Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
This commit is contained in:
Marcel Hoyer 2021-04-07 13:45:38 +02:00
parent b8f483fb73
commit ec13b7a68e
2 changed files with 302 additions and 237 deletions

File diff suppressed because it is too large Load diff

View file

@ -20,8 +20,6 @@ spec:
scope: Namespaced scope: Namespaced
versions: versions:
- name: v1alpha1 - name: v1alpha1
served: true
storage: true
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: 'AppProject provides a logical grouping of applications, providing controls for: * where the apps may deploy to (cluster whitelist) * what may be deployed (repository whitelist, resource whitelist/blacklist) * who can access these applications (roles, OIDC group claims bindings) * and what they can do (RBAC policies) * automation access to these roles (JWT tokens)' description: 'AppProject provides a logical grouping of applications, providing controls for: * where the apps may deploy to (cluster whitelist) * what may be deployed (repository whitelist, resource whitelist/blacklist) * who can access these applications (roles, OIDC group claims bindings) * and what they can do (RBAC policies) * automation access to these roles (JWT tokens)'
@ -71,16 +69,16 @@ spec:
destinations: destinations:
description: Destinations contains list of destinations available for deployment description: Destinations contains list of destinations available for deployment
items: items:
description: ApplicationDestination contains deployment destination information description: ApplicationDestination holds information about the application's destination
properties: properties:
name: name:
description: Name of the destination cluster which can be used instead of server (url) field description: Name is an alternate way of specifying the target cluster by its symbolic name
type: string type: string
namespace: namespace:
description: Namespace overrides the environment namespace value in the ksonnet app.yaml description: Namespace specifies the target namespace for the application's resources. The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
type: string type: string
server: server:
description: Server overrides the environment server value in the ksonnet app.yaml description: Server specifies the URL of the target cluster and must be set to the Kubernetes control plane API
type: string type: string
type: object type: object
type: array type: array
@ -116,7 +114,9 @@ spec:
description: OrphanedResources specifies if controller should monitor orphaned resources of apps in this project description: OrphanedResources specifies if controller should monitor orphaned resources of apps in this project
properties: properties:
ignore: ignore:
description: Ignore contains a list of resources that are to be excluded from orphaned resources monitoring
items: items:
description: OrphanedResourceKey is a reference to a resource to be ignored from
properties: properties:
group: group:
type: string type: string
@ -173,7 +173,7 @@ spec:
type: object type: object
type: array type: array
signatureKeys: signatureKeys:
description: List of PGP key IDs that commits to be synced to must be signed with description: SignatureKeys contains a list of PGP key IDs that commits in Git must be signed with in order to be allowed for sync
items: items:
description: SignatureKey is the specification of a key required to verify commit signatures with description: SignatureKey is the specification of a key required to verify commit signatures with
properties: properties:
@ -225,34 +225,35 @@ spec:
type: array type: array
type: object type: object
status: status:
description: Status of the AppProject description: AppProjectStatus contains status information for AppProject CRs
properties: properties:
jwtTokensByRole: jwtTokensByRole:
description: JWT Tokens issued for each of the roles in the project
additionalProperties: additionalProperties:
description: JWTTokens represents a list of JWT tokens
properties: properties:
items: items:
description: List of JWT Tokens issued for the role items:
items: description: JWTToken holds the issuedAt and expiresAt values of a token
description: Holds the issuedAt and expiresAt values of the token
properties: properties:
exp: exp:
description: The expiresAt value of a token
format: int64 format: int64
type: integer type: integer
iat: iat:
description: The issuedAt value of a token
format: int64 format: int64
type: integer type: integer
id: id:
description: ID of the token
type: string type: string
required:
- iat
type: object type: object
type: array type: array
type: object type: object
description: JWTTokensByRole contains a list of JWT tokens issued for a given role
type: object type: object
type: object type: object
required: required:
- metadata - metadata
- spec - spec
type: object type: object
served: true
storage: true