expressions for evaluating the 5004 - health of custom resources using Common Expression Language (CEL). 5005 - The expressions are evaluated only when Wait or HealthChecks are specified. 5006 - items: 5007 - description: CustomHealthCheck defines the health check for custom resources. 5008 - properties: 5009 - apiVersion: 5010 - description: APIVersion of the custom resource under evaluation. 5011 - type: string 5012 - current: 5013 - description: |- 5014 - Current is the CEL expression that determines if the status 5015 - of the custom resource has reached the desired state. 5016 - type: string 5017 - failed: 5018 - description: |- 5019 - Failed is the CEL expression that determines if the status 5020 - of the custom resource has failed to reach the desired state. 5021 - type: string 5022 - inProgress: 5023 - description: |- 5024 - InProgress is the CEL expression that determines if the status 5025 - of the custom resource has not yet reached the desired state. 5026 - type: string 5027 - kind: 5028 - description: Kind of the custom resource under evaluation. 5029 - type: string 5030 - required: 5031 - - apiVersion 5032 - - current 5033 - - kind 5034 - type: object 5035 - type: array 5036 - healthChecks: 5037 - description: A list of resources to be included in the health assessment. 5038 - items: 5039 + NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 5040 + in any namespace. 5041 + properties: 5042 + apiVersion: 5043 + description: API version of the referent, if not specified the 5044 + Kubernetes preferred version will be used. 5045 + type: string 5046 + kind: 5047 + description: Kind of the referent. 5048 + type: string 5049 + name: 5050 + description: Name of the referent. 5051 + type: string 5052 + namespace: 5053 + description: Namespace of the referent, when not specified it 5054 + acts as LocalObjectReference. 5055 + type: string 5056 + required: 5057 + - kind 5058 + - name 5059 + type: object 5060 + type: array 5061 + ignoreMissingComponents: 5062 + description: |- 5063 + IgnoreMissingComponents instructs the controller to ignore Components paths 5064 + not found in source by removing them from the generated kustomization.yaml 5065 + before running kustomize build. 5066 + type: boolean 5067 + images: 5068 + description: |- 5069 + Images is a list of (image name, new name, new tag or digest) 5070 + for changing image names, tags or digests. This can also be achieved with a 5071 + patch, but this operator is simpler to specify. 5072 + items: 5073 + description: Image contains an image name, a new name, a new tag 5074 + or digest, which will replace the original name and tag. 5075 + properties: 5076 + digest: 5077 + description: |- 5078 + Digest is the value used to replace the original image tag. 5079 + If digest is present NewTag value is ignored. 5080 + type: string 5081 + name: 5082 + description: Name is a tag-less image name. 5083 + type: string 5084 + newName: 5085 + description: NewName is the value used to replace the original 5086 + name. 5087 + type: string 5088 + newTag: 5089 + description: NewTag is the value used to replace the original 5090 + tag. 5091 + type: string 5092 + required: 5093 + - name 5094 + type: object 5095 + type: array 5096 + interval: 5097 + description: |- 5098 + The interval at which to reconcile the Kustomization. 5099 + This interval is approximate and may be subject to jitter to ensure 5100 + efficient use of resources. 5101 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5102 + type: string 5103 + kubeConfig: 5104 + description: |- 5105 + The KubeConfig for reconciling the Kustomization on a remote cluster. 5106 + When used in combination with KustomizationSpec.ServiceAccountName, 5107 + forces the controller to act on behalf of that Service Account at the 5108 + target cluster. 5109 + If the --default-service-account flag is set, its value will be used as 5110 + a controller level fallback for when KustomizationSpec.ServiceAccountName 5111 + is empty. 5112 + properties: 5113 + configMapRef: 5114 description: |- 5115 - NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object 5116 - in any namespace. 5117 + ConfigMapRef holds an optional name of a ConfigMap that contains 5118 + the following keys: 5119 + 5120 + - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 5121 + `generic`. Required. 5122 + - `cluster`: the fully qualified resource name of the Kubernetes 5123 + cluster in the cloud provider API. Not used by the `generic` 5124 + provider. Required when one of `address` or `ca.crt` is not set. 5125 + - `address`: the address of the Kubernetes API server. Required 5126 + for `generic`. For the other providers, if not specified, the 5127 + first address in the cluster resource will be used, and if 5128 + specified, it must match one of the addresses in the cluster 5129 + resource. 5130 + If audiences is not set, will be used as the audience for the 5131 + `generic` provider. 5132 + - `ca.crt`: the optional PEM-encoded CA certificate for the 5133 + Kubernetes API server. If not set, the controller will use the 5134 + CA certificate from the cluster resource. 5135 + - `audiences`: the optional audiences as a list of 5136 + line-break-separated strings for the Kubernetes ServiceAccount 5137 + token. Defaults to the `address` for the `generic` provider, or 5138 + to specific values for the other providers depending on the 5139 + provider. 5140 + - `serviceAccountName`: the optional name of the Kubernetes 5141 + ServiceAccount in the same namespace that should be used 5142 + for authentication. If not specified, the controller 5143 + ServiceAccount will be used. 5144 + 5145 + Mutually exclusive with SecretRef. 5146 properties: 5147 - apiVersion: 5148 - description: API version of the referent, if not specified the Kubernetes preferred version will be used. 5149 - type: string 5150 - kind: 5151 - description: Kind of the referent. 5152 - type: string 5153 name: 5154 description: Name of the referent. 5155 type: string 5156 - namespace: 5157 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 5158 - type: string 5159 required: 5160 - - kind 5161 - - name 5162 + - name 5163 type: object 5164 - type: array 5165 - ignoreMissingComponents: 5166 - description: |- 5167 - IgnoreMissingComponents instructs the controller to ignore Components paths 5168 - not found in source by removing them from the generated kustomization.yaml 5169 - before running kustomize build. 5170 - type: boolean 5171 - images: 5172 - description: |- 5173 - Images is a list of (image name, new name, new tag or digest) 5174 - for changing image names, tags or digests. This can also be achieved with a 5175 - patch, but this operator is simpler to specify. 5176 - items: 5177 - description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag. 5178 + secretRef: 5179 + description: |- 5180 + SecretRef holds an optional name of a secret that contains a key with 5181 + the kubeconfig file as the value. If no key is set, the key will default 5182 + to 'value'. Mutually exclusive with ConfigMapRef. 5183 + It is recommended that the kubeconfig is self-contained, and the secret 5184 + is regularly updated if credentials such as a cloud-access-token expire. 5185 + Cloud specific `cmd-path` auth helpers will not function without adding 5186 + binaries and credentials to the Pod that is responsible for reconciling 5187 + Kubernetes resources. Supported only for the generic provider. 5188 properties: 5189 - digest: 5190 - description: |- 5191 - Digest is the value used to replace the original image tag. 5192 - If digest is present NewTag value is ignored. 5193 + key: 5194 + description: Key in the Secret, when not specified an implementation-specific 5195 + default key is used. 5196 type: string 5197 name: 5198 - description: Name is a tag-less image name. 5199 - type: string 5200 - newName: 5201 - description: NewName is the value used to replace the original name. 5202 - type: string 5203 - newTag: 5204 - description: NewTag is the value used to replace the original tag. 5205 + description: Name of the Secret. 5206 type: string 5207 required: 5208 - - name 5209 + - name 5210 type: object 5211 - type: array 5212 - interval: 5213 - description: |- 5214 - The interval at which to reconcile the Kustomization. 5215 - This interval is approximate and may be subject to jitter to ensure 5216 - efficient use of resources. 5217 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5218 - type: string 5219 - kubeConfig: 5220 - description: |- 5221 - The KubeConfig for reconciling the Kustomization on a remote cluster. 5222 - When used in combination with KustomizationSpec.ServiceAccountName, 5223 - forces the controller to act on behalf of that Service Account at the 5224 - target cluster. 5225 - If the --default-service-account flag is set, its value will be used as 5226 - a controller level fallback for when KustomizationSpec.ServiceAccountName 5227 - is empty. 5228 + type: object 5229 + x-kubernetes-validations: 5230 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 5231 + must be specified 5232 + rule: has(self.configMapRef) || has(self.secretRef) 5233 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 5234 + must be specified 5235 + rule: '!has(self.configMapRef) || !has(self.secretRef)' 5236 + namePrefix: 5237 + description: NamePrefix will prefix the names of all managed resources. 5238 + maxLength: 200 5239 + minLength: 1 5240 + type: string 5241 + nameSuffix: 5242 + description: NameSuffix will suffix the names of all managed resources. 5243 + maxLength: 200 5244 + minLength: 1 5245 + type: string 5246 + patches: 5247 + description: |- 5248 + Strategic merge and JSON patches, defined as inline YAML objects, 5249 + capable of targeting objects based on kind, label and annotation selectors. 5250 + items: 5251 + description: |- 5252 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 5253 + be applied to. 5254 properties: 5255 - configMapRef: 5256 + patch: 5257 description: |- 5258 - ConfigMapRef holds an optional name of a ConfigMap that contains 5259 - the following keys: 5260 - 5261 - - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 5262 - `generic`. Required. 5263 - - `cluster`: the fully qualified resource name of the Kubernetes 5264 - cluster in the cloud provider API. Not used by the `generic` 5265 - provider. Required when one of `address` or `ca.crt` is not set. 5266 - - `address`: the address of the Kubernetes API server. Required 5267 - for `generic`. For the other providers, if not specified, the 5268 - first address in the cluster resource will be used, and if 5269 - specified, it must match one of the addresses in the cluster 5270 - resource. 5271 - If audiences is not set, will be used as the audience for the 5272 - `generic` provider. 5273 - - `ca.crt`: the optional PEM-encoded CA certificate for the 5274 - Kubernetes API server. If not set, the controller will use the 5275 - CA certificate from the cluster resource. 5276 - - `audiences`: the optional audiences as a list of 5277 - line-break-separated strings for the Kubernetes ServiceAccount 5278 - token. Defaults to the `address` for the `generic` provider, or 5279 - to specific values for the other providers depending on the 5280 - provider. 5281 - - `serviceAccountName`: the optional name of the Kubernetes 5282 - ServiceAccount in the same namespace that should be used 5283 - for authentication. If not specified, the controller 5284 - ServiceAccount will be used. 5285 - 5286 - Mutually exclusive with SecretRef. 5287 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 5288 + an array of operation objects. 5289 + type: string 5290 + target: 5291 + description: Target points to the resources that the patch document 5292 + should be applied to. 5293 properties: 5294 + annotationSelector: 5295 + description: |- 5296 + AnnotationSelector is a string that follows the label selection expression 5297 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 5298 + It matches with the resource annotations. 5299 + type: string 5300 + group: 5301 + description: |- 5302 + Group is the API group to select resources from. 5303 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 5304 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 5305 + type: string 5306 + kind: 5307 + description: |- 5308 + Kind of the API Group to select resources from. 5309 + Together with Group and Version it is capable of unambiguously 5310 + identifying and/or selecting resources. 5311 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 5312 + type: string 5313 + labelSelector: 5314 + description: |- 5315 + LabelSelector is a string that follows the label selection expression 5316 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 5317 + It matches with the resource labels. 5318 + type: string 5319 name: 5320 - description: Name of the referent. 5321 + description: Name to match resources with. 5322 + type: string 5323 + namespace: 5324 + description: Namespace to select resources from. 5325 + type: string 5326 + version: 5327 + description: |- 5328 + Version of the API Group to select resources from. 5329 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 5330 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 5331 type: string 5332 - required: 5333 - - name 5334 type: object 5335 - secretRef: 5336 + required: 5337 + - patch 5338 + type: object 5339 + type: array 5340 + path: 5341 + description: |- 5342 + Path to the directory containing the kustomization.yaml file, or the 5343 + set of plain YAMLs a kustomization.yaml should be generated for. 5344 + Defaults to 'None', which translates to the root path of the SourceRef. 5345 + type: string 5346 + postBuild: 5347 + description: |- 5348 + PostBuild describes which actions to perform on the YAML manifest 5349 + generated by building the kustomize overlay. 5350 + properties: 5351 + substitute: 5352 + additionalProperties: 5353 + type: string 5354 + description: |- 5355 + Substitute holds a map of key/value pairs. 5356 + The variables defined in your YAML manifests that match any of the keys 5357 + defined in the map will be substituted with the set value. 5358 + Includes support for bash string replacement functions 5359 + e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 5360 + type: object 5361 + substituteFrom: 5362 + description: |- 5363 + SubstituteFrom holds references to ConfigMaps and Secrets containing 5364 + the variables and their values to be substituted in the YAML manifests. 5365 + The ConfigMap and the Secret data keys represent the var names, and they 5366 + must match the vars declared in the manifests for the substitution to 5367 + happen. 5368 + items: 5369 description: |- 5370 - SecretRef holds an optional name of a secret that contains a key with 5371 - the kubeconfig file as the value. If no key is set, the key will default 5372 - to 'value'. Mutually exclusive with ConfigMapRef. 5373 - It is recommended that the kubeconfig is self-contained, and the secret 5374 - is regularly updated if credentials such as a cloud-access-token expire. 5375 - Cloud specific `cmd-path` auth helpers will not function without adding 5376 - binaries and credentials to the Pod that is responsible for reconciling 5377 - Kubernetes resources. Supported only for the generic provider. 5378 + SubstituteReference contains a reference to a resource containing 5379 + the variables name and value. 5380 properties: 5381 - key: 5382 - description: Key in the Secret, when not specified an implementation-specific default key is used. 5383 + kind: 5384 + description: Kind of the values referent, valid values are 5385 + ('Secret', 'ConfigMap'). 5386 + enum: 5387 + - Secret 5388 + - ConfigMap 5389 type: string 5390 name: 5391 - description: Name of the Secret. 5392 + description: |- 5393 + Name of the values referent. Should reside in the same namespace as the 5394 + referring resource. 5395 + maxLength: 253 5396 + minLength: 1 5397 type: string 5398 + optional: 5399 + default: false 5400 + description: |- 5401 + Optional indicates whether the referenced resource must exist, or whether to 5402 + tolerate its absence. If true and the referenced resource is absent, proceed 5403 + as if the resource was present but empty, without any variables defined. 5404 + type: boolean 5405 required: 5406 - - name 5407 + - kind 5408 + - name 5409 type: object 5410 - type: object 5411 - x-kubernetes-validations: 5412 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must be specified 5413 - rule: has(self.configMapRef) || has(self.secretRef) 5414 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must be specified 5415 - rule: '!has(self.configMapRef) || !has(self.secretRef)' 5416 - namePrefix: 5417 - description: NamePrefix will prefix the names of all managed resources. 5418 - maxLength: 200 5419 - minLength: 1 5420 - type: string 5421 - nameSuffix: 5422 - description: NameSuffix will suffix the names of all managed resources. 5423 - maxLength: 200 5424 - minLength: 1 5425 - type: string 5426 - patches: 5427 - description: |- 5428 - Strategic merge and JSON patches, defined as inline YAML objects, 5429 - capable of targeting objects based on kind, label and annotation selectors. 5430 - items: 5431 + type: array 5432 + type: object 5433 + prune: 5434 + description: Prune enables garbage collection. 5435 + type: boolean 5436 + retryInterval: 5437 + description: |- 5438 + The interval at which to retry a previously failed reconciliation. 5439 + When not specified, the controller uses the KustomizationSpec.Interval 5440 + value to retry failures. 5441 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5442 + type: string 5443 + serviceAccountName: 5444 + description: |- 5445 + The name of the Kubernetes service account to impersonate 5446 + when reconciling this Kustomization. 5447 + type: string 5448 + sourceRef: 5449 + description: Reference of the source where the kustomization file 5450 + is. 5451 + properties: 5452 + apiVersion: 5453 + description: API version of the referent. 5454 + type: string 5455 + kind: 5456 + description: Kind of the referent. 5457 + enum: 5458 + - OCIRepository 5459 + - GitRepository 5460 + - Bucket 5461 + - ExternalArtifact 5462 + type: string 5463 + name: 5464 + description: Name of the referent. 5465 + type: string 5466 + namespace: 5467 description: |- 5468 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 5469 - be applied to. 5470 - properties: 5471 - patch: 5472 - description: |- 5473 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 5474 - an array of operation objects. 5475 - type: string 5476 - target: 5477 - description: Target points to the resources that the patch document should be applied to. 5478 - properties: 5479 - annotationSelector: 5480 - description: |- 5481 - AnnotationSelector is a string that follows the label selection expression 5482 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 5483 - It matches with the resource annotations. 5484 - type: string 5485 - group: 5486 - description: |- 5487 - Group is the API group to select resources from. 5488 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 5489 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 5490 - type: string 5491 - kind: 5492 - description: |- 5493 - Kind of the API Group to select resources from. 5494 - Together with Group and Version it is capable of unambiguously 5495 - identifying and/or selecting resources. 5496 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 5497 - type: string 5498 - labelSelector: 5499 - description: |- 5500 - LabelSelector is a string that follows the label selection expression 5501 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 5502 - It matches with the resource labels. 5503 - type: string 5504 - name: 5505 - description: Name to match resources with. 5506 - type: string 5507 - namespace: 5508 - description: Namespace to select resources from. 5509 - type: string 5510 - version: 5511 - description: |- 5512 - Version of the API Group to select resources from. 5513 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 5514 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 5515 - type: string 5516 - type: object 5517 - required: 5518 - - patch 5519 - type: object 5520 - type: array 5521 - path: 5522 - description: |- 5523 - Path to the directory containing the kustomization.yaml file, or the 5524 - set of plain YAMLs a kustomization.yaml should be generated for. 5525 - Defaults to 'None', which translates to the root path of the SourceRef. 5526 - type: string 5527 - postBuild: 5528 - description: |- 5529 - PostBuild describes which actions to perform on the YAML manifest 5530 - generated by building the kustomize overlay. 5531 + Namespace of the referent, defaults to the namespace of the Kubernetes 5532 + resource object that contains the reference. 5533 + type: string 5534 + required: 5535 + - kind 5536 + - name 5537 + type: object 5538 + suspend: 5539 + description: |- 5540 + This flag tells the controller to suspend subsequent kustomize executions, 5541 + it does not apply to already started executions. Defaults to false. 5542 + type: boolean 5543 + targetNamespace: 5544 + description: |- 5545 + TargetNamespace sets or overrides the namespace in the 5546 + kustomization.yaml file. 5547 + maxLength: 63 5548 + minLength: 1 5549 + type: string 5550 + timeout: 5551 + description: |- 5552 + Timeout for validation, apply and health checking operations. 5553 + Defaults to 'Interval' duration. 5554 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5555 + type: string 5556 + wait: 5557 + description: |- 5558 + Wait instructs the controller to check the health of all the reconciled 5559 + resources. When enabled, the HealthChecks are ignored. Defaults to false. 5560 + type: boolean 5561 + required: 5562 + - interval 5563 + - prune 5564 + - sourceRef 5565 + type: object 5566 + status: 5567 + default: 5568 + observedGeneration: -1 5569 + description: KustomizationStatus defines the observed state of a kustomization. 5570 + properties: 5571 + conditions: 5572 + items: 5573 + description: Condition contains details for one aspect of the current 5574 + state of this API Resource. 5575 properties: 5576 - substitute: 5577 - additionalProperties: 5578 - type: string 5579 + lastTransitionTime: 5580 description: |- 5581 - Substitute holds a map of key/value pairs. 5582 - The variables defined in your YAML manifests that match any of the keys 5583 - defined in the map will be substituted with the set value. 5584 - Includes support for bash string replacement functions 5585 - e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. 5586 - type: object 5587 - substituteFrom: 5588 + lastTransitionTime is the last time the condition transitioned from one status to another. 5589 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5590 + format: date-time 5591 + type: string 5592 + message: 5593 description: |- 5594 - SubstituteFrom holds references to ConfigMaps and Secrets containing 5595 - the variables and their values to be substituted in the YAML manifests. 5596 - The ConfigMap and the Secret data keys represent the var names, and they 5597 - must match the vars declared in the manifests for the substitution to 5598 - happen. 5599 - items: 5600 - description: |- 5601 - SubstituteReference contains a reference to a resource containing 5602 - the variables name and value. 5603 - properties: 5604 - kind: 5605 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 5606 - enum: 5607 - - Secret 5608 - - ConfigMap 5609 - type: string 5610 - name: 5611 - description: |- 5612 - Name of the values referent. Should reside in the same namespace as the 5613 - referring resource. 5614 - maxLength: 253 5615 - minLength: 1 5616 - type: string 5617 - optional: 5618 - default: false 5619 - description: |- 5620 - Optional indicates whether the referenced resource must exist, or whether to 5621 - tolerate its absence. If true and the referenced resource is absent, proceed 5622 - as if the resource was present but empty, without any variables defined. 5623 - type: boolean 5624 - required: 5625 - - kind 5626 - - name 5627 - type: object 5628 - type: array 5629 - type: object 5630 - prune: 5631 - description: Prune enables garbage collection. 5632 - type: boolean 5633 - retryInterval: 5634 - description: |- 5635 - The interval at which to retry a previously failed reconciliation. 5636 - When not specified, the controller uses the KustomizationSpec.Interval 5637 - value to retry failures. 5638 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5639 - type: string 5640 - serviceAccountName: 5641 - description: |- 5642 - The name of the Kubernetes service account to impersonate 5643 - when reconciling this Kustomization. 5644 - type: string 5645 - sourceRef: 5646 - description: Reference of the source where the kustomization file is. 5647 - properties: 5648 - apiVersion: 5649 - description: API version of the referent. 5650 + message is a human readable message indicating details about the transition. 5651 + This may be an empty string. 5652 + maxLength: 32768 5653 type: string 5654 - kind: 5655 - description: Kind of the referent. 5656 - enum: 5657 - - OCIRepository 5658 - - GitRepository 5659 - - Bucket 5660 - - ExternalArtifact 5661 + observedGeneration: 5662 + description: |- 5663 + observedGeneration represents the .metadata.generation that the condition was set based upon. 5664 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5665 + with respect to the current state of the instance. 5666 + format: int64 5667 + minimum: 0 5668 + type: integer 5669 + reason: 5670 + description: |- 5671 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 5672 + Producers of specific condition types may define expected values and meanings for this field, 5673 + and whether the values are considered a guaranteed API. 5674 + The value should be a CamelCase string. 5675 + This field may not be empty. 5676 + maxLength: 1024 5677 + minLength: 1 5678 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5679 type: string 5680 - name: 5681 - description: Name of the referent. 5682 + status: 5683 + description: status of the condition, one of True, False, Unknown. 5684 + enum: 5685 + - "True" 5686 + - "False" 5687 + - Unknown 5688 type: string 5689 - namespace: 5690 - description: |- 5691 - Namespace of the referent, defaults to the namespace of the Kubernetes 5692 - resource object that contains the reference. 5693 + type: 5694 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 5695 + maxLength: 316 5696 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5697 type: string 5698 required: 5699 - - kind 5700 - - name 5701 + - lastTransitionTime 5702 + - message 5703 + - reason 5704 + - status 5705 + - type 5706 type: object 5707 - suspend: 5708 - description: |- 5709 - This flag tells the controller to suspend subsequent kustomize executions, 5710 - it does not apply to already started executions. Defaults to false. 5711 - type: boolean 5712 - targetNamespace: 5713 - description: |- 5714 - TargetNamespace sets or overrides the namespace in the 5715 - kustomization.yaml file. 5716 - maxLength: 63 5717 - minLength: 1 5718 - type: string 5719 - timeout: 5720 - description: |- 5721 - Timeout for validation, apply and health checking operations. 5722 - Defaults to 'Interval' duration. 5723 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 5724 - type: string 5725 - wait: 5726 - description: |- 5727 - Wait instructs the controller to check the health of all the reconciled 5728 - resources. When enabled, the HealthChecks are ignored. Defaults to false. 5729 - type: boolean 5730 - required: 5731 - - interval 5732 - - prune 5733 - - sourceRef 5734 - type: object 5735 - status: 5736 - default: 5737 - observedGeneration: -1 5738 - description: KustomizationStatus defines the observed state of a kustomization. 5739 - properties: 5740 - conditions: 5741 - items: 5742 - description: Condition contains details for one aspect of the current state of this API Resource. 5743 - properties: 5744 - lastTransitionTime: 5745 - description: |- 5746 - lastTransitionTime is the last time the condition transitioned from one status to another. 5747 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 5748 - format: date-time 5749 - type: string 5750 - message: 5751 - description: |- 5752 - message is a human readable message indicating details about the transition. 5753 - This may be an empty string. 5754 - maxLength: 32768 5755 - type: string 5756 - observedGeneration: 5757 - description: |- 5758 - observedGeneration represents the .metadata.generation that the condition was set based upon. 5759 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 5760 - with respect to the current state of the instance. 5761 - format: int64 5762 - minimum: 0 5763 - type: integer 5764 - reason: 5765 - description: |- 5766 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 5767 - Producers of specific condition types may define expected values and meanings for this field, 5768 - and whether the values are considered a guaranteed API. 5769 - The value should be a CamelCase string. 5770 - This field may not be empty. 5771 - maxLength: 1024 5772 - minLength: 1 5773 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 5774 - type: string 5775 - status: 5776 - description: status of the condition, one of True, False, Unknown. 5777 - enum: 5778 - - "True" 5779 - - "False" 5780 - - Unknown 5781 - type: string 5782 - type: 5783 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 5784 - maxLength: 316 5785 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 5786 - type: string 5787 - required: 5788 - - lastTransitionTime 5789 - - message 5790 - - reason 5791 - - status 5792 - - type 5793 - type: object 5794 - type: array 5795 - history: 5796 - description: |- 5797 - History contains a set of snapshots of the last reconciliation attempts 5798 - tracking the revision, the state and the duration of each attempt. 5799 - items: 5800 - description: |- 5801 - Snapshot represents a point-in-time record of a group of resources reconciliation, 5802 - including timing information, status, and a unique digest identifier. 5803 - properties: 5804 - digest: 5805 - description: Digest is the checksum in the format `<algo>:<hex>` of the resources in this snapshot. 5806 - type: string 5807 - firstReconciled: 5808 - description: FirstReconciled is the time when this revision was first reconciled to the cluster. 5809 - format: date-time 5810 - type: string 5811 - lastReconciled: 5812 - description: LastReconciled is the time when this revision was last reconciled to the cluster. 5813 - format: date-time 5814 - type: string 5815 - lastReconciledDuration: 5816 - description: LastReconciledDuration is time it took to reconcile the resources in this revision. 5817 - type: string 5818 - lastReconciledStatus: 5819 - description: LastReconciledStatus is the status of the last reconciliation. 5820 - type: string 5821 - metadata: 5822 - additionalProperties: 5823 - type: string 5824 - description: Metadata contains additional information about the snapshot. 5825 - type: object 5826 - totalReconciliations: 5827 - description: TotalReconciliations is the total number of reconciliations that have occurred for this snapshot. 5828 - format: int64 5829 - type: integer 5830 - required: 5831 - - digest 5832 - - firstReconciled 5833 - - lastReconciled 5834 - - lastReconciledDuration 5835 - - lastReconciledStatus 5836 - - totalReconciliations 5837 - type: object 5838 - type: array 5839 - inventory: 5840 - description: |- 5841 - Inventory contains the list of Kubernetes resource object references that 5842 - have been successfully applied. 5843 + type: array 5844 + history: 5845 + description: |- 5846 + History contains a set of snapshots of the last reconciliation attempts 5847 + tracking the revision, the state and the duration of each attempt. 5848 + items: 5849 + description: |- 5850 + Snapshot represents a point-in-time record of a group of resources reconciliation, 5851 + including timing information, status, and a unique digest identifier. 5852 properties: 5853 - entries: 5854 - description: Entries of Kubernetes resource object references. 5855 - items: 5856 - description: ResourceRef contains the information necessary to locate a resource within a cluster. 5857 - properties: 5858 - id: 5859 - description: |- 5860 - ID is the string representation of the Kubernetes resource object's metadata, 5861 - in the format '<namespace>_<name>_<group>_<kind>'. 5862 - type: string 5863 - v: 5864 - description: Version is the API version of the Kubernetes resource object's kind. 5865 - type: string 5866 - required: 5867 - - id 5868 - - v 5869 - type: object 5870 - type: array 5871 + digest: 5872 + description: Digest is the checksum in the format `<algo>:<hex>` 5873 + of the resources in this snapshot. 5874 + type: string 5875 + firstReconciled: 5876 + description: FirstReconciled is the time when this revision 5877 + was first reconciled to the cluster. 5878 + format: date-time 5879 + type: string 5880 + lastReconciled: 5881 + description: LastReconciled is the time when this revision was 5882 + last reconciled to the cluster. 5883 + format: date-time 5884 + type: string 5885 + lastReconciledDuration: 5886 + description: LastReconciledDuration is time it took to reconcile 5887 + the resources in this revision. 5888 + type: string 5889 + lastReconciledStatus: 5890 + description: LastReconciledStatus is the status of the last 5891 + reconciliation. 5892 + type: string 5893 + metadata: 5894 + additionalProperties: 5895 + type: string 5896 + description: Metadata contains additional information about 5897 + the snapshot. 5898 + type: object 5899 + totalReconciliations: 5900 + description: TotalReconciliations is the total number of reconciliations 5901 + that have occurred for this snapshot. 5902 + format: int64 5903 + type: integer 5904 required: 5905 - - entries 5906 + - digest 5907 + - firstReconciled 5908 + - lastReconciled 5909 + - lastReconciledDuration 5910 + - lastReconciledStatus 5911 + - totalReconciliations 5912 type: object 5913 - lastAppliedOriginRevision: 5914 - description: |- 5915 - The last successfully applied origin revision. 5916 - Equals the origin revision of the applied Artifact from the referenced Source. 5917 - Usually present on the Metadata of the applied Artifact and depends on the 5918 - Source type, e.g. for OCI it's the value associated with the key 5919 - "org.opencontainers.image.revision". 5920 - type: string 5921 - lastAppliedRevision: 5922 - description: |- 5923 - The last successfully applied revision. 5924 - Equals the Revision of the applied Artifact from the referenced Source. 5925 - type: string 5926 - lastAttemptedRevision: 5927 - description: LastAttemptedRevision is the revision of the last reconciliation attempt. 5928 - type: string 5929 - lastHandledReconcileAt: 5930 - description: |- 5931 - LastHandledReconcileAt holds the value of the most recent 5932 - reconcile request value, so a change of the annotation value 5933 - can be detected. 5934 - type: string 5935 - observedGeneration: 5936 - description: ObservedGeneration is the last reconciled generation. 5937 - format: int64 5938 - type: integer 5939 - type: object 5940 - type: object 5941 - served: true 5942 - storage: true 5943 - subresources: 5944 - status: {} 5945 + type: array 5946 + inventory: 5947 + description: |- 5948 + Inventory contains the list of Kubernetes resource object references that 5949 + have been successfully applied. 5950 + properties: 5951 + entries: 5952 + description: Entries of Kubernetes resource object references. 5953 + items: 5954 + description: ResourceRef contains the information necessary 5955 + to locate a resource within a cluster. 5956 + properties: 5957 + id: 5958 + description: |- 5959 + ID is the string representation of the Kubernetes resource object's metadata, 5960 + in the format '<namespace>_<name>_<group>_<kind>'. 5961 + type: string 5962 + v: 5963 + description: Version is the API version of the Kubernetes 5964 + resource object's kind. 5965 + type: string 5966 + required: 5967 + - id 5968 + - v 5969 + type: object 5970 + type: array 5971 + required: 5972 + - entries 5973 + type: object 5974 + lastAppliedOriginRevision: 5975 + description: |- 5976 + The last successfully applied origin revision. 5977 + Equals the origin revision of the applied Artifact from the referenced Source. 5978 + Usually present on the Metadata of the applied Artifact and depends on the 5979 + Source type, e.g. for OCI it's the value associated with the key 5980 + "org.opencontainers.image.revision". 5981 + type: string 5982 + lastAppliedRevision: 5983 + description: |- 5984 + The last successfully applied revision. 5985 + Equals the Revision of the applied Artifact from the referenced Source. 5986 + type: string 5987 + lastAttemptedRevision: 5988 + description: LastAttemptedRevision is the revision of the last reconciliation 5989 + attempt. 5990 + type: string 5991 + lastHandledReconcileAt: 5992 + description: |- 5993 + LastHandledReconcileAt holds the value of the most recent 5994 + reconcile request value, so a change of the annotation value 5995 + can be detected. 5996 + type: string 5997 + observedGeneration: 5998 + description: ObservedGeneration is the last reconciled generation. 5999 + format: int64 6000 + type: integer 6001 + type: object 6002 + type: object 6003 + served: true 6004 + storage: true 6005 + subresources: 6006 + status: {} 6007 --- 6008 apiVersion: v1 6009 kind: ServiceAccount 6010 @@ -3274,7 +3338,7 @@ metadata: 6011 app.kubernetes.io/component: kustomize-controller 6012 app.kubernetes.io/instance: flux-system 6013 app.kubernetes.io/part-of: flux 6014 - app.kubernetes.io/version: v2.8.0 6015 + app.kubernetes.io/version: v2.8.1 6016 name: kustomize-controller 6017 namespace: flux-system 6018 --- 6019 @@ -3285,7 +3349,7 @@ metadata: 6020 app.kubernetes.io/component: kustomize-controller 6021 app.kubernetes.io/instance: flux-system 6022 app.kubernetes.io/part-of: flux 6023 - app.kubernetes.io/version: v2.8.0 6024 + app.kubernetes.io/version: v2.8.1 6025 control-plane: controller 6026 name: kustomize-controller 6027 namespace: flux-system 6028 @@ -3304,62 +3368,62 @@ spec: 6029 app.kubernetes.io/component: kustomize-controller 6030 app.kubernetes.io/instance: flux-system 6031 app.kubernetes.io/part-of: flux 6032 - app.kubernetes.io/version: v2.8.0 6033 + app.kubernetes.io/version: v2.8.1 6034 spec: 6035 containers: 6036 - - args: 6037 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 6038 - - --watch-all-namespaces=true 6039 - - --log-level=info 6040 - - --log-encoding=json 6041 - - --enable-leader-election 6042 - env: 6043 - - name: RUNTIME_NAMESPACE 6044 - valueFrom: 6045 - fieldRef: 6046 - fieldPath: metadata.namespace 6047 - - name: GOMEMLIMIT 6048 - valueFrom: 6049 - resourceFieldRef: 6050 - containerName: manager 6051 - resource: limits.memory 6052 - image: ghcr.io/fluxcd/kustomize-controller:v1.8.0 6053 - imagePullPolicy: IfNotPresent 6054 - livenessProbe: 6055 - httpGet: 6056 - path: /healthz 6057 - port: healthz 6058 - name: manager 6059 - ports: 6060 - - containerPort: 8080 6061 - name: http-prom 6062 - protocol: TCP 6063 - - containerPort: 9440 6064 - name: healthz 6065 - protocol: TCP 6066 - readinessProbe: 6067 - httpGet: 6068 - path: /readyz 6069 - port: healthz 6070 - resources: 6071 - limits: 6072 - cpu: 1000m 6073 - memory: 1Gi 6074 - requests: 6075 - cpu: 100m 6076 - memory: 64Mi 6077 - securityContext: 6078 - allowPrivilegeEscalation: false 6079 - capabilities: 6080 - drop: 6081 - - ALL 6082 - readOnlyRootFilesystem: true 6083 - runAsNonRoot: true 6084 - seccompProfile: 6085 - type: RuntimeDefault 6086 - volumeMounts: 6087 - - mountPath: /tmp 6088 - name: temp 6089 + - args: 6090 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 6091 + - --watch-all-namespaces=true 6092 + - --log-level=info 6093 + - --log-encoding=json 6094 + - --enable-leader-election 6095 + env: 6096 + - name: RUNTIME_NAMESPACE 6097 + valueFrom: 6098 + fieldRef: 6099 + fieldPath: metadata.namespace 6100 + - name: GOMEMLIMIT 6101 + valueFrom: 6102 + resourceFieldRef: 6103 + containerName: manager 6104 + resource: limits.memory 6105 + image: ghcr.io/fluxcd/kustomize-controller:v1.8.1 6106 + imagePullPolicy: IfNotPresent 6107 + livenessProbe: 6108 + httpGet: 6109 + path: /healthz 6110 + port: healthz 6111 + name: manager 6112 + ports: 6113 + - containerPort: 8080 6114 + name: http-prom 6115 + protocol: TCP 6116 + - containerPort: 9440 6117 + name: healthz 6118 + protocol: TCP 6119 + readinessProbe: 6120 + httpGet: 6121 + path: /readyz 6122 + port: healthz 6123 + resources: 6124 + limits: 6125 + cpu: 1000m 6126 + memory: 1Gi 6127 + requests: 6128 + cpu: 100m 6129 + memory: 64Mi 6130 + securityContext: 6131 + allowPrivilegeEscalation: false 6132 + capabilities: 6133 + drop: 6134 + - ALL 6135 + readOnlyRootFilesystem: true 6136 + runAsNonRoot: true 6137 + seccompProfile: 6138 + type: RuntimeDefault 6139 + volumeMounts: 6140 + - mountPath: /tmp 6141 + name: temp 6142 nodeSelector: 6143 kubernetes.io/os: linux 6144 priorityClassName: system-cluster-critical 6145 @@ -3368,8 +3432,8 @@ spec: 6146 serviceAccountName: kustomize-controller 6147 terminationGracePeriodSeconds: 60 6148 volumes: 6149 - - emptyDir: {} 6150 - name: temp 6151 + - emptyDir: {} 6152 + name: temp 6153 --- 6154 apiVersion: apiextensions.k8s.io/v1 6155 kind: CustomResourceDefinition 6156 @@ -3380,7 +3444,7 @@ metadata: 6157 app.kubernetes.io/component: helm-controller 6158 app.kubernetes.io/instance: flux-system 6159 app.kubernetes.io/part-of: flux 6160 - app.kubernetes.io/version: v2.8.0 6161 + app.kubernetes.io/version: v2.8.1 6162 name: helmreleases.helm.toolkit.fluxcd.io 6163 spec: 6164 group: helm.toolkit.fluxcd.io 6165 @@ -3389,1387 +3453,1431 @@ spec: 6166 listKind: HelmReleaseList 6167 plural: helmreleases 6168 shortNames: 6169 - - hr 6170 + - hr 6171 singular: helmrelease 6172 scope: Namespaced 6173 versions: 6174 - - additionalPrinterColumns: 6175 - - jsonPath: .metadata.creationTimestamp 6176 - name: Age 6177 - type: date 6178 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 6179 - name: Ready 6180 - type: string 6181 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 6182 - name: Status 6183 - type: string 6184 - name: v2 6185 - schema: 6186 - openAPIV3Schema: 6187 - description: HelmRelease is the Schema for the helmreleases API 6188 - properties: 6189 - apiVersion: 6190 - description: |- 6191 - APIVersion defines the versioned schema of this representation of an object. 6192 - Servers should convert recognized schemas to the latest internal value, and 6193 - may reject unrecognized values. 6194 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6195 - type: string 6196 - kind: 6197 - description: |- 6198 - Kind is a string value representing the REST resource this object represents. 6199 - Servers may infer this from the endpoint the client submits requests to. 6200 - Cannot be updated. 6201 - In CamelCase. 6202 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6203 - type: string 6204 - metadata: 6205 - type: object 6206 - spec: 6207 - description: HelmReleaseSpec defines the desired state of a Helm release. 6208 - properties: 6209 - chart: 6210 - description: |- 6211 - Chart defines the template of the v1.HelmChart that should be created 6212 - for this HelmRelease. 6213 - properties: 6214 - metadata: 6215 - description: ObjectMeta holds the template for metadata like labels and annotations. 6216 - properties: 6217 - annotations: 6218 - additionalProperties: 6219 + - additionalPrinterColumns: 6220 + - jsonPath: .metadata.creationTimestamp 6221 + name: Age 6222 + type: date 6223 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 6224 + name: Ready 6225 + type: string 6226 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 6227 + name: Status 6228 + type: string 6229 + name: v2 6230 + schema: 6231 + openAPIV3Schema: 6232 + description: HelmRelease is the Schema for the helmreleases API 6233 + properties: 6234 + apiVersion: 6235 + description: |- 6236 + APIVersion defines the versioned schema of this representation of an object. 6237 + Servers should convert recognized schemas to the latest internal value, and 6238 + may reject unrecognized values. 6239 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 6240 + type: string 6241 + kind: 6242 + description: |- 6243 + Kind is a string value representing the REST resource this object represents. 6244 + Servers may infer this from the endpoint the client submits requests to. 6245 + Cannot be updated. 6246 + In CamelCase. 6247 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 6248 + type: string 6249 + metadata: 6250 + type: object 6251 + spec: 6252 + description: HelmReleaseSpec defines the desired state of a Helm release. 6253 + properties: 6254 + chart: 6255 + description: |- 6256 + Chart defines the template of the v1.HelmChart that should be created 6257 + for this HelmRelease. 6258 + properties: 6259 + metadata: 6260 + description: ObjectMeta holds the template for metadata like labels 6261 + and annotations. 6262 + properties: 6263 + annotations: 6264 + additionalProperties: 6265 + type: string 6266 + description: |- 6267 + Annotations is an unstructured key value map stored with a resource that may be 6268 + set by external tools to store and retrieve arbitrary metadata. They are not 6269 + queryable and should be preserved when modifying objects. 6270 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 6271 + type: object 6272 + labels: 6273 + additionalProperties: 6274 + type: string 6275 + description: |- 6276 + Map of string keys and values that can be used to organize and categorize 6277 + (scope and select) objects. 6278 + More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 6279 + type: object 6280 + type: object 6281 + spec: 6282 + description: Spec holds the template for the v1.HelmChartSpec 6283 + for this HelmRelease. 6284 + properties: 6285 + chart: 6286 + description: The name or path the Helm chart is available 6287 + at in the SourceRef. 6288 + maxLength: 2048 6289 + minLength: 1 6290 + type: string 6291 + ignoreMissingValuesFiles: 6292 + description: IgnoreMissingValuesFiles controls whether to 6293 + silently ignore missing values files rather than failing. 6294 + type: boolean 6295 + interval: 6296 + description: |- 6297 + Interval at which to check the v1.Source for updates. Defaults to 6298 + 'HelmReleaseSpec.Interval'. 6299 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6300 + type: string 6301 + reconcileStrategy: 6302 + default: ChartVersion 6303 + description: |- 6304 + Determines what enables the creation of a new artifact. Valid values are 6305 + ('ChartVersion', 'Revision'). 6306 + See the documentation of the values for an explanation on their behavior. 6307 + Defaults to ChartVersion when omitted. 6308 + enum: 6309 + - ChartVersion 6310 + - Revision 6311 + type: string 6312 + sourceRef: 6313 + description: The name and namespace of the v1.Source the chart 6314 + is available at. 6315 + properties: 6316 + apiVersion: 6317 + description: APIVersion of the referent. 6318 type: string 6319 - description: |- 6320 - Annotations is an unstructured key value map stored with a resource that may be 6321 - set by external tools to store and retrieve arbitrary metadata. They are not 6322 - queryable and should be preserved when modifying objects. 6323 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ 6324 - type: object 6325 - labels: 6326 - additionalProperties: 6327 + kind: 6328 + description: Kind of the referent. 6329 + enum: 6330 + - HelmRepository 6331 + - GitRepository 6332 + - Bucket 6333 type: string 6334 - description: |- 6335 - Map of string keys and values that can be used to organize and categorize 6336 - (scope and select) objects. 6337 - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ 6338 - type: object 6339 - type: object 6340 - spec: 6341 - description: Spec holds the template for the v1.HelmChartSpec for this HelmRelease. 6342 - properties: 6343 - chart: 6344 - description: The name or path the Helm chart is available at in the SourceRef. 6345 - maxLength: 2048 6346 - minLength: 1 6347 + name: 6348 + description: Name of the referent. 6349 + maxLength: 253 6350 + minLength: 1 6351 + type: string 6352 + namespace: 6353 + description: Namespace of the referent. 6354 + maxLength: 63 6355 + minLength: 1 6356 + type: string 6357 + required: 6358 + - kind 6359 + - name 6360 + type: object 6361 + valuesFiles: 6362 + description: |- 6363 + Alternative list of values files to use as the chart values (values.yaml 6364 + is not included by default), expected to be a relative path in the SourceRef. 6365 + Values files are merged in the order of this list with the last file overriding 6366 + the first. Ignored when omitted. 6367 + items: 6368 type: string 6369 - ignoreMissingValuesFiles: 6370 - description: IgnoreMissingValuesFiles controls whether to silently ignore missing values files rather than failing. 6371 - type: boolean 6372 - interval: 6373 + type: array 6374 + verify: 6375 + description: |- 6376 + Verify contains the secret name containing the trusted public keys 6377 + used to verify the signature and specifies which provider to use to check 6378 + whether OCI image is authentic. 6379 + This field is only supported for OCI sources. 6380 + Chart dependencies, which are not bundled in the umbrella chart artifact, 6381 + are not verified. 6382 + properties: 6383 + provider: 6384 + default: cosign 6385 + description: Provider specifies the technology used to 6386 + sign the OCI Helm chart. 6387 + enum: 6388 + - cosign 6389 + - notation 6390 + type: string 6391 + secretRef: 6392 + description: |- 6393 + SecretRef specifies the Kubernetes Secret containing the 6394 + trusted public keys. 6395 + properties: 6396 + name: 6397 + description: Name of the referent. 6398 + type: string 6399 + required: 6400 + - name 6401 + type: object 6402 + required: 6403 + - provider 6404 + type: object 6405 + version: 6406 + default: '*' 6407 + description: |- 6408 + Version semver expression, ignored for charts from v1.GitRepository and 6409 + v1beta2.Bucket sources. Defaults to latest when omitted. 6410 + type: string 6411 + required: 6412 + - chart 6413 + - sourceRef 6414 + type: object 6415 + required: 6416 + - spec 6417 + type: object 6418 + chartRef: 6419 + description: |- 6420 + ChartRef holds a reference to a source controller resource containing the 6421 + Helm chart artifact. 6422 + properties: 6423 + apiVersion: 6424 + description: APIVersion of the referent. 6425 + type: string 6426 + kind: 6427 + description: Kind of the referent. 6428 + enum: 6429 + - OCIRepository 6430 + - HelmChart 6431 + - ExternalArtifact 6432 + type: string 6433 + name: 6434 + description: Name of the referent. 6435 + maxLength: 253 6436 + minLength: 1 6437 + type: string 6438 + namespace: 6439 + description: |- 6440 + Namespace of the referent, defaults to the namespace of the Kubernetes 6441 + resource object that contains the reference. 6442 + maxLength: 63 6443 + minLength: 1 6444 + type: string 6445 + required: 6446 + - kind 6447 + - name 6448 + type: object 6449 + commonMetadata: 6450 + description: |- 6451 + CommonMetadata specifies the common labels and annotations that are 6452 + applied to all resources. Any existing label or annotation will be 6453 + overridden if its key matches a common one. 6454 + properties: 6455 + annotations: 6456 + additionalProperties: 6457 + type: string 6458 + description: Annotations to be added to the object's metadata. 6459 + type: object 6460 + labels: 6461 + additionalProperties: 6462 + type: string 6463 + description: Labels to be added to the object's metadata. 6464 + type: object 6465 + type: object 6466 + dependsOn: 6467 + description: |- 6468 + DependsOn may contain a DependencyReference slice with 6469 + references to HelmRelease resources that must be ready before this HelmRelease 6470 + can be reconciled. 6471 + items: 6472 + description: DependencyReference defines a HelmRelease dependency 6473 + on another HelmRelease resource. 6474 + properties: 6475 + name: 6476 + description: Name of the referent. 6477 + type: string 6478 + namespace: 6479 + description: |- 6480 + Namespace of the referent, defaults to the namespace of the HelmRelease 6481 + resource object that contains the reference. 6482 + type: string 6483 + readyExpr: 6484 + description: |- 6485 + ReadyExpr is a CEL expression that can be used to assess the readiness 6486 + of a dependency. When specified, the built-in readiness check 6487 + is replaced by the logic defined in the CEL expression. 6488 + To make the CEL expression additive to the built-in readiness check, 6489 + the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 6490 + type: string 6491 + required: 6492 + - name 6493 + type: object 6494 + type: array 6495 + driftDetection: 6496 + description: |- 6497 + DriftDetection holds the configuration for detecting and handling 6498 + differences between the manifest in the Helm storage and the resources 6499 + currently existing in the cluster. 6500 + properties: 6501 + ignore: 6502 + description: |- 6503 + Ignore contains a list of rules for specifying which changes to ignore 6504 + during diffing. 6505 + items: 6506 + description: |- 6507 + IgnoreRule defines a rule to selectively disregard specific changes during 6508 + the drift detection process. 6509 + properties: 6510 + paths: 6511 description: |- 6512 - Interval at which to check the v1.Source for updates. Defaults to 6513 - 'HelmReleaseSpec.Interval'. 6514 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6515 - type: string 6516 - reconcileStrategy: 6517 - default: ChartVersion 6518 + Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 6519 + consideration in a Kubernetes object. 6520 + items: 6521 + type: string 6522 + type: array 6523 + target: 6524 description: |- 6525 - Determines what enables the creation of a new artifact. Valid values are 6526 - ('ChartVersion', 'Revision'). 6527 - See the documentation of the values for an explanation on their behavior. 6528 - Defaults to ChartVersion when omitted. 6529 - enum: 6530 - - ChartVersion 6531 - - Revision 6532 - type: string 6533 - sourceRef: 6534 - description: The name and namespace of the v1.Source the chart is available at. 6535 + Target is a selector for specifying Kubernetes objects to which this 6536 + rule applies. 6537 + If Target is not set, the Paths will be ignored for all Kubernetes 6538 + objects within the manifest of the Helm release. 6539 properties: 6540 - apiVersion: 6541 - description: APIVersion of the referent. 6542 + annotationSelector: 6543 + description: |- 6544 + AnnotationSelector is a string that follows the label selection expression 6545 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 6546 + It matches with the resource annotations. 6547 + type: string 6548 + group: 6549 + description: |- 6550 + Group is the API group to select resources from. 6551 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 6552 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 6553 type: string 6554 kind: 6555 - description: Kind of the referent. 6556 - enum: 6557 - - HelmRepository 6558 - - GitRepository 6559 - - Bucket 6560 + description: |- 6561 + Kind of the API Group to select resources from. 6562 + Together with Group and Version it is capable of unambiguously 6563 + identifying and/or selecting resources. 6564 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 6565 + type: string 6566 + labelSelector: 6567 + description: |- 6568 + LabelSelector is a string that follows the label selection expression 6569 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 6570 + It matches with the resource labels. 6571 type: string 6572 name: 6573 - description: Name of the referent. 6574 - maxLength: 253 6575 - minLength: 1 6576 + description: Name to match resources with. 6577 type: string 6578 namespace: 6579 - description: Namespace of the referent. 6580 - maxLength: 63 6581 - minLength: 1 6582 - type: string 6583 - required: 6584 - - kind 6585 - - name 6586 - type: object 6587 - valuesFiles: 6588 - description: |- 6589 - Alternative list of values files to use as the chart values (values.yaml 6590 - is not included by default), expected to be a relative path in the SourceRef. 6591 - Values files are merged in the order of this list with the last file overriding 6592 - the first. Ignored when omitted. 6593 - items: 6594 - type: string 6595 - type: array 6596 - verify: 6597 - description: |- 6598 - Verify contains the secret name containing the trusted public keys 6599 - used to verify the signature and specifies which provider to use to check 6600 - whether OCI image is authentic. 6601 - This field is only supported for OCI sources. 6602 - Chart dependencies, which are not bundled in the umbrella chart artifact, 6603 - are not verified. 6604 - properties: 6605 - provider: 6606 - default: cosign 6607 - description: Provider specifies the technology used to sign the OCI Helm chart. 6608 - enum: 6609 - - cosign 6610 - - notation 6611 + description: Namespace to select resources from. 6612 type: string 6613 - secretRef: 6614 + version: 6615 description: |- 6616 - SecretRef specifies the Kubernetes Secret containing the 6617 - trusted public keys. 6618 - properties: 6619 - name: 6620 - description: Name of the referent. 6621 - type: string 6622 - required: 6623 - - name 6624 - type: object 6625 - required: 6626 - - provider 6627 + Version of the API Group to select resources from. 6628 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 6629 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 6630 + type: string 6631 type: object 6632 - version: 6633 - default: '*' 6634 - description: |- 6635 - Version semver expression, ignored for charts from v1.GitRepository and 6636 - v1beta2.Bucket sources. Defaults to latest when omitted. 6637 - type: string 6638 required: 6639 - - chart 6640 - - sourceRef 6641 + - paths 6642 type: object 6643 - required: 6644 - - spec 6645 - type: object 6646 - chartRef: 6647 - description: |- 6648 - ChartRef holds a reference to a source controller resource containing the 6649 - Helm chart artifact. 6650 + type: array 6651 + mode: 6652 + description: |- 6653 + Mode defines how differences should be handled between the Helm manifest 6654 + and the manifest currently applied to the cluster. 6655 + If not explicitly set, it defaults to DiffModeDisabled. 6656 + enum: 6657 + - enabled 6658 + - warn 6659 + - disabled 6660 + type: string 6661 + type: object 6662 + healthCheckExprs: 6663 + description: |- 6664 + HealthCheckExprs is a list of healthcheck expressions for evaluating the 6665 + health of custom resources using Common Expression Language (CEL). 6666 + The expressions are evaluated only when the specific Helm action 6667 + taking place has wait enabled, i.e. DisableWait is false, and the 6668 + 'poller' WaitStrategy is used. 6669 + items: 6670 + description: CustomHealthCheck defines the health check for custom 6671 + resources. 6672 properties: 6673 apiVersion: 6674 - description: APIVersion of the referent. 6675 + description: APIVersion of the custom resource under evaluation. 6676 type: string 6677 - kind: 6678 - description: Kind of the referent. 6679 - enum: 6680 - - OCIRepository 6681 - - HelmChart 6682 - - ExternalArtifact 6683 + current: 6684 + description: |- 6685 + Current is the CEL expression that determines if the status 6686 + of the custom resource has reached the desired state. 6687 type: string 6688 - name: 6689 - description: Name of the referent. 6690 - maxLength: 253 6691 - minLength: 1 6692 + failed: 6693 + description: |- 6694 + Failed is the CEL expression that determines if the status 6695 + of the custom resource has failed to reach the desired state. 6696 type: string 6697 - namespace: 6698 + inProgress: 6699 description: |- 6700 - Namespace of the referent, defaults to the namespace of the Kubernetes 6701 - resource object that contains the reference. 6702 - maxLength: 63 6703 - minLength: 1 6704 + InProgress is the CEL expression that determines if the status 6705 + of the custom resource has not yet reached the desired state. 6706 + type: string 6707 + kind: 6708 + description: Kind of the custom resource under evaluation. 6709 type: string 6710 required: 6711 - - kind 6712 - - name 6713 + - apiVersion 6714 + - current 6715 + - kind 6716 type: object 6717 - commonMetadata: 6718 - description: |- 6719 - CommonMetadata specifies the common labels and annotations that are 6720 - applied to all resources. Any existing label or annotation will be 6721 - overridden if its key matches a common one. 6722 - properties: 6723 - annotations: 6724 - additionalProperties: 6725 - type: string 6726 - description: Annotations to be added to the object's metadata. 6727 - type: object 6728 - labels: 6729 - additionalProperties: 6730 + type: array 6731 + install: 6732 + description: Install holds the configuration for Helm install actions 6733 + for this HelmRelease. 6734 + properties: 6735 + crds: 6736 + description: |- 6737 + CRDs upgrade CRDs from the Helm Chart's crds directory according 6738 + to the CRD upgrade policy provided here. Valid values are `Skip`, 6739 + `Create` or `CreateReplace`. Default is `Create` and if omitted 6740 + CRDs are installed but not updated. 6741 + 6742 + Skip: do neither install nor replace (update) any CRDs. 6743 + 6744 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 6745 + 6746 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 6747 + but not deleted. 6748 + 6749 + By default, CRDs are applied (installed) during Helm install action. 6750 + With this option users can opt in to CRD replace existing CRDs on Helm 6751 + install actions, which is not (yet) natively supported by Helm. 6752 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 6753 + enum: 6754 + - Skip 6755 + - Create 6756 + - CreateReplace 6757 + type: string 6758 + createNamespace: 6759 + description: |- 6760 + CreateNamespace tells the Helm install action to create the 6761 + HelmReleaseSpec.TargetNamespace if it does not exist yet. 6762 + On uninstall, the namespace will not be garbage collected. 6763 + type: boolean 6764 + disableHooks: 6765 + description: DisableHooks prevents hooks from running during the 6766 + Helm install action. 6767 + type: boolean 6768 + disableOpenAPIValidation: 6769 + description: |- 6770 + DisableOpenAPIValidation prevents the Helm install action from validating 6771 + rendered templates against the Kubernetes OpenAPI Schema. 6772 + type: boolean 6773 + disableSchemaValidation: 6774 + description: |- 6775 + DisableSchemaValidation prevents the Helm install action from validating 6776 + the values against the JSON Schema. 6777 + type: boolean 6778 + disableTakeOwnership: 6779 + description: |- 6780 + DisableTakeOwnership disables taking ownership of existing resources 6781 + during the Helm install action. Defaults to false. 6782 + type: boolean 6783 + disableWait: 6784 + description: |- 6785 + DisableWait disables the waiting for resources to be ready after a Helm 6786 + install has been performed. 6787 + type: boolean 6788 + disableWaitForJobs: 6789 + description: |- 6790 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 6791 + install has been performed. 6792 + type: boolean 6793 + remediation: 6794 + description: |- 6795 + Remediation holds the remediation configuration for when the Helm install 6796 + action for the HelmRelease fails. The default is to not perform any action. 6797 + properties: 6798 + ignoreTestFailures: 6799 + description: |- 6800 + IgnoreTestFailures tells the controller to skip remediation when the Helm 6801 + tests are run after an install action but fail. Defaults to 6802 + 'Test.IgnoreFailures'. 6803 + type: boolean 6804 + remediateLastFailure: 6805 + description: |- 6806 + RemediateLastFailure tells the controller to remediate the last failure, when 6807 + no retries remain. Defaults to 'false'. 6808 + type: boolean 6809 + retries: 6810 + description: |- 6811 + Retries is the number of retries that should be attempted on failures before 6812 + bailing. Remediation, using an uninstall, is performed between each attempt. 6813 + Defaults to '0', a negative integer equals to unlimited retries. 6814 + type: integer 6815 + type: object 6816 + replace: 6817 + description: |- 6818 + Replace tells the Helm install action to re-use the 'ReleaseName', but only 6819 + if that name is a deleted release which remains in the history. 6820 + type: boolean 6821 + serverSideApply: 6822 + description: |- 6823 + ServerSideApply enables server-side apply for resources during install. 6824 + Defaults to true (or false when UseHelm3Defaults feature gate is enabled). 6825 + type: boolean 6826 + skipCRDs: 6827 + description: |- 6828 + SkipCRDs tells the Helm install action to not install any CRDs. By default, 6829 + CRDs are installed if not already present. 6830 + 6831 + Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 6832 + type: boolean 6833 + strategy: 6834 + description: |- 6835 + Strategy defines the install strategy to use for this HelmRelease. 6836 + Defaults to 'RemediateOnFailure'. 6837 + properties: 6838 + name: 6839 + description: Name of the install strategy. 6840 + enum: 6841 + - RemediateOnFailure 6842 + - RetryOnFailure 6843 type: string 6844 - description: Labels to be added to the object's metadata. 6845 - type: object 6846 - type: object 6847 - dependsOn: 6848 - description: |- 6849 - DependsOn may contain a DependencyReference slice with 6850 - references to HelmRelease resources that must be ready before this HelmRelease 6851 - can be reconciled. 6852 - items: 6853 - description: DependencyReference defines a HelmRelease dependency on another HelmRelease resource. 6854 + retryInterval: 6855 + description: |- 6856 + RetryInterval is the interval at which to retry a failed install. 6857 + Can be used only when Name is set to RetryOnFailure. 6858 + Defaults to '5m'. 6859 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6860 + type: string 6861 + required: 6862 + - name 6863 + type: object 6864 + x-kubernetes-validations: 6865 + - message: .retryInterval cannot be set when .name is 'RemediateOnFailure' 6866 + rule: '!has(self.retryInterval) || self.name != ''RemediateOnFailure''' 6867 + timeout: 6868 + description: |- 6869 + Timeout is the time to wait for any individual Kubernetes operation (like 6870 + Jobs for hooks) during the performance of a Helm install action. Defaults to 6871 + 'HelmReleaseSpec.Timeout'. 6872 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6873 + type: string 6874 + type: object 6875 + interval: 6876 + description: Interval at which to reconcile the Helm release. 6877 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 6878 + type: string 6879 + kubeConfig: 6880 + description: |- 6881 + KubeConfig for reconciling the HelmRelease on a remote cluster. 6882 + When used in combination with HelmReleaseSpec.ServiceAccountName, 6883 + forces the controller to act on behalf of that Service Account at the 6884 + target cluster. 6885 + If the --default-service-account flag is set, its value will be used as 6886 + a controller level fallback for when HelmReleaseSpec.ServiceAccountName 6887 + is empty. 6888 + properties: 6889 + configMapRef: 6890 + description: |- 6891 + ConfigMapRef holds an optional name of a ConfigMap that contains 6892 + the following keys: 6893 + 6894 + - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 6895 + `generic`. Required. 6896 + - `cluster`: the fully qualified resource name of the Kubernetes 6897 + cluster in the cloud provider API. Not used by the `generic` 6898 + provider. Required when one of `address` or `ca.crt` is not set. 6899 + - `address`: the address of the Kubernetes API server. Required 6900 + for `generic`. For the other providers, if not specified, the 6901 + first address in the cluster resource will be used, and if 6902 + specified, it must match one of the addresses in the cluster 6903 + resource. 6904 + If audiences is not set, will be used as the audience for the 6905 + `generic` provider. 6906 + - `ca.crt`: the optional PEM-encoded CA certificate for the 6907 + Kubernetes API server. If not set, the controller will use the 6908 + CA certificate from the cluster resource. 6909 + - `audiences`: the optional audiences as a list of 6910 + line-break-separated strings for the Kubernetes ServiceAccount 6911 + token. Defaults to the `address` for the `generic` provider, or 6912 + to specific values for the other providers depending on the 6913 + provider. 6914 + - `serviceAccountName`: the optional name of the Kubernetes 6915 + ServiceAccount in the same namespace that should be used 6916 + for authentication. If not specified, the controller 6917 + ServiceAccount will be used. 6918 + 6919 + Mutually exclusive with SecretRef. 6920 properties: 6921 name: 6922 description: Name of the referent. 6923 type: string 6924 - namespace: 6925 - description: |- 6926 - Namespace of the referent, defaults to the namespace of the HelmRelease 6927 - resource object that contains the reference. 6928 + required: 6929 + - name 6930 + type: object 6931 + secretRef: 6932 + description: |- 6933 + SecretRef holds an optional name of a secret that contains a key with 6934 + the kubeconfig file as the value. If no key is set, the key will default 6935 + to 'value'. Mutually exclusive with ConfigMapRef. 6936 + It is recommended that the kubeconfig is self-contained, and the secret 6937 + is regularly updated if credentials such as a cloud-access-token expire. 6938 + Cloud specific `cmd-path` auth helpers will not function without adding 6939 + binaries and credentials to the Pod that is responsible for reconciling 6940 + Kubernetes resources. Supported only for the generic provider. 6941 + properties: 6942 + key: 6943 + description: Key in the Secret, when not specified an implementation-specific 6944 + default key is used. 6945 type: string 6946 - readyExpr: 6947 - description: |- 6948 - ReadyExpr is a CEL expression that can be used to assess the readiness 6949 - of a dependency. When specified, the built-in readiness check 6950 - is replaced by the logic defined in the CEL expression. 6951 - To make the CEL expression additive to the built-in readiness check, 6952 - the feature gate `AdditiveCELDependencyCheck` must be set to `true`. 6953 + name: 6954 + description: Name of the Secret. 6955 type: string 6956 required: 6957 - - name 6958 + - name 6959 type: object 6960 - type: array 6961 - driftDetection: 6962 - description: |- 6963 - DriftDetection holds the configuration for detecting and handling 6964 - differences between the manifest in the Helm storage and the resources 6965 - currently existing in the cluster. 6966 + type: object 6967 + x-kubernetes-validations: 6968 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 6969 + must be specified 6970 + rule: has(self.configMapRef) || has(self.secretRef) 6971 + - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef 6972 + must be specified 6973 + rule: '!has(self.configMapRef) || !has(self.secretRef)' 6974 + maxHistory: 6975 + description: |- 6976 + MaxHistory is the number of revisions saved by Helm for this HelmRelease. 6977 + Use '0' for an unlimited number of revisions; defaults to '5'. 6978 + type: integer 6979 + persistentClient: 6980 + description: |- 6981 + PersistentClient tells the controller to use a persistent Kubernetes 6982 + client for this release. When enabled, the client will be reused for the 6983 + duration of the reconciliation, instead of being created and destroyed 6984 + for each (step of a) Helm action. 6985 + 6986 + This can improve performance, but may cause issues with some Helm charts 6987 + that for example do create Custom Resource Definitions during installation 6988 + outside Helm's CRD lifecycle hooks, which are then not observed to be 6989 + available by e.g. post-install hooks. 6990 + 6991 + If not set, it defaults to true. 6992 + type: boolean 6993 + postRenderers: 6994 + description: |- 6995 + PostRenderers holds an array of Helm PostRenderers, which will be applied in order 6996 + of their definition. 6997 + items: 6998 + description: PostRenderer contains a Helm PostRenderer specification. 6999 properties: 7000 - ignore: 7001 - description: |- 7002 - Ignore contains a list of rules for specifying which changes to ignore 7003 - during diffing. 7004 - items: 7005 - description: |- 7006 - IgnoreRule defines a rule to selectively disregard specific changes during 7007 - the drift detection process. 7008 - properties: 7009 - paths: 7010 - description: |- 7011 - Paths is a list of JSON Pointer (RFC 6901) paths to be excluded from 7012 - consideration in a Kubernetes object. 7013 - items: 7014 - type: string 7015 - type: array 7016 - target: 7017 - description: |- 7018 - Target is a selector for specifying Kubernetes objects to which this 7019 - rule applies. 7020 - If Target is not set, the Paths will be ignored for all Kubernetes 7021 - objects within the manifest of the Helm release. 7022 + kustomize: 7023 + description: Kustomization to apply as PostRenderer. 7024 + properties: 7025 + images: 7026 + description: |- 7027 + Images is a list of (image name, new name, new tag or digest) 7028 + for changing image names, tags or digests. This can also be achieved with a 7029 + patch, but this operator is simpler to specify. 7030 + items: 7031 + description: Image contains an image name, a new name, 7032 + a new tag or digest, which will replace the original 7033 + name and tag. 7034 properties: 7035 - annotationSelector: 7036 - description: |- 7037 - AnnotationSelector is a string that follows the label selection expression 7038 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 7039 - It matches with the resource annotations. 7040 - type: string 7041 - group: 7042 - description: |- 7043 - Group is the API group to select resources from. 7044 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 7045 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 7046 - type: string 7047 - kind: 7048 - description: |- 7049 - Kind of the API Group to select resources from. 7050 - Together with Group and Version it is capable of unambiguously 7051 - identifying and/or selecting resources. 7052 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 7053 - type: string 7054 - labelSelector: 7055 + digest: 7056 description: |- 7057 - LabelSelector is a string that follows the label selection expression 7058 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 7059 - It matches with the resource labels. 7060 + Digest is the value used to replace the original image tag. 7061 + If digest is present NewTag value is ignored. 7062 type: string 7063 name: 7064 - description: Name to match resources with. 7065 + description: Name is a tag-less image name. 7066 type: string 7067 - namespace: 7068 - description: Namespace to select resources from. 7069 + newName: 7070 + description: NewName is the value used to replace 7071 + the original name. 7072 type: string 7073 - version: 7074 + newTag: 7075 + description: NewTag is the value used to replace the 7076 + original tag. 7077 + type: string 7078 + required: 7079 + - name 7080 + type: object 7081 + type: array 7082 + patches: 7083 + description: |- 7084 + Strategic merge and JSON patches, defined as inline YAML objects, 7085 + capable of targeting objects based on kind, label and annotation selectors. 7086 + items: 7087 + description: |- 7088 + Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 7089 + be applied to. 7090 + properties: 7091 + patch: 7092 description: |- 7093 - Version of the API Group to select resources from. 7094 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 7095 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 7096 + Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 7097 + an array of operation objects. 7098 type: string 7099 + target: 7100 + description: Target points to the resources that the 7101 + patch document should be applied to. 7102 + properties: 7103 + annotationSelector: 7104 + description: |- 7105 + AnnotationSelector is a string that follows the label selection expression 7106 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 7107 + It matches with the resource annotations. 7108 + type: string 7109 + group: 7110 + description: |- 7111 + Group is the API group to select resources from. 7112 + Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 7113 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 7114 + type: string 7115 + kind: 7116 + description: |- 7117 + Kind of the API Group to select resources from. 7118 + Together with Group and Version it is capable of unambiguously 7119 + identifying and/or selecting resources. 7120 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 7121 + type: string 7122 + labelSelector: 7123 + description: |- 7124 + LabelSelector is a string that follows the label selection expression 7125 + https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 7126 + It matches with the resource labels. 7127 + type: string 7128 + name: 7129 + description: Name to match resources with. 7130 + type: string 7131 + namespace: 7132 + description: Namespace to select resources from. 7133 + type: string 7134 + version: 7135 + description: |- 7136 + Version of the API Group to select resources from. 7137 + Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 7138 + https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 7139 + type: string 7140 + type: object 7141 + required: 7142 + - patch 7143 type: object 7144 - required: 7145 - - paths 7146 - type: object 7147 - type: array 7148 - mode: 7149 - description: |- 7150 - Mode defines how differences should be handled between the Helm manifest 7151 - and the manifest currently applied to the cluster. 7152 - If not explicitly set, it defaults to DiffModeDisabled. 7153 - enum: 7154 - - enabled 7155 - - warn 7156 - - disabled 7157 - type: string 7158 + type: array 7159 + type: object 7160 type: object 7161 - healthCheckExprs: 7162 - description: |- 7163 - HealthCheckExprs is a list of healthcheck expressions for evaluating the 7164 - health of custom resources using Common Expression Language (CEL). 7165 - The expressions are evaluated only when the specific Helm action 7166 - taking place has wait enabled, i.e. DisableWait is false, and the 7167 - 'poller' WaitStrategy is used. 7168 - items: 7169 - description: CustomHealthCheck defines the health check for custom resources. 7170 + type: array 7171 + releaseName: 7172 + description: |- 7173 + ReleaseName used for the Helm release. Defaults to a composition of 7174 + '[TargetNamespace-]Name'. 7175 + maxLength: 53 7176 + minLength: 1 7177 + type: string 7178 + rollback: 7179 + description: Rollback holds the configuration for Helm rollback actions 7180 + for this HelmRelease. 7181 + properties: 7182 + cleanupOnFail: 7183 + description: |- 7184 + CleanupOnFail allows deletion of new resources created during the Helm 7185 + rollback action when it fails. 7186 + type: boolean 7187 + disableHooks: 7188 + description: DisableHooks prevents hooks from running during the 7189 + Helm rollback action. 7190 + type: boolean 7191 + disableWait: 7192 + description: |- 7193 + DisableWait disables the waiting for resources to be ready after a Helm 7194 + rollback has been performed. 7195 + type: boolean 7196 + disableWaitForJobs: 7197 + description: |- 7198 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 7199 + rollback has been performed. 7200 + type: boolean 7201 + force: 7202 + description: Force forces resource updates through a replacement 7203 + strategy. 7204 + type: boolean 7205 + recreate: 7206 + description: |- 7207 + Recreate performs pod restarts for any managed workloads. 7208 + 7209 + Deprecated: This behavior was deprecated in Helm 3: 7210 + - Deprecation: https://github.com/helm/helm/pull/6463 7211 + - Removal: https://github.com/helm/helm/pull/31023 7212 + After helm-controller was upgraded to the Helm 4 SDK, 7213 + this field is no longer functional and will print a 7214 + warning if set to true. It will also be removed in a 7215 + future release. 7216 + type: boolean 7217 + serverSideApply: 7218 + description: |- 7219 + ServerSideApply enables server-side apply for resources during rollback. 7220 + Can be "enabled", "disabled", or "auto". 7221 + When "auto", server-side apply usage will be based on the release's previous usage. 7222 + Defaults to "auto". 7223 + enum: 7224 + - enabled 7225 + - disabled 7226 + - auto 7227 + type: string 7228 + timeout: 7229 + description: |- 7230 + Timeout is the time to wait for any individual Kubernetes operation (like 7231 + Jobs for hooks) during the performance of a Helm rollback action. Defaults to 7232 + 'HelmReleaseSpec.Timeout'. 7233 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7234 + type: string 7235 + type: object 7236 + serviceAccountName: 7237 + description: |- 7238 + The name of the Kubernetes service account to impersonate 7239 + when reconciling this HelmRelease. 7240 + maxLength: 253 7241 + minLength: 1 7242 + type: string 7243 + storageNamespace: 7244 + description: |- 7245 + StorageNamespace used for the Helm storage. 7246 + Defaults to the namespace of the HelmRelease. 7247 + maxLength: 63 7248 + minLength: 1 7249 + type: string 7250 + suspend: 7251 + description: |- 7252 + Suspend tells the controller to suspend reconciliation for this HelmRelease, 7253 + it does not apply to already started reconciliations. Defaults to false. 7254 + type: boolean 7255 + targetNamespace: 7256 + description: |- 7257 + TargetNamespace to target when performing operations for the HelmRelease. 7258 + Defaults to the namespace of the HelmRelease. 7259 + maxLength: 63 7260 + minLength: 1 7261 + type: string 7262 + test: 7263 + description: Test holds the configuration for Helm test actions for 7264 + this HelmRelease. 7265 + properties: 7266 + enable: 7267 + description: |- 7268 + Enable enables Helm test actions for this HelmRelease after an Helm install 7269 + or upgrade action has been performed. 7270 + type: boolean 7271 + filters: 7272 + description: Filters is a list of tests to run or exclude from 7273 + running. 7274 + items: 7275 + description: Filter holds the configuration for individual Helm 7276 + test filters. 7277 + properties: 7278 + exclude: 7279 + description: Exclude specifies whether the named test should 7280 + be excluded. 7281 + type: boolean 7282 + name: 7283 + description: Name is the name of the test. 7284 + maxLength: 253 7285 + minLength: 1 7286 + type: string 7287 + required: 7288 + - name 7289 + type: object 7290 + type: array 7291 + ignoreFailures: 7292 + description: |- 7293 + IgnoreFailures tells the controller to skip remediation when the Helm tests 7294 + are run but fail. Can be overwritten for tests run after install or upgrade 7295 + actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 7296 + type: boolean 7297 + timeout: 7298 + description: |- 7299 + Timeout is the time to wait for any individual Kubernetes operation during 7300 + the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 7301 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7302 + type: string 7303 + type: object 7304 + timeout: 7305 + description: |- 7306 + Timeout is the time to wait for any individual Kubernetes operation (like Jobs 7307 + for hooks) during the performance of a Helm action. Defaults to '5m0s'. 7308 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7309 + type: string 7310 + uninstall: 7311 + description: Uninstall holds the configuration for Helm uninstall 7312 + actions for this HelmRelease. 7313 + properties: 7314 + deletionPropagation: 7315 + default: background 7316 + description: |- 7317 + DeletionPropagation specifies the deletion propagation policy when 7318 + a Helm uninstall is performed. 7319 + enum: 7320 + - background 7321 + - foreground 7322 + - orphan 7323 + type: string 7324 + disableHooks: 7325 + description: DisableHooks prevents hooks from running during the 7326 + Helm rollback action. 7327 + type: boolean 7328 + disableWait: 7329 + description: |- 7330 + DisableWait disables waiting for all the resources to be deleted after 7331 + a Helm uninstall is performed. 7332 + type: boolean 7333 + keepHistory: 7334 + description: |- 7335 + KeepHistory tells Helm to remove all associated resources and mark the 7336 + release as deleted, but retain the release history. 7337 + type: boolean 7338 + timeout: 7339 + description: |- 7340 + Timeout is the time to wait for any individual Kubernetes operation (like 7341 + Jobs for hooks) during the performance of a Helm uninstall action. Defaults 7342 + to 'HelmReleaseSpec.Timeout'. 7343 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7344 + type: string 7345 + type: object 7346 + upgrade: 7347 + description: Upgrade holds the configuration for Helm upgrade actions 7348 + for this HelmRelease. 7349 + properties: 7350 + cleanupOnFail: 7351 + description: |- 7352 + CleanupOnFail allows deletion of new resources created during the Helm 7353 + upgrade action when it fails. 7354 + type: boolean 7355 + crds: 7356 + description: |- 7357 + CRDs upgrade CRDs from the Helm Chart's crds directory according 7358 + to the CRD upgrade policy provided here. Valid values are `Skip`, 7359 + `Create` or `CreateReplace`. Default is `Skip` and if omitted 7360 + CRDs are neither installed nor upgraded. 7361 + 7362 + Skip: do neither install nor replace (update) any CRDs. 7363 + 7364 + Create: new CRDs are created, existing CRDs are neither updated nor deleted. 7365 + 7366 + CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 7367 + but not deleted. 7368 + 7369 + By default, CRDs are not applied during Helm upgrade action. With this 7370 + option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 7371 + https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 7372 + enum: 7373 + - Skip 7374 + - Create 7375 + - CreateReplace 7376 + type: string 7377 + disableHooks: 7378 + description: DisableHooks prevents hooks from running during the 7379 + Helm upgrade action. 7380 + type: boolean 7381 + disableOpenAPIValidation: 7382 + description: |- 7383 + DisableOpenAPIValidation prevents the Helm upgrade action from validating 7384 + rendered templates against the Kubernetes OpenAPI Schema. 7385 + type: boolean 7386 + disableSchemaValidation: 7387 + description: |- 7388 + DisableSchemaValidation prevents the Helm upgrade action from validating 7389 + the values against the JSON Schema. 7390 + type: boolean 7391 + disableTakeOwnership: 7392 + description: |- 7393 + DisableTakeOwnership disables taking ownership of existing resources 7394 + during the Helm upgrade action. Defaults to false. 7395 + type: boolean 7396 + disableWait: 7397 + description: |- 7398 + DisableWait disables the waiting for resources to be ready after a Helm 7399 + upgrade has been performed. 7400 + type: boolean 7401 + disableWaitForJobs: 7402 + description: |- 7403 + DisableWaitForJobs disables waiting for jobs to complete after a Helm 7404 + upgrade has been performed. 7405 + type: boolean 7406 + force: 7407 + description: Force forces resource updates through a replacement 7408 + strategy. 7409 + type: boolean 7410 + preserveValues: 7411 + description: |- 7412 + PreserveValues will make Helm reuse the last release's values and merge in 7413 + overrides from 'Values'. Setting this flag makes the HelmRelease 7414 + non-declarative. 7415 + type: boolean 7416 + remediation: 7417 + description: |- 7418 + Remediation holds the remediation configuration for when the Helm upgrade 7419 + action for the HelmRelease fails. The default is to not perform any action. 7420 properties: 7421 - apiVersion: 7422 - description: APIVersion of the custom resource under evaluation. 7423 - type: string 7424 - current: 7425 + ignoreTestFailures: 7426 description: |- 7427 - Current is the CEL expression that determines if the status 7428 - of the custom resource has reached the desired state. 7429 - type: string 7430 - failed: 7431 + IgnoreTestFailures tells the controller to skip remediation when the Helm 7432 + tests are run after an upgrade action but fail. 7433 + Defaults to 'Test.IgnoreFailures'. 7434 + type: boolean 7435 + remediateLastFailure: 7436 description: |- 7437 - Failed is the CEL expression that determines if the status 7438 - of the custom resource has failed to reach the desired state. 7439 - type: string 7440 - inProgress: 7441 + RemediateLastFailure tells the controller to remediate the last failure, when 7442 + no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 7443 + type: boolean 7444 + retries: 7445 description: |- 7446 - InProgress is the CEL expression that determines if the status 7447 - of the custom resource has not yet reached the desired state. 7448 + Retries is the number of retries that should be attempted on failures before 7449 + bailing. Remediation, using 'Strategy', is performed between each attempt. 7450 + Defaults to '0', a negative integer equals to unlimited retries. 7451 + type: integer 7452 + strategy: 7453 + description: Strategy to use for failure remediation. Defaults 7454 + to 'rollback'. 7455 + enum: 7456 + - rollback 7457 + - uninstall 7458 + type: string 7459 + type: object 7460 + serverSideApply: 7461 + description: |- 7462 + ServerSideApply enables server-side apply for resources during upgrade. 7463 + Can be "enabled", "disabled", or "auto". 7464 + When "auto", server-side apply usage will be based on the release's previous usage. 7465 + Defaults to "auto". 7466 + enum: 7467 + - enabled 7468 + - disabled 7469 + - auto 7470 + type: string 7471 + strategy: 7472 + description: |- 7473 + Strategy defines the upgrade strategy to use for this HelmRelease. 7474 + Defaults to 'RemediateOnFailure'. 7475 + properties: 7476 + name: 7477 + description: Name of the upgrade strategy. 7478 + enum: 7479 + - RemediateOnFailure 7480 + - RetryOnFailure 7481 type: string 7482 - kind: 7483 - description: Kind of the custom resource under evaluation. 7484 + retryInterval: 7485 + description: |- 7486 + RetryInterval is the interval at which to retry a failed upgrade. 7487 + Can be used only when Name is set to RetryOnFailure. 7488 + Defaults to '5m'. 7489 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7490 type: string 7491 required: 7492 - - apiVersion 7493 - - current 7494 - - kind 7495 + - name 7496 type: object 7497 - type: array 7498 - install: 7499 - description: Install holds the configuration for Helm install actions for this HelmRelease. 7500 + x-kubernetes-validations: 7501 + - message: .retryInterval can only be set when .name is 'RetryOnFailure' 7502 + rule: '!has(self.retryInterval) || self.name == ''RetryOnFailure''' 7503 + timeout: 7504 + description: |- 7505 + Timeout is the time to wait for any individual Kubernetes operation (like 7506 + Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 7507 + 'HelmReleaseSpec.Timeout'. 7508 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7509 + type: string 7510 + type: object 7511 + values: 7512 + description: Values holds the values for this Helm release. 7513 + x-kubernetes-preserve-unknown-fields: true 7514 + valuesFrom: 7515 + description: |- 7516 + ValuesFrom holds references to resources containing Helm values for this HelmRelease, 7517 + and information about how they should be merged. 7518 + items: 7519 + description: |- 7520 + ValuesReference contains a reference to a resource containing Helm values, 7521 + and optionally the key they can be found at. 7522 properties: 7523 - crds: 7524 - description: |- 7525 - CRDs upgrade CRDs from the Helm Chart's crds directory according 7526 - to the CRD upgrade policy provided here. Valid values are `Skip`, 7527 - `Create` or `CreateReplace`. Default is `Create` and if omitted 7528 - CRDs are installed but not updated. 7529 - 7530 - Skip: do neither install nor replace (update) any CRDs. 7531 - 7532 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 7533 - 7534 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 7535 - but not deleted. 7536 - 7537 - By default, CRDs are applied (installed) during Helm install action. 7538 - With this option users can opt in to CRD replace existing CRDs on Helm 7539 - install actions, which is not (yet) natively supported by Helm. 7540 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 7541 + kind: 7542 + description: Kind of the values referent, valid values are ('Secret', 7543 + 'ConfigMap'). 7544 enum: 7545 - - Skip 7546 - - Create 7547 - - CreateReplace 7548 + - Secret 7549 + - ConfigMap 7550 type: string 7551 - createNamespace: 7552 + name: 7553 description: |- 7554 - CreateNamespace tells the Helm install action to create the 7555 - HelmReleaseSpec.TargetNamespace if it does not exist yet. 7556 - On uninstall, the namespace will not be garbage collected. 7557 - type: boolean 7558 - disableHooks: 7559 - description: DisableHooks prevents hooks from running during the Helm install action. 7560 - type: boolean 7561 - disableOpenAPIValidation: 7562 + Name of the values referent. Should reside in the same namespace as the 7563 + referring resource. 7564 + maxLength: 253 7565 + minLength: 1 7566 + type: string 7567 + optional: 7568 description: |- 7569 - DisableOpenAPIValidation prevents the Helm install action from validating 7570 - rendered templates against the Kubernetes OpenAPI Schema. 7571 + Optional marks this ValuesReference as optional. When set, a not found error 7572 + for the values reference is ignored, but any ValuesKey, TargetPath or 7573 + transient error will still result in a reconciliation failure. 7574 type: boolean 7575 - disableSchemaValidation: 7576 + targetPath: 7577 description: |- 7578 - DisableSchemaValidation prevents the Helm install action from validating 7579 - the values against the JSON Schema. 7580 - type: boolean 7581 - disableTakeOwnership: 7582 + TargetPath is the YAML dot notation path the value should be merged at. When 7583 + set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 7584 + which results in the values getting merged at the root. 7585 + maxLength: 250 7586 + pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 7587 + type: string 7588 + valuesKey: 7589 description: |- 7590 - DisableTakeOwnership disables taking ownership of existing resources 7591 - during the Helm install action. Defaults to false. 7592 - type: boolean 7593 - disableWait: 7594 + ValuesKey is the data key where the values.yaml or a specific value can be 7595 + found at. Defaults to 'values.yaml'. 7596 + maxLength: 253 7597 + pattern: ^[\-._a-zA-Z0-9]+$ 7598 + type: string 7599 + required: 7600 + - kind 7601 + - name 7602 + type: object 7603 + type: array 7604 + waitStrategy: 7605 + description: |- 7606 + WaitStrategy defines Helm's wait strategy for waiting for applied 7607 + resources to become ready. 7608 + properties: 7609 + name: 7610 + description: |- 7611 + Name is Helm's wait strategy for waiting for applied resources to 7612 + become ready. One of 'poller' or 'legacy'. The 'poller' strategy uses 7613 + kstatus to poll resource statuses, while the 'legacy' strategy uses 7614 + Helm v3's waiting logic. 7615 + Defaults to 'poller', or to 'legacy' when UseHelm3Defaults feature 7616 + gate is enabled. 7617 + enum: 7618 + - poller 7619 + - legacy 7620 + type: string 7621 + required: 7622 + - name 7623 + type: object 7624 + required: 7625 + - interval 7626 + type: object 7627 + x-kubernetes-validations: 7628 + - message: either chart or chartRef must be set 7629 + rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) 7630 + && has(self.chartRef)) 7631 + status: 7632 + default: 7633 + observedGeneration: -1 7634 + description: HelmReleaseStatus defines the observed state of a HelmRelease. 7635 + properties: 7636 + conditions: 7637 + description: Conditions holds the conditions for the HelmRelease. 7638 + items: 7639 + description: Condition contains details for one aspect of the current 7640 + state of this API Resource. 7641 + properties: 7642 + lastTransitionTime: 7643 description: |- 7644 - DisableWait disables the waiting for resources to be ready after a Helm 7645 - install has been performed. 7646 - type: boolean 7647 - disableWaitForJobs: 7648 + lastTransitionTime is the last time the condition transitioned from one status to another. 7649 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 7650 + format: date-time 7651 + type: string 7652 + message: 7653 description: |- 7654 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 7655 - install has been performed. 7656 - type: boolean 7657 - remediation: 7658 + message is a human readable message indicating details about the transition. 7659 + This may be an empty string. 7660 + maxLength: 32768 7661 + type: string 7662 + observedGeneration: 7663 description: |- 7664 - Remediation holds the remediation configuration for when the Helm install 7665 - action for the HelmRelease fails. The default is to not perform any action. 7666 - properties: 7667 - ignoreTestFailures: 7668 - description: |- 7669 - IgnoreTestFailures tells the controller to skip remediation when the Helm 7670 - tests are run after an install action but fail. Defaults to 7671 - 'Test.IgnoreFailures'. 7672 - type: boolean 7673 - remediateLastFailure: 7674 - description: |- 7675 - RemediateLastFailure tells the controller to remediate the last failure, when 7676 - no retries remain. Defaults to 'false'. 7677 - type: boolean 7678 - retries: 7679 - description: |- 7680 - Retries is the number of retries that should be attempted on failures before 7681 - bailing. Remediation, using an uninstall, is performed between each attempt. 7682 - Defaults to '0', a negative integer equals to unlimited retries. 7683 - type: integer 7684 - type: object 7685 - replace: 7686 + observedGeneration represents the .metadata.generation that the condition was set based upon. 7687 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 7688 + with respect to the current state of the instance. 7689 + format: int64 7690 + minimum: 0 7691 + type: integer 7692 + reason: 7693 description: |- 7694 - Replace tells the Helm install action to re-use the 'ReleaseName', but only 7695 - if that name is a deleted release which remains in the history. 7696 - type: boolean 7697 - serverSideApply: 7698 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 7699 + Producers of specific condition types may define expected values and meanings for this field, 7700 + and whether the values are considered a guaranteed API. 7701 + The value should be a CamelCase string. 7702 + This field may not be empty. 7703 + maxLength: 1024 7704 + minLength: 1 7705 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 7706 + type: string 7707 + status: 7708 + description: status of the condition, one of True, False, Unknown. 7709 + enum: 7710 + - "True" 7711 + - "False" 7712 + - Unknown 7713 + type: string 7714 + type: 7715 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 7716 + maxLength: 316 7717 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 7718 + type: string 7719 + required: 7720 + - lastTransitionTime 7721 + - message 7722 + - reason 7723 + - status 7724 + - type 7725 + type: object 7726 + type: array 7727 + failures: 7728 + description: |- 7729 + Failures is the reconciliation failure count against the latest desired 7730 + state. It is reset after a successful reconciliation. 7731 + format: int64 7732 + type: integer 7733 + helmChart: 7734 + description: |- 7735 + HelmChart is the namespaced name of the HelmChart resource created by 7736 + the controller for the HelmRelease. 7737 + type: string 7738 + history: 7739 + description: |- 7740 + History holds the history of Helm releases performed for this HelmRelease 7741 + up to the last successfully completed release. 7742 + items: 7743 + description: |- 7744 + Snapshot captures a point-in-time copy of the status information for a Helm release, 7745 + as managed by the controller. 7746 + properties: 7747 + action: 7748 + description: Action is the action that resulted in this snapshot 7749 + being created. 7750 + type: string 7751 + apiVersion: 7752 description: |- 7753 - ServerSideApply enables server-side apply for resources during install. 7754 - Defaults to true (or false when UseHelm3Defaults feature gate is enabled). 7755 - type: boolean 7756 - skipCRDs: 7757 + APIVersion is the API version of the Snapshot. 7758 + When the calculation method of the Digest field is changed, this 7759 + field will be used to distinguish between the old and new methods. 7760 + type: string 7761 + appVersion: 7762 + description: AppVersion is the chart app version of the release 7763 + object in storage. 7764 + type: string 7765 + chartName: 7766 + description: ChartName is the chart name of the release object 7767 + in storage. 7768 + type: string 7769 + chartVersion: 7770 description: |- 7771 - SkipCRDs tells the Helm install action to not install any CRDs. By default, 7772 - CRDs are installed if not already present. 7773 - 7774 - Deprecated use CRD policy (`crds`) attribute with value `Skip` instead. 7775 - type: boolean 7776 - strategy: 7777 + ChartVersion is the chart version of the release object in 7778 + storage. 7779 + type: string 7780 + configDigest: 7781 description: |- 7782 - Strategy defines the install strategy to use for this HelmRelease. 7783 - Defaults to 'RemediateOnFailure'. 7784 - properties: 7785 - name: 7786 - description: Name of the install strategy. 7787 - enum: 7788 - - RemediateOnFailure 7789 - - RetryOnFailure 7790 - type: string 7791 - retryInterval: 7792 - description: |- 7793 - RetryInterval is the interval at which to retry a failed install. 7794 - Can be used only when Name is set to RetryOnFailure. 7795 - Defaults to '5m'. 7796 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7797 - type: string 7798 - required: 7799 - - name 7800 - type: object 7801 - x-kubernetes-validations: 7802 - - message: .retryInterval cannot be set when .name is 'RemediateOnFailure' 7803 - rule: '!has(self.retryInterval) || self.name != ''RemediateOnFailure''' 7804 - timeout: 7805 + ConfigDigest is the checksum of the config (better known as 7806 + "values") of the release object in storage. 7807 + It has the format of `<algo>:<checksum>`. 7808 + type: string 7809 + deleted: 7810 + description: Deleted is when the release was deleted. 7811 + format: date-time 7812 + type: string 7813 + digest: 7814 description: |- 7815 - Timeout is the time to wait for any individual Kubernetes operation (like 7816 - Jobs for hooks) during the performance of a Helm install action. Defaults to 7817 - 'HelmReleaseSpec.Timeout'. 7818 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7819 + Digest is the checksum of the release object in storage. 7820 + It has the format of `<algo>:<checksum>`. 7821 type: string 7822 - type: object 7823 - interval: 7824 - description: Interval at which to reconcile the Helm release. 7825 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 7826 - type: string 7827 - kubeConfig: 7828 - description: |- 7829 - KubeConfig for reconciling the HelmRelease on a remote cluster. 7830 - When used in combination with HelmReleaseSpec.ServiceAccountName, 7831 - forces the controller to act on behalf of that Service Account at the 7832 - target cluster. 7833 - If the --default-service-account flag is set, its value will be used as 7834 - a controller level fallback for when HelmReleaseSpec.ServiceAccountName 7835 - is empty. 7836 - properties: 7837 - configMapRef: 7838 + firstDeployed: 7839 + description: FirstDeployed is when the release was first deployed. 7840 + format: date-time 7841 + type: string 7842 + lastDeployed: 7843 + description: LastDeployed is when the release was last deployed. 7844 + format: date-time 7845 + type: string 7846 + name: 7847 + description: Name is the name of the release. 7848 + type: string 7849 + namespace: 7850 + description: Namespace is the namespace the release is deployed 7851 + to. 7852 + type: string 7853 + ociDigest: 7854 + description: OCIDigest is the digest of the OCI artifact associated 7855 + with the release. 7856 + type: string 7857 + status: 7858 + description: Status is the current state of the release. 7859 + type: string 7860 + testHooks: 7861 + additionalProperties: 7862 + description: |- 7863 + TestHookStatus holds the status information for a test hook as observed 7864 + to be run by the controller. 7865 + properties: 7866 + lastCompleted: 7867 + description: LastCompleted is the time the test hook last 7868 + completed. 7869 + format: date-time 7870 + type: string 7871 + lastStarted: 7872 + description: LastStarted is the time the test hook was 7873 + last started. 7874 + format: date-time 7875 + type: string 7876 + phase: 7877 + description: Phase the test hook was observed to be in. 7878 + type: string 7879 + type: object 7880 description: |- 7881 - ConfigMapRef holds an optional name of a ConfigMap that contains 7882 - the following keys: 7883 - 7884 - - `provider`: the provider to use. One of `aws`, `azure`, `gcp`, or 7885 - `generic`. Required. 7886 - - `cluster`: the fully qualified resource name of the Kubernetes 7887 - cluster in the cloud provider API. Not used by the `generic` 7888 - provider. Required when one of `address` or `ca.crt` is not set. 7889 - - `address`: the address of the Kubernetes API server. Required 7890 - for `generic`. For the other providers, if not specified, the 7891 - first address in the cluster resource will be used, and if 7892 - specified, it must match one of the addresses in the cluster 7893 - resource. 7894 - If audiences is not set, will be used as the audience for the 7895 - `generic` provider. 7896 - - `ca.crt`: the optional PEM-encoded CA certificate for the 7897 - Kubernetes API server. If not set, the controller will use the 7898 - CA certificate from the cluster resource. 7899 - - `audiences`: the optional audiences as a list of 7900 - line-break-separated strings for the Kubernetes ServiceAccount 7901 - token. Defaults to the `address` for the `generic` provider, or 7902 - to specific values for the other providers depending on the 7903 - provider. 7904 - - `serviceAccountName`: the optional name of the Kubernetes 7905 - ServiceAccount in the same namespace that should be used 7906 - for authentication. If not specified, the controller 7907 - ServiceAccount will be used. 7908 - 7909 - Mutually exclusive with SecretRef. 7910 - properties: 7911 - name: 7912 - description: Name of the referent. 7913 - type: string 7914 - required: 7915 - - name 7916 + TestHooks is the list of test hooks for the release as observed to be 7917 + run by the controller. 7918 type: object 7919 - secretRef: 7920 - description: |- 7921 - SecretRef holds an optional name of a secret that contains a key with 7922 - the kubeconfig file as the value. If no key is set, the key will default 7923 - to 'value'. Mutually exclusive with ConfigMapRef. 7924 - It is recommended that the kubeconfig is self-contained, and the secret 7925 - is regularly updated if credentials such as a cloud-access-token expire. 7926 - Cloud specific `cmd-path` auth helpers will not function without adding 7927 - binaries and credentials to the Pod that is responsible for reconciling 7928 - Kubernetes resources. Supported only for the generic provider. 7929 + version: 7930 + description: Version is the version of the release object in 7931 + storage. 7932 + type: integer 7933 + required: 7934 + - chartName 7935 + - chartVersion 7936 + - configDigest 7937 + - digest 7938 + - firstDeployed 7939 + - lastDeployed 7940 + - name 7941 + - namespace 7942 + - status 7943 + - version 7944 + type: object 7945 + type: array 7946 + installFailures: 7947 + description: |- 7948 + InstallFailures is the install failure count against the latest desired 7949 + state. It is reset after a successful reconciliation. 7950 + format: int64 7951 + type: integer 7952 + inventory: 7953 + description: |- 7954 + Inventory contains the list of Kubernetes resource object references 7955 + that have been applied for this release. 7956 + properties: 7957 + entries: 7958 + description: Entries of Kubernetes resource object references. 7959 + items: 7960 + description: ResourceRef contains the information necessary 7961 + to locate a resource within a cluster. 7962 properties: 7963 - key: 7964 - description: Key in the Secret, when not specified an implementation-specific default key is used. 7965 + id: 7966 + description: |- 7967 + ID is the string representation of the Kubernetes resource object's metadata, 7968 + in the format '<namespace>_<name>_<group>_<kind>'. 7969 type: string 7970 - name: 7971 - description: Name of the Secret. 7972 + v: 7973 + description: Version is the API version of the Kubernetes 7974 + resource object's kind. 7975 type: string 7976 required: 7977 - - name 7978 + - id 7979 + - v 7980 type: object 7981 - type: object 7982 - x-kubernetes-validations: 7983 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must be specified 7984 - rule: has(self.configMapRef) || has(self.secretRef) 7985 - - message: exactly one of spec.kubeConfig.configMapRef or spec.kubeConfig.secretRef must be specified 7986 - rule: '!has(self.configMapRef) || !has(self.secretRef)' 7987 - maxHistory: 7988 - description: |- 7989 - MaxHistory is the number of revisions saved by Helm for this HelmRelease. 7990 - Use '0' for an unlimited number of revisions; defaults to '5'. 7991 - type: integer 7992 - persistentClient: 7993 - description: |- 7994 - PersistentClient tells the controller to use a persistent Kubernetes 7995 - client for this release. When enabled, the client will be reused for the 7996 - duration of the reconciliation, instead of being created and destroyed 7997 - for each (step of a) Helm action. 7998 + type: array 7999 + required: 8000 + - entries 8001 + type: object 8002 + lastAttemptedConfigDigest: 8003 + description: |- 8004 + LastAttemptedConfigDigest is the digest for the config (better known as 8005 + "values") of the last reconciliation attempt. 8006 + type: string 8007 + lastAttemptedGeneration: 8008 + description: |- 8009 + LastAttemptedGeneration is the last generation the controller attempted 8010 + to reconcile. 8011 + format: int64 8012 + type: integer 8013 + lastAttemptedReleaseAction: 8014 + description: |- 8015 + LastAttemptedReleaseAction is the last release action performed for this 8016 + HelmRelease. It is used to determine the active retry or remediation 8017 + strategy. 8018 + enum: 8019 + - install 8020 + - upgrade 8021 + type: string 8022 + lastAttemptedReleaseActionDuration: 8023 + description: |- 8024 + LastAttemptedReleaseActionDuration is the duration of the last 8025 + release action performed for this HelmRelease. 8026 + type: string 8027 + lastAttemptedRevision: 8028 + description: |- 8029 + LastAttemptedRevision is the Source revision of the last reconciliation 8030 + attempt. For OCIRepository sources, the 12 first characters of the digest are 8031 + appended to the chart version e.g. "1.2.3+1234567890ab". 8032 + type: string 8033 + lastAttemptedRevisionDigest: 8034 + description: |- 8035 + LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 8036 + This is only set for OCIRepository sources. 8037 + type: string 8038 + lastAttemptedValuesChecksum: 8039 + description: |- 8040 + LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 8041 + reconciliation attempt. 8042 8043 - This can improve performance, but may cause issues with some Helm charts 8044 - that for example do create Custom Resource Definitions during installation 8045 - outside Helm's CRD lifecycle hooks, which are then not observed to be 8046 - available by e.g. post-install hooks. 8047 + Deprecated: Use LastAttemptedConfigDigest instead. 8048 + type: string 8049 + lastHandledForceAt: 8050 + description: |- 8051 + LastHandledForceAt holds the value of the most recent 8052 + force request value, so a change of the annotation value 8053 + can be detected. 8054 + type: string 8055 + lastHandledReconcileAt: 8056 + description: |- 8057 + LastHandledReconcileAt holds the value of the most recent 8058 + reconcile request value, so a change of the annotation value 8059 + can be detected. 8060 + type: string 8061 + lastHandledResetAt: 8062 + description: |- 8063 + LastHandledResetAt holds the value of the most recent reset request 8064 + value, so a change of the annotation value can be detected. 8065 + type: string 8066 + lastReleaseRevision: 8067 + description: |- 8068 + LastReleaseRevision is the revision of the last successful Helm release. 8069 8070 - If not set, it defaults to true. 8071 - type: boolean 8072 - postRenderers: 8073 - description: |- 8074 - PostRenderers holds an array of Helm PostRenderers, which will be applied in order 8075 - of their definition. 8076 - items: 8077 - description: PostRenderer contains a Helm PostRenderer specification. 8078 - properties: 8079 - kustomize: 8080 - description: Kustomization to apply as PostRenderer. 8081 - properties: 8082 - images: 8083 - description: |- 8084 - Images is a list of (image name, new name, new tag or digest) 8085 - for changing image names, tags or digests. This can also be achieved with a 8086 - patch, but this operator is simpler to specify. 8087 - items: 8088 - description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag. 8089 - properties: 8090 - digest: 8091 - description: |- 8092 - Digest is the value used to replace the original image tag. 8093 - If digest is present NewTag value is ignored. 8094 - type: string 8095 - name: 8096 - description: Name is a tag-less image name. 8097 - type: string 8098 - newName: 8099 - description: NewName is the value used to replace the original name. 8100 - type: string 8101 - newTag: 8102 - description: NewTag is the value used to replace the original tag. 8103 - type: string 8104 - required: 8105 - - name 8106 - type: object 8107 - type: array 8108 - patches: 8109 - description: |- 8110 - Strategic merge and JSON patches, defined as inline YAML objects, 8111 - capable of targeting objects based on kind, label and annotation selectors. 8112 - items: 8113 - description: |- 8114 - Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should 8115 - be applied to. 8116 - properties: 8117 - patch: 8118 - description: |- 8119 - Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with 8120 - an array of operation objects. 8121 - type: string 8122 - target: 8123 - description: Target points to the resources that the patch document should be applied to. 8124 - properties: 8125 - annotationSelector: 8126 - description: |- 8127 - AnnotationSelector is a string that follows the label selection expression 8128 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8129 - It matches with the resource annotations. 8130 - type: string 8131 - group: 8132 - description: |- 8133 - Group is the API group to select resources from. 8134 - Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. 8135 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8136 - type: string 8137 - kind: 8138 - description: |- 8139 - Kind of the API Group to select resources from. 8140 - Together with Group and Version it is capable of unambiguously 8141 - identifying and/or selecting resources. 8142 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8143 - type: string 8144 - labelSelector: 8145 - description: |- 8146 - LabelSelector is a string that follows the label selection expression 8147 - https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api 8148 - It matches with the resource labels. 8149 - type: string 8150 - name: 8151 - description: Name to match resources with. 8152 - type: string 8153 - namespace: 8154 - description: Namespace to select resources from. 8155 - type: string 8156 - version: 8157 - description: |- 8158 - Version of the API Group to select resources from. 8159 - Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. 8160 - https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md 8161 - type: string 8162 - type: object 8163 - required: 8164 - - patch 8165 - type: object 8166 - type: array 8167 - type: object 8168 - type: object 8169 - type: array 8170 - releaseName: 8171 - description: |- 8172 - ReleaseName used for the Helm release. Defaults to a composition of 8173 - '[TargetNamespace-]Name'. 8174 - maxLength: 53 8175 - minLength: 1 8176 - type: string 8177 - rollback: 8178 - description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. 8179 - properties: 8180 - cleanupOnFail: 8181 - description: |- 8182 - CleanupOnFail allows deletion of new resources created during the Helm 8183 - rollback action when it fails. 8184 - type: boolean 8185 - disableHooks: 8186 - description: DisableHooks prevents hooks from running during the Helm rollback action. 8187 - type: boolean 8188 - disableWait: 8189 - description: |- 8190 - DisableWait disables the waiting for resources to be ready after a Helm 8191 - rollback has been performed. 8192 - type: boolean 8193 - disableWaitForJobs: 8194 - description: |- 8195 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 8196 - rollback has been performed. 8197 - type: boolean 8198 - force: 8199 - description: Force forces resource updates through a replacement strategy. 8200 - type: boolean 8201 - recreate: 8202 - description: |- 8203 - Recreate performs pod restarts for any managed workloads. 8204 - 8205 - Deprecated: This behavior was deprecated in Helm 3: 8206 - - Deprecation: https://github.com/helm/helm/pull/6463 8207 - - Removal: https://github.com/helm/helm/pull/31023 8208 - After helm-controller was upgraded to the Helm 4 SDK, 8209 - this field is no longer functional and will print a 8210 - warning if set to true. It will also be removed in a 8211 - future release. 8212 - type: boolean 8213 - serverSideApply: 8214 - description: |- 8215 - ServerSideApply enables server-side apply for resources during rollback. 8216 - Can be "enabled", "disabled", or "auto". 8217 - When "auto", server-side apply usage will be based on the release's previous usage. 8218 - Defaults to "auto". 8219 - enum: 8220 - - enabled 8221 - - disabled 8222 - - auto 8223 - type: string 8224 - timeout: 8225 - description: |- 8226 - Timeout is the time to wait for any individual Kubernetes operation (like 8227 - Jobs for hooks) during the performance of a Helm rollback action. Defaults to 8228 - 'HelmReleaseSpec.Timeout'. 8229 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8230 - type: string 8231 - type: object 8232 - serviceAccountName: 8233 - description: |- 8234 - The name of the Kubernetes service account to impersonate 8235 - when reconciling this HelmRelease. 8236 - maxLength: 253 8237 - minLength: 1 8238 - type: string 8239 - storageNamespace: 8240 - description: |- 8241 - StorageNamespace used for the Helm storage. 8242 - Defaults to the namespace of the HelmRelease. 8243 - maxLength: 63 8244 - minLength: 1 8245 - type: string 8246 - suspend: 8247 - description: |- 8248 - Suspend tells the controller to suspend reconciliation for this HelmRelease, 8249 - it does not apply to already started reconciliations. Defaults to false. 8250 - type: boolean 8251 - targetNamespace: 8252 - description: |- 8253 - TargetNamespace to target when performing operations for the HelmRelease. 8254 - Defaults to the namespace of the HelmRelease. 8255 - maxLength: 63 8256 - minLength: 1 8257 - type: string 8258 - test: 8259 - description: Test holds the configuration for Helm test actions for this HelmRelease. 8260 - properties: 8261 - enable: 8262 - description: |- 8263 - Enable enables Helm test actions for this HelmRelease after an Helm install 8264 - or upgrade action has been performed. 8265 - type: boolean 8266 - filters: 8267 - description: Filters is a list of tests to run or exclude from running. 8268 - items: 8269 - description: Filter holds the configuration for individual Helm test filters. 8270 - properties: 8271 - exclude: 8272 - description: Exclude specifies whether the named test should be excluded. 8273 - type: boolean 8274 - name: 8275 - description: Name is the name of the test. 8276 - maxLength: 253 8277 - minLength: 1 8278 - type: string 8279 - required: 8280 - - name 8281 - type: object 8282 - type: array 8283 - ignoreFailures: 8284 - description: |- 8285 - IgnoreFailures tells the controller to skip remediation when the Helm tests 8286 - are run but fail. Can be overwritten for tests run after install or upgrade 8287 - actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. 8288 - type: boolean 8289 - timeout: 8290 - description: |- 8291 - Timeout is the time to wait for any individual Kubernetes operation during 8292 - the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. 8293 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8294 - type: string 8295 - type: object 8296 - timeout: 8297 - description: |- 8298 - Timeout is the time to wait for any individual Kubernetes operation (like Jobs 8299 - for hooks) during the performance of a Helm action. Defaults to '5m0s'. 8300 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8301 - type: string 8302 - uninstall: 8303 - description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. 8304 - properties: 8305 - deletionPropagation: 8306 - default: background 8307 - description: |- 8308 - DeletionPropagation specifies the deletion propagation policy when 8309 - a Helm uninstall is performed. 8310 - enum: 8311 - - background 8312 - - foreground 8313 - - orphan 8314 - type: string 8315 - disableHooks: 8316 - description: DisableHooks prevents hooks from running during the Helm rollback action. 8317 - type: boolean 8318 - disableWait: 8319 - description: |- 8320 - DisableWait disables waiting for all the resources to be deleted after 8321 - a Helm uninstall is performed. 8322 - type: boolean 8323 - keepHistory: 8324 - description: |- 8325 - KeepHistory tells Helm to remove all associated resources and mark the 8326 - release as deleted, but retain the release history. 8327 - type: boolean 8328 - timeout: 8329 - description: |- 8330 - Timeout is the time to wait for any individual Kubernetes operation (like 8331 - Jobs for hooks) during the performance of a Helm uninstall action. Defaults 8332 - to 'HelmReleaseSpec.Timeout'. 8333 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8334 - type: string 8335 - type: object 8336 - upgrade: 8337 - description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. 8338 - properties: 8339 - cleanupOnFail: 8340 - description: |- 8341 - CleanupOnFail allows deletion of new resources created during the Helm 8342 - upgrade action when it fails. 8343 - type: boolean 8344 - crds: 8345 - description: |- 8346 - CRDs upgrade CRDs from the Helm Chart's crds directory according 8347 - to the CRD upgrade policy provided here. Valid values are `Skip`, 8348 - `Create` or `CreateReplace`. Default is `Skip` and if omitted 8349 - CRDs are neither installed nor upgraded. 8350 - 8351 - Skip: do neither install nor replace (update) any CRDs. 8352 - 8353 - Create: new CRDs are created, existing CRDs are neither updated nor deleted. 8354 - 8355 - CreateReplace: new CRDs are created, existing CRDs are updated (replaced) 8356 - but not deleted. 8357 - 8358 - By default, CRDs are not applied during Helm upgrade action. With this 8359 - option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. 8360 - https://helm.sh/docs/chart_best_practices/custom_resource_definitions. 8361 - enum: 8362 - - Skip 8363 - - Create 8364 - - CreateReplace 8365 - type: string 8366 - disableHooks: 8367 - description: DisableHooks prevents hooks from running during the Helm upgrade action. 8368 - type: boolean 8369 - disableOpenAPIValidation: 8370 - description: |- 8371 - DisableOpenAPIValidation prevents the Helm upgrade action from validating 8372 - rendered templates against the Kubernetes OpenAPI Schema. 8373 - type: boolean 8374 - disableSchemaValidation: 8375 - description: |- 8376 - DisableSchemaValidation prevents the Helm upgrade action from validating 8377 - the values against the JSON Schema. 8378 - type: boolean 8379 - disableTakeOwnership: 8380 - description: |- 8381 - DisableTakeOwnership disables taking ownership of existing resources 8382 - during the Helm upgrade action. Defaults to false. 8383 - type: boolean 8384 - disableWait: 8385 - description: |- 8386 - DisableWait disables the waiting for resources to be ready after a Helm 8387 - upgrade has been performed. 8388 - type: boolean 8389 - disableWaitForJobs: 8390 - description: |- 8391 - DisableWaitForJobs disables waiting for jobs to complete after a Helm 8392 - upgrade has been performed. 8393 - type: boolean 8394 - force: 8395 - description: Force forces resource updates through a replacement strategy. 8396 - type: boolean 8397 - preserveValues: 8398 - description: |- 8399 - PreserveValues will make Helm reuse the last release's values and merge in 8400 - overrides from 'Values'. Setting this flag makes the HelmRelease 8401 - non-declarative. 8402 - type: boolean 8403 - remediation: 8404 - description: |- 8405 - Remediation holds the remediation configuration for when the Helm upgrade 8406 - action for the HelmRelease fails. The default is to not perform any action. 8407 - properties: 8408 - ignoreTestFailures: 8409 - description: |- 8410 - IgnoreTestFailures tells the controller to skip remediation when the Helm 8411 - tests are run after an upgrade action but fail. 8412 - Defaults to 'Test.IgnoreFailures'. 8413 - type: boolean 8414 - remediateLastFailure: 8415 - description: |- 8416 - RemediateLastFailure tells the controller to remediate the last failure, when 8417 - no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. 8418 - type: boolean 8419 - retries: 8420 - description: |- 8421 - Retries is the number of retries that should be attempted on failures before 8422 - bailing. Remediation, using 'Strategy', is performed between each attempt. 8423 - Defaults to '0', a negative integer equals to unlimited retries. 8424 - type: integer 8425 - strategy: 8426 - description: Strategy to use for failure remediation. Defaults to 'rollback'. 8427 - enum: 8428 - - rollback 8429 - - uninstall 8430 - type: string 8431 - type: object 8432 - serverSideApply: 8433 - description: |- 8434 - ServerSideApply enables server-side apply for resources during upgrade. 8435 - Can be "enabled", "disabled", or "auto". 8436 - When "auto", server-side apply usage will be based on the release's previous usage. 8437 - Defaults to "auto". 8438 - enum: 8439 - - enabled 8440 - - disabled 8441 - - auto 8442 - type: string 8443 - strategy: 8444 - description: |- 8445 - Strategy defines the upgrade strategy to use for this HelmRelease. 8446 - Defaults to 'RemediateOnFailure'. 8447 - properties: 8448 - name: 8449 - description: Name of the upgrade strategy. 8450 - enum: 8451 - - RemediateOnFailure 8452 - - RetryOnFailure 8453 - type: string 8454 - retryInterval: 8455 - description: |- 8456 - RetryInterval is the interval at which to retry a failed upgrade. 8457 - Can be used only when Name is set to RetryOnFailure. 8458 - Defaults to '5m'. 8459 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8460 - type: string 8461 - required: 8462 - - name 8463 - type: object 8464 - x-kubernetes-validations: 8465 - - message: .retryInterval can only be set when .name is 'RetryOnFailure' 8466 - rule: '!has(self.retryInterval) || self.name == ''RetryOnFailure''' 8467 - timeout: 8468 - description: |- 8469 - Timeout is the time to wait for any individual Kubernetes operation (like 8470 - Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 8471 - 'HelmReleaseSpec.Timeout'. 8472 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 8473 - type: string 8474 - type: object 8475 - values: 8476 - description: Values holds the values for this Helm release. 8477 - x-kubernetes-preserve-unknown-fields: true 8478 - valuesFrom: 8479 - description: |- 8480 - ValuesFrom holds references to resources containing Helm values for this HelmRelease, 8481 - and information about how they should be merged. 8482 - items: 8483 - description: |- 8484 - ValuesReference contains a reference to a resource containing Helm values, 8485 - and optionally the key they can be found at. 8486 - properties: 8487 - kind: 8488 - description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). 8489 - enum: 8490 - - Secret 8491 - - ConfigMap 8492 - type: string 8493 - name: 8494 - description: |- 8495 - Name of the values referent. Should reside in the same namespace as the 8496 - referring resource. 8497 - maxLength: 253 8498 - minLength: 1 8499 - type: string 8500 - optional: 8501 - description: |- 8502 - Optional marks this ValuesReference as optional. When set, a not found error 8503 - for the values reference is ignored, but any ValuesKey, TargetPath or 8504 - transient error will still result in a reconciliation failure. 8505 - type: boolean 8506 - targetPath: 8507 - description: |- 8508 - TargetPath is the YAML dot notation path the value should be merged at. When 8509 - set, the ValuesKey is expected to be a single flat value. Defaults to 'None', 8510 - which results in the values getting merged at the root. 8511 - maxLength: 250 8512 - pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$ 8513 - type: string 8514 - valuesKey: 8515 - description: |- 8516 - ValuesKey is the data key where the values.yaml or a specific value can be 8517 - found at. Defaults to 'values.yaml'. 8518 - maxLength: 253 8519 - pattern: ^[\-._a-zA-Z0-9]+$ 8520 - type: string 8521 - required: 8522 - - kind 8523 - - name 8524 - type: object 8525 - type: array 8526 - waitStrategy: 8527 - description: |- 8528 - WaitStrategy defines Helm's wait strategy for waiting for applied 8529 - resources to become ready. 8530 - properties: 8531 - name: 8532 - description: |- 8533 - Name is Helm's wait strategy for waiting for applied resources to 8534 - become ready. One of 'poller' or 'legacy'. The 'poller' strategy uses 8535 - kstatus to poll resource statuses, while the 'legacy' strategy uses 8536 - Helm v3's waiting logic. 8537 - Defaults to 'poller', or to 'legacy' when UseHelm3Defaults feature 8538 - gate is enabled. 8539 - enum: 8540 - - poller 8541 - - legacy 8542 - type: string 8543 - required: 8544 - - name 8545 - type: object 8546 - required: 8547 - - interval 8548 - type: object 8549 - x-kubernetes-validations: 8550 - - message: either chart or chartRef must be set 8551 - rule: (has(self.chart) && !has(self.chartRef)) || (!has(self.chart) && has(self.chartRef)) 8552 - status: 8553 - default: 8554 - observedGeneration: -1 8555 - description: HelmReleaseStatus defines the observed state of a HelmRelease. 8556 - properties: 8557 - conditions: 8558 - description: Conditions holds the conditions for the HelmRelease. 8559 - items: 8560 - description: Condition contains details for one aspect of the current state of this API Resource. 8561 - properties: 8562 - lastTransitionTime: 8563 - description: |- 8564 - lastTransitionTime is the last time the condition transitioned from one status to another. 8565 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 8566 - format: date-time 8567 - type: string 8568 - message: 8569 - description: |- 8570 - message is a human readable message indicating details about the transition. 8571 - This may be an empty string. 8572 - maxLength: 32768 8573 - type: string 8574 - observedGeneration: 8575 - description: |- 8576 - observedGeneration represents the .metadata.generation that the condition was set based upon. 8577 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 8578 - with respect to the current state of the instance. 8579 - format: int64 8580 - minimum: 0 8581 - type: integer 8582 - reason: 8583 - description: |- 8584 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 8585 - Producers of specific condition types may define expected values and meanings for this field, 8586 - and whether the values are considered a guaranteed API. 8587 - The value should be a CamelCase string. 8588 - This field may not be empty. 8589 - maxLength: 1024 8590 - minLength: 1 8591 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 8592 - type: string 8593 - status: 8594 - description: status of the condition, one of True, False, Unknown. 8595 - enum: 8596 - - "True" 8597 - - "False" 8598 - - Unknown 8599 - type: string 8600 - type: 8601 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 8602 - maxLength: 316 8603 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 8604 - type: string 8605 - required: 8606 - - lastTransitionTime 8607 - - message 8608 - - reason 8609 - - status 8610 - - type 8611 - type: object 8612 - type: array 8613 - failures: 8614 - description: |- 8615 - Failures is the reconciliation failure count against the latest desired 8616 - state. It is reset after a successful reconciliation. 8617 - format: int64 8618 - type: integer 8619 - helmChart: 8620 - description: |- 8621 - HelmChart is the namespaced name of the HelmChart resource created by 8622 - the controller for the HelmRelease. 8623 - type: string 8624 - history: 8625 - description: |- 8626 - History holds the history of Helm releases performed for this HelmRelease 8627 - up to the last successfully completed release. 8628 - items: 8629 - description: |- 8630 - Snapshot captures a point-in-time copy of the status information for a Helm release, 8631 - as managed by the controller. 8632 - properties: 8633 - action: 8634 - description: Action is the action that resulted in this snapshot being created. 8635 - type: string 8636 - apiVersion: 8637 - description: |- 8638 - APIVersion is the API version of the Snapshot. 8639 - When the calculation method of the Digest field is changed, this 8640 - field will be used to distinguish between the old and new methods. 8641 - type: string 8642 - appVersion: 8643 - description: AppVersion is the chart app version of the release object in storage. 8644 - type: string 8645 - chartName: 8646 - description: ChartName is the chart name of the release object in storage. 8647 - type: string 8648 - chartVersion: 8649 - description: |- 8650 - ChartVersion is the chart version of the release object in 8651 - storage. 8652 - type: string 8653 - configDigest: 8654 - description: |- 8655 - ConfigDigest is the checksum of the config (better known as 8656 - "values") of the release object in storage. 8657 - It has the format of `<algo>:<checksum>`. 8658 - type: string 8659 - deleted: 8660 - description: Deleted is when the release was deleted. 8661 - format: date-time 8662 - type: string 8663 - digest: 8664 - description: |- 8665 - Digest is the checksum of the release object in storage. 8666 - It has the format of `<algo>:<checksum>`. 8667 - type: string 8668 - firstDeployed: 8669 - description: FirstDeployed is when the release was first deployed. 8670 - format: date-time 8671 - type: string 8672 - lastDeployed: 8673 - description: LastDeployed is when the release was last deployed. 8674 - format: date-time 8675 - type: string 8676 - name: 8677 - description: Name is the name of the release. 8678 - type: string 8679 - namespace: 8680 - description: Namespace is the namespace the release is deployed to. 8681 - type: string 8682 - ociDigest: 8683 - description: OCIDigest is the digest of the OCI artifact associated with the release. 8684 - type: string 8685 - status: 8686 - description: Status is the current state of the release. 8687 - type: string 8688 - testHooks: 8689 - additionalProperties: 8690 - description: |- 8691 - TestHookStatus holds the status information for a test hook as observed 8692 - to be run by the controller. 8693 - properties: 8694 - lastCompleted: 8695 - description: LastCompleted is the time the test hook last completed. 8696 - format: date-time 8697 - type: string 8698 - lastStarted: 8699 - description: LastStarted is the time the test hook was last started. 8700 - format: date-time 8701 - type: string 8702 - phase: 8703 - description: Phase the test hook was observed to be in. 8704 - type: string 8705 - type: object 8706 - description: |- 8707 - TestHooks is the list of test hooks for the release as observed to be 8708 - run by the controller. 8709 - type: object 8710 - version: 8711 - description: Version is the version of the release object in storage. 8712 - type: integer 8713 - required: 8714 - - chartName 8715 - - chartVersion 8716 - - configDigest 8717 - - digest 8718 - - firstDeployed 8719 - - lastDeployed 8720 - - name 8721 - - namespace 8722 - - status 8723 - - version 8724 - type: object 8725 - type: array 8726 - installFailures: 8727 - description: |- 8728 - InstallFailures is the install failure count against the latest desired 8729 - state. It is reset after a successful reconciliation. 8730 - format: int64 8731 - type: integer 8732 - inventory: 8733 - description: |- 8734 - Inventory contains the list of Kubernetes resource object references 8735 - that have been applied for this release. 8736 - properties: 8737 - entries: 8738 - description: Entries of Kubernetes resource object references. 8739 - items: 8740 - description: ResourceRef contains the information necessary to locate a resource within a cluster. 8741 - properties: 8742 - id: 8743 - description: |- 8744 - ID is the string representation of the Kubernetes resource object's metadata, 8745 - in the format '<namespace>_<name>_<group>_<kind>'. 8746 - type: string 8747 - v: 8748 - description: Version is the API version of the Kubernetes resource object's kind. 8749 - type: string 8750 - required: 8751 - - id 8752 - - v 8753 - type: object 8754 - type: array 8755 - required: 8756 - - entries 8757 - type: object 8758 - lastAttemptedConfigDigest: 8759 - description: |- 8760 - LastAttemptedConfigDigest is the digest for the config (better known as 8761 - "values") of the last reconciliation attempt. 8762 - type: string 8763 - lastAttemptedGeneration: 8764 - description: |- 8765 - LastAttemptedGeneration is the last generation the controller attempted 8766 - to reconcile. 8767 - format: int64 8768 - type: integer 8769 - lastAttemptedReleaseAction: 8770 - description: |- 8771 - LastAttemptedReleaseAction is the last release action performed for this 8772 - HelmRelease. It is used to determine the active retry or remediation 8773 - strategy. 8774 - enum: 8775 - - install 8776 - - upgrade 8777 - type: string 8778 - lastAttemptedReleaseActionDuration: 8779 - description: |- 8780 - LastAttemptedReleaseActionDuration is the duration of the last 8781 - release action performed for this HelmRelease. 8782 - type: string 8783 - lastAttemptedRevision: 8784 - description: |- 8785 - LastAttemptedRevision is the Source revision of the last reconciliation 8786 - attempt. For OCIRepository sources, the 12 first characters of the digest are 8787 - appended to the chart version e.g. "1.2.3+1234567890ab". 8788 - type: string 8789 - lastAttemptedRevisionDigest: 8790 - description: |- 8791 - LastAttemptedRevisionDigest is the digest of the last reconciliation attempt. 8792 - This is only set for OCIRepository sources. 8793 - type: string 8794 - lastAttemptedValuesChecksum: 8795 - description: |- 8796 - LastAttemptedValuesChecksum is the SHA1 checksum for the values of the last 8797 - reconciliation attempt. 8798 - 8799 - Deprecated: Use LastAttemptedConfigDigest instead. 8800 - type: string 8801 - lastHandledForceAt: 8802 - description: |- 8803 - LastHandledForceAt holds the value of the most recent 8804 - force request value, so a change of the annotation value 8805 - can be detected. 8806 - type: string 8807 - lastHandledReconcileAt: 8808 - description: |- 8809 - LastHandledReconcileAt holds the value of the most recent 8810 - reconcile request value, so a change of the annotation value 8811 - can be detected. 8812 - type: string 8813 - lastHandledResetAt: 8814 - description: |- 8815 - LastHandledResetAt holds the value of the most recent reset request 8816 - value, so a change of the annotation value can be detected. 8817 - type: string 8818 - lastReleaseRevision: 8819 - description: |- 8820 - LastReleaseRevision is the revision of the last successful Helm release. 8821 - 8822 - Deprecated: Use History instead. 8823 - type: integer 8824 - observedCommonMetadataDigest: 8825 - description: |- 8826 - ObservedCommonMetadataDigest is the digest for the common metadata of 8827 - the last successful reconciliation attempt. 8828 - type: string 8829 - observedGeneration: 8830 - description: ObservedGeneration is the last observed generation. 8831 - format: int64 8832 - type: integer 8833 - observedPostRenderersDigest: 8834 - description: |- 8835 - ObservedPostRenderersDigest is the digest for the post-renderers of 8836 - the last successful reconciliation attempt. 8837 - type: string 8838 - storageNamespace: 8839 - description: |- 8840 - StorageNamespace is the namespace of the Helm release storage for the 8841 - current release. 8842 - maxLength: 63 8843 - minLength: 1 8844 - type: string 8845 - upgradeFailures: 8846 - description: |- 8847 - UpgradeFailures is the upgrade failure count against the latest desired 8848 - state. It is reset after a successful reconciliation. 8849 - format: int64 8850 - type: integer 8851 - type: object 8852 - type: object 8853 - served: true 8854 - storage: true 8855 - subresources: 8856 - status: {} 8857 + Deprecated: Use History instead. 8858 + type: integer 8859 + observedCommonMetadataDigest: 8860 + description: |- 8861 + ObservedCommonMetadataDigest is the digest for the common metadata of 8862 + the last successful reconciliation attempt. 8863 + type: string 8864 + observedGeneration: 8865 + description: ObservedGeneration is the last observed generation. 8866 + format: int64 8867 + type: integer 8868 + observedPostRenderersDigest: 8869 + description: |- 8870 + ObservedPostRenderersDigest is the digest for the post-renderers of 8871 + the last successful reconciliation attempt. 8872 + type: string 8873 + storageNamespace: 8874 + description: |- 8875 + StorageNamespace is the namespace of the Helm release storage for the 8876 + current release. 8877 + maxLength: 63 8878 + minLength: 1 8879 + type: string 8880 + upgradeFailures: 8881 + description: |- 8882 + UpgradeFailures is the upgrade failure count against the latest desired 8883 + state. It is reset after a successful reconciliation. 8884 + format: int64 8885 + type: integer 8886 + type: object 8887 + type: object 8888 + served: true 8889 + storage: true 8890 + subresources: 8891 + status: {} 8892 --- 8893 apiVersion: v1 8894 kind: ServiceAccount 8895 @@ -4778,7 +4886,7 @@ metadata: 8896 app.kubernetes.io/component: helm-controller 8897 app.kubernetes.io/instance: flux-system 8898 app.kubernetes.io/part-of: flux 8899 - app.kubernetes.io/version: v2.8.0 8900 + app.kubernetes.io/version: v2.8.1 8901 name: helm-controller 8902 namespace: flux-system 8903 --- 8904 @@ -4789,7 +4897,7 @@ metadata: 8905 app.kubernetes.io/component: helm-controller 8906 app.kubernetes.io/instance: flux-system 8907 app.kubernetes.io/part-of: flux 8908 - app.kubernetes.io/version: v2.8.0 8909 + app.kubernetes.io/version: v2.8.1 8910 control-plane: controller 8911 name: helm-controller 8912 namespace: flux-system 8913 @@ -4808,62 +4916,62 @@ spec: 8914 app.kubernetes.io/component: helm-controller 8915 app.kubernetes.io/instance: flux-system 8916 app.kubernetes.io/part-of: flux 8917 - app.kubernetes.io/version: v2.8.0 8918 + app.kubernetes.io/version: v2.8.1 8919 spec: 8920 containers: 8921 - - args: 8922 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 8923 - - --watch-all-namespaces=true 8924 - - --log-level=info 8925 - - --log-encoding=json 8926 - - --enable-leader-election 8927 - env: 8928 - - name: RUNTIME_NAMESPACE 8929 - valueFrom: 8930 - fieldRef: 8931 - fieldPath: metadata.namespace 8932 - - name: GOMEMLIMIT 8933 - valueFrom: 8934 - resourceFieldRef: 8935 - containerName: manager 8936 - resource: limits.memory 8937 - image: ghcr.io/fluxcd/helm-controller:v1.5.0 8938 - imagePullPolicy: IfNotPresent 8939 - livenessProbe: 8940 - httpGet: 8941 - path: /healthz 8942 - port: healthz 8943 - name: manager 8944 - ports: 8945 - - containerPort: 8080 8946 - name: http-prom 8947 - protocol: TCP 8948 - - containerPort: 9440 8949 - name: healthz 8950 - protocol: TCP 8951 - readinessProbe: 8952 - httpGet: 8953 - path: /readyz 8954 - port: healthz 8955 - resources: 8956 - limits: 8957 - cpu: 1000m 8958 - memory: 1Gi 8959 - requests: 8960 - cpu: 100m 8961 - memory: 64Mi 8962 - securityContext: 8963 - allowPrivilegeEscalation: false 8964 - capabilities: 8965 - drop: 8966 - - ALL 8967 - readOnlyRootFilesystem: true 8968 - runAsNonRoot: true 8969 - seccompProfile: 8970 - type: RuntimeDefault 8971 - volumeMounts: 8972 - - mountPath: /tmp 8973 - name: temp 8974 + - args: 8975 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 8976 + - --watch-all-namespaces=true 8977 + - --log-level=info 8978 + - --log-encoding=json 8979 + - --enable-leader-election 8980 + env: 8981 + - name: RUNTIME_NAMESPACE 8982 + valueFrom: 8983 + fieldRef: 8984 + fieldPath: metadata.namespace 8985 + - name: GOMEMLIMIT 8986 + valueFrom: 8987 + resourceFieldRef: 8988 + containerName: manager 8989 + resource: limits.memory 8990 + image: ghcr.io/fluxcd/helm-controller:v1.5.1 8991 + imagePullPolicy: IfNotPresent 8992 + livenessProbe: 8993 + httpGet: 8994 + path: /healthz 8995 + port: healthz 8996 + name: manager 8997 + ports: 8998 + - containerPort: 8080 8999 + name: http-prom 9000 + protocol: TCP 9001 + - containerPort: 9440 9002 + name: healthz 9003 + protocol: TCP 9004 + readinessProbe: 9005 + httpGet: 9006 + path: /readyz 9007 + port: healthz 9008 + resources: 9009 + limits: 9010 + cpu: 1000m 9011 + memory: 1Gi 9012 + requests: 9013 + cpu: 100m 9014 + memory: 64Mi 9015 + securityContext: 9016 + allowPrivilegeEscalation: false 9017 + capabilities: 9018 + drop: 9019 + - ALL 9020 + readOnlyRootFilesystem: true 9021 + runAsNonRoot: true 9022 + seccompProfile: 9023 + type: RuntimeDefault 9024 + volumeMounts: 9025 + - mountPath: /tmp 9026 + name: temp 9027 nodeSelector: 9028 kubernetes.io/os: linux 9029 priorityClassName: system-cluster-critical 9030 @@ -4872,8 +4980,8 @@ spec: 9031 serviceAccountName: helm-controller 9032 terminationGracePeriodSeconds: 600 9033 volumes: 9034 - - emptyDir: {} 9035 - name: temp 9036 + - emptyDir: {} 9037 + name: temp 9038 --- 9039 apiVersion: apiextensions.k8s.io/v1 9040 kind: CustomResourceDefinition 9041 @@ -4884,7 +4992,7 @@ metadata: 9042 app.kubernetes.io/component: notification-controller 9043 app.kubernetes.io/instance: flux-system 9044 app.kubernetes.io/part-of: flux 9045 - app.kubernetes.io/version: v2.8.0 9046 + app.kubernetes.io/version: v2.8.1 9047 name: alerts.notification.toolkit.fluxcd.io 9048 spec: 9049 group: notification.toolkit.fluxcd.io 9050 @@ -4895,373 +5003,379 @@ spec: 9051 singular: alert 9052 scope: Namespaced 9053 versions: 9054 - - additionalPrinterColumns: 9055 - - jsonPath: .metadata.creationTimestamp 9056 - name: Age 9057 - type: date 9058 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9059 - name: Ready 9060 - type: string 9061 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9062 - name: Status 9063 - type: string 9064 - deprecated: true 9065 - deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 9066 - name: v1beta2 9067 - schema: 9068 - openAPIV3Schema: 9069 - description: Alert is the Schema for the alerts API 9070 - properties: 9071 - apiVersion: 9072 - description: |- 9073 - APIVersion defines the versioned schema of this representation of an object. 9074 - Servers should convert recognized schemas to the latest internal value, and 9075 - may reject unrecognized values. 9076 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9077 - type: string 9078 - kind: 9079 - description: |- 9080 - Kind is a string value representing the REST resource this object represents. 9081 - Servers may infer this from the endpoint the client submits requests to. 9082 - Cannot be updated. 9083 - In CamelCase. 9084 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9085 - type: string 9086 - metadata: 9087 - type: object 9088 - spec: 9089 - description: AlertSpec defines an alerting rule for events involving a list of objects. 9090 - properties: 9091 - eventMetadata: 9092 - additionalProperties: 9093 - type: string 9094 - description: |- 9095 - EventMetadata is an optional field for adding metadata to events dispatched by the 9096 - controller. This can be used for enhancing the context of the event. If a field 9097 - would override one already present on the original event as generated by the emitter, 9098 - then the override doesn't happen, i.e. the original value is preserved, and an info 9099 - log is printed. 9100 - type: object 9101 - eventSeverity: 9102 - default: info 9103 - description: |- 9104 - EventSeverity specifies how to filter events based on severity. 9105 - If set to 'info' no events will be filtered. 9106 - enum: 9107 - - info 9108 - - error 9109 - type: string 9110 - eventSources: 9111 - description: |- 9112 - EventSources specifies how to filter events based 9113 - on the involved object kind, name and namespace. 9114 - items: 9115 - description: |- 9116 - CrossNamespaceObjectReference contains enough information to let you locate the 9117 - typed referenced object at cluster level 9118 - properties: 9119 - apiVersion: 9120 - description: API version of the referent 9121 - type: string 9122 - kind: 9123 - description: Kind of the referent 9124 - enum: 9125 - - Bucket 9126 - - GitRepository 9127 - - Kustomization 9128 - - HelmRelease 9129 - - HelmChart 9130 - - HelmRepository 9131 - - ImageRepository 9132 - - ImagePolicy 9133 - - ImageUpdateAutomation 9134 - - OCIRepository 9135 - - ArtifactGenerator 9136 - - ExternalArtifact 9137 - type: string 9138 - matchLabels: 9139 - additionalProperties: 9140 - type: string 9141 - description: |- 9142 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 9143 - map is equivalent to an element of matchExpressions, whose key field is "key", the 9144 - operator is "In", and the values array contains only "value". The requirements are ANDed. 9145 - MatchLabels requires the name to be set to `*`. 9146 - type: object 9147 - name: 9148 - description: |- 9149 - Name of the referent 9150 - If multiple resources are targeted `*` may be set. 9151 - maxLength: 253 9152 - minLength: 1 9153 - type: string 9154 - namespace: 9155 - description: Namespace of the referent 9156 - maxLength: 253 9157 - minLength: 1 9158 - type: string 9159 - required: 9160 - - kind 9161 - - name 9162 - type: object 9163 - type: array 9164 - exclusionList: 9165 - description: |- 9166 - ExclusionList specifies a list of Golang regular expressions 9167 - to be used for excluding messages. 9168 - items: 9169 - type: string 9170 - type: array 9171 - inclusionList: 9172 - description: |- 9173 - InclusionList specifies a list of Golang regular expressions 9174 - to be used for including messages. 9175 - items: 9176 - type: string 9177 - type: array 9178 - providerRef: 9179 - description: ProviderRef specifies which Provider this Alert should use. 9180 + - additionalPrinterColumns: 9181 + - jsonPath: .metadata.creationTimestamp 9182 + name: Age 9183 + type: date 9184 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 9185 + name: Ready 9186 + type: string 9187 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 9188 + name: Status 9189 + type: string 9190 + deprecated: true 9191 + deprecationWarning: v1beta2 Alert is deprecated, upgrade to v1beta3 9192 + name: v1beta2 9193 + schema: 9194 + openAPIV3Schema: 9195 + description: Alert is the Schema for the alerts API 9196 + properties: 9197 + apiVersion: 9198 + description: |- 9199 + APIVersion defines the versioned schema of this representation of an object. 9200 + Servers should convert recognized schemas to the latest internal value, and 9201 + may reject unrecognized values. 9202 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9203 + type: string 9204 + kind: 9205 + description: |- 9206 + Kind is a string value representing the REST resource this object represents. 9207 + Servers may infer this from the endpoint the client submits requests to. 9208 + Cannot be updated. 9209 + In CamelCase. 9210 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9211 + type: string 9212 + metadata: 9213 + type: object 9214 + spec: 9215 + description: AlertSpec defines an alerting rule for events involving a 9216 + list of objects. 9217 + properties: 9218 + eventMetadata: 9219 + additionalProperties: 9220 + type: string 9221 + description: |- 9222 + EventMetadata is an optional field for adding metadata to events dispatched by the 9223 + controller. This can be used for enhancing the context of the event. If a field 9224 + would override one already present on the original event as generated by the emitter, 9225 + then the override doesn't happen, i.e. the original value is preserved, and an info 9226 + log is printed. 9227 + type: object 9228 + eventSeverity: 9229 + default: info 9230 + description: |- 9231 + EventSeverity specifies how to filter events based on severity. 9232 + If set to 'info' no events will be filtered. 9233 + enum: 9234 + - info 9235 + - error 9236 + type: string 9237 + eventSources: 9238 + description: |- 9239 + EventSources specifies how to filter events based 9240 + on the involved object kind, name and namespace. 9241 + items: 9242 + description: |- 9243 + CrossNamespaceObjectReference contains enough information to let you locate the 9244 + typed referenced object at cluster level 9245 properties: 9246 + apiVersion: 9247 + description: API version of the referent 9248 + type: string 9249 + kind: 9250 + description: Kind of the referent 9251 + enum: 9252 + - Bucket 9253 + - GitRepository 9254 + - Kustomization 9255 + - HelmRelease 9256 + - HelmChart 9257 + - HelmRepository 9258 + - ImageRepository 9259 + - ImagePolicy 9260 + - ImageUpdateAutomation 9261 + - OCIRepository 9262 + - ArtifactGenerator 9263 + - ExternalArtifact 9264 + type: string 9265 + matchLabels: 9266 + additionalProperties: 9267 + type: string 9268 + description: |- 9269 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 9270 + map is equivalent to an element of matchExpressions, whose key field is "key", the 9271 + operator is "In", and the values array contains only "value". The requirements are ANDed. 9272 + MatchLabels requires the name to be set to `*`. 9273 + type: object 9274 name: 9275 - description: Name of the referent. 9276 + description: |- 9277 + Name of the referent 9278 + If multiple resources are targeted `*` may be set. 9279 + maxLength: 253 9280 + minLength: 1 9281 + type: string 9282 + namespace: 9283 + description: Namespace of the referent 9284 + maxLength: 253 9285 + minLength: 1 9286 type: string 9287 required: 9288 - - name 9289 + - kind 9290 + - name 9291 type: object 9292 - summary: 9293 - description: Summary holds a short description of the impact and affected cluster. 9294 - maxLength: 255 9295 - type: string 9296 - suspend: 9297 - description: |- 9298 - Suspend tells the controller to suspend subsequent 9299 - events handling for this Alert. 9300 - type: boolean 9301 - required: 9302 - - eventSources 9303 - - providerRef 9304 - type: object 9305 - status: 9306 - default: 9307 - observedGeneration: -1 9308 - description: AlertStatus defines the observed state of the Alert. 9309 - properties: 9310 - conditions: 9311 - description: Conditions holds the conditions for the Alert. 9312 - items: 9313 - description: Condition contains details for one aspect of the current state of this API Resource. 9314 - properties: 9315 - lastTransitionTime: 9316 - description: |- 9317 - lastTransitionTime is the last time the condition transitioned from one status to another. 9318 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9319 - format: date-time 9320 - type: string 9321 - message: 9322 - description: |- 9323 - message is a human readable message indicating details about the transition. 9324 - This may be an empty string. 9325 - maxLength: 32768 9326 - type: string 9327 - observedGeneration: 9328 - description: |- 9329 - observedGeneration represents the .metadata.generation that the condition was set based upon. 9330 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9331 - with respect to the current state of the instance. 9332 - format: int64 9333 - minimum: 0 9334 - type: integer 9335 - reason: 9336 - description: |- 9337 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 9338 - Producers of specific condition types may define expected values and meanings for this field, 9339 - and whether the values are considered a guaranteed API. 9340 - The value should be a CamelCase string. 9341 - This field may not be empty. 9342 - maxLength: 1024 9343 - minLength: 1 9344 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9345 - type: string 9346 - status: 9347 - description: status of the condition, one of True, False, Unknown. 9348 - enum: 9349 - - "True" 9350 - - "False" 9351 - - Unknown 9352 - type: string 9353 - type: 9354 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 9355 - maxLength: 316 9356 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9357 - type: string 9358 - required: 9359 - - lastTransitionTime 9360 - - message 9361 - - reason 9362 - - status 9363 - - type 9364 - type: object 9365 - type: array 9366 - lastHandledReconcileAt: 9367 - description: |- 9368 - LastHandledReconcileAt holds the value of the most recent 9369 - reconcile request value, so a change of the annotation value 9370 - can be detected. 9371 - type: string 9372 - observedGeneration: 9373 - description: ObservedGeneration is the last observed generation. 9374 - format: int64 9375 - type: integer 9376 - type: object 9377 - type: object 9378 - served: true 9379 - storage: false 9380 - subresources: 9381 - status: {} 9382 - - additionalPrinterColumns: 9383 - - jsonPath: .metadata.creationTimestamp 9384 - name: Age 9385 - type: date 9386 - name: v1beta3 9387 - schema: 9388 - openAPIV3Schema: 9389 - description: Alert is the Schema for the alerts API 9390 - properties: 9391 - apiVersion: 9392 - description: |- 9393 - APIVersion defines the versioned schema of this representation of an object. 9394 - Servers should convert recognized schemas to the latest internal value, and 9395 - may reject unrecognized values. 9396 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9397 - type: string 9398 - kind: 9399 - description: |- 9400 - Kind is a string value representing the REST resource this object represents. 9401 - Servers may infer this from the endpoint the client submits requests to. 9402 - Cannot be updated. 9403 - In CamelCase. 9404 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9405 - type: string 9406 - metadata: 9407 - type: object 9408 - spec: 9409 - description: AlertSpec defines an alerting rule for events involving a list of objects. 9410 - properties: 9411 - eventMetadata: 9412 - additionalProperties: 9413 + type: array 9414 + exclusionList: 9415 + description: |- 9416 + ExclusionList specifies a list of Golang regular expressions 9417 + to be used for excluding messages. 9418 + items: 9419 + type: string 9420 + type: array 9421 + inclusionList: 9422 + description: |- 9423 + InclusionList specifies a list of Golang regular expressions 9424 + to be used for including messages. 9425 + items: 9426 + type: string 9427 + type: array 9428 + providerRef: 9429 + description: ProviderRef specifies which Provider this Alert should 9430 + use. 9431 + properties: 9432 + name: 9433 + description: Name of the referent. 9434 type: string 9435 - description: |- 9436 - EventMetadata is an optional field for adding metadata to events dispatched by the 9437 - controller. This can be used for enhancing the context of the event. If a field 9438 - would override one already present on the original event as generated by the emitter, 9439 - then the override doesn't happen, i.e. the original value is preserved, and an info 9440 - log is printed. 9441 + required: 9442 + - name 9443 + type: object 9444 + summary: 9445 + description: Summary holds a short description of the impact and affected 9446 + cluster. 9447 + maxLength: 255 9448 + type: string 9449 + suspend: 9450 + description: |- 9451 + Suspend tells the controller to suspend subsequent 9452 + events handling for this Alert. 9453 + type: boolean 9454 + required: 9455 + - eventSources 9456 + - providerRef 9457 + type: object 9458 + status: 9459 + default: 9460 + observedGeneration: -1 9461 + description: AlertStatus defines the observed state of the Alert. 9462 + properties: 9463 + conditions: 9464 + description: Conditions holds the conditions for the Alert. 9465 + items: 9466 + description: Condition contains details for one aspect of the current 9467 + state of this API Resource. 9468 + properties: 9469 + lastTransitionTime: 9470 + description: |- 9471 + lastTransitionTime is the last time the condition transitioned from one status to another. 9472 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9473 + format: date-time 9474 + type: string 9475 + message: 9476 + description: |- 9477 + message is a human readable message indicating details about the transition. 9478 + This may be an empty string. 9479 + maxLength: 32768 9480 + type: string 9481 + observedGeneration: 9482 + description: |- 9483 + observedGeneration represents the .metadata.generation that the condition was set based upon. 9484 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 9485 + with respect to the current state of the instance. 9486 + format: int64 9487 + minimum: 0 9488 + type: integer 9489 + reason: 9490 + description: |- 9491 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 9492 + Producers of specific condition types may define expected values and meanings for this field, 9493 + and whether the values are considered a guaranteed API. 9494 + The value should be a CamelCase string. 9495 + This field may not be empty. 9496 + maxLength: 1024 9497 + minLength: 1 9498 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 9499 + type: string 9500 + status: 9501 + description: status of the condition, one of True, False, Unknown. 9502 + enum: 9503 + - "True" 9504 + - "False" 9505 + - Unknown 9506 + type: string 9507 + type: 9508 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 9509 + maxLength: 316 9510 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 9511 + type: string 9512 + required: 9513 + - lastTransitionTime 9514 + - message 9515 + - reason 9516 + - status 9517 + - type 9518 type: object 9519 - eventSeverity: 9520 - default: info 9521 - description: |- 9522 - EventSeverity specifies how to filter events based on severity. 9523 - If set to 'info' no events will be filtered. 9524 - enum: 9525 - - info 9526 - - error 9527 - type: string 9528 - eventSources: 9529 - description: |- 9530 - EventSources specifies how to filter events based 9531 - on the involved object kind, name and namespace. 9532 - items: 9533 - description: |- 9534 - CrossNamespaceObjectReference contains enough information to let you locate the 9535 - typed referenced object at cluster level 9536 - properties: 9537 - apiVersion: 9538 - description: API version of the referent 9539 - type: string 9540 - kind: 9541 - description: Kind of the referent 9542 - enum: 9543 - - Bucket 9544 - - GitRepository 9545 - - Kustomization 9546 - - HelmRelease 9547 - - HelmChart 9548 - - HelmRepository 9549 - - ImageRepository 9550 - - ImagePolicy 9551 - - ImageUpdateAutomation 9552 - - OCIRepository 9553 - - ArtifactGenerator 9554 - - ExternalArtifact 9555 - type: string 9556 - matchLabels: 9557 - additionalProperties: 9558 - type: string 9559 - description: |- 9560 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 9561 - map is equivalent to an element of matchExpressions, whose key field is "key", the 9562 - operator is "In", and the values array contains only "value". The requirements are ANDed. 9563 - MatchLabels requires the name to be set to `*`. 9564 - type: object 9565 - name: 9566 - description: |- 9567 - Name of the referent 9568 - If multiple resources are targeted `*` may be set. 9569 - maxLength: 253 9570 - minLength: 1 9571 - type: string 9572 - namespace: 9573 - description: Namespace of the referent 9574 - maxLength: 253 9575 - minLength: 1 9576 - type: string 9577 - required: 9578 - - kind 9579 - - name 9580 - type: object 9581 - type: array 9582 - exclusionList: 9583 - description: |- 9584 - ExclusionList specifies a list of Golang regular expressions 9585 - to be used for excluding messages. 9586 - items: 9587 - type: string 9588 - type: array 9589 - inclusionList: 9590 - description: |- 9591 - InclusionList specifies a list of Golang regular expressions 9592 - to be used for including messages. 9593 - items: 9594 - type: string 9595 - type: array 9596 - providerRef: 9597 - description: ProviderRef specifies which Provider this Alert should use. 9598 + type: array 9599 + lastHandledReconcileAt: 9600 + description: |- 9601 + LastHandledReconcileAt holds the value of the most recent 9602 + reconcile request value, so a change of the annotation value 9603 + can be detected. 9604 + type: string 9605 + observedGeneration: 9606 + description: ObservedGeneration is the last observed generation. 9607 + format: int64 9608 + type: integer 9609 + type: object 9610 + type: object 9611 + served: true 9612 + storage: false 9613 + subresources: 9614 + status: {} 9615 + - additionalPrinterColumns: 9616 + - jsonPath: .metadata.creationTimestamp 9617 + name: Age 9618 + type: date 9619 + name: v1beta3 9620 + schema: 9621 + openAPIV3Schema: 9622 + description: Alert is the Schema for the alerts API 9623 + properties: 9624 + apiVersion: 9625 + description: |- 9626 + APIVersion defines the versioned schema of this representation of an object. 9627 + Servers should convert recognized schemas to the latest internal value, and 9628 + may reject unrecognized values. 9629 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9630 + type: string 9631 + kind: 9632 + description: |- 9633 + Kind is a string value representing the REST resource this object represents. 9634 + Servers may infer this from the endpoint the client submits requests to. 9635 + Cannot be updated. 9636 + In CamelCase. 9637 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9638 + type: string 9639 + metadata: 9640 + type: object 9641 + spec: 9642 + description: AlertSpec defines an alerting rule for events involving a 9643 + list of objects. 9644 + properties: 9645 + eventMetadata: 9646 + additionalProperties: 9647 + type: string 9648 + description: |- 9649 + EventMetadata is an optional field for adding metadata to events dispatched by the 9650 + controller. This can be used for enhancing the context of the event. If a field 9651 + would override one already present on the original event as generated by the emitter, 9652 + then the override doesn't happen, i.e. the original value is preserved, and an info 9653 + log is printed. 9654 + type: object 9655 + eventSeverity: 9656 + default: info 9657 + description: |- 9658 + EventSeverity specifies how to filter events based on severity. 9659 + If set to 'info' no events will be filtered. 9660 + enum: 9661 + - info 9662 + - error 9663 + type: string 9664 + eventSources: 9665 + description: |- 9666 + EventSources specifies how to filter events based 9667 + on the involved object kind, name and namespace. 9668 + items: 9669 + description: |- 9670 + CrossNamespaceObjectReference contains enough information to let you locate the 9671 + typed referenced object at cluster level 9672 properties: 9673 + apiVersion: 9674 + description: API version of the referent 9675 + type: string 9676 + kind: 9677 + description: Kind of the referent 9678 + enum: 9679 + - Bucket 9680 + - GitRepository 9681 + - Kustomization 9682 + - HelmRelease 9683 + - HelmChart 9684 + - HelmRepository 9685 + - ImageRepository 9686 + - ImagePolicy 9687 + - ImageUpdateAutomation 9688 + - OCIRepository 9689 + - ArtifactGenerator 9690 + - ExternalArtifact 9691 + type: string 9692 + matchLabels: 9693 + additionalProperties: 9694 + type: string 9695 + description: |- 9696 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 9697 + map is equivalent to an element of matchExpressions, whose key field is "key", the 9698 + operator is "In", and the values array contains only "value". The requirements are ANDed. 9699 + MatchLabels requires the name to be set to `*`. 9700 + type: object 9701 name: 9702 - description: Name of the referent. 9703 + description: |- 9704 + Name of the referent 9705 + If multiple resources are targeted `*` may be set. 9706 + maxLength: 253 9707 + minLength: 1 9708 + type: string 9709 + namespace: 9710 + description: Namespace of the referent 9711 + maxLength: 253 9712 + minLength: 1 9713 type: string 9714 required: 9715 - - name 9716 + - kind 9717 + - name 9718 type: object 9719 - summary: 9720 - description: |- 9721 - Summary holds a short description of the impact and affected cluster. 9722 - Deprecated: Use EventMetadata instead. 9723 - maxLength: 255 9724 - type: string 9725 - suspend: 9726 - description: |- 9727 - Suspend tells the controller to suspend subsequent 9728 - events handling for this Alert. 9729 - type: boolean 9730 - required: 9731 - - eventSources 9732 - - providerRef 9733 - type: object 9734 - type: object 9735 - served: true 9736 - storage: true 9737 - subresources: {} 9738 + type: array 9739 + exclusionList: 9740 + description: |- 9741 + ExclusionList specifies a list of Golang regular expressions 9742 + to be used for excluding messages. 9743 + items: 9744 + type: string 9745 + type: array 9746 + inclusionList: 9747 + description: |- 9748 + InclusionList specifies a list of Golang regular expressions 9749 + to be used for including messages. 9750 + items: 9751 + type: string 9752 + type: array 9753 + providerRef: 9754 + description: ProviderRef specifies which Provider this Alert should 9755 + use. 9756 + properties: 9757 + name: 9758 + description: Name of the referent. 9759 + type: string 9760 + required: 9761 + - name 9762 + type: object 9763 + summary: 9764 + description: |- 9765 + Summary holds a short description of the impact and affected cluster. 9766 + Deprecated: Use EventMetadata instead. 9767 + maxLength: 255 9768 + type: string 9769 + suspend: 9770 + description: |- 9771 + Suspend tells the controller to suspend subsequent 9772 + events handling for this Alert. 9773 + type: boolean 9774 + required: 9775 + - eventSources 9776 + - providerRef 9777 + type: object 9778 + type: object 9779 + served: true 9780 + storage: true 9781 + subresources: {} 9782 --- 9783 apiVersion: apiextensions.k8s.io/v1 9784 kind: CustomResourceDefinition 9785 @@ -5272,7 +5386,7 @@ metadata: 9786 app.kubernetes.io/component: notification-controller 9787 app.kubernetes.io/instance: flux-system 9788 app.kubernetes.io/part-of: flux 9789 - app.kubernetes.io/version: v2.8.0 9790 + app.kubernetes.io/version: v2.8.1 9791 name: providers.notification.toolkit.fluxcd.io 9792 spec: 9793 group: notification.toolkit.fluxcd.io 9794 @@ -5283,393 +5397,400 @@ spec: 9795 singular: provider 9796 scope: Namespaced 9797 versions: 9798 - - additionalPrinterColumns: 9799 - - jsonPath: .metadata.creationTimestamp 9800 - name: Age 9801 - type: date 9802 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 9803 - name: Ready 9804 - type: string 9805 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 9806 - name: Status 9807 - type: string 9808 - deprecated: true 9809 - deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 9810 - name: v1beta2 9811 - schema: 9812 - openAPIV3Schema: 9813 - description: Provider is the Schema for the providers API. 9814 - properties: 9815 - apiVersion: 9816 - description: |- 9817 - APIVersion defines the versioned schema of this representation of an object. 9818 - Servers should convert recognized schemas to the latest internal value, and 9819 - may reject unrecognized values. 9820 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9821 - type: string 9822 - kind: 9823 - description: |- 9824 - Kind is a string value representing the REST resource this object represents. 9825 - Servers may infer this from the endpoint the client submits requests to. 9826 - Cannot be updated. 9827 - In CamelCase. 9828 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9829 - type: string 9830 - metadata: 9831 - type: object 9832 - spec: 9833 - description: ProviderSpec defines the desired state of the Provider. 9834 - properties: 9835 - address: 9836 - description: |- 9837 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 9838 - What kind of endpoint depends on the specific Provider type being used. 9839 - For the generic Provider, for example, this is an HTTP/S address. 9840 - For other Provider types this could be a project ID or a namespace. 9841 - maxLength: 2048 9842 - type: string 9843 - certSecretRef: 9844 - description: |- 9845 - CertSecretRef specifies the Secret containing 9846 - a PEM-encoded CA certificate (in the `ca.crt` key). 9847 + - additionalPrinterColumns: 9848 + - jsonPath: .metadata.creationTimestamp 9849 + name: Age 9850 + type: date 9851 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 9852 + name: Ready 9853 + type: string 9854 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 9855 + name: Status 9856 + type: string 9857 + deprecated: true 9858 + deprecationWarning: v1beta2 Provider is deprecated, upgrade to v1beta3 9859 + name: v1beta2 9860 + schema: 9861 + openAPIV3Schema: 9862 + description: Provider is the Schema for the providers API. 9863 + properties: 9864 + apiVersion: 9865 + description: |- 9866 + APIVersion defines the versioned schema of this representation of an object. 9867 + Servers should convert recognized schemas to the latest internal value, and 9868 + may reject unrecognized values. 9869 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 9870 + type: string 9871 + kind: 9872 + description: |- 9873 + Kind is a string value representing the REST resource this object represents. 9874 + Servers may infer this from the endpoint the client submits requests to. 9875 + Cannot be updated. 9876 + In CamelCase. 9877 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 9878 + type: string 9879 + metadata: 9880 + type: object 9881 + spec: 9882 + description: ProviderSpec defines the desired state of the Provider. 9883 + properties: 9884 + address: 9885 + description: |- 9886 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 9887 + What kind of endpoint depends on the specific Provider type being used. 9888 + For the generic Provider, for example, this is an HTTP/S address. 9889 + For other Provider types this could be a project ID or a namespace. 9890 + maxLength: 2048 9891 + type: string 9892 + certSecretRef: 9893 + description: |- 9894 + CertSecretRef specifies the Secret containing 9895 + a PEM-encoded CA certificate (in the `ca.crt` key). 9896 9897 - Note: Support for the `caFile` key has 9898 - been deprecated. 9899 + Note: Support for the `caFile` key has 9900 + been deprecated. 9901 + properties: 9902 + name: 9903 + description: Name of the referent. 9904 + type: string 9905 + required: 9906 + - name 9907 + type: object 9908 + channel: 9909 + description: Channel specifies the destination channel where events 9910 + should be posted. 9911 + maxLength: 2048 9912 + type: string 9913 + interval: 9914 + description: Interval at which to reconcile the Provider with its 9915 + Secret references. 9916 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 9917 + type: string 9918 + proxy: 9919 + description: Proxy the HTTP/S address of the proxy server. 9920 + maxLength: 2048 9921 + pattern: ^(http|https)://.*$ 9922 + type: string 9923 + secretRef: 9924 + description: |- 9925 + SecretRef specifies the Secret containing the authentication 9926 + credentials for this Provider. 9927 + properties: 9928 + name: 9929 + description: Name of the referent. 9930 + type: string 9931 + required: 9932 + - name 9933 + type: object 9934 + suspend: 9935 + description: |- 9936 + Suspend tells the controller to suspend subsequent 9937 + events handling for this Provider. 9938 + type: boolean 9939 + timeout: 9940 + description: Timeout for sending alerts to the Provider. 9941 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 9942 + type: string 9943 + type: 9944 + description: Type specifies which Provider implementation to use. 9945 + enum: 9946 + - slack 9947 + - discord 9948 + - msteams 9949 + - rocket 9950 + - generic 9951 + - generic-hmac 9952 + - github 9953 + - gitlab 9954 + - gitea 9955 + - bitbucketserver 9956 + - bitbucket 9957 + - azuredevops 9958 + - googlechat 9959 + - googlepubsub 9960 + - webex 9961 + - sentry 9962 + - azureeventhub 9963 + - telegram 9964 + - lark 9965 + - matrix 9966 + - opsgenie 9967 + - alertmanager 9968 + - grafana 9969 + - githubdispatch 9970 + - pagerduty 9971 + - datadog 9972 + type: string 9973 + username: 9974 + description: Username specifies the name under which events are posted. 9975 + maxLength: 2048 9976 + type: string 9977 + required: 9978 + - type 9979 + type: object 9980 + status: 9981 + default: 9982 + observedGeneration: -1 9983 + description: ProviderStatus defines the observed state of the Provider. 9984 + properties: 9985 + conditions: 9986 + description: Conditions holds the conditions for the Provider. 9987 + items: 9988 + description: Condition contains details for one aspect of the current 9989 + state of this API Resource. 9990 properties: 9991 - name: 9992 - description: Name of the referent. 9993 + lastTransitionTime: 9994 + description: |- 9995 + lastTransitionTime is the last time the condition transitioned from one status to another. 9996 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 9997 + format: date-time 9998 type: string 9999 - required: 10000 - - name 10001 - type: object 10002 - channel: 10003 - description: Channel specifies the destination channel where events should be posted. 10004 - maxLength: 2048 10005 - type: string 10006 - interval: 10007 - description: Interval at which to reconcile the Provider with its Secret references. 10008 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10009 - type: string 10010 - proxy: 10011 - description: Proxy the HTTP/S address of the proxy server. 10012 - maxLength: 2048 10013 - pattern: ^(http|https)://.*$ 10014 - type: string 10015 - secretRef: 10016 - description: |- 10017 - SecretRef specifies the Secret containing the authentication 10018 - credentials for this Provider. 10019 - properties: 10020 - name: 10021 - description: Name of the referent. 10022 + message: 10023 + description: |- 10024 + message is a human readable message indicating details about the transition. 10025 + This may be an empty string. 10026 + maxLength: 32768 10027 type: string 10028 - required: 10029 - - name 10030 - type: object 10031 - suspend: 10032 - description: |- 10033 - Suspend tells the controller to suspend subsequent 10034 - events handling for this Provider. 10035 - type: boolean 10036 - timeout: 10037 - description: Timeout for sending alerts to the Provider. 10038 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 10039 - type: string 10040 - type: 10041 - description: Type specifies which Provider implementation to use. 10042 - enum: 10043 - - slack 10044 - - discord 10045 - - msteams 10046 - - rocket 10047 - - generic 10048 - - generic-hmac 10049 - - github 10050 - - gitlab 10051 - - gitea 10052 - - bitbucketserver 10053 - - bitbucket 10054 - - azuredevops 10055 - - googlechat 10056 - - googlepubsub 10057 - - webex 10058 - - sentry 10059 - - azureeventhub 10060 - - telegram 10061 - - lark 10062 - - matrix 10063 - - opsgenie 10064 - - alertmanager 10065 - - grafana 10066 - - githubdispatch 10067 - - pagerduty 10068 - - datadog 10069 - type: string 10070 - username: 10071 - description: Username specifies the name under which events are posted. 10072 - maxLength: 2048 10073 - type: string 10074 - required: 10075 - - type 10076 - type: object 10077 - status: 10078 - default: 10079 - observedGeneration: -1 10080 - description: ProviderStatus defines the observed state of the Provider. 10081 - properties: 10082 - conditions: 10083 - description: Conditions holds the conditions for the Provider. 10084 - items: 10085 - description: Condition contains details for one aspect of the current state of this API Resource. 10086 - properties: 10087 - lastTransitionTime: 10088 - description: |- 10089 - lastTransitionTime is the last time the condition transitioned from one status to another. 10090 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 10091 - format: date-time 10092 - type: string 10093 - message: 10094 - description: |- 10095 - message is a human readable message indicating details about the transition. 10096 - This may be an empty string. 10097 - maxLength: 32768 10098 - type: string 10099 - observedGeneration: 10100 - description: |- 10101 - observedGeneration represents the .metadata.generation that the condition was set based upon. 10102 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10103 - with respect to the current state of the instance. 10104 - format: int64 10105 - minimum: 0 10106 - type: integer 10107 - reason: 10108 - description: |- 10109 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 10110 - Producers of specific condition types may define expected values and meanings for this field, 10111 - and whether the values are considered a guaranteed API. 10112 - The value should be a CamelCase string. 10113 - This field may not be empty. 10114 - maxLength: 1024 10115 - minLength: 1 10116 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10117 - type: string 10118 - status: 10119 - description: status of the condition, one of True, False, Unknown. 10120 - enum: 10121 - - "True" 10122 - - "False" 10123 - - Unknown 10124 - type: string 10125 - type: 10126 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 10127 - maxLength: 316 10128 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10129 - type: string 10130 - required: 10131 - - lastTransitionTime 10132 - - message 10133 - - reason 10134 - - status 10135 - - type 10136 - type: object 10137 - type: array 10138 - lastHandledReconcileAt: 10139 - description: |- 10140 - LastHandledReconcileAt holds the value of the most recent 10141 - reconcile request value, so a change of the annotation value 10142 - can be detected. 10143 - type: string 10144 - observedGeneration: 10145 - description: ObservedGeneration is the last reconciled generation. 10146 - format: int64 10147 - type: integer 10148 - type: object 10149 - type: object 10150 - served: true 10151 - storage: false 10152 - subresources: 10153 - status: {} 10154 - - additionalPrinterColumns: 10155 - - jsonPath: .metadata.creationTimestamp 10156 - name: Age 10157 - type: date 10158 - name: v1beta3 10159 - schema: 10160 - openAPIV3Schema: 10161 - description: Provider is the Schema for the providers API 10162 - properties: 10163 - apiVersion: 10164 - description: |- 10165 - APIVersion defines the versioned schema of this representation of an object. 10166 - Servers should convert recognized schemas to the latest internal value, and 10167 - may reject unrecognized values. 10168 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10169 - type: string 10170 - kind: 10171 - description: |- 10172 - Kind is a string value representing the REST resource this object represents. 10173 - Servers may infer this from the endpoint the client submits requests to. 10174 - Cannot be updated. 10175 - In CamelCase. 10176 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10177 - type: string 10178 - metadata: 10179 - type: object 10180 - spec: 10181 - description: ProviderSpec defines the desired state of the Provider. 10182 - properties: 10183 - address: 10184 - description: |- 10185 - Address specifies the endpoint, in a generic sense, to where alerts are sent. 10186 - What kind of endpoint depends on the specific Provider type being used. 10187 - For the generic Provider, for example, this is an HTTP/S address. 10188 - For other Provider types this could be a project ID or a namespace. 10189 - maxLength: 2048 10190 - type: string 10191 - certSecretRef: 10192 - description: |- 10193 - CertSecretRef specifies the Secret containing TLS certificates 10194 - for secure communication. 10195 - 10196 - Supported configurations: 10197 - - CA-only: Server authentication (provide ca.crt only) 10198 - - mTLS: Mutual authentication (provide ca.crt + tls.crt + tls.key) 10199 - - Client-only: Client authentication with system CA (provide tls.crt + tls.key only) 10200 - 10201 - Legacy keys "caFile", "certFile", "keyFile" are supported but deprecated. Use "ca.crt", "tls.crt", "tls.key" instead. 10202 - properties: 10203 - name: 10204 - description: Name of the referent. 10205 + observedGeneration: 10206 + description: |- 10207 + observedGeneration represents the .metadata.generation that the condition was set based upon. 10208 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10209 + with respect to the current state of the instance. 10210 + format: int64 10211 + minimum: 0 10212 + type: integer 10213 + reason: 10214 + description: |- 10215 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 10216 + Producers of specific condition types may define expected values and meanings for this field, 10217 + and whether the values are considered a guaranteed API. 10218 + The value should be a CamelCase string. 10219 + This field may not be empty. 10220 + maxLength: 1024 10221 + minLength: 1 10222 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10223 type: string 10224 - required: 10225 - - name 10226 - type: object 10227 - channel: 10228 - description: Channel specifies the destination channel where events should be posted. 10229 - maxLength: 2048 10230 - type: string 10231 - commitStatusExpr: 10232 - description: |- 10233 - CommitStatusExpr is a CEL expression that evaluates to a string value 10234 - that can be used to generate a custom commit status message for use 10235 - with eligible Provider types (github, gitlab, gitea, bitbucketserver, 10236 - bitbucket, azuredevops). Supported variables are: event, provider, 10237 - and alert. 10238 - type: string 10239 - interval: 10240 - description: |- 10241 - Interval at which to reconcile the Provider with its Secret references. 10242 - Deprecated and not used in v1beta3. 10243 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10244 - type: string 10245 - proxy: 10246 - description: |- 10247 - Proxy the HTTP/S address of the proxy server. 10248 - Deprecated: Use ProxySecretRef instead. Will be removed in v1. 10249 - maxLength: 2048 10250 - pattern: ^(http|https)://.*$ 10251 - type: string 10252 - proxySecretRef: 10253 - description: |- 10254 - ProxySecretRef specifies the Secret containing the proxy configuration 10255 - for this Provider. The Secret should contain an 'address' key with the 10256 - HTTP/S address of the proxy server. Optional 'username' and 'password' 10257 - keys can be provided for proxy authentication. 10258 - properties: 10259 - name: 10260 - description: Name of the referent. 10261 + status: 10262 + description: status of the condition, one of True, False, Unknown. 10263 + enum: 10264 + - "True" 10265 + - "False" 10266 + - Unknown 10267 type: string 10268 - required: 10269 - - name 10270 - type: object 10271 - secretRef: 10272 - description: |- 10273 - SecretRef specifies the Secret containing the authentication 10274 - credentials for this Provider. 10275 - properties: 10276 - name: 10277 - description: Name of the referent. 10278 + type: 10279 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 10280 + maxLength: 316 10281 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10282 type: string 10283 required: 10284 - - name 10285 + - lastTransitionTime 10286 + - message 10287 + - reason 10288 + - status 10289 + - type 10290 type: object 10291 - serviceAccountName: 10292 - description: |- 10293 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to 10294 - authenticate with cloud provider services through workload identity. 10295 - This enables multi-tenant authentication without storing static credentials. 10296 + type: array 10297 + lastHandledReconcileAt: 10298 + description: |- 10299 + LastHandledReconcileAt holds the value of the most recent 10300 + reconcile request value, so a change of the annotation value 10301 + can be detected. 10302 + type: string 10303 + observedGeneration: 10304 + description: ObservedGeneration is the last reconciled generation. 10305 + format: int64 10306 + type: integer 10307 + type: object 10308 + type: object 10309 + served: true 10310 + storage: false 10311 + subresources: 10312 + status: {} 10313 + - additionalPrinterColumns: 10314 + - jsonPath: .metadata.creationTimestamp 10315 + name: Age 10316 + type: date 10317 + name: v1beta3 10318 + schema: 10319 + openAPIV3Schema: 10320 + description: Provider is the Schema for the providers API 10321 + properties: 10322 + apiVersion: 10323 + description: |- 10324 + APIVersion defines the versioned schema of this representation of an object. 10325 + Servers should convert recognized schemas to the latest internal value, and 10326 + may reject unrecognized values. 10327 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10328 + type: string 10329 + kind: 10330 + description: |- 10331 + Kind is a string value representing the REST resource this object represents. 10332 + Servers may infer this from the endpoint the client submits requests to. 10333 + Cannot be updated. 10334 + In CamelCase. 10335 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10336 + type: string 10337 + metadata: 10338 + type: object 10339 + spec: 10340 + description: ProviderSpec defines the desired state of the Provider. 10341 + properties: 10342 + address: 10343 + description: |- 10344 + Address specifies the endpoint, in a generic sense, to where alerts are sent. 10345 + What kind of endpoint depends on the specific Provider type being used. 10346 + For the generic Provider, for example, this is an HTTP/S address. 10347 + For other Provider types this could be a project ID or a namespace. 10348 + maxLength: 2048 10349 + type: string 10350 + certSecretRef: 10351 + description: |- 10352 + CertSecretRef specifies the Secret containing TLS certificates 10353 + for secure communication. 10354 10355 - Supported provider types: azureeventhub, azuredevops, googlepubsub 10356 + Supported configurations: 10357 + - CA-only: Server authentication (provide ca.crt only) 10358 + - mTLS: Mutual authentication (provide ca.crt + tls.crt + tls.key) 10359 + - Client-only: Client authentication with system CA (provide tls.crt + tls.key only) 10360 10361 - When specified, the controller will: 10362 - 1. Create an OIDC token for the specified ServiceAccount 10363 - 2. Exchange it for cloud provider credentials via STS 10364 - 3. Use the obtained credentials for API authentication 10365 + Legacy keys "caFile", "certFile", "keyFile" are supported but deprecated. Use "ca.crt", "tls.crt", "tls.key" instead. 10366 + properties: 10367 + name: 10368 + description: Name of the referent. 10369 + type: string 10370 + required: 10371 + - name 10372 + type: object 10373 + channel: 10374 + description: Channel specifies the destination channel where events 10375 + should be posted. 10376 + maxLength: 2048 10377 + type: string 10378 + commitStatusExpr: 10379 + description: |- 10380 + CommitStatusExpr is a CEL expression that evaluates to a string value 10381 + that can be used to generate a custom commit status message for use 10382 + with eligible Provider types (github, gitlab, gitea, bitbucketserver, 10383 + bitbucket, azuredevops). Supported variables are: event, provider, 10384 + and alert. 10385 + type: string 10386 + interval: 10387 + description: |- 10388 + Interval at which to reconcile the Provider with its Secret references. 10389 + Deprecated and not used in v1beta3. 10390 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10391 + type: string 10392 + proxy: 10393 + description: |- 10394 + Proxy the HTTP/S address of the proxy server. 10395 + Deprecated: Use ProxySecretRef instead. Will be removed in v1. 10396 + maxLength: 2048 10397 + pattern: ^(http|https)://.*$ 10398 + type: string 10399 + proxySecretRef: 10400 + description: |- 10401 + ProxySecretRef specifies the Secret containing the proxy configuration 10402 + for this Provider. The Secret should contain an 'address' key with the 10403 + HTTP/S address of the proxy server. Optional 'username' and 'password' 10404 + keys can be provided for proxy authentication. 10405 + properties: 10406 + name: 10407 + description: Name of the referent. 10408 + type: string 10409 + required: 10410 + - name 10411 + type: object 10412 + secretRef: 10413 + description: |- 10414 + SecretRef specifies the Secret containing the authentication 10415 + credentials for this Provider. 10416 + properties: 10417 + name: 10418 + description: Name of the referent. 10419 + type: string 10420 + required: 10421 + - name 10422 + type: object 10423 + serviceAccountName: 10424 + description: |- 10425 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to 10426 + authenticate with cloud provider services through workload identity. 10427 + This enables multi-tenant authentication without storing static credentials. 10428 10429 - When unspecified, controller-level authentication is used (single-tenant). 10430 + Supported provider types: azureeventhub, azuredevops, googlepubsub 10431 10432 - An error is thrown if static credentials are also defined in SecretRef. 10433 - This field requires the ObjectLevelWorkloadIdentity feature gate to be enabled. 10434 - type: string 10435 - suspend: 10436 - description: |- 10437 - Suspend tells the controller to suspend subsequent 10438 - events handling for this Provider. 10439 - type: boolean 10440 - timeout: 10441 - description: Timeout for sending alerts to the Provider. 10442 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 10443 - type: string 10444 - type: 10445 - description: Type specifies which Provider implementation to use. 10446 - enum: 10447 - - slack 10448 - - discord 10449 - - msteams 10450 - - rocket 10451 - - generic 10452 - - generic-hmac 10453 - - github 10454 - - gitlab 10455 - - gitea 10456 - - giteapullrequestcomment 10457 - - bitbucketserver 10458 - - bitbucket 10459 - - azuredevops 10460 - - googlechat 10461 - - googlepubsub 10462 - - webex 10463 - - sentry 10464 - - azureeventhub 10465 - - telegram 10466 - - lark 10467 - - matrix 10468 - - opsgenie 10469 - - alertmanager 10470 - - grafana 10471 - - githubdispatch 10472 - - githubpullrequestcomment 10473 - - gitlabmergerequestcomment 10474 - - pagerduty 10475 - - datadog 10476 - - nats 10477 - - zulip 10478 - - otel 10479 - type: string 10480 - username: 10481 - description: Username specifies the name under which events are posted. 10482 - maxLength: 2048 10483 - type: string 10484 - required: 10485 - - type 10486 - type: object 10487 - x-kubernetes-validations: 10488 - - message: spec.commitStatusExpr is only supported for the 'github', 'gitlab', 'gitea', 'bitbucketserver', 'bitbucket', 'azuredevops' provider types 10489 - rule: self.type == 'github' || self.type == 'gitlab' || self.type == 'gitea' || self.type == 'bitbucketserver' || self.type == 'bitbucket' || self.type == 'azuredevops' || !has(self.commitStatusExpr) 10490 - type: object 10491 - served: true 10492 - storage: true 10493 - subresources: {} 10494 + When specified, the controller will: 10495 + 1. Create an OIDC token for the specified ServiceAccount 10496 + 2. Exchange it for cloud provider credentials via STS 10497 + 3. Use the obtained credentials for API authentication 10498 + 10499 + When unspecified, controller-level authentication is used (single-tenant). 10500 + 10501 + An error is thrown if static credentials are also defined in SecretRef. 10502 + This field requires the ObjectLevelWorkloadIdentity feature gate to be enabled. 10503 + type: string 10504 + suspend: 10505 + description: |- 10506 + Suspend tells the controller to suspend subsequent 10507 + events handling for this Provider. 10508 + type: boolean 10509 + timeout: 10510 + description: Timeout for sending alerts to the Provider. 10511 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 10512 + type: string 10513 + type: 10514 + description: Type specifies which Provider implementation to use. 10515 + enum: 10516 + - slack 10517 + - discord 10518 + - msteams 10519 + - rocket 10520 + - generic 10521 + - generic-hmac 10522 + - github 10523 + - gitlab 10524 + - gitea 10525 + - giteapullrequestcomment 10526 + - bitbucketserver 10527 + - bitbucket 10528 + - azuredevops 10529 + - googlechat 10530 + - googlepubsub 10531 + - webex 10532 + - sentry 10533 + - azureeventhub 10534 + - telegram 10535 + - lark 10536 + - matrix 10537 + - opsgenie 10538 + - alertmanager 10539 + - grafana 10540 + - githubdispatch 10541 + - githubpullrequestcomment 10542 + - gitlabmergerequestcomment 10543 + - pagerduty 10544 + - datadog 10545 + - nats 10546 + - zulip 10547 + - otel 10548 + type: string 10549 + username: 10550 + description: Username specifies the name under which events are posted. 10551 + maxLength: 2048 10552 + type: string 10553 + required: 10554 + - type 10555 + type: object 10556 + x-kubernetes-validations: 10557 + - message: spec.commitStatusExpr is only supported for the 'github', 'gitlab', 10558 + 'gitea', 'bitbucketserver', 'bitbucket', 'azuredevops' provider types 10559 + rule: self.type == 'github' || self.type == 'gitlab' || self.type == 10560 + 'gitea' || self.type == 'bitbucketserver' || self.type == 'bitbucket' 10561 + || self.type == 'azuredevops' || !has(self.commitStatusExpr) 10562 + type: object 10563 + served: true 10564 + storage: true 10565 + subresources: {} 10566 --- 10567 apiVersion: apiextensions.k8s.io/v1 10568 kind: CustomResourceDefinition 10569 @@ -5680,7 +5801,7 @@ metadata: 10570 app.kubernetes.io/component: notification-controller 10571 app.kubernetes.io/instance: flux-system 10572 app.kubernetes.io/part-of: flux 10573 - app.kubernetes.io/version: v2.8.0 10574 + app.kubernetes.io/version: v2.8.1 10575 name: receivers.notification.toolkit.fluxcd.io 10576 spec: 10577 group: notification.toolkit.fluxcd.io 10578 @@ -5691,462 +5812,468 @@ spec: 10579 singular: receiver 10580 scope: Namespaced 10581 versions: 10582 - - additionalPrinterColumns: 10583 - - jsonPath: .metadata.creationTimestamp 10584 - name: Age 10585 - type: date 10586 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 10587 - name: Ready 10588 - type: string 10589 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 10590 - name: Status 10591 - type: string 10592 - name: v1 10593 - schema: 10594 - openAPIV3Schema: 10595 - description: Receiver is the Schema for the receivers API. 10596 - properties: 10597 - apiVersion: 10598 - description: |- 10599 - APIVersion defines the versioned schema of this representation of an object. 10600 - Servers should convert recognized schemas to the latest internal value, and 10601 - may reject unrecognized values. 10602 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10603 - type: string 10604 - kind: 10605 - description: |- 10606 - Kind is a string value representing the REST resource this object represents. 10607 - Servers may infer this from the endpoint the client submits requests to. 10608 - Cannot be updated. 10609 - In CamelCase. 10610 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10611 - type: string 10612 - metadata: 10613 - type: object 10614 - spec: 10615 - description: ReceiverSpec defines the desired state of the Receiver. 10616 - properties: 10617 - events: 10618 - description: |- 10619 - Events specifies the list of event types to handle, 10620 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 10621 - items: 10622 - type: string 10623 - type: array 10624 - interval: 10625 - default: 10m 10626 - description: Interval at which to reconcile the Receiver with its Secret references. 10627 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10628 - type: string 10629 - resourceFilter: 10630 - description: |- 10631 - ResourceFilter is a CEL expression expected to return a boolean that is 10632 - evaluated for each resource referenced in the Resources field when a 10633 - webhook is received. If the expression returns false then the controller 10634 - will not request a reconciliation for the resource. 10635 - When the expression is specified the controller will parse it and mark 10636 - the object as terminally failed if the expression is invalid or does not 10637 - return a boolean. 10638 - type: string 10639 - resources: 10640 - description: A list of resources to be notified about changes. 10641 - items: 10642 - description: |- 10643 - CrossNamespaceObjectReference contains enough information to let you locate the 10644 - typed referenced object at cluster level 10645 - properties: 10646 - apiVersion: 10647 - description: API version of the referent 10648 - type: string 10649 - kind: 10650 - description: Kind of the referent 10651 - enum: 10652 - - Bucket 10653 - - GitRepository 10654 - - Kustomization 10655 - - HelmRelease 10656 - - HelmChart 10657 - - HelmRepository 10658 - - ImageRepository 10659 - - ImagePolicy 10660 - - ImageUpdateAutomation 10661 - - OCIRepository 10662 - - ArtifactGenerator 10663 - - ExternalArtifact 10664 - type: string 10665 - matchLabels: 10666 - additionalProperties: 10667 - type: string 10668 - description: |- 10669 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 10670 - map is equivalent to an element of matchExpressions, whose key field is "key", the 10671 - operator is "In", and the values array contains only "value". The requirements are ANDed. 10672 - MatchLabels requires the name to be set to `*`. 10673 - type: object 10674 - name: 10675 - description: |- 10676 - Name of the referent 10677 - If multiple resources are targeted `*` may be set. 10678 - maxLength: 253 10679 - minLength: 1 10680 - type: string 10681 - namespace: 10682 - description: Namespace of the referent 10683 - maxLength: 253 10684 - minLength: 1 10685 - type: string 10686 - required: 10687 - - kind 10688 - - name 10689 - type: object 10690 - type: array 10691 - secretRef: 10692 - description: |- 10693 - SecretRef specifies the Secret containing the token used 10694 - to validate the payload authenticity. 10695 + - additionalPrinterColumns: 10696 + - jsonPath: .metadata.creationTimestamp 10697 + name: Age 10698 + type: date 10699 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 10700 + name: Ready 10701 + type: string 10702 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 10703 + name: Status 10704 + type: string 10705 + name: v1 10706 + schema: 10707 + openAPIV3Schema: 10708 + description: Receiver is the Schema for the receivers API. 10709 + properties: 10710 + apiVersion: 10711 + description: |- 10712 + APIVersion defines the versioned schema of this representation of an object. 10713 + Servers should convert recognized schemas to the latest internal value, and 10714 + may reject unrecognized values. 10715 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10716 + type: string 10717 + kind: 10718 + description: |- 10719 + Kind is a string value representing the REST resource this object represents. 10720 + Servers may infer this from the endpoint the client submits requests to. 10721 + Cannot be updated. 10722 + In CamelCase. 10723 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10724 + type: string 10725 + metadata: 10726 + type: object 10727 + spec: 10728 + description: ReceiverSpec defines the desired state of the Receiver. 10729 + properties: 10730 + events: 10731 + description: |- 10732 + Events specifies the list of event types to handle, 10733 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 10734 + items: 10735 + type: string 10736 + type: array 10737 + interval: 10738 + default: 10m 10739 + description: Interval at which to reconcile the Receiver with its 10740 + Secret references. 10741 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10742 + type: string 10743 + resourceFilter: 10744 + description: |- 10745 + ResourceFilter is a CEL expression expected to return a boolean that is 10746 + evaluated for each resource referenced in the Resources field when a 10747 + webhook is received. If the expression returns false then the controller 10748 + will not request a reconciliation for the resource. 10749 + When the expression is specified the controller will parse it and mark 10750 + the object as terminally failed if the expression is invalid or does not 10751 + return a boolean. 10752 + type: string 10753 + resources: 10754 + description: A list of resources to be notified about changes. 10755 + items: 10756 + description: |- 10757 + CrossNamespaceObjectReference contains enough information to let you locate the 10758 + typed referenced object at cluster level 10759 properties: 10760 - name: 10761 - description: Name of the referent. 10762 + apiVersion: 10763 + description: API version of the referent 10764 type: string 10765 - required: 10766 - - name 10767 - type: object 10768 - suspend: 10769 - description: |- 10770 - Suspend tells the controller to suspend subsequent 10771 - events handling for this receiver. 10772 - type: boolean 10773 - type: 10774 - description: |- 10775 - Type of webhook sender, used to determine 10776 - the validation procedure and payload deserialization. 10777 - enum: 10778 - - generic 10779 - - generic-hmac 10780 - - github 10781 - - gitlab 10782 - - bitbucket 10783 - - harbor 10784 - - dockerhub 10785 - - quay 10786 - - gcr 10787 - - nexus 10788 - - acr 10789 - - cdevents 10790 - type: string 10791 - required: 10792 - - resources 10793 - - secretRef 10794 - - type 10795 - type: object 10796 - status: 10797 - default: 10798 - observedGeneration: -1 10799 - description: ReceiverStatus defines the observed state of the Receiver. 10800 - properties: 10801 - conditions: 10802 - description: Conditions holds the conditions for the Receiver. 10803 - items: 10804 - description: Condition contains details for one aspect of the current state of this API Resource. 10805 - properties: 10806 - lastTransitionTime: 10807 - description: |- 10808 - lastTransitionTime is the last time the condition transitioned from one status to another. 10809 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 10810 - format: date-time 10811 + kind: 10812 + description: Kind of the referent 10813 + enum: 10814 + - Bucket 10815 + - GitRepository 10816 + - Kustomization 10817 + - HelmRelease 10818 + - HelmChart 10819 + - HelmRepository 10820 + - ImageRepository 10821 + - ImagePolicy 10822 + - ImageUpdateAutomation 10823 + - OCIRepository 10824 + - ArtifactGenerator 10825 + - ExternalArtifact 10826 + type: string 10827 + matchLabels: 10828 + additionalProperties: 10829 type: string 10830 - message: 10831 - description: |- 10832 - message is a human readable message indicating details about the transition. 10833 - This may be an empty string. 10834 - maxLength: 32768 10835 - type: string 10836 - observedGeneration: 10837 - description: |- 10838 - observedGeneration represents the .metadata.generation that the condition was set based upon. 10839 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 10840 - with respect to the current state of the instance. 10841 - format: int64 10842 - minimum: 0 10843 - type: integer 10844 - reason: 10845 - description: |- 10846 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 10847 - Producers of specific condition types may define expected values and meanings for this field, 10848 - and whether the values are considered a guaranteed API. 10849 - The value should be a CamelCase string. 10850 - This field may not be empty. 10851 - maxLength: 1024 10852 - minLength: 1 10853 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 10854 - type: string 10855 - status: 10856 - description: status of the condition, one of True, False, Unknown. 10857 - enum: 10858 - - "True" 10859 - - "False" 10860 - - Unknown 10861 - type: string 10862 - type: 10863 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 10864 - maxLength: 316 10865 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 10866 - type: string 10867 - required: 10868 - - lastTransitionTime 10869 - - message 10870 - - reason 10871 - - status 10872 - - type 10873 - type: object 10874 - type: array 10875 - lastHandledReconcileAt: 10876 - description: |- 10877 - LastHandledReconcileAt holds the value of the most recent 10878 - reconcile request value, so a change of the annotation value 10879 - can be detected. 10880 - type: string 10881 - observedGeneration: 10882 - description: ObservedGeneration is the last observed generation of the Receiver object. 10883 - format: int64 10884 - type: integer 10885 - webhookPath: 10886 - description: |- 10887 - WebhookPath is the generated incoming webhook address in the format 10888 - of '/hook/sha256sum(token+name+namespace)'. 10889 - type: string 10890 - type: object 10891 - type: object 10892 - served: true 10893 - storage: true 10894 - subresources: 10895 - status: {} 10896 - - additionalPrinterColumns: 10897 - - jsonPath: .metadata.creationTimestamp 10898 - name: Age 10899 - type: date 10900 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 10901 - name: Ready 10902 - type: string 10903 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 10904 - name: Status 10905 - type: string 10906 - deprecated: true 10907 - deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 10908 - name: v1beta2 10909 - schema: 10910 - openAPIV3Schema: 10911 - description: Receiver is the Schema for the receivers API. 10912 - properties: 10913 - apiVersion: 10914 - description: |- 10915 - APIVersion defines the versioned schema of this representation of an object. 10916 - Servers should convert recognized schemas to the latest internal value, and 10917 - may reject unrecognized values. 10918 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 10919 - type: string 10920 - kind: 10921 - description: |- 10922 - Kind is a string value representing the REST resource this object represents. 10923 - Servers may infer this from the endpoint the client submits requests to. 10924 - Cannot be updated. 10925 - In CamelCase. 10926 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 10927 - type: string 10928 - metadata: 10929 - type: object 10930 - spec: 10931 - description: ReceiverSpec defines the desired state of the Receiver. 10932 - properties: 10933 - events: 10934 - description: |- 10935 - Events specifies the list of event types to handle, 10936 - e.g. 'push' for GitHub or 'Push Hook' for GitLab. 10937 - items: 10938 - type: string 10939 - type: array 10940 - interval: 10941 - description: Interval at which to reconcile the Receiver with its Secret references. 10942 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 10943 - type: string 10944 - resources: 10945 - description: A list of resources to be notified about changes. 10946 - items: 10947 - description: |- 10948 - CrossNamespaceObjectReference contains enough information to let you locate the 10949 - typed referenced object at cluster level 10950 - properties: 10951 - apiVersion: 10952 - description: API version of the referent 10953 - type: string 10954 - kind: 10955 - description: Kind of the referent 10956 - enum: 10957 - - Bucket 10958 - - GitRepository 10959 - - Kustomization 10960 - - HelmRelease 10961 - - HelmChart 10962 - - HelmRepository 10963 - - ImageRepository 10964 - - ImagePolicy 10965 - - ImageUpdateAutomation 10966 - - OCIRepository 10967 - - ArtifactGenerator 10968 - - ExternalArtifact 10969 - type: string 10970 - matchLabels: 10971 - additionalProperties: 10972 - type: string 10973 - description: |- 10974 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 10975 - map is equivalent to an element of matchExpressions, whose key field is "key", the 10976 - operator is "In", and the values array contains only "value". The requirements are ANDed. 10977 - MatchLabels requires the name to be set to `*`. 10978 - type: object 10979 - name: 10980 - description: |- 10981 - Name of the referent 10982 - If multiple resources are targeted `*` may be set. 10983 - maxLength: 253 10984 - minLength: 1 10985 - type: string 10986 - namespace: 10987 - description: Namespace of the referent 10988 - maxLength: 253 10989 - minLength: 1 10990 - type: string 10991 - required: 10992 - - kind 10993 - - name 10994 - type: object 10995 - type: array 10996 - secretRef: 10997 - description: |- 10998 - SecretRef specifies the Secret containing the token used 10999 - to validate the payload authenticity. 11000 - properties: 11001 + description: |- 11002 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 11003 + map is equivalent to an element of matchExpressions, whose key field is "key", the 11004 + operator is "In", and the values array contains only "value". The requirements are ANDed. 11005 + MatchLabels requires the name to be set to `*`. 11006 + type: object 11007 name: 11008 - description: Name of the referent. 11009 + description: |- 11010 + Name of the referent 11011 + If multiple resources are targeted `*` may be set. 11012 + maxLength: 253 11013 + minLength: 1 11014 + type: string 11015 + namespace: 11016 + description: Namespace of the referent 11017 + maxLength: 253 11018 + minLength: 1 11019 type: string 11020 required: 11021 - - name 11022 + - kind 11023 + - name 11024 type: object 11025 - suspend: 11026 - description: |- 11027 - Suspend tells the controller to suspend subsequent 11028 - events handling for this receiver. 11029 - type: boolean 11030 - type: 11031 - description: |- 11032 - Type of webhook sender, used to determine 11033 - the validation procedure and payload deserialization. 11034 - enum: 11035 - - generic 11036 - - generic-hmac 11037 - - github 11038 - - gitlab 11039 - - bitbucket 11040 - - harbor 11041 - - dockerhub 11042 - - quay 11043 - - gcr 11044 - - nexus 11045 - - acr 11046 - type: string 11047 - required: 11048 - - resources 11049 - - secretRef 11050 - - type 11051 - type: object 11052 - status: 11053 - default: 11054 - observedGeneration: -1 11055 - description: ReceiverStatus defines the observed state of the Receiver. 11056 - properties: 11057 - conditions: 11058 - description: Conditions holds the conditions for the Receiver. 11059 - items: 11060 - description: Condition contains details for one aspect of the current state of this API Resource. 11061 - properties: 11062 - lastTransitionTime: 11063 - description: |- 11064 - lastTransitionTime is the last time the condition transitioned from one status to another. 11065 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11066 - format: date-time 11067 - type: string 11068 - message: 11069 - description: |- 11070 - message is a human readable message indicating details about the transition. 11071 - This may be an empty string. 11072 - maxLength: 32768 11073 - type: string 11074 - observedGeneration: 11075 - description: |- 11076 - observedGeneration represents the .metadata.generation that the condition was set based upon. 11077 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11078 - with respect to the current state of the instance. 11079 - format: int64 11080 - minimum: 0 11081 - type: integer 11082 - reason: 11083 - description: |- 11084 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 11085 - Producers of specific condition types may define expected values and meanings for this field, 11086 - and whether the values are considered a guaranteed API. 11087 - The value should be a CamelCase string. 11088 - This field may not be empty. 11089 - maxLength: 1024 11090 - minLength: 1 11091 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11092 - type: string 11093 - status: 11094 - description: status of the condition, one of True, False, Unknown. 11095 - enum: 11096 - - "True" 11097 - - "False" 11098 - - Unknown 11099 - type: string 11100 - type: 11101 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 11102 - maxLength: 316 11103 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11104 + type: array 11105 + secretRef: 11106 + description: |- 11107 + SecretRef specifies the Secret containing the token used 11108 + to validate the payload authenticity. 11109 + properties: 11110 + name: 11111 + description: Name of the referent. 11112 + type: string 11113 + required: 11114 + - name 11115 + type: object 11116 + suspend: 11117 + description: |- 11118 + Suspend tells the controller to suspend subsequent 11119 + events handling for this receiver. 11120 + type: boolean 11121 + type: 11122 + description: |- 11123 + Type of webhook sender, used to determine 11124 + the validation procedure and payload deserialization. 11125 + enum: 11126 + - generic 11127 + - generic-hmac 11128 + - github 11129 + - gitlab 11130 + - bitbucket 11131 + - harbor 11132 + - dockerhub 11133 + - quay 11134 + - gcr 11135 + - nexus 11136 + - acr 11137 + - cdevents 11138 + type: string 11139 + required: 11140 + - resources 11141 + - secretRef 11142 + - type 11143 + type: object 11144 + status: 11145 + default: 11146 + observedGeneration: -1 11147 + description: ReceiverStatus defines the observed state of the Receiver. 11148 + properties: 11149 + conditions: 11150 + description: Conditions holds the conditions for the Receiver. 11151 + items: 11152 + description: Condition contains details for one aspect of the current 11153 + state of this API Resource. 11154 + properties: 11155 + lastTransitionTime: 11156 + description: |- 11157 + lastTransitionTime is the last time the condition transitioned from one status to another. 11158 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11159 + format: date-time 11160 + type: string 11161 + message: 11162 + description: |- 11163 + message is a human readable message indicating details about the transition. 11164 + This may be an empty string. 11165 + maxLength: 32768 11166 + type: string 11167 + observedGeneration: 11168 + description: |- 11169 + observedGeneration represents the .metadata.generation that the condition was set based upon. 11170 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11171 + with respect to the current state of the instance. 11172 + format: int64 11173 + minimum: 0 11174 + type: integer 11175 + reason: 11176 + description: |- 11177 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 11178 + Producers of specific condition types may define expected values and meanings for this field, 11179 + and whether the values are considered a guaranteed API. 11180 + The value should be a CamelCase string. 11181 + This field may not be empty. 11182 + maxLength: 1024 11183 + minLength: 1 11184 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11185 + type: string 11186 + status: 11187 + description: status of the condition, one of True, False, Unknown. 11188 + enum: 11189 + - "True" 11190 + - "False" 11191 + - Unknown 11192 + type: string 11193 + type: 11194 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 11195 + maxLength: 316 11196 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11197 + type: string 11198 + required: 11199 + - lastTransitionTime 11200 + - message 11201 + - reason 11202 + - status 11203 + - type 11204 + type: object 11205 + type: array 11206 + lastHandledReconcileAt: 11207 + description: |- 11208 + LastHandledReconcileAt holds the value of the most recent 11209 + reconcile request value, so a change of the annotation value 11210 + can be detected. 11211 + type: string 11212 + observedGeneration: 11213 + description: ObservedGeneration is the last observed generation of 11214 + the Receiver object. 11215 + format: int64 11216 + type: integer 11217 + webhookPath: 11218 + description: |- 11219 + WebhookPath is the generated incoming webhook address in the format 11220 + of '/hook/sha256sum(token+name+namespace)'. 11221 + type: string 11222 + type: object 11223 + type: object 11224 + served: true 11225 + storage: true 11226 + subresources: 11227 + status: {} 11228 + - additionalPrinterColumns: 11229 + - jsonPath: .metadata.creationTimestamp 11230 + name: Age 11231 + type: date 11232 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 11233 + name: Ready 11234 + type: string 11235 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 11236 + name: Status 11237 + type: string 11238 + deprecated: true 11239 + deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1 11240 + name: v1beta2 11241 + schema: 11242 + openAPIV3Schema: 11243 + description: Receiver is the Schema for the receivers API. 11244 + properties: 11245 + apiVersion: 11246 + description: |- 11247 + APIVersion defines the versioned schema of this representation of an object. 11248 + Servers should convert recognized schemas to the latest internal value, and 11249 + may reject unrecognized values. 11250 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11251 + type: string 11252 + kind: 11253 + description: |- 11254 + Kind is a string value representing the REST resource this object represents. 11255 + Servers may infer this from the endpoint the client submits requests to. 11256 + Cannot be updated. 11257 + In CamelCase. 11258 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11259 + type: string 11260 + metadata: 11261 + type: object 11262 + spec: 11263 + description: ReceiverSpec defines the desired state of the Receiver. 11264 + properties: 11265 + events: 11266 + description: |- 11267 + Events specifies the list of event types to handle, 11268 + e.g. 'push' for GitHub or 'Push Hook' for GitLab. 11269 + items: 11270 + type: string 11271 + type: array 11272 + interval: 11273 + description: Interval at which to reconcile the Receiver with its 11274 + Secret references. 11275 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11276 + type: string 11277 + resources: 11278 + description: A list of resources to be notified about changes. 11279 + items: 11280 + description: |- 11281 + CrossNamespaceObjectReference contains enough information to let you locate the 11282 + typed referenced object at cluster level 11283 + properties: 11284 + apiVersion: 11285 + description: API version of the referent 11286 + type: string 11287 + kind: 11288 + description: Kind of the referent 11289 + enum: 11290 + - Bucket 11291 + - GitRepository 11292 + - Kustomization 11293 + - HelmRelease 11294 + - HelmChart 11295 + - HelmRepository 11296 + - ImageRepository 11297 + - ImagePolicy 11298 + - ImageUpdateAutomation 11299 + - OCIRepository 11300 + - ArtifactGenerator 11301 + - ExternalArtifact 11302 + type: string 11303 + matchLabels: 11304 + additionalProperties: 11305 type: string 11306 - required: 11307 - - lastTransitionTime 11308 - - message 11309 - - reason 11310 - - status 11311 - - type 11312 - type: object 11313 - type: array 11314 - lastHandledReconcileAt: 11315 - description: |- 11316 - LastHandledReconcileAt holds the value of the most recent 11317 - reconcile request value, so a change of the annotation value 11318 - can be detected. 11319 - type: string 11320 - observedGeneration: 11321 - description: ObservedGeneration is the last observed generation of the Receiver object. 11322 - format: int64 11323 - type: integer 11324 - url: 11325 - description: |- 11326 - URL is the generated incoming webhook address in the format 11327 - of '/hook/sha256sum(token+name+namespace)'. 11328 - Deprecated: Replaced by WebhookPath. 11329 - type: string 11330 - webhookPath: 11331 - description: |- 11332 - WebhookPath is the generated incoming webhook address in the format 11333 - of '/hook/sha256sum(token+name+namespace)'. 11334 - type: string 11335 - type: object 11336 - type: object 11337 - served: true 11338 - storage: false 11339 - subresources: 11340 - status: {} 11341 + description: |- 11342 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 11343 + map is equivalent to an element of matchExpressions, whose key field is "key", the 11344 + operator is "In", and the values array contains only "value". The requirements are ANDed. 11345 + MatchLabels requires the name to be set to `*`. 11346 + type: object 11347 + name: 11348 + description: |- 11349 + Name of the referent 11350 + If multiple resources are targeted `*` may be set. 11351 + maxLength: 253 11352 + minLength: 1 11353 + type: string 11354 + namespace: 11355 + description: Namespace of the referent 11356 + maxLength: 253 11357 + minLength: 1 11358 + type: string 11359 + required: 11360 + - kind 11361 + - name 11362 + type: object 11363 + type: array 11364 + secretRef: 11365 + description: |- 11366 + SecretRef specifies the Secret containing the token used 11367 + to validate the payload authenticity. 11368 + properties: 11369 + name: 11370 + description: Name of the referent. 11371 + type: string 11372 + required: 11373 + - name 11374 + type: object 11375 + suspend: 11376 + description: |- 11377 + Suspend tells the controller to suspend subsequent 11378 + events handling for this receiver. 11379 + type: boolean 11380 + type: 11381 + description: |- 11382 + Type of webhook sender, used to determine 11383 + the validation procedure and payload deserialization. 11384 + enum: 11385 + - generic 11386 + - generic-hmac 11387 + - github 11388 + - gitlab 11389 + - bitbucket 11390 + - harbor 11391 + - dockerhub 11392 + - quay 11393 + - gcr 11394 + - nexus 11395 + - acr 11396 + type: string 11397 + required: 11398 + - resources 11399 + - secretRef 11400 + - type 11401 + type: object 11402 + status: 11403 + default: 11404 + observedGeneration: -1 11405 + description: ReceiverStatus defines the observed state of the Receiver. 11406 + properties: 11407 + conditions: 11408 + description: Conditions holds the conditions for the Receiver. 11409 + items: 11410 + description: Condition contains details for one aspect of the current 11411 + state of this API Resource. 11412 + properties: 11413 + lastTransitionTime: 11414 + description: |- 11415 + lastTransitionTime is the last time the condition transitioned from one status to another. 11416 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11417 + format: date-time 11418 + type: string 11419 + message: 11420 + description: |- 11421 + message is a human readable message indicating details about the transition. 11422 + This may be an empty string. 11423 + maxLength: 32768 11424 + type: string 11425 + observedGeneration: 11426 + description: |- 11427 + observedGeneration represents the .metadata.generation that the condition was set based upon. 11428 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 11429 + with respect to the current state of the instance. 11430 + format: int64 11431 + minimum: 0 11432 + type: integer 11433 + reason: 11434 + description: |- 11435 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 11436 + Producers of specific condition types may define expected values and meanings for this field, 11437 + and whether the values are considered a guaranteed API. 11438 + The value should be a CamelCase string. 11439 + This field may not be empty. 11440 + maxLength: 1024 11441 + minLength: 1 11442 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 11443 + type: string 11444 + status: 11445 + description: status of the condition, one of True, False, Unknown. 11446 + enum: 11447 + - "True" 11448 + - "False" 11449 + - Unknown 11450 + type: string 11451 + type: 11452 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 11453 + maxLength: 316 11454 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 11455 + type: string 11456 + required: 11457 + - lastTransitionTime 11458 + - message 11459 + - reason 11460 + - status 11461 + - type 11462 + type: object 11463 + type: array 11464 + lastHandledReconcileAt: 11465 + description: |- 11466 + LastHandledReconcileAt holds the value of the most recent 11467 + reconcile request value, so a change of the annotation value 11468 + can be detected. 11469 + type: string 11470 + observedGeneration: 11471 + description: ObservedGeneration is the last observed generation of 11472 + the Receiver object. 11473 + format: int64 11474 + type: integer 11475 + url: 11476 + description: |- 11477 + URL is the generated incoming webhook address in the format 11478 + of '/hook/sha256sum(token+name+namespace)'. 11479 + Deprecated: Replaced by WebhookPath. 11480 + type: string 11481 + webhookPath: 11482 + description: |- 11483 + WebhookPath is the generated incoming webhook address in the format 11484 + of '/hook/sha256sum(token+name+namespace)'. 11485 + type: string 11486 + type: object 11487 + type: object 11488 + served: true 11489 + storage: false 11490 + subresources: 11491 + status: {} 11492 --- 11493 apiVersion: v1 11494 kind: ServiceAccount 11495 @@ -6155,7 +6282,7 @@ metadata: 11496 app.kubernetes.io/component: notification-controller 11497 app.kubernetes.io/instance: flux-system 11498 app.kubernetes.io/part-of: flux 11499 - app.kubernetes.io/version: v2.8.0 11500 + app.kubernetes.io/version: v2.8.1 11501 name: notification-controller 11502 namespace: flux-system 11503 --- 11504 @@ -6166,16 +6293,16 @@ metadata: 11505 app.kubernetes.io/component: notification-controller 11506 app.kubernetes.io/instance: flux-system 11507 app.kubernetes.io/part-of: flux 11508 - app.kubernetes.io/version: v2.8.0 11509 + app.kubernetes.io/version: v2.8.1 11510 control-plane: controller 11511 name: notification-controller 11512 namespace: flux-system 11513 spec: 11514 ports: 11515 - - name: http 11516 - port: 80 11517 - protocol: TCP 11518 - targetPort: http 11519 + - name: http 11520 + port: 80 11521 + protocol: TCP 11522 + targetPort: http 11523 selector: 11524 app: notification-controller 11525 type: ClusterIP 11526 @@ -6187,16 +6314,16 @@ metadata: 11527 app.kubernetes.io/component: notification-controller 11528 app.kubernetes.io/instance: flux-system 11529 app.kubernetes.io/part-of: flux 11530 - app.kubernetes.io/version: v2.8.0 11531 + app.kubernetes.io/version: v2.8.1 11532 control-plane: controller 11533 name: webhook-receiver 11534 namespace: flux-system 11535 spec: 11536 ports: 11537 - - name: http 11538 - port: 80 11539 - protocol: TCP 11540 - targetPort: http-webhook 11541 + - name: http 11542 + port: 80 11543 + protocol: TCP 11544 + targetPort: http-webhook 11545 selector: 11546 app: notification-controller 11547 type: ClusterIP 11548 @@ -6208,7 +6335,7 @@ metadata: 11549 app.kubernetes.io/component: notification-controller 11550 app.kubernetes.io/instance: flux-system 11551 app.kubernetes.io/part-of: flux 11552 - app.kubernetes.io/version: v2.8.0 11553 + app.kubernetes.io/version: v2.8.1 11554 control-plane: controller 11555 name: notification-controller 11556 namespace: flux-system 11557 @@ -6227,67 +6354,67 @@ spec: 11558 app.kubernetes.io/component: notification-controller 11559 app.kubernetes.io/instance: flux-system 11560 app.kubernetes.io/part-of: flux 11561 - app.kubernetes.io/version: v2.8.0 11562 + app.kubernetes.io/version: v2.8.1 11563 spec: 11564 containers: 11565 - - args: 11566 - - --watch-all-namespaces=true 11567 - - --log-level=info 11568 - - --log-encoding=json 11569 - - --enable-leader-election 11570 - env: 11571 - - name: RUNTIME_NAMESPACE 11572 - valueFrom: 11573 - fieldRef: 11574 - fieldPath: metadata.namespace 11575 - - name: GOMEMLIMIT 11576 - valueFrom: 11577 - resourceFieldRef: 11578 - containerName: manager 11579 - resource: limits.memory 11580 - image: ghcr.io/fluxcd/notification-controller:v1.8.0 11581 - imagePullPolicy: IfNotPresent 11582 - livenessProbe: 11583 - httpGet: 11584 - path: /healthz 11585 - port: healthz 11586 - name: manager 11587 - ports: 11588 - - containerPort: 9090 11589 - name: http 11590 - protocol: TCP 11591 - - containerPort: 9292 11592 - name: http-webhook 11593 - protocol: TCP 11594 - - containerPort: 8080 11595 - name: http-prom 11596 - protocol: TCP 11597 - - containerPort: 9440 11598 - name: healthz 11599 - protocol: TCP 11600 - readinessProbe: 11601 - httpGet: 11602 - path: /readyz 11603 - port: healthz 11604 - resources: 11605 - limits: 11606 - cpu: 1000m 11607 - memory: 1Gi 11608 - requests: 11609 - cpu: 100m 11610 - memory: 64Mi 11611 - securityContext: 11612 - allowPrivilegeEscalation: false 11613 - capabilities: 11614 - drop: 11615 - - ALL 11616 - readOnlyRootFilesystem: true 11617 - runAsNonRoot: true 11618 - seccompProfile: 11619 - type: RuntimeDefault 11620 - volumeMounts: 11621 - - mountPath: /tmp 11622 - name: temp 11623 + - args: 11624 + - --watch-all-namespaces=true 11625 + - --log-level=info 11626 + - --log-encoding=json 11627 + - --enable-leader-election 11628 + env: 11629 + - name: RUNTIME_NAMESPACE 11630 + valueFrom: 11631 + fieldRef: 11632 + fieldPath: metadata.namespace 11633 + - name: GOMEMLIMIT 11634 + valueFrom: 11635 + resourceFieldRef: 11636 + containerName: manager 11637 + resource: limits.memory 11638 + image: ghcr.io/fluxcd/notification-controller:v1.8.1 11639 + imagePullPolicy: IfNotPresent 11640 + livenessProbe: 11641 + httpGet: 11642 + path: /healthz 11643 + port: healthz 11644 + name: manager 11645 + ports: 11646 + - containerPort: 9090 11647 + name: http 11648 + protocol: TCP 11649 + - containerPort: 9292 11650 + name: http-webhook 11651 + protocol: TCP 11652 + - containerPort: 8080 11653 + name: http-prom 11654 + protocol: TCP 11655 + - containerPort: 9440 11656 + name: healthz 11657 + protocol: TCP 11658 + readinessProbe: 11659 + httpGet: 11660 + path: /readyz 11661 + port: healthz 11662 + resources: 11663 + limits: 11664 + cpu: 1000m 11665 + memory: 1Gi 11666 + requests: 11667 + cpu: 100m 11668 + memory: 64Mi 11669 + securityContext: 11670 + allowPrivilegeEscalation: false 11671 + capabilities: 11672 + drop: 11673 + - ALL 11674 + readOnlyRootFilesystem: true 11675 + runAsNonRoot: true 11676 + seccompProfile: 11677 + type: RuntimeDefault 11678 + volumeMounts: 11679 + - mountPath: /tmp 11680 + name: temp 11681 nodeSelector: 11682 kubernetes.io/os: linux 11683 securityContext: 11684 @@ -6295,8 +6422,8 @@ spec: 11685 serviceAccountName: notification-controller 11686 terminationGracePeriodSeconds: 10 11687 volumes: 11688 - - emptyDir: {} 11689 - name: temp 11690 + - emptyDir: {} 11691 + name: temp 11692 --- 11693 apiVersion: apiextensions.k8s.io/v1 11694 kind: CustomResourceDefinition 11695 @@ -6307,7 +6434,7 @@ metadata: 11696 app.kubernetes.io/component: image-reflector-controller 11697 app.kubernetes.io/instance: flux-system 11698 app.kubernetes.io/part-of: flux 11699 - app.kubernetes.io/version: v2.8.0 11700 + app.kubernetes.io/version: v2.8.1 11701 name: imagepolicies.image.toolkit.fluxcd.io 11702 spec: 11703 group: image.toolkit.fluxcd.io 11704 @@ -6316,1169 +6443,1191 @@ spec: 11705 listKind: ImagePolicyList 11706 plural: imagepolicies 11707 shortNames: 11708 - - imgpol 11709 - - imagepol 11710 + - imgpol 11711 + - imagepol 11712 singular: imagepolicy 11713 scope: Namespaced 11714 versions: 11715 - - additionalPrinterColumns: 11716 - - jsonPath: .status.latestRef.name 11717 - name: Image 11718 - type: string 11719 - - jsonPath: .status.latestRef.tag 11720 - name: Tag 11721 - type: string 11722 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 11723 - name: Ready 11724 - type: string 11725 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 11726 - name: Status 11727 - type: string 11728 - - jsonPath: .metadata.creationTimestamp 11729 - name: Age 11730 - type: date 11731 - name: v1 11732 - schema: 11733 - openAPIV3Schema: 11734 - description: ImagePolicy is the Schema for the imagepolicies API 11735 - properties: 11736 - apiVersion: 11737 - description: |- 11738 - APIVersion defines the versioned schema of this representation of an object. 11739 - Servers should convert recognized schemas to the latest internal value, and 11740 - may reject unrecognized values. 11741 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11742 - type: string 11743 - kind: 11744 - description: |- 11745 - Kind is a string value representing the REST resource this object represents. 11746 - Servers may infer this from the endpoint the client submits requests to. 11747 - Cannot be updated. 11748 - In CamelCase. 11749 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11750 - type: string 11751 - metadata: 11752 - type: object 11753 - spec: 11754 - description: |- 11755 - ImagePolicySpec defines the parameters for calculating the 11756 - ImagePolicy. 11757 - properties: 11758 - digestReflectionPolicy: 11759 - default: Never 11760 - description: |- 11761 - DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 11762 + - additionalPrinterColumns: 11763 + - jsonPath: .status.latestRef.name 11764 + name: Image 11765 + type: string 11766 + - jsonPath: .status.latestRef.tag 11767 + name: Tag 11768 + type: string 11769 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 11770 + name: Ready 11771 + type: string 11772 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 11773 + name: Status 11774 + type: string 11775 + - jsonPath: .metadata.creationTimestamp 11776 + name: Age 11777 + type: date 11778 + name: v1 11779 + schema: 11780 + openAPIV3Schema: 11781 + description: ImagePolicy is the Schema for the imagepolicies API 11782 + properties: 11783 + apiVersion: 11784 + description: |- 11785 + APIVersion defines the versioned schema of this representation of an object. 11786 + Servers should convert recognized schemas to the latest internal value, and 11787 + may reject unrecognized values. 11788 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 11789 + type: string 11790 + kind: 11791 + description: |- 11792 + Kind is a string value representing the REST resource this object represents. 11793 + Servers may infer this from the endpoint the client submits requests to. 11794 + Cannot be updated. 11795 + In CamelCase. 11796 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 11797 + type: string 11798 + metadata: 11799 + type: object 11800 + spec: 11801 + description: |- 11802 + ImagePolicySpec defines the parameters for calculating the 11803 + ImagePolicy. 11804 + properties: 11805 + digestReflectionPolicy: 11806 + default: Never 11807 + description: |- 11808 + DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 11809 11810 - Never: The digest field will always be set to the empty string. 11811 + Never: The digest field will always be set to the empty string. 11812 11813 - IfNotPresent: The digest field will be set to the digest of the elected 11814 - latest image if the field is empty and the image did not change. 11815 + IfNotPresent: The digest field will be set to the digest of the elected 11816 + latest image if the field is empty and the image did not change. 11817 11818 - Always: The digest field will always be set to the digest of the elected 11819 - latest image. 11820 + Always: The digest field will always be set to the digest of the elected 11821 + latest image. 11822 11823 - Default: Never. 11824 - enum: 11825 - - Always 11826 - - IfNotPresent 11827 - - Never 11828 - type: string 11829 - filterTags: 11830 - description: |- 11831 - FilterTags enables filtering for only a subset of tags based on a set of 11832 - rules. If no rules are provided, all the tags from the repository will be 11833 - ordered and compared. 11834 - properties: 11835 - extract: 11836 - description: |- 11837 - Extract allows a capture group to be extracted from the specified regular 11838 - expression pattern, useful before tag evaluation. 11839 - type: string 11840 - pattern: 11841 - description: |- 11842 - Pattern specifies a regular expression pattern used to filter for image 11843 - tags. 11844 - type: string 11845 - type: object 11846 - imageRepositoryRef: 11847 - description: |- 11848 - ImageRepositoryRef points at the object specifying the image 11849 - being scanned 11850 - properties: 11851 - name: 11852 - description: Name of the referent. 11853 - type: string 11854 - namespace: 11855 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 11856 - type: string 11857 - required: 11858 - - name 11859 - type: object 11860 - interval: 11861 - description: |- 11862 - Interval is the length of time to wait between 11863 - refreshing the digest of the latest tag when the 11864 - reflection policy is set to "Always". 11865 + Default: Never. 11866 + enum: 11867 + - Always 11868 + - IfNotPresent 11869 + - Never 11870 + type: string 11871 + filterTags: 11872 + description: |- 11873 + FilterTags enables filtering for only a subset of tags based on a set of 11874 + rules. If no rules are provided, all the tags from the repository will be 11875 + ordered and compared. 11876 + properties: 11877 + extract: 11878 + description: |- 11879 + Extract allows a capture group to be extracted from the specified regular 11880 + expression pattern, useful before tag evaluation. 11881 + type: string 11882 + pattern: 11883 + description: |- 11884 + Pattern specifies a regular expression pattern used to filter for image 11885 + tags. 11886 + type: string 11887 + type: object 11888 + imageRepositoryRef: 11889 + description: |- 11890 + ImageRepositoryRef points at the object specifying the image 11891 + being scanned 11892 + properties: 11893 + name: 11894 + description: Name of the referent. 11895 + type: string 11896 + namespace: 11897 + description: Namespace of the referent, when not specified it 11898 + acts as LocalObjectReference. 11899 + type: string 11900 + required: 11901 + - name 11902 + type: object 11903 + interval: 11904 + description: |- 11905 + Interval is the length of time to wait between 11906 + refreshing the digest of the latest tag when the 11907 + reflection policy is set to "Always". 11908 11909 - Defaults to 10m. 11910 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11911 - type: string 11912 - policy: 11913 - description: |- 11914 - Policy gives the particulars of the policy to be followed in 11915 - selecting the most recent image 11916 - properties: 11917 - alphabetical: 11918 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 11919 - properties: 11920 - order: 11921 - default: asc 11922 - description: |- 11923 - Order specifies the sorting order of the tags. Given the letters of the 11924 - alphabet as tags, ascending order would select Z, and descending order 11925 - would select A. 11926 - enum: 11927 - - asc 11928 - - desc 11929 - type: string 11930 - type: object 11931 - numerical: 11932 - description: Numerical set of rules to use for numerical ordering of the tags. 11933 - properties: 11934 - order: 11935 - default: asc 11936 - description: |- 11937 - Order specifies the sorting order of the tags. Given the integer values 11938 - from 0 to 9 as tags, ascending order would select 9, and descending order 11939 - would select 0. 11940 - enum: 11941 - - asc 11942 - - desc 11943 - type: string 11944 - type: object 11945 - semver: 11946 - description: |- 11947 - SemVer gives a semantic version range to check against the tags 11948 - available. 11949 - properties: 11950 - range: 11951 - description: |- 11952 - Range gives a semver range for the image tag; the highest 11953 - version within the range that's a tag yields the latest image. 11954 - type: string 11955 - required: 11956 - - range 11957 - type: object 11958 - type: object 11959 - suspend: 11960 - description: |- 11961 - This flag tells the controller to suspend subsequent policy reconciliations. 11962 - It does not apply to already started reconciliations. Defaults to false. 11963 - type: boolean 11964 - required: 11965 - - imageRepositoryRef 11966 - - policy 11967 - type: object 11968 - x-kubernetes-validations: 11969 - - message: spec.interval is only accepted when spec.digestReflectionPolicy is set to 'Always' 11970 - rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy == ''Always'')' 11971 - - message: spec.interval must be set when spec.digestReflectionPolicy is set to 'Always' 11972 - rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy != 'Always' 11973 - status: 11974 - default: 11975 - observedGeneration: -1 11976 - description: ImagePolicyStatus defines the observed state of ImagePolicy 11977 - properties: 11978 - conditions: 11979 - items: 11980 - description: Condition contains details for one aspect of the current state of this API Resource. 11981 + Defaults to 10m. 11982 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 11983 + type: string 11984 + policy: 11985 + description: |- 11986 + Policy gives the particulars of the policy to be followed in 11987 + selecting the most recent image 11988 + properties: 11989 + alphabetical: 11990 + description: Alphabetical set of rules to use for alphabetical 11991 + ordering of the tags. 11992 properties: 11993 - lastTransitionTime: 11994 - description: |- 11995 - lastTransitionTime is the last time the condition transitioned from one status to another. 11996 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 11997 - format: date-time 11998 - type: string 11999 - message: 12000 + order: 12001 + default: asc 12002 description: |- 12003 - message is a human readable message indicating details about the transition. 12004 - This may be an empty string. 12005 - maxLength: 32768 12006 + Order specifies the sorting order of the tags. Given the letters of the 12007 + alphabet as tags, ascending order would select Z, and descending order 12008 + would select A. 12009 + enum: 12010 + - asc 12011 + - desc 12012 type: string 12013 - observedGeneration: 12014 - description: |- 12015 - observedGeneration represents the .metadata.generation that the condition was set based upon. 12016 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12017 - with respect to the current state of the instance. 12018 - format: int64 12019 - minimum: 0 12020 - type: integer 12021 - reason: 12022 + type: object 12023 + numerical: 12024 + description: Numerical set of rules to use for numerical ordering 12025 + of the tags. 12026 + properties: 12027 + order: 12028 + default: asc 12029 description: |- 12030 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 12031 - Producers of specific condition types may define expected values and meanings for this field, 12032 - and whether the values are considered a guaranteed API. 12033 - The value should be a CamelCase string. 12034 - This field may not be empty. 12035 - maxLength: 1024 12036 - minLength: 1 12037 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12038 - type: string 12039 - status: 12040 - description: status of the condition, one of True, False, Unknown. 12041 + Order specifies the sorting order of the tags. Given the integer values 12042 + from 0 to 9 as tags, ascending order would select 9, and descending order 12043 + would select 0. 12044 enum: 12045 - - "True" 12046 - - "False" 12047 - - Unknown 12048 + - asc 12049 + - desc 12050 type: string 12051 - type: 12052 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 12053 - maxLength: 316 12054 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12055 + type: object 12056 + semver: 12057 + description: |- 12058 + SemVer gives a semantic version range to check against the tags 12059 + available. 12060 + properties: 12061 + range: 12062 + description: |- 12063 + Range gives a semver range for the image tag; the highest 12064 + version within the range that's a tag yields the latest image. 12065 type: string 12066 required: 12067 - - lastTransitionTime 12068 - - message 12069 - - reason 12070 - - status 12071 - - type 12072 + - range 12073 type: object 12074 - type: array 12075 - lastHandledReconcileAt: 12076 - description: |- 12077 - LastHandledReconcileAt holds the value of the most recent 12078 - reconcile request value, so a change of the annotation value 12079 - can be detected. 12080 - type: string 12081 - latestRef: 12082 - description: |- 12083 - LatestRef gives the first in the list of images scanned by 12084 - the image repository, when filtered and ordered according 12085 - to the policy. 12086 + type: object 12087 + suspend: 12088 + description: |- 12089 + This flag tells the controller to suspend subsequent policy reconciliations. 12090 + It does not apply to already started reconciliations. Defaults to false. 12091 + type: boolean 12092 + required: 12093 + - imageRepositoryRef 12094 + - policy 12095 + type: object 12096 + x-kubernetes-validations: 12097 + - message: spec.interval is only accepted when spec.digestReflectionPolicy 12098 + is set to 'Always' 12099 + rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 12100 + == ''Always'')' 12101 + - message: spec.interval must be set when spec.digestReflectionPolicy 12102 + is set to 'Always' 12103 + rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 12104 + != 'Always' 12105 + status: 12106 + default: 12107 + observedGeneration: -1 12108 + description: ImagePolicyStatus defines the observed state of ImagePolicy 12109 + properties: 12110 + conditions: 12111 + items: 12112 + description: Condition contains details for one aspect of the current 12113 + state of this API Resource. 12114 properties: 12115 - digest: 12116 - description: Digest is the image's digest. 12117 - type: string 12118 - name: 12119 - description: Name is the bare image's name. 12120 + lastTransitionTime: 12121 + description: |- 12122 + lastTransitionTime is the last time the condition transitioned from one status to another. 12123 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12124 + format: date-time 12125 type: string 12126 - tag: 12127 - description: Tag is the image's tag. 12128 + message: 12129 + description: |- 12130 + message is a human readable message indicating details about the transition. 12131 + This may be an empty string. 12132 + maxLength: 32768 12133 type: string 12134 - required: 12135 - - name 12136 - - tag 12137 - type: object 12138 - observedGeneration: 12139 - format: int64 12140 - type: integer 12141 - observedPreviousRef: 12142 - description: |- 12143 - ObservedPreviousRef is the observed previous LatestRef. It is used 12144 - to keep track of the previous and current images. 12145 - properties: 12146 - digest: 12147 - description: Digest is the image's digest. 12148 + observedGeneration: 12149 + description: |- 12150 + observedGeneration represents the .metadata.generation that the condition was set based upon. 12151 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12152 + with respect to the current state of the instance. 12153 + format: int64 12154 + minimum: 0 12155 + type: integer 12156 + reason: 12157 + description: |- 12158 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 12159 + Producers of specific condition types may define expected values and meanings for this field, 12160 + and whether the values are considered a guaranteed API. 12161 + The value should be a CamelCase string. 12162 + This field may not be empty. 12163 + maxLength: 1024 12164 + minLength: 1 12165 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12166 type: string 12167 - name: 12168 - description: Name is the bare image's name. 12169 + status: 12170 + description: status of the condition, one of True, False, Unknown. 12171 + enum: 12172 + - "True" 12173 + - "False" 12174 + - Unknown 12175 type: string 12176 - tag: 12177 - description: Tag is the image's tag. 12178 + type: 12179 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 12180 + maxLength: 316 12181 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12182 type: string 12183 required: 12184 - - name 12185 - - tag 12186 + - lastTransitionTime 12187 + - message 12188 + - reason 12189 + - status 12190 + - type 12191 type: object 12192 - type: object 12193 - type: object 12194 - served: true 12195 - storage: true 12196 - subresources: 12197 - status: {} 12198 - - additionalPrinterColumns: 12199 - - jsonPath: .status.latestRef.name 12200 - name: Image 12201 - type: string 12202 - - jsonPath: .status.latestRef.tag 12203 - name: Tag 12204 - type: string 12205 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 12206 - name: Ready 12207 - type: string 12208 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 12209 - name: Status 12210 - type: string 12211 - - jsonPath: .metadata.creationTimestamp 12212 - name: Age 12213 - type: date 12214 - deprecated: true 12215 - deprecationWarning: v1beta2 ImagePolicy is deprecated, upgrade to v1 12216 - name: v1beta2 12217 - schema: 12218 - openAPIV3Schema: 12219 - description: ImagePolicy is the Schema for the imagepolicies API 12220 - properties: 12221 - apiVersion: 12222 - description: |- 12223 - APIVersion defines the versioned schema of this representation of an object. 12224 - Servers should convert recognized schemas to the latest internal value, and 12225 - may reject unrecognized values. 12226 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 12227 - type: string 12228 - kind: 12229 - description: |- 12230 - Kind is a string value representing the REST resource this object represents. 12231 - Servers may infer this from the endpoint the client submits requests to. 12232 - Cannot be updated. 12233 - In CamelCase. 12234 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 12235 - type: string 12236 - metadata: 12237 - type: object 12238 - spec: 12239 - description: |- 12240 - ImagePolicySpec defines the parameters for calculating the 12241 - ImagePolicy. 12242 - properties: 12243 - digestReflectionPolicy: 12244 - default: Never 12245 - description: |- 12246 - DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 12247 + type: array 12248 + lastHandledReconcileAt: 12249 + description: |- 12250 + LastHandledReconcileAt holds the value of the most recent 12251 + reconcile request value, so a change of the annotation value 12252 + can be detected. 12253 + type: string 12254 + latestRef: 12255 + description: |- 12256 + LatestRef gives the first in the list of images scanned by 12257 + the image repository, when filtered and ordered according 12258 + to the policy. 12259 + properties: 12260 + digest: 12261 + description: Digest is the image's digest. 12262 + type: string 12263 + name: 12264 + description: Name is the bare image's name. 12265 + type: string 12266 + tag: 12267 + description: Tag is the image's tag. 12268 + type: string 12269 + required: 12270 + - name 12271 + - tag 12272 + type: object 12273 + observedGeneration: 12274 + format: int64 12275 + type: integer 12276 + observedPreviousRef: 12277 + description: |- 12278 + ObservedPreviousRef is the observed previous LatestRef. It is used 12279 + to keep track of the previous and current images. 12280 + properties: 12281 + digest: 12282 + description: Digest is the image's digest. 12283 + type: string 12284 + name: 12285 + description: Name is the bare image's name. 12286 + type: string 12287 + tag: 12288 + description: Tag is the image's tag. 12289 + type: string 12290 + required: 12291 + - name 12292 + - tag 12293 + type: object 12294 + type: object 12295 + type: object 12296 + served: true 12297 + storage: true 12298 + subresources: 12299 + status: {} 12300 + - additionalPrinterColumns: 12301 + - jsonPath: .status.latestRef.name 12302 + name: Image 12303 + type: string 12304 + - jsonPath: .status.latestRef.tag 12305 + name: Tag 12306 + type: string 12307 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 12308 + name: Ready 12309 + type: string 12310 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 12311 + name: Status 12312 + type: string 12313 + - jsonPath: .metadata.creationTimestamp 12314 + name: Age 12315 + type: date 12316 + deprecated: true 12317 + deprecationWarning: v1beta2 ImagePolicy is deprecated, upgrade to v1 12318 + name: v1beta2 12319 + schema: 12320 + openAPIV3Schema: 12321 + description: ImagePolicy is the Schema for the imagepolicies API 12322 + properties: 12323 + apiVersion: 12324 + description: |- 12325 + APIVersion defines the versioned schema of this representation of an object. 12326 + Servers should convert recognized schemas to the latest internal value, and 12327 + may reject unrecognized values. 12328 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 12329 + type: string 12330 + kind: 12331 + description: |- 12332 + Kind is a string value representing the REST resource this object represents. 12333 + Servers may infer this from the endpoint the client submits requests to. 12334 + Cannot be updated. 12335 + In CamelCase. 12336 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 12337 + type: string 12338 + metadata: 12339 + type: object 12340 + spec: 12341 + description: |- 12342 + ImagePolicySpec defines the parameters for calculating the 12343 + ImagePolicy. 12344 + properties: 12345 + digestReflectionPolicy: 12346 + default: Never 12347 + description: |- 12348 + DigestReflectionPolicy governs the setting of the `.status.latestRef.digest` field. 12349 12350 - Never: The digest field will always be set to the empty string. 12351 + Never: The digest field will always be set to the empty string. 12352 12353 - IfNotPresent: The digest field will be set to the digest of the elected 12354 - latest image if the field is empty and the image did not change. 12355 + IfNotPresent: The digest field will be set to the digest of the elected 12356 + latest image if the field is empty and the image did not change. 12357 12358 - Always: The digest field will always be set to the digest of the elected 12359 - latest image. 12360 + Always: The digest field will always be set to the digest of the elected 12361 + latest image. 12362 12363 - Default: Never. 12364 - enum: 12365 - - Always 12366 - - IfNotPresent 12367 - - Never 12368 - type: string 12369 - filterTags: 12370 - description: |- 12371 - FilterTags enables filtering for only a subset of tags based on a set of 12372 - rules. If no rules are provided, all the tags from the repository will be 12373 - ordered and compared. 12374 - properties: 12375 - extract: 12376 - description: |- 12377 - Extract allows a capture group to be extracted from the specified regular 12378 - expression pattern, useful before tag evaluation. 12379 - type: string 12380 - pattern: 12381 - description: |- 12382 - Pattern specifies a regular expression pattern used to filter for image 12383 - tags. 12384 - type: string 12385 - type: object 12386 - imageRepositoryRef: 12387 - description: |- 12388 - ImageRepositoryRef points at the object specifying the image 12389 - being scanned 12390 - properties: 12391 - name: 12392 - description: Name of the referent. 12393 - type: string 12394 - namespace: 12395 - description: Namespace of the referent, when not specified it acts as LocalObjectReference. 12396 - type: string 12397 - required: 12398 - - name 12399 - type: object 12400 - interval: 12401 - description: |- 12402 - Interval is the length of time to wait between 12403 - refreshing the digest of the latest tag when the 12404 - reflection policy is set to "Always". 12405 + Default: Never. 12406 + enum: 12407 + - Always 12408 + - IfNotPresent 12409 + - Never 12410 + type: string 12411 + filterTags: 12412 + description: |- 12413 + FilterTags enables filtering for only a subset of tags based on a set of 12414 + rules. If no rules are provided, all the tags from the repository will be 12415 + ordered and compared. 12416 + properties: 12417 + extract: 12418 + description: |- 12419 + Extract allows a capture group to be extracted from the specified regular 12420 + expression pattern, useful before tag evaluation. 12421 + type: string 12422 + pattern: 12423 + description: |- 12424 + Pattern specifies a regular expression pattern used to filter for image 12425 + tags. 12426 + type: string 12427 + type: object 12428 + imageRepositoryRef: 12429 + description: |- 12430 + ImageRepositoryRef points at the object specifying the image 12431 + being scanned 12432 + properties: 12433 + name: 12434 + description: Name of the referent. 12435 + type: string 12436 + namespace: 12437 + description: Namespace of the referent, when not specified it 12438 + acts as LocalObjectReference. 12439 + type: string 12440 + required: 12441 + - name 12442 + type: object 12443 + interval: 12444 + description: |- 12445 + Interval is the length of time to wait between 12446 + refreshing the digest of the latest tag when the 12447 + reflection policy is set to "Always". 12448 12449 - Defaults to 10m. 12450 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12451 - type: string 12452 - policy: 12453 - description: |- 12454 - Policy gives the particulars of the policy to be followed in 12455 - selecting the most recent image 12456 - properties: 12457 - alphabetical: 12458 - description: Alphabetical set of rules to use for alphabetical ordering of the tags. 12459 - properties: 12460 - order: 12461 - default: asc 12462 - description: |- 12463 - Order specifies the sorting order of the tags. Given the letters of the 12464 - alphabet as tags, ascending order would select Z, and descending order 12465 - would select A. 12466 - enum: 12467 - - asc 12468 - - desc 12469 - type: string 12470 - type: object 12471 - numerical: 12472 - description: Numerical set of rules to use for numerical ordering of the tags. 12473 - properties: 12474 - order: 12475 - default: asc 12476 - description: |- 12477 - Order specifies the sorting order of the tags. Given the integer values 12478 - from 0 to 9 as tags, ascending order would select 9, and descending order 12479 - would select 0. 12480 - enum: 12481 - - asc 12482 - - desc 12483 - type: string 12484 - type: object 12485 - semver: 12486 - description: |- 12487 - SemVer gives a semantic version range to check against the tags 12488 - available. 12489 - properties: 12490 - range: 12491 - description: |- 12492 - Range gives a semver range for the image tag; the highest 12493 - version within the range that's a tag yields the latest image. 12494 - type: string 12495 - required: 12496 - - range 12497 - type: object 12498 - type: object 12499 - suspend: 12500 - description: |- 12501 - This flag tells the controller to suspend subsequent policy reconciliations. 12502 - It does not apply to already started reconciliations. Defaults to false. 12503 - type: boolean 12504 - required: 12505 - - imageRepositoryRef 12506 - - policy 12507 - type: object 12508 - x-kubernetes-validations: 12509 - - message: spec.interval is only accepted when spec.digestReflectionPolicy is set to 'Always' 12510 - rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy == ''Always'')' 12511 - - message: spec.interval must be set when spec.digestReflectionPolicy is set to 'Always' 12512 - rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy != 'Always' 12513 - status: 12514 - default: 12515 - observedGeneration: -1 12516 - description: ImagePolicyStatus defines the observed state of ImagePolicy 12517 - properties: 12518 - conditions: 12519 - items: 12520 - description: Condition contains details for one aspect of the current state of this API Resource. 12521 + Defaults to 10m. 12522 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12523 + type: string 12524 + policy: 12525 + description: |- 12526 + Policy gives the particulars of the policy to be followed in 12527 + selecting the most recent image 12528 + properties: 12529 + alphabetical: 12530 + description: Alphabetical set of rules to use for alphabetical 12531 + ordering of the tags. 12532 properties: 12533 - lastTransitionTime: 12534 - description: |- 12535 - lastTransitionTime is the last time the condition transitioned from one status to another. 12536 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12537 - format: date-time 12538 - type: string 12539 - message: 12540 + order: 12541 + default: asc 12542 description: |- 12543 - message is a human readable message indicating details about the transition. 12544 - This may be an empty string. 12545 - maxLength: 32768 12546 - type: string 12547 - observedGeneration: 12548 - description: |- 12549 - observedGeneration represents the .metadata.generation that the condition was set based upon. 12550 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12551 - with respect to the current state of the instance. 12552 - format: int64 12553 - minimum: 0 12554 - type: integer 12555 - reason: 12556 - description: |- 12557 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 12558 - Producers of specific condition types may define expected values and meanings for this field, 12559 - and whether the values are considered a guaranteed API. 12560 - The value should be a CamelCase string. 12561 - This field may not be empty. 12562 - maxLength: 1024 12563 - minLength: 1 12564 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12565 - type: string 12566 - status: 12567 - description: status of the condition, one of True, False, Unknown. 12568 + Order specifies the sorting order of the tags. Given the letters of the 12569 + alphabet as tags, ascending order would select Z, and descending order 12570 + would select A. 12571 enum: 12572 - - "True" 12573 - - "False" 12574 - - Unknown 12575 + - asc 12576 + - desc 12577 type: string 12578 - type: 12579 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 12580 - maxLength: 316 12581 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12582 - type: string 12583 - required: 12584 - - lastTransitionTime 12585 - - message 12586 - - reason 12587 - - status 12588 - - type 12589 type: object 12590 - type: array 12591 - lastHandledReconcileAt: 12592 - description: |- 12593 - LastHandledReconcileAt holds the value of the most recent 12594 - reconcile request value, so a change of the annotation value 12595 - can be detected. 12596 - type: string 12597 - latestRef: 12598 - description: |- 12599 - LatestRef gives the first in the list of images scanned by 12600 - the image repository, when filtered and ordered according 12601 - to the policy. 12602 - properties: 12603 - digest: 12604 - description: Digest is the image's digest. 12605 - type: string 12606 - name: 12607 - description: Name is the bare image's name. 12608 - type: string 12609 - tag: 12610 - description: Tag is the image's tag. 12611 - type: string 12612 - required: 12613 - - name 12614 - - tag 12615 - type: object 12616 - observedGeneration: 12617 - format: int64 12618 - type: integer 12619 - observedPreviousRef: 12620 - description: |- 12621 - ObservedPreviousRef is the observed previous LatestRef. It is used 12622 - to keep track of the previous and current images. 12623 - properties: 12624 - digest: 12625 - description: Digest is the image's digest. 12626 - type: string 12627 - name: 12628 - description: Name is the bare image's name. 12629 - type: string 12630 - tag: 12631 - description: Tag is the image's tag. 12632 - type: string 12633 - required: 12634 - - name 12635 - - tag 12636 - type: object 12637 - type: object 12638 - type: object 12639 - served: true 12640 - storage: false 12641 - subresources: 12642 - status: {} 12643 ---- 12644 -apiVersion: apiextensions.k8s.io/v1 12645 -kind: CustomResourceDefinition 12646 -metadata: 12647 - annotations: 12648 - controller-gen.kubebuilder.io/version: v0.19.0 12649 - labels: 12650 - app.kubernetes.io/component: image-reflector-controller 12651 - app.kubernetes.io/instance: flux-system 12652 - app.kubernetes.io/part-of: flux 12653 - app.kubernetes.io/version: v2.8.0 12654 - name: imagerepositories.image.toolkit.fluxcd.io 12655 -spec: 12656 - group: image.toolkit.fluxcd.io 12657 - names: 12658 - kind: ImageRepository 12659 - listKind: ImageRepositoryList 12660 - plural: imagerepositories 12661 - shortNames: 12662 - - imgrepo 12663 - - imagerepo 12664 - singular: imagerepository 12665 - scope: Namespaced 12666 - versions: 12667 - - additionalPrinterColumns: 12668 - - jsonPath: .spec.image 12669 - name: Image 12670 - type: string 12671 - - jsonPath: .status.lastScanResult.tagCount 12672 - name: Tags 12673 - type: string 12674 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 12675 - name: Ready 12676 - type: string 12677 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 12678 - name: Status 12679 - type: string 12680 - - jsonPath: .status.lastScanResult.scanTime 12681 - name: Last scan 12682 - priority: 1 12683 - type: string 12684 - - jsonPath: .metadata.creationTimestamp 12685 - name: Age 12686 - type: date 12687 - name: v1 12688 - schema: 12689 - openAPIV3Schema: 12690 - description: ImageRepository is the Schema for the imagerepositories API 12691 - properties: 12692 - apiVersion: 12693 - description: |- 12694 - APIVersion defines the versioned schema of this representation of an object. 12695 - Servers should convert recognized schemas to the latest internal value, and 12696 - may reject unrecognized values. 12697 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 12698 - type: string 12699 - kind: 12700 - description: |- 12701 - Kind is a string value representing the REST resource this object represents. 12702 - Servers may infer this from the endpoint the client submits requests to. 12703 - Cannot be updated. 12704 - In CamelCase. 12705 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 12706 - type: string 12707 - metadata: 12708 - type: object 12709 - spec: 12710 - description: |- 12711 - ImageRepositorySpec defines the parameters for scanning an image 12712 - repository, e.g., `fluxcd/flux`. 12713 - properties: 12714 - accessFrom: 12715 - description: |- 12716 - AccessFrom defines an ACL for allowing cross-namespace references 12717 - to the ImageRepository object based on the caller's namespace labels. 12718 - properties: 12719 - namespaceSelectors: 12720 - description: |- 12721 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 12722 - Items in this list are evaluated using a logical OR operation. 12723 - items: 12724 - description: |- 12725 - NamespaceSelector selects the namespaces to which this ACL applies. 12726 - An empty map of MatchLabels matches all namespaces in a cluster. 12727 - properties: 12728 - matchLabels: 12729 - additionalProperties: 12730 - type: string 12731 - description: |- 12732 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 12733 - map is equivalent to an element of matchExpressions, whose key field is "key", the 12734 - operator is "In", and the values array contains only "value". The requirements are ANDed. 12735 - type: object 12736 - type: object 12737 - type: array 12738 - required: 12739 - - namespaceSelectors 12740 - type: object 12741 - certSecretRef: 12742 - description: |- 12743 - CertSecretRef can be given the name of a Secret containing 12744 - either or both of 12745 - 12746 - - a PEM-encoded client certificate (`tls.crt`) and private 12747 - key (`tls.key`); 12748 - - a PEM-encoded CA certificate (`ca.crt`) 12749 - 12750 - and whichever are supplied, will be used for connecting to the 12751 - registry. The client cert and key are useful if you are 12752 - authenticating with a certificate; the CA cert is useful if 12753 - you are using a self-signed server certificate. The Secret must 12754 - be of type `Opaque` or `kubernetes.io/tls`. 12755 - 12756 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 12757 - been deprecated. 12758 - properties: 12759 - name: 12760 - description: Name of the referent. 12761 - type: string 12762 - required: 12763 - - name 12764 - type: object 12765 - exclusionList: 12766 - default: 12767 - - ^.*\.sig$ 12768 - description: |- 12769 - ExclusionList is a list of regex strings used to exclude certain tags 12770 - from being stored in the database. 12771 - items: 12772 - type: string 12773 - maxItems: 25 12774 - type: array 12775 - image: 12776 - description: Image is the name of the image repository 12777 - type: string 12778 - insecure: 12779 - description: Insecure allows connecting to a non-TLS HTTP container registry. 12780 - type: boolean 12781 - interval: 12782 - description: |- 12783 - Interval is the length of time to wait between 12784 - scans of the image repository. 12785 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 12786 - type: string 12787 - provider: 12788 - default: generic 12789 - description: |- 12790 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 12791 - When not specified, defaults to 'generic'. 12792 - enum: 12793 - - generic 12794 - - aws 12795 - - azure 12796 - - gcp 12797 - type: string 12798 - proxySecretRef: 12799 - description: |- 12800 - ProxySecretRef specifies the Secret containing the proxy configuration 12801 - to use while communicating with the container registry. 12802 - properties: 12803 - name: 12804 - description: Name of the referent. 12805 - type: string 12806 - required: 12807 - - name 12808 - type: object 12809 - secretRef: 12810 - description: |- 12811 - SecretRef can be given the name of a secret containing 12812 - credentials to use for the image registry. The secret should be 12813 - created with `kubectl create secret docker-registry`, or the 12814 - equivalent. 12815 - properties: 12816 - name: 12817 - description: Name of the referent. 12818 - type: string 12819 - required: 12820 - - name 12821 - type: object 12822 - serviceAccountName: 12823 - description: |- 12824 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 12825 - the image pull if the service account has attached pull secrets. 12826 - maxLength: 253 12827 - type: string 12828 - suspend: 12829 - description: |- 12830 - This flag tells the controller to suspend subsequent image scans. 12831 - It does not apply to already started scans. Defaults to false. 12832 - type: boolean 12833 - timeout: 12834 - description: |- 12835 - Timeout for image scanning. 12836 - Defaults to 'Interval' duration. 12837 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 12838 - type: string 12839 - required: 12840 - - image 12841 - - interval 12842 - type: object 12843 - status: 12844 - default: 12845 - observedGeneration: -1 12846 - description: ImageRepositoryStatus defines the observed state of ImageRepository 12847 - properties: 12848 - canonicalImageName: 12849 - description: |- 12850 - CanonicalName is the name of the image repository with all the 12851 - implied bits made explicit; e.g., `docker.io/library/alpine` 12852 - rather than `alpine`. 12853 - type: string 12854 - conditions: 12855 - items: 12856 - description: Condition contains details for one aspect of the current state of this API Resource. 12857 + numerical: 12858 + description: Numerical set of rules to use for numerical ordering 12859 + of the tags. 12860 properties: 12861 - lastTransitionTime: 12862 + order: 12863 + default: asc 12864 description: |- 12865 - lastTransitionTime is the last time the condition transitioned from one status to another. 12866 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12867 - format: date-time 12868 - type: string 12869 - message: 12870 - description: |- 12871 - message is a human readable message indicating details about the transition. 12872 - This may be an empty string. 12873 - maxLength: 32768 12874 - type: string 12875 - observedGeneration: 12876 - description: |- 12877 - observedGeneration represents the .metadata.generation that the condition was set based upon. 12878 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12879 - with respect to the current state of the instance. 12880 - format: int64 12881 - minimum: 0 12882 - type: integer 12883 - reason: 12884 - description: |- 12885 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 12886 - Producers of specific condition types may define expected values and meanings for this field, 12887 - and whether the values are considered a guaranteed API. 12888 - The value should be a CamelCase string. 12889 - This field may not be empty. 12890 - maxLength: 1024 12891 - minLength: 1 12892 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 12893 - type: string 12894 - status: 12895 - description: status of the condition, one of True, False, Unknown. 12896 + Order specifies the sorting order of the tags. Given the integer values 12897 + from 0 to 9 as tags, ascending order would select 9, and descending order 12898 + would select 0. 12899 enum: 12900 - - "True" 12901 - - "False" 12902 - - Unknown 12903 + - asc 12904 + - desc 12905 type: string 12906 - type: 12907 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 12908 - maxLength: 316 12909 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 12910 + type: object 12911 + semver: 12912 + description: |- 12913 + SemVer gives a semantic version range to check against the tags 12914 + available. 12915 + properties: 12916 + range: 12917 + description: |- 12918 + Range gives a semver range for the image tag; the highest 12919 + version within the range that's a tag yields the latest image. 12920 type: string 12921 required: 12922 - - lastTransitionTime 12923 - - message 12924 - - reason 12925 - - status 12926 - - type 12927 + - range 12928 type: object 12929 - type: array 12930 - lastHandledReconcileAt: 12931 - description: |- 12932 - LastHandledReconcileAt holds the value of the most recent 12933 - reconcile request value, so a change of the annotation value 12934 - can be detected. 12935 - type: string 12936 - lastScanResult: 12937 - description: LastScanResult contains the number of fetched tags. 12938 + type: object 12939 + suspend: 12940 + description: |- 12941 + This flag tells the controller to suspend subsequent policy reconciliations. 12942 + It does not apply to already started reconciliations. Defaults to false. 12943 + type: boolean 12944 + required: 12945 + - imageRepositoryRef 12946 + - policy 12947 + type: object 12948 + x-kubernetes-validations: 12949 + - message: spec.interval is only accepted when spec.digestReflectionPolicy 12950 + is set to 'Always' 12951 + rule: '!has(self.interval) || (has(self.digestReflectionPolicy) && self.digestReflectionPolicy 12952 + == ''Always'')' 12953 + - message: spec.interval must be set when spec.digestReflectionPolicy 12954 + is set to 'Always' 12955 + rule: has(self.interval) || !has(self.digestReflectionPolicy) || self.digestReflectionPolicy 12956 + != 'Always' 12957 + status: 12958 + default: 12959 + observedGeneration: -1 12960 + description: ImagePolicyStatus defines the observed state of ImagePolicy 12961 + properties: 12962 + conditions: 12963 + items: 12964 + description: Condition contains details for one aspect of the current 12965 + state of this API Resource. 12966 properties: 12967 - latestTags: 12968 + lastTransitionTime: 12969 description: |- 12970 - LatestTags is a small sample of the tags found in the last scan. 12971 - It's the first 10 tags when sorting all the tags in descending 12972 - alphabetical order. 12973 - items: 12974 - type: string 12975 - type: array 12976 - revision: 12977 - description: Revision is a stable hash of the scanned tags. 12978 + lastTransitionTime is the last time the condition transitioned from one status to another. 12979 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 12980 + format: date-time 12981 + type: string 12982 + message: 12983 + description: |- 12984 + message is a human readable message indicating details about the transition. 12985 + This may be an empty string. 12986 + maxLength: 32768 12987 + type: string 12988 + observedGeneration: 12989 + description: |- 12990 + observedGeneration represents the .metadata.generation that the condition was set based upon. 12991 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 12992 + with respect to the current state of the instance. 12993 + format: int64 12994 + minimum: 0 12995 + type: integer 12996 + reason: 12997 + description: |- 12998 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 12999 + Producers of specific condition types may define expected values and meanings for this field, 13000 + and whether the values are considered a guaranteed API. 13001 + The value should be a CamelCase string. 13002 + This field may not be empty. 13003 + maxLength: 1024 13004 + minLength: 1 13005 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13006 + type: string 13007 + status: 13008 + description: status of the condition, one of True, False, Unknown. 13009 + enum: 13010 + - "True" 13011 + - "False" 13012 + - Unknown 13013 type: string 13014 - scanTime: 13015 - description: ScanTime is the time when the last scan was performed. 13016 - format: date-time 13017 + type: 13018 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13019 + maxLength: 316 13020 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13021 type: string 13022 - tagCount: 13023 - description: TagCount is the number of tags found in the last scan. 13024 - type: integer 13025 required: 13026 - - tagCount 13027 + - lastTransitionTime 13028 + - message 13029 + - reason 13030 + - status 13031 + - type 13032 type: object 13033 - observedExclusionList: 13034 - description: |- 13035 - ObservedExclusionList is a list of observed exclusion list. It reflects 13036 - the exclusion rules used for the observed scan result in 13037 - spec.lastScanResult. 13038 - items: 13039 - type: string 13040 - type: array 13041 - observedGeneration: 13042 - description: ObservedGeneration is the last reconciled generation. 13043 - format: int64 13044 - type: integer 13045 - type: object 13046 - type: object 13047 - served: true 13048 - storage: true 13049 - subresources: 13050 - status: {} 13051 - - additionalPrinterColumns: 13052 - - jsonPath: .spec.image 13053 - name: Image 13054 - type: string 13055 - - jsonPath: .status.lastScanResult.tagCount 13056 - name: Tags 13057 - type: string 13058 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 13059 - name: Ready 13060 - type: string 13061 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 13062 - name: Status 13063 - type: string 13064 - - jsonPath: .status.lastScanResult.scanTime 13065 - name: Last scan 13066 - priority: 1 13067 - type: string 13068 - - jsonPath: .metadata.creationTimestamp 13069 - name: Age 13070 - type: date 13071 - deprecated: true 13072 - deprecationWarning: v1beta2 ImageRepository is deprecated, upgrade to v1 13073 - name: v1beta2 13074 - schema: 13075 - openAPIV3Schema: 13076 - description: ImageRepository is the Schema for the imagerepositories API 13077 - properties: 13078 - apiVersion: 13079 - description: |- 13080 - APIVersion defines the versioned schema of this representation of an object. 13081 - Servers should convert recognized schemas to the latest internal value, and 13082 - may reject unrecognized values. 13083 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13084 - type: string 13085 - kind: 13086 - description: |- 13087 - Kind is a string value representing the REST resource this object represents. 13088 - Servers may infer this from the endpoint the client submits requests to. 13089 - Cannot be updated. 13090 - In CamelCase. 13091 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13092 - type: string 13093 - metadata: 13094 - type: object 13095 - spec: 13096 - description: |- 13097 - ImageRepositorySpec defines the parameters for scanning an image 13098 - repository, e.g., `fluxcd/flux`. 13099 - properties: 13100 - accessFrom: 13101 - description: |- 13102 - AccessFrom defines an ACL for allowing cross-namespace references 13103 - to the ImageRepository object based on the caller's namespace labels. 13104 - properties: 13105 - namespaceSelectors: 13106 + type: array 13107 + lastHandledReconcileAt: 13108 + description: |- 13109 + LastHandledReconcileAt holds the value of the most recent 13110 + reconcile request value, so a change of the annotation value 13111 + can be detected. 13112 + type: string 13113 + latestRef: 13114 + description: |- 13115 + LatestRef gives the first in the list of images scanned by 13116 + the image repository, when filtered and ordered according 13117 + to the policy. 13118 + properties: 13119 + digest: 13120 + description: Digest is the image's digest. 13121 + type: string 13122 + name: 13123 + description: Name is the bare image's name. 13124 + type: string 13125 + tag: 13126 + description: Tag is the image's tag. 13127 + type: string 13128 + required: 13129 + - name 13130 + - tag 13131 + type: object 13132 + observedGeneration: 13133 + format: int64 13134 + type: integer 13135 + observedPreviousRef: 13136 + description: |- 13137 + ObservedPreviousRef is the observed previous LatestRef. It is used 13138 + to keep track of the previous and current images. 13139 + properties: 13140 + digest: 13141 + description: Digest is the image's digest. 13142 + type: string 13143 + name: 13144 + description: Name is the bare image's name. 13145 + type: string 13146 + tag: 13147 + description: Tag is the image's tag. 13148 + type: string 13149 + required: 13150 + - name 13151 + - tag 13152 + type: object 13153 + type: object 13154 + type: object 13155 + served: true 13156 + storage: false 13157 + subresources: 13158 + status: {} 13159 +--- 13160 +apiVersion: apiextensions.k8s.io/v1 13161 +kind: CustomResourceDefinition 13162 +metadata: 13163 + annotations: 13164 + controller-gen.kubebuilder.io/version: v0.19.0 13165 + labels: 13166 + app.kubernetes.io/component: image-reflector-controller 13167 + app.kubernetes.io/instance: flux-system 13168 + app.kubernetes.io/part-of: flux 13169 + app.kubernetes.io/version: v2.8.1 13170 + name: imagerepositories.image.toolkit.fluxcd.io 13171 +spec: 13172 + group: image.toolkit.fluxcd.io 13173 + names: 13174 + kind: ImageRepository 13175 + listKind: ImageRepositoryList 13176 + plural: imagerepositories 13177 + shortNames: 13178 + - imgrepo 13179 + - imagerepo 13180 + singular: imagerepository 13181 + scope: Namespaced 13182 + versions: 13183 + - additionalPrinterColumns: 13184 + - jsonPath: .spec.image 13185 + name: Image 13186 + type: string 13187 + - jsonPath: .status.lastScanResult.tagCount 13188 + name: Tags 13189 + type: string 13190 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13191 + name: Ready 13192 + type: string 13193 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13194 + name: Status 13195 + type: string 13196 + - jsonPath: .status.lastScanResult.scanTime 13197 + name: Last scan 13198 + priority: 1 13199 + type: string 13200 + - jsonPath: .metadata.creationTimestamp 13201 + name: Age 13202 + type: date 13203 + name: v1 13204 + schema: 13205 + openAPIV3Schema: 13206 + description: ImageRepository is the Schema for the imagerepositories API 13207 + properties: 13208 + apiVersion: 13209 + description: |- 13210 + APIVersion defines the versioned schema of this representation of an object. 13211 + Servers should convert recognized schemas to the latest internal value, and 13212 + may reject unrecognized values. 13213 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13214 + type: string 13215 + kind: 13216 + description: |- 13217 + Kind is a string value representing the REST resource this object represents. 13218 + Servers may infer this from the endpoint the client submits requests to. 13219 + Cannot be updated. 13220 + In CamelCase. 13221 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13222 + type: string 13223 + metadata: 13224 + type: object 13225 + spec: 13226 + description: |- 13227 + ImageRepositorySpec defines the parameters for scanning an image 13228 + repository, e.g., `fluxcd/flux`. 13229 + properties: 13230 + accessFrom: 13231 + description: |- 13232 + AccessFrom defines an ACL for allowing cross-namespace references 13233 + to the ImageRepository object based on the caller's namespace labels. 13234 + properties: 13235 + namespaceSelectors: 13236 + description: |- 13237 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 13238 + Items in this list are evaluated using a logical OR operation. 13239 + items: 13240 description: |- 13241 - NamespaceSelectors is the list of namespace selectors to which this ACL applies. 13242 - Items in this list are evaluated using a logical OR operation. 13243 - items: 13244 - description: |- 13245 - NamespaceSelector selects the namespaces to which this ACL applies. 13246 - An empty map of MatchLabels matches all namespaces in a cluster. 13247 - properties: 13248 - matchLabels: 13249 - additionalProperties: 13250 - type: string 13251 - description: |- 13252 - MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 13253 - map is equivalent to an element of matchExpressions, whose key field is "key", the 13254 - operator is "In", and the values array contains only "value". The requirements are ANDed. 13255 - type: object 13256 - type: object 13257 - type: array 13258 - required: 13259 - - namespaceSelectors 13260 - type: object 13261 - certSecretRef: 13262 - description: |- 13263 - CertSecretRef can be given the name of a Secret containing 13264 - either or both of 13265 + NamespaceSelector selects the namespaces to which this ACL applies. 13266 + An empty map of MatchLabels matches all namespaces in a cluster. 13267 + properties: 13268 + matchLabels: 13269 + additionalProperties: 13270 + type: string 13271 + description: |- 13272 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 13273 + map is equivalent to an element of matchExpressions, whose key field is "key", the 13274 + operator is "In", and the values array contains only "value". The requirements are ANDed. 13275 + type: object 13276 + type: object 13277 + type: array 13278 + required: 13279 + - namespaceSelectors 13280 + type: object 13281 + certSecretRef: 13282 + description: |- 13283 + CertSecretRef can be given the name of a Secret containing 13284 + either or both of 13285 13286 - - a PEM-encoded client certificate (`tls.crt`) and private 13287 - key (`tls.key`); 13288 - - a PEM-encoded CA certificate (`ca.crt`) 13289 + - a PEM-encoded client certificate (`tls.crt`) and private 13290 + key (`tls.key`); 13291 + - a PEM-encoded CA certificate (`ca.crt`) 13292 13293 - and whichever are supplied, will be used for connecting to the 13294 - registry. The client cert and key are useful if you are 13295 - authenticating with a certificate; the CA cert is useful if 13296 - you are using a self-signed server certificate. The Secret must 13297 - be of type `Opaque` or `kubernetes.io/tls`. 13298 + and whichever are supplied, will be used for connecting to the 13299 + registry. The client cert and key are useful if you are 13300 + authenticating with a certificate; the CA cert is useful if 13301 + you are using a self-signed server certificate. The Secret must 13302 + be of type `Opaque` or `kubernetes.io/tls`. 13303 13304 - Note: Support for the `caFile`, `certFile` and `keyFile` keys has 13305 - been deprecated. 13306 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 13307 + been deprecated. 13308 + properties: 13309 + name: 13310 + description: Name of the referent. 13311 + type: string 13312 + required: 13313 + - name 13314 + type: object 13315 + exclusionList: 13316 + default: 13317 + - ^.*\.sig$ 13318 + description: |- 13319 + ExclusionList is a list of regex strings used to exclude certain tags 13320 + from being stored in the database. 13321 + items: 13322 + type: string 13323 + maxItems: 25 13324 + type: array 13325 + image: 13326 + description: Image is the name of the image repository 13327 + type: string 13328 + insecure: 13329 + description: Insecure allows connecting to a non-TLS HTTP container 13330 + registry. 13331 + type: boolean 13332 + interval: 13333 + description: |- 13334 + Interval is the length of time to wait between 13335 + scans of the image repository. 13336 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13337 + type: string 13338 + provider: 13339 + default: generic 13340 + description: |- 13341 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 13342 + When not specified, defaults to 'generic'. 13343 + enum: 13344 + - generic 13345 + - aws 13346 + - azure 13347 + - gcp 13348 + type: string 13349 + proxySecretRef: 13350 + description: |- 13351 + ProxySecretRef specifies the Secret containing the proxy configuration 13352 + to use while communicating with the container registry. 13353 + properties: 13354 + name: 13355 + description: Name of the referent. 13356 + type: string 13357 + required: 13358 + - name 13359 + type: object 13360 + secretRef: 13361 + description: |- 13362 + SecretRef can be given the name of a secret containing 13363 + credentials to use for the image registry. The secret should be 13364 + created with `kubectl create secret docker-registry`, or the 13365 + equivalent. 13366 + properties: 13367 + name: 13368 + description: Name of the referent. 13369 + type: string 13370 + required: 13371 + - name 13372 + type: object 13373 + serviceAccountName: 13374 + description: |- 13375 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 13376 + the image pull if the service account has attached pull secrets. 13377 + maxLength: 253 13378 + type: string 13379 + suspend: 13380 + description: |- 13381 + This flag tells the controller to suspend subsequent image scans. 13382 + It does not apply to already started scans. Defaults to false. 13383 + type: boolean 13384 + timeout: 13385 + description: |- 13386 + Timeout for image scanning. 13387 + Defaults to 'Interval' duration. 13388 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 13389 + type: string 13390 + required: 13391 + - image 13392 + - interval 13393 + type: object 13394 + status: 13395 + default: 13396 + observedGeneration: -1 13397 + description: ImageRepositoryStatus defines the observed state of ImageRepository 13398 + properties: 13399 + canonicalImageName: 13400 + description: |- 13401 + CanonicalName is the name of the image repository with all the 13402 + implied bits made explicit; e.g., `docker.io/library/alpine` 13403 + rather than `alpine`. 13404 + type: string 13405 + conditions: 13406 + items: 13407 + description: Condition contains details for one aspect of the current 13408 + state of this API Resource. 13409 properties: 13410 - name: 13411 - description: Name of the referent. 13412 + lastTransitionTime: 13413 + description: |- 13414 + lastTransitionTime is the last time the condition transitioned from one status to another. 13415 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13416 + format: date-time 13417 type: string 13418 - required: 13419 - - name 13420 - type: object 13421 - exclusionList: 13422 - default: 13423 - - ^.*\.sig$ 13424 - description: |- 13425 - ExclusionList is a list of regex strings used to exclude certain tags 13426 - from being stored in the database. 13427 - items: 13428 - type: string 13429 - maxItems: 25 13430 - type: array 13431 - image: 13432 - description: Image is the name of the image repository 13433 - type: string 13434 - insecure: 13435 - description: Insecure allows connecting to a non-TLS HTTP container registry. 13436 - type: boolean 13437 - interval: 13438 - description: |- 13439 - Interval is the length of time to wait between 13440 - scans of the image repository. 13441 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13442 - type: string 13443 - provider: 13444 - default: generic 13445 - description: |- 13446 - The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 13447 - When not specified, defaults to 'generic'. 13448 - enum: 13449 - - generic 13450 - - aws 13451 - - azure 13452 - - gcp 13453 - type: string 13454 - proxySecretRef: 13455 - description: |- 13456 - ProxySecretRef specifies the Secret containing the proxy configuration 13457 - to use while communicating with the container registry. 13458 - properties: 13459 - name: 13460 - description: Name of the referent. 13461 + message: 13462 + description: |- 13463 + message is a human readable message indicating details about the transition. 13464 + This may be an empty string. 13465 + maxLength: 32768 13466 type: string 13467 - required: 13468 - - name 13469 - type: object 13470 - secretRef: 13471 - description: |- 13472 - SecretRef can be given the name of a secret containing 13473 - credentials to use for the image registry. The secret should be 13474 - created with `kubectl create secret docker-registry`, or the 13475 - equivalent. 13476 - properties: 13477 - name: 13478 - description: Name of the referent. 13479 + observedGeneration: 13480 + description: |- 13481 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13482 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13483 + with respect to the current state of the instance. 13484 + format: int64 13485 + minimum: 0 13486 + type: integer 13487 + reason: 13488 + description: |- 13489 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13490 + Producers of specific condition types may define expected values and meanings for this field, 13491 + and whether the values are considered a guaranteed API. 13492 + The value should be a CamelCase string. 13493 + This field may not be empty. 13494 + maxLength: 1024 13495 + minLength: 1 13496 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13497 + type: string 13498 + status: 13499 + description: status of the condition, one of True, False, Unknown. 13500 + enum: 13501 + - "True" 13502 + - "False" 13503 + - Unknown 13504 + type: string 13505 + type: 13506 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13507 + maxLength: 316 13508 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13509 type: string 13510 required: 13511 - - name 13512 + - lastTransitionTime 13513 + - message 13514 + - reason 13515 + - status 13516 + - type 13517 type: object 13518 - serviceAccountName: 13519 - description: |- 13520 - ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 13521 - the image pull if the service account has attached pull secrets. 13522 - maxLength: 253 13523 - type: string 13524 - suspend: 13525 - description: |- 13526 - This flag tells the controller to suspend subsequent image scans. 13527 - It does not apply to already started scans. Defaults to false. 13528 - type: boolean 13529 - timeout: 13530 - description: |- 13531 - Timeout for image scanning. 13532 - Defaults to 'Interval' duration. 13533 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 13534 - type: string 13535 - required: 13536 - - image 13537 - - interval 13538 - type: object 13539 - status: 13540 - default: 13541 - observedGeneration: -1 13542 - description: ImageRepositoryStatus defines the observed state of ImageRepository 13543 - properties: 13544 - canonicalImageName: 13545 - description: |- 13546 - CanonicalName is the name of the image repository with all the 13547 - implied bits made explicit; e.g., `docker.io/library/alpine` 13548 - rather than `alpine`. 13549 - type: string 13550 - conditions: 13551 - items: 13552 - description: Condition contains details for one aspect of the current state of this API Resource. 13553 - properties: 13554 - lastTransitionTime: 13555 - description: |- 13556 - lastTransitionTime is the last time the condition transitioned from one status to another. 13557 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13558 - format: date-time 13559 - type: string 13560 - message: 13561 - description: |- 13562 - message is a human readable message indicating details about the transition. 13563 - This may be an empty string. 13564 - maxLength: 32768 13565 - type: string 13566 - observedGeneration: 13567 - description: |- 13568 - observedGeneration represents the .metadata.generation that the condition was set based upon. 13569 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13570 - with respect to the current state of the instance. 13571 - format: int64 13572 - minimum: 0 13573 - type: integer 13574 - reason: 13575 - description: |- 13576 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 13577 - Producers of specific condition types may define expected values and meanings for this field, 13578 - and whether the values are considered a guaranteed API. 13579 - The value should be a CamelCase string. 13580 - This field may not be empty. 13581 - maxLength: 1024 13582 - minLength: 1 13583 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13584 - type: string 13585 - status: 13586 - description: status of the condition, one of True, False, Unknown. 13587 - enum: 13588 - - "True" 13589 - - "False" 13590 - - Unknown 13591 - type: string 13592 - type: 13593 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 13594 - maxLength: 316 13595 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13596 - type: string 13597 - required: 13598 - - lastTransitionTime 13599 - - message 13600 - - reason 13601 - - status 13602 - - type 13603 - type: object 13604 - type: array 13605 - lastHandledReconcileAt: 13606 - description: |- 13607 - LastHandledReconcileAt holds the value of the most recent 13608 - reconcile request value, so a change of the annotation value 13609 - can be detected. 13610 - type: string 13611 - lastScanResult: 13612 - description: LastScanResult contains the number of fetched tags. 13613 + type: array 13614 + lastHandledReconcileAt: 13615 + description: |- 13616 + LastHandledReconcileAt holds the value of the most recent 13617 + reconcile request value, so a change of the annotation value 13618 + can be detected. 13619 + type: string 13620 + lastScanResult: 13621 + description: LastScanResult contains the number of fetched tags. 13622 + properties: 13623 + latestTags: 13624 + description: |- 13625 + LatestTags is a small sample of the tags found in the last scan. 13626 + It's the first 10 tags when sorting all the tags in descending 13627 + alphabetical order. 13628 + items: 13629 + type: string 13630 + type: array 13631 + revision: 13632 + description: Revision is a stable hash of the scanned tags. 13633 + type: string 13634 + scanTime: 13635 + description: ScanTime is the time when the last scan was performed. 13636 + format: date-time 13637 + type: string 13638 + tagCount: 13639 + description: TagCount is the number of tags found in the last 13640 + scan. 13641 + type: integer 13642 + required: 13643 + - tagCount 13644 + type: object 13645 + observedExclusionList: 13646 + description: |- 13647 + ObservedExclusionList is a list of observed exclusion list. It reflects 13648 + the exclusion rules used for the observed scan result in 13649 + spec.lastScanResult. 13650 + items: 13651 + type: string 13652 + type: array 13653 + observedGeneration: 13654 + description: ObservedGeneration is the last reconciled generation. 13655 + format: int64 13656 + type: integer 13657 + type: object 13658 + type: object 13659 + served: true 13660 + storage: true 13661 + subresources: 13662 + status: {} 13663 + - additionalPrinterColumns: 13664 + - jsonPath: .spec.image 13665 + name: Image 13666 + type: string 13667 + - jsonPath: .status.lastScanResult.tagCount 13668 + name: Tags 13669 + type: string 13670 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 13671 + name: Ready 13672 + type: string 13673 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 13674 + name: Status 13675 + type: string 13676 + - jsonPath: .status.lastScanResult.scanTime 13677 + name: Last scan 13678 + priority: 1 13679 + type: string 13680 + - jsonPath: .metadata.creationTimestamp 13681 + name: Age 13682 + type: date 13683 + deprecated: true 13684 + deprecationWarning: v1beta2 ImageRepository is deprecated, upgrade to v1 13685 + name: v1beta2 13686 + schema: 13687 + openAPIV3Schema: 13688 + description: ImageRepository is the Schema for the imagerepositories API 13689 + properties: 13690 + apiVersion: 13691 + description: |- 13692 + APIVersion defines the versioned schema of this representation of an object. 13693 + Servers should convert recognized schemas to the latest internal value, and 13694 + may reject unrecognized values. 13695 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 13696 + type: string 13697 + kind: 13698 + description: |- 13699 + Kind is a string value representing the REST resource this object represents. 13700 + Servers may infer this from the endpoint the client submits requests to. 13701 + Cannot be updated. 13702 + In CamelCase. 13703 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 13704 + type: string 13705 + metadata: 13706 + type: object 13707 + spec: 13708 + description: |- 13709 + ImageRepositorySpec defines the parameters for scanning an image 13710 + repository, e.g., `fluxcd/flux`. 13711 + properties: 13712 + accessFrom: 13713 + description: |- 13714 + AccessFrom defines an ACL for allowing cross-namespace references 13715 + to the ImageRepository object based on the caller's namespace labels. 13716 + properties: 13717 + namespaceSelectors: 13718 + description: |- 13719 + NamespaceSelectors is the list of namespace selectors to which this ACL applies. 13720 + Items in this list are evaluated using a logical OR operation. 13721 + items: 13722 + description: |- 13723 + NamespaceSelector selects the namespaces to which this ACL applies. 13724 + An empty map of MatchLabels matches all namespaces in a cluster. 13725 + properties: 13726 + matchLabels: 13727 + additionalProperties: 13728 + type: string 13729 + description: |- 13730 + MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 13731 + map is equivalent to an element of matchExpressions, whose key field is "key", the 13732 + operator is "In", and the values array contains only "value". The requirements are ANDed. 13733 + type: object 13734 + type: object 13735 + type: array 13736 + required: 13737 + - namespaceSelectors 13738 + type: object 13739 + certSecretRef: 13740 + description: |- 13741 + CertSecretRef can be given the name of a Secret containing 13742 + either or both of 13743 + 13744 + - a PEM-encoded client certificate (`tls.crt`) and private 13745 + key (`tls.key`); 13746 + - a PEM-encoded CA certificate (`ca.crt`) 13747 + 13748 + and whichever are supplied, will be used for connecting to the 13749 + registry. The client cert and key are useful if you are 13750 + authenticating with a certificate; the CA cert is useful if 13751 + you are using a self-signed server certificate. The Secret must 13752 + be of type `Opaque` or `kubernetes.io/tls`. 13753 + 13754 + Note: Support for the `caFile`, `certFile` and `keyFile` keys has 13755 + been deprecated. 13756 + properties: 13757 + name: 13758 + description: Name of the referent. 13759 + type: string 13760 + required: 13761 + - name 13762 + type: object 13763 + exclusionList: 13764 + default: 13765 + - ^.*\.sig$ 13766 + description: |- 13767 + ExclusionList is a list of regex strings used to exclude certain tags 13768 + from being stored in the database. 13769 + items: 13770 + type: string 13771 + maxItems: 25 13772 + type: array 13773 + image: 13774 + description: Image is the name of the image repository 13775 + type: string 13776 + insecure: 13777 + description: Insecure allows connecting to a non-TLS HTTP container 13778 + registry. 13779 + type: boolean 13780 + interval: 13781 + description: |- 13782 + Interval is the length of time to wait between 13783 + scans of the image repository. 13784 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 13785 + type: string 13786 + provider: 13787 + default: generic 13788 + description: |- 13789 + The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. 13790 + When not specified, defaults to 'generic'. 13791 + enum: 13792 + - generic 13793 + - aws 13794 + - azure 13795 + - gcp 13796 + type: string 13797 + proxySecretRef: 13798 + description: |- 13799 + ProxySecretRef specifies the Secret containing the proxy configuration 13800 + to use while communicating with the container registry. 13801 + properties: 13802 + name: 13803 + description: Name of the referent. 13804 + type: string 13805 + required: 13806 + - name 13807 + type: object 13808 + secretRef: 13809 + description: |- 13810 + SecretRef can be given the name of a secret containing 13811 + credentials to use for the image registry. The secret should be 13812 + created with `kubectl create secret docker-registry`, or the 13813 + equivalent. 13814 + properties: 13815 + name: 13816 + description: Name of the referent. 13817 + type: string 13818 + required: 13819 + - name 13820 + type: object 13821 + serviceAccountName: 13822 + description: |- 13823 + ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate 13824 + the image pull if the service account has attached pull secrets. 13825 + maxLength: 253 13826 + type: string 13827 + suspend: 13828 + description: |- 13829 + This flag tells the controller to suspend subsequent image scans. 13830 + It does not apply to already started scans. Defaults to false. 13831 + type: boolean 13832 + timeout: 13833 + description: |- 13834 + Timeout for image scanning. 13835 + Defaults to 'Interval' duration. 13836 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$ 13837 + type: string 13838 + required: 13839 + - image 13840 + - interval 13841 + type: object 13842 + status: 13843 + default: 13844 + observedGeneration: -1 13845 + description: ImageRepositoryStatus defines the observed state of ImageRepository 13846 + properties: 13847 + canonicalImageName: 13848 + description: |- 13849 + CanonicalName is the name of the image repository with all the 13850 + implied bits made explicit; e.g., `docker.io/library/alpine` 13851 + rather than `alpine`. 13852 + type: string 13853 + conditions: 13854 + items: 13855 + description: Condition contains details for one aspect of the current 13856 + state of this API Resource. 13857 properties: 13858 - latestTags: 13859 + lastTransitionTime: 13860 description: |- 13861 - LatestTags is a small sample of the tags found in the last scan. 13862 - It's the first 10 tags when sorting all the tags in descending 13863 - alphabetical order. 13864 - items: 13865 - type: string 13866 - type: array 13867 - revision: 13868 - description: Revision is a stable hash of the scanned tags. 13869 - type: string 13870 - scanTime: 13871 - description: ScanTime is the time when the last scan was performed. 13872 + lastTransitionTime is the last time the condition transitioned from one status to another. 13873 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 13874 format: date-time 13875 type: string 13876 - tagCount: 13877 - description: TagCount is the number of tags found in the last scan. 13878 + message: 13879 + description: |- 13880 + message is a human readable message indicating details about the transition. 13881 + This may be an empty string. 13882 + maxLength: 32768 13883 + type: string 13884 + observedGeneration: 13885 + description: |- 13886 + observedGeneration represents the .metadata.generation that the condition was set based upon. 13887 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 13888 + with respect to the current state of the instance. 13889 + format: int64 13890 + minimum: 0 13891 type: integer 13892 + reason: 13893 + description: |- 13894 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 13895 + Producers of specific condition types may define expected values and meanings for this field, 13896 + and whether the values are considered a guaranteed API. 13897 + The value should be a CamelCase string. 13898 + This field may not be empty. 13899 + maxLength: 1024 13900 + minLength: 1 13901 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 13902 + type: string 13903 + status: 13904 + description: status of the condition, one of True, False, Unknown. 13905 + enum: 13906 + - "True" 13907 + - "False" 13908 + - Unknown 13909 + type: string 13910 + type: 13911 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 13912 + maxLength: 316 13913 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 13914 + type: string 13915 required: 13916 - - tagCount 13917 + - lastTransitionTime 13918 + - message 13919 + - reason 13920 + - status 13921 + - type 13922 type: object 13923 - observedExclusionList: 13924 - description: |- 13925 - ObservedExclusionList is a list of observed exclusion list. It reflects 13926 - the exclusion rules used for the observed scan result in 13927 - spec.lastScanResult. 13928 - items: 13929 - type: string 13930 - type: array 13931 - observedGeneration: 13932 - description: ObservedGeneration is the last reconciled generation. 13933 - format: int64 13934 - type: integer 13935 - type: object 13936 - type: object 13937 - served: true 13938 - storage: false 13939 - subresources: 13940 - status: {} 13941 + type: array 13942 + lastHandledReconcileAt: 13943 + description: |- 13944 + LastHandledReconcileAt holds the value of the most recent 13945 + reconcile request value, so a change of the annotation value 13946 + can be detected. 13947 + type: string 13948 + lastScanResult: 13949 + description: LastScanResult contains the number of fetched tags. 13950 + properties: 13951 + latestTags: 13952 + description: |- 13953 + LatestTags is a small sample of the tags found in the last scan. 13954 + It's the first 10 tags when sorting all the tags in descending 13955 + alphabetical order. 13956 + items: 13957 + type: string 13958 + type: array 13959 + revision: 13960 + description: Revision is a stable hash of the scanned tags. 13961 + type: string 13962 + scanTime: 13963 + description: ScanTime is the time when the last scan was performed. 13964 + format: date-time 13965 + type: string 13966 + tagCount: 13967 + description: TagCount is the number of tags found in the last 13968 + scan. 13969 + type: integer 13970 + required: 13971 + - tagCount 13972 + type: object 13973 + observedExclusionList: 13974 + description: |- 13975 + ObservedExclusionList is a list of observed exclusion list. It reflects 13976 + the exclusion rules used for the observed scan result in 13977 + spec.lastScanResult. 13978 + items: 13979 + type: string 13980 + type: array 13981 + observedGeneration: 13982 + description: ObservedGeneration is the last reconciled generation. 13983 + format: int64 13984 + type: integer 13985 + type: object 13986 + type: object 13987 + served: true 13988 + storage: false 13989 + subresources: 13990 + status: {} 13991 --- 13992 apiVersion: v1 13993 kind: ServiceAccount 13994 @@ -7487,7 +7636,7 @@ metadata: 13995 app.kubernetes.io/component: image-reflector-controller 13996 app.kubernetes.io/instance: flux-system 13997 app.kubernetes.io/part-of: flux 13998 - app.kubernetes.io/version: v2.8.0 13999 + app.kubernetes.io/version: v2.8.1 14000 name: image-reflector-controller 14001 namespace: flux-system 14002 --- 14003 @@ -7498,7 +7647,7 @@ metadata: 14004 app.kubernetes.io/component: image-reflector-controller 14005 app.kubernetes.io/instance: flux-system 14006 app.kubernetes.io/part-of: flux 14007 - app.kubernetes.io/version: v2.8.0 14008 + app.kubernetes.io/version: v2.8.1 14009 control-plane: controller 14010 name: image-reflector-controller 14011 namespace: flux-system 14012 @@ -7517,64 +7666,64 @@ spec: 14013 app.kubernetes.io/component: image-reflector-controller 14014 app.kubernetes.io/instance: flux-system 14015 app.kubernetes.io/part-of: flux 14016 - app.kubernetes.io/version: v2.8.0 14017 + app.kubernetes.io/version: v2.8.1 14018 spec: 14019 containers: 14020 - - args: 14021 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 14022 - - --watch-all-namespaces=true 14023 - - --log-level=info 14024 - - --log-encoding=json 14025 - - --enable-leader-election 14026 - env: 14027 - - name: RUNTIME_NAMESPACE 14028 - valueFrom: 14029 - fieldRef: 14030 - fieldPath: metadata.namespace 14031 - - name: GOMEMLIMIT 14032 - valueFrom: 14033 - resourceFieldRef: 14034 - containerName: manager 14035 - resource: limits.memory 14036 - image: ghcr.io/fluxcd/image-reflector-controller:v1.1.0 14037 - imagePullPolicy: IfNotPresent 14038 - livenessProbe: 14039 - httpGet: 14040 - path: /healthz 14041 - port: healthz 14042 - name: manager 14043 - ports: 14044 - - containerPort: 8080 14045 - name: http-prom 14046 - protocol: TCP 14047 - - containerPort: 9440 14048 - name: healthz 14049 - protocol: TCP 14050 - readinessProbe: 14051 - httpGet: 14052 - path: /readyz 14053 - port: healthz 14054 - resources: 14055 - limits: 14056 - cpu: 1000m 14057 - memory: 1Gi 14058 - requests: 14059 - cpu: 100m 14060 - memory: 64Mi 14061 - securityContext: 14062 - allowPrivilegeEscalation: false 14063 - capabilities: 14064 - drop: 14065 - - ALL 14066 - readOnlyRootFilesystem: true 14067 - runAsNonRoot: true 14068 - seccompProfile: 14069 - type: RuntimeDefault 14070 - volumeMounts: 14071 - - mountPath: /tmp 14072 - name: temp 14073 - - mountPath: /data 14074 - name: data 14075 + - args: 14076 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 14077 + - --watch-all-namespaces=true 14078 + - --log-level=info 14079 + - --log-encoding=json 14080 + - --enable-leader-election 14081 + env: 14082 + - name: RUNTIME_NAMESPACE 14083 + valueFrom: 14084 + fieldRef: 14085 + fieldPath: metadata.namespace 14086 + - name: GOMEMLIMIT 14087 + valueFrom: 14088 + resourceFieldRef: 14089 + containerName: manager 14090 + resource: limits.memory 14091 + image: ghcr.io/fluxcd/image-reflector-controller:v1.1.0 14092 + imagePullPolicy: IfNotPresent 14093 + livenessProbe: 14094 + httpGet: 14095 + path: /healthz 14096 + port: healthz 14097 + name: manager 14098 + ports: 14099 + - containerPort: 8080 14100 + name: http-prom 14101 + protocol: TCP 14102 + - containerPort: 9440 14103 + name: healthz 14104 + protocol: TCP 14105 + readinessProbe: 14106 + httpGet: 14107 + path: /readyz 14108 + port: healthz 14109 + resources: 14110 + limits: 14111 + cpu: 1000m 14112 + memory: 1Gi 14113 + requests: 14114 + cpu: 100m 14115 + memory: 64Mi 14116 + securityContext: 14117 + allowPrivilegeEscalation: false 14118 + capabilities: 14119 + drop: 14120 + - ALL 14121 + readOnlyRootFilesystem: true 14122 + runAsNonRoot: true 14123 + seccompProfile: 14124 + type: RuntimeDefault 14125 + volumeMounts: 14126 + - mountPath: /tmp 14127 + name: temp 14128 + - mountPath: /data 14129 + name: data 14130 nodeSelector: 14131 kubernetes.io/os: linux 14132 securityContext: 14133 @@ -7582,10 +7731,10 @@ spec: 14134 serviceAccountName: image-reflector-controller 14135 terminationGracePeriodSeconds: 10 14136 volumes: 14137 - - emptyDir: {} 14138 - name: temp 14139 - - emptyDir: {} 14140 - name: data 14141 + - emptyDir: {} 14142 + name: temp 14143 + - emptyDir: {} 14144 + name: data 14145 --- 14146 apiVersion: apiextensions.k8s.io/v1 14147 kind: CustomResourceDefinition 14148 @@ -7596,7 +7745,7 @@ metadata: 14149 app.kubernetes.io/component: image-automation-controller 14150 app.kubernetes.io/instance: flux-system 14151 app.kubernetes.io/part-of: flux 14152 - app.kubernetes.io/version: v2.8.0 14153 + app.kubernetes.io/version: v2.8.1 14154 name: imageupdateautomations.image.toolkit.fluxcd.io 14155 spec: 14156 group: image.toolkit.fluxcd.io 14157 @@ -7605,796 +7754,818 @@ spec: 14158 listKind: ImageUpdateAutomationList 14159 plural: imageupdateautomations 14160 shortNames: 14161 - - iua 14162 - - imgupd 14163 - - imgauto 14164 + - iua 14165 + - imgupd 14166 + - imgauto 14167 singular: imageupdateautomation 14168 scope: Namespaced 14169 versions: 14170 - - additionalPrinterColumns: 14171 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 14172 - name: Ready 14173 - type: string 14174 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 14175 - name: Status 14176 - type: string 14177 - - jsonPath: .status.lastAutomationRunTime 14178 - name: Last run 14179 - priority: 1 14180 - type: string 14181 - - jsonPath: .metadata.creationTimestamp 14182 - name: Age 14183 - type: date 14184 - name: v1 14185 - schema: 14186 - openAPIV3Schema: 14187 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 14188 - properties: 14189 - apiVersion: 14190 - description: |- 14191 - APIVersion defines the versioned schema of this representation of an object. 14192 - Servers should convert recognized schemas to the latest internal value, and 14193 - may reject unrecognized values. 14194 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14195 - type: string 14196 - kind: 14197 - description: |- 14198 - Kind is a string value representing the REST resource this object represents. 14199 - Servers may infer this from the endpoint the client submits requests to. 14200 - Cannot be updated. 14201 - In CamelCase. 14202 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14203 - type: string 14204 - metadata: 14205 - type: object 14206 - spec: 14207 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 14208 - properties: 14209 - git: 14210 - description: |- 14211 - GitSpec contains all the git-specific definitions. This is 14212 - technically optional, but in practice mandatory until there are 14213 - other kinds of source allowed. 14214 - properties: 14215 - checkout: 14216 - description: |- 14217 - Checkout gives the parameters for cloning the git repository, 14218 - ready to make changes. If not present, the `spec.ref` field from the 14219 - referenced `GitRepository` or its default will be used. 14220 - properties: 14221 - ref: 14222 - description: |- 14223 - Reference gives a branch, tag or commit to clone from the Git 14224 - repository. 14225 - properties: 14226 - branch: 14227 - description: Branch to check out, defaults to 'master' if no other field is defined. 14228 - type: string 14229 - commit: 14230 - description: |- 14231 - Commit SHA to check out, takes precedence over all reference fields. 14232 + - additionalPrinterColumns: 14233 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 14234 + name: Ready 14235 + type: string 14236 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 14237 + name: Status 14238 + type: string 14239 + - jsonPath: .status.lastAutomationRunTime 14240 + name: Last run 14241 + priority: 1 14242 + type: string 14243 + - jsonPath: .metadata.creationTimestamp 14244 + name: Age 14245 + type: date 14246 + name: v1 14247 + schema: 14248 + openAPIV3Schema: 14249 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 14250 + API 14251 + properties: 14252 + apiVersion: 14253 + description: |- 14254 + APIVersion defines the versioned schema of this representation of an object. 14255 + Servers should convert recognized schemas to the latest internal value, and 14256 + may reject unrecognized values. 14257 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14258 + type: string 14259 + kind: 14260 + description: |- 14261 + Kind is a string value representing the REST resource this object represents. 14262 + Servers may infer this from the endpoint the client submits requests to. 14263 + Cannot be updated. 14264 + In CamelCase. 14265 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14266 + type: string 14267 + metadata: 14268 + type: object 14269 + spec: 14270 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 14271 + properties: 14272 + git: 14273 + description: |- 14274 + GitSpec contains all the git-specific definitions. This is 14275 + technically optional, but in practice mandatory until there are 14276 + other kinds of source allowed. 14277 + properties: 14278 + checkout: 14279 + description: |- 14280 + Checkout gives the parameters for cloning the git repository, 14281 + ready to make changes. If not present, the `spec.ref` field from the 14282 + referenced `GitRepository` or its default will be used. 14283 + properties: 14284 + ref: 14285 + description: |- 14286 + Reference gives a branch, tag or commit to clone from the Git 14287 + repository. 14288 + properties: 14289 + branch: 14290 + description: Branch to check out, defaults to 'master' 14291 + if no other field is defined. 14292 + type: string 14293 + commit: 14294 + description: |- 14295 + Commit SHA to check out, takes precedence over all reference fields. 14296 14297 - This can be combined with Branch to shallow clone the branch, in which 14298 - the commit is expected to exist. 14299 - type: string 14300 - name: 14301 - description: |- 14302 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 14303 + This can be combined with Branch to shallow clone the branch, in which 14304 + the commit is expected to exist. 14305 + type: string 14306 + name: 14307 + description: |- 14308 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 14309 14310 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 14311 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 14312 - type: string 14313 - semver: 14314 - description: SemVer tag expression to check out, takes precedence over Tag. 14315 - type: string 14316 - tag: 14317 - description: Tag to check out, takes precedence over Branch. 14318 - type: string 14319 - type: object 14320 - required: 14321 - - ref 14322 - type: object 14323 - commit: 14324 - description: Commit specifies how to commit to the git repository. 14325 - properties: 14326 - author: 14327 - description: |- 14328 - Author gives the email and optionally the name to use as the 14329 - author of commits. 14330 - properties: 14331 - email: 14332 - description: Email gives the email to provide when making a commit. 14333 - type: string 14334 - name: 14335 - description: Name gives the name to provide when making a commit. 14336 - type: string 14337 - required: 14338 - - email 14339 - type: object 14340 - messageTemplate: 14341 - description: |- 14342 - MessageTemplate provides a template for the commit message, 14343 - into which will be interpolated the details of the change made. 14344 - Note: The `Updated` template field has been removed. Use `Changed` instead. 14345 - type: string 14346 - messageTemplateValues: 14347 - additionalProperties: 14348 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 14349 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 14350 type: string 14351 - description: |- 14352 - MessageTemplateValues provides additional values to be available to the 14353 - templating rendering. 14354 - type: object 14355 - signingKey: 14356 - description: SigningKey provides the option to sign commits with a GPG key 14357 - properties: 14358 - secretRef: 14359 - description: |- 14360 - SecretRef holds the name to a secret that contains a 'git.asc' key 14361 - corresponding to the ASCII Armored file containing the GPG signing 14362 - keypair as the value. It must be in the same namespace as the 14363 - ImageUpdateAutomation. 14364 - properties: 14365 - name: 14366 - description: Name of the referent. 14367 - type: string 14368 - required: 14369 - - name 14370 - type: object 14371 - required: 14372 - - secretRef 14373 - type: object 14374 - required: 14375 - - author 14376 - type: object 14377 - push: 14378 - description: |- 14379 - Push specifies how and where to push commits made by the 14380 - automation. If missing, commits are pushed (back) to 14381 - `.spec.checkout.branch` or its default. 14382 - properties: 14383 - branch: 14384 - description: |- 14385 - Branch specifies that commits should be pushed to the branch 14386 - named. The branch is created using `.spec.checkout.branch` as the 14387 - starting point, if it doesn't already exist. 14388 - type: string 14389 - options: 14390 - additionalProperties: 14391 + semver: 14392 + description: SemVer tag expression to check out, takes 14393 + precedence over Tag. 14394 type: string 14395 - description: |- 14396 - Options specifies the push options that are sent to the Git 14397 - server when performing a push operation. For details, see: 14398 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 14399 - type: object 14400 - refspec: 14401 - description: |- 14402 - Refspec specifies the Git Refspec to use for a push operation. 14403 - If both Branch and Refspec are provided, then the commit is pushed 14404 - to the branch and also using the specified refspec. 14405 - For more details about Git Refspecs, see: 14406 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 14407 - type: string 14408 - type: object 14409 - required: 14410 - - commit 14411 - type: object 14412 - interval: 14413 - description: |- 14414 - Interval gives an lower bound for how often the automation 14415 - run should be attempted. 14416 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14417 - type: string 14418 - policySelector: 14419 - description: |- 14420 - PolicySelector allows to filter applied policies based on labels. 14421 - By default includes all policies in namespace. 14422 - properties: 14423 - matchExpressions: 14424 - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. 14425 - items: 14426 + tag: 14427 + description: Tag to check out, takes precedence over Branch. 14428 + type: string 14429 + type: object 14430 + required: 14431 + - ref 14432 + type: object 14433 + commit: 14434 + description: Commit specifies how to commit to the git repository. 14435 + properties: 14436 + author: 14437 description: |- 14438 - A label selector requirement is a selector that contains values, a key, and an operator that 14439 - relates the key and values. 14440 + Author gives the email and optionally the name to use as the 14441 + author of commits. 14442 properties: 14443 - key: 14444 - description: key is the label key that the selector applies to. 14445 + email: 14446 + description: Email gives the email to provide when making 14447 + a commit. 14448 type: string 14449 - operator: 14450 - description: |- 14451 - operator represents a key's relationship to a set of values. 14452 - Valid operators are In, NotIn, Exists and DoesNotExist. 14453 + name: 14454 + description: Name gives the name to provide when making 14455 + a commit. 14456 type: string 14457 - values: 14458 + required: 14459 + - email 14460 + type: object 14461 + messageTemplate: 14462 + description: |- 14463 + MessageTemplate provides a template for the commit message, 14464 + into which will be interpolated the details of the change made. 14465 + Note: The `Updated` template field has been removed. Use `Changed` instead. 14466 + type: string 14467 + messageTemplateValues: 14468 + additionalProperties: 14469 + type: string 14470 + description: |- 14471 + MessageTemplateValues provides additional values to be available to the 14472 + templating rendering. 14473 + type: object 14474 + signingKey: 14475 + description: SigningKey provides the option to sign commits 14476 + with a GPG key 14477 + properties: 14478 + secretRef: 14479 description: |- 14480 - values is an array of string values. If the operator is In or NotIn, 14481 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 14482 - the values array must be empty. This array is replaced during a strategic 14483 - merge patch. 14484 - items: 14485 - type: string 14486 - type: array 14487 - x-kubernetes-list-type: atomic 14488 + SecretRef holds the name to a secret that contains a 'git.asc' key 14489 + corresponding to the ASCII Armored file containing the GPG signing 14490 + keypair as the value. It must be in the same namespace as the 14491 + ImageUpdateAutomation. 14492 + properties: 14493 + name: 14494 + description: Name of the referent. 14495 + type: string 14496 + required: 14497 + - name 14498 + type: object 14499 required: 14500 - - key 14501 - - operator 14502 + - secretRef 14503 type: object 14504 - type: array 14505 - x-kubernetes-list-type: atomic 14506 - matchLabels: 14507 - additionalProperties: 14508 + required: 14509 + - author 14510 + type: object 14511 + push: 14512 + description: |- 14513 + Push specifies how and where to push commits made by the 14514 + automation. If missing, commits are pushed (back) to 14515 + `.spec.checkout.branch` or its default. 14516 + properties: 14517 + branch: 14518 + description: |- 14519 + Branch specifies that commits should be pushed to the branch 14520 + named. The branch is created using `.spec.checkout.branch` as the 14521 + starting point, if it doesn't already exist. 14522 + type: string 14523 + options: 14524 + additionalProperties: 14525 + type: string 14526 + description: |- 14527 + Options specifies the push options that are sent to the Git 14528 + server when performing a push operation. For details, see: 14529 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 14530 + type: object 14531 + refspec: 14532 + description: |- 14533 + Refspec specifies the Git Refspec to use for a push operation. 14534 + If both Branch and Refspec are provided, then the commit is pushed 14535 + to the branch and also using the specified refspec. 14536 + For more details about Git Refspecs, see: 14537 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 14538 type: string 14539 + type: object 14540 + required: 14541 + - commit 14542 + type: object 14543 + interval: 14544 + description: |- 14545 + Interval gives an lower bound for how often the automation 14546 + run should be attempted. 14547 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 14548 + type: string 14549 + policySelector: 14550 + description: |- 14551 + PolicySelector allows to filter applied policies based on labels. 14552 + By default includes all policies in namespace. 14553 + properties: 14554 + matchExpressions: 14555 + description: matchExpressions is a list of label selector requirements. 14556 + The requirements are ANDed. 14557 + items: 14558 description: |- 14559 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 14560 - map is equivalent to an element of matchExpressions, whose key field is "key", the 14561 - operator is "In", and the values array contains only "value". The requirements are ANDed. 14562 + A label selector requirement is a selector that contains values, a key, and an operator that 14563 + relates the key and values. 14564 + properties: 14565 + key: 14566 + description: key is the label key that the selector applies 14567 + to. 14568 + type: string 14569 + operator: 14570 + description: |- 14571 + operator represents a key's relationship to a set of values. 14572 + Valid operators are In, NotIn, Exists and DoesNotExist. 14573 + type: string 14574 + values: 14575 + description: |- 14576 + values is an array of string values. If the operator is In or NotIn, 14577 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 14578 + the values array must be empty. This array is replaced during a strategic 14579 + merge patch. 14580 + items: 14581 + type: string 14582 + type: array 14583 + x-kubernetes-list-type: atomic 14584 + required: 14585 + - key 14586 + - operator 14587 type: object 14588 - type: object 14589 - x-kubernetes-map-type: atomic 14590 - sourceRef: 14591 - description: |- 14592 - SourceRef refers to the resource giving access details 14593 - to a git repository. 14594 + type: array 14595 + x-kubernetes-list-type: atomic 14596 + matchLabels: 14597 + additionalProperties: 14598 + type: string 14599 + description: |- 14600 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 14601 + map is equivalent to an element of matchExpressions, whose key field is "key", the 14602 + operator is "In", and the values array contains only "value". The requirements are ANDed. 14603 + type: object 14604 + type: object 14605 + x-kubernetes-map-type: atomic 14606 + sourceRef: 14607 + description: |- 14608 + SourceRef refers to the resource giving access details 14609 + to a git repository. 14610 + properties: 14611 + apiVersion: 14612 + description: API version of the referent. 14613 + type: string 14614 + kind: 14615 + default: GitRepository 14616 + description: Kind of the referent. 14617 + enum: 14618 + - GitRepository 14619 + type: string 14620 + name: 14621 + description: Name of the referent. 14622 + type: string 14623 + namespace: 14624 + description: Namespace of the referent, defaults to the namespace 14625 + of the Kubernetes resource object that contains the reference. 14626 + type: string 14627 + required: 14628 + - kind 14629 + - name 14630 + type: object 14631 + suspend: 14632 + description: |- 14633 + Suspend tells the controller to not run this automation, until 14634 + it is unset (or set to false). Defaults to false. 14635 + type: boolean 14636 + update: 14637 + default: 14638 + strategy: Setters 14639 + description: |- 14640 + Update gives the specification for how to update the files in 14641 + the repository. This can be left empty, to use the default 14642 + value. 14643 + properties: 14644 + path: 14645 + description: |- 14646 + Path to the directory containing the manifests to be updated. 14647 + Defaults to 'None', which translates to the root path 14648 + of the GitRepositoryRef. 14649 + type: string 14650 + strategy: 14651 + default: Setters 14652 + description: Strategy names the strategy to be used. 14653 + enum: 14654 + - Setters 14655 + type: string 14656 + type: object 14657 + required: 14658 + - interval 14659 + - sourceRef 14660 + type: object 14661 + status: 14662 + default: 14663 + observedGeneration: -1 14664 + description: ImageUpdateAutomationStatus defines the observed state of 14665 + ImageUpdateAutomation 14666 + properties: 14667 + conditions: 14668 + items: 14669 + description: Condition contains details for one aspect of the current 14670 + state of this API Resource. 14671 properties: 14672 - apiVersion: 14673 - description: API version of the referent. 14674 + lastTransitionTime: 14675 + description: |- 14676 + lastTransitionTime is the last time the condition transitioned from one status to another. 14677 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 14678 + format: date-time 14679 type: string 14680 - kind: 14681 - default: GitRepository 14682 - description: Kind of the referent. 14683 - enum: 14684 - - GitRepository 14685 + message: 14686 + description: |- 14687 + message is a human readable message indicating details about the transition. 14688 + This may be an empty string. 14689 + maxLength: 32768 14690 type: string 14691 - name: 14692 - description: Name of the referent. 14693 + observedGeneration: 14694 + description: |- 14695 + observedGeneration represents the .metadata.generation that the condition was set based upon. 14696 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 14697 + with respect to the current state of the instance. 14698 + format: int64 14699 + minimum: 0 14700 + type: integer 14701 + reason: 14702 + description: |- 14703 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 14704 + Producers of specific condition types may define expected values and meanings for this field, 14705 + and whether the values are considered a guaranteed API. 14706 + The value should be a CamelCase string. 14707 + This field may not be empty. 14708 + maxLength: 1024 14709 + minLength: 1 14710 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 14711 type: string 14712 - namespace: 14713 - description: Namespace of the referent, defaults to the namespace of the Kubernetes resource object that contains the reference. 14714 + status: 14715 + description: status of the condition, one of True, False, Unknown. 14716 + enum: 14717 + - "True" 14718 + - "False" 14719 + - Unknown 14720 + type: string 14721 + type: 14722 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 14723 + maxLength: 316 14724 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 14725 type: string 14726 required: 14727 - - kind 14728 - - name 14729 + - lastTransitionTime 14730 + - message 14731 + - reason 14732 + - status 14733 + - type 14734 type: object 14735 - suspend: 14736 - description: |- 14737 - Suspend tells the controller to not run this automation, until 14738 - it is unset (or set to false). Defaults to false. 14739 - type: boolean 14740 - update: 14741 - default: 14742 - strategy: Setters 14743 - description: |- 14744 - Update gives the specification for how to update the files in 14745 - the repository. This can be left empty, to use the default 14746 - value. 14747 + type: array 14748 + lastAutomationRunTime: 14749 + description: |- 14750 + LastAutomationRunTime records the last time the controller ran 14751 + this automation through to completion (even if no updates were 14752 + made). 14753 + format: date-time 14754 + type: string 14755 + lastHandledReconcileAt: 14756 + description: |- 14757 + LastHandledReconcileAt holds the value of the most recent 14758 + reconcile request value, so a change of the annotation value 14759 + can be detected. 14760 + type: string 14761 + lastPushCommit: 14762 + description: |- 14763 + LastPushCommit records the SHA1 of the last commit made by the 14764 + controller, for this automation object 14765 + type: string 14766 + lastPushTime: 14767 + description: LastPushTime records the time of the last pushed change. 14768 + format: date-time 14769 + type: string 14770 + observedGeneration: 14771 + format: int64 14772 + type: integer 14773 + observedPolicies: 14774 + additionalProperties: 14775 + description: ImageRef represents an image reference. 14776 properties: 14777 - path: 14778 - description: |- 14779 - Path to the directory containing the manifests to be updated. 14780 - Defaults to 'None', which translates to the root path 14781 - of the GitRepositoryRef. 14782 + digest: 14783 + description: Digest is the image's digest. 14784 type: string 14785 - strategy: 14786 - default: Setters 14787 - description: Strategy names the strategy to be used. 14788 - enum: 14789 - - Setters 14790 + name: 14791 + description: Name is the bare image's name. 14792 type: string 14793 + tag: 14794 + description: Tag is the image's tag. 14795 + type: string 14796 + required: 14797 + - name 14798 + - tag 14799 type: object 14800 - required: 14801 - - interval 14802 - - sourceRef 14803 - type: object 14804 - status: 14805 - default: 14806 - observedGeneration: -1 14807 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 14808 - properties: 14809 - conditions: 14810 - items: 14811 - description: Condition contains details for one aspect of the current state of this API Resource. 14812 + description: |- 14813 + ObservedPolicies is the list of observed ImagePolicies that were 14814 + considered by the ImageUpdateAutomation update process. 14815 + type: object 14816 + observedSourceRevision: 14817 + description: |- 14818 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 14819 + ObservedSourceRevision is the last observed source revision. This can be 14820 + used to determine if the source has been updated since last observation. 14821 + type: string 14822 + type: object 14823 + type: object 14824 + served: true 14825 + storage: true 14826 + subresources: 14827 + status: {} 14828 + - additionalPrinterColumns: 14829 + - jsonPath: .status.conditions[?(@.type=="Ready")].status 14830 + name: Ready 14831 + type: string 14832 + - jsonPath: .status.conditions[?(@.type=="Ready")].message 14833 + name: Status 14834 + type: string 14835 + - jsonPath: .status.lastAutomationRunTime 14836 + name: Last run 14837 + priority: 1 14838 + type: string 14839 + - jsonPath: .metadata.creationTimestamp 14840 + name: Age 14841 + type: date 14842 + deprecated: true 14843 + deprecationWarning: v1beta2 ImageUpdateAutomation is deprecated, upgrade to v1 14844 + name: v1beta2 14845 + schema: 14846 + openAPIV3Schema: 14847 + description: ImageUpdateAutomation is the Schema for the imageupdateautomations 14848 + API 14849 + properties: 14850 + apiVersion: 14851 + description: |- 14852 + APIVersion defines the versioned schema of this representation of an object. 14853 + Servers should convert recognized schemas to the latest internal value, and 14854 + may reject unrecognized values. 14855 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 14856 + type: string 14857 + kind: 14858 + description: |- 14859 + Kind is a string value representing the REST resource this object represents. 14860 + Servers may infer this from the endpoint the client submits requests to. 14861 + Cannot be updated. 14862 + In CamelCase. 14863 + More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 14864 + type: string 14865 + metadata: 14866 + type: object 14867 + spec: 14868 + description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 14869 + properties: 14870 + git: 14871 + description: |- 14872 + GitSpec contains all the git-specific definitions. This is 14873 + technically optional, but in practice mandatory until there are 14874 + other kinds of source allowed. 14875 + properties: 14876 + checkout: 14877 + description: |- 14878 + Checkout gives the parameters for cloning the git repository, 14879 + ready to make changes. If not present, the `spec.ref` field from the 14880 + referenced `GitRepository` or its default will be used. 14881 properties: 14882 - lastTransitionTime: 14883 - description: |- 14884 - lastTransitionTime is the last time the condition transitioned from one status to another. 14885 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 14886 - format: date-time 14887 - type: string 14888 - message: 14889 + ref: 14890 description: |- 14891 - message is a human readable message indicating details about the transition. 14892 - This may be an empty string. 14893 - maxLength: 32768 14894 - type: string 14895 - observedGeneration: 14896 + Reference gives a branch, tag or commit to clone from the Git 14897 + repository. 14898 + properties: 14899 + branch: 14900 + description: Branch to check out, defaults to 'master' 14901 + if no other field is defined. 14902 + type: string 14903 + commit: 14904 + description: |- 14905 + Commit SHA to check out, takes precedence over all reference fields. 14906 + 14907 + This can be combined with Branch to shallow clone the branch, in which 14908 + the commit is expected to exist. 14909 + type: string 14910 + name: 14911 + description: |- 14912 + Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 14913 + 14914 + It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 14915 + Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 14916 + type: string 14917 + semver: 14918 + description: SemVer tag expression to check out, takes 14919 + precedence over Tag. 14920 + type: string 14921 + tag: 14922 + description: Tag to check out, takes precedence over Branch. 14923 + type: string 14924 + type: object 14925 + required: 14926 + - ref 14927 + type: object 14928 + commit: 14929 + description: Commit specifies how to commit to the git repository. 14930 + properties: 14931 + author: 14932 description: |- 14933 - observedGeneration represents the .metadata.generation that the condition was set based upon. 14934 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 14935 - with respect to the current state of the instance. 14936 - format: int64 14937 - minimum: 0 14938 - type: integer 14939 - reason: 14940 + Author gives the email and optionally the name to use as the 14941 + author of commits. 14942 + properties: 14943 + email: 14944 + description: Email gives the email to provide when making 14945 + a commit. 14946 + type: string 14947 + name: 14948 + description: Name gives the name to provide when making 14949 + a commit. 14950 + type: string 14951 + required: 14952 + - email 14953 + type: object 14954 + messageTemplate: 14955 description: |- 14956 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 14957 - Producers of specific condition types may define expected values and meanings for this field, 14958 - and whether the values are considered a guaranteed API. 14959 - The value should be a CamelCase string. 14960 - This field may not be empty. 14961 - maxLength: 1024 14962 - minLength: 1 14963 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 14964 - type: string 14965 - status: 14966 - description: status of the condition, one of True, False, Unknown. 14967 - enum: 14968 - - "True" 14969 - - "False" 14970 - - Unknown 14971 - type: string 14972 - type: 14973 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 14974 - maxLength: 316 14975 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 14976 + MessageTemplate provides a template for the commit message, 14977 + into which will be interpolated the details of the change made. 14978 + Note: The `Updated` template field has been removed. Use `Changed` instead. 14979 type: string 14980 + messageTemplateValues: 14981 + additionalProperties: 14982 + type: string 14983 + description: |- 14984 + MessageTemplateValues provides additional values to be available to the 14985 + templating rendering. 14986 + type: object 14987 + signingKey: 14988 + description: SigningKey provides the option to sign commits 14989 + with a GPG key 14990 + properties: 14991 + secretRef: 14992 + description: |- 14993 + SecretRef holds the name to a secret that contains a 'git.asc' key 14994 + corresponding to the ASCII Armored file containing the GPG signing 14995 + keypair as the value. It must be in the same namespace as the 14996 + ImageUpdateAutomation. 14997 + properties: 14998 + name: 14999 + description: Name of the referent. 15000 + type: string 15001 + required: 15002 + - name 15003 + type: object 15004 + required: 15005 + - secretRef 15006 + type: object 15007 required: 15008 - - lastTransitionTime 15009 - - message 15010 - - reason 15011 - - status 15012 - - type 15013 + - author 15014 type: object 15015 - type: array 15016 - lastAutomationRunTime: 15017 - description: |- 15018 - LastAutomationRunTime records the last time the controller ran 15019 - this automation through to completion (even if no updates were 15020 - made). 15021 - format: date-time 15022 - type: string 15023 - lastHandledReconcileAt: 15024 - description: |- 15025 - LastHandledReconcileAt holds the value of the most recent 15026 - reconcile request value, so a change of the annotation value 15027 - can be detected. 15028 - type: string 15029 - lastPushCommit: 15030 - description: |- 15031 - LastPushCommit records the SHA1 of the last commit made by the 15032 - controller, for this automation object 15033 - type: string 15034 - lastPushTime: 15035 - description: LastPushTime records the time of the last pushed change. 15036 - format: date-time 15037 - type: string 15038 - observedGeneration: 15039 - format: int64 15040 - type: integer 15041 - observedPolicies: 15042 - additionalProperties: 15043 - description: ImageRef represents an image reference. 15044 + push: 15045 + description: |- 15046 + Push specifies how and where to push commits made by the 15047 + automation. If missing, commits are pushed (back) to 15048 + `.spec.checkout.branch` or its default. 15049 properties: 15050 - digest: 15051 - description: Digest is the image's digest. 15052 - type: string 15053 - name: 15054 - description: Name is the bare image's name. 15055 + branch: 15056 + description: |- 15057 + Branch specifies that commits should be pushed to the branch 15058 + named. The branch is created using `.spec.checkout.branch` as the 15059 + starting point, if it doesn't already exist. 15060 type: string 15061 - tag: 15062 - description: Tag is the image's tag. 15063 + options: 15064 + additionalProperties: 15065 + type: string 15066 + description: |- 15067 + Options specifies the push options that are sent to the Git 15068 + server when performing a push operation. For details, see: 15069 + https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 15070 + type: object 15071 + refspec: 15072 + description: |- 15073 + Refspec specifies the Git Refspec to use for a push operation. 15074 + If both Branch and Refspec are provided, then the commit is pushed 15075 + to the branch and also using the specified refspec. 15076 + For more details about Git Refspecs, see: 15077 + https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 15078 type: string 15079 - required: 15080 - - name 15081 - - tag 15082 type: object 15083 - description: |- 15084 - ObservedPolicies is the list of observed ImagePolicies that were 15085 - considered by the ImageUpdateAutomation update process. 15086 - type: object 15087 - observedSourceRevision: 15088 - description: |- 15089 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 15090 - ObservedSourceRevision is the last observed source revision. This can be 15091 - used to determine if the source has been updated since last observation. 15092 - type: string 15093 - type: object 15094 - type: object 15095 - served: true 15096 - storage: true 15097 - subresources: 15098 - status: {} 15099 - - additionalPrinterColumns: 15100 - - jsonPath: .status.conditions[?(@.type=="Ready")].status 15101 - name: Ready 15102 - type: string 15103 - - jsonPath: .status.conditions[?(@.type=="Ready")].message 15104 - name: Status 15105 - type: string 15106 - - jsonPath: .status.lastAutomationRunTime 15107 - name: Last run 15108 - priority: 1 15109 - type: string 15110 - - jsonPath: .metadata.creationTimestamp 15111 - name: Age 15112 - type: date 15113 - deprecated: true 15114 - deprecationWarning: v1beta2 ImageUpdateAutomation is deprecated, upgrade to v1 15115 - name: v1beta2 15116 - schema: 15117 - openAPIV3Schema: 15118 - description: ImageUpdateAutomation is the Schema for the imageupdateautomations API 15119 - properties: 15120 - apiVersion: 15121 - description: |- 15122 - APIVersion defines the versioned schema of this representation of an object. 15123 - Servers should convert recognized schemas to the latest internal value, and 15124 - may reject unrecognized values. 15125 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources 15126 - type: string 15127 - kind: 15128 - description: |- 15129 - Kind is a string value representing the REST resource this object represents. 15130 - Servers may infer this from the endpoint the client submits requests to. 15131 - Cannot be updated. 15132 - In CamelCase. 15133 - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds 15134 - type: string 15135 - metadata: 15136 - type: object 15137 - spec: 15138 - description: ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation 15139 - properties: 15140 - git: 15141 - description: |- 15142 - GitSpec contains all the git-specific definitions. This is 15143 - technically optional, but in practice mandatory until there are 15144 - other kinds of source allowed. 15145 - properties: 15146 - checkout: 15147 + required: 15148 + - commit 15149 + type: object 15150 + interval: 15151 + description: |- 15152 + Interval gives an lower bound for how often the automation 15153 + run should be attempted. 15154 + pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15155 + type: string 15156 + policySelector: 15157 + description: |- 15158 + PolicySelector allows to filter applied policies based on labels. 15159 + By default includes all policies in namespace. 15160 + properties: 15161 + matchExpressions: 15162 + description: matchExpressions is a list of label selector requirements. 15163 + The requirements are ANDed. 15164 + items: 15165 description: |- 15166 - Checkout gives the parameters for cloning the git repository, 15167 - ready to make changes. If not present, the `spec.ref` field from the 15168 - referenced `GitRepository` or its default will be used. 15169 - properties: 15170 - ref: 15171 - description: |- 15172 - Reference gives a branch, tag or commit to clone from the Git 15173 - repository. 15174 - properties: 15175 - branch: 15176 - description: Branch to check out, defaults to 'master' if no other field is defined. 15177 - type: string 15178 - commit: 15179 - description: |- 15180 - Commit SHA to check out, takes precedence over all reference fields. 15181 - 15182 - This can be combined with Branch to shallow clone the branch, in which 15183 - the commit is expected to exist. 15184 - type: string 15185 - name: 15186 - description: |- 15187 - Name of the reference to check out; takes precedence over Branch, Tag and SemVer. 15188 - 15189 - It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description 15190 - Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head" 15191 - type: string 15192 - semver: 15193 - description: SemVer tag expression to check out, takes precedence over Tag. 15194 - type: string 15195 - tag: 15196 - description: Tag to check out, takes precedence over Branch. 15197 - type: string 15198 - type: object 15199 - required: 15200 - - ref 15201 - type: object 15202 - commit: 15203 - description: Commit specifies how to commit to the git repository. 15204 + A label selector requirement is a selector that contains values, a key, and an operator that 15205 + relates the key and values. 15206 properties: 15207 - author: 15208 - description: |- 15209 - Author gives the email and optionally the name to use as the 15210 - author of commits. 15211 - properties: 15212 - email: 15213 - description: Email gives the email to provide when making a commit. 15214 - type: string 15215 - name: 15216 - description: Name gives the name to provide when making a commit. 15217 - type: string 15218 - required: 15219 - - email 15220 - type: object 15221 - messageTemplate: 15222 - description: |- 15223 - MessageTemplate provides a template for the commit message, 15224 - into which will be interpolated the details of the change made. 15225 - Note: The `Updated` template field has been removed. Use `Changed` instead. 15226 + key: 15227 + description: key is the label key that the selector applies 15228 + to. 15229 type: string 15230 - messageTemplateValues: 15231 - additionalProperties: 15232 - type: string 15233 - description: |- 15234 - MessageTemplateValues provides additional values to be available to the 15235 - templating rendering. 15236 - type: object 15237 - signingKey: 15238 - description: SigningKey provides the option to sign commits with a GPG key 15239 - properties: 15240 - secretRef: 15241 - description: |- 15242 - SecretRef holds the name to a secret that contains a 'git.asc' key 15243 - corresponding to the ASCII Armored file containing the GPG signing 15244 - keypair as the value. It must be in the same namespace as the 15245 - ImageUpdateAutomation. 15246 - properties: 15247 - name: 15248 - description: Name of the referent. 15249 - type: string 15250 - required: 15251 - - name 15252 - type: object 15253 - required: 15254 - - secretRef 15255 - type: object 15256 - required: 15257 - - author 15258 - type: object 15259 - push: 15260 - description: |- 15261 - Push specifies how and where to push commits made by the 15262 - automation. If missing, commits are pushed (back) to 15263 - `.spec.checkout.branch` or its default. 15264 - properties: 15265 - branch: 15266 + operator: 15267 description: |- 15268 - Branch specifies that commits should be pushed to the branch 15269 - named. The branch is created using `.spec.checkout.branch` as the 15270 - starting point, if it doesn't already exist. 15271 + operator represents a key's relationship to a set of values. 15272 + Valid operators are In, NotIn, Exists and DoesNotExist. 15273 type: string 15274 - options: 15275 - additionalProperties: 15276 - type: string 15277 + values: 15278 description: |- 15279 - Options specifies the push options that are sent to the Git 15280 - server when performing a push operation. For details, see: 15281 - https://git-scm.com/docs/git-push#Documentation/git-push.txt---push-optionltoptiongt 15282 - type: object 15283 - refspec: 15284 - description: |- 15285 - Refspec specifies the Git Refspec to use for a push operation. 15286 - If both Branch and Refspec are provided, then the commit is pushed 15287 - to the branch and also using the specified refspec. 15288 - For more details about Git Refspecs, see: 15289 - https://git-scm.com/book/en/v2/Git-Internals-The-Refspec 15290 - type: string 15291 - type: object 15292 - required: 15293 - - commit 15294 - type: object 15295 - interval: 15296 - description: |- 15297 - Interval gives an lower bound for how often the automation 15298 - run should be attempted. 15299 - pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ 15300 - type: string 15301 - policySelector: 15302 - description: |- 15303 - PolicySelector allows to filter applied policies based on labels. 15304 - By default includes all policies in namespace. 15305 - properties: 15306 - matchExpressions: 15307 - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. 15308 - items: 15309 - description: |- 15310 - A label selector requirement is a selector that contains values, a key, and an operator that 15311 - relates the key and values. 15312 - properties: 15313 - key: 15314 - description: key is the label key that the selector applies to. 15315 - type: string 15316 - operator: 15317 - description: |- 15318 - operator represents a key's relationship to a set of values. 15319 - Valid operators are In, NotIn, Exists and DoesNotExist. 15320 + values is an array of string values. If the operator is In or NotIn, 15321 + the values array must be non-empty. If the operator is Exists or DoesNotExist, 15322 + the values array must be empty. This array is replaced during a strategic 15323 + merge patch. 15324 + items: 15325 type: string 15326 - values: 15327 - description: |- 15328 - values is an array of string values. If the operator is In or NotIn, 15329 - the values array must be non-empty. If the operator is Exists or DoesNotExist, 15330 - the values array must be empty. This array is replaced during a strategic 15331 - merge patch. 15332 - items: 15333 - type: string 15334 - type: array 15335 - x-kubernetes-list-type: atomic 15336 - required: 15337 - - key 15338 - - operator 15339 - type: object 15340 - type: array 15341 - x-kubernetes-list-type: atomic 15342 - matchLabels: 15343 - additionalProperties: 15344 - type: string 15345 - description: |- 15346 - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 15347 - map is equivalent to an element of matchExpressions, whose key field is "key", the 15348 - operator is "In", and the values array contains only "value". The requirements are ANDed. 15349 + type: array 15350 + x-kubernetes-list-type: atomic 15351 + required: 15352 + - key 15353 + - operator 15354 type: object 15355 - type: object 15356 - x-kubernetes-map-type: atomic 15357 - sourceRef: 15358 - description: |- 15359 - SourceRef refers to the resource giving access details 15360 - to a git repository. 15361 + type: array 15362 + x-kubernetes-list-type: atomic 15363 + matchLabels: 15364 + additionalProperties: 15365 + type: string 15366 + description: |- 15367 + matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels 15368 + map is equivalent to an element of matchExpressions, whose key field is "key", the 15369 + operator is "In", and the values array contains only "value". The requirements are ANDed. 15370 + type: object 15371 + type: object 15372 + x-kubernetes-map-type: atomic 15373 + sourceRef: 15374 + description: |- 15375 + SourceRef refers to the resource giving access details 15376 + to a git repository. 15377 + properties: 15378 + apiVersion: 15379 + description: API version of the referent. 15380 + type: string 15381 + kind: 15382 + default: GitRepository 15383 + description: Kind of the referent. 15384 + enum: 15385 + - GitRepository 15386 + type: string 15387 + name: 15388 + description: Name of the referent. 15389 + type: string 15390 + namespace: 15391 + description: Namespace of the referent, defaults to the namespace 15392 + of the Kubernetes resource object that contains the reference. 15393 + type: string 15394 + required: 15395 + - kind 15396 + - name 15397 + type: object 15398 + suspend: 15399 + description: |- 15400 + Suspend tells the controller to not run this automation, until 15401 + it is unset (or set to false). Defaults to false. 15402 + type: boolean 15403 + update: 15404 + default: 15405 + strategy: Setters 15406 + description: |- 15407 + Update gives the specification for how to update the files in 15408 + the repository. This can be left empty, to use the default 15409 + value. 15410 + properties: 15411 + path: 15412 + description: |- 15413 + Path to the directory containing the manifests to be updated. 15414 + Defaults to 'None', which translates to the root path 15415 + of the GitRepositoryRef. 15416 + type: string 15417 + strategy: 15418 + default: Setters 15419 + description: Strategy names the strategy to be used. 15420 + enum: 15421 + - Setters 15422 + type: string 15423 + type: object 15424 + required: 15425 + - interval 15426 + - sourceRef 15427 + type: object 15428 + status: 15429 + default: 15430 + observedGeneration: -1 15431 + description: ImageUpdateAutomationStatus defines the observed state of 15432 + ImageUpdateAutomation 15433 + properties: 15434 + conditions: 15435 + items: 15436 + description: Condition contains details for one aspect of the current 15437 + state of this API Resource. 15438 properties: 15439 - apiVersion: 15440 - description: API version of the referent. 15441 + lastTransitionTime: 15442 + description: |- 15443 + lastTransitionTime is the last time the condition transitioned from one status to another. 15444 + This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 15445 + format: date-time 15446 type: string 15447 - kind: 15448 - default: GitRepository 15449 - description: Kind of the referent. 15450 - enum: 15451 - - GitRepository 15452 + message: 15453 + description: |- 15454 + message is a human readable message indicating details about the transition. 15455 + This may be an empty string. 15456 + maxLength: 32768 15457 type: string 15458 - name: 15459 - description: Name of the referent. 15460 + observedGeneration: 15461 + description: |- 15462 + observedGeneration represents the .metadata.generation that the condition was set based upon. 15463 + For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 15464 + with respect to the current state of the instance. 15465 + format: int64 15466 + minimum: 0 15467 + type: integer 15468 + reason: 15469 + description: |- 15470 + reason contains a programmatic identifier indicating the reason for the condition's last transition. 15471 + Producers of specific condition types may define expected values and meanings for this field, 15472 + and whether the values are considered a guaranteed API. 15473 + The value should be a CamelCase string. 15474 + This field may not be empty. 15475 + maxLength: 1024 15476 + minLength: 1 15477 + pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 15478 type: string 15479 - namespace: 15480 - description: Namespace of the referent, defaults to the namespace of the Kubernetes resource object that contains the reference. 15481 + status: 15482 + description: status of the condition, one of True, False, Unknown. 15483 + enum: 15484 + - "True" 15485 + - "False" 15486 + - Unknown 15487 + type: string 15488 + type: 15489 + description: type of condition in CamelCase or in foo.example.com/CamelCase. 15490 + maxLength: 316 15491 + pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 15492 type: string 15493 required: 15494 - - kind 15495 - - name 15496 + - lastTransitionTime 15497 + - message 15498 + - reason 15499 + - status 15500 + - type 15501 type: object 15502 - suspend: 15503 - description: |- 15504 - Suspend tells the controller to not run this automation, until 15505 - it is unset (or set to false). Defaults to false. 15506 - type: boolean 15507 - update: 15508 - default: 15509 - strategy: Setters 15510 - description: |- 15511 - Update gives the specification for how to update the files in 15512 - the repository. This can be left empty, to use the default 15513 - value. 15514 + type: array 15515 + lastAutomationRunTime: 15516 + description: |- 15517 + LastAutomationRunTime records the last time the controller ran 15518 + this automation through to completion (even if no updates were 15519 + made). 15520 + format: date-time 15521 + type: string 15522 + lastHandledReconcileAt: 15523 + description: |- 15524 + LastHandledReconcileAt holds the value of the most recent 15525 + reconcile request value, so a change of the annotation value 15526 + can be detected. 15527 + type: string 15528 + lastPushCommit: 15529 + description: |- 15530 + LastPushCommit records the SHA1 of the last commit made by the 15531 + controller, for this automation object 15532 + type: string 15533 + lastPushTime: 15534 + description: LastPushTime records the time of the last pushed change. 15535 + format: date-time 15536 + type: string 15537 + observedGeneration: 15538 + format: int64 15539 + type: integer 15540 + observedPolicies: 15541 + additionalProperties: 15542 + description: ImageRef represents an image reference. 15543 properties: 15544 - path: 15545 - description: |- 15546 - Path to the directory containing the manifests to be updated. 15547 - Defaults to 'None', which translates to the root path 15548 - of the GitRepositoryRef. 15549 + digest: 15550 + description: Digest is the image's digest. 15551 type: string 15552 - strategy: 15553 - default: Setters 15554 - description: Strategy names the strategy to be used. 15555 - enum: 15556 - - Setters 15557 + name: 15558 + description: Name is the bare image's name. 15559 type: string 15560 + tag: 15561 + description: Tag is the image's tag. 15562 + type: string 15563 + required: 15564 + - name 15565 + - tag 15566 type: object 15567 - required: 15568 - - interval 15569 - - sourceRef 15570 - type: object 15571 - status: 15572 - default: 15573 - observedGeneration: -1 15574 - description: ImageUpdateAutomationStatus defines the observed state of ImageUpdateAutomation 15575 - properties: 15576 - conditions: 15577 - items: 15578 - description: Condition contains details for one aspect of the current state of this API Resource. 15579 - properties: 15580 - lastTransitionTime: 15581 - description: |- 15582 - lastTransitionTime is the last time the condition transitioned from one status to another. 15583 - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. 15584 - format: date-time 15585 - type: string 15586 - message: 15587 - description: |- 15588 - message is a human readable message indicating details about the transition. 15589 - This may be an empty string. 15590 - maxLength: 32768 15591 - type: string 15592 - observedGeneration: 15593 - description: |- 15594 - observedGeneration represents the .metadata.generation that the condition was set based upon. 15595 - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date 15596 - with respect to the current state of the instance. 15597 - format: int64 15598 - minimum: 0 15599 - type: integer 15600 - reason: 15601 - description: |- 15602 - reason contains a programmatic identifier indicating the reason for the condition's last transition. 15603 - Producers of specific condition types may define expected values and meanings for this field, 15604 - and whether the values are considered a guaranteed API. 15605 - The value should be a CamelCase string. 15606 - This field may not be empty. 15607 - maxLength: 1024 15608 - minLength: 1 15609 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ 15610 - type: string 15611 - status: 15612 - description: status of the condition, one of True, False, Unknown. 15613 - enum: 15614 - - "True" 15615 - - "False" 15616 - - Unknown 15617 - type: string 15618 - type: 15619 - description: type of condition in CamelCase or in foo.example.com/CamelCase. 15620 - maxLength: 316 15621 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ 15622 - type: string 15623 - required: 15624 - - lastTransitionTime 15625 - - message 15626 - - reason 15627 - - status 15628 - - type 15629 - type: object 15630 - type: array 15631 - lastAutomationRunTime: 15632 - description: |- 15633 - LastAutomationRunTime records the last time the controller ran 15634 - this automation through to completion (even if no updates were 15635 - made). 15636 - format: date-time 15637 - type: string 15638 - lastHandledReconcileAt: 15639 - description: |- 15640 - LastHandledReconcileAt holds the value of the most recent 15641 - reconcile request value, so a change of the annotation value 15642 - can be detected. 15643 - type: string 15644 - lastPushCommit: 15645 - description: |- 15646 - LastPushCommit records the SHA1 of the last commit made by the 15647 - controller, for this automation object 15648 - type: string 15649 - lastPushTime: 15650 - description: LastPushTime records the time of the last pushed change. 15651 - format: date-time 15652 - type: string 15653 - observedGeneration: 15654 - format: int64 15655 - type: integer 15656 - observedPolicies: 15657 - additionalProperties: 15658 - description: ImageRef represents an image reference. 15659 - properties: 15660 - digest: 15661 - description: Digest is the image's digest. 15662 - type: string 15663 - name: 15664 - description: Name is the bare image's name. 15665 - type: string 15666 - tag: 15667 - description: Tag is the image's tag. 15668 - type: string 15669 - required: 15670 - - name 15671 - - tag 15672 - type: object 15673 - description: |- 15674 - ObservedPolicies is the list of observed ImagePolicies that were 15675 - considered by the ImageUpdateAutomation update process. 15676 - type: object 15677 - observedSourceRevision: 15678 - description: |- 15679 - ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 15680 - ObservedSourceRevision is the last observed source revision. This can be 15681 - used to determine if the source has been updated since last observation. 15682 - type: string 15683 - type: object 15684 - type: object 15685 - served: true 15686 - storage: false 15687 - subresources: 15688 - status: {} 15689 + description: |- 15690 + ObservedPolicies is the list of observed ImagePolicies that were 15691 + considered by the ImageUpdateAutomation update process. 15692 + type: object 15693 + observedSourceRevision: 15694 + description: |- 15695 + ObservedPolicies []ObservedPolicy `json:"observedPolicies,omitempty"` 15696 + ObservedSourceRevision is the last observed source revision. This can be 15697 + used to determine if the source has been updated since last observation. 15698 + type: string 15699 + type: object 15700 + type: object 15701 + served: true 15702 + storage: false 15703 + subresources: 15704 + status: {} 15705 --- 15706 apiVersion: v1 15707 kind: ServiceAccount 15708 @@ -8403,7 +8574,7 @@ metadata: 15709 app.kubernetes.io/component: image-automation-controller 15710 app.kubernetes.io/instance: flux-system 15711 app.kubernetes.io/part-of: flux 15712 - app.kubernetes.io/version: v2.8.0 15713 + app.kubernetes.io/version: v2.8.1 15714 name: image-automation-controller 15715 namespace: flux-system 15716 --- 15717 @@ -8414,7 +8585,7 @@ metadata: 15718 app.kubernetes.io/component: image-automation-controller 15719 app.kubernetes.io/instance: flux-system 15720 app.kubernetes.io/part-of: flux 15721 - app.kubernetes.io/version: v2.8.0 15722 + app.kubernetes.io/version: v2.8.1 15723 control-plane: controller 15724 name: image-automation-controller 15725 namespace: flux-system 15726 @@ -8433,62 +8604,62 @@ spec: 15727 app.kubernetes.io/component: image-automation-controller 15728 app.kubernetes.io/instance: flux-system 15729 app.kubernetes.io/part-of: flux 15730 - app.kubernetes.io/version: v2.8.0 15731 + app.kubernetes.io/version: v2.8.1 15732 spec: 15733 containers: 15734 - - args: 15735 - - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 15736 - - --watch-all-namespaces=true 15737 - - --log-level=info 15738 - - --log-encoding=json 15739 - - --enable-leader-election 15740 - env: 15741 - - name: RUNTIME_NAMESPACE 15742 - valueFrom: 15743 - fieldRef: 15744 - fieldPath: metadata.namespace 15745 - - name: GOMEMLIMIT 15746 - valueFrom: 15747 - resourceFieldRef: 15748 - containerName: manager 15749 - resource: limits.memory 15750 - image: ghcr.io/fluxcd/image-automation-controller:v1.1.0 15751 - imagePullPolicy: IfNotPresent 15752 - livenessProbe: 15753 - httpGet: 15754 - path: /healthz 15755 - port: healthz 15756 - name: manager 15757 - ports: 15758 - - containerPort: 8080 15759 - name: http-prom 15760 - protocol: TCP 15761 - - containerPort: 9440 15762 - name: healthz 15763 - protocol: TCP 15764 - readinessProbe: 15765 - httpGet: 15766 - path: /readyz 15767 - port: healthz 15768 - resources: 15769 - limits: 15770 - cpu: 1000m 15771 - memory: 1Gi 15772 - requests: 15773 - cpu: 100m 15774 - memory: 64Mi 15775 - securityContext: 15776 - allowPrivilegeEscalation: false 15777 - capabilities: 15778 - drop: 15779 - - ALL 15780 - readOnlyRootFilesystem: true 15781 - runAsNonRoot: true 15782 - seccompProfile: 15783 - type: RuntimeDefault 15784 - volumeMounts: 15785 - - mountPath: /tmp 15786 - name: temp 15787 + - args: 15788 + - --events-addr=http://notification-controller.$(RUNTIME_NAMESPACE).svc.cluster.local./ 15789 + - --watch-all-namespaces=true 15790 + - --log-level=info 15791 + - --log-encoding=json 15792 + - --enable-leader-election 15793 + env: 15794 + - name: RUNTIME_NAMESPACE 15795 + valueFrom: 15796 + fieldRef: 15797 + fieldPath: metadata.namespace 15798 + - name: GOMEMLIMIT 15799 + valueFrom: 15800 + resourceFieldRef: 15801 + containerName: manager 15802 + resource: limits.memory 15803 + image: ghcr.io/fluxcd/image-automation-controller:v1.1.0 15804 + imagePullPolicy: IfNotPresent 15805 + livenessProbe: 15806 + httpGet: 15807 + path: /healthz 15808 + port: healthz 15809 + name: manager 15810 + ports: 15811 + - containerPort: 8080 15812 + name: http-prom 15813 + protocol: TCP 15814 + - containerPort: 9440 15815 + name: healthz 15816 + protocol: TCP 15817 + readinessProbe: 15818 + httpGet: 15819 + path: /readyz 15820 + port: healthz 15821 + resources: 15822 + limits: 15823 + cpu: 1000m 15824 + memory: 1Gi 15825 + requests: 15826 + cpu: 100m 15827 + memory: 64Mi 15828 + securityContext: 15829 + allowPrivilegeEscalation: false 15830 + capabilities: 15831 + drop: 15832 + - ALL 15833 + readOnlyRootFilesystem: true 15834 + runAsNonRoot: true 15835 + seccompProfile: 15836 + type: RuntimeDefault 15837 + volumeMounts: 15838 + - mountPath: /tmp 15839 + name: temp 15840 nodeSelector: 15841 kubernetes.io/os: linux 15842 securityContext: 15843 @@ -8496,5 +8667,5 @@ spec: 15844 serviceAccountName: image-automation-controller 15845 terminationGracePeriodSeconds: 10 15846 volumes: 15847 - - emptyDir: {} 15848 - name: temp 15849 + - emptyDir: {} 15850 + name: temp