1apiVersion: apiextensions.k8s.io/v1
2kind: CustomResourceDefinition
3metadata:
4 annotations:
5 cnrm.cloud.google.com/version: 0.0.0-dev
6 creationTimestamp: null
7 labels:
8 cnrm.cloud.google.com/managed-by-kcc: "true"
9 cnrm.cloud.google.com/stability-level: stable
10 cnrm.cloud.google.com/system: "true"
11 cnrm.cloud.google.com/tf2crd: "true"
12 name: resourcemanagerpolicies.resourcemanager.cnrm.cloud.google.com
13spec:
14 group: resourcemanager.cnrm.cloud.google.com
15 names:
16 categories:
17 - gcp
18 kind: ResourceManagerPolicy
19 plural: resourcemanagerpolicies
20 shortNames:
21 - gcpresourcemanagerpolicy
22 - gcpresourcemanagerpolicies
23 singular: resourcemanagerpolicy
24 preserveUnknownFields: false
25 scope: Namespaced
26 versions:
27 - additionalPrinterColumns:
28 - jsonPath: .metadata.creationTimestamp
29 name: Age
30 type: date
31 - description: When 'True', the most recent reconcile of the resource succeeded
32 jsonPath: .status.conditions[?(@.type=='Ready')].status
33 name: Ready
34 type: string
35 - description: The reason for the value in 'Ready'
36 jsonPath: .status.conditions[?(@.type=='Ready')].reason
37 name: Status
38 type: string
39 - description: The last transition time for the value in 'Status'
40 jsonPath: .status.conditions[?(@.type=='Ready')].lastTransitionTime
41 name: Status Age
42 type: date
43 name: v1beta1
44 schema:
45 openAPIV3Schema:
46 properties:
47 apiVersion:
48 description: 'apiVersion defines the versioned schema of this representation
49 of an object. Servers should convert recognized schemas to the latest
50 internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
51 type: string
52 kind:
53 description: 'kind is a string value representing the REST resource this
54 object represents. Servers may infer this from the endpoint the client
55 submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
56 type: string
57 metadata:
58 type: object
59 spec:
60 properties:
61 booleanPolicy:
62 description: A boolean policy is a constraint that is either enforced
63 or not.
64 properties:
65 enforced:
66 description: If true, then the Policy is enforced. If false, then
67 any configuration is acceptable.
68 type: boolean
69 required:
70 - enforced
71 type: object
72 constraint:
73 description: Immutable. The name of the Constraint the Policy is configuring,
74 for example, serviceuser.services.
75 type: string
76 folderRef:
77 description: |-
78 The folder on which to configure the constraint. Only one of
79 projectRef, folderRef, or organizationRef may be specified.
80 oneOf:
81 - not:
82 required:
83 - external
84 required:
85 - name
86 - not:
87 anyOf:
88 - required:
89 - name
90 - required:
91 - namespace
92 required:
93 - external
94 properties:
95 external:
96 description: 'Allowed value: The `name` field of a `Folder` resource.'
97 type: string
98 name:
99 description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
100 type: string
101 namespace:
102 description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
103 type: string
104 type: object
105 listPolicy:
106 description: A policy that can define specific values that are allowed
107 or denied for the given constraint. It can also be used to allow
108 or deny all values. .
109 properties:
110 allow:
111 description: One or the other must be set.
112 properties:
113 all:
114 description: The policy allows or denies all values.
115 type: boolean
116 values:
117 description: The policy can define specific values that are
118 allowed or denied.
119 items:
120 type: string
121 type: array
122 type: object
123 deny:
124 description: One or the other must be set.
125 properties:
126 all:
127 description: The policy allows or denies all values.
128 type: boolean
129 values:
130 description: The policy can define specific values that are
131 allowed or denied.
132 items:
133 type: string
134 type: array
135 type: object
136 inheritFromParent:
137 description: If set to true, the values from the effective Policy
138 of the parent resource are inherited, meaning the values set
139 in this Policy are added to the values inherited up the hierarchy.
140 type: boolean
141 suggestedValue:
142 description: The Google Cloud Console will try to default to a
143 configuration that matches the value specified in this field.
144 type: string
145 type: object
146 organizationRef:
147 description: |-
148 The organization on which to configure the constraint. Only one of
149 projectRef, folderRef, or organizationRef may be specified.
150 oneOf:
151 - not:
152 required:
153 - external
154 required:
155 - name
156 - not:
157 anyOf:
158 - required:
159 - name
160 - required:
161 - namespace
162 required:
163 - external
164 properties:
165 external:
166 description: 'Allowed value: The `name` field of an `Organization`
167 resource.'
168 type: string
169 name:
170 description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
171 type: string
172 namespace:
173 description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
174 type: string
175 type: object
176 projectRef:
177 description: |-
178 The project on which to configure the constraint. Only one of
179 projectRef, folderRef, or organizationRef may be specified.
180 oneOf:
181 - not:
182 required:
183 - external
184 required:
185 - name
186 - not:
187 anyOf:
188 - required:
189 - name
190 - required:
191 - namespace
192 required:
193 - external
194 properties:
195 external:
196 description: 'Allowed value: The `name` field of a `Project` resource.'
197 type: string
198 name:
199 description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
200 type: string
201 namespace:
202 description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
203 type: string
204 type: object
205 restorePolicy:
206 description: A restore policy is a constraint to restore the default
207 policy.
208 properties:
209 default:
210 description: May only be set to true. If set, then the default
211 Policy is restored.
212 type: boolean
213 required:
214 - default
215 type: object
216 version:
217 description: Version of the Policy. Default version is 0.
218 type: integer
219 required:
220 - constraint
221 type: object
222 status:
223 properties:
224 conditions:
225 description: Conditions represent the latest available observation
226 of the resource's current state.
227 items:
228 properties:
229 lastTransitionTime:
230 description: Last time the condition transitioned from one status
231 to another.
232 type: string
233 message:
234 description: Human-readable message indicating details about
235 last transition.
236 type: string
237 reason:
238 description: Unique, one-word, CamelCase reason for the condition's
239 last transition.
240 type: string
241 status:
242 description: Status is the status of the condition. Can be True,
243 False, Unknown.
244 type: string
245 type:
246 description: Type is the type of the condition.
247 type: string
248 type: object
249 type: array
250 etag:
251 description: The etag of the organization policy. etag is used for
252 optimistic concurrency control as a way to help prevent simultaneous
253 updates of a policy from overwriting each other.
254 type: string
255 observedGeneration:
256 description: ObservedGeneration is the generation of the resource
257 that was most recently observed by the Config Connector controller.
258 If this is equal to metadata.generation, then that means that the
259 current reported status reflects the most recent desired state of
260 the resource.
261 type: integer
262 updateTime:
263 description: 'The timestamp in RFC3339 UTC "Zulu" format, accurate
264 to nanoseconds, representing when the variable was last updated.
265 Example: "2016-10-09T12:33:37.578138407Z".'
266 type: string
267 type: object
268 required:
269 - spec
270 type: object
271 served: true
272 storage: true
273 subresources:
274 status: {}
275status:
276 acceptedNames:
277 kind: ""
278 plural: ""
279 conditions: []
280 storedVersions: []
View as plain text