DevFW-CICD/argocd-helm
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(argo-cd): Upgrade to Argo CD 2.12.0 (#2820)

Browse source
This commit is contained in:
Petr Drastil 2024-08-05 17:21:48 +02:00 committed by GitHub
parent c2ba09055c
commit 97a3db19cf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 223 additions and 171 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
charts/argo-cd/Chart.yaml
View file

@ -1,9 +1,9 @@
apiVersion: v2 apiVersion: v2
appVersion: v2.11.7 appVersion: v2.12.0
kubeVersion: ">=1.23.0-0" kubeVersion: ">=1.25.0-0"
description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
name: argo-cd name: argo-cd
version: 7.3.11 version: 7.4.0
home: https://github.com/argoproj/argo-helm home: https://github.com/argoproj/argo-helm
icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
sources: sources:
@ -27,4 +27,4 @@ annotations:
url: https://argoproj.github.io/argo-helm/pgp_keys.asc url: https://argoproj.github.io/argo-helm/pgp_keys.asc
artifacthub.io/changes: | artifacthub.io/changes: |
- kind: changed - kind: changed
description: Bump argo-cd to v2.11.7 description: Bump argo-cd to v2.11.4

2
charts/argo-cd/README.md
View file

@ -647,7 +647,7 @@ server:
## Prerequisites ## Prerequisites
- Kubernetes: `>=1.23.0-0` - Kubernetes: `>=1.25.0-0`
- We align with [Amazon EKS calendar][EKS EoL] because there are many AWS users and it's a conservative approach. - We align with [Amazon EKS calendar][EKS EoL] because there are many AWS users and it's a conservative approach.
- Please check [Support Matrix of Argo CD][Kubernetes Compatibility Matrix] for official info. - Please check [Support Matrix of Argo CD][Kubernetes Compatibility Matrix] for official info.
- Helm v3.0.0+ - Helm v3.0.0+

2
charts/argo-cd/templates/argocd-applicationset/role.yaml
View file

@ -34,6 +34,8 @@ rules:
- appprojects - appprojects
verbs: verbs:
- get - get
- list
- watch
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

6
charts/argo-cd/templates/argocd-repo-server/deployment.yaml
View file

@ -290,6 +290,12 @@ spec:
key: reposerver.revision.cache.lock.timeout key: reposerver.revision.cache.lock.timeout
name: argocd-cmd-params-cm name: argocd-cmd-params-cm
optional: true optional: true
- name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES
valueFrom:
configMapKeyRef:
key: reposerver.include.hidden.directories
name: argocd-cmd-params-cm
optional: true
{{- if .Values.repoServer.useEphemeralHelmWorkingDir }} {{- if .Values.repoServer.useEphemeralHelmWorkingDir }}
- name: HELM_CACHE_HOME - name: HELM_CACHE_HOME
value: /helm-working-dir value: /helm-working-dir

271
charts/argo-cd/templates/crds/crd-application.yaml
View file

@ -39,20 +39,29 @@ spec:
name: Revision name: Revision
priority: 10 priority: 10
type: string type: string
- jsonPath: .spec.project
name: Project
priority: 10
type: string
name: v1alpha1 name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: Application is a definition of Application resource. description: Application is a definition of Application resource.
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: |-
of an object. Servers should convert recognized schemas to the latest APIVersion defines the versioned schema of this representation of an object.
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string type: string
kind: kind:
description: 'Kind is a string value representing the REST resource this description: |-
object represents. Servers may infer this from the endpoint the client Kind is a string value representing the REST resource this object represents.
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string type: string
metadata: metadata:
type: object type: object
@ -150,22 +159,21 @@ spec:
type: object type: object
type: array type: array
revision: revision:
description: Revision is the revision (Git) or chart version (Helm) description: |-
which to sync the application to If omitted, will use the revision Revision is the revision (Git) or chart version (Helm) which to sync the application to
specified in app spec. If omitted, will use the revision specified in app spec.
type: string type: string
revisions: revisions:
description: Revisions is the list of revision (Git) or chart description: |-
version (Helm) which to sync each source in sources field for Revisions is the list of revision (Git) or chart version (Helm) which to sync each source in sources field for the application to
the application to If omitted, will use the revision specified If omitted, will use the revision specified in app spec.
in app spec.
items: items:
type: string type: string
type: array type: array
source: source:
description: Source overrides the source definition set in the description: |-
application. This is typically set in a Rollback operation and Source overrides the source definition set in the application.
is nil during a Sync operation This is typically set in a Rollback operation and is nil during a Sync operation
properties: properties:
chart: chart:
description: Chart is a Helm chart name, and must be specified description: Chart is a Helm chart name, and must be specified
@ -486,18 +494,18 @@ spec:
Helm) that contains the application manifests Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the source description: |-
to sync the application to. In case of Git, this can be TargetRevision defines the revision of the source to sync the application to.
commit, tag, or branch. If omitted, will equal to HEAD. In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
In case of Helm, this is a semver tag for the Chart's version. In case of Helm, this is a semver tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
type: object type: object
sources: sources:
description: Sources overrides the source definition set in the description: |-
application. This is typically set in a Rollback operation and Sources overrides the source definition set in the application.
is nil during a Sync operation This is typically set in a Rollback operation and is nil during a Sync operation
items: items:
description: ApplicationSource contains all required information description: ApplicationSource contains all required information
about the source of an application about the source of an application
@ -825,11 +833,10 @@ spec:
Helm) that contains the application manifests Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the description: |-
source to sync the application to. In case of Git, this TargetRevision defines the revision of the source to sync the application to.
can be commit, tag, or branch. If omitted, will equal In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
to HEAD. In case of Helm, this is a semver tag for the In case of Helm, this is a semver tag for the Chart's version.
Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -848,10 +855,10 @@ spec:
the sync. the sync.
properties: properties:
force: force:
description: Force indicates whether or not to supply description: |-
the --force flag to `kubectl apply`. The --force flag Force indicates whether or not to supply the --force flag to `kubectl apply`.
deletes and re-create the resource, when PATCH encounters The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
conflict and has retried for 5 times. retried for 5 times.
type: boolean type: boolean
type: object type: object
hook: hook:
@ -859,10 +866,10 @@ spec:
perform the sync. This is the default strategy perform the sync. This is the default strategy
properties: properties:
force: force:
description: Force indicates whether or not to supply description: |-
the --force flag to `kubectl apply`. The --force flag Force indicates whether or not to supply the --force flag to `kubectl apply`.
deletes and re-create the resource, when PATCH encounters The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
conflict and has retried for 5 times. retried for 5 times.
type: boolean type: boolean
type: object type: object
type: object type: object
@ -883,9 +890,9 @@ spec:
not set. not set.
type: string type: string
namespace: namespace:
description: Namespace specifies the target namespace for the description: |-
application's resources. The namespace will only be set for Namespace specifies the target namespace for the application's resources.
namespace-scoped resources that have not set a value for .metadata.namespace The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
type: string type: string
server: server:
description: Server specifies the URL of the target cluster's description: Server specifies the URL of the target cluster's
@ -914,10 +921,9 @@ spec:
kind: kind:
type: string type: string
managedFieldsManagers: managedFieldsManagers:
description: ManagedFieldsManagers is a list of trusted managers. description: |-
Fields mutated by those managers will take precedence over ManagedFieldsManagers is a list of trusted managers. Fields mutated by those managers will take precedence over the
the desired state defined in the SCM and won't be displayed desired state defined in the SCM and won't be displayed in diffs
in diffs
items: items:
type: string type: string
type: array type: array
@ -944,18 +950,17 @@ spec:
type: object type: object
type: array type: array
project: project:
description: Project is a reference to the project this application description: |-
belongs to. The empty string means that application belongs to the Project is a reference to the project this application belongs to.
'default' project. The empty string means that application belongs to the 'default' project.
type: string type: string
revisionHistoryLimit: revisionHistoryLimit:
description: RevisionHistoryLimit limits the number of items kept description: |-
in the application's revision history, which is used for informational RevisionHistoryLimit limits the number of items kept in the application's revision history, which is used for informational purposes as well as for rollbacks to previous versions.
purposes as well as for rollbacks to previous versions. This should This should only be changed in exceptional circumstances.
only be changed in exceptional circumstances. Setting to zero will Setting to zero will store no history. This will reduce storage used.
store no history. This will reduce storage used. Increasing will Increasing will increase the space used to store the history, so we do not recommend increasing it.
increase the space used to store the history, so we do not recommend Default is 10.
increasing it. Default is 10.
format: int64 format: int64
type: integer type: integer
source: source:
@ -1274,10 +1279,10 @@ spec:
that contains the application manifests that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the source description: |-
to sync the application to. In case of Git, this can be commit, TargetRevision defines the revision of the source to sync the application to.
tag, or branch. If omitted, will equal to HEAD. In case of Helm, In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
this is a semver tag for the Chart's version. In case of Helm, this is a semver tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -1606,10 +1611,10 @@ spec:
that contains the application manifests that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the source description: |-
to sync the application to. In case of Git, this can be commit, TargetRevision defines the revision of the source to sync the application to.
tag, or branch. If omitted, will equal to HEAD. In case of In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
Helm, this is a semver tag for the Chart's version. In case of Helm, this is a semver tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -2102,11 +2107,10 @@ spec:
Helm) that contains the application manifests Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the description: |-
source to sync the application to. In case of Git, this TargetRevision defines the revision of the source to sync the application to.
can be commit, tag, or branch. If omitted, will equal In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
to HEAD. In case of Helm, this is a semver tag for the In case of Helm, this is a semver tag for the Chart's version.
Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -2448,11 +2452,10 @@ spec:
or Helm) that contains the application manifests or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the description: |-
source to sync the application to. In case of Git, this TargetRevision defines the revision of the source to sync the application to.
can be commit, tag, or branch. If omitted, will equal In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
to HEAD. In case of Helm, this is a semver tag for the In case of Helm, this is a semver tag for the Chart's version.
Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -2464,9 +2467,9 @@ spec:
type: object type: object
type: array type: array
observedAt: observedAt:
description: 'ObservedAt indicates when the application state was description: |-
updated without querying latest git state Deprecated: controller ObservedAt indicates when the application state was updated without querying latest git state
no longer updates ObservedAt field' Deprecated: controller no longer updates ObservedAt field
format: date-time format: date-time
type: string type: string
operationState: operationState:
@ -2579,22 +2582,21 @@ spec:
type: object type: object
type: array type: array
revision: revision:
description: Revision is the revision (Git) or chart version description: |-
(Helm) which to sync the application to If omitted, Revision is the revision (Git) or chart version (Helm) which to sync the application to
will use the revision specified in app spec. If omitted, will use the revision specified in app spec.
type: string type: string
revisions: revisions:
description: Revisions is the list of revision (Git) or description: |-
chart version (Helm) which to sync each source in sources Revisions is the list of revision (Git) or chart version (Helm) which to sync each source in sources field for the application to
field for the application to If omitted, will use the If omitted, will use the revision specified in app spec.
revision specified in app spec.
items: items:
type: string type: string
type: array type: array
source: source:
description: Source overrides the source definition set description: |-
in the application. This is typically set in a Rollback Source overrides the source definition set in the application.
operation and is nil during a Sync operation This is typically set in a Rollback operation and is nil during a Sync operation
properties: properties:
chart: chart:
description: Chart is a Helm chart name, and must description: Chart is a Helm chart name, and must
@ -2937,19 +2939,18 @@ spec:
(Git or Helm) that contains the application manifests (Git or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of description: |-
the source to sync the application to. In case of TargetRevision defines the revision of the source to sync the application to.
Git, this can be commit, tag, or branch. If omitted, In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
will equal to HEAD. In case of Helm, this is a semver In case of Helm, this is a semver tag for the Chart's version.
tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
type: object type: object
sources: sources:
description: Sources overrides the source definition set description: |-
in the application. This is typically set in a Rollback Sources overrides the source definition set in the application.
operation and is nil during a Sync operation This is typically set in a Rollback operation and is nil during a Sync operation
items: items:
description: ApplicationSource contains all required description: ApplicationSource contains all required
information about the source of an application information about the source of an application
@ -3300,11 +3301,10 @@ spec:
(Git or Helm) that contains the application manifests (Git or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision description: |-
of the source to sync the application to. In case TargetRevision defines the revision of the source to sync the application to.
of Git, this can be commit, tag, or branch. If In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
omitted, will equal to HEAD. In case of Helm, In case of Helm, this is a semver tag for the Chart's version.
this is a semver tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -3325,11 +3325,10 @@ spec:
to perform the sync. to perform the sync.
properties: properties:
force: force:
description: Force indicates whether or not to description: |-
supply the --force flag to `kubectl apply`. Force indicates whether or not to supply the --force flag to `kubectl apply`.
The --force flag deletes and re-create the resource, The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
when PATCH encounters conflict and has retried retried for 5 times.
for 5 times.
type: boolean type: boolean
type: object type: object
hook: hook:
@ -3337,11 +3336,10 @@ spec:
to perform the sync. This is the default strategy to perform the sync. This is the default strategy
properties: properties:
force: force:
description: Force indicates whether or not to description: |-
supply the --force flag to `kubectl apply`. Force indicates whether or not to supply the --force flag to `kubectl apply`.
The --force flag deletes and re-create the resource, The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
when PATCH encounters conflict and has retried retried for 5 times.
for 5 times.
type: boolean type: boolean
type: object type: object
type: object type: object
@ -3385,9 +3383,9 @@ spec:
description: Group specifies the API group of the resource description: Group specifies the API group of the resource
type: string type: string
hookPhase: hookPhase:
description: HookPhase contains the state of any operation description: |-
associated with this resource OR hook This can also HookPhase contains the state of any operation associated with this resource OR hook
contain values for non-hook resources. This can also contain values for non-hook resources.
type: string type: string
hookType: hookType:
description: HookType specifies the type of the hook. description: HookType specifies the type of the hook.
@ -3772,11 +3770,10 @@ spec:
or Helm) that contains the application manifests or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the description: |-
source to sync the application to. In case of Git, this TargetRevision defines the revision of the source to sync the application to.
can be commit, tag, or branch. If omitted, will equal In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
to HEAD. In case of Helm, this is a semver tag for the In case of Helm, this is a semver tag for the Chart's version.
Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -4127,11 +4124,10 @@ spec:
or Helm) that contains the application manifests or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of description: |-
the source to sync the application to. In case of TargetRevision defines the revision of the source to sync the application to.
Git, this can be commit, tag, or branch. If omitted, In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
will equal to HEAD. In case of Helm, this is a semver In case of Helm, this is a semver tag for the Chart's version.
tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -4158,8 +4154,9 @@ spec:
description: Resources is a list of Kubernetes resources managed by description: Resources is a list of Kubernetes resources managed by
this application this application
items: items:
description: 'ResourceStatus holds the current sync and health status description: |-
of a resource TODO: describe members of this type' ResourceStatus holds the current sync and health status of a resource
TODO: describe members of this type
properties: properties:
group: group:
type: string type: string
@ -4242,10 +4239,9 @@ spec:
if Server is not set. if Server is not set.
type: string type: string
namespace: namespace:
description: Namespace specifies the target namespace description: |-
for the application's resources. The namespace will Namespace specifies the target namespace for the application's resources.
only be set for namespace-scoped resources that have The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
not set a value for .metadata.namespace
type: string type: string
server: server:
description: Server specifies the URL of the target cluster's description: Server specifies the URL of the target cluster's
@ -4274,10 +4270,9 @@ spec:
kind: kind:
type: string type: string
managedFieldsManagers: managedFieldsManagers:
description: ManagedFieldsManagers is a list of trusted description: |-
managers. Fields mutated by those managers will take ManagedFieldsManagers is a list of trusted managers. Fields mutated by those managers will take precedence over the
precedence over the desired state defined in the SCM desired state defined in the SCM and won't be displayed in diffs
and won't be displayed in diffs
items: items:
type: string type: string
type: array type: array
@ -4623,11 +4618,10 @@ spec:
or Helm) that contains the application manifests or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of the description: |-
source to sync the application to. In case of Git, this TargetRevision defines the revision of the source to sync the application to.
can be commit, tag, or branch. If omitted, will equal In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
to HEAD. In case of Helm, this is a semver tag for the In case of Helm, this is a semver tag for the Chart's version.
Chart's version.
type: string type: string
required: required:
- repoURL - repoURL
@ -4978,11 +4972,10 @@ spec:
or Helm) that contains the application manifests or Helm) that contains the application manifests
type: string type: string
targetRevision: targetRevision:
description: TargetRevision defines the revision of description: |-
the source to sync the application to. In case of TargetRevision defines the revision of the source to sync the application to.
Git, this can be commit, tag, or branch. If omitted, In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
will equal to HEAD. In case of Helm, this is a semver In case of Helm, this is a semver tag for the Chart's version.
tag for the Chart's version.
type: string type: string
required: required:
- repoURL - repoURL

45
charts/argo-cd/templates/crds/crd-applicationset.yaml
View file

@ -72,6 +72,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
name: name:
type: string type: string
requeueAfterSeconds: requeueAfterSeconds:
@ -668,6 +669,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
template: template:
properties: properties:
metadata: metadata:
@ -2430,6 +2432,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
name: name:
type: string type: string
requeueAfterSeconds: requeueAfterSeconds:
@ -3026,6 +3029,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
template: template:
properties: properties:
metadata: metadata:
@ -6891,6 +6895,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
type: object type: object
type: array type: array
template: template:
@ -7487,6 +7492,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
name: name:
type: string type: string
requeueAfterSeconds: requeueAfterSeconds:
@ -8083,6 +8089,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
template: template:
properties: properties:
metadata: metadata:
@ -11948,6 +11955,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
type: object type: object
type: array type: array
mergeKeys: mergeKeys:
@ -14648,6 +14656,7 @@ spec:
type: string type: string
type: object type: object
type: object type: object
x-kubernetes-map-type: atomic
type: object type: object
type: array type: array
goTemplate: goTemplate:
@ -15306,11 +15315,16 @@ spec:
type: string type: string
step: step:
type: string type: string
targetRevisions:
items:
type: string
type: array
required: required:
- application - application
- message - message
- status - status
- step - step
- targetRevisions
type: object type: object
type: array type: array
conditions: conditions:
@ -15334,6 +15348,37 @@ spec:
- type - type
type: object type: object
type: array type: array
resources:
items:
properties:
group:
type: string
health:
properties:
message:
type: string
status:
type: string
type: object
hook:
type: boolean
kind:
type: string
name:
type: string
namespace:
type: string
requiresPruning:
type: boolean
status:
type: string
syncWave:
format: int64
type: integer
version:
type: string
type: object
type: array
type: object type: object
required: required:
- metadata - metadata

60
charts/argo-cd/templates/crds/crd-project.yaml
View file

@ -31,22 +31,28 @@ spec:
- name: v1alpha1 - name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: 'AppProject provides a logical grouping of applications, providing description: |-
controls for: * where the apps may deploy to (cluster whitelist) * what AppProject provides a logical grouping of applications, providing controls for:
may be deployed (repository whitelist, resource whitelist/blacklist) * who * where the apps may deploy to (cluster whitelist)
can access these applications (roles, OIDC group claims bindings) * and * what may be deployed (repository whitelist, resource whitelist/blacklist)
what they can do (RBAC policies) * automation access to these roles (JWT * who can access these applications (roles, OIDC group claims bindings)
tokens)' * and what they can do (RBAC policies)
* automation access to these roles (JWT tokens)
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: |-
of an object. Servers should convert recognized schemas to the latest APIVersion defines the versioned schema of this representation of an object.
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string type: string
kind: kind:
description: 'Kind is a string value representing the REST resource this description: |-
object represents. Servers may infer this from the endpoint the client Kind is a string value representing the REST resource this object represents.
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string type: string
metadata: metadata:
type: object type: object
@ -57,9 +63,9 @@ spec:
description: ClusterResourceBlacklist contains list of blacklisted description: ClusterResourceBlacklist contains list of blacklisted
cluster level resources cluster level resources
items: items:
description: GroupKind specifies a Group and a Kind, but does not description: |-
force a version. This is useful for identifying concepts during GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
lookup stages without having partially valid types concepts during lookup stages without having partially valid types
properties: properties:
group: group:
type: string type: string
@ -74,9 +80,9 @@ spec:
description: ClusterResourceWhitelist contains list of whitelisted description: ClusterResourceWhitelist contains list of whitelisted
cluster level resources cluster level resources
items: items:
description: GroupKind specifies a Group and a Kind, but does not description: |-
force a version. This is useful for identifying concepts during GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
lookup stages without having partially valid types concepts during lookup stages without having partially valid types
properties: properties:
group: group:
type: string type: string
@ -103,9 +109,9 @@ spec:
not set. not set.
type: string type: string
namespace: namespace:
description: Namespace specifies the target namespace for the description: |-
application's resources. The namespace will only be set for Namespace specifies the target namespace for the application's resources.
namespace-scoped resources that have not set a value for .metadata.namespace The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
type: string type: string
server: server:
description: Server specifies the URL of the target cluster's description: Server specifies the URL of the target cluster's
@ -118,9 +124,9 @@ spec:
description: NamespaceResourceBlacklist contains list of blacklisted description: NamespaceResourceBlacklist contains list of blacklisted
namespace level resources namespace level resources
items: items:
description: GroupKind specifies a Group and a Kind, but does not description: |-
force a version. This is useful for identifying concepts during GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
lookup stages without having partially valid types concepts during lookup stages without having partially valid types
properties: properties:
group: group:
type: string type: string
@ -135,9 +141,9 @@ spec:
description: NamespaceResourceWhitelist contains list of whitelisted description: NamespaceResourceWhitelist contains list of whitelisted
namespace level resources namespace level resources
items: items:
description: GroupKind specifies a Group and a Kind, but does not description: |-
force a version. This is useful for identifying concepts during GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
lookup stages without having partially valid types concepts during lookup stages without having partially valid types
properties: properties:
group: group:
type: string type: string