fix: Add Helm3 CRDs directory (#192)
Fixes #169 * fix: Add Helm3 CRDs directory * docs: Add info for helmv3 warnings
This commit is contained in:
Sean Johnson
GitHub
parent
b1b2cf6640
commit
2fa31188ed
4 changed files with 2524 additions and 1 deletions
|
|
@ -2,7 +2,7 @@ apiVersion: v1
|
||||||
appVersion: "1.3.6"
|
appVersion: "1.3.6"
|
||||||
description: A Helm chart for ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes.
|
description: A Helm chart for ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes.
|
||||||
name: argo-cd
|
name: argo-cd
|
||||||
version: 1.5.0
|
version: 1.5.1
|
||||||
home: https://github.com/argoproj/argo-helm
|
home: https://github.com/argoproj/argo-helm
|
||||||
icon: https://raw.githubusercontent.com/argoproj/argo/master/argo.png
|
icon: https://raw.githubusercontent.com/argoproj/argo/master/argo.png
|
||||||
keywords:
|
keywords:
|
||||||
|
|
|
||||||
|
|
@ -24,6 +24,11 @@ $ helm repo add argo https://argoproj.github.io/argo-helm
|
||||||
$ helm install --name my-release argo/argo-cd
|
$ helm install --name my-release argo/argo-cd
|
||||||
```
|
```
|
||||||
|
|
||||||
|
### Helm v3 Compatability
|
||||||
|
|
||||||
|
Requires chart version 1.5.1 or newer.
|
||||||
|
|
||||||
|
Helm v3 has removed the `install-crds` hook so CRDs are now populated by files in the [crds](./crds) directory. Users of Helm v3 should set the `installCRDs` value to `false` to avoid warnings about nonexistant webhooks.
|
||||||
|
|
||||||
## Chart Values
|
## Chart Values
|
||||||
|
|
||||||
|
|
@ -34,6 +39,7 @@ $ helm install --name my-release argo/argo-cd
|
||||||
| global.image.tag | If defined, a tag applied to all ArgoCD deployments. | `"v1.3.6"` |
|
| global.image.tag | If defined, a tag applied to all ArgoCD deployments. | `"v1.3.6"` |
|
||||||
| global.securityContext | Toggle and define securityContext | See [values.yaml](values.yaml) |
|
| global.securityContext | Toggle and define securityContext | See [values.yaml](values.yaml) |
|
||||||
| nameOverride | Provide a name in place of `argocd` | `"argocd"` |
|
| nameOverride | Provide a name in place of `argocd` | `"argocd"` |
|
||||||
|
| installCRDs | bool | `true` | Install CRDs if you are using Helm2. |
|
||||||
| configs.knownHosts.data.ssh_known_hosts | Known Hosts | See [values.yaml](values.yaml) |
|
| configs.knownHosts.data.ssh_known_hosts | Known Hosts | See [values.yaml](values.yaml) |
|
||||||
| configs.secret.bitbucketSecret | BitBucket incoming webhook secret | `""` |
|
| configs.secret.bitbucketSecret | BitBucket incoming webhook secret | `""` |
|
||||||
| configs.secret.createSecret | Create the argocd-secret. | `true` |
|
| configs.secret.createSecret | Create the argocd-secret. | `true` |
|
||||||
|
|
|
||||||
1914
charts/argo-cd/crds/crd-application.yaml
Normal file
1914
charts/argo-cd/crds/crd-application.yaml
Normal file
File diff suppressed because it is too large
Load diff
603
charts/argo-cd/crds/crd-project.yaml
Normal file
603
charts/argo-cd/crds/crd-project.yaml
Normal file
|
|
@ -0,0 +1,603 @@
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: appprojects.argoproj.io
|
||||||
|
app.kubernetes.io/part-of: argocd
|
||||||
|
name: appprojects.argoproj.io
|
||||||
|
spec:
|
||||||
|
group: argoproj.io
|
||||||
|
names:
|
||||||
|
kind: AppProject
|
||||||
|
plural: appprojects
|
||||||
|
shortNames:
|
||||||
|
- appproj
|
||||||
|
- appprojs
|
||||||
|
scope: Namespaced
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
description:
|
||||||
|
"AppProject provides a logical grouping of applications, providing
|
||||||
|
controls for: * where the apps may deploy to (cluster whitelist) * what may
|
||||||
|
be deployed (repository whitelist, resource whitelist/blacklist) * who can
|
||||||
|
access these applications (roles, OIDC group claims bindings) * and what they
|
||||||
|
can do (RBAC policies) * automation access to these roles (JWT tokens)"
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description:
|
||||||
|
"APIVersion defines the versioned schema of this representation
|
||||||
|
of an object. Servers should convert recognized schemas to the latest
|
||||||
|
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources"
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
description:
|
||||||
|
"Kind is a string value representing the REST resource this
|
||||||
|
object represents. Servers may infer this from the endpoint the client
|
||||||
|
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds"
|
||||||
|
type: string
|
||||||
|
metadata:
|
||||||
|
properties:
|
||||||
|
annotations:
|
||||||
|
additionalProperties:
|
||||||
|
type: string
|
||||||
|
description:
|
||||||
|
"Annotations is an unstructured key value map stored with
|
||||||
|
a resource that may be set by external tools to store and retrieve
|
||||||
|
arbitrary metadata. They are not queryable and should be preserved
|
||||||
|
when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations"
|
||||||
|
type: object
|
||||||
|
clusterName:
|
||||||
|
description:
|
||||||
|
The name of the cluster which the object belongs to. This
|
||||||
|
is used to distinguish resources with same name and namespace in different
|
||||||
|
clusters. This field is not set anywhere right now and apiserver is
|
||||||
|
going to ignore it if set in create or update request.
|
||||||
|
type: string
|
||||||
|
deletionGracePeriodSeconds:
|
||||||
|
description:
|
||||||
|
Number of seconds allowed for this object to gracefully
|
||||||
|
terminate before it will be removed from the system. Only set when
|
||||||
|
deletionTimestamp is also set. May only be shortened. Read-only.
|
||||||
|
format: int64
|
||||||
|
type: integer
|
||||||
|
deletionTimestamp:
|
||||||
|
description:
|
||||||
|
"DeletionTimestamp is RFC 3339 date and time at which this
|
||||||
|
resource will be deleted. This field is set by the server when a graceful
|
||||||
|
deletion is requested by the user, and is not directly settable by
|
||||||
|
a client. The resource is expected to be deleted (no longer visible
|
||||||
|
from resource lists, and not reachable by name) after the time in
|
||||||
|
this field, once the finalizers list is empty. As long as the finalizers
|
||||||
|
list contains items, deletion is blocked. Once the deletionTimestamp
|
||||||
|
is set, this value may not be unset or be set further into the future,
|
||||||
|
although it may be shortened or the resource may be deleted prior
|
||||||
|
to this time. For example, a user may request that a pod is deleted
|
||||||
|
in 30 seconds. The Kubelet will react by sending a graceful termination
|
||||||
|
signal to the containers in the pod. After that 30 seconds, the Kubelet
|
||||||
|
will send a hard termination signal (SIGKILL) to the container and
|
||||||
|
after cleanup, remove the pod from the API. In the presence of network
|
||||||
|
partitions, this object may still exist after this timestamp, until
|
||||||
|
an administrator or automated process can determine the resource is
|
||||||
|
fully terminated. If not set, graceful deletion of the object has
|
||||||
|
not been requested. \n Populated by the system when a graceful deletion
|
||||||
|
is requested. Read-only. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata"
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
finalizers:
|
||||||
|
description:
|
||||||
|
Must be empty before the object is deleted from the registry.
|
||||||
|
Each entry is an identifier for the responsible component that will
|
||||||
|
remove the entry from the list. If the deletionTimestamp of the object
|
||||||
|
is non-nil, entries in this list can only be removed.
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
generateName:
|
||||||
|
description:
|
||||||
|
"GenerateName is an optional prefix, used by the server,
|
||||||
|
to generate a unique name ONLY IF the Name field has not been provided.
|
||||||
|
If this field is used, the name returned to the client will be different
|
||||||
|
than the name passed. This value will also be combined with a unique
|
||||||
|
suffix. The provided value has the same validation rules as the Name
|
||||||
|
field, and may be truncated by the length of the suffix required to
|
||||||
|
make the value unique on the server. \n If this field is specified
|
||||||
|
and the generated name exists, the server will NOT return a 409 -
|
||||||
|
instead, it will either return 201 Created or 500 with Reason ServerTimeout
|
||||||
|
indicating a unique name could not be found in the time allotted,
|
||||||
|
and the client should retry (optionally after the time indicated in
|
||||||
|
the Retry-After header). \n Applied only if Name is not specified.
|
||||||
|
More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#idempotency"
|
||||||
|
type: string
|
||||||
|
generation:
|
||||||
|
description:
|
||||||
|
A sequence number representing a specific generation of
|
||||||
|
the desired state. Populated by the system. Read-only.
|
||||||
|
format: int64
|
||||||
|
type: integer
|
||||||
|
initializers:
|
||||||
|
description:
|
||||||
|
"An initializer is a controller which enforces some system
|
||||||
|
invariant at object creation time. This field is a list of initializers
|
||||||
|
that have not yet acted on this object. If nil or empty, this object
|
||||||
|
has been completely initialized. Otherwise, the object is considered
|
||||||
|
uninitialized and is hidden (in list/watch and get calls) from clients
|
||||||
|
that haven't explicitly asked to observe uninitialized objects. \n
|
||||||
|
When an object is created, the system will populate this list with
|
||||||
|
the current set of initializers. Only privileged users may set or
|
||||||
|
modify this list. Once it is empty, it may not be modified further
|
||||||
|
by any user. \n DEPRECATED - initializers are an alpha field and will
|
||||||
|
be removed in v1.15."
|
||||||
|
properties:
|
||||||
|
pending:
|
||||||
|
description:
|
||||||
|
Pending is a list of initializers that must execute
|
||||||
|
in order before this object is visible. When the last pending
|
||||||
|
initializer is removed, and no failing result is set, the initializers
|
||||||
|
struct will be set to nil and the object is considered as initialized
|
||||||
|
and visible to all clients.
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
name:
|
||||||
|
description:
|
||||||
|
name of the process that is responsible for initializing
|
||||||
|
this object.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
result:
|
||||||
|
description:
|
||||||
|
If result is set with the Failure field, the object
|
||||||
|
will be persisted to storage and then deleted, ensuring that other
|
||||||
|
clients can observe the deletion.
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description:
|
||||||
|
"APIVersion defines the versioned schema of this
|
||||||
|
representation of an object. Servers should convert recognized
|
||||||
|
schemas to the latest internal value, and may reject unrecognized
|
||||||
|
values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources"
|
||||||
|
type: string
|
||||||
|
code:
|
||||||
|
description:
|
||||||
|
Suggested HTTP return code for this status, 0 if
|
||||||
|
not set.
|
||||||
|
format: int32
|
||||||
|
type: integer
|
||||||
|
details:
|
||||||
|
description:
|
||||||
|
Extended data associated with the reason. Each
|
||||||
|
reason may define its own extended details. This field is
|
||||||
|
optional and the data returned is not guaranteed to conform
|
||||||
|
to any schema except that defined by the reason type.
|
||||||
|
properties:
|
||||||
|
causes:
|
||||||
|
description:
|
||||||
|
The Causes array includes more details associated
|
||||||
|
with the StatusReason failure. Not all StatusReasons may
|
||||||
|
provide detailed causes.
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
field:
|
||||||
|
description:
|
||||||
|
"The field of the resource that has caused
|
||||||
|
this error, as named by its JSON serialization.
|
||||||
|
May include dot and postfix notation for nested
|
||||||
|
attributes. Arrays are zero-indexed. Fields may
|
||||||
|
appear more than once in an array of causes due
|
||||||
|
to fields having multiple errors. Optional. \n Examples:
|
||||||
|
\ \"name\" - the field \"name\" on the current
|
||||||
|
resource \"items[0].name\" - the field \"name\"
|
||||||
|
on the first array entry in \"items\""
|
||||||
|
type: string
|
||||||
|
message:
|
||||||
|
description:
|
||||||
|
A human-readable description of the cause
|
||||||
|
of the error. This field may be presented as-is
|
||||||
|
to a reader.
|
||||||
|
type: string
|
||||||
|
reason:
|
||||||
|
description:
|
||||||
|
A machine-readable description of the
|
||||||
|
cause of the error. If this value is empty there
|
||||||
|
is no information available.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
group:
|
||||||
|
description:
|
||||||
|
The group attribute of the resource associated
|
||||||
|
with the status StatusReason.
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
description:
|
||||||
|
"The kind attribute of the resource associated
|
||||||
|
with the status StatusReason. On some operations may differ
|
||||||
|
from the requested resource Kind. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds"
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description:
|
||||||
|
The name attribute of the resource associated
|
||||||
|
with the status StatusReason (when there is a single name
|
||||||
|
which can be described).
|
||||||
|
type: string
|
||||||
|
retryAfterSeconds:
|
||||||
|
description:
|
||||||
|
If specified, the time in seconds before the
|
||||||
|
operation should be retried. Some errors may indicate
|
||||||
|
the client must take an alternate action - for those errors
|
||||||
|
this field may indicate how long to wait before taking
|
||||||
|
the alternate action.
|
||||||
|
format: int32
|
||||||
|
type: integer
|
||||||
|
uid:
|
||||||
|
description:
|
||||||
|
"UID of the resource. (when there is a single
|
||||||
|
resource which can be described). More info: http://kubernetes.io/docs/user-guide/identifiers#uids"
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
kind:
|
||||||
|
description:
|
||||||
|
"Kind is a string value representing the REST resource
|
||||||
|
this object represents. Servers may infer this from the endpoint
|
||||||
|
the client submits requests to. Cannot be updated. In CamelCase.
|
||||||
|
More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds"
|
||||||
|
type: string
|
||||||
|
message:
|
||||||
|
description:
|
||||||
|
A human-readable description of the status of this
|
||||||
|
operation.
|
||||||
|
type: string
|
||||||
|
metadata:
|
||||||
|
description: "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds"
|
||||||
|
properties:
|
||||||
|
continue:
|
||||||
|
description:
|
||||||
|
continue may be set if the user set a limit
|
||||||
|
on the number of items returned, and indicates that the
|
||||||
|
server has more data available. The value is opaque and
|
||||||
|
may be used to issue another request to the endpoint that
|
||||||
|
served this list to retrieve the next set of available
|
||||||
|
objects. Continuing a consistent list may not be possible
|
||||||
|
if the server configuration has changed or more than a
|
||||||
|
few minutes have passed. The resourceVersion field returned
|
||||||
|
when using this continue value will be identical to the
|
||||||
|
value in the first response, unless you have received
|
||||||
|
this token from an error message.
|
||||||
|
type: string
|
||||||
|
resourceVersion:
|
||||||
|
description:
|
||||||
|
"String that identifies the server's internal
|
||||||
|
version of this object that can be used by clients to
|
||||||
|
determine when objects have changed. Value must be treated
|
||||||
|
as opaque by clients and passed unmodified back to the
|
||||||
|
server. Populated by the system. Read-only. More info:
|
||||||
|
https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency"
|
||||||
|
type: string
|
||||||
|
selfLink:
|
||||||
|
description:
|
||||||
|
selfLink is a URL representing this object.
|
||||||
|
Populated by the system. Read-only.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
reason:
|
||||||
|
description:
|
||||||
|
A machine-readable description of why this operation
|
||||||
|
is in the "Failure" status. If this value is empty there is
|
||||||
|
no information available. A Reason clarifies an HTTP status
|
||||||
|
code but does not override it.
|
||||||
|
type: string
|
||||||
|
status:
|
||||||
|
description:
|
||||||
|
'Status of the operation. One of: "Success" or
|
||||||
|
"Failure". More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status'
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- pending
|
||||||
|
type: object
|
||||||
|
labels:
|
||||||
|
additionalProperties:
|
||||||
|
type: string
|
||||||
|
description:
|
||||||
|
"Map of string keys and values that can be used to organize
|
||||||
|
and categorize (scope and select) objects. May match selectors of
|
||||||
|
replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels"
|
||||||
|
type: object
|
||||||
|
managedFields:
|
||||||
|
description:
|
||||||
|
"ManagedFields maps workflow-id and version to the set
|
||||||
|
of fields that are managed by that workflow. This is mostly for internal
|
||||||
|
housekeeping, and users typically shouldn't need to set or understand
|
||||||
|
this field. A workflow can be the user's name, a controller's name,
|
||||||
|
or the name of a specific apply path like \"ci-cd\". The set of fields
|
||||||
|
is always in the version that the workflow used when modifying the
|
||||||
|
object. \n This field is alpha and can be changed or removed without
|
||||||
|
notice."
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description:
|
||||||
|
APIVersion defines the version of this resource that
|
||||||
|
this field set applies to. The format is "group/version" just
|
||||||
|
like the top-level APIVersion field. It is necessary to track
|
||||||
|
the version of a field set because it cannot be automatically
|
||||||
|
converted.
|
||||||
|
type: string
|
||||||
|
fields:
|
||||||
|
additionalProperties: true
|
||||||
|
description: Fields identifies a set of fields.
|
||||||
|
type: object
|
||||||
|
manager:
|
||||||
|
description:
|
||||||
|
Manager is an identifier of the workflow managing
|
||||||
|
these fields.
|
||||||
|
type: string
|
||||||
|
operation:
|
||||||
|
description:
|
||||||
|
Operation is the type of operation which lead to
|
||||||
|
this ManagedFieldsEntry being created. The only valid values
|
||||||
|
for this field are 'Apply' and 'Update'.
|
||||||
|
type: string
|
||||||
|
time:
|
||||||
|
description:
|
||||||
|
Time is timestamp of when these fields were set.
|
||||||
|
It should always be empty if Operation is 'Apply'
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
name:
|
||||||
|
description:
|
||||||
|
"Name must be unique within a namespace. Is required when
|
||||||
|
creating resources, although some resources may allow a client to
|
||||||
|
request the generation of an appropriate name automatically. Name
|
||||||
|
is primarily intended for creation idempotence and configuration definition.
|
||||||
|
Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names"
|
||||||
|
type: string
|
||||||
|
namespace:
|
||||||
|
description:
|
||||||
|
"Namespace defines the space within each name must be unique.
|
||||||
|
An empty namespace is equivalent to the \"default\" namespace, but
|
||||||
|
\"default\" is the canonical representation. Not all objects are required
|
||||||
|
to be scoped to a namespace - the value of this field for those objects
|
||||||
|
will be empty. \n Must be a DNS_LABEL. Cannot be updated. More info:
|
||||||
|
http://kubernetes.io/docs/user-guide/namespaces"
|
||||||
|
type: string
|
||||||
|
ownerReferences:
|
||||||
|
description:
|
||||||
|
List of objects depended by this object. If ALL objects
|
||||||
|
in the list have been deleted, this object will be garbage collected.
|
||||||
|
If this object is managed by a controller, then an entry in this list
|
||||||
|
will point to this controller, with the controller field set to true.
|
||||||
|
There cannot be more than one managing controller.
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description: API version of the referent.
|
||||||
|
type: string
|
||||||
|
blockOwnerDeletion:
|
||||||
|
description:
|
||||||
|
If true, AND if the owner has the "foregroundDeletion"
|
||||||
|
finalizer, then the owner cannot be deleted from the key-value
|
||||||
|
store until this reference is removed. Defaults to false. To
|
||||||
|
set this field, a user needs "delete" permission of the owner,
|
||||||
|
otherwise 422 (Unprocessable Entity) will be returned.
|
||||||
|
type: boolean
|
||||||
|
controller:
|
||||||
|
description: If true, this reference points to the managing controller.
|
||||||
|
type: boolean
|
||||||
|
kind:
|
||||||
|
description: "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds"
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: "Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names"
|
||||||
|
type: string
|
||||||
|
uid:
|
||||||
|
description: "UID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids"
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- apiVersion
|
||||||
|
- kind
|
||||||
|
- name
|
||||||
|
- uid
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
resourceVersion:
|
||||||
|
description:
|
||||||
|
"An opaque value that represents the internal version of
|
||||||
|
this object that can be used by clients to determine when objects
|
||||||
|
have changed. May be used for optimistic concurrency, change detection,
|
||||||
|
and the watch operation on a resource or set of resources. Clients
|
||||||
|
must treat these values as opaque and passed unmodified back to the
|
||||||
|
server. They may only be valid for a particular resource or set of
|
||||||
|
resources. \n Populated by the system. Read-only. Value must be treated
|
||||||
|
as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency"
|
||||||
|
type: string
|
||||||
|
selfLink:
|
||||||
|
description:
|
||||||
|
SelfLink is a URL representing this object. Populated by
|
||||||
|
the system. Read-only.
|
||||||
|
type: string
|
||||||
|
uid:
|
||||||
|
description:
|
||||||
|
"UID is the unique in time and space value for this object.
|
||||||
|
It is typically generated by the server on successful creation of
|
||||||
|
a resource and is not allowed to change on PUT operations. \n Populated
|
||||||
|
by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids"
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
spec:
|
||||||
|
properties:
|
||||||
|
clusterResourceWhitelist:
|
||||||
|
description:
|
||||||
|
ClusterResourceWhitelist contains list of whitelisted cluster
|
||||||
|
level resources
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
group:
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- group
|
||||||
|
- kind
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
description:
|
||||||
|
description: Description contains optional project description
|
||||||
|
type: string
|
||||||
|
destinations:
|
||||||
|
description:
|
||||||
|
Destinations contains list of destinations available for
|
||||||
|
deployment
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
namespace:
|
||||||
|
description:
|
||||||
|
Namespace overrides the environment namespace value
|
||||||
|
in the ksonnet app.yaml
|
||||||
|
type: string
|
||||||
|
server:
|
||||||
|
description:
|
||||||
|
Server overrides the environment server value in
|
||||||
|
the ksonnet app.yaml
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
namespaceResourceBlacklist:
|
||||||
|
description:
|
||||||
|
NamespaceResourceBlacklist contains list of blacklisted
|
||||||
|
namespace level resources
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
group:
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- group
|
||||||
|
- kind
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
orphanedResources:
|
||||||
|
description:
|
||||||
|
OrphanedResources specifies if controller should monitor
|
||||||
|
orphaned resources of apps in this project
|
||||||
|
properties:
|
||||||
|
warn:
|
||||||
|
description:
|
||||||
|
Warn indicates if warning condition should be created
|
||||||
|
for apps which have orphaned resources
|
||||||
|
type: boolean
|
||||||
|
type: object
|
||||||
|
roles:
|
||||||
|
description:
|
||||||
|
Roles are user defined RBAC roles associated with this
|
||||||
|
project
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
description:
|
||||||
|
description: Description is a description of the role
|
||||||
|
type: string
|
||||||
|
groups:
|
||||||
|
description:
|
||||||
|
Groups are a list of OIDC group claims bound to this
|
||||||
|
role
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
jwtTokens:
|
||||||
|
description:
|
||||||
|
JWTTokens are a list of generated JWT tokens bound
|
||||||
|
to this role
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
exp:
|
||||||
|
format: int64
|
||||||
|
type: integer
|
||||||
|
iat:
|
||||||
|
format: int64
|
||||||
|
type: integer
|
||||||
|
required:
|
||||||
|
- iat
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
name:
|
||||||
|
description: Name is a name for this role
|
||||||
|
type: string
|
||||||
|
policies:
|
||||||
|
description:
|
||||||
|
Policies Stores a list of casbin formated strings
|
||||||
|
that define access policies for the role in the project
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
sourceRepos:
|
||||||
|
description:
|
||||||
|
SourceRepos contains list of repository URLs which can
|
||||||
|
be used for deployment
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
syncWindows:
|
||||||
|
description:
|
||||||
|
SyncWindows controls when syncs can be run for apps in
|
||||||
|
this project
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
applications:
|
||||||
|
description:
|
||||||
|
Applications contains a list of applications that
|
||||||
|
the window will apply to
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
clusters:
|
||||||
|
description:
|
||||||
|
Clusters contains a list of clusters that the window
|
||||||
|
will apply to
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
duration:
|
||||||
|
description:
|
||||||
|
Duration is the amount of time the sync window will
|
||||||
|
be open
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
description: Kind defines if the window allows or blocks syncs
|
||||||
|
type: string
|
||||||
|
manualSync:
|
||||||
|
description:
|
||||||
|
ManualSync enables manual syncs when they would otherwise
|
||||||
|
be blocked
|
||||||
|
type: boolean
|
||||||
|
namespaces:
|
||||||
|
description:
|
||||||
|
Namespaces contains a list of namespaces that the
|
||||||
|
window will apply to
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
schedule:
|
||||||
|
description:
|
||||||
|
Schedule is the time the window will begin, specified
|
||||||
|
in cron format
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- metadata
|
||||||
|
- spec
|
||||||
|
type: object
|
||||||
|
versions:
|
||||||
|
- name: v1alpha1
|
||||||
|
served: true
|
||||||
|
storage: true
|
||||||
Loading…
Reference in a new issue