apiVersion: v1 kind: Namespace metadata: name: flux-system labels: app.kubernetes.io/instance: flux-system app.kubernetes.io/part-of: flux workload.edge.ncr.com: helm annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: buckets.source.toolkit.fluxcd.io annotations: controller-gen.kubebuilder.io/version: v0.7.0 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: group: source.toolkit.fluxcd.io names: kind: Bucket listKind: BucketList plural: buckets singular: bucket scope: Namespaced versions: - name: v1beta1 additionalPrinterColumns: - name: Endpoint type: string jsonPath: .spec.endpoint - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Age type: date jsonPath: .metadata.creationTimestamp schema: openAPIV3Schema: type: object description: Bucket is the Schema for the buckets API properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: BucketSpec defines the desired state of an S3 compatible bucket properties: secretRef: type: object description: The name of the secret containing authentication credentials for the Bucket. properties: name: type: string description: Name of the referent. required: - name accessFrom: type: object description: AccessFrom defines an Access Control List for allowing cross-namespace references to this object. properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors bucketName: type: string description: The bucket name. endpoint: type: string description: The bucket endpoint address. ignore: type: string description: Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are. insecure: type: boolean description: Insecure allows connecting to a non-TLS S3 HTTP endpoint. interval: type: string description: The interval at which to check for bucket updates. provider: type: string default: generic description: The S3 compatible storage provider name, default ('generic'). enum: - generic - aws - gcp region: type: string description: The bucket region. suspend: type: boolean description: This flag tells the controller to suspend the reconciliation of this source. timeout: type: string default: 60s description: The timeout for download operations, defaults to 60s. required: - bucketName - endpoint - interval status: type: object default: observedGeneration: -1 description: BucketStatus defines the observed state of a bucket properties: artifact: type: object description: Artifact represents the output of the last successful Bucket sync. properties: revision: type: string description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the artifact. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of this artifact. format: date-time path: type: string description: Path is the relative file path of this artifact. url: type: string description: URL is the HTTP address of this artifact. required: - path - url conditions: type: array description: Conditions holds the conditions for the Bucket. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation. format: int64 url: type: string description: URL is the download link for the artifact output of the last Bucket sync. served: true storage: false subresources: status: {} - name: v1beta2 additionalPrinterColumns: - name: Endpoint type: string jsonPath: .spec.endpoint - name: Age type: date jsonPath: .metadata.creationTimestamp - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message schema: openAPIV3Schema: type: object description: Bucket is the Schema for the buckets API. properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: BucketSpec specifies the required configuration to produce an Artifact for an object storage bucket. properties: secretRef: type: object description: SecretRef specifies the Secret containing authentication credentials for the Bucket. properties: name: type: string description: Name of the referent. required: - name accessFrom: type: object description: 'AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092' properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors bucketName: type: string description: BucketName is the name of the object storage bucket. endpoint: type: string description: Endpoint is the object storage address the BucketName is located at. ignore: type: string description: Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are. insecure: type: boolean description: Insecure allows connecting to a non-TLS HTTP Endpoint. interval: type: string description: Interval at which to check the Endpoint for updates. provider: type: string default: generic description: Provider of the object storage bucket. Defaults to 'generic', which expects an S3 (API) compatible object storage. enum: - generic - aws - gcp - azure region: type: string description: Region of the Endpoint where the BucketName is located in. suspend: type: boolean description: Suspend tells the controller to suspend the reconciliation of this Bucket. timeout: type: string default: 60s description: Timeout for fetch operations, defaults to 60s. required: - bucketName - endpoint - interval status: type: object default: observedGeneration: -1 description: BucketStatus records the observed state of a Bucket. properties: artifact: type: object description: Artifact represents the last successful Bucket reconciliation. properties: revision: type: string description: Revision is a human-readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the Artifact file. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of the Artifact. format: date-time path: type: string description: Path is the relative file path of the Artifact. It can be used to locate the file in the root of the Artifact storage on the local file system of the controller managing the Source. size: type: integer description: Size is the number of bytes in the file. format: int64 url: type: string description: URL is the HTTP address of the Artifact as exposed by the controller managing the Source. It can be used to retrieve the Artifact for consumption, e.g. by another controller applying the Artifact contents. required: - path - url conditions: type: array description: Conditions holds the conditions for the Bucket. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation of the Bucket object. format: int64 url: type: string description: URL is the dynamic fetch link for the latest Artifact. It is provided on a "best effort" basis, and using the precise BucketStatus.Artifact data is recommended. served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: gitrepositories.source.toolkit.fluxcd.io annotations: controller-gen.kubebuilder.io/version: v0.7.0 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: group: source.toolkit.fluxcd.io names: kind: GitRepository listKind: GitRepositoryList plural: gitrepositories shortNames: - gitrepo singular: gitrepository scope: Namespaced versions: - name: v1beta1 additionalPrinterColumns: - name: URL type: string jsonPath: .spec.url - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Age type: date jsonPath: .metadata.creationTimestamp schema: openAPIV3Schema: type: object description: GitRepository is the Schema for the gitrepositories API properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: GitRepositorySpec defines the desired state of a Git repository. properties: secretRef: type: object description: The secret name containing the Git credentials. For HTTPS repositories the secret must contain username and password fields. For SSH repositories the secret must contain identity, identity.pub and known_hosts fields. properties: name: type: string description: Name of the referent. required: - name accessFrom: type: object description: AccessFrom defines an Access Control List for allowing cross-namespace references to this object. properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors gitImplementation: type: string default: go-git description: Determines which git client library to use. Defaults to go-git, valid values are ('go-git', 'libgit2'). enum: - go-git - libgit2 ignore: type: string description: Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are. include: type: array description: Extra git repositories to map into the repository items: type: object description: GitRepositoryInclude defines a source with a from and to path. properties: fromPath: type: string description: The path to copy contents from, defaults to the root directory. repository: type: object description: Reference to a GitRepository to include. properties: name: type: string description: Name of the referent. required: - name toPath: type: string description: The path to copy contents to, defaults to the name of the source ref. required: - repository interval: type: string description: The interval at which to check for repository updates. recurseSubmodules: type: boolean description: When enabled, after the clone is created, initializes all submodules within, using their default settings. This option is available only when using the 'go-git' GitImplementation. ref: type: object description: The Git reference to checkout and monitor for changes, defaults to master branch. properties: branch: type: string description: The Git branch to checkout, defaults to master. commit: type: string description: The Git commit SHA to checkout, if specified Tag filters will be ignored. semver: type: string description: The Git tag semver expression, takes precedence over Tag. tag: type: string description: The Git tag to checkout, takes precedence over Branch. suspend: type: boolean description: This flag tells the controller to suspend the reconciliation of this source. timeout: type: string default: 60s description: The timeout for remote Git operations like cloning, defaults to 60s. url: type: string description: The repository URL, can be a HTTP/S or SSH address. pattern: ^(http|https|ssh):// verify: type: object description: Verify OpenPGP signature for the Git commit HEAD points to. properties: secretRef: type: object description: The secret name containing the public keys of all trusted Git authors. properties: name: type: string description: Name of the referent. required: - name mode: type: string description: Mode describes what git object should be verified, currently ('head'). enum: - head required: - mode required: - interval - url status: type: object default: observedGeneration: -1 description: GitRepositoryStatus defines the observed state of a Git repository. properties: artifact: type: object description: Artifact represents the output of the last successful repository sync. properties: revision: type: string description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the artifact. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of this artifact. format: date-time path: type: string description: Path is the relative file path of this artifact. url: type: string description: URL is the HTTP address of this artifact. required: - path - url conditions: type: array description: Conditions holds the conditions for the GitRepository. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type includedArtifacts: type: array description: IncludedArtifacts represents the included artifacts from the last successful repository sync. items: type: object description: Artifact represents the output of a source synchronisation. properties: revision: type: string description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the artifact. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of this artifact. format: date-time path: type: string description: Path is the relative file path of this artifact. url: type: string description: URL is the HTTP address of this artifact. required: - path - url lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation. format: int64 url: type: string description: URL is the download link for the artifact output of the last repository sync. served: true storage: false subresources: status: {} - name: v1beta2 additionalPrinterColumns: - name: URL type: string jsonPath: .spec.url - name: Age type: date jsonPath: .metadata.creationTimestamp - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message schema: openAPIV3Schema: type: object description: GitRepository is the Schema for the gitrepositories API. properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: GitRepositorySpec specifies the required configuration to produce an Artifact for a Git repository. properties: secretRef: type: object description: SecretRef specifies the Secret containing authentication credentials for the GitRepository. For HTTPS repositories the Secret must contain 'username' and 'password' fields. For SSH repositories the Secret must contain 'identity', 'identity.pub' and 'known_hosts' fields. properties: name: type: string description: Name of the referent. required: - name accessFrom: type: object description: 'AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092' properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors gitImplementation: type: string default: go-git description: GitImplementation specifies which Git client library implementation to use. Defaults to 'go-git', valid values are ('go-git', 'libgit2'). enum: - go-git - libgit2 ignore: type: string description: Ignore overrides the set of excluded patterns in the .sourceignore format (which is the same as .gitignore). If not provided, a default will be used, consult the documentation for your version to find out what those are. include: type: array description: Include specifies a list of GitRepository resources which Artifacts should be included in the Artifact produced for this GitRepository. items: type: object description: GitRepositoryInclude specifies a local reference to a GitRepository which Artifact (sub-)contents must be included, and where they should be placed. properties: fromPath: type: string description: FromPath specifies the path to copy contents from, defaults to the root of the Artifact. repository: type: object description: GitRepositoryRef specifies the GitRepository which Artifact contents must be included. properties: name: type: string description: Name of the referent. required: - name toPath: type: string description: ToPath specifies the path to copy contents to, defaults to the name of the GitRepositoryRef. required: - repository interval: type: string description: Interval at which to check the GitRepository for updates. recurseSubmodules: type: boolean description: RecurseSubmodules enables the initialization of all submodules within the GitRepository as cloned from the URL, using their default settings. This option is available only when using the 'go-git' GitImplementation. ref: type: object description: Reference specifies the Git reference to resolve and monitor for changes, defaults to the 'master' branch. properties: branch: type: string description: "Branch to check out, defaults to 'master' if no other field is defined. \n When GitRepositorySpec.GitImplementation is set to 'go-git', a shallow clone of the specified branch is performed." commit: type: string description: "Commit SHA to check out, takes precedence over all reference fields. \n When GitRepositorySpec.GitImplementation is set to 'go-git', this can be combined with Branch to shallow clone the branch, in which the commit is expected to exist." semver: type: string description: SemVer tag expression to check out, takes precedence over Tag. tag: type: string description: Tag to check out, takes precedence over Branch. suspend: type: boolean description: Suspend tells the controller to suspend the reconciliation of this GitRepository. timeout: type: string default: 60s description: Timeout for Git operations like cloning, defaults to 60s. url: type: string description: URL specifies the Git repository URL, it can be an HTTP/S or SSH address. pattern: ^(http|https|ssh):// verify: type: object description: Verification specifies the configuration to verify the Git commit signature(s). properties: secretRef: type: object description: SecretRef specifies the Secret containing the public keys of trusted Git authors. properties: name: type: string description: Name of the referent. required: - name mode: type: string description: Mode specifies what Git object should be verified, currently ('head'). enum: - head required: - mode required: - interval - url status: type: object default: observedGeneration: -1 description: GitRepositoryStatus records the observed state of a Git repository. properties: artifact: type: object description: Artifact represents the last successful GitRepository reconciliation. properties: revision: type: string description: Revision is a human-readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the Artifact file. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of the Artifact. format: date-time path: type: string description: Path is the relative file path of the Artifact. It can be used to locate the file in the root of the Artifact storage on the local file system of the controller managing the Source. size: type: integer description: Size is the number of bytes in the file. format: int64 url: type: string description: URL is the HTTP address of the Artifact as exposed by the controller managing the Source. It can be used to retrieve the Artifact for consumption, e.g. by another controller applying the Artifact contents. required: - path - url conditions: type: array description: Conditions holds the conditions for the GitRepository. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type includedArtifacts: type: array description: IncludedArtifacts contains a list of the last successfully included Artifacts as instructed by GitRepositorySpec.Include. items: type: object description: Artifact represents the output of a Source reconciliation. properties: revision: type: string description: Revision is a human-readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the Artifact file. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of the Artifact. format: date-time path: type: string description: Path is the relative file path of the Artifact. It can be used to locate the file in the root of the Artifact storage on the local file system of the controller managing the Source. size: type: integer description: Size is the number of bytes in the file. format: int64 url: type: string description: URL is the HTTP address of the Artifact as exposed by the controller managing the Source. It can be used to retrieve the Artifact for consumption, e.g. by another controller applying the Artifact contents. required: - path - url lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation of the GitRepository object. format: int64 url: type: string description: URL is the dynamic fetch link for the latest Artifact. It is provided on a "best effort" basis, and using the precise GitRepositoryStatus.Artifact data is recommended. served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: helmcharts.source.toolkit.fluxcd.io annotations: controller-gen.kubebuilder.io/version: v0.7.0 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: group: source.toolkit.fluxcd.io names: kind: HelmChart listKind: HelmChartList plural: helmcharts shortNames: - hc singular: helmchart scope: Namespaced versions: - name: v1beta1 additionalPrinterColumns: - name: Chart type: string jsonPath: .spec.chart - name: Version type: string jsonPath: .spec.version - name: Source Kind type: string jsonPath: .spec.sourceRef.kind - name: Source Name type: string jsonPath: .spec.sourceRef.name - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Age type: date jsonPath: .metadata.creationTimestamp schema: openAPIV3Schema: type: object description: HelmChart is the Schema for the helmcharts API properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: HelmChartSpec defines the desired state of a Helm chart. properties: accessFrom: type: object description: AccessFrom defines an Access Control List for allowing cross-namespace references to this object. properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors chart: type: string description: The name or path the Helm chart is available at in the SourceRef. interval: type: string description: The interval at which to check the Source for updates. reconcileStrategy: type: string default: ChartVersion description: Determines what enables the creation of a new artifact. Valid values are ('ChartVersion', 'Revision'). See the documentation of the values for an explanation on their behavior. Defaults to ChartVersion when omitted. enum: - ChartVersion - Revision sourceRef: type: object description: The reference to the Source the chart is available at. properties: name: type: string description: Name of the referent. apiVersion: type: string description: APIVersion of the referent. kind: type: string description: Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 'Bucket'). enum: - HelmRepository - GitRepository - Bucket required: - kind - name suspend: type: boolean description: This flag tells the controller to suspend the reconciliation of this source. valuesFile: type: string description: Alternative values file to use as the default chart values, expected to be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, for backwards compatibility the file defined here is merged before the ValuesFiles items. Ignored when omitted. valuesFiles: type: array description: Alternative list of values files to use as the chart values (values.yaml is not included by default), expected to be a relative path in the SourceRef. Values files are merged in the order of this list with the last file overriding the first. Ignored when omitted. items: type: string version: type: string default: '*' description: The chart version semver expression, ignored for charts from GitRepository and Bucket sources. Defaults to latest when omitted. required: - chart - interval - sourceRef status: type: object default: observedGeneration: -1 description: HelmChartStatus defines the observed state of the HelmChart. properties: artifact: type: object description: Artifact represents the output of the last successful chart sync. properties: revision: type: string description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the artifact. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of this artifact. format: date-time path: type: string description: Path is the relative file path of this artifact. url: type: string description: URL is the HTTP address of this artifact. required: - path - url conditions: type: array description: Conditions holds the conditions for the HelmChart. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation. format: int64 url: type: string description: URL is the download link for the last chart pulled. served: true storage: false subresources: status: {} - name: v1beta2 additionalPrinterColumns: - name: Chart type: string jsonPath: .spec.chart - name: Version type: string jsonPath: .spec.version - name: Source Kind type: string jsonPath: .spec.sourceRef.kind - name: Source Name type: string jsonPath: .spec.sourceRef.name - name: Age type: date jsonPath: .metadata.creationTimestamp - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message schema: openAPIV3Schema: type: object description: HelmChart is the Schema for the helmcharts API. properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: HelmChartSpec specifies the desired state of a Helm chart. properties: accessFrom: type: object description: 'AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092' properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors chart: type: string description: Chart is the name or path the Helm chart is available at in the SourceRef. interval: type: string description: Interval is the interval at which to check the Source for updates. reconcileStrategy: type: string default: ChartVersion description: ReconcileStrategy determines what enables the creation of a new artifact. Valid values are ('ChartVersion', 'Revision'). See the documentation of the values for an explanation on their behavior. Defaults to ChartVersion when omitted. enum: - ChartVersion - Revision sourceRef: type: object description: SourceRef is the reference to the Source the chart is available at. properties: name: type: string description: Name of the referent. apiVersion: type: string description: APIVersion of the referent. kind: type: string description: Kind of the referent, valid values are ('HelmRepository', 'GitRepository', 'Bucket'). enum: - HelmRepository - GitRepository - Bucket required: - kind - name suspend: type: boolean description: Suspend tells the controller to suspend the reconciliation of this source. valuesFile: type: string description: ValuesFile is an alternative values file to use as the default chart values, expected to be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, for backwards compatibility the file specified here is merged before the ValuesFiles items. Ignored when omitted. valuesFiles: type: array description: ValuesFiles is an alternative list of values files to use as the chart values (values.yaml is not included by default), expected to be a relative path in the SourceRef. Values files are merged in the order of this list with the last file overriding the first. Ignored when omitted. items: type: string version: type: string default: '*' description: Version is the chart version semver expression, ignored for charts from GitRepository and Bucket sources. Defaults to latest when omitted. required: - chart - interval - sourceRef status: type: object default: observedGeneration: -1 description: HelmChartStatus records the observed state of the HelmChart. properties: artifact: type: object description: Artifact represents the output of the last successful reconciliation. properties: revision: type: string description: Revision is a human-readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the Artifact file. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of the Artifact. format: date-time path: type: string description: Path is the relative file path of the Artifact. It can be used to locate the file in the root of the Artifact storage on the local file system of the controller managing the Source. size: type: integer description: Size is the number of bytes in the file. format: int64 url: type: string description: URL is the HTTP address of the Artifact as exposed by the controller managing the Source. It can be used to retrieve the Artifact for consumption, e.g. by another controller applying the Artifact contents. required: - path - url conditions: type: array description: Conditions holds the conditions for the HelmChart. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedChartName: type: string description: ObservedChartName is the last observed chart name as specified by the resolved chart reference. observedGeneration: type: integer description: ObservedGeneration is the last observed generation of the HelmChart object. format: int64 observedSourceArtifactRevision: type: string description: ObservedSourceArtifactRevision is the last observed Artifact.Revision of the HelmChartSpec.SourceRef. url: type: string description: URL is the dynamic fetch link for the latest Artifact. It is provided on a "best effort" basis, and using the precise BucketStatus.Artifact data is recommended. served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: helmreleases.helm.toolkit.fluxcd.io annotations: controller-gen.kubebuilder.io/version: v0.7.0 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: group: helm.toolkit.fluxcd.io names: kind: HelmRelease listKind: HelmReleaseList plural: helmreleases shortNames: - hr singular: helmrelease scope: Namespaced versions: - name: v2beta1 additionalPrinterColumns: - name: Age type: date jsonPath: .metadata.creationTimestamp - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message schema: openAPIV3Schema: type: object description: HelmRelease is the Schema for the helmreleases API properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: HelmReleaseSpec defines the desired state of a Helm release. properties: serviceAccountName: type: string description: The name of the Kubernetes service account to impersonate when reconciling this HelmRelease. chart: type: object description: Chart defines the template of the v1beta2.HelmChart that should be created for this HelmRelease. properties: spec: type: object description: Spec holds the template for the v1beta2.HelmChartSpec for this HelmRelease. properties: chart: type: string description: The name or path the Helm chart is available at in the SourceRef. interval: type: string description: Interval at which to check the v1beta2.Source for updates. Defaults to 'HelmReleaseSpec.Interval'. reconcileStrategy: type: string default: ChartVersion description: Determines what enables the creation of a new artifact. Valid values are ('ChartVersion', 'Revision'). See the documentation of the values for an explanation on their behavior. Defaults to ChartVersion when omitted. enum: - ChartVersion - Revision sourceRef: type: object description: The name and namespace of the v1beta2.Source the chart is available at. properties: name: type: string description: Name of the referent. maxLength: 253 minLength: 1 namespace: type: string description: Namespace of the referent. maxLength: 63 minLength: 1 apiVersion: type: string description: APIVersion of the referent. kind: type: string description: Kind of the referent. enum: - HelmRepository - GitRepository - Bucket required: - name valuesFile: type: string description: Alternative values file to use as the default chart values, expected to be a relative path in the SourceRef. Deprecated in favor of ValuesFiles, for backwards compatibility the file defined here is merged before the ValuesFiles items. Ignored when omitted. valuesFiles: type: array description: Alternative list of values files to use as the chart values (values.yaml is not included by default), expected to be a relative path in the SourceRef. Values files are merged in the order of this list with the last file overriding the first. Ignored when omitted. items: type: string version: type: string default: '*' description: Version semver expression, ignored for charts from v1beta2.GitRepository and v1beta2.Bucket sources. Defaults to latest when omitted. required: - chart - sourceRef required: - spec dependsOn: type: array description: DependsOn may contain a meta.NamespacedObjectReference slice with references to HelmRelease resources that must be ready before this HelmRelease can be reconciled. items: type: object description: NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any namespace. properties: name: type: string description: Name of the referent. namespace: type: string description: Namespace of the referent, when not specified it acts as LocalObjectReference. required: - name install: type: object description: Install holds the configuration for Helm install actions for this HelmRelease. properties: crds: type: string description: "CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Create` and if omitted CRDs are installed but not updated. \n Skip: do neither install nor replace (update) any CRDs. \n Create: new CRDs are created, existing CRDs are neither updated nor deleted. \n CreateReplace: new CRDs are created, existing CRDs are updated (replaced) but not deleted. \n By default, CRDs are applied (installed) during Helm install action. With this option users can opt-in to CRD replace existing CRDs on Helm install actions, which is not (yet) natively supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions." enum: - Skip - Create - CreateReplace createNamespace: type: boolean description: CreateNamespace tells the Helm install action to create the HelmReleaseSpec.TargetNamespace if it does not exist yet. On uninstall, the namespace will not be garbage collected. disableHooks: type: boolean description: DisableHooks prevents hooks from running during the Helm install action. disableOpenAPIValidation: type: boolean description: DisableOpenAPIValidation prevents the Helm install action from validating rendered templates against the Kubernetes OpenAPI Schema. disableWait: type: boolean description: DisableWait disables the waiting for resources to be ready after a Helm install has been performed. disableWaitForJobs: type: boolean description: DisableWaitForJobs disables waiting for jobs to complete after a Helm install has been performed. remediation: type: object description: Remediation holds the remediation configuration for when the Helm install action for the HelmRelease fails. The default is to not perform any action. properties: ignoreTestFailures: type: boolean description: IgnoreTestFailures tells the controller to skip remediation when the Helm tests are run after an install action but fail. Defaults to 'Test.IgnoreFailures'. remediateLastFailure: type: boolean description: RemediateLastFailure tells the controller to remediate the last failure, when no retries remain. Defaults to 'false'. retries: type: integer description: Retries is the number of retries that should be attempted on failures before bailing. Remediation, using an uninstall, is performed between each attempt. Defaults to '0', a negative integer equals to unlimited retries. replace: type: boolean description: Replace tells the Helm install action to re-use the 'ReleaseName', but only if that name is a deleted release which remains in the history. skipCRDs: type: boolean description: "SkipCRDs tells the Helm install action to not install any CRDs. By default, CRDs are installed if not already present. \n Deprecated use CRD policy (`crds`) attribute with value `Skip` instead." timeout: type: string description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm install action. Defaults to 'HelmReleaseSpec.Timeout'. interval: type: string description: Interval at which to reconcile the Helm release. kubeConfig: type: object description: KubeConfig for reconciling the HelmRelease on a remote cluster. When specified, KubeConfig takes precedence over ServiceAccountName. properties: secretRef: type: object description: SecretRef holds the name to a secret that contains a 'value' key with the kubeconfig file as the value. It must be in the same namespace as the HelmRelease. It is recommended that the kubeconfig is self-contained, and the secret is regularly updated if credentials such as a cloud-access-token expire. Cloud specific `cmd-path` auth helpers will not function without adding binaries and credentials to the Pod that is responsible for reconciling the HelmRelease. properties: name: type: string description: Name of the referent. required: - name maxHistory: type: integer description: MaxHistory is the number of revisions saved by Helm for this HelmRelease. Use '0' for an unlimited number of revisions; defaults to '10'. postRenderers: type: array description: PostRenderers holds an array of Helm PostRenderers, which will be applied in order of their definition. items: type: object description: PostRenderer contains a Helm PostRenderer specification. properties: kustomize: type: object description: Kustomization to apply as PostRenderer. properties: images: type: array description: Images is a list of (image name, new name, new tag or digest) for changing image names, tags or digests. This can also be achieved with a patch, but this operator is simpler to specify. items: type: object description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag. properties: name: type: string description: Name is a tag-less image name. digest: type: string description: Digest is the value used to replace the original image tag. If digest is present NewTag value is ignored. newName: type: string description: NewName is the value used to replace the original name. newTag: type: string description: NewTag is the value used to replace the original tag. required: - name patches: type: array description: Strategic merge and JSON patches, defined as inline YAML objects, capable of targeting objects based on kind, label and annotation selectors. items: type: object description: Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should be applied to. properties: patch: type: string description: Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. target: type: object description: Target points to the resources that the patch document should be applied to. properties: name: type: string description: Name to match resources with. namespace: type: string description: Namespace to select resources from. kind: type: string description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md annotationSelector: type: string description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations. group: type: string description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md labelSelector: type: string description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. version: type: string description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md patches: type: array description: JSON 6902 patches, defined as inline YAML objects. items: type: object description: JSON6902Patch contains a JSON6902 patch and the target the patch should be applied to. properties: patch: type: array description: Patch contains the JSON6902 patch document with an array of operation objects. items: type: object description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4 properties: value: description: Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. x-kubernetes-preserve-unknown-fields: true from: type: string description: From contains a JSON-pointer value that references a location within the target document where the operation is performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. op: type: string description: Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4 enum: - test - remove - add - replace - move - copy path: type: string description: Path contains the JSON-pointer value that references a location within the target document where the operation is performed. The meaning of the value depends on the value of Op. required: - op - path target: type: object description: Target points to the resources that the patch document should be applied to. properties: name: type: string description: Name to match resources with. namespace: type: string description: Namespace to select resources from. kind: type: string description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md annotationSelector: type: string description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations. group: type: string description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md labelSelector: type: string description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. version: type: string description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md required: - patch - target patchesStrategicMerge: type: array description: Strategic merge patches, defined as inline YAML objects. items: x-kubernetes-preserve-unknown-fields: true releaseName: type: string description: ReleaseName used for the Helm release. Defaults to a composition of '[TargetNamespace-]Name'. maxLength: 53 minLength: 1 rollback: type: object description: Rollback holds the configuration for Helm rollback actions for this HelmRelease. properties: cleanupOnFail: type: boolean description: CleanupOnFail allows deletion of new resources created during the Helm rollback action when it fails. disableHooks: type: boolean description: DisableHooks prevents hooks from running during the Helm rollback action. disableWait: type: boolean description: DisableWait disables the waiting for resources to be ready after a Helm rollback has been performed. disableWaitForJobs: type: boolean description: DisableWaitForJobs disables waiting for jobs to complete after a Helm rollback has been performed. force: type: boolean description: Force forces resource updates through a replacement strategy. recreate: type: boolean description: Recreate performs pod restarts for the resource if applicable. timeout: type: string description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'. storageNamespace: type: string description: StorageNamespace used for the Helm storage. Defaults to the namespace of the HelmRelease. maxLength: 63 minLength: 1 suspend: type: boolean description: Suspend tells the controller to suspend reconciliation for this HelmRelease, it does not apply to already started reconciliations. Defaults to false. targetNamespace: type: string description: TargetNamespace to target when performing operations for the HelmRelease. Defaults to the namespace of the HelmRelease. maxLength: 63 minLength: 1 test: type: object description: Test holds the configuration for Helm test actions for this HelmRelease. properties: enable: type: boolean description: Enable enables Helm test actions for this HelmRelease after an Helm install or upgrade action has been performed. ignoreFailures: type: boolean description: IgnoreFailures tells the controller to skip remediation when the Helm tests are run but fail. Can be overwritten for tests run after install or upgrade actions in 'Install.IgnoreTestFailures' and 'Upgrade.IgnoreTestFailures'. timeout: type: string description: Timeout is the time to wait for any individual Kubernetes operation during the performance of a Helm test action. Defaults to 'HelmReleaseSpec.Timeout'. timeout: type: string description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm action. Defaults to '5m0s'. uninstall: type: object description: Uninstall holds the configuration for Helm uninstall actions for this HelmRelease. properties: disableHooks: type: boolean description: DisableHooks prevents hooks from running during the Helm rollback action. disableWait: type: boolean description: DisableWait disables waiting for all the resources to be deleted after a Helm uninstall is performed. keepHistory: type: boolean description: KeepHistory tells Helm to remove all associated resources and mark the release as deleted, but retain the release history. timeout: type: string description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'. upgrade: type: object description: Upgrade holds the configuration for Helm upgrade actions for this HelmRelease. properties: cleanupOnFail: type: boolean description: CleanupOnFail allows deletion of new resources created during the Helm upgrade action when it fails. crds: type: string description: "CRDs upgrade CRDs from the Helm Chart's crds directory according to the CRD upgrade policy provided here. Valid values are `Skip`, `Create` or `CreateReplace`. Default is `Skip` and if omitted CRDs are neither installed nor upgraded. \n Skip: do neither install nor replace (update) any CRDs. \n Create: new CRDs are created, existing CRDs are neither updated nor deleted. \n CreateReplace: new CRDs are created, existing CRDs are updated (replaced) but not deleted. \n By default, CRDs are not applied during Helm upgrade action. With this option users can opt-in to CRD upgrade, which is not (yet) natively supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions." enum: - Skip - Create - CreateReplace disableHooks: type: boolean description: DisableHooks prevents hooks from running during the Helm upgrade action. disableOpenAPIValidation: type: boolean description: DisableOpenAPIValidation prevents the Helm upgrade action from validating rendered templates against the Kubernetes OpenAPI Schema. disableWait: type: boolean description: DisableWait disables the waiting for resources to be ready after a Helm upgrade has been performed. disableWaitForJobs: type: boolean description: DisableWaitForJobs disables waiting for jobs to complete after a Helm upgrade has been performed. force: type: boolean description: Force forces resource updates through a replacement strategy. preserveValues: type: boolean description: PreserveValues will make Helm reuse the last release's values and merge in overrides from 'Values'. Setting this flag makes the HelmRelease non-declarative. remediation: type: object description: Remediation holds the remediation configuration for when the Helm upgrade action for the HelmRelease fails. The default is to not perform any action. properties: strategy: type: string description: Strategy to use for failure remediation. Defaults to 'rollback'. enum: - rollback - uninstall ignoreTestFailures: type: boolean description: IgnoreTestFailures tells the controller to skip remediation when the Helm tests are run after an upgrade action but fail. Defaults to 'Test.IgnoreFailures'. remediateLastFailure: type: boolean description: RemediateLastFailure tells the controller to remediate the last failure, when no retries remain. Defaults to 'false' unless 'Retries' is greater than 0. retries: type: integer description: Retries is the number of retries that should be attempted on failures before bailing. Remediation, using 'Strategy', is performed between each attempt. Defaults to '0', a negative integer equals to unlimited retries. timeout: type: string description: Timeout is the time to wait for any individual Kubernetes operation (like Jobs for hooks) during the performance of a Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'. values: description: Values holds the values for this Helm release. x-kubernetes-preserve-unknown-fields: true valuesFrom: type: array description: ValuesFrom holds references to resources containing Helm values for this HelmRelease, and information about how they should be merged. items: type: object description: ValuesReference contains a reference to a resource containing Helm values, and optionally the key they can be found at. properties: name: type: string description: Name of the values referent. Should reside in the same namespace as the referring resource. maxLength: 253 minLength: 1 kind: type: string description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). enum: - Secret - ConfigMap optional: type: boolean description: Optional marks this ValuesReference as optional. When set, a not found error for the values reference is ignored, but any ValuesKey, TargetPath or transient error will still result in a reconciliation failure. targetPath: type: string description: TargetPath is the YAML dot notation path the value should be merged at. When set, the ValuesKey is expected to be a single flat value. Defaults to 'None', which results in the values getting merged at the root. valuesKey: type: string description: ValuesKey is the data key where the values.yaml or a specific value can be found at. Defaults to 'values.yaml'. required: - kind - name required: - chart - interval status: type: object default: observedGeneration: -1 description: HelmReleaseStatus defines the observed state of a HelmRelease. properties: conditions: type: array description: Conditions holds the conditions for the HelmRelease. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type failures: type: integer description: Failures is the reconciliation failure count against the latest desired state. It is reset after a successful reconciliation. format: int64 helmChart: type: string description: HelmChart is the namespaced name of the HelmChart resource created by the controller for the HelmRelease. installFailures: type: integer description: InstallFailures is the install failure count against the latest desired state. It is reset after a successful reconciliation. format: int64 lastAppliedRevision: type: string description: LastAppliedRevision is the revision of the last successfully applied source. lastAttemptedRevision: type: string description: LastAttemptedRevision is the revision of the last reconciliation attempt. lastAttemptedValuesChecksum: type: string description: LastAttemptedValuesChecksum is the SHA1 checksum of the values of the last reconciliation attempt. lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. lastReleaseRevision: type: integer description: LastReleaseRevision is the revision of the last successful Helm release. observedGeneration: type: integer description: ObservedGeneration is the last observed generation. format: int64 upgradeFailures: type: integer description: UpgradeFailures is the upgrade failure count against the latest desired state. It is reset after a successful reconciliation. format: int64 served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: helmrepositories.source.toolkit.fluxcd.io annotations: controller-gen.kubebuilder.io/version: v0.7.0 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: group: source.toolkit.fluxcd.io names: kind: HelmRepository listKind: HelmRepositoryList plural: helmrepositories shortNames: - helmrepo singular: helmrepository scope: Namespaced versions: - name: v1beta1 additionalPrinterColumns: - name: URL type: string jsonPath: .spec.url - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Age type: date jsonPath: .metadata.creationTimestamp schema: openAPIV3Schema: type: object description: HelmRepository is the Schema for the helmrepositories API properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: HelmRepositorySpec defines the reference to a Helm repository. properties: secretRef: type: object description: The name of the secret containing authentication credentials for the Helm repository. For HTTP/S basic auth the secret must contain username and password fields. For TLS the secret must contain a certFile and keyFile, and/or caCert fields. properties: name: type: string description: Name of the referent. required: - name accessFrom: type: object description: AccessFrom defines an Access Control List for allowing cross-namespace references to this object. properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors interval: type: string description: The interval at which to check the upstream for updates. passCredentials: type: boolean description: PassCredentials allows the credentials from the SecretRef to be passed on to a host that does not match the host as defined in URL. This may be required if the host of the advertised chart URLs in the index differ from the defined URL. Enabling this should be done with caution, as it can potentially result in credentials getting stolen in a MITM-attack. suspend: type: boolean description: This flag tells the controller to suspend the reconciliation of this source. timeout: type: string default: 60s description: The timeout of index downloading, defaults to 60s. url: type: string description: The Helm repository URL, a valid URL contains at least a protocol and host. required: - interval - url status: type: object default: observedGeneration: -1 description: HelmRepositoryStatus defines the observed state of the HelmRepository. properties: artifact: type: object description: Artifact represents the output of the last successful repository sync. properties: revision: type: string description: Revision is a human readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm index timestamp, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the artifact. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of this artifact. format: date-time path: type: string description: Path is the relative file path of this artifact. url: type: string description: URL is the HTTP address of this artifact. required: - path - url conditions: type: array description: Conditions holds the conditions for the HelmRepository. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation. format: int64 url: type: string description: URL is the download link for the last index fetched. served: true storage: false subresources: status: {} - name: v1beta2 additionalPrinterColumns: - name: URL type: string jsonPath: .spec.url - name: Age type: date jsonPath: .metadata.creationTimestamp - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message schema: openAPIV3Schema: type: object description: HelmRepository is the Schema for the helmrepositories API. properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: HelmRepositorySpec specifies the required configuration to produce an Artifact for a Helm repository index YAML. properties: secretRef: type: object description: SecretRef specifies the Secret containing authentication credentials for the HelmRepository. For HTTP/S basic auth the secret must contain 'username' and 'password' fields. For TLS the secret must contain a 'certFile' and 'keyFile', and/or 'caCert' fields. properties: name: type: string description: Name of the referent. required: - name accessFrom: type: object description: 'AccessFrom specifies an Access Control List for allowing cross-namespace references to this object. NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092' properties: namespaceSelectors: type: array description: NamespaceSelectors is the list of namespace selectors to which this ACL applies. Items in this list are evaluated using a logical OR operation. items: type: object description: NamespaceSelector selects the namespaces to which this ACL applies. An empty map of MatchLabels matches all namespaces in a cluster. properties: matchLabels: type: object additionalProperties: type: string description: MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. required: - namespaceSelectors interval: type: string description: Interval at which to check the URL for updates. passCredentials: type: boolean description: PassCredentials allows the credentials from the SecretRef to be passed on to a host that does not match the host as defined in URL. This may be required if the host of the advertised chart URLs in the index differ from the defined URL. Enabling this should be done with caution, as it can potentially result in credentials getting stolen in a MITM-attack. suspend: type: boolean description: Suspend tells the controller to suspend the reconciliation of this HelmRepository. timeout: type: string default: 60s description: Timeout of the index fetch operation, defaults to 60s. url: type: string description: URL of the Helm repository, a valid URL contains at least a protocol and host. required: - interval - url status: type: object default: observedGeneration: -1 description: HelmRepositoryStatus records the observed state of the HelmRepository. properties: artifact: type: object description: Artifact represents the last successful HelmRepository reconciliation. properties: revision: type: string description: Revision is a human-readable identifier traceable in the origin source system. It can be a Git commit SHA, Git tag, a Helm chart version, etc. checksum: type: string description: Checksum is the SHA256 checksum of the Artifact file. lastUpdateTime: type: string description: LastUpdateTime is the timestamp corresponding to the last update of the Artifact. format: date-time path: type: string description: Path is the relative file path of the Artifact. It can be used to locate the file in the root of the Artifact storage on the local file system of the controller managing the Source. size: type: integer description: Size is the number of bytes in the file. format: int64 url: type: string description: URL is the HTTP address of the Artifact as exposed by the controller managing the Source. It can be used to retrieve the Artifact for consumption, e.g. by another controller applying the Artifact contents. required: - path - url conditions: type: array description: Conditions holds the conditions for the HelmRepository. items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last observed generation of the HelmRepository object. format: int64 url: type: string description: URL is the dynamic fetch link for the latest Artifact. It is provided on a "best effort" basis, and using the precise HelmRepositoryStatus.Artifact data is recommended. served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: kustomizations.kustomize.toolkit.fluxcd.io annotations: controller-gen.kubebuilder.io/version: v0.7.0 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: group: kustomize.toolkit.fluxcd.io names: kind: Kustomization listKind: KustomizationList plural: kustomizations shortNames: - ks singular: kustomization scope: Namespaced versions: - name: v1beta1 additionalPrinterColumns: - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Age type: date jsonPath: .metadata.creationTimestamp schema: openAPIV3Schema: type: object description: Kustomization is the Schema for the kustomizations API. properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: KustomizationSpec defines the desired state of a kustomization. properties: serviceAccountName: type: string description: The name of the Kubernetes service account to impersonate when reconciling this Kustomization. decryption: type: object description: Decrypt Kubernetes secrets before applying them on the cluster. properties: secretRef: type: object description: The secret name containing the private OpenPGP keys used for decryption. properties: name: type: string description: Name of the referent. required: - name provider: type: string description: Provider is the name of the decryption engine. enum: - sops required: - provider dependsOn: type: array description: DependsOn may contain a meta.NamespacedObjectReference slice with references to Kustomization resources that must be ready before this Kustomization can be reconciled. items: type: object description: NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any namespace. properties: name: type: string description: Name of the referent. namespace: type: string description: Namespace of the referent, when not specified it acts as LocalObjectReference. required: - name force: type: boolean default: false description: Force instructs the controller to recreate resources when patching fails due to an immutable field change. healthChecks: type: array description: A list of resources to be included in the health assessment. items: type: object description: NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object in any namespace. properties: name: type: string description: Name of the referent. namespace: type: string description: Namespace of the referent, when not specified it acts as LocalObjectReference. apiVersion: type: string description: API version of the referent, if not specified the Kubernetes preferred version will be used. kind: type: string description: Kind of the referent. required: - kind - name images: type: array description: Images is a list of (image name, new name, new tag or digest) for changing image names, tags or digests. This can also be achieved with a patch, but this operator is simpler to specify. items: type: object description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag. properties: name: type: string description: Name is a tag-less image name. digest: type: string description: Digest is the value used to replace the original image tag. If digest is present NewTag value is ignored. newName: type: string description: NewName is the value used to replace the original name. newTag: type: string description: NewTag is the value used to replace the original tag. required: - name interval: type: string description: The interval at which to reconcile the Kustomization. kubeConfig: type: object description: The KubeConfig for reconciling the Kustomization on a remote cluster. When specified, KubeConfig takes precedence over ServiceAccountName. properties: secretRef: type: object description: SecretRef holds the name to a secret that contains a 'value' key with the kubeconfig file as the value. It must be in the same namespace as the Kustomization. It is recommended that the kubeconfig is self-contained, and the secret is regularly updated if credentials such as a cloud-access-token expire. Cloud specific `cmd-path` auth helpers will not function without adding binaries and credentials to the Pod that is responsible for reconciling the Kustomization. properties: name: type: string description: Name of the referent. required: - name patches: type: array description: Strategic merge and JSON patches, defined as inline YAML objects, capable of targeting objects based on kind, label and annotation selectors. items: type: object description: Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should be applied to. properties: patch: type: string description: Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. target: type: object description: Target points to the resources that the patch document should be applied to. properties: name: type: string description: Name to match resources with. namespace: type: string description: Namespace to select resources from. kind: type: string description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md annotationSelector: type: string description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations. group: type: string description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md labelSelector: type: string description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. version: type: string description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md patches: type: array description: JSON 6902 patches, defined as inline YAML objects. items: type: object description: JSON6902Patch contains a JSON6902 patch and the target the patch should be applied to. properties: patch: type: array description: Patch contains the JSON6902 patch document with an array of operation objects. items: type: object description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4 properties: value: description: Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. x-kubernetes-preserve-unknown-fields: true from: type: string description: From contains a JSON-pointer value that references a location within the target document where the operation is performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. op: type: string description: Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4 enum: - test - remove - add - replace - move - copy path: type: string description: Path contains the JSON-pointer value that references a location within the target document where the operation is performed. The meaning of the value depends on the value of Op. required: - op - path target: type: object description: Target points to the resources that the patch document should be applied to. properties: name: type: string description: Name to match resources with. namespace: type: string description: Namespace to select resources from. kind: type: string description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md annotationSelector: type: string description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations. group: type: string description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md labelSelector: type: string description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. version: type: string description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md required: - patch - target patchesStrategicMerge: type: array description: Strategic merge patches, defined as inline YAML objects. items: x-kubernetes-preserve-unknown-fields: true path: type: string description: Path to the directory containing the kustomization.yaml file, or the set of plain YAMLs a kustomization.yaml should be generated for. Defaults to 'None', which translates to the root path of the SourceRef. postBuild: type: object description: PostBuild describes which actions to perform on the YAML manifest generated by building the kustomize overlay. properties: substitute: type: object additionalProperties: type: string description: Substitute holds a map of key/value pairs. The variables defined in your YAML manifests that match any of the keys defined in the map will be substituted with the set value. Includes support for bash string replacement functions e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. substituteFrom: type: array description: SubstituteFrom holds references to ConfigMaps and Secrets containing the variables and their values to be substituted in the YAML manifests. The ConfigMap and the Secret data keys represent the var names and they must match the vars declared in the manifests for the substitution to happen. items: type: object description: SubstituteReference contains a reference to a resource containing the variables name and value. properties: name: type: string description: Name of the values referent. Should reside in the same namespace as the referring resource. maxLength: 253 minLength: 1 kind: type: string description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). enum: - Secret - ConfigMap required: - kind - name prune: type: boolean description: Prune enables garbage collection. retryInterval: type: string description: The interval at which to retry a previously failed reconciliation. When not specified, the controller uses the KustomizationSpec.Interval value to retry failures. sourceRef: type: object description: Reference of the source where the kustomization file is. properties: name: type: string description: Name of the referent namespace: type: string description: Namespace of the referent, defaults to the Kustomization namespace apiVersion: type: string description: API version of the referent kind: type: string description: Kind of the referent enum: - GitRepository - Bucket required: - kind - name suspend: type: boolean description: This flag tells the controller to suspend subsequent kustomize executions, it does not apply to already started executions. Defaults to false. targetNamespace: type: string description: TargetNamespace sets or overrides the namespace in the kustomization.yaml file. maxLength: 63 minLength: 1 timeout: type: string description: Timeout for validation, apply and health checking operations. Defaults to 'Interval' duration. validation: type: string description: Validate the Kubernetes objects before applying them on the cluster. The validation strategy can be 'client' (local dry-run), 'server' (APIServer dry-run) or 'none'. When 'Force' is 'true', validation will fallback to 'client' if set to 'server' because server-side validation is not supported in this scenario. enum: - none - client - server required: - interval - prune - sourceRef status: type: object default: observedGeneration: -1 description: KustomizationStatus defines the observed state of a kustomization. properties: conditions: type: array items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type lastAppliedRevision: type: string description: The last successfully applied revision. The revision format for Git sources is /. lastAttemptedRevision: type: string description: LastAttemptedRevision is the revision of the last reconciliation attempt. lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last reconciled generation. format: int64 snapshot: type: object description: The last successfully applied revision metadata. properties: checksum: type: string description: The manifests sha1 checksum. entries: type: array description: A list of Kubernetes kinds grouped by namespace. items: type: object description: Snapshot holds the metadata of namespaced Kubernetes objects properties: namespace: type: string description: The namespace of this entry. kinds: type: object additionalProperties: type: string description: The list of Kubernetes kinds. required: - kinds required: - checksum - entries served: true storage: false subresources: status: {} - name: v1beta2 additionalPrinterColumns: - name: Age type: date jsonPath: .metadata.creationTimestamp - name: Ready type: string jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Status type: string jsonPath: .status.conditions[?(@.type=="Ready")].message schema: openAPIV3Schema: type: object description: Kustomization is the Schema for the kustomizations API. properties: apiVersion: type: string description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' kind: type: string description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' metadata: type: object spec: type: object description: KustomizationSpec defines the configuration to calculate the desired state from a Source using Kustomize. properties: serviceAccountName: type: string description: The name of the Kubernetes service account to impersonate when reconciling this Kustomization. decryption: type: object description: Decrypt Kubernetes secrets before applying them on the cluster. properties: secretRef: type: object description: The secret name containing the private OpenPGP keys used for decryption. properties: name: type: string description: Name of the referent. required: - name provider: type: string description: Provider is the name of the decryption engine. enum: - sops required: - provider dependsOn: type: array description: DependsOn may contain a meta.NamespacedObjectReference slice with references to Kustomization resources that must be ready before this Kustomization can be reconciled. items: type: object description: NamespacedObjectReference contains enough information to locate the referenced Kubernetes resource object in any namespace. properties: name: type: string description: Name of the referent. namespace: type: string description: Namespace of the referent, when not specified it acts as LocalObjectReference. required: - name force: type: boolean default: false description: Force instructs the controller to recreate resources when patching fails due to an immutable field change. healthChecks: type: array description: A list of resources to be included in the health assessment. items: type: object description: NamespacedObjectKindReference contains enough information to locate the typed referenced Kubernetes resource object in any namespace. properties: name: type: string description: Name of the referent. namespace: type: string description: Namespace of the referent, when not specified it acts as LocalObjectReference. apiVersion: type: string description: API version of the referent, if not specified the Kubernetes preferred version will be used. kind: type: string description: Kind of the referent. required: - kind - name images: type: array description: Images is a list of (image name, new name, new tag or digest) for changing image names, tags or digests. This can also be achieved with a patch, but this operator is simpler to specify. items: type: object description: Image contains an image name, a new name, a new tag or digest, which will replace the original name and tag. properties: name: type: string description: Name is a tag-less image name. digest: type: string description: Digest is the value used to replace the original image tag. If digest is present NewTag value is ignored. newName: type: string description: NewName is the value used to replace the original name. newTag: type: string description: NewTag is the value used to replace the original tag. required: - name interval: type: string description: The interval at which to reconcile the Kustomization. kubeConfig: type: object description: The KubeConfig for reconciling the Kustomization on a remote cluster. When specified, KubeConfig takes precedence over ServiceAccountName. properties: secretRef: type: object description: SecretRef holds the name to a secret that contains a 'value' key with the kubeconfig file as the value. It must be in the same namespace as the Kustomization. It is recommended that the kubeconfig is self-contained, and the secret is regularly updated if credentials such as a cloud-access-token expire. Cloud specific `cmd-path` auth helpers will not function without adding binaries and credentials to the Pod that is responsible for reconciling the Kustomization. properties: name: type: string description: Name of the referent. required: - name patches: type: array description: Strategic merge and JSON patches, defined as inline YAML objects, capable of targeting objects based on kind, label and annotation selectors. items: type: object description: Patch contains an inline StrategicMerge or JSON6902 patch, and the target the patch should be applied to. properties: patch: type: string description: Patch contains an inline StrategicMerge patch or an inline JSON6902 patch with an array of operation objects. target: type: object description: Target points to the resources that the patch document should be applied to. properties: name: type: string description: Name to match resources with. namespace: type: string description: Namespace to select resources from. kind: type: string description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md annotationSelector: type: string description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations. group: type: string description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md labelSelector: type: string description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. version: type: string description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md patches: type: array description: 'JSON 6902 patches, defined as inline YAML objects. Deprecated: Use Patches instead.' items: type: object description: JSON6902Patch contains a JSON6902 patch and the target the patch should be applied to. properties: patch: type: array description: Patch contains the JSON6902 patch document with an array of operation objects. items: type: object description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4 properties: value: description: Value contains a valid JSON structure. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. x-kubernetes-preserve-unknown-fields: true from: type: string description: From contains a JSON-pointer value that references a location within the target document where the operation is performed. The meaning of the value depends on the value of Op, and is NOT taken into account by all operations. op: type: string description: Op indicates the operation to perform. Its value MUST be one of "add", "remove", "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4 enum: - test - remove - add - replace - move - copy path: type: string description: Path contains the JSON-pointer value that references a location within the target document where the operation is performed. The meaning of the value depends on the value of Op. required: - op - path target: type: object description: Target points to the resources that the patch document should be applied to. properties: name: type: string description: Name to match resources with. namespace: type: string description: Namespace to select resources from. kind: type: string description: Kind of the API Group to select resources from. Together with Group and Version it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md annotationSelector: type: string description: AnnotationSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource annotations. group: type: string description: Group is the API group to select resources from. Together with Version and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md labelSelector: type: string description: LabelSelector is a string that follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api It matches with the resource labels. version: type: string description: Version of the API Group to select resources from. Together with Group and Kind it is capable of unambiguously identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md required: - patch - target patchesStrategicMerge: type: array description: 'Strategic merge patches, defined as inline YAML objects. Deprecated: Use Patches instead.' items: x-kubernetes-preserve-unknown-fields: true path: type: string description: Path to the directory containing the kustomization.yaml file, or the set of plain YAMLs a kustomization.yaml should be generated for. Defaults to 'None', which translates to the root path of the SourceRef. postBuild: type: object description: PostBuild describes which actions to perform on the YAML manifest generated by building the kustomize overlay. properties: substitute: type: object additionalProperties: type: string description: Substitute holds a map of key/value pairs. The variables defined in your YAML manifests that match any of the keys defined in the map will be substituted with the set value. Includes support for bash string replacement functions e.g. ${var:=default}, ${var:position} and ${var/substring/replacement}. substituteFrom: type: array description: SubstituteFrom holds references to ConfigMaps and Secrets containing the variables and their values to be substituted in the YAML manifests. The ConfigMap and the Secret data keys represent the var names and they must match the vars declared in the manifests for the substitution to happen. items: type: object description: SubstituteReference contains a reference to a resource containing the variables name and value. properties: name: type: string description: Name of the values referent. Should reside in the same namespace as the referring resource. maxLength: 253 minLength: 1 kind: type: string description: Kind of the values referent, valid values are ('Secret', 'ConfigMap'). enum: - Secret - ConfigMap optional: type: boolean default: false description: Optional indicates whether the referenced resource must exist, or whether to tolerate its absence. If true and the referenced resource is absent, proceed as if the resource was present but empty, without any variables defined. required: - kind - name prune: type: boolean description: Prune enables garbage collection. retryInterval: type: string description: The interval at which to retry a previously failed reconciliation. When not specified, the controller uses the KustomizationSpec.Interval value to retry failures. sourceRef: type: object description: Reference of the source where the kustomization file is. properties: name: type: string description: Name of the referent. namespace: type: string description: Namespace of the referent, defaults to the namespace of the Kubernetes resource object that contains the reference. apiVersion: type: string description: API version of the referent. kind: type: string description: Kind of the referent. enum: - GitRepository - Bucket required: - kind - name suspend: type: boolean description: This flag tells the controller to suspend subsequent kustomize executions, it does not apply to already started executions. Defaults to false. targetNamespace: type: string description: TargetNamespace sets or overrides the namespace in the kustomization.yaml file. maxLength: 63 minLength: 1 timeout: type: string description: Timeout for validation, apply and health checking operations. Defaults to 'Interval' duration. validation: type: string description: 'Deprecated: Not used in v1beta2.' enum: - none - client - server wait: type: boolean description: Wait instructs the controller to check the health of all the reconciled resources. When enabled, the HealthChecks are ignored. Defaults to false. required: - interval - prune - sourceRef status: type: object default: observedGeneration: -1 description: KustomizationStatus defines the observed state of a kustomization. properties: conditions: type: array items: type: object description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }" properties: type: type: string description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ status: type: string description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown lastTransitionTime: type: string description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time message: type: string description: message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 observedGeneration: type: integer description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 reason: type: string description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ required: - lastTransitionTime - message - reason - status - type inventory: type: object description: Inventory contains the list of Kubernetes resource object references that have been successfully applied. properties: entries: type: array description: Entries of Kubernetes resource object references. items: type: object description: ResourceRef contains the information necessary to locate a resource within a cluster. properties: id: type: string description: ID is the string representation of the Kubernetes resource object's metadata, in the format '___'. v: type: string description: Version is the API version of the Kubernetes resource object's kind. required: - id - v required: - entries lastAppliedRevision: type: string description: The last successfully applied revision. The revision format for Git sources is /. lastAttemptedRevision: type: string description: LastAttemptedRevision is the revision of the last reconciliation attempt. lastHandledReconcileAt: type: string description: LastHandledReconcileAt holds the value of the most recent reconcile request value, so a change of the annotation value can be detected. observedGeneration: type: integer description: ObservedGeneration is the last reconciled generation. format: int64 served: true storage: true subresources: status: {} --- apiVersion: v1 kind: ServiceAccount metadata: name: helm-controller namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} --- apiVersion: v1 kind: ServiceAccount metadata: name: kustomize-controller namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} --- apiVersion: v1 kind: ServiceAccount metadata: name: source-controller namespace: flux-system annotations: iam.gke.io/gcp-service-account: flux-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: crd-controller annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} rules: - resources: - '*' apiGroups: - source.toolkit.fluxcd.io verbs: - '*' - resources: - '*' apiGroups: - kustomize.toolkit.fluxcd.io verbs: - '*' - resources: - '*' apiGroups: - helm.toolkit.fluxcd.io verbs: - '*' - resources: - '*' apiGroups: - notification.toolkit.fluxcd.io verbs: - '*' - resources: - '*' apiGroups: - image.toolkit.fluxcd.io verbs: - '*' - resources: - namespaces - secrets apiGroups: - "" verbs: - get - list - watch - resources: - events apiGroups: - "" verbs: - create - patch - resources: - configmaps - configmaps/status apiGroups: - "" verbs: - get - list - watch - create - update - patch - delete - resources: - leases apiGroups: - coordination.k8s.io verbs: - get - list - watch - create - update - patch - delete --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: cluster-reconciler annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} roleRef: name: cluster-admin kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: helm-controller namespace: flux-system kind: ServiceAccount - name: kustomize-controller namespace: flux-system kind: ServiceAccount --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: crd-controller annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} roleRef: name: crd-controller kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: helm-controller namespace: flux-system kind: ServiceAccount - name: image-automation-controller namespace: flux-system kind: ServiceAccount - name: image-reflector-controller namespace: flux-system kind: ServiceAccount - name: kustomize-controller namespace: flux-system kind: ServiceAccount - name: notification-controller namespace: flux-system kind: ServiceAccount - name: source-controller namespace: flux-system kind: ServiceAccount --- apiVersion: v1 kind: Service metadata: name: source-controller labels: control-plane: controller namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: type: ClusterIP selector: app: source-controller ports: - name: http protocol: TCP port: 80 targetPort: http --- apiVersion: apps/v1 kind: Deployment metadata: labels: control-plane: controller name: helm-controller namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: replicas: 1 selector: matchLabels: app: helm-controller template: metadata: annotations: cluster-austoscaler.kubernetes.io/safe-to-evict: "true" prometheus.io/port: "8080" prometheus.io/scrape: "true" pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: app: helm-controller spec: containers: - args: - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ - --watch-all-namespaces - --log-level=info - --log-encoding=json env: - name: RUNTIME_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/thirdparty/index.docker.io/fluxcd/helm-controller:v0.18.1 imagePullPolicy: IfNotPresent livenessProbe: httpGet: path: /healthz port: healthz name: manager ports: - containerPort: 8080 name: http-prom protocol: TCP - containerPort: 9440 name: healthz protocol: TCP readinessProbe: httpGet: path: /readyz port: healthz resources: limits: cpu: 1000m memory: 1Gi requests: cpu: 100m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault volumeMounts: - mountPath: /tmp name: temp securityContext: fsGroup: 1337 serviceAccountName: helm-controller terminationGracePeriodSeconds: 600 volumes: - emptyDir: {} name: temp --- apiVersion: apps/v1 kind: Deployment metadata: labels: control-plane: controller name: kustomize-controller namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: replicas: 1 selector: matchLabels: app: kustomize-controller template: metadata: annotations: cluster-austoscaler.kubernetes.io/safe-to-evict: "true" prometheus.io/port: "8080" prometheus.io/scrape: "true" pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: app: kustomize-controller spec: containers: - args: - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ - --watch-all-namespaces - --log-level=info - --log-encoding=json env: - name: RUNTIME_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/thirdparty/index.docker.io/fluxcd/kustomize-controller:v0.22.1 imagePullPolicy: IfNotPresent livenessProbe: httpGet: path: /healthz port: healthz name: manager ports: - containerPort: 8080 name: http-prom protocol: TCP - containerPort: 9440 name: healthz protocol: TCP readinessProbe: httpGet: path: /readyz port: healthz resources: limits: cpu: 1000m memory: 1Gi requests: cpu: 100m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault volumeMounts: - mountPath: /tmp name: temp securityContext: fsGroup: 1337 serviceAccountName: kustomize-controller terminationGracePeriodSeconds: 60 volumes: - emptyDir: {} name: temp --- apiVersion: apps/v1 kind: Deployment metadata: labels: control-plane: controller name: source-controller namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: replicas: 1 selector: matchLabels: app: source-controller strategy: type: Recreate template: metadata: annotations: cluster-austoscaler.kubernetes.io/safe-to-evict: "true" prometheus.io/port: "8080" prometheus.io/scrape: "true" pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: app: source-controller spec: containers: - args: - --events-addr=http://notification-controller.flux-system.svc.cluster.local./ - --watch-all-namespaces - --log-level=info - --log-encoding=json - --storage-path=/data - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local. env: - name: RUNTIME_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/thirdparty/index.docker.io/fluxcd/source-controller:v0.22.2 imagePullPolicy: IfNotPresent livenessProbe: httpGet: path: /healthz port: healthz name: manager ports: - containerPort: 9090 name: http protocol: TCP - containerPort: 8080 name: http-prom protocol: TCP - containerPort: 9440 name: healthz protocol: TCP readinessProbe: httpGet: path: / port: http resources: limits: cpu: 1000m memory: 1Gi requests: cpu: 50m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault volumeMounts: - mountPath: /data name: data - mountPath: /tmp name: tmp securityContext: fsGroup: 1337 serviceAccountName: source-controller terminationGracePeriodSeconds: 10 volumes: - emptyDir: {} name: data - emptyDir: {} name: tmp --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-egress namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: cluster_hash: ${cluster_hash} cluster_uuid: ${cluster_uuid} spec: egress: - {} ingress: - from: - podSelector: {} podSelector: {} policyTypes: - Ingress - Egress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-scraping namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: cluster_hash: ${cluster_hash} cluster_uuid: ${cluster_uuid} spec: ingress: - ports: - protocol: TCP port: 8080 - protocol: TCP port: 4191 from: - namespaceSelector: {} podSelector: {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-webhooks namespace: flux-system annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: fluxcd-operators pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-infra' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: cluster_hash: ${cluster_hash} cluster_uuid: ${cluster_uuid} spec: ingress: - from: - namespaceSelector: {} podSelector: matchLabels: app: notification-controller policyTypes: - Ingress