osm.etsi.org Git - osm/devops.git/blob

   1 ---
   2 # This manifest was generated by flux. DO NOT EDIT.
   3 # Flux Version: v2.1.2
   4 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
   5 apiVersion: v1
   6 kind: Namespace
   7 metadata:
   8   labels:
   9     app.kubernetes.io/instance: flux-system
  10     app.kubernetes.io/part-of: flux
  11     app.kubernetes.io/version: v2.1.2
  12     pod-security.kubernetes.io/warn: restricted
  13     pod-security.kubernetes.io/warn-version: latest
  14   name: flux-system
  15 ---
  16 apiVersion: networking.k8s.io/v1
  17 kind: NetworkPolicy
  18 metadata:
  19   labels:
  20     app.kubernetes.io/instance: flux-system
  21     app.kubernetes.io/part-of: flux
  22     app.kubernetes.io/version: v2.1.2
  23   name: allow-egress
  24   namespace: flux-system
  25 spec:
  26   egress:
  27   - {}
  28   ingress:
  29   - from:
  30     - podSelector: {}
  31   podSelector: {}
  32   policyTypes:
  33   - Ingress
  34   - Egress
  35 ---
  36 apiVersion: networking.k8s.io/v1
  37 kind: NetworkPolicy
  38 metadata:
  39   labels:
  40     app.kubernetes.io/instance: flux-system
  41     app.kubernetes.io/part-of: flux
  42     app.kubernetes.io/version: v2.1.2
  43   name: allow-scraping
  44   namespace: flux-system
  45 spec:
  46   ingress:
  47   - from:
  48     - namespaceSelector: {}
  49     ports:
  50     - port: 8080
  51       protocol: TCP
  52   podSelector: {}
  53   policyTypes:
  54   - Ingress
  55 ---
  56 apiVersion: networking.k8s.io/v1
  57 kind: NetworkPolicy
  58 metadata:
  59   labels:
  60     app.kubernetes.io/instance: flux-system
  61     app.kubernetes.io/part-of: flux
  62     app.kubernetes.io/version: v2.1.2
  63   name: allow-webhooks
  64   namespace: flux-system
  65 spec:
  66   ingress:
  67   - from:
  68     - namespaceSelector: {}
  69   podSelector:
  70     matchLabels:
  71       app: notification-controller
  72   policyTypes:
  73   - Ingress
  74 ---
  75 apiVersion: v1
  76 kind: ResourceQuota
  77 metadata:
  78   labels:
  79     app.kubernetes.io/instance: flux-system
  80     app.kubernetes.io/part-of: flux
  81     app.kubernetes.io/version: v2.1.2
  82   name: critical-pods-flux-system
  83   namespace: flux-system
  84 spec:
  85   hard:
  86     pods: "1000"
  87   scopeSelector:
  88     matchExpressions:
  89     - operator: In
  90       scopeName: PriorityClass
  91       values:
  92       - system-node-critical
  93       - system-cluster-critical
  94 ---
  95 apiVersion: rbac.authorization.k8s.io/v1
  96 kind: ClusterRole
  97 metadata:
  98   labels:
  99     app.kubernetes.io/instance: flux-system
 100     app.kubernetes.io/part-of: flux
 101     app.kubernetes.io/version: v2.1.2
 102   name: crd-controller-flux-system
 103 rules:
 104 - apiGroups:
 105   - source.toolkit.fluxcd.io
 106   resources:
 107   - '*'
 108   verbs:
 109   - '*'
 110 - apiGroups:
 111   - kustomize.toolkit.fluxcd.io
 112   resources:
 113   - '*'
 114   verbs:
 115   - '*'
 116 - apiGroups:
 117   - helm.toolkit.fluxcd.io
 118   resources:
 119   - '*'
 120   verbs:
 121   - '*'
 122 - apiGroups:
 123   - notification.toolkit.fluxcd.io
 124   resources:
 125   - '*'
 126   verbs:
 127   - '*'
 128 - apiGroups:
 129   - image.toolkit.fluxcd.io
 130   resources:
 131   - '*'
 132   verbs:
 133   - '*'
 134 - apiGroups:
 135   - ""
 136   resources:
 137   - namespaces
 138   - secrets
 139   - configmaps
 140   - serviceaccounts
 141   verbs:
 142   - get
 143   - list
 144   - watch
 145 - apiGroups:
 146   - ""
 147   resources:
 148   - events
 149   verbs:
 150   - create
 151   - patch
 152 - apiGroups:
 153   - ""
 154   resources:
 155   - configmaps
 156   verbs:
 157   - get
 158   - list
 159   - watch
 160   - create
 161   - update
 162   - patch
 163   - delete
 164 - apiGroups:
 165   - ""
 166   resources:
 167   - configmaps/status
 168   verbs:
 169   - get
 170   - update
 171   - patch
 172 - apiGroups:
 173   - coordination.k8s.io
 174   resources:
 175   - leases
 176   verbs:
 177   - get
 178   - list
 179   - watch
 180   - create
 181   - update
 182   - patch
 183   - delete
 184 ---
 185 apiVersion: rbac.authorization.k8s.io/v1
 186 kind: ClusterRole
 187 metadata:
 188   labels:
 189     app.kubernetes.io/instance: flux-system
 190     app.kubernetes.io/part-of: flux
 191     app.kubernetes.io/version: v2.1.2
 192     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 193     rbac.authorization.k8s.io/aggregate-to-edit: "true"
 194   name: flux-edit-flux-system
 195 rules:
 196 - apiGroups:
 197   - notification.toolkit.fluxcd.io
 198   - source.toolkit.fluxcd.io
 199   - helm.toolkit.fluxcd.io
 200   - image.toolkit.fluxcd.io
 201   - kustomize.toolkit.fluxcd.io
 202   resources:
 203   - '*'
 204   verbs:
 205   - create
 206   - delete
 207   - deletecollection
 208   - patch
 209   - update
 210 ---
 211 apiVersion: rbac.authorization.k8s.io/v1
 212 kind: ClusterRole
 213 metadata:
 214   labels:
 215     app.kubernetes.io/instance: flux-system
 216     app.kubernetes.io/part-of: flux
 217     app.kubernetes.io/version: v2.1.2
 218     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 219     rbac.authorization.k8s.io/aggregate-to-edit: "true"
 220     rbac.authorization.k8s.io/aggregate-to-view: "true"
 221   name: flux-view-flux-system
 222 rules:
 223 - apiGroups:
 224   - notification.toolkit.fluxcd.io
 225   - source.toolkit.fluxcd.io
 226   - helm.toolkit.fluxcd.io
 227   - image.toolkit.fluxcd.io
 228   - kustomize.toolkit.fluxcd.io
 229   resources:
 230   - '*'
 231   verbs:
 232   - get
 233   - list
 234   - watch
 235 ---
 236 apiVersion: rbac.authorization.k8s.io/v1
 237 kind: ClusterRoleBinding
 238 metadata:
 239   labels:
 240     app.kubernetes.io/instance: flux-system
 241     app.kubernetes.io/part-of: flux
 242     app.kubernetes.io/version: v2.1.2
 243   name: cluster-reconciler-flux-system
 244 roleRef:
 245   apiGroup: rbac.authorization.k8s.io
 246   kind: ClusterRole
 247   name: cluster-admin
 248 subjects:
 249 - kind: ServiceAccount
 250   name: kustomize-controller
 251   namespace: flux-system
 252 - kind: ServiceAccount
 253   name: helm-controller
 254   namespace: flux-system
 255 ---
 256 apiVersion: rbac.authorization.k8s.io/v1
 257 kind: ClusterRoleBinding
 258 metadata:
 259   labels:
 260     app.kubernetes.io/instance: flux-system
 261     app.kubernetes.io/part-of: flux
 262     app.kubernetes.io/version: v2.1.2
 263   name: crd-controller-flux-system
 264 roleRef:
 265   apiGroup: rbac.authorization.k8s.io
 266   kind: ClusterRole
 267   name: crd-controller-flux-system
 268 subjects:
 269 - kind: ServiceAccount
 270   name: kustomize-controller
 271   namespace: flux-system
 272 - kind: ServiceAccount
 273   name: helm-controller
 274   namespace: flux-system
 275 - kind: ServiceAccount
 276   name: source-controller
 277   namespace: flux-system
 278 - kind: ServiceAccount
 279   name: notification-controller
 280   namespace: flux-system
 281 - kind: ServiceAccount
 282   name: image-reflector-controller
 283   namespace: flux-system
 284 - kind: ServiceAccount
 285   name: image-automation-controller
 286   namespace: flux-system
 287 ---
 288 apiVersion: apiextensions.k8s.io/v1
 289 kind: CustomResourceDefinition
 290 metadata:
 291   annotations:
 292     controller-gen.kubebuilder.io/version: v0.12.0
 293   labels:
 294     app.kubernetes.io/component: source-controller
 295     app.kubernetes.io/instance: flux-system
 296     app.kubernetes.io/part-of: flux
 297     app.kubernetes.io/version: v2.1.2
 298   name: buckets.source.toolkit.fluxcd.io
 299 spec:
 300   group: source.toolkit.fluxcd.io
 301   names:
 302     kind: Bucket
 303     listKind: BucketList
 304     plural: buckets
 305     singular: bucket
 306   scope: Namespaced
 307   versions:
 308   - additionalPrinterColumns:
 309     - jsonPath: .spec.endpoint
 310       name: Endpoint
 311       type: string
 312     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 313       name: Ready
 314       type: string
 315     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 316       name: Status
 317       type: string
 318     - jsonPath: .metadata.creationTimestamp
 319       name: Age
 320       type: date
 321     name: v1beta1
 322     schema:
 323       openAPIV3Schema:
 324         description: Bucket is the Schema for the buckets API
 325         properties:
 326           apiVersion:
 327             description: 'APIVersion defines the versioned schema of this representation
 328               of an object. Servers should convert recognized schemas to the latest
 329               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 330             type: string
 331           kind:
 332             description: 'Kind is a string value representing the REST resource this
 333               object represents. Servers may infer this from the endpoint the client
 334               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 335             type: string
 336           metadata:
 337             type: object
 338           spec:
 339             description: BucketSpec defines the desired state of an S3 compatible
 340               bucket
 341             properties:
 342               accessFrom:
 343                 description: AccessFrom defines an Access Control List for allowing
 344                   cross-namespace references to this object.
 345                 properties:
 346                   namespaceSelectors:
 347                     description: NamespaceSelectors is the list of namespace selectors
 348                       to which this ACL applies. Items in this list are evaluated
 349                       using a logical OR operation.
 350                     items:
 351                       description: NamespaceSelector selects the namespaces to which
 352                         this ACL applies. An empty map of MatchLabels matches all
 353                         namespaces in a cluster.
 354                       properties:
 355                         matchLabels:
 356                           additionalProperties:
 357                             type: string
 358                           description: MatchLabels is a map of {key,value} pairs.
 359                             A single {key,value} in the matchLabels map is equivalent
 360                             to an element of matchExpressions, whose key field is
 361                             "key", the operator is "In", and the values array contains
 362                             only "value". The requirements are ANDed.
 363                           type: object
 364                       type: object
 365                     type: array
 366                 required:
 367                 - namespaceSelectors
 368                 type: object
 369               bucketName:
 370                 description: The bucket name.
 371                 type: string
 372               endpoint:
 373                 description: The bucket endpoint address.
 374                 type: string
 375               ignore:
 376                 description: Ignore overrides the set of excluded patterns in the
 377                   .sourceignore format (which is the same as .gitignore). If not provided,
 378                   a default will be used, consult the documentation for your version
 379                   to find out what those are.
 380                 type: string
 381               insecure:
 382                 description: Insecure allows connecting to a non-TLS S3 HTTP endpoint.
 383                 type: boolean
 384               interval:
 385                 description: The interval at which to check for bucket updates.
 386                 type: string
 387               provider:
 388                 default: generic
 389                 description: The S3 compatible storage provider name, default ('generic').
 390                 enum:
 391                 - generic
 392                 - aws
 393                 - gcp
 394                 type: string
 395               region:
 396                 description: The bucket region.
 397                 type: string
 398               secretRef:
 399                 description: The name of the secret containing authentication credentials
 400                   for the Bucket.
 401                 properties:
 402                   name:
 403                     description: Name of the referent.
 404                     type: string
 405                 required:
 406                 - name
 407                 type: object
 408               suspend:
 409                 description: This flag tells the controller to suspend the reconciliation
 410                   of this source.
 411                 type: boolean
 412               timeout:
 413                 default: 60s
 414                 description: The timeout for download operations, defaults to 60s.
 415                 type: string
 416             required:
 417             - bucketName
 418             - endpoint
 419             - interval
 420             type: object
 421           status:
 422             default:
 423               observedGeneration: -1
 424             description: BucketStatus defines the observed state of a bucket
 425             properties:
 426               artifact:
 427                 description: Artifact represents the output of the last successful
 428                   Bucket sync.
 429                 properties:
 430                   checksum:
 431                     description: Checksum is the SHA256 checksum of the artifact.
 432                     type: string
 433                   lastUpdateTime:
 434                     description: LastUpdateTime is the timestamp corresponding to
 435                       the last update of this artifact.
 436                     format: date-time
 437                     type: string
 438                   path:
 439                     description: Path is the relative file path of this artifact.
 440                     type: string
 441                   revision:
 442                     description: Revision is a human readable identifier traceable
 443                       in the origin source system. It can be a Git commit SHA, Git
 444                       tag, a Helm index timestamp, a Helm chart version, etc.
 445                     type: string
 446                   url:
 447                     description: URL is the HTTP address of this artifact.
 448                     type: string
 449                 required:
 450                 - path
 451                 - url
 452                 type: object
 453               conditions:
 454                 description: Conditions holds the conditions for the Bucket.
 455                 items:
 456                   description: "Condition contains details for one aspect of the current
 457                     state of this API Resource. --- This struct is intended for direct
 458                     use as an array at the field path .status.conditions.  For example,
 459                     \n type FooStatus struct{ // Represents the observations of a
 460                     foo's current state. // Known .status.conditions.type are: \"Available\",
 461                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
 462                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
 463                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
 464                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
 465                   properties:
 466                     lastTransitionTime:
 467                       description: lastTransitionTime is the last time the condition
 468                         transitioned from one status to another. This should be when
 469                         the underlying condition changed.  If that is not known, then
 470                         using the time when the API field changed is acceptable.
 471                       format: date-time
 472                       type: string
 473                     message:
 474                       description: message is a human readable message indicating
 475                         details about the transition. This may be an empty string.
 476                       maxLength: 32768
 477                       type: string
 478                     observedGeneration:
 479                       description: observedGeneration represents the .metadata.generation
 480                         that the condition was set based upon. For instance, if .metadata.generation
 481                         is currently 12, but the .status.conditions[x].observedGeneration
 482                         is 9, the condition is out of date with respect to the current
 483                         state of the instance.
 484                       format: int64
 485                       minimum: 0
 486                       type: integer
 487                     reason:
 488                       description: reason contains a programmatic identifier indicating
 489                         the reason for the condition's last transition. Producers
 490                         of specific condition types may define expected values and
 491                         meanings for this field, and whether the values are considered
 492                         a guaranteed API. The value should be a CamelCase string.
 493                         This field may not be empty.
 494                       maxLength: 1024
 495                       minLength: 1
 496                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 497                       type: string
 498                     status:
 499                       description: status of the condition, one of True, False, Unknown.
 500                       enum:
 501                       - "True"
 502                       - "False"
 503                       - Unknown
 504                       type: string
 505                     type:
 506                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 507                         --- Many .condition.type values are consistent across resources
 508                         like Available, but because arbitrary conditions can be useful
 509                         (see .node.status.conditions), the ability to deconflict is
 510                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 511                       maxLength: 316
 512                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 513                       type: string
 514                   required:
 515                   - lastTransitionTime
 516                   - message
 517                   - reason
 518                   - status
 519                   - type
 520                   type: object
 521                 type: array
 522               lastHandledReconcileAt:
 523                 description: LastHandledReconcileAt holds the value of the most recent
 524                   reconcile request value, so a change of the annotation value can
 525                   be detected.
 526                 type: string
 527               observedGeneration:
 528                 description: ObservedGeneration is the last observed generation.
 529                 format: int64
 530                 type: integer
 531               url:
 532                 description: URL is the download link for the artifact output of the
 533                   last Bucket sync.
 534                 type: string
 535             type: object
 536         type: object
 537     served: true
 538     storage: false
 539     subresources:
 540       status: {}
 541   - additionalPrinterColumns:
 542     - jsonPath: .spec.endpoint
 543       name: Endpoint
 544       type: string
 545     - jsonPath: .metadata.creationTimestamp
 546       name: Age
 547       type: date
 548     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 549       name: Ready
 550       type: string
 551     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 552       name: Status
 553       type: string
 554     name: v1beta2
 555     schema:
 556       openAPIV3Schema:
 557         description: Bucket is the Schema for the buckets API.
 558         properties:
 559           apiVersion:
 560             description: 'APIVersion defines the versioned schema of this representation
 561               of an object. Servers should convert recognized schemas to the latest
 562               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 563             type: string
 564           kind:
 565             description: 'Kind is a string value representing the REST resource this
 566               object represents. Servers may infer this from the endpoint the client
 567               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 568             type: string
 569           metadata:
 570             type: object
 571           spec:
 572             description: BucketSpec specifies the required configuration to produce
 573               an Artifact for an object storage bucket.
 574             properties:
 575               accessFrom:
 576                 description: 'AccessFrom specifies an Access Control List for allowing
 577                   cross-namespace references to this object. NOTE: Not implemented,
 578                   provisional as of https://github.com/fluxcd/flux2/pull/2092'
 579                 properties:
 580                   namespaceSelectors:
 581                     description: NamespaceSelectors is the list of namespace selectors
 582                       to which this ACL applies. Items in this list are evaluated
 583                       using a logical OR operation.
 584                     items:
 585                       description: NamespaceSelector selects the namespaces to which
 586                         this ACL applies. An empty map of MatchLabels matches all
 587                         namespaces in a cluster.
 588                       properties:
 589                         matchLabels:
 590                           additionalProperties:
 591                             type: string
 592                           description: MatchLabels is a map of {key,value} pairs.
 593                             A single {key,value} in the matchLabels map is equivalent
 594                             to an element of matchExpressions, whose key field is
 595                             "key", the operator is "In", and the values array contains
 596                             only "value". The requirements are ANDed.
 597                           type: object
 598                       type: object
 599                     type: array
 600                 required:
 601                 - namespaceSelectors
 602                 type: object
 603               bucketName:
 604                 description: BucketName is the name of the object storage bucket.
 605                 type: string
 606               endpoint:
 607                 description: Endpoint is the object storage address the BucketName
 608                   is located at.
 609                 type: string
 610               ignore:
 611                 description: Ignore overrides the set of excluded patterns in the
 612                   .sourceignore format (which is the same as .gitignore). If not provided,
 613                   a default will be used, consult the documentation for your version
 614                   to find out what those are.
 615                 type: string
 616               insecure:
 617                 description: Insecure allows connecting to a non-TLS HTTP Endpoint.
 618                 type: boolean
 619               interval:
 620                 description: Interval at which the Bucket Endpoint is checked for
 621                   updates. This interval is approximate and may be subject to jitter
 622                   to ensure efficient use of resources.
 623                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
 624                 type: string
 625               provider:
 626                 default: generic
 627                 description: Provider of the object storage bucket. Defaults to 'generic',
 628                   which expects an S3 (API) compatible object storage.
 629                 enum:
 630                 - generic
 631                 - aws
 632                 - gcp
 633                 - azure
 634                 type: string
 635               region:
 636                 description: Region of the Endpoint where the BucketName is located
 637                   in.
 638                 type: string
 639               secretRef:
 640                 description: SecretRef specifies the Secret containing authentication
 641                   credentials for the Bucket.
 642                 properties:
 643                   name:
 644                     description: Name of the referent.
 645                     type: string
 646                 required:
 647                 - name
 648                 type: object
 649               suspend:
 650                 description: Suspend tells the controller to suspend the reconciliation
 651                   of this Bucket.
 652                 type: boolean
 653               timeout:
 654                 default: 60s
 655                 description: Timeout for fetch operations, defaults to 60s.
 656                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
 657                 type: string
 658             required:
 659             - bucketName
 660             - endpoint
 661             - interval
 662             type: object
 663           status:
 664             default:
 665               observedGeneration: -1
 666             description: BucketStatus records the observed state of a Bucket.
 667             properties:
 668               artifact:
 669                 description: Artifact represents the last successful Bucket reconciliation.
 670                 properties:
 671                   digest:
 672                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
 673                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
 674                     type: string
 675                   lastUpdateTime:
 676                     description: LastUpdateTime is the timestamp corresponding to
 677                       the last update of the Artifact.
 678                     format: date-time
 679                     type: string
 680                   metadata:
 681                     additionalProperties:
 682                       type: string
 683                     description: Metadata holds upstream information such as OCI annotations.
 684                     type: object
 685                   path:
 686                     description: Path is the relative file path of the Artifact. It
 687                       can be used to locate the file in the root of the Artifact storage
 688                       on the local file system of the controller managing the Source.
 689                     type: string
 690                   revision:
 691                     description: Revision is a human-readable identifier traceable
 692                       in the origin source system. It can be a Git commit SHA, Git
 693                       tag, a Helm chart version, etc.
 694                     type: string
 695                   size:
 696                     description: Size is the number of bytes in the file.
 697                     format: int64
 698                     type: integer
 699                   url:
 700                     description: URL is the HTTP address of the Artifact as exposed
 701                       by the controller managing the Source. It can be used to retrieve
 702                       the Artifact for consumption, e.g. by another controller applying
 703                       the Artifact contents.
 704                     type: string
 705                 required:
 706                 - lastUpdateTime
 707                 - path
 708                 - revision
 709                 - url
 710                 type: object
 711               conditions:
 712                 description: Conditions holds the conditions for the Bucket.
 713                 items:
 714                   description: "Condition contains details for one aspect of the current
 715                     state of this API Resource. --- This struct is intended for direct
 716                     use as an array at the field path .status.conditions.  For example,
 717                     \n type FooStatus struct{ // Represents the observations of a
 718                     foo's current state. // Known .status.conditions.type are: \"Available\",
 719                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
 720                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
 721                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
 722                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
 723                   properties:
 724                     lastTransitionTime:
 725                       description: lastTransitionTime is the last time the condition
 726                         transitioned from one status to another. This should be when
 727                         the underlying condition changed.  If that is not known, then
 728                         using the time when the API field changed is acceptable.
 729                       format: date-time
 730                       type: string
 731                     message:
 732                       description: message is a human readable message indicating
 733                         details about the transition. This may be an empty string.
 734                       maxLength: 32768
 735                       type: string
 736                     observedGeneration:
 737                       description: observedGeneration represents the .metadata.generation
 738                         that the condition was set based upon. For instance, if .metadata.generation
 739                         is currently 12, but the .status.conditions[x].observedGeneration
 740                         is 9, the condition is out of date with respect to the current
 741                         state of the instance.
 742                       format: int64
 743                       minimum: 0
 744                       type: integer
 745                     reason:
 746                       description: reason contains a programmatic identifier indicating
 747                         the reason for the condition's last transition. Producers
 748                         of specific condition types may define expected values and
 749                         meanings for this field, and whether the values are considered
 750                         a guaranteed API. The value should be a CamelCase string.
 751                         This field may not be empty.
 752                       maxLength: 1024
 753                       minLength: 1
 754                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
 755                       type: string
 756                     status:
 757                       description: status of the condition, one of True, False, Unknown.
 758                       enum:
 759                       - "True"
 760                       - "False"
 761                       - Unknown
 762                       type: string
 763                     type:
 764                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
 765                         --- Many .condition.type values are consistent across resources
 766                         like Available, but because arbitrary conditions can be useful
 767                         (see .node.status.conditions), the ability to deconflict is
 768                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
 769                       maxLength: 316
 770                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
 771                       type: string
 772                   required:
 773                   - lastTransitionTime
 774                   - message
 775                   - reason
 776                   - status
 777                   - type
 778                   type: object
 779                 type: array
 780               lastHandledReconcileAt:
 781                 description: LastHandledReconcileAt holds the value of the most recent
 782                   reconcile request value, so a change of the annotation value can
 783                   be detected.
 784                 type: string
 785               observedGeneration:
 786                 description: ObservedGeneration is the last observed generation of
 787                   the Bucket object.
 788                 format: int64
 789                 type: integer
 790               observedIgnore:
 791                 description: ObservedIgnore is the observed exclusion patterns used
 792                   for constructing the source artifact.
 793                 type: string
 794               url:
 795                 description: URL is the dynamic fetch link for the latest Artifact.
 796                   It is provided on a "best effort" basis, and using the precise BucketStatus.Artifact
 797                   data is recommended.
 798                 type: string
 799             type: object
 800         type: object
 801     served: true
 802     storage: true
 803     subresources:
 804       status: {}
 805 ---
 806 apiVersion: apiextensions.k8s.io/v1
 807 kind: CustomResourceDefinition
 808 metadata:
 809   annotations:
 810     controller-gen.kubebuilder.io/version: v0.12.0
 811   labels:
 812     app.kubernetes.io/component: source-controller
 813     app.kubernetes.io/instance: flux-system
 814     app.kubernetes.io/part-of: flux
 815     app.kubernetes.io/version: v2.1.2
 816   name: gitrepositories.source.toolkit.fluxcd.io
 817 spec:
 818   group: source.toolkit.fluxcd.io
 819   names:
 820     kind: GitRepository
 821     listKind: GitRepositoryList
 822     plural: gitrepositories
 823     shortNames:
 824     - gitrepo
 825     singular: gitrepository
 826   scope: Namespaced
 827   versions:
 828   - additionalPrinterColumns:
 829     - jsonPath: .spec.url
 830       name: URL
 831       type: string
 832     - jsonPath: .metadata.creationTimestamp
 833       name: Age
 834       type: date
 835     - jsonPath: .status.conditions[?(@.type=="Ready")].status
 836       name: Ready
 837       type: string
 838     - jsonPath: .status.conditions[?(@.type=="Ready")].message
 839       name: Status
 840       type: string
 841     name: v1
 842     schema:
 843       openAPIV3Schema:
 844         description: GitRepository is the Schema for the gitrepositories API.
 845         properties:
 846           apiVersion:
 847             description: 'APIVersion defines the versioned schema of this representation
 848               of an object. Servers should convert recognized schemas to the latest
 849               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
 850             type: string
 851           kind:
 852             description: 'Kind is a string value representing the REST resource this
 853               object represents. Servers may infer this from the endpoint the client
 854               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
 855             type: string
 856           metadata:
 857             type: object
 858           spec:
 859             description: GitRepositorySpec specifies the required configuration to
 860               produce an Artifact for a Git repository.
 861             properties:
 862               ignore:
 863                 description: Ignore overrides the set of excluded patterns in the
 864                   .sourceignore format (which is the same as .gitignore). If not provided,
 865                   a default will be used, consult the documentation for your version
 866                   to find out what those are.
 867                 type: string
 868               include:
 869                 description: Include specifies a list of GitRepository resources which
 870                   Artifacts should be included in the Artifact produced for this GitRepository.
 871                 items:
 872                   description: GitRepositoryInclude specifies a local reference to
 873                     a GitRepository which Artifact (sub-)contents must be included,
 874                     and where they should be placed.
 875                   properties:
 876                     fromPath:
 877                       description: FromPath specifies the path to copy contents from,
 878                         defaults to the root of the Artifact.
 879                       type: string
 880                     repository:
 881                       description: GitRepositoryRef specifies the GitRepository which
 882                         Artifact contents must be included.
 883                       properties:
 884                         name:
 885                           description: Name of the referent.
 886                           type: string
 887                       required:
 888                       - name
 889                       type: object
 890                     toPath:
 891                       description: ToPath specifies the path to copy contents to,
 892                         defaults to the name of the GitRepositoryRef.
 893                       type: string
 894                   required:
 895                   - repository
 896                   type: object
 897                 type: array
 898               interval:
 899                 description: Interval at which the GitRepository URL is checked for
 900                   updates. This interval is approximate and may be subject to jitter
 901                   to ensure efficient use of resources.
 902                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
 903                 type: string
 904               proxySecretRef:
 905                 description: ProxySecretRef specifies the Secret containing the proxy
 906                   configuration to use while communicating with the Git server.
 907                 properties:
 908                   name:
 909                     description: Name of the referent.
 910                     type: string
 911                 required:
 912                 - name
 913                 type: object
 914               recurseSubmodules:
 915                 description: RecurseSubmodules enables the initialization of all submodules
 916                   within the GitRepository as cloned from the URL, using their default
 917                   settings.
 918                 type: boolean
 919               ref:
 920                 description: Reference specifies the Git reference to resolve and
 921                   monitor for changes, defaults to the 'master' branch.
 922                 properties:
 923                   branch:
 924                     description: Branch to check out, defaults to 'master' if no other
 925                       field is defined.
 926                     type: string
 927                   commit:
 928                     description: "Commit SHA to check out, takes precedence over all
 929                       reference fields. \n This can be combined with Branch to shallow
 930                       clone the branch, in which the commit is expected to exist."
 931                     type: string
 932                   name:
 933                     description: "Name of the reference to check out; takes precedence
 934                       over Branch, Tag and SemVer. \n It must be a valid Git reference:
 935                       https://git-scm.com/docs/git-check-ref-format#_description Examples:
 936                       \"refs/heads/main\", \"refs/tags/v0.1.0\", \"refs/pull/420/head\",
 937                       \"refs/merge-requests/1/head\""
 938                     type: string
 939                   semver:
 940                     description: SemVer tag expression to check out, takes precedence
 941                       over Tag.
 942                     type: string
 943                   tag:
 944                     description: Tag to check out, takes precedence over Branch.
 945                     type: string
 946                 type: object
 947               secretRef:
 948                 description: SecretRef specifies the Secret containing authentication
 949                   credentials for the GitRepository. For HTTPS repositories the Secret
 950                   must contain 'username' and 'password' fields for basic auth or
 951                   'bearerToken' field for token auth. For SSH repositories the Secret
 952                   must contain 'identity' and 'known_hosts' fields.
 953                 properties:
 954                   name:
 955                     description: Name of the referent.
 956                     type: string
 957                 required:
 958                 - name
 959                 type: object
 960               suspend:
 961                 description: Suspend tells the controller to suspend the reconciliation
 962                   of this GitRepository.
 963                 type: boolean
 964               timeout:
 965                 default: 60s
 966                 description: Timeout for Git operations like cloning, defaults to
 967                   60s.
 968                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
 969                 type: string
 970               url:
 971                 description: URL specifies the Git repository URL, it can be an HTTP/S
 972                   or SSH address.
 973                 pattern: ^(http|https|ssh)://.*$
 974                 type: string
 975               verify:
 976                 description: Verification specifies the configuration to verify the
 977                   Git commit signature(s).
 978                 properties:
 979                   mode:
 980                     default: HEAD
 981                     description: "Mode specifies which Git object(s) should be verified.
 982                       \n The variants \"head\" and \"HEAD\" both imply the same thing,
 983                       i.e. verify the commit that the HEAD of the Git repository points
 984                       to. The variant \"head\" solely exists to ensure backwards compatibility."
 985                     enum:
 986                     - head
 987                     - HEAD
 988                     - Tag
 989                     - TagAndHEAD
 990                     type: string
 991                   secretRef:
 992                     description: SecretRef specifies the Secret containing the public
 993                       keys of trusted Git authors.
 994                     properties:
 995                       name:
 996                         description: Name of the referent.
 997                         type: string
 998                     required:
 999                     - name
1000                     type: object
1001                 required:
1002                 - secretRef
1003                 type: object
1004             required:
1005             - interval
1006             - url
1007             type: object
1008           status:
1009             default:
1010               observedGeneration: -1
1011             description: GitRepositoryStatus records the observed state of a Git repository.
1012             properties:
1013               artifact:
1014                 description: Artifact represents the last successful GitRepository
1015                   reconciliation.
1016                 properties:
1017                   digest:
1018                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
1019                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1020                     type: string
1021                   lastUpdateTime:
1022                     description: LastUpdateTime is the timestamp corresponding to
1023                       the last update of the Artifact.
1024                     format: date-time
1025                     type: string
1026                   metadata:
1027                     additionalProperties:
1028                       type: string
1029                     description: Metadata holds upstream information such as OCI annotations.
1030                     type: object
1031                   path:
1032                     description: Path is the relative file path of the Artifact. It
1033                       can be used to locate the file in the root of the Artifact storage
1034                       on the local file system of the controller managing the Source.
1035                     type: string
1036                   revision:
1037                     description: Revision is a human-readable identifier traceable
1038                       in the origin source system. It can be a Git commit SHA, Git
1039                       tag, a Helm chart version, etc.
1040                     type: string
1041                   size:
1042                     description: Size is the number of bytes in the file.
1043                     format: int64
1044                     type: integer
1045                   url:
1046                     description: URL is the HTTP address of the Artifact as exposed
1047                       by the controller managing the Source. It can be used to retrieve
1048                       the Artifact for consumption, e.g. by another controller applying
1049                       the Artifact contents.
1050                     type: string
1051                 required:
1052                 - lastUpdateTime
1053                 - path
1054                 - revision
1055                 - url
1056                 type: object
1057               conditions:
1058                 description: Conditions holds the conditions for the GitRepository.
1059                 items:
1060                   description: "Condition contains details for one aspect of the current
1061                     state of this API Resource. --- This struct is intended for direct
1062                     use as an array at the field path .status.conditions.  For example,
1063                     \n type FooStatus struct{ // Represents the observations of a
1064                     foo's current state. // Known .status.conditions.type are: \"Available\",
1065                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
1066                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
1067                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
1068                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
1069                   properties:
1070                     lastTransitionTime:
1071                       description: lastTransitionTime is the last time the condition
1072                         transitioned from one status to another. This should be when
1073                         the underlying condition changed.  If that is not known, then
1074                         using the time when the API field changed is acceptable.
1075                       format: date-time
1076                       type: string
1077                     message:
1078                       description: message is a human readable message indicating
1079                         details about the transition. This may be an empty string.
1080                       maxLength: 32768
1081                       type: string
1082                     observedGeneration:
1083                       description: observedGeneration represents the .metadata.generation
1084                         that the condition was set based upon. For instance, if .metadata.generation
1085                         is currently 12, but the .status.conditions[x].observedGeneration
1086                         is 9, the condition is out of date with respect to the current
1087                         state of the instance.
1088                       format: int64
1089                       minimum: 0
1090                       type: integer
1091                     reason:
1092                       description: reason contains a programmatic identifier indicating
1093                         the reason for the condition's last transition. Producers
1094                         of specific condition types may define expected values and
1095                         meanings for this field, and whether the values are considered
1096                         a guaranteed API. The value should be a CamelCase string.
1097                         This field may not be empty.
1098                       maxLength: 1024
1099                       minLength: 1
1100                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1101                       type: string
1102                     status:
1103                       description: status of the condition, one of True, False, Unknown.
1104                       enum:
1105                       - "True"
1106                       - "False"
1107                       - Unknown
1108                       type: string
1109                     type:
1110                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1111                         --- Many .condition.type values are consistent across resources
1112                         like Available, but because arbitrary conditions can be useful
1113                         (see .node.status.conditions), the ability to deconflict is
1114                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1115                       maxLength: 316
1116                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1117                       type: string
1118                   required:
1119                   - lastTransitionTime
1120                   - message
1121                   - reason
1122                   - status
1123                   - type
1124                   type: object
1125                 type: array
1126               includedArtifacts:
1127                 description: IncludedArtifacts contains a list of the last successfully
1128                   included Artifacts as instructed by GitRepositorySpec.Include.
1129                 items:
1130                   description: Artifact represents the output of a Source reconciliation.
1131                   properties:
1132                     digest:
1133                       description: Digest is the digest of the file in the form of
1134                         '<algorithm>:<checksum>'.
1135                       pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1136                       type: string
1137                     lastUpdateTime:
1138                       description: LastUpdateTime is the timestamp corresponding to
1139                         the last update of the Artifact.
1140                       format: date-time
1141                       type: string
1142                     metadata:
1143                       additionalProperties:
1144                         type: string
1145                       description: Metadata holds upstream information such as OCI
1146                         annotations.
1147                       type: object
1148                     path:
1149                       description: Path is the relative file path of the Artifact.
1150                         It can be used to locate the file in the root of the Artifact
1151                         storage on the local file system of the controller managing
1152                         the Source.
1153                       type: string
1154                     revision:
1155                       description: Revision is a human-readable identifier traceable
1156                         in the origin source system. It can be a Git commit SHA, Git
1157                         tag, a Helm chart version, etc.
1158                       type: string
1159                     size:
1160                       description: Size is the number of bytes in the file.
1161                       format: int64
1162                       type: integer
1163                     url:
1164                       description: URL is the HTTP address of the Artifact as exposed
1165                         by the controller managing the Source. It can be used to retrieve
1166                         the Artifact for consumption, e.g. by another controller applying
1167                         the Artifact contents.
1168                       type: string
1169                   required:
1170                   - lastUpdateTime
1171                   - path
1172                   - revision
1173                   - url
1174                   type: object
1175                 type: array
1176               lastHandledReconcileAt:
1177                 description: LastHandledReconcileAt holds the value of the most recent
1178                   reconcile request value, so a change of the annotation value can
1179                   be detected.
1180                 type: string
1181               observedGeneration:
1182                 description: ObservedGeneration is the last observed generation of
1183                   the GitRepository object.
1184                 format: int64
1185                 type: integer
1186               observedIgnore:
1187                 description: ObservedIgnore is the observed exclusion patterns used
1188                   for constructing the source artifact.
1189                 type: string
1190               observedInclude:
1191                 description: ObservedInclude is the observed list of GitRepository
1192                   resources used to produce the current Artifact.
1193                 items:
1194                   description: GitRepositoryInclude specifies a local reference to
1195                     a GitRepository which Artifact (sub-)contents must be included,
1196                     and where they should be placed.
1197                   properties:
1198                     fromPath:
1199                       description: FromPath specifies the path to copy contents from,
1200                         defaults to the root of the Artifact.
1201                       type: string
1202                     repository:
1203                       description: GitRepositoryRef specifies the GitRepository which
1204                         Artifact contents must be included.
1205                       properties:
1206                         name:
1207                           description: Name of the referent.
1208                           type: string
1209                       required:
1210                       - name
1211                       type: object
1212                     toPath:
1213                       description: ToPath specifies the path to copy contents to,
1214                         defaults to the name of the GitRepositoryRef.
1215                       type: string
1216                   required:
1217                   - repository
1218                   type: object
1219                 type: array
1220               observedRecurseSubmodules:
1221                 description: ObservedRecurseSubmodules is the observed resource submodules
1222                   configuration used to produce the current Artifact.
1223                 type: boolean
1224               sourceVerificationMode:
1225                 description: SourceVerificationMode is the last used verification
1226                   mode indicating which Git object(s) have been verified.
1227                 type: string
1228             type: object
1229         type: object
1230     served: true
1231     storage: true
1232     subresources:
1233       status: {}
1234   - additionalPrinterColumns:
1235     - jsonPath: .spec.url
1236       name: URL
1237       type: string
1238     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1239       name: Ready
1240       type: string
1241     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1242       name: Status
1243       type: string
1244     - jsonPath: .metadata.creationTimestamp
1245       name: Age
1246       type: date
1247     deprecated: true
1248     deprecationWarning: v1beta1 GitRepository is deprecated, upgrade to v1
1249     name: v1beta1
1250     schema:
1251       openAPIV3Schema:
1252         description: GitRepository is the Schema for the gitrepositories API
1253         properties:
1254           apiVersion:
1255             description: 'APIVersion defines the versioned schema of this representation
1256               of an object. Servers should convert recognized schemas to the latest
1257               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1258             type: string
1259           kind:
1260             description: 'Kind is a string value representing the REST resource this
1261               object represents. Servers may infer this from the endpoint the client
1262               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1263             type: string
1264           metadata:
1265             type: object
1266           spec:
1267             description: GitRepositorySpec defines the desired state of a Git repository.
1268             properties:
1269               accessFrom:
1270                 description: AccessFrom defines an Access Control List for allowing
1271                   cross-namespace references to this object.
1272                 properties:
1273                   namespaceSelectors:
1274                     description: NamespaceSelectors is the list of namespace selectors
1275                       to which this ACL applies. Items in this list are evaluated
1276                       using a logical OR operation.
1277                     items:
1278                       description: NamespaceSelector selects the namespaces to which
1279                         this ACL applies. An empty map of MatchLabels matches all
1280                         namespaces in a cluster.
1281                       properties:
1282                         matchLabels:
1283                           additionalProperties:
1284                             type: string
1285                           description: MatchLabels is a map of {key,value} pairs.
1286                             A single {key,value} in the matchLabels map is equivalent
1287                             to an element of matchExpressions, whose key field is
1288                             "key", the operator is "In", and the values array contains
1289                             only "value". The requirements are ANDed.
1290                           type: object
1291                       type: object
1292                     type: array
1293                 required:
1294                 - namespaceSelectors
1295                 type: object
1296               gitImplementation:
1297                 default: go-git
1298                 description: Determines which git client library to use. Defaults
1299                   to go-git, valid values are ('go-git', 'libgit2').
1300                 enum:
1301                 - go-git
1302                 - libgit2
1303                 type: string
1304               ignore:
1305                 description: Ignore overrides the set of excluded patterns in the
1306                   .sourceignore format (which is the same as .gitignore). If not provided,
1307                   a default will be used, consult the documentation for your version
1308                   to find out what those are.
1309                 type: string
1310               include:
1311                 description: Extra git repositories to map into the repository
1312                 items:
1313                   description: GitRepositoryInclude defines a source with a from and
1314                     to path.
1315                   properties:
1316                     fromPath:
1317                       description: The path to copy contents from, defaults to the
1318                         root directory.
1319                       type: string
1320                     repository:
1321                       description: Reference to a GitRepository to include.
1322                       properties:
1323                         name:
1324                           description: Name of the referent.
1325                           type: string
1326                       required:
1327                       - name
1328                       type: object
1329                     toPath:
1330                       description: The path to copy contents to, defaults to the name
1331                         of the source ref.
1332                       type: string
1333                   required:
1334                   - repository
1335                   type: object
1336                 type: array
1337               interval:
1338                 description: The interval at which to check for repository updates.
1339                 type: string
1340               recurseSubmodules:
1341                 description: When enabled, after the clone is created, initializes
1342                   all submodules within, using their default settings. This option
1343                   is available only when using the 'go-git' GitImplementation.
1344                 type: boolean
1345               ref:
1346                 description: The Git reference to checkout and monitor for changes,
1347                   defaults to master branch.
1348                 properties:
1349                   branch:
1350                     description: The Git branch to checkout, defaults to master.
1351                     type: string
1352                   commit:
1353                     description: The Git commit SHA to checkout, if specified Tag
1354                       filters will be ignored.
1355                     type: string
1356                   semver:
1357                     description: The Git tag semver expression, takes precedence over
1358                       Tag.
1359                     type: string
1360                   tag:
1361                     description: The Git tag to checkout, takes precedence over Branch.
1362                     type: string
1363                 type: object
1364               secretRef:
1365                 description: The secret name containing the Git credentials. For HTTPS
1366                   repositories the secret must contain username and password fields.
1367                   For SSH repositories the secret must contain identity and known_hosts
1368                   fields.
1369                 properties:
1370                   name:
1371                     description: Name of the referent.
1372                     type: string
1373                 required:
1374                 - name
1375                 type: object
1376               suspend:
1377                 description: This flag tells the controller to suspend the reconciliation
1378                   of this source.
1379                 type: boolean
1380               timeout:
1381                 default: 60s
1382                 description: The timeout for remote Git operations like cloning, defaults
1383                   to 60s.
1384                 type: string
1385               url:
1386                 description: The repository URL, can be a HTTP/S or SSH address.
1387                 pattern: ^(http|https|ssh)://.*$
1388                 type: string
1389               verify:
1390                 description: Verify OpenPGP signature for the Git commit HEAD points
1391                   to.
1392                 properties:
1393                   mode:
1394                     description: Mode describes what git object should be verified,
1395                       currently ('head').
1396                     enum:
1397                     - head
1398                     type: string
1399                   secretRef:
1400                     description: The secret name containing the public keys of all
1401                       trusted Git authors.
1402                     properties:
1403                       name:
1404                         description: Name of the referent.
1405                         type: string
1406                     required:
1407                     - name
1408                     type: object
1409                 required:
1410                 - mode
1411                 type: object
1412             required:
1413             - interval
1414             - url
1415             type: object
1416           status:
1417             default:
1418               observedGeneration: -1
1419             description: GitRepositoryStatus defines the observed state of a Git repository.
1420             properties:
1421               artifact:
1422                 description: Artifact represents the output of the last successful
1423                   repository sync.
1424                 properties:
1425                   checksum:
1426                     description: Checksum is the SHA256 checksum of the artifact.
1427                     type: string
1428                   lastUpdateTime:
1429                     description: LastUpdateTime is the timestamp corresponding to
1430                       the last update of this artifact.
1431                     format: date-time
1432                     type: string
1433                   path:
1434                     description: Path is the relative file path of this artifact.
1435                     type: string
1436                   revision:
1437                     description: Revision is a human readable identifier traceable
1438                       in the origin source system. It can be a Git commit SHA, Git
1439                       tag, a Helm index timestamp, a Helm chart version, etc.
1440                     type: string
1441                   url:
1442                     description: URL is the HTTP address of this artifact.
1443                     type: string
1444                 required:
1445                 - path
1446                 - url
1447                 type: object
1448               conditions:
1449                 description: Conditions holds the conditions for the GitRepository.
1450                 items:
1451                   description: "Condition contains details for one aspect of the current
1452                     state of this API Resource. --- This struct is intended for direct
1453                     use as an array at the field path .status.conditions.  For example,
1454                     \n type FooStatus struct{ // Represents the observations of a
1455                     foo's current state. // Known .status.conditions.type are: \"Available\",
1456                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
1457                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
1458                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
1459                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
1460                   properties:
1461                     lastTransitionTime:
1462                       description: lastTransitionTime is the last time the condition
1463                         transitioned from one status to another. This should be when
1464                         the underlying condition changed.  If that is not known, then
1465                         using the time when the API field changed is acceptable.
1466                       format: date-time
1467                       type: string
1468                     message:
1469                       description: message is a human readable message indicating
1470                         details about the transition. This may be an empty string.
1471                       maxLength: 32768
1472                       type: string
1473                     observedGeneration:
1474                       description: observedGeneration represents the .metadata.generation
1475                         that the condition was set based upon. For instance, if .metadata.generation
1476                         is currently 12, but the .status.conditions[x].observedGeneration
1477                         is 9, the condition is out of date with respect to the current
1478                         state of the instance.
1479                       format: int64
1480                       minimum: 0
1481                       type: integer
1482                     reason:
1483                       description: reason contains a programmatic identifier indicating
1484                         the reason for the condition's last transition. Producers
1485                         of specific condition types may define expected values and
1486                         meanings for this field, and whether the values are considered
1487                         a guaranteed API. The value should be a CamelCase string.
1488                         This field may not be empty.
1489                       maxLength: 1024
1490                       minLength: 1
1491                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1492                       type: string
1493                     status:
1494                       description: status of the condition, one of True, False, Unknown.
1495                       enum:
1496                       - "True"
1497                       - "False"
1498                       - Unknown
1499                       type: string
1500                     type:
1501                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1502                         --- Many .condition.type values are consistent across resources
1503                         like Available, but because arbitrary conditions can be useful
1504                         (see .node.status.conditions), the ability to deconflict is
1505                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1506                       maxLength: 316
1507                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1508                       type: string
1509                   required:
1510                   - lastTransitionTime
1511                   - message
1512                   - reason
1513                   - status
1514                   - type
1515                   type: object
1516                 type: array
1517               includedArtifacts:
1518                 description: IncludedArtifacts represents the included artifacts from
1519                   the last successful repository sync.
1520                 items:
1521                   description: Artifact represents the output of a source synchronisation.
1522                   properties:
1523                     checksum:
1524                       description: Checksum is the SHA256 checksum of the artifact.
1525                       type: string
1526                     lastUpdateTime:
1527                       description: LastUpdateTime is the timestamp corresponding to
1528                         the last update of this artifact.
1529                       format: date-time
1530                       type: string
1531                     path:
1532                       description: Path is the relative file path of this artifact.
1533                       type: string
1534                     revision:
1535                       description: Revision is a human readable identifier traceable
1536                         in the origin source system. It can be a Git commit SHA, Git
1537                         tag, a Helm index timestamp, a Helm chart version, etc.
1538                       type: string
1539                     url:
1540                       description: URL is the HTTP address of this artifact.
1541                       type: string
1542                   required:
1543                   - path
1544                   - url
1545                   type: object
1546                 type: array
1547               lastHandledReconcileAt:
1548                 description: LastHandledReconcileAt holds the value of the most recent
1549                   reconcile request value, so a change of the annotation value can
1550                   be detected.
1551                 type: string
1552               observedGeneration:
1553                 description: ObservedGeneration is the last observed generation.
1554                 format: int64
1555                 type: integer
1556               url:
1557                 description: URL is the download link for the artifact output of the
1558                   last repository sync.
1559                 type: string
1560             type: object
1561         type: object
1562     served: true
1563     storage: false
1564     subresources:
1565       status: {}
1566   - additionalPrinterColumns:
1567     - jsonPath: .spec.url
1568       name: URL
1569       type: string
1570     - jsonPath: .metadata.creationTimestamp
1571       name: Age
1572       type: date
1573     - jsonPath: .status.conditions[?(@.type=="Ready")].status
1574       name: Ready
1575       type: string
1576     - jsonPath: .status.conditions[?(@.type=="Ready")].message
1577       name: Status
1578       type: string
1579     deprecated: true
1580     deprecationWarning: v1beta2 GitRepository is deprecated, upgrade to v1
1581     name: v1beta2
1582     schema:
1583       openAPIV3Schema:
1584         description: GitRepository is the Schema for the gitrepositories API.
1585         properties:
1586           apiVersion:
1587             description: 'APIVersion defines the versioned schema of this representation
1588               of an object. Servers should convert recognized schemas to the latest
1589               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
1590             type: string
1591           kind:
1592             description: 'Kind is a string value representing the REST resource this
1593               object represents. Servers may infer this from the endpoint the client
1594               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
1595             type: string
1596           metadata:
1597             type: object
1598           spec:
1599             description: GitRepositorySpec specifies the required configuration to
1600               produce an Artifact for a Git repository.
1601             properties:
1602               accessFrom:
1603                 description: 'AccessFrom specifies an Access Control List for allowing
1604                   cross-namespace references to this object. NOTE: Not implemented,
1605                   provisional as of https://github.com/fluxcd/flux2/pull/2092'
1606                 properties:
1607                   namespaceSelectors:
1608                     description: NamespaceSelectors is the list of namespace selectors
1609                       to which this ACL applies. Items in this list are evaluated
1610                       using a logical OR operation.
1611                     items:
1612                       description: NamespaceSelector selects the namespaces to which
1613                         this ACL applies. An empty map of MatchLabels matches all
1614                         namespaces in a cluster.
1615                       properties:
1616                         matchLabels:
1617                           additionalProperties:
1618                             type: string
1619                           description: MatchLabels is a map of {key,value} pairs.
1620                             A single {key,value} in the matchLabels map is equivalent
1621                             to an element of matchExpressions, whose key field is
1622                             "key", the operator is "In", and the values array contains
1623                             only "value". The requirements are ANDed.
1624                           type: object
1625                       type: object
1626                     type: array
1627                 required:
1628                 - namespaceSelectors
1629                 type: object
1630               gitImplementation:
1631                 default: go-git
1632                 description: 'GitImplementation specifies which Git client library
1633                   implementation to use. Defaults to ''go-git'', valid values are
1634                   (''go-git'', ''libgit2''). Deprecated: gitImplementation is deprecated
1635                   now that ''go-git'' is the only supported implementation.'
1636                 enum:
1637                 - go-git
1638                 - libgit2
1639                 type: string
1640               ignore:
1641                 description: Ignore overrides the set of excluded patterns in the
1642                   .sourceignore format (which is the same as .gitignore). If not provided,
1643                   a default will be used, consult the documentation for your version
1644                   to find out what those are.
1645                 type: string
1646               include:
1647                 description: Include specifies a list of GitRepository resources which
1648                   Artifacts should be included in the Artifact produced for this GitRepository.
1649                 items:
1650                   description: GitRepositoryInclude specifies a local reference to
1651                     a GitRepository which Artifact (sub-)contents must be included,
1652                     and where they should be placed.
1653                   properties:
1654                     fromPath:
1655                       description: FromPath specifies the path to copy contents from,
1656                         defaults to the root of the Artifact.
1657                       type: string
1658                     repository:
1659                       description: GitRepositoryRef specifies the GitRepository which
1660                         Artifact contents must be included.
1661                       properties:
1662                         name:
1663                           description: Name of the referent.
1664                           type: string
1665                       required:
1666                       - name
1667                       type: object
1668                     toPath:
1669                       description: ToPath specifies the path to copy contents to,
1670                         defaults to the name of the GitRepositoryRef.
1671                       type: string
1672                   required:
1673                   - repository
1674                   type: object
1675                 type: array
1676               interval:
1677                 description: Interval at which to check the GitRepository for updates.
1678                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
1679                 type: string
1680               recurseSubmodules:
1681                 description: RecurseSubmodules enables the initialization of all submodules
1682                   within the GitRepository as cloned from the URL, using their default
1683                   settings.
1684                 type: boolean
1685               ref:
1686                 description: Reference specifies the Git reference to resolve and
1687                   monitor for changes, defaults to the 'master' branch.
1688                 properties:
1689                   branch:
1690                     description: Branch to check out, defaults to 'master' if no other
1691                       field is defined.
1692                     type: string
1693                   commit:
1694                     description: "Commit SHA to check out, takes precedence over all
1695                       reference fields. \n This can be combined with Branch to shallow
1696                       clone the branch, in which the commit is expected to exist."
1697                     type: string
1698                   name:
1699                     description: "Name of the reference to check out; takes precedence
1700                       over Branch, Tag and SemVer. \n It must be a valid Git reference:
1701                       https://git-scm.com/docs/git-check-ref-format#_description Examples:
1702                       \"refs/heads/main\", \"refs/tags/v0.1.0\", \"refs/pull/420/head\",
1703                       \"refs/merge-requests/1/head\""
1704                     type: string
1705                   semver:
1706                     description: SemVer tag expression to check out, takes precedence
1707                       over Tag.
1708                     type: string
1709                   tag:
1710                     description: Tag to check out, takes precedence over Branch.
1711                     type: string
1712                 type: object
1713               secretRef:
1714                 description: SecretRef specifies the Secret containing authentication
1715                   credentials for the GitRepository. For HTTPS repositories the Secret
1716                   must contain 'username' and 'password' fields for basic auth or
1717                   'bearerToken' field for token auth. For SSH repositories the Secret
1718                   must contain 'identity' and 'known_hosts' fields.
1719                 properties:
1720                   name:
1721                     description: Name of the referent.
1722                     type: string
1723                 required:
1724                 - name
1725                 type: object
1726               suspend:
1727                 description: Suspend tells the controller to suspend the reconciliation
1728                   of this GitRepository.
1729                 type: boolean
1730               timeout:
1731                 default: 60s
1732                 description: Timeout for Git operations like cloning, defaults to
1733                   60s.
1734                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
1735                 type: string
1736               url:
1737                 description: URL specifies the Git repository URL, it can be an HTTP/S
1738                   or SSH address.
1739                 pattern: ^(http|https|ssh)://.*$
1740                 type: string
1741               verify:
1742                 description: Verification specifies the configuration to verify the
1743                   Git commit signature(s).
1744                 properties:
1745                   mode:
1746                     description: Mode specifies what Git object should be verified,
1747                       currently ('head').
1748                     enum:
1749                     - head
1750                     type: string
1751                   secretRef:
1752                     description: SecretRef specifies the Secret containing the public
1753                       keys of trusted Git authors.
1754                     properties:
1755                       name:
1756                         description: Name of the referent.
1757                         type: string
1758                     required:
1759                     - name
1760                     type: object
1761                 required:
1762                 - mode
1763                 - secretRef
1764                 type: object
1765             required:
1766             - interval
1767             - url
1768             type: object
1769           status:
1770             default:
1771               observedGeneration: -1
1772             description: GitRepositoryStatus records the observed state of a Git repository.
1773             properties:
1774               artifact:
1775                 description: Artifact represents the last successful GitRepository
1776                   reconciliation.
1777                 properties:
1778                   digest:
1779                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
1780                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1781                     type: string
1782                   lastUpdateTime:
1783                     description: LastUpdateTime is the timestamp corresponding to
1784                       the last update of the Artifact.
1785                     format: date-time
1786                     type: string
1787                   metadata:
1788                     additionalProperties:
1789                       type: string
1790                     description: Metadata holds upstream information such as OCI annotations.
1791                     type: object
1792                   path:
1793                     description: Path is the relative file path of the Artifact. It
1794                       can be used to locate the file in the root of the Artifact storage
1795                       on the local file system of the controller managing the Source.
1796                     type: string
1797                   revision:
1798                     description: Revision is a human-readable identifier traceable
1799                       in the origin source system. It can be a Git commit SHA, Git
1800                       tag, a Helm chart version, etc.
1801                     type: string
1802                   size:
1803                     description: Size is the number of bytes in the file.
1804                     format: int64
1805                     type: integer
1806                   url:
1807                     description: URL is the HTTP address of the Artifact as exposed
1808                       by the controller managing the Source. It can be used to retrieve
1809                       the Artifact for consumption, e.g. by another controller applying
1810                       the Artifact contents.
1811                     type: string
1812                 required:
1813                 - lastUpdateTime
1814                 - path
1815                 - revision
1816                 - url
1817                 type: object
1818               conditions:
1819                 description: Conditions holds the conditions for the GitRepository.
1820                 items:
1821                   description: "Condition contains details for one aspect of the current
1822                     state of this API Resource. --- This struct is intended for direct
1823                     use as an array at the field path .status.conditions.  For example,
1824                     \n type FooStatus struct{ // Represents the observations of a
1825                     foo's current state. // Known .status.conditions.type are: \"Available\",
1826                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
1827                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
1828                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
1829                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
1830                   properties:
1831                     lastTransitionTime:
1832                       description: lastTransitionTime is the last time the condition
1833                         transitioned from one status to another. This should be when
1834                         the underlying condition changed.  If that is not known, then
1835                         using the time when the API field changed is acceptable.
1836                       format: date-time
1837                       type: string
1838                     message:
1839                       description: message is a human readable message indicating
1840                         details about the transition. This may be an empty string.
1841                       maxLength: 32768
1842                       type: string
1843                     observedGeneration:
1844                       description: observedGeneration represents the .metadata.generation
1845                         that the condition was set based upon. For instance, if .metadata.generation
1846                         is currently 12, but the .status.conditions[x].observedGeneration
1847                         is 9, the condition is out of date with respect to the current
1848                         state of the instance.
1849                       format: int64
1850                       minimum: 0
1851                       type: integer
1852                     reason:
1853                       description: reason contains a programmatic identifier indicating
1854                         the reason for the condition's last transition. Producers
1855                         of specific condition types may define expected values and
1856                         meanings for this field, and whether the values are considered
1857                         a guaranteed API. The value should be a CamelCase string.
1858                         This field may not be empty.
1859                       maxLength: 1024
1860                       minLength: 1
1861                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
1862                       type: string
1863                     status:
1864                       description: status of the condition, one of True, False, Unknown.
1865                       enum:
1866                       - "True"
1867                       - "False"
1868                       - Unknown
1869                       type: string
1870                     type:
1871                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
1872                         --- Many .condition.type values are consistent across resources
1873                         like Available, but because arbitrary conditions can be useful
1874                         (see .node.status.conditions), the ability to deconflict is
1875                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
1876                       maxLength: 316
1877                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
1878                       type: string
1879                   required:
1880                   - lastTransitionTime
1881                   - message
1882                   - reason
1883                   - status
1884                   - type
1885                   type: object
1886                 type: array
1887               contentConfigChecksum:
1888                 description: "ContentConfigChecksum is a checksum of all the configurations
1889                   related to the content of the source artifact: - .spec.ignore -
1890                   .spec.recurseSubmodules - .spec.included and the checksum of the
1891                   included artifacts observed in .status.observedGeneration version
1892                   of the object. This can be used to determine if the content of the
1893                   included repository has changed. It has the format of `<algo>:<checksum>`,
1894                   for example: `sha256:<checksum>`. \n Deprecated: Replaced with explicit
1895                   fields for observed artifact content config in the status."
1896                 type: string
1897               includedArtifacts:
1898                 description: IncludedArtifacts contains a list of the last successfully
1899                   included Artifacts as instructed by GitRepositorySpec.Include.
1900                 items:
1901                   description: Artifact represents the output of a Source reconciliation.
1902                   properties:
1903                     digest:
1904                       description: Digest is the digest of the file in the form of
1905                         '<algorithm>:<checksum>'.
1906                       pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
1907                       type: string
1908                     lastUpdateTime:
1909                       description: LastUpdateTime is the timestamp corresponding to
1910                         the last update of the Artifact.
1911                       format: date-time
1912                       type: string
1913                     metadata:
1914                       additionalProperties:
1915                         type: string
1916                       description: Metadata holds upstream information such as OCI
1917                         annotations.
1918                       type: object
1919                     path:
1920                       description: Path is the relative file path of the Artifact.
1921                         It can be used to locate the file in the root of the Artifact
1922                         storage on the local file system of the controller managing
1923                         the Source.
1924                       type: string
1925                     revision:
1926                       description: Revision is a human-readable identifier traceable
1927                         in the origin source system. It can be a Git commit SHA, Git
1928                         tag, a Helm chart version, etc.
1929                       type: string
1930                     size:
1931                       description: Size is the number of bytes in the file.
1932                       format: int64
1933                       type: integer
1934                     url:
1935                       description: URL is the HTTP address of the Artifact as exposed
1936                         by the controller managing the Source. It can be used to retrieve
1937                         the Artifact for consumption, e.g. by another controller applying
1938                         the Artifact contents.
1939                       type: string
1940                   required:
1941                   - lastUpdateTime
1942                   - path
1943                   - revision
1944                   - url
1945                   type: object
1946                 type: array
1947               lastHandledReconcileAt:
1948                 description: LastHandledReconcileAt holds the value of the most recent
1949                   reconcile request value, so a change of the annotation value can
1950                   be detected.
1951                 type: string
1952               observedGeneration:
1953                 description: ObservedGeneration is the last observed generation of
1954                   the GitRepository object.
1955                 format: int64
1956                 type: integer
1957               observedIgnore:
1958                 description: ObservedIgnore is the observed exclusion patterns used
1959                   for constructing the source artifact.
1960                 type: string
1961               observedInclude:
1962                 description: ObservedInclude is the observed list of GitRepository
1963                   resources used to to produce the current Artifact.
1964                 items:
1965                   description: GitRepositoryInclude specifies a local reference to
1966                     a GitRepository which Artifact (sub-)contents must be included,
1967                     and where they should be placed.
1968                   properties:
1969                     fromPath:
1970                       description: FromPath specifies the path to copy contents from,
1971                         defaults to the root of the Artifact.
1972                       type: string
1973                     repository:
1974                       description: GitRepositoryRef specifies the GitRepository which
1975                         Artifact contents must be included.
1976                       properties:
1977                         name:
1978                           description: Name of the referent.
1979                           type: string
1980                       required:
1981                       - name
1982                       type: object
1983                     toPath:
1984                       description: ToPath specifies the path to copy contents to,
1985                         defaults to the name of the GitRepositoryRef.
1986                       type: string
1987                   required:
1988                   - repository
1989                   type: object
1990                 type: array
1991               observedRecurseSubmodules:
1992                 description: ObservedRecurseSubmodules is the observed resource submodules
1993                   configuration used to produce the current Artifact.
1994                 type: boolean
1995               url:
1996                 description: URL is the dynamic fetch link for the latest Artifact.
1997                   It is provided on a "best effort" basis, and using the precise GitRepositoryStatus.Artifact
1998                   data is recommended.
1999                 type: string
2000             type: object
2001         type: object
2002     served: true
2003     storage: false
2004     subresources:
2005       status: {}
2006 ---
2007 apiVersion: apiextensions.k8s.io/v1
2008 kind: CustomResourceDefinition
2009 metadata:
2010   annotations:
2011     controller-gen.kubebuilder.io/version: v0.12.0
2012   labels:
2013     app.kubernetes.io/component: source-controller
2014     app.kubernetes.io/instance: flux-system
2015     app.kubernetes.io/part-of: flux
2016     app.kubernetes.io/version: v2.1.2
2017   name: helmcharts.source.toolkit.fluxcd.io
2018 spec:
2019   group: source.toolkit.fluxcd.io
2020   names:
2021     kind: HelmChart
2022     listKind: HelmChartList
2023     plural: helmcharts
2024     shortNames:
2025     - hc
2026     singular: helmchart
2027   scope: Namespaced
2028   versions:
2029   - additionalPrinterColumns:
2030     - jsonPath: .spec.chart
2031       name: Chart
2032       type: string
2033     - jsonPath: .spec.version
2034       name: Version
2035       type: string
2036     - jsonPath: .spec.sourceRef.kind
2037       name: Source Kind
2038       type: string
2039     - jsonPath: .spec.sourceRef.name
2040       name: Source Name
2041       type: string
2042     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2043       name: Ready
2044       type: string
2045     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2046       name: Status
2047       type: string
2048     - jsonPath: .metadata.creationTimestamp
2049       name: Age
2050       type: date
2051     name: v1beta1
2052     schema:
2053       openAPIV3Schema:
2054         description: HelmChart is the Schema for the helmcharts API
2055         properties:
2056           apiVersion:
2057             description: 'APIVersion defines the versioned schema of this representation
2058               of an object. Servers should convert recognized schemas to the latest
2059               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2060             type: string
2061           kind:
2062             description: 'Kind is a string value representing the REST resource this
2063               object represents. Servers may infer this from the endpoint the client
2064               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2065             type: string
2066           metadata:
2067             type: object
2068           spec:
2069             description: HelmChartSpec defines the desired state of a Helm chart.
2070             properties:
2071               accessFrom:
2072                 description: AccessFrom defines an Access Control List for allowing
2073                   cross-namespace references to this object.
2074                 properties:
2075                   namespaceSelectors:
2076                     description: NamespaceSelectors is the list of namespace selectors
2077                       to which this ACL applies. Items in this list are evaluated
2078                       using a logical OR operation.
2079                     items:
2080                       description: NamespaceSelector selects the namespaces to which
2081                         this ACL applies. An empty map of MatchLabels matches all
2082                         namespaces in a cluster.
2083                       properties:
2084                         matchLabels:
2085                           additionalProperties:
2086                             type: string
2087                           description: MatchLabels is a map of {key,value} pairs.
2088                             A single {key,value} in the matchLabels map is equivalent
2089                             to an element of matchExpressions, whose key field is
2090                             "key", the operator is "In", and the values array contains
2091                             only "value". The requirements are ANDed.
2092                           type: object
2093                       type: object
2094                     type: array
2095                 required:
2096                 - namespaceSelectors
2097                 type: object
2098               chart:
2099                 description: The name or path the Helm chart is available at in the
2100                   SourceRef.
2101                 type: string
2102               interval:
2103                 description: The interval at which to check the Source for updates.
2104                 type: string
2105               reconcileStrategy:
2106                 default: ChartVersion
2107                 description: Determines what enables the creation of a new artifact.
2108                   Valid values are ('ChartVersion', 'Revision'). See the documentation
2109                   of the values for an explanation on their behavior. Defaults to
2110                   ChartVersion when omitted.
2111                 enum:
2112                 - ChartVersion
2113                 - Revision
2114                 type: string
2115               sourceRef:
2116                 description: The reference to the Source the chart is available at.
2117                 properties:
2118                   apiVersion:
2119                     description: APIVersion of the referent.
2120                     type: string
2121                   kind:
2122                     description: Kind of the referent, valid values are ('HelmRepository',
2123                       'GitRepository', 'Bucket').
2124                     enum:
2125                     - HelmRepository
2126                     - GitRepository
2127                     - Bucket
2128                     type: string
2129                   name:
2130                     description: Name of the referent.
2131                     type: string
2132                 required:
2133                 - kind
2134                 - name
2135                 type: object
2136               suspend:
2137                 description: This flag tells the controller to suspend the reconciliation
2138                   of this source.
2139                 type: boolean
2140               valuesFile:
2141                 description: Alternative values file to use as the default chart values,
2142                   expected to be a relative path in the SourceRef. Deprecated in favor
2143                   of ValuesFiles, for backwards compatibility the file defined here
2144                   is merged before the ValuesFiles items. Ignored when omitted.
2145                 type: string
2146               valuesFiles:
2147                 description: Alternative list of values files to use as the chart
2148                   values (values.yaml is not included by default), expected to be
2149                   a relative path in the SourceRef. Values files are merged in the
2150                   order of this list with the last file overriding the first. Ignored
2151                   when omitted.
2152                 items:
2153                   type: string
2154                 type: array
2155               version:
2156                 default: '*'
2157                 description: The chart version semver expression, ignored for charts
2158                   from GitRepository and Bucket sources. Defaults to latest when omitted.
2159                 type: string
2160             required:
2161             - chart
2162             - interval
2163             - sourceRef
2164             type: object
2165           status:
2166             default:
2167               observedGeneration: -1
2168             description: HelmChartStatus defines the observed state of the HelmChart.
2169             properties:
2170               artifact:
2171                 description: Artifact represents the output of the last successful
2172                   chart sync.
2173                 properties:
2174                   checksum:
2175                     description: Checksum is the SHA256 checksum of the artifact.
2176                     type: string
2177                   lastUpdateTime:
2178                     description: LastUpdateTime is the timestamp corresponding to
2179                       the last update of this artifact.
2180                     format: date-time
2181                     type: string
2182                   path:
2183                     description: Path is the relative file path of this artifact.
2184                     type: string
2185                   revision:
2186                     description: Revision is a human readable identifier traceable
2187                       in the origin source system. It can be a Git commit SHA, Git
2188                       tag, a Helm index timestamp, a Helm chart version, etc.
2189                     type: string
2190                   url:
2191                     description: URL is the HTTP address of this artifact.
2192                     type: string
2193                 required:
2194                 - path
2195                 - url
2196                 type: object
2197               conditions:
2198                 description: Conditions holds the conditions for the HelmChart.
2199                 items:
2200                   description: "Condition contains details for one aspect of the current
2201                     state of this API Resource. --- This struct is intended for direct
2202                     use as an array at the field path .status.conditions.  For example,
2203                     \n type FooStatus struct{ // Represents the observations of a
2204                     foo's current state. // Known .status.conditions.type are: \"Available\",
2205                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
2206                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
2207                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
2208                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
2209                   properties:
2210                     lastTransitionTime:
2211                       description: lastTransitionTime is the last time the condition
2212                         transitioned from one status to another. This should be when
2213                         the underlying condition changed.  If that is not known, then
2214                         using the time when the API field changed is acceptable.
2215                       format: date-time
2216                       type: string
2217                     message:
2218                       description: message is a human readable message indicating
2219                         details about the transition. This may be an empty string.
2220                       maxLength: 32768
2221                       type: string
2222                     observedGeneration:
2223                       description: observedGeneration represents the .metadata.generation
2224                         that the condition was set based upon. For instance, if .metadata.generation
2225                         is currently 12, but the .status.conditions[x].observedGeneration
2226                         is 9, the condition is out of date with respect to the current
2227                         state of the instance.
2228                       format: int64
2229                       minimum: 0
2230                       type: integer
2231                     reason:
2232                       description: reason contains a programmatic identifier indicating
2233                         the reason for the condition's last transition. Producers
2234                         of specific condition types may define expected values and
2235                         meanings for this field, and whether the values are considered
2236                         a guaranteed API. The value should be a CamelCase string.
2237                         This field may not be empty.
2238                       maxLength: 1024
2239                       minLength: 1
2240                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2241                       type: string
2242                     status:
2243                       description: status of the condition, one of True, False, Unknown.
2244                       enum:
2245                       - "True"
2246                       - "False"
2247                       - Unknown
2248                       type: string
2249                     type:
2250                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2251                         --- Many .condition.type values are consistent across resources
2252                         like Available, but because arbitrary conditions can be useful
2253                         (see .node.status.conditions), the ability to deconflict is
2254                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2255                       maxLength: 316
2256                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2257                       type: string
2258                   required:
2259                   - lastTransitionTime
2260                   - message
2261                   - reason
2262                   - status
2263                   - type
2264                   type: object
2265                 type: array
2266               lastHandledReconcileAt:
2267                 description: LastHandledReconcileAt holds the value of the most recent
2268                   reconcile request value, so a change of the annotation value can
2269                   be detected.
2270                 type: string
2271               observedGeneration:
2272                 description: ObservedGeneration is the last observed generation.
2273                 format: int64
2274                 type: integer
2275               url:
2276                 description: URL is the download link for the last chart pulled.
2277                 type: string
2278             type: object
2279         type: object
2280     served: true
2281     storage: false
2282     subresources:
2283       status: {}
2284   - additionalPrinterColumns:
2285     - jsonPath: .spec.chart
2286       name: Chart
2287       type: string
2288     - jsonPath: .spec.version
2289       name: Version
2290       type: string
2291     - jsonPath: .spec.sourceRef.kind
2292       name: Source Kind
2293       type: string
2294     - jsonPath: .spec.sourceRef.name
2295       name: Source Name
2296       type: string
2297     - jsonPath: .metadata.creationTimestamp
2298       name: Age
2299       type: date
2300     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2301       name: Ready
2302       type: string
2303     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2304       name: Status
2305       type: string
2306     name: v1beta2
2307     schema:
2308       openAPIV3Schema:
2309         description: HelmChart is the Schema for the helmcharts API.
2310         properties:
2311           apiVersion:
2312             description: 'APIVersion defines the versioned schema of this representation
2313               of an object. Servers should convert recognized schemas to the latest
2314               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2315             type: string
2316           kind:
2317             description: 'Kind is a string value representing the REST resource this
2318               object represents. Servers may infer this from the endpoint the client
2319               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2320             type: string
2321           metadata:
2322             type: object
2323           spec:
2324             description: HelmChartSpec specifies the desired state of a Helm chart.
2325             properties:
2326               accessFrom:
2327                 description: 'AccessFrom specifies an Access Control List for allowing
2328                   cross-namespace references to this object. NOTE: Not implemented,
2329                   provisional as of https://github.com/fluxcd/flux2/pull/2092'
2330                 properties:
2331                   namespaceSelectors:
2332                     description: NamespaceSelectors is the list of namespace selectors
2333                       to which this ACL applies. Items in this list are evaluated
2334                       using a logical OR operation.
2335                     items:
2336                       description: NamespaceSelector selects the namespaces to which
2337                         this ACL applies. An empty map of MatchLabels matches all
2338                         namespaces in a cluster.
2339                       properties:
2340                         matchLabels:
2341                           additionalProperties:
2342                             type: string
2343                           description: MatchLabels is a map of {key,value} pairs.
2344                             A single {key,value} in the matchLabels map is equivalent
2345                             to an element of matchExpressions, whose key field is
2346                             "key", the operator is "In", and the values array contains
2347                             only "value". The requirements are ANDed.
2348                           type: object
2349                       type: object
2350                     type: array
2351                 required:
2352                 - namespaceSelectors
2353                 type: object
2354               chart:
2355                 description: Chart is the name or path the Helm chart is available
2356                   at in the SourceRef.
2357                 type: string
2358               interval:
2359                 description: Interval at which the HelmChart SourceRef is checked
2360                   for updates. This interval is approximate and may be subject to
2361                   jitter to ensure efficient use of resources.
2362                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
2363                 type: string
2364               reconcileStrategy:
2365                 default: ChartVersion
2366                 description: ReconcileStrategy determines what enables the creation
2367                   of a new artifact. Valid values are ('ChartVersion', 'Revision').
2368                   See the documentation of the values for an explanation on their
2369                   behavior. Defaults to ChartVersion when omitted.
2370                 enum:
2371                 - ChartVersion
2372                 - Revision
2373                 type: string
2374               sourceRef:
2375                 description: SourceRef is the reference to the Source the chart is
2376                   available at.
2377                 properties:
2378                   apiVersion:
2379                     description: APIVersion of the referent.
2380                     type: string
2381                   kind:
2382                     description: Kind of the referent, valid values are ('HelmRepository',
2383                       'GitRepository', 'Bucket').
2384                     enum:
2385                     - HelmRepository
2386                     - GitRepository
2387                     - Bucket
2388                     type: string
2389                   name:
2390                     description: Name of the referent.
2391                     type: string
2392                 required:
2393                 - kind
2394                 - name
2395                 type: object
2396               suspend:
2397                 description: Suspend tells the controller to suspend the reconciliation
2398                   of this source.
2399                 type: boolean
2400               valuesFile:
2401                 description: ValuesFile is an alternative values file to use as the
2402                   default chart values, expected to be a relative path in the SourceRef.
2403                   Deprecated in favor of ValuesFiles, for backwards compatibility
2404                   the file specified here is merged before the ValuesFiles items.
2405                   Ignored when omitted.
2406                 type: string
2407               valuesFiles:
2408                 description: ValuesFiles is an alternative list of values files to
2409                   use as the chart values (values.yaml is not included by default),
2410                   expected to be a relative path in the SourceRef. Values files are
2411                   merged in the order of this list with the last file overriding the
2412                   first. Ignored when omitted.
2413                 items:
2414                   type: string
2415                 type: array
2416               verify:
2417                 description: Verify contains the secret name containing the trusted
2418                   public keys used to verify the signature and specifies which provider
2419                   to use to check whether OCI image is authentic. This field is only
2420                   supported when using HelmRepository source with spec.type 'oci'.
2421                   Chart dependencies, which are not bundled in the umbrella chart
2422                   artifact, are not verified.
2423                 properties:
2424                   provider:
2425                     default: cosign
2426                     description: Provider specifies the technology used to sign the
2427                       OCI Artifact.
2428                     enum:
2429                     - cosign
2430                     type: string
2431                   secretRef:
2432                     description: SecretRef specifies the Kubernetes Secret containing
2433                       the trusted public keys.
2434                     properties:
2435                       name:
2436                         description: Name of the referent.
2437                         type: string
2438                     required:
2439                     - name
2440                     type: object
2441                 required:
2442                 - provider
2443                 type: object
2444               version:
2445                 default: '*'
2446                 description: Version is the chart version semver expression, ignored
2447                   for charts from GitRepository and Bucket sources. Defaults to latest
2448                   when omitted.
2449                 type: string
2450             required:
2451             - chart
2452             - interval
2453             - sourceRef
2454             type: object
2455           status:
2456             default:
2457               observedGeneration: -1
2458             description: HelmChartStatus records the observed state of the HelmChart.
2459             properties:
2460               artifact:
2461                 description: Artifact represents the output of the last successful
2462                   reconciliation.
2463                 properties:
2464                   digest:
2465                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
2466                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
2467                     type: string
2468                   lastUpdateTime:
2469                     description: LastUpdateTime is the timestamp corresponding to
2470                       the last update of the Artifact.
2471                     format: date-time
2472                     type: string
2473                   metadata:
2474                     additionalProperties:
2475                       type: string
2476                     description: Metadata holds upstream information such as OCI annotations.
2477                     type: object
2478                   path:
2479                     description: Path is the relative file path of the Artifact. It
2480                       can be used to locate the file in the root of the Artifact storage
2481                       on the local file system of the controller managing the Source.
2482                     type: string
2483                   revision:
2484                     description: Revision is a human-readable identifier traceable
2485                       in the origin source system. It can be a Git commit SHA, Git
2486                       tag, a Helm chart version, etc.
2487                     type: string
2488                   size:
2489                     description: Size is the number of bytes in the file.
2490                     format: int64
2491                     type: integer
2492                   url:
2493                     description: URL is the HTTP address of the Artifact as exposed
2494                       by the controller managing the Source. It can be used to retrieve
2495                       the Artifact for consumption, e.g. by another controller applying
2496                       the Artifact contents.
2497                     type: string
2498                 required:
2499                 - lastUpdateTime
2500                 - path
2501                 - revision
2502                 - url
2503                 type: object
2504               conditions:
2505                 description: Conditions holds the conditions for the HelmChart.
2506                 items:
2507                   description: "Condition contains details for one aspect of the current
2508                     state of this API Resource. --- This struct is intended for direct
2509                     use as an array at the field path .status.conditions.  For example,
2510                     \n type FooStatus struct{ // Represents the observations of a
2511                     foo's current state. // Known .status.conditions.type are: \"Available\",
2512                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
2513                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
2514                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
2515                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
2516                   properties:
2517                     lastTransitionTime:
2518                       description: lastTransitionTime is the last time the condition
2519                         transitioned from one status to another. This should be when
2520                         the underlying condition changed.  If that is not known, then
2521                         using the time when the API field changed is acceptable.
2522                       format: date-time
2523                       type: string
2524                     message:
2525                       description: message is a human readable message indicating
2526                         details about the transition. This may be an empty string.
2527                       maxLength: 32768
2528                       type: string
2529                     observedGeneration:
2530                       description: observedGeneration represents the .metadata.generation
2531                         that the condition was set based upon. For instance, if .metadata.generation
2532                         is currently 12, but the .status.conditions[x].observedGeneration
2533                         is 9, the condition is out of date with respect to the current
2534                         state of the instance.
2535                       format: int64
2536                       minimum: 0
2537                       type: integer
2538                     reason:
2539                       description: reason contains a programmatic identifier indicating
2540                         the reason for the condition's last transition. Producers
2541                         of specific condition types may define expected values and
2542                         meanings for this field, and whether the values are considered
2543                         a guaranteed API. The value should be a CamelCase string.
2544                         This field may not be empty.
2545                       maxLength: 1024
2546                       minLength: 1
2547                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2548                       type: string
2549                     status:
2550                       description: status of the condition, one of True, False, Unknown.
2551                       enum:
2552                       - "True"
2553                       - "False"
2554                       - Unknown
2555                       type: string
2556                     type:
2557                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2558                         --- Many .condition.type values are consistent across resources
2559                         like Available, but because arbitrary conditions can be useful
2560                         (see .node.status.conditions), the ability to deconflict is
2561                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2562                       maxLength: 316
2563                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2564                       type: string
2565                   required:
2566                   - lastTransitionTime
2567                   - message
2568                   - reason
2569                   - status
2570                   - type
2571                   type: object
2572                 type: array
2573               lastHandledReconcileAt:
2574                 description: LastHandledReconcileAt holds the value of the most recent
2575                   reconcile request value, so a change of the annotation value can
2576                   be detected.
2577                 type: string
2578               observedChartName:
2579                 description: ObservedChartName is the last observed chart name as
2580                   specified by the resolved chart reference.
2581                 type: string
2582               observedGeneration:
2583                 description: ObservedGeneration is the last observed generation of
2584                   the HelmChart object.
2585                 format: int64
2586                 type: integer
2587               observedSourceArtifactRevision:
2588                 description: ObservedSourceArtifactRevision is the last observed Artifact.Revision
2589                   of the HelmChartSpec.SourceRef.
2590                 type: string
2591               url:
2592                 description: URL is the dynamic fetch link for the latest Artifact.
2593                   It is provided on a "best effort" basis, and using the precise BucketStatus.Artifact
2594                   data is recommended.
2595                 type: string
2596             type: object
2597         type: object
2598     served: true
2599     storage: true
2600     subresources:
2601       status: {}
2602 ---
2603 apiVersion: apiextensions.k8s.io/v1
2604 kind: CustomResourceDefinition
2605 metadata:
2606   annotations:
2607     controller-gen.kubebuilder.io/version: v0.12.0
2608   labels:
2609     app.kubernetes.io/component: source-controller
2610     app.kubernetes.io/instance: flux-system
2611     app.kubernetes.io/part-of: flux
2612     app.kubernetes.io/version: v2.1.2
2613   name: helmrepositories.source.toolkit.fluxcd.io
2614 spec:
2615   group: source.toolkit.fluxcd.io
2616   names:
2617     kind: HelmRepository
2618     listKind: HelmRepositoryList
2619     plural: helmrepositories
2620     shortNames:
2621     - helmrepo
2622     singular: helmrepository
2623   scope: Namespaced
2624   versions:
2625   - additionalPrinterColumns:
2626     - jsonPath: .spec.url
2627       name: URL
2628       type: string
2629     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2630       name: Ready
2631       type: string
2632     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2633       name: Status
2634       type: string
2635     - jsonPath: .metadata.creationTimestamp
2636       name: Age
2637       type: date
2638     name: v1beta1
2639     schema:
2640       openAPIV3Schema:
2641         description: HelmRepository is the Schema for the helmrepositories API
2642         properties:
2643           apiVersion:
2644             description: 'APIVersion defines the versioned schema of this representation
2645               of an object. Servers should convert recognized schemas to the latest
2646               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2647             type: string
2648           kind:
2649             description: 'Kind is a string value representing the REST resource this
2650               object represents. Servers may infer this from the endpoint the client
2651               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2652             type: string
2653           metadata:
2654             type: object
2655           spec:
2656             description: HelmRepositorySpec defines the reference to a Helm repository.
2657             properties:
2658               accessFrom:
2659                 description: AccessFrom defines an Access Control List for allowing
2660                   cross-namespace references to this object.
2661                 properties:
2662                   namespaceSelectors:
2663                     description: NamespaceSelectors is the list of namespace selectors
2664                       to which this ACL applies. Items in this list are evaluated
2665                       using a logical OR operation.
2666                     items:
2667                       description: NamespaceSelector selects the namespaces to which
2668                         this ACL applies. An empty map of MatchLabels matches all
2669                         namespaces in a cluster.
2670                       properties:
2671                         matchLabels:
2672                           additionalProperties:
2673                             type: string
2674                           description: MatchLabels is a map of {key,value} pairs.
2675                             A single {key,value} in the matchLabels map is equivalent
2676                             to an element of matchExpressions, whose key field is
2677                             "key", the operator is "In", and the values array contains
2678                             only "value". The requirements are ANDed.
2679                           type: object
2680                       type: object
2681                     type: array
2682                 required:
2683                 - namespaceSelectors
2684                 type: object
2685               interval:
2686                 description: The interval at which to check the upstream for updates.
2687                 type: string
2688               passCredentials:
2689                 description: PassCredentials allows the credentials from the SecretRef
2690                   to be passed on to a host that does not match the host as defined
2691                   in URL. This may be required if the host of the advertised chart
2692                   URLs in the index differ from the defined URL. Enabling this should
2693                   be done with caution, as it can potentially result in credentials
2694                   getting stolen in a MITM-attack.
2695                 type: boolean
2696               secretRef:
2697                 description: The name of the secret containing authentication credentials
2698                   for the Helm repository. For HTTP/S basic auth the secret must contain
2699                   username and password fields. For TLS the secret must contain a
2700                   certFile and keyFile, and/or caFile fields.
2701                 properties:
2702                   name:
2703                     description: Name of the referent.
2704                     type: string
2705                 required:
2706                 - name
2707                 type: object
2708               suspend:
2709                 description: This flag tells the controller to suspend the reconciliation
2710                   of this source.
2711                 type: boolean
2712               timeout:
2713                 default: 60s
2714                 description: The timeout of index downloading, defaults to 60s.
2715                 type: string
2716               url:
2717                 description: The Helm repository URL, a valid URL contains at least
2718                   a protocol and host.
2719                 type: string
2720             required:
2721             - interval
2722             - url
2723             type: object
2724           status:
2725             default:
2726               observedGeneration: -1
2727             description: HelmRepositoryStatus defines the observed state of the HelmRepository.
2728             properties:
2729               artifact:
2730                 description: Artifact represents the output of the last successful
2731                   repository sync.
2732                 properties:
2733                   checksum:
2734                     description: Checksum is the SHA256 checksum of the artifact.
2735                     type: string
2736                   lastUpdateTime:
2737                     description: LastUpdateTime is the timestamp corresponding to
2738                       the last update of this artifact.
2739                     format: date-time
2740                     type: string
2741                   path:
2742                     description: Path is the relative file path of this artifact.
2743                     type: string
2744                   revision:
2745                     description: Revision is a human readable identifier traceable
2746                       in the origin source system. It can be a Git commit SHA, Git
2747                       tag, a Helm index timestamp, a Helm chart version, etc.
2748                     type: string
2749                   url:
2750                     description: URL is the HTTP address of this artifact.
2751                     type: string
2752                 required:
2753                 - path
2754                 - url
2755                 type: object
2756               conditions:
2757                 description: Conditions holds the conditions for the HelmRepository.
2758                 items:
2759                   description: "Condition contains details for one aspect of the current
2760                     state of this API Resource. --- This struct is intended for direct
2761                     use as an array at the field path .status.conditions.  For example,
2762                     \n type FooStatus struct{ // Represents the observations of a
2763                     foo's current state. // Known .status.conditions.type are: \"Available\",
2764                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
2765                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
2766                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
2767                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
2768                   properties:
2769                     lastTransitionTime:
2770                       description: lastTransitionTime is the last time the condition
2771                         transitioned from one status to another. This should be when
2772                         the underlying condition changed.  If that is not known, then
2773                         using the time when the API field changed is acceptable.
2774                       format: date-time
2775                       type: string
2776                     message:
2777                       description: message is a human readable message indicating
2778                         details about the transition. This may be an empty string.
2779                       maxLength: 32768
2780                       type: string
2781                     observedGeneration:
2782                       description: observedGeneration represents the .metadata.generation
2783                         that the condition was set based upon. For instance, if .metadata.generation
2784                         is currently 12, but the .status.conditions[x].observedGeneration
2785                         is 9, the condition is out of date with respect to the current
2786                         state of the instance.
2787                       format: int64
2788                       minimum: 0
2789                       type: integer
2790                     reason:
2791                       description: reason contains a programmatic identifier indicating
2792                         the reason for the condition's last transition. Producers
2793                         of specific condition types may define expected values and
2794                         meanings for this field, and whether the values are considered
2795                         a guaranteed API. The value should be a CamelCase string.
2796                         This field may not be empty.
2797                       maxLength: 1024
2798                       minLength: 1
2799                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
2800                       type: string
2801                     status:
2802                       description: status of the condition, one of True, False, Unknown.
2803                       enum:
2804                       - "True"
2805                       - "False"
2806                       - Unknown
2807                       type: string
2808                     type:
2809                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
2810                         --- Many .condition.type values are consistent across resources
2811                         like Available, but because arbitrary conditions can be useful
2812                         (see .node.status.conditions), the ability to deconflict is
2813                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
2814                       maxLength: 316
2815                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
2816                       type: string
2817                   required:
2818                   - lastTransitionTime
2819                   - message
2820                   - reason
2821                   - status
2822                   - type
2823                   type: object
2824                 type: array
2825               lastHandledReconcileAt:
2826                 description: LastHandledReconcileAt holds the value of the most recent
2827                   reconcile request value, so a change of the annotation value can
2828                   be detected.
2829                 type: string
2830               observedGeneration:
2831                 description: ObservedGeneration is the last observed generation.
2832                 format: int64
2833                 type: integer
2834               url:
2835                 description: URL is the download link for the last index fetched.
2836                 type: string
2837             type: object
2838         type: object
2839     served: true
2840     storage: false
2841     subresources:
2842       status: {}
2843   - additionalPrinterColumns:
2844     - jsonPath: .spec.url
2845       name: URL
2846       type: string
2847     - jsonPath: .metadata.creationTimestamp
2848       name: Age
2849       type: date
2850     - jsonPath: .status.conditions[?(@.type=="Ready")].status
2851       name: Ready
2852       type: string
2853     - jsonPath: .status.conditions[?(@.type=="Ready")].message
2854       name: Status
2855       type: string
2856     name: v1beta2
2857     schema:
2858       openAPIV3Schema:
2859         description: HelmRepository is the Schema for the helmrepositories API.
2860         properties:
2861           apiVersion:
2862             description: 'APIVersion defines the versioned schema of this representation
2863               of an object. Servers should convert recognized schemas to the latest
2864               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
2865             type: string
2866           kind:
2867             description: 'Kind is a string value representing the REST resource this
2868               object represents. Servers may infer this from the endpoint the client
2869               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
2870             type: string
2871           metadata:
2872             type: object
2873           spec:
2874             description: HelmRepositorySpec specifies the required configuration to
2875               produce an Artifact for a Helm repository index YAML.
2876             properties:
2877               accessFrom:
2878                 description: 'AccessFrom specifies an Access Control List for allowing
2879                   cross-namespace references to this object. NOTE: Not implemented,
2880                   provisional as of https://github.com/fluxcd/flux2/pull/2092'
2881                 properties:
2882                   namespaceSelectors:
2883                     description: NamespaceSelectors is the list of namespace selectors
2884                       to which this ACL applies. Items in this list are evaluated
2885                       using a logical OR operation.
2886                     items:
2887                       description: NamespaceSelector selects the namespaces to which
2888                         this ACL applies. An empty map of MatchLabels matches all
2889                         namespaces in a cluster.
2890                       properties:
2891                         matchLabels:
2892                           additionalProperties:
2893                             type: string
2894                           description: MatchLabels is a map of {key,value} pairs.
2895                             A single {key,value} in the matchLabels map is equivalent
2896                             to an element of matchExpressions, whose key field is
2897                             "key", the operator is "In", and the values array contains
2898                             only "value". The requirements are ANDed.
2899                           type: object
2900                       type: object
2901                     type: array
2902                 required:
2903                 - namespaceSelectors
2904                 type: object
2905               certSecretRef:
2906                 description: "CertSecretRef can be given the name of a Secret containing
2907                   either or both of \n - a PEM-encoded client certificate (`tls.crt`)
2908                   and private key (`tls.key`); - a PEM-encoded CA certificate (`ca.crt`)
2909                   \n and whichever are supplied, will be used for connecting to the
2910                   registry. The client cert and key are useful if you are authenticating
2911                   with a certificate; the CA cert is useful if you are using a self-signed
2912                   server certificate. The Secret must be of type `Opaque` or `kubernetes.io/tls`.
2913                   \n It takes precedence over the values specified in the Secret referred
2914                   to by `.spec.secretRef`."
2915                 properties:
2916                   name:
2917                     description: Name of the referent.
2918                     type: string
2919                 required:
2920                 - name
2921                 type: object
2922               interval:
2923                 description: Interval at which the HelmRepository URL is checked for
2924                   updates. This interval is approximate and may be subject to jitter
2925                   to ensure efficient use of resources.
2926                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
2927                 type: string
2928               passCredentials:
2929                 description: PassCredentials allows the credentials from the SecretRef
2930                   to be passed on to a host that does not match the host as defined
2931                   in URL. This may be required if the host of the advertised chart
2932                   URLs in the index differ from the defined URL. Enabling this should
2933                   be done with caution, as it can potentially result in credentials
2934                   getting stolen in a MITM-attack.
2935                 type: boolean
2936               provider:
2937                 default: generic
2938                 description: Provider used for authentication, can be 'aws', 'azure',
2939                   'gcp' or 'generic'. This field is optional, and only taken into
2940                   account if the .spec.type field is set to 'oci'. When not specified,
2941                   defaults to 'generic'.
2942                 enum:
2943                 - generic
2944                 - aws
2945                 - azure
2946                 - gcp
2947                 type: string
2948               secretRef:
2949                 description: SecretRef specifies the Secret containing authentication
2950                   credentials for the HelmRepository. For HTTP/S basic auth the secret
2951                   must contain 'username' and 'password' fields. Support for TLS auth
2952                   using the 'certFile' and 'keyFile', and/or 'caFile' keys is deprecated.
2953                   Please use `.spec.certSecretRef` instead.
2954                 properties:
2955                   name:
2956                     description: Name of the referent.
2957                     type: string
2958                 required:
2959                 - name
2960                 type: object
2961               suspend:
2962                 description: Suspend tells the controller to suspend the reconciliation
2963                   of this HelmRepository.
2964                 type: boolean
2965               timeout:
2966                 default: 60s
2967                 description: Timeout is used for the index fetch operation for an
2968                   HTTPS helm repository, and for remote OCI Repository operations
2969                   like pulling for an OCI helm repository. Its default value is 60s.
2970                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
2971                 type: string
2972               type:
2973                 description: Type of the HelmRepository. When this field is set to  "oci",
2974                   the URL field value must be prefixed with "oci://".
2975                 enum:
2976                 - default
2977                 - oci
2978                 type: string
2979               url:
2980                 description: URL of the Helm repository, a valid URL contains at least
2981                   a protocol and host.
2982                 type: string
2983             required:
2984             - interval
2985             - url
2986             type: object
2987           status:
2988             default:
2989               observedGeneration: -1
2990             description: HelmRepositoryStatus records the observed state of the HelmRepository.
2991             properties:
2992               artifact:
2993                 description: Artifact represents the last successful HelmRepository
2994                   reconciliation.
2995                 properties:
2996                   digest:
2997                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
2998                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
2999                     type: string
3000                   lastUpdateTime:
3001                     description: LastUpdateTime is the timestamp corresponding to
3002                       the last update of the Artifact.
3003                     format: date-time
3004                     type: string
3005                   metadata:
3006                     additionalProperties:
3007                       type: string
3008                     description: Metadata holds upstream information such as OCI annotations.
3009                     type: object
3010                   path:
3011                     description: Path is the relative file path of the Artifact. It
3012                       can be used to locate the file in the root of the Artifact storage
3013                       on the local file system of the controller managing the Source.
3014                     type: string
3015                   revision:
3016                     description: Revision is a human-readable identifier traceable
3017                       in the origin source system. It can be a Git commit SHA, Git
3018                       tag, a Helm chart version, etc.
3019                     type: string
3020                   size:
3021                     description: Size is the number of bytes in the file.
3022                     format: int64
3023                     type: integer
3024                   url:
3025                     description: URL is the HTTP address of the Artifact as exposed
3026                       by the controller managing the Source. It can be used to retrieve
3027                       the Artifact for consumption, e.g. by another controller applying
3028                       the Artifact contents.
3029                     type: string
3030                 required:
3031                 - lastUpdateTime
3032                 - path
3033                 - revision
3034                 - url
3035                 type: object
3036               conditions:
3037                 description: Conditions holds the conditions for the HelmRepository.
3038                 items:
3039                   description: "Condition contains details for one aspect of the current
3040                     state of this API Resource. --- This struct is intended for direct
3041                     use as an array at the field path .status.conditions.  For example,
3042                     \n type FooStatus struct{ // Represents the observations of a
3043                     foo's current state. // Known .status.conditions.type are: \"Available\",
3044                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
3045                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
3046                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
3047                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
3048                   properties:
3049                     lastTransitionTime:
3050                       description: lastTransitionTime is the last time the condition
3051                         transitioned from one status to another. This should be when
3052                         the underlying condition changed.  If that is not known, then
3053                         using the time when the API field changed is acceptable.
3054                       format: date-time
3055                       type: string
3056                     message:
3057                       description: message is a human readable message indicating
3058                         details about the transition. This may be an empty string.
3059                       maxLength: 32768
3060                       type: string
3061                     observedGeneration:
3062                       description: observedGeneration represents the .metadata.generation
3063                         that the condition was set based upon. For instance, if .metadata.generation
3064                         is currently 12, but the .status.conditions[x].observedGeneration
3065                         is 9, the condition is out of date with respect to the current
3066                         state of the instance.
3067                       format: int64
3068                       minimum: 0
3069                       type: integer
3070                     reason:
3071                       description: reason contains a programmatic identifier indicating
3072                         the reason for the condition's last transition. Producers
3073                         of specific condition types may define expected values and
3074                         meanings for this field, and whether the values are considered
3075                         a guaranteed API. The value should be a CamelCase string.
3076                         This field may not be empty.
3077                       maxLength: 1024
3078                       minLength: 1
3079                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3080                       type: string
3081                     status:
3082                       description: status of the condition, one of True, False, Unknown.
3083                       enum:
3084                       - "True"
3085                       - "False"
3086                       - Unknown
3087                       type: string
3088                     type:
3089                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3090                         --- Many .condition.type values are consistent across resources
3091                         like Available, but because arbitrary conditions can be useful
3092                         (see .node.status.conditions), the ability to deconflict is
3093                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3094                       maxLength: 316
3095                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3096                       type: string
3097                   required:
3098                   - lastTransitionTime
3099                   - message
3100                   - reason
3101                   - status
3102                   - type
3103                   type: object
3104                 type: array
3105               lastHandledReconcileAt:
3106                 description: LastHandledReconcileAt holds the value of the most recent
3107                   reconcile request value, so a change of the annotation value can
3108                   be detected.
3109                 type: string
3110               observedGeneration:
3111                 description: ObservedGeneration is the last observed generation of
3112                   the HelmRepository object.
3113                 format: int64
3114                 type: integer
3115               url:
3116                 description: URL is the dynamic fetch link for the latest Artifact.
3117                   It is provided on a "best effort" basis, and using the precise HelmRepositoryStatus.Artifact
3118                   data is recommended.
3119                 type: string
3120             type: object
3121         type: object
3122     served: true
3123     storage: true
3124     subresources:
3125       status: {}
3126 ---
3127 apiVersion: apiextensions.k8s.io/v1
3128 kind: CustomResourceDefinition
3129 metadata:
3130   annotations:
3131     controller-gen.kubebuilder.io/version: v0.12.0
3132   labels:
3133     app.kubernetes.io/component: source-controller
3134     app.kubernetes.io/instance: flux-system
3135     app.kubernetes.io/part-of: flux
3136     app.kubernetes.io/version: v2.1.2
3137   name: ocirepositories.source.toolkit.fluxcd.io
3138 spec:
3139   group: source.toolkit.fluxcd.io
3140   names:
3141     kind: OCIRepository
3142     listKind: OCIRepositoryList
3143     plural: ocirepositories
3144     shortNames:
3145     - ocirepo
3146     singular: ocirepository
3147   scope: Namespaced
3148   versions:
3149   - additionalPrinterColumns:
3150     - jsonPath: .spec.url
3151       name: URL
3152       type: string
3153     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3154       name: Ready
3155       type: string
3156     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3157       name: Status
3158       type: string
3159     - jsonPath: .metadata.creationTimestamp
3160       name: Age
3161       type: date
3162     name: v1beta2
3163     schema:
3164       openAPIV3Schema:
3165         description: OCIRepository is the Schema for the ocirepositories API
3166         properties:
3167           apiVersion:
3168             description: 'APIVersion defines the versioned schema of this representation
3169               of an object. Servers should convert recognized schemas to the latest
3170               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3171             type: string
3172           kind:
3173             description: 'Kind is a string value representing the REST resource this
3174               object represents. Servers may infer this from the endpoint the client
3175               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3176             type: string
3177           metadata:
3178             type: object
3179           spec:
3180             description: OCIRepositorySpec defines the desired state of OCIRepository
3181             properties:
3182               certSecretRef:
3183                 description: "CertSecretRef can be given the name of a Secret containing
3184                   either or both of \n - a PEM-encoded client certificate (`tls.crt`)
3185                   and private key (`tls.key`); - a PEM-encoded CA certificate (`ca.crt`)
3186                   \n and whichever are supplied, will be used for connecting to the
3187                   registry. The client cert and key are useful if you are authenticating
3188                   with a certificate; the CA cert is useful if you are using a self-signed
3189                   server certificate. The Secret must be of type `Opaque` or `kubernetes.io/tls`.
3190                   \n Note: Support for the `caFile`, `certFile` and `keyFile` keys
3191                   have been deprecated."
3192                 properties:
3193                   name:
3194                     description: Name of the referent.
3195                     type: string
3196                 required:
3197                 - name
3198                 type: object
3199               ignore:
3200                 description: Ignore overrides the set of excluded patterns in the
3201                   .sourceignore format (which is the same as .gitignore). If not provided,
3202                   a default will be used, consult the documentation for your version
3203                   to find out what those are.
3204                 type: string
3205               insecure:
3206                 description: Insecure allows connecting to a non-TLS HTTP container
3207                   registry.
3208                 type: boolean
3209               interval:
3210                 description: Interval at which the OCIRepository URL is checked for
3211                   updates. This interval is approximate and may be subject to jitter
3212                   to ensure efficient use of resources.
3213                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
3214                 type: string
3215               layerSelector:
3216                 description: LayerSelector specifies which layer should be extracted
3217                   from the OCI artifact. When not specified, the first layer found
3218                   in the artifact is selected.
3219                 properties:
3220                   mediaType:
3221                     description: MediaType specifies the OCI media type of the layer
3222                       which should be extracted from the OCI Artifact. The first layer
3223                       matching this type is selected.
3224                     type: string
3225                   operation:
3226                     description: Operation specifies how the selected layer should
3227                       be processed. By default, the layer compressed content is extracted
3228                       to storage. When the operation is set to 'copy', the layer compressed
3229                       content is persisted to storage as it is.
3230                     enum:
3231                     - extract
3232                     - copy
3233                     type: string
3234                 type: object
3235               provider:
3236                 default: generic
3237                 description: The provider used for authentication, can be 'aws', 'azure',
3238                   'gcp' or 'generic'. When not specified, defaults to 'generic'.
3239                 enum:
3240                 - generic
3241                 - aws
3242                 - azure
3243                 - gcp
3244                 type: string
3245               ref:
3246                 description: The OCI reference to pull and monitor for changes, defaults
3247                   to the latest tag.
3248                 properties:
3249                   digest:
3250                     description: Digest is the image digest to pull, takes precedence
3251                       over SemVer. The value should be in the format 'sha256:<HASH>'.
3252                     type: string
3253                   semver:
3254                     description: SemVer is the range of tags to pull selecting the
3255                       latest within the range, takes precedence over Tag.
3256                     type: string
3257                   tag:
3258                     description: Tag is the image tag to pull, defaults to latest.
3259                     type: string
3260                 type: object
3261               secretRef:
3262                 description: SecretRef contains the secret name containing the registry
3263                   login credentials to resolve image metadata. The secret must be
3264                   of type kubernetes.io/dockerconfigjson.
3265                 properties:
3266                   name:
3267                     description: Name of the referent.
3268                     type: string
3269                 required:
3270                 - name
3271                 type: object
3272               serviceAccountName:
3273                 description: 'ServiceAccountName is the name of the Kubernetes ServiceAccount
3274                   used to authenticate the image pull if the service account has attached
3275                   pull secrets. For more information: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account'
3276                 type: string
3277               suspend:
3278                 description: This flag tells the controller to suspend the reconciliation
3279                   of this source.
3280                 type: boolean
3281               timeout:
3282                 default: 60s
3283                 description: The timeout for remote OCI Repository operations like
3284                   pulling, defaults to 60s.
3285                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
3286                 type: string
3287               url:
3288                 description: URL is a reference to an OCI artifact repository hosted
3289                   on a remote container registry.
3290                 pattern: ^oci://.*$
3291                 type: string
3292               verify:
3293                 description: Verify contains the secret name containing the trusted
3294                   public keys used to verify the signature and specifies which provider
3295                   to use to check whether OCI image is authentic.
3296                 properties:
3297                   provider:
3298                     default: cosign
3299                     description: Provider specifies the technology used to sign the
3300                       OCI Artifact.
3301                     enum:
3302                     - cosign
3303                     type: string
3304                   secretRef:
3305                     description: SecretRef specifies the Kubernetes Secret containing
3306                       the trusted public keys.
3307                     properties:
3308                       name:
3309                         description: Name of the referent.
3310                         type: string
3311                     required:
3312                     - name
3313                     type: object
3314                 required:
3315                 - provider
3316                 type: object
3317             required:
3318             - interval
3319             - url
3320             type: object
3321           status:
3322             default:
3323               observedGeneration: -1
3324             description: OCIRepositoryStatus defines the observed state of OCIRepository
3325             properties:
3326               artifact:
3327                 description: Artifact represents the output of the last successful
3328                   OCI Repository sync.
3329                 properties:
3330                   digest:
3331                     description: Digest is the digest of the file in the form of '<algorithm>:<checksum>'.
3332                     pattern: ^[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[a-zA-Z0-9=_-]+$
3333                     type: string
3334                   lastUpdateTime:
3335                     description: LastUpdateTime is the timestamp corresponding to
3336                       the last update of the Artifact.
3337                     format: date-time
3338                     type: string
3339                   metadata:
3340                     additionalProperties:
3341                       type: string
3342                     description: Metadata holds upstream information such as OCI annotations.
3343                     type: object
3344                   path:
3345                     description: Path is the relative file path of the Artifact. It
3346                       can be used to locate the file in the root of the Artifact storage
3347                       on the local file system of the controller managing the Source.
3348                     type: string
3349                   revision:
3350                     description: Revision is a human-readable identifier traceable
3351                       in the origin source system. It can be a Git commit SHA, Git
3352                       tag, a Helm chart version, etc.
3353                     type: string
3354                   size:
3355                     description: Size is the number of bytes in the file.
3356                     format: int64
3357                     type: integer
3358                   url:
3359                     description: URL is the HTTP address of the Artifact as exposed
3360                       by the controller managing the Source. It can be used to retrieve
3361                       the Artifact for consumption, e.g. by another controller applying
3362                       the Artifact contents.
3363                     type: string
3364                 required:
3365                 - lastUpdateTime
3366                 - path
3367                 - revision
3368                 - url
3369                 type: object
3370               conditions:
3371                 description: Conditions holds the conditions for the OCIRepository.
3372                 items:
3373                   description: "Condition contains details for one aspect of the current
3374                     state of this API Resource. --- This struct is intended for direct
3375                     use as an array at the field path .status.conditions.  For example,
3376                     \n type FooStatus struct{ // Represents the observations of a
3377                     foo's current state. // Known .status.conditions.type are: \"Available\",
3378                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
3379                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
3380                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
3381                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
3382                   properties:
3383                     lastTransitionTime:
3384                       description: lastTransitionTime is the last time the condition
3385                         transitioned from one status to another. This should be when
3386                         the underlying condition changed.  If that is not known, then
3387                         using the time when the API field changed is acceptable.
3388                       format: date-time
3389                       type: string
3390                     message:
3391                       description: message is a human readable message indicating
3392                         details about the transition. This may be an empty string.
3393                       maxLength: 32768
3394                       type: string
3395                     observedGeneration:
3396                       description: observedGeneration represents the .metadata.generation
3397                         that the condition was set based upon. For instance, if .metadata.generation
3398                         is currently 12, but the .status.conditions[x].observedGeneration
3399                         is 9, the condition is out of date with respect to the current
3400                         state of the instance.
3401                       format: int64
3402                       minimum: 0
3403                       type: integer
3404                     reason:
3405                       description: reason contains a programmatic identifier indicating
3406                         the reason for the condition's last transition. Producers
3407                         of specific condition types may define expected values and
3408                         meanings for this field, and whether the values are considered
3409                         a guaranteed API. The value should be a CamelCase string.
3410                         This field may not be empty.
3411                       maxLength: 1024
3412                       minLength: 1
3413                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
3414                       type: string
3415                     status:
3416                       description: status of the condition, one of True, False, Unknown.
3417                       enum:
3418                       - "True"
3419                       - "False"
3420                       - Unknown
3421                       type: string
3422                     type:
3423                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
3424                         --- Many .condition.type values are consistent across resources
3425                         like Available, but because arbitrary conditions can be useful
3426                         (see .node.status.conditions), the ability to deconflict is
3427                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
3428                       maxLength: 316
3429                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
3430                       type: string
3431                   required:
3432                   - lastTransitionTime
3433                   - message
3434                   - reason
3435                   - status
3436                   - type
3437                   type: object
3438                 type: array
3439               contentConfigChecksum:
3440                 description: "ContentConfigChecksum is a checksum of all the configurations
3441                   related to the content of the source artifact: - .spec.ignore -
3442                   .spec.layerSelector observed in .status.observedGeneration version
3443                   of the object. This can be used to determine if the content configuration
3444                   has changed and the artifact needs to be rebuilt. It has the format
3445                   of `<algo>:<checksum>`, for example: `sha256:<checksum>`. \n Deprecated:
3446                   Replaced with explicit fields for observed artifact content config
3447                   in the status."
3448                 type: string
3449               lastHandledReconcileAt:
3450                 description: LastHandledReconcileAt holds the value of the most recent
3451                   reconcile request value, so a change of the annotation value can
3452                   be detected.
3453                 type: string
3454               observedGeneration:
3455                 description: ObservedGeneration is the last observed generation.
3456                 format: int64
3457                 type: integer
3458               observedIgnore:
3459                 description: ObservedIgnore is the observed exclusion patterns used
3460                   for constructing the source artifact.
3461                 type: string
3462               observedLayerSelector:
3463                 description: ObservedLayerSelector is the observed layer selector
3464                   used for constructing the source artifact.
3465                 properties:
3466                   mediaType:
3467                     description: MediaType specifies the OCI media type of the layer
3468                       which should be extracted from the OCI Artifact. The first layer
3469                       matching this type is selected.
3470                     type: string
3471                   operation:
3472                     description: Operation specifies how the selected layer should
3473                       be processed. By default, the layer compressed content is extracted
3474                       to storage. When the operation is set to 'copy', the layer compressed
3475                       content is persisted to storage as it is.
3476                     enum:
3477                     - extract
3478                     - copy
3479                     type: string
3480                 type: object
3481               url:
3482                 description: URL is the download link for the artifact output of the
3483                   last OCI Repository sync.
3484                 type: string
3485             type: object
3486         type: object
3487     served: true
3488     storage: true
3489     subresources:
3490       status: {}
3491 ---
3492 apiVersion: v1
3493 kind: ServiceAccount
3494 metadata:
3495   labels:
3496     app.kubernetes.io/component: source-controller
3497     app.kubernetes.io/instance: flux-system
3498     app.kubernetes.io/part-of: flux
3499     app.kubernetes.io/version: v2.1.2
3500   name: source-controller
3501   namespace: flux-system
3502 ---
3503 apiVersion: v1
3504 kind: Service
3505 metadata:
3506   labels:
3507     app.kubernetes.io/component: source-controller
3508     app.kubernetes.io/instance: flux-system
3509     app.kubernetes.io/part-of: flux
3510     app.kubernetes.io/version: v2.1.2
3511     control-plane: controller
3512   name: source-controller
3513   namespace: flux-system
3514 spec:
3515   ports:
3516   - name: http
3517     port: 80
3518     protocol: TCP
3519     targetPort: http
3520   selector:
3521     app: source-controller
3522   type: ClusterIP
3523 ---
3524 apiVersion: apps/v1
3525 kind: Deployment
3526 metadata:
3527   labels:
3528     app.kubernetes.io/component: source-controller
3529     app.kubernetes.io/instance: flux-system
3530     app.kubernetes.io/part-of: flux
3531     app.kubernetes.io/version: v2.1.2
3532     control-plane: controller
3533   name: source-controller
3534   namespace: flux-system
3535 spec:
3536   replicas: 1
3537   selector:
3538     matchLabels:
3539       app: source-controller
3540   strategy:
3541     type: Recreate
3542   template:
3543     metadata:
3544       annotations:
3545         prometheus.io/port: "8080"
3546         prometheus.io/scrape: "true"
3547       labels:
3548         app: source-controller
3549     spec:
3550       containers:
3551       - args:
3552         - --events-addr=http://notification-controller.flux-system.svc.cluster.local./
3553         - --watch-all-namespaces=true
3554         - --log-level=info
3555         - --log-encoding=json
3556         - --enable-leader-election
3557         - --storage-path=/data
3558         - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.
3559         env:
3560         - name: RUNTIME_NAMESPACE
3561           valueFrom:
3562             fieldRef:
3563               fieldPath: metadata.namespace
3564         - name: TUF_ROOT
3565           value: /tmp/.sigstore
3566         image: ghcr.io/fluxcd/source-controller:v1.1.2
3567         imagePullPolicy: IfNotPresent
3568         livenessProbe:
3569           httpGet:
3570             path: /healthz
3571             port: healthz
3572         name: manager
3573         ports:
3574         - containerPort: 9090
3575           name: http
3576           protocol: TCP
3577         - containerPort: 8080
3578           name: http-prom
3579           protocol: TCP
3580         - containerPort: 9440
3581           name: healthz
3582           protocol: TCP
3583         readinessProbe:
3584           httpGet:
3585             path: /
3586             port: http
3587         resources:
3588           limits:
3589             cpu: 1000m
3590             memory: 1Gi
3591           requests:
3592             cpu: 50m
3593             memory: 64Mi
3594         securityContext:
3595           allowPrivilegeEscalation: false
3596           capabilities:
3597             drop:
3598             - ALL
3599           readOnlyRootFilesystem: true
3600           runAsNonRoot: true
3601           seccompProfile:
3602             type: RuntimeDefault
3603         volumeMounts:
3604         - mountPath: /data
3605           name: data
3606         - mountPath: /tmp
3607           name: tmp
3608       nodeSelector:
3609         kubernetes.io/os: linux
3610       priorityClassName: system-cluster-critical
3611       securityContext:
3612         fsGroup: 1337
3613       serviceAccountName: source-controller
3614       terminationGracePeriodSeconds: 10
3615       volumes:
3616       - emptyDir: {}
3617         name: data
3618       - emptyDir: {}
3619         name: tmp
3620 ---
3621 apiVersion: apiextensions.k8s.io/v1
3622 kind: CustomResourceDefinition
3623 metadata:
3624   annotations:
3625     controller-gen.kubebuilder.io/version: v0.12.0
3626   labels:
3627     app.kubernetes.io/component: kustomize-controller
3628     app.kubernetes.io/instance: flux-system
3629     app.kubernetes.io/part-of: flux
3630     app.kubernetes.io/version: v2.1.2
3631   name: kustomizations.kustomize.toolkit.fluxcd.io
3632 spec:
3633   group: kustomize.toolkit.fluxcd.io
3634   names:
3635     kind: Kustomization
3636     listKind: KustomizationList
3637     plural: kustomizations
3638     shortNames:
3639     - ks
3640     singular: kustomization
3641   scope: Namespaced
3642   versions:
3643   - additionalPrinterColumns:
3644     - jsonPath: .metadata.creationTimestamp
3645       name: Age
3646       type: date
3647     - jsonPath: .status.conditions[?(@.type=="Ready")].status
3648       name: Ready
3649       type: string
3650     - jsonPath: .status.conditions[?(@.type=="Ready")].message
3651       name: Status
3652       type: string
3653     name: v1
3654     schema:
3655       openAPIV3Schema:
3656         description: Kustomization is the Schema for the kustomizations API.
3657         properties:
3658           apiVersion:
3659             description: 'APIVersion defines the versioned schema of this representation
3660               of an object. Servers should convert recognized schemas to the latest
3661               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
3662             type: string
3663           kind:
3664             description: 'Kind is a string value representing the REST resource this
3665               object represents. Servers may infer this from the endpoint the client
3666               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
3667             type: string
3668           metadata:
3669             type: object
3670           spec:
3671             description: KustomizationSpec defines the configuration to calculate
3672               the desired state from a Source using Kustomize.
3673             properties:
3674               commonMetadata:
3675                 description: CommonMetadata specifies the common labels and annotations
3676                   that are applied to all resources. Any existing label or annotation
3677                   will be overridden if its key matches a common one.
3678                 properties:
3679                   annotations:
3680                     additionalProperties:
3681                       type: string
3682                     description: Annotations to be added to the object's metadata.
3683                     type: object
3684                   labels:
3685                     additionalProperties:
3686                       type: string
3687                     description: Labels to be added to the object's metadata.
3688                     type: object
3689                 type: object
3690               components:
3691                 description: Components specifies relative paths to specifications
3692                   of other Components.
3693                 items:
3694                   type: string
3695                 type: array
3696               decryption:
3697                 description: Decrypt Kubernetes secrets before applying them on the
3698                   cluster.
3699                 properties:
3700                   provider:
3701                     description: Provider is the name of the decryption engine.
3702                     enum:
3703                     - sops
3704                     type: string
3705                   secretRef:
3706                     description: The secret name containing the private OpenPGP keys
3707                       used for decryption.
3708                     properties:
3709                       name:
3710                         description: Name of the referent.
3711                         type: string
3712                     required:
3713                     - name
3714                     type: object
3715                 required:
3716                 - provider
3717                 type: object
3718               dependsOn:
3719                 description: DependsOn may contain a meta.NamespacedObjectReference
3720                   slice with references to Kustomization resources that must be ready
3721                   before this Kustomization can be reconciled.
3722                 items:
3723                   description: NamespacedObjectReference contains enough information
3724                     to locate the referenced Kubernetes resource object in any namespace.
3725                   properties:
3726                     name:
3727                       description: Name of the referent.
3728                       type: string
3729                     namespace:
3730                       description: Namespace of the referent, when not specified it
3731                         acts as LocalObjectReference.
3732                       type: string
3733                   required:
3734                   - name
3735                   type: object
3736                 type: array
3737               force:
3738                 default: false
3739                 description: Force instructs the controller to recreate resources
3740                   when patching fails due to an immutable field change.
3741                 type: boolean
3742               healthChecks:
3743                 description: A list of resources to be included in the health assessment.
3744                 items:
3745                   description: NamespacedObjectKindReference contains enough information
3746                     to locate the typed referenced Kubernetes resource object in any
3747                     namespace.
3748                   properties:
3749                     apiVersion:
3750                       description: API version of the referent, if not specified the
3751                         Kubernetes preferred version will be used.
3752                       type: string
3753                     kind:
3754                       description: Kind of the referent.
3755                       type: string
3756                     name:
3757                       description: Name of the referent.
3758                       type: string
3759                     namespace:
3760                       description: Namespace of the referent, when not specified it
3761                         acts as LocalObjectReference.
3762                       type: string
3763                   required:
3764                   - kind
3765                   - name
3766                   type: object
3767                 type: array
3768               images:
3769                 description: Images is a list of (image name, new name, new tag or
3770                   digest) for changing image names, tags or digests. This can also
3771                   be achieved with a patch, but this operator is simpler to specify.
3772                 items:
3773                   description: Image contains an image name, a new name, a new tag
3774                     or digest, which will replace the original name and tag.
3775                   properties:
3776                     digest:
3777                       description: Digest is the value used to replace the original
3778                         image tag. If digest is present NewTag value is ignored.
3779                       type: string
3780                     name:
3781                       description: Name is a tag-less image name.
3782                       type: string
3783                     newName:
3784                       description: NewName is the value used to replace the original
3785                         name.
3786                       type: string
3787                     newTag:
3788                       description: NewTag is the value used to replace the original
3789                         tag.
3790                       type: string
3791                   required:
3792                   - name
3793                   type: object
3794                 type: array
3795               interval:
3796                 description: The interval at which to reconcile the Kustomization.
3797                   This interval is approximate and may be subject to jitter to ensure
3798                   efficient use of resources.
3799                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
3800                 type: string
3801               kubeConfig:
3802                 description: The KubeConfig for reconciling the Kustomization on a
3803                   remote cluster. When used in combination with KustomizationSpec.ServiceAccountName,
3804                   forces the controller to act on behalf of that Service Account at
3805                   the target cluster. If the --default-service-account flag is set,
3806                   its value will be used as a controller level fallback for when KustomizationSpec.ServiceAccountName
3807                   is empty.
3808                 properties:
3809                   secretRef:
3810                     description: SecretRef holds the name of a secret that contains
3811                       a key with the kubeconfig file as the value. If no key is set,
3812                       the key will default to 'value'. It is recommended that the
3813                       kubeconfig is self-contained, and the secret is regularly updated
3814                       if credentials such as a cloud-access-token expire. Cloud specific
3815                       `cmd-path` auth helpers will not function without adding binaries
3816                       and credentials to the Pod that is responsible for reconciling
3817                       Kubernetes resources.
3818                     properties:
3819                       key:
3820                         description: Key in the Secret, when not specified an implementation-specific
3821                           default key is used.
3822                         type: string
3823                       name:
3824                         description: Name of the Secret.
3825                         type: string
3826                     required:
3827                     - name
3828                     type: object
3829                 required:
3830                 - secretRef
3831                 type: object
3832               patches:
3833                 description: Strategic merge and JSON patches, defined as inline YAML
3834                   objects, capable of targeting objects based on kind, label and annotation
3835                   selectors.
3836                 items:
3837                   description: Patch contains an inline StrategicMerge or JSON6902
3838                     patch, and the target the patch should be applied to.
3839                   properties:
3840                     patch:
3841                       description: Patch contains an inline StrategicMerge patch or
3842                         an inline JSON6902 patch with an array of operation objects.
3843                       type: string
3844                     target:
3845                       description: Target points to the resources that the patch document
3846                         should be applied to.
3847                       properties:
3848                         annotationSelector:
3849                           description: AnnotationSelector is a string that follows
3850                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
3851                             It matches with the resource annotations.
3852                           type: string
3853                         group:
3854                           description: Group is the API group to select resources
3855                             from. Together with Version and Kind it is capable of
3856                             unambiguously identifying and/or selecting resources.
3857                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
3858                           type: string
3859                         kind:
3860                           description: Kind of the API Group to select resources from.
3861                             Together with Group and Version it is capable of unambiguously
3862                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
3863                           type: string
3864                         labelSelector:
3865                           description: LabelSelector is a string that follows the
3866                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
3867                             It matches with the resource labels.
3868                           type: string
3869                         name:
3870                           description: Name to match resources with.
3871                           type: string
3872                         namespace:
3873                           description: Namespace to select resources from.
3874                           type: string
3875                         version:
3876                           description: Version of the API Group to select resources
3877                             from. Together with Group and Kind it is capable of unambiguously
3878                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
3879                           type: string
3880                       type: object
3881                   required:
3882                   - patch
3883                   type: object
3884                 type: array
3885               path:
3886                 description: Path to the directory containing the kustomization.yaml
3887                   file, or the set of plain YAMLs a kustomization.yaml should be generated
3888                   for. Defaults to 'None', which translates to the root path of the
3889                   SourceRef.
3890                 type: string
3891               postBuild:
3892                 description: PostBuild describes which actions to perform on the YAML
3893                   manifest generated by building the kustomize overlay.
3894                 properties:
3895                   substitute:
3896                     additionalProperties:
3897                       type: string
3898                     description: Substitute holds a map of key/value pairs. The variables
3899                       defined in your YAML manifests that match any of the keys defined
3900                       in the map will be substituted with the set value. Includes
3901                       support for bash string replacement functions e.g. ${var:=default},
3902                       ${var:position} and ${var/substring/replacement}.
3903                     type: object
3904                   substituteFrom:
3905                     description: SubstituteFrom holds references to ConfigMaps and
3906                       Secrets containing the variables and their values to be substituted
3907                       in the YAML manifests. The ConfigMap and the Secret data keys
3908                       represent the var names, and they must match the vars declared
3909                       in the manifests for the substitution to happen.
3910                     items:
3911                       description: SubstituteReference contains a reference to a resource
3912                         containing the variables name and value.
3913                       properties:
3914                         kind:
3915                           description: Kind of the values referent, valid values are
3916                             ('Secret', 'ConfigMap').
3917                           enum:
3918                           - Secret
3919                           - ConfigMap
3920                           type: string
3921                         name:
3922                           description: Name of the values referent. Should reside
3923                             in the same namespace as the referring resource.
3924                           maxLength: 253
3925                           minLength: 1
3926                           type: string
3927                         optional:
3928                           default: false
3929                           description: Optional indicates whether the referenced resource
3930                             must exist, or whether to tolerate its absence. If true
3931                             and the referenced resource is absent, proceed as if the
3932                             resource was present but empty, without any variables
3933                             defined.
3934                           type: boolean
3935                       required:
3936                       - kind
3937                       - name
3938                       type: object
3939                     type: array
3940                 type: object
3941               prune:
3942                 description: Prune enables garbage collection.
3943                 type: boolean
3944               retryInterval:
3945                 description: The interval at which to retry a previously failed reconciliation.
3946                   When not specified, the controller uses the KustomizationSpec.Interval
3947                   value to retry failures.
3948                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
3949                 type: string
3950               serviceAccountName:
3951                 description: The name of the Kubernetes service account to impersonate
3952                   when reconciling this Kustomization.
3953                 type: string
3954               sourceRef:
3955                 description: Reference of the source where the kustomization file
3956                   is.
3957                 properties:
3958                   apiVersion:
3959                     description: API version of the referent.
3960                     type: string
3961                   kind:
3962                     description: Kind of the referent.
3963                     enum:
3964                     - OCIRepository
3965                     - GitRepository
3966                     - Bucket
3967                     type: string
3968                   name:
3969                     description: Name of the referent.
3970                     type: string
3971                   namespace:
3972                     description: Namespace of the referent, defaults to the namespace
3973                       of the Kubernetes resource object that contains the reference.
3974                     type: string
3975                 required:
3976                 - kind
3977                 - name
3978                 type: object
3979               suspend:
3980                 description: This flag tells the controller to suspend subsequent
3981                   kustomize executions, it does not apply to already started executions.
3982                   Defaults to false.
3983                 type: boolean
3984               targetNamespace:
3985                 description: TargetNamespace sets or overrides the namespace in the
3986                   kustomization.yaml file.
3987                 maxLength: 63
3988                 minLength: 1
3989                 type: string
3990               timeout:
3991                 description: Timeout for validation, apply and health checking operations.
3992                   Defaults to 'Interval' duration.
3993                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
3994                 type: string
3995               wait:
3996                 description: Wait instructs the controller to check the health of
3997                   all the reconciled resources. When enabled, the HealthChecks are
3998                   ignored. Defaults to false.
3999                 type: boolean
4000             required:
4001             - interval
4002             - prune
4003             - sourceRef
4004             type: object
4005           status:
4006             default:
4007               observedGeneration: -1
4008             description: KustomizationStatus defines the observed state of a kustomization.
4009             properties:
4010               conditions:
4011                 items:
4012                   description: "Condition contains details for one aspect of the current
4013                     state of this API Resource. --- This struct is intended for direct
4014                     use as an array at the field path .status.conditions.  For example,
4015                     \n type FooStatus struct{ // Represents the observations of a
4016                     foo's current state. // Known .status.conditions.type are: \"Available\",
4017                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
4018                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
4019                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
4020                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
4021                   properties:
4022                     lastTransitionTime:
4023                       description: lastTransitionTime is the last time the condition
4024                         transitioned from one status to another. This should be when
4025                         the underlying condition changed.  If that is not known, then
4026                         using the time when the API field changed is acceptable.
4027                       format: date-time
4028                       type: string
4029                     message:
4030                       description: message is a human readable message indicating
4031                         details about the transition. This may be an empty string.
4032                       maxLength: 32768
4033                       type: string
4034                     observedGeneration:
4035                       description: observedGeneration represents the .metadata.generation
4036                         that the condition was set based upon. For instance, if .metadata.generation
4037                         is currently 12, but the .status.conditions[x].observedGeneration
4038                         is 9, the condition is out of date with respect to the current
4039                         state of the instance.
4040                       format: int64
4041                       minimum: 0
4042                       type: integer
4043                     reason:
4044                       description: reason contains a programmatic identifier indicating
4045                         the reason for the condition's last transition. Producers
4046                         of specific condition types may define expected values and
4047                         meanings for this field, and whether the values are considered
4048                         a guaranteed API. The value should be a CamelCase string.
4049                         This field may not be empty.
4050                       maxLength: 1024
4051                       minLength: 1
4052                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
4053                       type: string
4054                     status:
4055                       description: status of the condition, one of True, False, Unknown.
4056                       enum:
4057                       - "True"
4058                       - "False"
4059                       - Unknown
4060                       type: string
4061                     type:
4062                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
4063                         --- Many .condition.type values are consistent across resources
4064                         like Available, but because arbitrary conditions can be useful
4065                         (see .node.status.conditions), the ability to deconflict is
4066                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
4067                       maxLength: 316
4068                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
4069                       type: string
4070                   required:
4071                   - lastTransitionTime
4072                   - message
4073                   - reason
4074                   - status
4075                   - type
4076                   type: object
4077                 type: array
4078               inventory:
4079                 description: Inventory contains the list of Kubernetes resource object
4080                   references that have been successfully applied.
4081                 properties:
4082                   entries:
4083                     description: Entries of Kubernetes resource object references.
4084                     items:
4085                       description: ResourceRef contains the information necessary
4086                         to locate a resource within a cluster.
4087                       properties:
4088                         id:
4089                           description: ID is the string representation of the Kubernetes
4090                             resource object's metadata, in the format '<namespace>_<name>_<group>_<kind>'.
4091                           type: string
4092                         v:
4093                           description: Version is the API version of the Kubernetes
4094                             resource object's kind.
4095                           type: string
4096                       required:
4097                       - id
4098                       - v
4099                       type: object
4100                     type: array
4101                 required:
4102                 - entries
4103                 type: object
4104               lastAppliedRevision:
4105                 description: The last successfully applied revision. Equals the Revision
4106                   of the applied Artifact from the referenced Source.
4107                 type: string
4108               lastAttemptedRevision:
4109                 description: LastAttemptedRevision is the revision of the last reconciliation
4110                   attempt.
4111                 type: string
4112               lastHandledReconcileAt:
4113                 description: LastHandledReconcileAt holds the value of the most recent
4114                   reconcile request value, so a change of the annotation value can
4115                   be detected.
4116                 type: string
4117               observedGeneration:
4118                 description: ObservedGeneration is the last reconciled generation.
4119                 format: int64
4120                 type: integer
4121             type: object
4122         type: object
4123     served: true
4124     storage: true
4125     subresources:
4126       status: {}
4127   - additionalPrinterColumns:
4128     - jsonPath: .status.conditions[?(@.type=="Ready")].status
4129       name: Ready
4130       type: string
4131     - jsonPath: .status.conditions[?(@.type=="Ready")].message
4132       name: Status
4133       type: string
4134     - jsonPath: .metadata.creationTimestamp
4135       name: Age
4136       type: date
4137     deprecated: true
4138     deprecationWarning: v1beta1 Kustomization is deprecated, upgrade to v1
4139     name: v1beta1
4140     schema:
4141       openAPIV3Schema:
4142         description: Kustomization is the Schema for the kustomizations API.
4143         properties:
4144           apiVersion:
4145             description: 'APIVersion defines the versioned schema of this representation
4146               of an object. Servers should convert recognized schemas to the latest
4147               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
4148             type: string
4149           kind:
4150             description: 'Kind is a string value representing the REST resource this
4151               object represents. Servers may infer this from the endpoint the client
4152               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
4153             type: string
4154           metadata:
4155             type: object
4156           spec:
4157             description: KustomizationSpec defines the desired state of a kustomization.
4158             properties:
4159               decryption:
4160                 description: Decrypt Kubernetes secrets before applying them on the
4161                   cluster.
4162                 properties:
4163                   provider:
4164                     description: Provider is the name of the decryption engine.
4165                     enum:
4166                     - sops
4167                     type: string
4168                   secretRef:
4169                     description: The secret name containing the private OpenPGP keys
4170                       used for decryption.
4171                     properties:
4172                       name:
4173                         description: Name of the referent.
4174                         type: string
4175                     required:
4176                     - name
4177                     type: object
4178                 required:
4179                 - provider
4180                 type: object
4181               dependsOn:
4182                 description: DependsOn may contain a meta.NamespacedObjectReference
4183                   slice with references to Kustomization resources that must be ready
4184                   before this Kustomization can be reconciled.
4185                 items:
4186                   description: NamespacedObjectReference contains enough information
4187                     to locate the referenced Kubernetes resource object in any namespace.
4188                   properties:
4189                     name:
4190                       description: Name of the referent.
4191                       type: string
4192                     namespace:
4193                       description: Namespace of the referent, when not specified it
4194                         acts as LocalObjectReference.
4195                       type: string
4196                   required:
4197                   - name
4198                   type: object
4199                 type: array
4200               force:
4201                 default: false
4202                 description: Force instructs the controller to recreate resources
4203                   when patching fails due to an immutable field change.
4204                 type: boolean
4205               healthChecks:
4206                 description: A list of resources to be included in the health assessment.
4207                 items:
4208                   description: NamespacedObjectKindReference contains enough information
4209                     to locate the typed referenced Kubernetes resource object in any
4210                     namespace.
4211                   properties:
4212                     apiVersion:
4213                       description: API version of the referent, if not specified the
4214                         Kubernetes preferred version will be used.
4215                       type: string
4216                     kind:
4217                       description: Kind of the referent.
4218                       type: string
4219                     name:
4220                       description: Name of the referent.
4221                       type: string
4222                     namespace:
4223                       description: Namespace of the referent, when not specified it
4224                         acts as LocalObjectReference.
4225                       type: string
4226                   required:
4227                   - kind
4228                   - name
4229                   type: object
4230                 type: array
4231               images:
4232                 description: Images is a list of (image name, new name, new tag or
4233                   digest) for changing image names, tags or digests. This can also
4234                   be achieved with a patch, but this operator is simpler to specify.
4235                 items:
4236                   description: Image contains an image name, a new name, a new tag
4237                     or digest, which will replace the original name and tag.
4238                   properties:
4239                     digest:
4240                       description: Digest is the value used to replace the original
4241                         image tag. If digest is present NewTag value is ignored.
4242                       type: string
4243                     name:
4244                       description: Name is a tag-less image name.
4245                       type: string
4246                     newName:
4247                       description: NewName is the value used to replace the original
4248                         name.
4249                       type: string
4250                     newTag:
4251                       description: NewTag is the value used to replace the original
4252                         tag.
4253                       type: string
4254                   required:
4255                   - name
4256                   type: object
4257                 type: array
4258               interval:
4259                 description: The interval at which to reconcile the Kustomization.
4260                 type: string
4261               kubeConfig:
4262                 description: The KubeConfig for reconciling the Kustomization on a
4263                   remote cluster. When specified, KubeConfig takes precedence over
4264                   ServiceAccountName.
4265                 properties:
4266                   secretRef:
4267                     description: SecretRef holds the name to a secret that contains
4268                       a 'value' key with the kubeconfig file as the value. It must
4269                       be in the same namespace as the Kustomization. It is recommended
4270                       that the kubeconfig is self-contained, and the secret is regularly
4271                       updated if credentials such as a cloud-access-token expire.
4272                       Cloud specific `cmd-path` auth helpers will not function without
4273                       adding binaries and credentials to the Pod that is responsible
4274                       for reconciling the Kustomization.
4275                     properties:
4276                       name:
4277                         description: Name of the referent.
4278                         type: string
4279                     required:
4280                     - name
4281                     type: object
4282                 type: object
4283               patches:
4284                 description: Strategic merge and JSON patches, defined as inline YAML
4285                   objects, capable of targeting objects based on kind, label and annotation
4286                   selectors.
4287                 items:
4288                   description: Patch contains an inline StrategicMerge or JSON6902
4289                     patch, and the target the patch should be applied to.
4290                   properties:
4291                     patch:
4292                       description: Patch contains an inline StrategicMerge patch or
4293                         an inline JSON6902 patch with an array of operation objects.
4294                       type: string
4295                     target:
4296                       description: Target points to the resources that the patch document
4297                         should be applied to.
4298                       properties:
4299                         annotationSelector:
4300                           description: AnnotationSelector is a string that follows
4301                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4302                             It matches with the resource annotations.
4303                           type: string
4304                         group:
4305                           description: Group is the API group to select resources
4306                             from. Together with Version and Kind it is capable of
4307                             unambiguously identifying and/or selecting resources.
4308                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4309                           type: string
4310                         kind:
4311                           description: Kind of the API Group to select resources from.
4312                             Together with Group and Version it is capable of unambiguously
4313                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4314                           type: string
4315                         labelSelector:
4316                           description: LabelSelector is a string that follows the
4317                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4318                             It matches with the resource labels.
4319                           type: string
4320                         name:
4321                           description: Name to match resources with.
4322                           type: string
4323                         namespace:
4324                           description: Namespace to select resources from.
4325                           type: string
4326                         version:
4327                           description: Version of the API Group to select resources
4328                             from. Together with Group and Kind it is capable of unambiguously
4329                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4330                           type: string
4331                       type: object
4332                   required:
4333                   - patch
4334                   type: object
4335                 type: array
4336               patchesJson6902:
4337                 description: JSON 6902 patches, defined as inline YAML objects.
4338                 items:
4339                   description: JSON6902Patch contains a JSON6902 patch and the target
4340                     the patch should be applied to.
4341                   properties:
4342                     patch:
4343                       description: Patch contains the JSON6902 patch document with
4344                         an array of operation objects.
4345                       items:
4346                         description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
4347                         properties:
4348                           from:
4349                             description: From contains a JSON-pointer value that references
4350                               a location within the target document where the operation
4351                               is performed. The meaning of the value depends on the
4352                               value of Op, and is NOT taken into account by all operations.
4353                             type: string
4354                           op:
4355                             description: Op indicates the operation to perform. Its
4356                               value MUST be one of "add", "remove", "replace", "move",
4357                               "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
4358                             enum:
4359                             - test
4360                             - remove
4361                             - add
4362                             - replace
4363                             - move
4364                             - copy
4365                             type: string
4366                           path:
4367                             description: Path contains the JSON-pointer value that
4368                               references a location within the target document where
4369                               the operation is performed. The meaning of the value
4370                               depends on the value of Op.
4371                             type: string
4372                           value:
4373                             description: Value contains a valid JSON structure. The
4374                               meaning of the value depends on the value of Op, and
4375                               is NOT taken into account by all operations.
4376                             x-kubernetes-preserve-unknown-fields: true
4377                         required:
4378                         - op
4379                         - path
4380                         type: object
4381                       type: array
4382                     target:
4383                       description: Target points to the resources that the patch document
4384                         should be applied to.
4385                       properties:
4386                         annotationSelector:
4387                           description: AnnotationSelector is a string that follows
4388                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4389                             It matches with the resource annotations.
4390                           type: string
4391                         group:
4392                           description: Group is the API group to select resources
4393                             from. Together with Version and Kind it is capable of
4394                             unambiguously identifying and/or selecting resources.
4395                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4396                           type: string
4397                         kind:
4398                           description: Kind of the API Group to select resources from.
4399                             Together with Group and Version it is capable of unambiguously
4400                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4401                           type: string
4402                         labelSelector:
4403                           description: LabelSelector is a string that follows the
4404                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4405                             It matches with the resource labels.
4406                           type: string
4407                         name:
4408                           description: Name to match resources with.
4409                           type: string
4410                         namespace:
4411                           description: Namespace to select resources from.
4412                           type: string
4413                         version:
4414                           description: Version of the API Group to select resources
4415                             from. Together with Group and Kind it is capable of unambiguously
4416                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4417                           type: string
4418                       type: object
4419                   required:
4420                   - patch
4421                   - target
4422                   type: object
4423                 type: array
4424               patchesStrategicMerge:
4425                 description: Strategic merge patches, defined as inline YAML objects.
4426                 items:
4427                   x-kubernetes-preserve-unknown-fields: true
4428                 type: array
4429               path:
4430                 description: Path to the directory containing the kustomization.yaml
4431                   file, or the set of plain YAMLs a kustomization.yaml should be generated
4432                   for. Defaults to 'None', which translates to the root path of the
4433                   SourceRef.
4434                 type: string
4435               postBuild:
4436                 description: PostBuild describes which actions to perform on the YAML
4437                   manifest generated by building the kustomize overlay.
4438                 properties:
4439                   substitute:
4440                     additionalProperties:
4441                       type: string
4442                     description: Substitute holds a map of key/value pairs. The variables
4443                       defined in your YAML manifests that match any of the keys defined
4444                       in the map will be substituted with the set value. Includes
4445                       support for bash string replacement functions e.g. ${var:=default},
4446                       ${var:position} and ${var/substring/replacement}.
4447                     type: object
4448                   substituteFrom:
4449                     description: SubstituteFrom holds references to ConfigMaps and
4450                       Secrets containing the variables and their values to be substituted
4451                       in the YAML manifests. The ConfigMap and the Secret data keys
4452                       represent the var names and they must match the vars declared
4453                       in the manifests for the substitution to happen.
4454                     items:
4455                       description: SubstituteReference contains a reference to a resource
4456                         containing the variables name and value.
4457                       properties:
4458                         kind:
4459                           description: Kind of the values referent, valid values are
4460                             ('Secret', 'ConfigMap').
4461                           enum:
4462                           - Secret
4463                           - ConfigMap
4464                           type: string
4465                         name:
4466                           description: Name of the values referent. Should reside
4467                             in the same namespace as the referring resource.
4468                           maxLength: 253
4469                           minLength: 1
4470                           type: string
4471                       required:
4472                       - kind
4473                       - name
4474                       type: object
4475                     type: array
4476                 type: object
4477               prune:
4478                 description: Prune enables garbage collection.
4479                 type: boolean
4480               retryInterval:
4481                 description: The interval at which to retry a previously failed reconciliation.
4482                   When not specified, the controller uses the KustomizationSpec.Interval
4483                   value to retry failures.
4484                 type: string
4485               serviceAccountName:
4486                 description: The name of the Kubernetes service account to impersonate
4487                   when reconciling this Kustomization.
4488                 type: string
4489               sourceRef:
4490                 description: Reference of the source where the kustomization file
4491                   is.
4492                 properties:
4493                   apiVersion:
4494                     description: API version of the referent
4495                     type: string
4496                   kind:
4497                     description: Kind of the referent
4498                     enum:
4499                     - GitRepository
4500                     - Bucket
4501                     type: string
4502                   name:
4503                     description: Name of the referent
4504                     type: string
4505                   namespace:
4506                     description: Namespace of the referent, defaults to the Kustomization
4507                       namespace
4508                     type: string
4509                 required:
4510                 - kind
4511                 - name
4512                 type: object
4513               suspend:
4514                 description: This flag tells the controller to suspend subsequent
4515                   kustomize executions, it does not apply to already started executions.
4516                   Defaults to false.
4517                 type: boolean
4518               targetNamespace:
4519                 description: TargetNamespace sets or overrides the namespace in the
4520                   kustomization.yaml file.
4521                 maxLength: 63
4522                 minLength: 1
4523                 type: string
4524               timeout:
4525                 description: Timeout for validation, apply and health checking operations.
4526                   Defaults to 'Interval' duration.
4527                 type: string
4528               validation:
4529                 description: Validate the Kubernetes objects before applying them
4530                   on the cluster. The validation strategy can be 'client' (local dry-run),
4531                   'server' (APIServer dry-run) or 'none'. When 'Force' is 'true',
4532                   validation will fallback to 'client' if set to 'server' because
4533                   server-side validation is not supported in this scenario.
4534                 enum:
4535                 - none
4536                 - client
4537                 - server
4538                 type: string
4539             required:
4540             - interval
4541             - prune
4542             - sourceRef
4543             type: object
4544           status:
4545             default:
4546               observedGeneration: -1
4547             description: KustomizationStatus defines the observed state of a kustomization.
4548             properties:
4549               conditions:
4550                 items:
4551                   description: "Condition contains details for one aspect of the current
4552                     state of this API Resource. --- This struct is intended for direct
4553                     use as an array at the field path .status.conditions.  For example,
4554                     \n type FooStatus struct{ // Represents the observations of a
4555                     foo's current state. // Known .status.conditions.type are: \"Available\",
4556                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
4557                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
4558                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
4559                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
4560                   properties:
4561                     lastTransitionTime:
4562                       description: lastTransitionTime is the last time the condition
4563                         transitioned from one status to another. This should be when
4564                         the underlying condition changed.  If that is not known, then
4565                         using the time when the API field changed is acceptable.
4566                       format: date-time
4567                       type: string
4568                     message:
4569                       description: message is a human readable message indicating
4570                         details about the transition. This may be an empty string.
4571                       maxLength: 32768
4572                       type: string
4573                     observedGeneration:
4574                       description: observedGeneration represents the .metadata.generation
4575                         that the condition was set based upon. For instance, if .metadata.generation
4576                         is currently 12, but the .status.conditions[x].observedGeneration
4577                         is 9, the condition is out of date with respect to the current
4578                         state of the instance.
4579                       format: int64
4580                       minimum: 0
4581                       type: integer
4582                     reason:
4583                       description: reason contains a programmatic identifier indicating
4584                         the reason for the condition's last transition. Producers
4585                         of specific condition types may define expected values and
4586                         meanings for this field, and whether the values are considered
4587                         a guaranteed API. The value should be a CamelCase string.
4588                         This field may not be empty.
4589                       maxLength: 1024
4590                       minLength: 1
4591                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
4592                       type: string
4593                     status:
4594                       description: status of the condition, one of True, False, Unknown.
4595                       enum:
4596                       - "True"
4597                       - "False"
4598                       - Unknown
4599                       type: string
4600                     type:
4601                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
4602                         --- Many .condition.type values are consistent across resources
4603                         like Available, but because arbitrary conditions can be useful
4604                         (see .node.status.conditions), the ability to deconflict is
4605                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
4606                       maxLength: 316
4607                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
4608                       type: string
4609                   required:
4610                   - lastTransitionTime
4611                   - message
4612                   - reason
4613                   - status
4614                   - type
4615                   type: object
4616                 type: array
4617               lastAppliedRevision:
4618                 description: The last successfully applied revision. The revision
4619                   format for Git sources is <branch|tag>/<commit-sha>.
4620                 type: string
4621               lastAttemptedRevision:
4622                 description: LastAttemptedRevision is the revision of the last reconciliation
4623                   attempt.
4624                 type: string
4625               lastHandledReconcileAt:
4626                 description: LastHandledReconcileAt holds the value of the most recent
4627                   reconcile request value, so a change of the annotation value can
4628                   be detected.
4629                 type: string
4630               observedGeneration:
4631                 description: ObservedGeneration is the last reconciled generation.
4632                 format: int64
4633                 type: integer
4634               snapshot:
4635                 description: The last successfully applied revision metadata.
4636                 properties:
4637                   checksum:
4638                     description: The manifests sha1 checksum.
4639                     type: string
4640                   entries:
4641                     description: A list of Kubernetes kinds grouped by namespace.
4642                     items:
4643                       description: Snapshot holds the metadata of namespaced Kubernetes
4644                         objects
4645                       properties:
4646                         kinds:
4647                           additionalProperties:
4648                             type: string
4649                           description: The list of Kubernetes kinds.
4650                           type: object
4651                         namespace:
4652                           description: The namespace of this entry.
4653                           type: string
4654                       required:
4655                       - kinds
4656                       type: object
4657                     type: array
4658                 required:
4659                 - checksum
4660                 - entries
4661                 type: object
4662             type: object
4663         type: object
4664     served: true
4665     storage: false
4666     subresources:
4667       status: {}
4668   - additionalPrinterColumns:
4669     - jsonPath: .metadata.creationTimestamp
4670       name: Age
4671       type: date
4672     - jsonPath: .status.conditions[?(@.type=="Ready")].status
4673       name: Ready
4674       type: string
4675     - jsonPath: .status.conditions[?(@.type=="Ready")].message
4676       name: Status
4677       type: string
4678     deprecated: true
4679     deprecationWarning: v1beta2 Kustomization is deprecated, upgrade to v1
4680     name: v1beta2
4681     schema:
4682       openAPIV3Schema:
4683         description: Kustomization is the Schema for the kustomizations API.
4684         properties:
4685           apiVersion:
4686             description: 'APIVersion defines the versioned schema of this representation
4687               of an object. Servers should convert recognized schemas to the latest
4688               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
4689             type: string
4690           kind:
4691             description: 'Kind is a string value representing the REST resource this
4692               object represents. Servers may infer this from the endpoint the client
4693               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
4694             type: string
4695           metadata:
4696             type: object
4697           spec:
4698             description: KustomizationSpec defines the configuration to calculate
4699               the desired state from a Source using Kustomize.
4700             properties:
4701               commonMetadata:
4702                 description: CommonMetadata specifies the common labels and annotations
4703                   that are applied to all resources. Any existing label or annotation
4704                   will be overridden if its key matches a common one.
4705                 properties:
4706                   annotations:
4707                     additionalProperties:
4708                       type: string
4709                     description: Annotations to be added to the object's metadata.
4710                     type: object
4711                   labels:
4712                     additionalProperties:
4713                       type: string
4714                     description: Labels to be added to the object's metadata.
4715                     type: object
4716                 type: object
4717               components:
4718                 description: Components specifies relative paths to specifications
4719                   of other Components.
4720                 items:
4721                   type: string
4722                 type: array
4723               decryption:
4724                 description: Decrypt Kubernetes secrets before applying them on the
4725                   cluster.
4726                 properties:
4727                   provider:
4728                     description: Provider is the name of the decryption engine.
4729                     enum:
4730                     - sops
4731                     type: string
4732                   secretRef:
4733                     description: The secret name containing the private OpenPGP keys
4734                       used for decryption.
4735                     properties:
4736                       name:
4737                         description: Name of the referent.
4738                         type: string
4739                     required:
4740                     - name
4741                     type: object
4742                 required:
4743                 - provider
4744                 type: object
4745               dependsOn:
4746                 description: DependsOn may contain a meta.NamespacedObjectReference
4747                   slice with references to Kustomization resources that must be ready
4748                   before this Kustomization can be reconciled.
4749                 items:
4750                   description: NamespacedObjectReference contains enough information
4751                     to locate the referenced Kubernetes resource object in any namespace.
4752                   properties:
4753                     name:
4754                       description: Name of the referent.
4755                       type: string
4756                     namespace:
4757                       description: Namespace of the referent, when not specified it
4758                         acts as LocalObjectReference.
4759                       type: string
4760                   required:
4761                   - name
4762                   type: object
4763                 type: array
4764               force:
4765                 default: false
4766                 description: Force instructs the controller to recreate resources
4767                   when patching fails due to an immutable field change.
4768                 type: boolean
4769               healthChecks:
4770                 description: A list of resources to be included in the health assessment.
4771                 items:
4772                   description: NamespacedObjectKindReference contains enough information
4773                     to locate the typed referenced Kubernetes resource object in any
4774                     namespace.
4775                   properties:
4776                     apiVersion:
4777                       description: API version of the referent, if not specified the
4778                         Kubernetes preferred version will be used.
4779                       type: string
4780                     kind:
4781                       description: Kind of the referent.
4782                       type: string
4783                     name:
4784                       description: Name of the referent.
4785                       type: string
4786                     namespace:
4787                       description: Namespace of the referent, when not specified it
4788                         acts as LocalObjectReference.
4789                       type: string
4790                   required:
4791                   - kind
4792                   - name
4793                   type: object
4794                 type: array
4795               images:
4796                 description: Images is a list of (image name, new name, new tag or
4797                   digest) for changing image names, tags or digests. This can also
4798                   be achieved with a patch, but this operator is simpler to specify.
4799                 items:
4800                   description: Image contains an image name, a new name, a new tag
4801                     or digest, which will replace the original name and tag.
4802                   properties:
4803                     digest:
4804                       description: Digest is the value used to replace the original
4805                         image tag. If digest is present NewTag value is ignored.
4806                       type: string
4807                     name:
4808                       description: Name is a tag-less image name.
4809                       type: string
4810                     newName:
4811                       description: NewName is the value used to replace the original
4812                         name.
4813                       type: string
4814                     newTag:
4815                       description: NewTag is the value used to replace the original
4816                         tag.
4817                       type: string
4818                   required:
4819                   - name
4820                   type: object
4821                 type: array
4822               interval:
4823                 description: The interval at which to reconcile the Kustomization.
4824                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
4825                 type: string
4826               kubeConfig:
4827                 description: The KubeConfig for reconciling the Kustomization on a
4828                   remote cluster. When used in combination with KustomizationSpec.ServiceAccountName,
4829                   forces the controller to act on behalf of that Service Account at
4830                   the target cluster. If the --default-service-account flag is set,
4831                   its value will be used as a controller level fallback for when KustomizationSpec.ServiceAccountName
4832                   is empty.
4833                 properties:
4834                   secretRef:
4835                     description: SecretRef holds the name of a secret that contains
4836                       a key with the kubeconfig file as the value. If no key is set,
4837                       the key will default to 'value'. It is recommended that the
4838                       kubeconfig is self-contained, and the secret is regularly updated
4839                       if credentials such as a cloud-access-token expire. Cloud specific
4840                       `cmd-path` auth helpers will not function without adding binaries
4841                       and credentials to the Pod that is responsible for reconciling
4842                       Kubernetes resources.
4843                     properties:
4844                       key:
4845                         description: Key in the Secret, when not specified an implementation-specific
4846                           default key is used.
4847                         type: string
4848                       name:
4849                         description: Name of the Secret.
4850                         type: string
4851                     required:
4852                     - name
4853                     type: object
4854                 required:
4855                 - secretRef
4856                 type: object
4857               patches:
4858                 description: Strategic merge and JSON patches, defined as inline YAML
4859                   objects, capable of targeting objects based on kind, label and annotation
4860                   selectors.
4861                 items:
4862                   description: Patch contains an inline StrategicMerge or JSON6902
4863                     patch, and the target the patch should be applied to.
4864                   properties:
4865                     patch:
4866                       description: Patch contains an inline StrategicMerge patch or
4867                         an inline JSON6902 patch with an array of operation objects.
4868                       type: string
4869                     target:
4870                       description: Target points to the resources that the patch document
4871                         should be applied to.
4872                       properties:
4873                         annotationSelector:
4874                           description: AnnotationSelector is a string that follows
4875                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4876                             It matches with the resource annotations.
4877                           type: string
4878                         group:
4879                           description: Group is the API group to select resources
4880                             from. Together with Version and Kind it is capable of
4881                             unambiguously identifying and/or selecting resources.
4882                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4883                           type: string
4884                         kind:
4885                           description: Kind of the API Group to select resources from.
4886                             Together with Group and Version it is capable of unambiguously
4887                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4888                           type: string
4889                         labelSelector:
4890                           description: LabelSelector is a string that follows the
4891                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4892                             It matches with the resource labels.
4893                           type: string
4894                         name:
4895                           description: Name to match resources with.
4896                           type: string
4897                         namespace:
4898                           description: Namespace to select resources from.
4899                           type: string
4900                         version:
4901                           description: Version of the API Group to select resources
4902                             from. Together with Group and Kind it is capable of unambiguously
4903                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4904                           type: string
4905                       type: object
4906                   required:
4907                   - patch
4908                   type: object
4909                 type: array
4910               patchesJson6902:
4911                 description: 'JSON 6902 patches, defined as inline YAML objects. Deprecated:
4912                   Use Patches instead.'
4913                 items:
4914                   description: JSON6902Patch contains a JSON6902 patch and the target
4915                     the patch should be applied to.
4916                   properties:
4917                     patch:
4918                       description: Patch contains the JSON6902 patch document with
4919                         an array of operation objects.
4920                       items:
4921                         description: JSON6902 is a JSON6902 operation object. https://datatracker.ietf.org/doc/html/rfc6902#section-4
4922                         properties:
4923                           from:
4924                             description: From contains a JSON-pointer value that references
4925                               a location within the target document where the operation
4926                               is performed. The meaning of the value depends on the
4927                               value of Op, and is NOT taken into account by all operations.
4928                             type: string
4929                           op:
4930                             description: Op indicates the operation to perform. Its
4931                               value MUST be one of "add", "remove", "replace", "move",
4932                               "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
4933                             enum:
4934                             - test
4935                             - remove
4936                             - add
4937                             - replace
4938                             - move
4939                             - copy
4940                             type: string
4941                           path:
4942                             description: Path contains the JSON-pointer value that
4943                               references a location within the target document where
4944                               the operation is performed. The meaning of the value
4945                               depends on the value of Op.
4946                             type: string
4947                           value:
4948                             description: Value contains a valid JSON structure. The
4949                               meaning of the value depends on the value of Op, and
4950                               is NOT taken into account by all operations.
4951                             x-kubernetes-preserve-unknown-fields: true
4952                         required:
4953                         - op
4954                         - path
4955                         type: object
4956                       type: array
4957                     target:
4958                       description: Target points to the resources that the patch document
4959                         should be applied to.
4960                       properties:
4961                         annotationSelector:
4962                           description: AnnotationSelector is a string that follows
4963                             the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4964                             It matches with the resource annotations.
4965                           type: string
4966                         group:
4967                           description: Group is the API group to select resources
4968                             from. Together with Version and Kind it is capable of
4969                             unambiguously identifying and/or selecting resources.
4970                             https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4971                           type: string
4972                         kind:
4973                           description: Kind of the API Group to select resources from.
4974                             Together with Group and Version it is capable of unambiguously
4975                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4976                           type: string
4977                         labelSelector:
4978                           description: LabelSelector is a string that follows the
4979                             label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
4980                             It matches with the resource labels.
4981                           type: string
4982                         name:
4983                           description: Name to match resources with.
4984                           type: string
4985                         namespace:
4986                           description: Namespace to select resources from.
4987                           type: string
4988                         version:
4989                           description: Version of the API Group to select resources
4990                             from. Together with Group and Kind it is capable of unambiguously
4991                             identifying and/or selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
4992                           type: string
4993                       type: object
4994                   required:
4995                   - patch
4996                   - target
4997                   type: object
4998                 type: array
4999               patchesStrategicMerge:
5000                 description: 'Strategic merge patches, defined as inline YAML objects.
5001                   Deprecated: Use Patches instead.'
5002                 items:
5003                   x-kubernetes-preserve-unknown-fields: true
5004                 type: array
5005               path:
5006                 description: Path to the directory containing the kustomization.yaml
5007                   file, or the set of plain YAMLs a kustomization.yaml should be generated
5008                   for. Defaults to 'None', which translates to the root path of the
5009                   SourceRef.
5010                 type: string
5011               postBuild:
5012                 description: PostBuild describes which actions to perform on the YAML
5013                   manifest generated by building the kustomize overlay.
5014                 properties:
5015                   substitute:
5016                     additionalProperties:
5017                       type: string
5018                     description: Substitute holds a map of key/value pairs. The variables
5019                       defined in your YAML manifests that match any of the keys defined
5020                       in the map will be substituted with the set value. Includes
5021                       support for bash string replacement functions e.g. ${var:=default},
5022                       ${var:position} and ${var/substring/replacement}.
5023                     type: object
5024                   substituteFrom:
5025                     description: SubstituteFrom holds references to ConfigMaps and
5026                       Secrets containing the variables and their values to be substituted
5027                       in the YAML manifests. The ConfigMap and the Secret data keys
5028                       represent the var names and they must match the vars declared
5029                       in the manifests for the substitution to happen.
5030                     items:
5031                       description: SubstituteReference contains a reference to a resource
5032                         containing the variables name and value.
5033                       properties:
5034                         kind:
5035                           description: Kind of the values referent, valid values are
5036                             ('Secret', 'ConfigMap').
5037                           enum:
5038                           - Secret
5039                           - ConfigMap
5040                           type: string
5041                         name:
5042                           description: Name of the values referent. Should reside
5043                             in the same namespace as the referring resource.
5044                           maxLength: 253
5045                           minLength: 1
5046                           type: string
5047                         optional:
5048                           default: false
5049                           description: Optional indicates whether the referenced resource
5050                             must exist, or whether to tolerate its absence. If true
5051                             and the referenced resource is absent, proceed as if the
5052                             resource was present but empty, without any variables
5053                             defined.
5054                           type: boolean
5055                       required:
5056                       - kind
5057                       - name
5058                       type: object
5059                     type: array
5060                 type: object
5061               prune:
5062                 description: Prune enables garbage collection.
5063                 type: boolean
5064               retryInterval:
5065                 description: The interval at which to retry a previously failed reconciliation.
5066                   When not specified, the controller uses the KustomizationSpec.Interval
5067                   value to retry failures.
5068                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5069                 type: string
5070               serviceAccountName:
5071                 description: The name of the Kubernetes service account to impersonate
5072                   when reconciling this Kustomization.
5073                 type: string
5074               sourceRef:
5075                 description: Reference of the source where the kustomization file
5076                   is.
5077                 properties:
5078                   apiVersion:
5079                     description: API version of the referent.
5080                     type: string
5081                   kind:
5082                     description: Kind of the referent.
5083                     enum:
5084                     - OCIRepository
5085                     - GitRepository
5086                     - Bucket
5087                     type: string
5088                   name:
5089                     description: Name of the referent.
5090                     type: string
5091                   namespace:
5092                     description: Namespace of the referent, defaults to the namespace
5093                       of the Kubernetes resource object that contains the reference.
5094                     type: string
5095                 required:
5096                 - kind
5097                 - name
5098                 type: object
5099               suspend:
5100                 description: This flag tells the controller to suspend subsequent
5101                   kustomize executions, it does not apply to already started executions.
5102                   Defaults to false.
5103                 type: boolean
5104               targetNamespace:
5105                 description: TargetNamespace sets or overrides the namespace in the
5106                   kustomization.yaml file.
5107                 maxLength: 63
5108                 minLength: 1
5109                 type: string
5110               timeout:
5111                 description: Timeout for validation, apply and health checking operations.
5112                   Defaults to 'Interval' duration.
5113                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5114                 type: string
5115               validation:
5116                 description: 'Deprecated: Not used in v1beta2.'
5117                 enum:
5118                 - none
5119                 - client
5120                 - server
5121                 type: string
5122               wait:
5123                 description: Wait instructs the controller to check the health of
5124                   all the reconciled resources. When enabled, the HealthChecks are
5125                   ignored. Defaults to false.
5126                 type: boolean
5127             required:
5128             - interval
5129             - prune
5130             - sourceRef
5131             type: object
5132           status:
5133             default:
5134               observedGeneration: -1
5135             description: KustomizationStatus defines the observed state of a kustomization.
5136             properties:
5137               conditions:
5138                 items:
5139                   description: "Condition contains details for one aspect of the current
5140                     state of this API Resource. --- This struct is intended for direct
5141                     use as an array at the field path .status.conditions.  For example,
5142                     \n type FooStatus struct{ // Represents the observations of a
5143                     foo's current state. // Known .status.conditions.type are: \"Available\",
5144                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
5145                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
5146                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
5147                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
5148                   properties:
5149                     lastTransitionTime:
5150                       description: lastTransitionTime is the last time the condition
5151                         transitioned from one status to another. This should be when
5152                         the underlying condition changed.  If that is not known, then
5153                         using the time when the API field changed is acceptable.
5154                       format: date-time
5155                       type: string
5156                     message:
5157                       description: message is a human readable message indicating
5158                         details about the transition. This may be an empty string.
5159                       maxLength: 32768
5160                       type: string
5161                     observedGeneration:
5162                       description: observedGeneration represents the .metadata.generation
5163                         that the condition was set based upon. For instance, if .metadata.generation
5164                         is currently 12, but the .status.conditions[x].observedGeneration
5165                         is 9, the condition is out of date with respect to the current
5166                         state of the instance.
5167                       format: int64
5168                       minimum: 0
5169                       type: integer
5170                     reason:
5171                       description: reason contains a programmatic identifier indicating
5172                         the reason for the condition's last transition. Producers
5173                         of specific condition types may define expected values and
5174                         meanings for this field, and whether the values are considered
5175                         a guaranteed API. The value should be a CamelCase string.
5176                         This field may not be empty.
5177                       maxLength: 1024
5178                       minLength: 1
5179                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
5180                       type: string
5181                     status:
5182                       description: status of the condition, one of True, False, Unknown.
5183                       enum:
5184                       - "True"
5185                       - "False"
5186                       - Unknown
5187                       type: string
5188                     type:
5189                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
5190                         --- Many .condition.type values are consistent across resources
5191                         like Available, but because arbitrary conditions can be useful
5192                         (see .node.status.conditions), the ability to deconflict is
5193                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
5194                       maxLength: 316
5195                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
5196                       type: string
5197                   required:
5198                   - lastTransitionTime
5199                   - message
5200                   - reason
5201                   - status
5202                   - type
5203                   type: object
5204                 type: array
5205               inventory:
5206                 description: Inventory contains the list of Kubernetes resource object
5207                   references that have been successfully applied.
5208                 properties:
5209                   entries:
5210                     description: Entries of Kubernetes resource object references.
5211                     items:
5212                       description: ResourceRef contains the information necessary
5213                         to locate a resource within a cluster.
5214                       properties:
5215                         id:
5216                           description: ID is the string representation of the Kubernetes
5217                             resource object's metadata, in the format '<namespace>_<name>_<group>_<kind>'.
5218                           type: string
5219                         v:
5220                           description: Version is the API version of the Kubernetes
5221                             resource object's kind.
5222                           type: string
5223                       required:
5224                       - id
5225                       - v
5226                       type: object
5227                     type: array
5228                 required:
5229                 - entries
5230                 type: object
5231               lastAppliedRevision:
5232                 description: The last successfully applied revision. Equals the Revision
5233                   of the applied Artifact from the referenced Source.
5234                 type: string
5235               lastAttemptedRevision:
5236                 description: LastAttemptedRevision is the revision of the last reconciliation
5237                   attempt.
5238                 type: string
5239               lastHandledReconcileAt:
5240                 description: LastHandledReconcileAt holds the value of the most recent
5241                   reconcile request value, so a change of the annotation value can
5242                   be detected.
5243                 type: string
5244               observedGeneration:
5245                 description: ObservedGeneration is the last reconciled generation.
5246                 format: int64
5247                 type: integer
5248             type: object
5249         type: object
5250     served: true
5251     storage: false
5252     subresources:
5253       status: {}
5254 ---
5255 apiVersion: v1
5256 kind: ServiceAccount
5257 metadata:
5258   labels:
5259     app.kubernetes.io/component: kustomize-controller
5260     app.kubernetes.io/instance: flux-system
5261     app.kubernetes.io/part-of: flux
5262     app.kubernetes.io/version: v2.1.2
5263   name: kustomize-controller
5264   namespace: flux-system
5265 ---
5266 apiVersion: apps/v1
5267 kind: Deployment
5268 metadata:
5269   labels:
5270     app.kubernetes.io/component: kustomize-controller
5271     app.kubernetes.io/instance: flux-system
5272     app.kubernetes.io/part-of: flux
5273     app.kubernetes.io/version: v2.1.2
5274     control-plane: controller
5275   name: kustomize-controller
5276   namespace: flux-system
5277 spec:
5278   replicas: 1
5279   selector:
5280     matchLabels:
5281       app: kustomize-controller
5282   template:
5283     metadata:
5284       annotations:
5285         prometheus.io/port: "8080"
5286         prometheus.io/scrape: "true"
5287       labels:
5288         app: kustomize-controller
5289     spec:
5290       containers:
5291       - args:
5292         - --events-addr=http://notification-controller.flux-system.svc.cluster.local./
5293         - --watch-all-namespaces=true
5294         - --log-level=info
5295         - --log-encoding=json
5296         - --enable-leader-election
5297         env:
5298         - name: RUNTIME_NAMESPACE
5299           valueFrom:
5300             fieldRef:
5301               fieldPath: metadata.namespace
5302         image: ghcr.io/fluxcd/kustomize-controller:v1.1.1
5303         imagePullPolicy: IfNotPresent
5304         livenessProbe:
5305           httpGet:
5306             path: /healthz
5307             port: healthz
5308         name: manager
5309         ports:
5310         - containerPort: 8080
5311           name: http-prom
5312           protocol: TCP
5313         - containerPort: 9440
5314           name: healthz
5315           protocol: TCP
5316         readinessProbe:
5317           httpGet:
5318             path: /readyz
5319             port: healthz
5320         resources:
5321           limits:
5322             cpu: 1000m
5323             memory: 1Gi
5324           requests:
5325             cpu: 100m
5326             memory: 64Mi
5327         securityContext:
5328           allowPrivilegeEscalation: false
5329           capabilities:
5330             drop:
5331             - ALL
5332           readOnlyRootFilesystem: true
5333           runAsNonRoot: true
5334           seccompProfile:
5335             type: RuntimeDefault
5336         volumeMounts:
5337         - mountPath: /tmp
5338           name: temp
5339       nodeSelector:
5340         kubernetes.io/os: linux
5341       priorityClassName: system-cluster-critical
5342       securityContext:
5343         fsGroup: 1337
5344       serviceAccountName: kustomize-controller
5345       terminationGracePeriodSeconds: 60
5346       volumes:
5347       - emptyDir: {}
5348         name: temp
5349 ---
5350 apiVersion: apiextensions.k8s.io/v1
5351 kind: CustomResourceDefinition
5352 metadata:
5353   annotations:
5354     controller-gen.kubebuilder.io/version: v0.12.0
5355   labels:
5356     app.kubernetes.io/component: helm-controller
5357     app.kubernetes.io/instance: flux-system
5358     app.kubernetes.io/part-of: flux
5359     app.kubernetes.io/version: v2.1.2
5360   name: helmreleases.helm.toolkit.fluxcd.io
5361 spec:
5362   group: helm.toolkit.fluxcd.io
5363   names:
5364     kind: HelmRelease
5365     listKind: HelmReleaseList
5366     plural: helmreleases
5367     shortNames:
5368     - hr
5369     singular: helmrelease
5370   scope: Namespaced
5371   versions:
5372   - additionalPrinterColumns:
5373     - jsonPath: .metadata.creationTimestamp
5374       name: Age
5375       type: date
5376     - jsonPath: .status.conditions[?(@.type=="Ready")].status
5377       name: Ready
5378       type: string
5379     - jsonPath: .status.conditions[?(@.type=="Ready")].message
5380       name: Status
5381       type: string
5382     name: v2beta1
5383     schema:
5384       openAPIV3Schema:
5385         description: HelmRelease is the Schema for the helmreleases API
5386         properties:
5387           apiVersion:
5388             description: 'APIVersion defines the versioned schema of this representation
5389               of an object. Servers should convert recognized schemas to the latest
5390               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
5391             type: string
5392           kind:
5393             description: 'Kind is a string value representing the REST resource this
5394               object represents. Servers may infer this from the endpoint the client
5395               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
5396             type: string
5397           metadata:
5398             type: object
5399           spec:
5400             description: HelmReleaseSpec defines the desired state of a Helm release.
5401             properties:
5402               chart:
5403                 description: Chart defines the template of the v1beta2.HelmChart that
5404                   should be created for this HelmRelease.
5405                 properties:
5406                   metadata:
5407                     description: ObjectMeta holds the template for metadata like labels
5408                       and annotations.
5409                     properties:
5410                       annotations:
5411                         additionalProperties:
5412                           type: string
5413                         description: 'Annotations is an unstructured key value map
5414                           stored with a resource that may be set by external tools
5415                           to store and retrieve arbitrary metadata. They are not queryable
5416                           and should be preserved when modifying objects. More info:
5417                           https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/'
5418                         type: object
5419                       labels:
5420                         additionalProperties:
5421                           type: string
5422                         description: 'Map of string keys and values that can be used
5423                           to organize and categorize (scope and select) objects. More
5424                           info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/'
5425                         type: object
5426                     type: object
5427                   spec:
5428                     description: Spec holds the template for the v1beta2.HelmChartSpec
5429                       for this HelmRelease.
5430                     properties:
5431                       chart:
5432                         description: The name or path the Helm chart is available
5433                           at in the SourceRef.
5434                         type: string
5435                       interval:
5436                         description: Interval at which to check the v1beta2.Source
5437                           for updates. Defaults to 'HelmReleaseSpec.Interval'.
5438                         pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5439                         type: string
5440                       reconcileStrategy:
5441                         default: ChartVersion
5442                         description: Determines what enables the creation of a new
5443                           artifact. Valid values are ('ChartVersion', 'Revision').
5444                           See the documentation of the values for an explanation on
5445                           their behavior. Defaults to ChartVersion when omitted.
5446                         enum:
5447                         - ChartVersion
5448                         - Revision
5449                         type: string
5450                       sourceRef:
5451                         description: The name and namespace of the v1beta2.Source
5452                           the chart is available at.
5453                         properties:
5454                           apiVersion:
5455                             description: APIVersion of the referent.
5456                             type: string
5457                           kind:
5458                             description: Kind of the referent.
5459                             enum:
5460                             - HelmRepository
5461                             - GitRepository
5462                             - Bucket
5463                             type: string
5464                           name:
5465                             description: Name of the referent.
5466                             maxLength: 253
5467                             minLength: 1
5468                             type: string
5469                           namespace:
5470                             description: Namespace of the referent.
5471                             maxLength: 63
5472                             minLength: 1
5473                             type: string
5474                         required:
5475                         - name
5476                         type: object
5477                       valuesFile:
5478                         description: Alternative values file to use as the default
5479                           chart values, expected to be a relative path in the SourceRef.
5480                           Deprecated in favor of ValuesFiles, for backwards compatibility
5481                           the file defined here is merged before the ValuesFiles items.
5482                           Ignored when omitted.
5483                         type: string
5484                       valuesFiles:
5485                         description: Alternative list of values files to use as the
5486                           chart values (values.yaml is not included by default), expected
5487                           to be a relative path in the SourceRef. Values files are
5488                           merged in the order of this list with the last file overriding
5489                           the first. Ignored when omitted.
5490                         items:
5491                           type: string
5492                         type: array
5493                       verify:
5494                         description: Verify contains the secret name containing the
5495                           trusted public keys used to verify the signature and specifies
5496                           which provider to use to check whether OCI image is authentic.
5497                           This field is only supported for OCI sources. Chart dependencies,
5498                           which are not bundled in the umbrella chart artifact, are
5499                           not verified.
5500                         properties:
5501                           provider:
5502                             default: cosign
5503                             description: Provider specifies the technology used to
5504                               sign the OCI Helm chart.
5505                             enum:
5506                             - cosign
5507                             type: string
5508                           secretRef:
5509                             description: SecretRef specifies the Kubernetes Secret
5510                               containing the trusted public keys.
5511                             properties:
5512                               name:
5513                                 description: Name of the referent.
5514                                 type: string
5515                             required:
5516                             - name
5517                             type: object
5518                         required:
5519                         - provider
5520                         type: object
5521                       version:
5522                         default: '*'
5523                         description: Version semver expression, ignored for charts
5524                           from v1beta2.GitRepository and v1beta2.Bucket sources. Defaults
5525                           to latest when omitted.
5526                         type: string
5527                     required:
5528                     - chart
5529                     - sourceRef
5530                     type: object
5531                 required:
5532                 - spec
5533                 type: object
5534               dependsOn:
5535                 description: DependsOn may contain a meta.NamespacedObjectReference
5536                   slice with references to HelmRelease resources that must be ready
5537                   before this HelmRelease can be reconciled.
5538                 items:
5539                   description: NamespacedObjectReference contains enough information
5540                     to locate the referenced Kubernetes resource object in any namespace.
5541                   properties:
5542                     name:
5543                       description: Name of the referent.
5544                       type: string
5545                     namespace:
5546                       description: Namespace of the referent, when not specified it
5547                         acts as LocalObjectReference.
5548                       type: string
5549                   required:
5550                   - name
5551                   type: object
5552                 type: array
5553               install:
5554                 description: Install holds the configuration for Helm install actions
5555                   for this HelmRelease.
5556                 properties:
5557                   crds:
5558                     description: "CRDs upgrade CRDs from the Helm Chart's crds directory
5559                       according to the CRD upgrade policy provided here. Valid values
5560                       are `Skip`, `Create` or `CreateReplace`. Default is `Create`
5561                       and if omitted CRDs are installed but not updated. \n Skip:
5562                       do neither install nor replace (update) any CRDs. \n Create:
5563                       new CRDs are created, existing CRDs are neither updated nor
5564                       deleted. \n CreateReplace: new CRDs are created, existing CRDs
5565                       are updated (replaced) but not deleted. \n By default, CRDs
5566                       are applied (installed) during Helm install action. With this
5567                       option users can opt-in to CRD replace existing CRDs on Helm
5568                       install actions, which is not (yet) natively supported by Helm.
5569                       https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
5570                     enum:
5571                     - Skip
5572                     - Create
5573                     - CreateReplace
5574                     type: string
5575                   createNamespace:
5576                     description: CreateNamespace tells the Helm install action to
5577                       create the HelmReleaseSpec.TargetNamespace if it does not exist
5578                       yet. On uninstall, the namespace will not be garbage collected.
5579                     type: boolean
5580                   disableHooks:
5581                     description: DisableHooks prevents hooks from running during the
5582                       Helm install action.
5583                     type: boolean
5584                   disableOpenAPIValidation:
5585                     description: DisableOpenAPIValidation prevents the Helm install
5586                       action from validating rendered templates against the Kubernetes
5587                       OpenAPI Schema.
5588                     type: boolean
5589                   disableWait:
5590                     description: DisableWait disables the waiting for resources to
5591                       be ready after a Helm install has been performed.
5592                     type: boolean
5593                   disableWaitForJobs:
5594                     description: DisableWaitForJobs disables waiting for jobs to complete
5595                       after a Helm install has been performed.
5596                     type: boolean
5597                   remediation:
5598                     description: Remediation holds the remediation configuration for
5599                       when the Helm install action for the HelmRelease fails. The
5600                       default is to not perform any action.
5601                     properties:
5602                       ignoreTestFailures:
5603                         description: IgnoreTestFailures tells the controller to skip
5604                           remediation when the Helm tests are run after an install
5605                           action but fail. Defaults to 'Test.IgnoreFailures'.
5606                         type: boolean
5607                       remediateLastFailure:
5608                         description: RemediateLastFailure tells the controller to
5609                           remediate the last failure, when no retries remain. Defaults
5610                           to 'false'.
5611                         type: boolean
5612                       retries:
5613                         description: Retries is the number of retries that should
5614                           be attempted on failures before bailing. Remediation, using
5615                           an uninstall, is performed between each attempt. Defaults
5616                           to '0', a negative integer equals to unlimited retries.
5617                         type: integer
5618                     type: object
5619                   replace:
5620                     description: Replace tells the Helm install action to re-use the
5621                       'ReleaseName', but only if that name is a deleted release which
5622                       remains in the history.
5623                     type: boolean
5624                   skipCRDs:
5625                     description: "SkipCRDs tells the Helm install action to not install
5626                       any CRDs. By default, CRDs are installed if not already present.
5627                       \n Deprecated use CRD policy (`crds`) attribute with value `Skip`
5628                       instead."
5629                     type: boolean
5630                   timeout:
5631                     description: Timeout is the time to wait for any individual Kubernetes
5632                       operation (like Jobs for hooks) during the performance of a
5633                       Helm install action. Defaults to 'HelmReleaseSpec.Timeout'.
5634                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5635                     type: string
5636                 type: object
5637               interval:
5638                 description: Interval at which to reconcile the Helm release. This
5639                   interval is approximate and may be subject to jitter to ensure efficient
5640                   use of resources.
5641                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5642                 type: string
5643               kubeConfig:
5644                 description: KubeConfig for reconciling the HelmRelease on a remote
5645                   cluster. When used in combination with HelmReleaseSpec.ServiceAccountName,
5646                   forces the controller to act on behalf of that Service Account at
5647                   the target cluster. If the --default-service-account flag is set,
5648                   its value will be used as a controller level fallback for when HelmReleaseSpec.ServiceAccountName
5649                   is empty.
5650                 properties:
5651                   secretRef:
5652                     description: SecretRef holds the name of a secret that contains
5653                       a key with the kubeconfig file as the value. If no key is set,
5654                       the key will default to 'value'. It is recommended that the
5655                       kubeconfig is self-contained, and the secret is regularly updated
5656                       if credentials such as a cloud-access-token expire. Cloud specific
5657                       `cmd-path` auth helpers will not function without adding binaries
5658                       and credentials to the Pod that is responsible for reconciling
5659                       Kubernetes resources.
5660                     properties:
5661                       key:
5662                         description: Key in the Secret, when not specified an implementation-specific
5663                           default key is used.
5664                         type: string
5665                       name:
5666                         description: Name of the Secret.
5667                         type: string
5668                     required:
5669                     - name
5670                     type: object
5671                 required:
5672                 - secretRef
5673                 type: object
5674               maxHistory:
5675                 description: MaxHistory is the number of revisions saved by Helm for
5676                   this HelmRelease. Use '0' for an unlimited number of revisions;
5677                   defaults to '10'.
5678                 type: integer
5679               persistentClient:
5680                 description: "PersistentClient tells the controller to use a persistent
5681                   Kubernetes client for this release. When enabled, the client will
5682                   be reused for the duration of the reconciliation, instead of being
5683                   created and destroyed for each (step of a) Helm action. \n This
5684                   can improve performance, but may cause issues with some Helm charts
5685                   that for example do create Custom Resource Definitions during installation
5686                   outside Helm's CRD lifecycle hooks, which are then not observed
5687                   to be available by e.g. post-install hooks. \n If not set, it defaults
5688                   to true."
5689                 type: boolean
5690               postRenderers:
5691                 description: PostRenderers holds an array of Helm PostRenderers, which
5692                   will be applied in order of their definition.
5693                 items:
5694                   description: PostRenderer contains a Helm PostRenderer specification.
5695                   properties:
5696                     kustomize:
5697                       description: Kustomization to apply as PostRenderer.
5698                       properties:
5699                         images:
5700                           description: Images is a list of (image name, new name,
5701                             new tag or digest) for changing image names, tags or digests.
5702                             This can also be achieved with a patch, but this operator
5703                             is simpler to specify.
5704                           items:
5705                             description: Image contains an image name, a new name,
5706                               a new tag or digest, which will replace the original
5707                               name and tag.
5708                             properties:
5709                               digest:
5710                                 description: Digest is the value used to replace the
5711                                   original image tag. If digest is present NewTag
5712                                   value is ignored.
5713                                 type: string
5714                               name:
5715                                 description: Name is a tag-less image name.
5716                                 type: string
5717                               newName:
5718                                 description: NewName is the value used to replace
5719                                   the original name.
5720                                 type: string
5721                               newTag:
5722                                 description: NewTag is the value used to replace the
5723                                   original tag.
5724                                 type: string
5725                             required:
5726                             - name
5727                             type: object
5728                           type: array
5729                         patches:
5730                           description: Strategic merge and JSON patches, defined as
5731                             inline YAML objects, capable of targeting objects based
5732                             on kind, label and annotation selectors.
5733                           items:
5734                             description: Patch contains an inline StrategicMerge or
5735                               JSON6902 patch, and the target the patch should be applied
5736                               to.
5737                             properties:
5738                               patch:
5739                                 description: Patch contains an inline StrategicMerge
5740                                   patch or an inline JSON6902 patch with an array
5741                                   of operation objects.
5742                                 type: string
5743                               target:
5744                                 description: Target points to the resources that the
5745                                   patch document should be applied to.
5746                                 properties:
5747                                   annotationSelector:
5748                                     description: AnnotationSelector is a string that
5749                                       follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5750                                       It matches with the resource annotations.
5751                                     type: string
5752                                   group:
5753                                     description: Group is the API group to select
5754                                       resources from. Together with Version and Kind
5755                                       it is capable of unambiguously identifying and/or
5756                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5757                                     type: string
5758                                   kind:
5759                                     description: Kind of the API Group to select resources
5760                                       from. Together with Group and Version it is
5761                                       capable of unambiguously identifying and/or
5762                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5763                                     type: string
5764                                   labelSelector:
5765                                     description: LabelSelector is a string that follows
5766                                       the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5767                                       It matches with the resource labels.
5768                                     type: string
5769                                   name:
5770                                     description: Name to match resources with.
5771                                     type: string
5772                                   namespace:
5773                                     description: Namespace to select resources from.
5774                                     type: string
5775                                   version:
5776                                     description: Version of the API Group to select
5777                                       resources from. Together with Group and Kind
5778                                       it is capable of unambiguously identifying and/or
5779                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5780                                     type: string
5781                                 type: object
5782                             required:
5783                             - patch
5784                             type: object
5785                           type: array
5786                         patchesJson6902:
5787                           description: JSON 6902 patches, defined as inline YAML objects.
5788                           items:
5789                             description: JSON6902Patch contains a JSON6902 patch and
5790                               the target the patch should be applied to.
5791                             properties:
5792                               patch:
5793                                 description: Patch contains the JSON6902 patch document
5794                                   with an array of operation objects.
5795                                 items:
5796                                   description: JSON6902 is a JSON6902 operation object.
5797                                     https://datatracker.ietf.org/doc/html/rfc6902#section-4
5798                                   properties:
5799                                     from:
5800                                       description: From contains a JSON-pointer value
5801                                         that references a location within the target
5802                                         document where the operation is performed.
5803                                         The meaning of the value depends on the value
5804                                         of Op, and is NOT taken into account by all
5805                                         operations.
5806                                       type: string
5807                                     op:
5808                                       description: Op indicates the operation to perform.
5809                                         Its value MUST be one of "add", "remove",
5810                                         "replace", "move", "copy", or "test". https://datatracker.ietf.org/doc/html/rfc6902#section-4
5811                                       enum:
5812                                       - test
5813                                       - remove
5814                                       - add
5815                                       - replace
5816                                       - move
5817                                       - copy
5818                                       type: string
5819                                     path:
5820                                       description: Path contains the JSON-pointer
5821                                         value that references a location within the
5822                                         target document where the operation is performed.
5823                                         The meaning of the value depends on the value
5824                                         of Op.
5825                                       type: string
5826                                     value:
5827                                       description: Value contains a valid JSON structure.
5828                                         The meaning of the value depends on the value
5829                                         of Op, and is NOT taken into account by all
5830                                         operations.
5831                                       x-kubernetes-preserve-unknown-fields: true
5832                                   required:
5833                                   - op
5834                                   - path
5835                                   type: object
5836                                 type: array
5837                               target:
5838                                 description: Target points to the resources that the
5839                                   patch document should be applied to.
5840                                 properties:
5841                                   annotationSelector:
5842                                     description: AnnotationSelector is a string that
5843                                       follows the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5844                                       It matches with the resource annotations.
5845                                     type: string
5846                                   group:
5847                                     description: Group is the API group to select
5848                                       resources from. Together with Version and Kind
5849                                       it is capable of unambiguously identifying and/or
5850                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5851                                     type: string
5852                                   kind:
5853                                     description: Kind of the API Group to select resources
5854                                       from. Together with Group and Version it is
5855                                       capable of unambiguously identifying and/or
5856                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5857                                     type: string
5858                                   labelSelector:
5859                                     description: LabelSelector is a string that follows
5860                                       the label selection expression https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api
5861                                       It matches with the resource labels.
5862                                     type: string
5863                                   name:
5864                                     description: Name to match resources with.
5865                                     type: string
5866                                   namespace:
5867                                     description: Namespace to select resources from.
5868                                     type: string
5869                                   version:
5870                                     description: Version of the API Group to select
5871                                       resources from. Together with Group and Kind
5872                                       it is capable of unambiguously identifying and/or
5873                                       selecting resources. https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md
5874                                     type: string
5875                                 type: object
5876                             required:
5877                             - patch
5878                             - target
5879                             type: object
5880                           type: array
5881                         patchesStrategicMerge:
5882                           description: Strategic merge patches, defined as inline
5883                             YAML objects.
5884                           items:
5885                             x-kubernetes-preserve-unknown-fields: true
5886                           type: array
5887                       type: object
5888                   type: object
5889                 type: array
5890               releaseName:
5891                 description: ReleaseName used for the Helm release. Defaults to a
5892                   composition of '[TargetNamespace-]Name'.
5893                 maxLength: 53
5894                 minLength: 1
5895                 type: string
5896               rollback:
5897                 description: Rollback holds the configuration for Helm rollback actions
5898                   for this HelmRelease.
5899                 properties:
5900                   cleanupOnFail:
5901                     description: CleanupOnFail allows deletion of new resources created
5902                       during the Helm rollback action when it fails.
5903                     type: boolean
5904                   disableHooks:
5905                     description: DisableHooks prevents hooks from running during the
5906                       Helm rollback action.
5907                     type: boolean
5908                   disableWait:
5909                     description: DisableWait disables the waiting for resources to
5910                       be ready after a Helm rollback has been performed.
5911                     type: boolean
5912                   disableWaitForJobs:
5913                     description: DisableWaitForJobs disables waiting for jobs to complete
5914                       after a Helm rollback has been performed.
5915                     type: boolean
5916                   force:
5917                     description: Force forces resource updates through a replacement
5918                       strategy.
5919                     type: boolean
5920                   recreate:
5921                     description: Recreate performs pod restarts for the resource if
5922                       applicable.
5923                     type: boolean
5924                   timeout:
5925                     description: Timeout is the time to wait for any individual Kubernetes
5926                       operation (like Jobs for hooks) during the performance of a
5927                       Helm rollback action. Defaults to 'HelmReleaseSpec.Timeout'.
5928                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5929                     type: string
5930                 type: object
5931               serviceAccountName:
5932                 description: The name of the Kubernetes service account to impersonate
5933                   when reconciling this HelmRelease.
5934                 type: string
5935               storageNamespace:
5936                 description: StorageNamespace used for the Helm storage. Defaults
5937                   to the namespace of the HelmRelease.
5938                 maxLength: 63
5939                 minLength: 1
5940                 type: string
5941               suspend:
5942                 description: Suspend tells the controller to suspend reconciliation
5943                   for this HelmRelease, it does not apply to already started reconciliations.
5944                   Defaults to false.
5945                 type: boolean
5946               targetNamespace:
5947                 description: TargetNamespace to target when performing operations
5948                   for the HelmRelease. Defaults to the namespace of the HelmRelease.
5949                 maxLength: 63
5950                 minLength: 1
5951                 type: string
5952               test:
5953                 description: Test holds the configuration for Helm test actions for
5954                   this HelmRelease.
5955                 properties:
5956                   enable:
5957                     description: Enable enables Helm test actions for this HelmRelease
5958                       after an Helm install or upgrade action has been performed.
5959                     type: boolean
5960                   ignoreFailures:
5961                     description: IgnoreFailures tells the controller to skip remediation
5962                       when the Helm tests are run but fail. Can be overwritten for
5963                       tests run after install or upgrade actions in 'Install.IgnoreTestFailures'
5964                       and 'Upgrade.IgnoreTestFailures'.
5965                     type: boolean
5966                   timeout:
5967                     description: Timeout is the time to wait for any individual Kubernetes
5968                       operation during the performance of a Helm test action. Defaults
5969                       to 'HelmReleaseSpec.Timeout'.
5970                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5971                     type: string
5972                 type: object
5973               timeout:
5974                 description: Timeout is the time to wait for any individual Kubernetes
5975                   operation (like Jobs for hooks) during the performance of a Helm
5976                   action. Defaults to '5m0s'.
5977                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
5978                 type: string
5979               uninstall:
5980                 description: Uninstall holds the configuration for Helm uninstall
5981                   actions for this HelmRelease.
5982                 properties:
5983                   deletionPropagation:
5984                     default: background
5985                     description: DeletionPropagation specifies the deletion propagation
5986                       policy when a Helm uninstall is performed.
5987                     enum:
5988                     - background
5989                     - foreground
5990                     - orphan
5991                     type: string
5992                   disableHooks:
5993                     description: DisableHooks prevents hooks from running during the
5994                       Helm rollback action.
5995                     type: boolean
5996                   disableWait:
5997                     description: DisableWait disables waiting for all the resources
5998                       to be deleted after a Helm uninstall is performed.
5999                     type: boolean
6000                   keepHistory:
6001                     description: KeepHistory tells Helm to remove all associated resources
6002                       and mark the release as deleted, but retain the release history.
6003                     type: boolean
6004                   timeout:
6005                     description: Timeout is the time to wait for any individual Kubernetes
6006                       operation (like Jobs for hooks) during the performance of a
6007                       Helm uninstall action. Defaults to 'HelmReleaseSpec.Timeout'.
6008                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
6009                     type: string
6010                 type: object
6011               upgrade:
6012                 description: Upgrade holds the configuration for Helm upgrade actions
6013                   for this HelmRelease.
6014                 properties:
6015                   cleanupOnFail:
6016                     description: CleanupOnFail allows deletion of new resources created
6017                       during the Helm upgrade action when it fails.
6018                     type: boolean
6019                   crds:
6020                     description: "CRDs upgrade CRDs from the Helm Chart's crds directory
6021                       according to the CRD upgrade policy provided here. Valid values
6022                       are `Skip`, `Create` or `CreateReplace`. Default is `Skip` and
6023                       if omitted CRDs are neither installed nor upgraded. \n Skip:
6024                       do neither install nor replace (update) any CRDs. \n Create:
6025                       new CRDs are created, existing CRDs are neither updated nor
6026                       deleted. \n CreateReplace: new CRDs are created, existing CRDs
6027                       are updated (replaced) but not deleted. \n By default, CRDs
6028                       are not applied during Helm upgrade action. With this option
6029                       users can opt-in to CRD upgrade, which is not (yet) natively
6030                       supported by Helm. https://helm.sh/docs/chart_best_practices/custom_resource_definitions."
6031                     enum:
6032                     - Skip
6033                     - Create
6034                     - CreateReplace
6035                     type: string
6036                   disableHooks:
6037                     description: DisableHooks prevents hooks from running during the
6038                       Helm upgrade action.
6039                     type: boolean
6040                   disableOpenAPIValidation:
6041                     description: DisableOpenAPIValidation prevents the Helm upgrade
6042                       action from validating rendered templates against the Kubernetes
6043                       OpenAPI Schema.
6044                     type: boolean
6045                   disableWait:
6046                     description: DisableWait disables the waiting for resources to
6047                       be ready after a Helm upgrade has been performed.
6048                     type: boolean
6049                   disableWaitForJobs:
6050                     description: DisableWaitForJobs disables waiting for jobs to complete
6051                       after a Helm upgrade has been performed.
6052                     type: boolean
6053                   force:
6054                     description: Force forces resource updates through a replacement
6055                       strategy.
6056                     type: boolean
6057                   preserveValues:
6058                     description: PreserveValues will make Helm reuse the last release's
6059                       values and merge in overrides from 'Values'. Setting this flag
6060                       makes the HelmRelease non-declarative.
6061                     type: boolean
6062                   remediation:
6063                     description: Remediation holds the remediation configuration for
6064                       when the Helm upgrade action for the HelmRelease fails. The
6065                       default is to not perform any action.
6066                     properties:
6067                       ignoreTestFailures:
6068                         description: IgnoreTestFailures tells the controller to skip
6069                           remediation when the Helm tests are run after an upgrade
6070                           action but fail. Defaults to 'Test.IgnoreFailures'.
6071                         type: boolean
6072                       remediateLastFailure:
6073                         description: RemediateLastFailure tells the controller to
6074                           remediate the last failure, when no retries remain. Defaults
6075                           to 'false' unless 'Retries' is greater than 0.
6076                         type: boolean
6077                       retries:
6078                         description: Retries is the number of retries that should
6079                           be attempted on failures before bailing. Remediation, using
6080                           'Strategy', is performed between each attempt. Defaults
6081                           to '0', a negative integer equals to unlimited retries.
6082                         type: integer
6083                       strategy:
6084                         description: Strategy to use for failure remediation. Defaults
6085                           to 'rollback'.
6086                         enum:
6087                         - rollback
6088                         - uninstall
6089                         type: string
6090                     type: object
6091                   timeout:
6092                     description: Timeout is the time to wait for any individual Kubernetes
6093                       operation (like Jobs for hooks) during the performance of a
6094                       Helm upgrade action. Defaults to 'HelmReleaseSpec.Timeout'.
6095                     pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
6096                     type: string
6097                 type: object
6098               values:
6099                 description: Values holds the values for this Helm release.
6100                 x-kubernetes-preserve-unknown-fields: true
6101               valuesFrom:
6102                 description: ValuesFrom holds references to resources containing Helm
6103                   values for this HelmRelease, and information about how they should
6104                   be merged.
6105                 items:
6106                   description: ValuesReference contains a reference to a resource
6107                     containing Helm values, and optionally the key they can be found
6108                     at.
6109                   properties:
6110                     kind:
6111                       description: Kind of the values referent, valid values are ('Secret',
6112                         'ConfigMap').
6113                       enum:
6114                       - Secret
6115                       - ConfigMap
6116                       type: string
6117                     name:
6118                       description: Name of the values referent. Should reside in the
6119                         same namespace as the referring resource.
6120                       maxLength: 253
6121                       minLength: 1
6122                       type: string
6123                     optional:
6124                       description: Optional marks this ValuesReference as optional.
6125                         When set, a not found error for the values reference is ignored,
6126                         but any ValuesKey, TargetPath or transient error will still
6127                         result in a reconciliation failure.
6128                       type: boolean
6129                     targetPath:
6130                       description: TargetPath is the YAML dot notation path the value
6131                         should be merged at. When set, the ValuesKey is expected to
6132                         be a single flat value. Defaults to 'None', which results
6133                         in the values getting merged at the root.
6134                       maxLength: 250
6135                       pattern: ^([a-zA-Z0-9_\-.\\\/]|\[[0-9]{1,5}\])+$
6136                       type: string
6137                     valuesKey:
6138                       description: ValuesKey is the data key where the values.yaml
6139                         or a specific value can be found at. Defaults to 'values.yaml'.
6140                         When set, must be a valid Data Key, consisting of alphanumeric
6141                         characters, '-', '_' or '.'.
6142                       maxLength: 253
6143                       pattern: ^[\-._a-zA-Z0-9]+$
6144                       type: string
6145                   required:
6146                   - kind
6147                   - name
6148                   type: object
6149                 type: array
6150             required:
6151             - chart
6152             - interval
6153             type: object
6154           status:
6155             default:
6156               observedGeneration: -1
6157             description: HelmReleaseStatus defines the observed state of a HelmRelease.
6158             properties:
6159               conditions:
6160                 description: Conditions holds the conditions for the HelmRelease.
6161                 items:
6162                   description: "Condition contains details for one aspect of the current
6163                     state of this API Resource. --- This struct is intended for direct
6164                     use as an array at the field path .status.conditions.  For example,
6165                     \n type FooStatus struct{ // Represents the observations of a
6166                     foo's current state. // Known .status.conditions.type are: \"Available\",
6167                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
6168                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
6169                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
6170                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
6171                   properties:
6172                     lastTransitionTime:
6173                       description: lastTransitionTime is the last time the condition
6174                         transitioned from one status to another. This should be when
6175                         the underlying condition changed.  If that is not known, then
6176                         using the time when the API field changed is acceptable.
6177                       format: date-time
6178                       type: string
6179                     message:
6180                       description: message is a human readable message indicating
6181                         details about the transition. This may be an empty string.
6182                       maxLength: 32768
6183                       type: string
6184                     observedGeneration:
6185                       description: observedGeneration represents the .metadata.generation
6186                         that the condition was set based upon. For instance, if .metadata.generation
6187                         is currently 12, but the .status.conditions[x].observedGeneration
6188                         is 9, the condition is out of date with respect to the current
6189                         state of the instance.
6190                       format: int64
6191                       minimum: 0
6192                       type: integer
6193                     reason:
6194                       description: reason contains a programmatic identifier indicating
6195                         the reason for the condition's last transition. Producers
6196                         of specific condition types may define expected values and
6197                         meanings for this field, and whether the values are considered
6198                         a guaranteed API. The value should be a CamelCase string.
6199                         This field may not be empty.
6200                       maxLength: 1024
6201                       minLength: 1
6202                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
6203                       type: string
6204                     status:
6205                       description: status of the condition, one of True, False, Unknown.
6206                       enum:
6207                       - "True"
6208                       - "False"
6209                       - Unknown
6210                       type: string
6211                     type:
6212                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
6213                         --- Many .condition.type values are consistent across resources
6214                         like Available, but because arbitrary conditions can be useful
6215                         (see .node.status.conditions), the ability to deconflict is
6216                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
6217                       maxLength: 316
6218                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
6219                       type: string
6220                   required:
6221                   - lastTransitionTime
6222                   - message
6223                   - reason
6224                   - status
6225                   - type
6226                   type: object
6227                 type: array
6228               failures:
6229                 description: Failures is the reconciliation failure count against
6230                   the latest desired state. It is reset after a successful reconciliation.
6231                 format: int64
6232                 type: integer
6233               helmChart:
6234                 description: HelmChart is the namespaced name of the HelmChart resource
6235                   created by the controller for the HelmRelease.
6236                 type: string
6237               installFailures:
6238                 description: InstallFailures is the install failure count against
6239                   the latest desired state. It is reset after a successful reconciliation.
6240                 format: int64
6241                 type: integer
6242               lastAppliedRevision:
6243                 description: LastAppliedRevision is the revision of the last successfully
6244                   applied source.
6245                 type: string
6246               lastAttemptedRevision:
6247                 description: LastAttemptedRevision is the revision of the last reconciliation
6248                   attempt.
6249                 type: string
6250               lastAttemptedValuesChecksum:
6251                 description: LastAttemptedValuesChecksum is the SHA1 checksum of the
6252                   values of the last reconciliation attempt.
6253                 type: string
6254               lastHandledReconcileAt:
6255                 description: LastHandledReconcileAt holds the value of the most recent
6256                   reconcile request value, so a change of the annotation value can
6257                   be detected.
6258                 type: string
6259               lastReleaseRevision:
6260                 description: LastReleaseRevision is the revision of the last successful
6261                   Helm release.
6262                 type: integer
6263               observedGeneration:
6264                 description: ObservedGeneration is the last observed generation.
6265                 format: int64
6266                 type: integer
6267               upgradeFailures:
6268                 description: UpgradeFailures is the upgrade failure count against
6269                   the latest desired state. It is reset after a successful reconciliation.
6270                 format: int64
6271                 type: integer
6272             type: object
6273         type: object
6274     served: true
6275     storage: true
6276     subresources:
6277       status: {}
6278 ---
6279 apiVersion: v1
6280 kind: ServiceAccount
6281 metadata:
6282   labels:
6283     app.kubernetes.io/component: helm-controller
6284     app.kubernetes.io/instance: flux-system
6285     app.kubernetes.io/part-of: flux
6286     app.kubernetes.io/version: v2.1.2
6287   name: helm-controller
6288   namespace: flux-system
6289 ---
6290 apiVersion: apps/v1
6291 kind: Deployment
6292 metadata:
6293   labels:
6294     app.kubernetes.io/component: helm-controller
6295     app.kubernetes.io/instance: flux-system
6296     app.kubernetes.io/part-of: flux
6297     app.kubernetes.io/version: v2.1.2
6298     control-plane: controller
6299   name: helm-controller
6300   namespace: flux-system
6301 spec:
6302   replicas: 1
6303   selector:
6304     matchLabels:
6305       app: helm-controller
6306   template:
6307     metadata:
6308       annotations:
6309         prometheus.io/port: "8080"
6310         prometheus.io/scrape: "true"
6311       labels:
6312         app: helm-controller
6313     spec:
6314       containers:
6315       - args:
6316         - --events-addr=http://notification-controller.flux-system.svc.cluster.local./
6317         - --watch-all-namespaces=true
6318         - --log-level=info
6319         - --log-encoding=json
6320         - --enable-leader-election
6321         env:
6322         - name: RUNTIME_NAMESPACE
6323           valueFrom:
6324             fieldRef:
6325               fieldPath: metadata.namespace
6326         image: ghcr.io/fluxcd/helm-controller:v0.36.2
6327         imagePullPolicy: IfNotPresent
6328         livenessProbe:
6329           httpGet:
6330             path: /healthz
6331             port: healthz
6332         name: manager
6333         ports:
6334         - containerPort: 8080
6335           name: http-prom
6336           protocol: TCP
6337         - containerPort: 9440
6338           name: healthz
6339           protocol: TCP
6340         readinessProbe:
6341           httpGet:
6342             path: /readyz
6343             port: healthz
6344         resources:
6345           limits:
6346             cpu: 1000m
6347             memory: 1Gi
6348           requests:
6349             cpu: 100m
6350             memory: 64Mi
6351         securityContext:
6352           allowPrivilegeEscalation: false
6353           capabilities:
6354             drop:
6355             - ALL
6356           readOnlyRootFilesystem: true
6357           runAsNonRoot: true
6358           seccompProfile:
6359             type: RuntimeDefault
6360         volumeMounts:
6361         - mountPath: /tmp
6362           name: temp
6363       nodeSelector:
6364         kubernetes.io/os: linux
6365       priorityClassName: system-cluster-critical
6366       securityContext:
6367         fsGroup: 1337
6368       serviceAccountName: helm-controller
6369       terminationGracePeriodSeconds: 600
6370       volumes:
6371       - emptyDir: {}
6372         name: temp
6373 ---
6374 apiVersion: apiextensions.k8s.io/v1
6375 kind: CustomResourceDefinition
6376 metadata:
6377   annotations:
6378     controller-gen.kubebuilder.io/version: v0.12.0
6379   labels:
6380     app.kubernetes.io/component: notification-controller
6381     app.kubernetes.io/instance: flux-system
6382     app.kubernetes.io/part-of: flux
6383     app.kubernetes.io/version: v2.1.2
6384   name: alerts.notification.toolkit.fluxcd.io
6385 spec:
6386   group: notification.toolkit.fluxcd.io
6387   names:
6388     kind: Alert
6389     listKind: AlertList
6390     plural: alerts
6391     singular: alert
6392   scope: Namespaced
6393   versions:
6394   - additionalPrinterColumns:
6395     - jsonPath: .metadata.creationTimestamp
6396       name: Age
6397       type: date
6398     - jsonPath: .status.conditions[?(@.type=="Ready")].status
6399       name: Ready
6400       type: string
6401     - jsonPath: .status.conditions[?(@.type=="Ready")].message
6402       name: Status
6403       type: string
6404     name: v1beta1
6405     schema:
6406       openAPIV3Schema:
6407         description: Alert is the Schema for the alerts API
6408         properties:
6409           apiVersion:
6410             description: 'APIVersion defines the versioned schema of this representation
6411               of an object. Servers should convert recognized schemas to the latest
6412               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
6413             type: string
6414           kind:
6415             description: 'Kind is a string value representing the REST resource this
6416               object represents. Servers may infer this from the endpoint the client
6417               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
6418             type: string
6419           metadata:
6420             type: object
6421           spec:
6422             description: AlertSpec defines an alerting rule for events involving a
6423               list of objects
6424             properties:
6425               eventSeverity:
6426                 default: info
6427                 description: Filter events based on severity, defaults to ('info').
6428                   If set to 'info' no events will be filtered.
6429                 enum:
6430                 - info
6431                 - error
6432                 type: string
6433               eventSources:
6434                 description: Filter events based on the involved objects.
6435                 items:
6436                   description: CrossNamespaceObjectReference contains enough information
6437                     to let you locate the typed referenced object at cluster level
6438                   properties:
6439                     apiVersion:
6440                       description: API version of the referent
6441                       type: string
6442                     kind:
6443                       description: Kind of the referent
6444                       enum:
6445                       - Bucket
6446                       - GitRepository
6447                       - Kustomization
6448                       - HelmRelease
6449                       - HelmChart
6450                       - HelmRepository
6451                       - ImageRepository
6452                       - ImagePolicy
6453                       - ImageUpdateAutomation
6454                       - OCIRepository
6455                       type: string
6456                     matchLabels:
6457                       additionalProperties:
6458                         type: string
6459                       description: MatchLabels is a map of {key,value} pairs. A single
6460                         {key,value} in the matchLabels map is equivalent to an element
6461                         of matchExpressions, whose key field is "key", the operator
6462                         is "In", and the values array contains only "value". The requirements
6463                         are ANDed.
6464                       type: object
6465                     name:
6466                       description: Name of the referent
6467                       maxLength: 53
6468                       minLength: 1
6469                       type: string
6470                     namespace:
6471                       description: Namespace of the referent
6472                       maxLength: 53
6473                       minLength: 1
6474                       type: string
6475                   required:
6476                   - name
6477                   type: object
6478                 type: array
6479               exclusionList:
6480                 description: A list of Golang regular expressions to be used for excluding
6481                   messages.
6482                 items:
6483                   type: string
6484                 type: array
6485               providerRef:
6486                 description: Send events using this provider.
6487                 properties:
6488                   name:
6489                     description: Name of the referent.
6490                     type: string
6491                 required:
6492                 - name
6493                 type: object
6494               summary:
6495                 description: Short description of the impact and affected cluster.
6496                 type: string
6497               suspend:
6498                 description: This flag tells the controller to suspend subsequent
6499                   events dispatching. Defaults to false.
6500                 type: boolean
6501             required:
6502             - eventSources
6503             - providerRef
6504             type: object
6505           status:
6506             default:
6507               observedGeneration: -1
6508             description: AlertStatus defines the observed state of Alert
6509             properties:
6510               conditions:
6511                 items:
6512                   description: "Condition contains details for one aspect of the current
6513                     state of this API Resource. --- This struct is intended for direct
6514                     use as an array at the field path .status.conditions.  For example,
6515                     \n type FooStatus struct{ // Represents the observations of a
6516                     foo's current state. // Known .status.conditions.type are: \"Available\",
6517                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
6518                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
6519                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
6520                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
6521                   properties:
6522                     lastTransitionTime:
6523                       description: lastTransitionTime is the last time the condition
6524                         transitioned from one status to another. This should be when
6525                         the underlying condition changed.  If that is not known, then
6526                         using the time when the API field changed is acceptable.
6527                       format: date-time
6528                       type: string
6529                     message:
6530                       description: message is a human readable message indicating
6531                         details about the transition. This may be an empty string.
6532                       maxLength: 32768
6533                       type: string
6534                     observedGeneration:
6535                       description: observedGeneration represents the .metadata.generation
6536                         that the condition was set based upon. For instance, if .metadata.generation
6537                         is currently 12, but the .status.conditions[x].observedGeneration
6538                         is 9, the condition is out of date with respect to the current
6539                         state of the instance.
6540                       format: int64
6541                       minimum: 0
6542                       type: integer
6543                     reason:
6544                       description: reason contains a programmatic identifier indicating
6545                         the reason for the condition's last transition. Producers
6546                         of specific condition types may define expected values and
6547                         meanings for this field, and whether the values are considered
6548                         a guaranteed API. The value should be a CamelCase string.
6549                         This field may not be empty.
6550                       maxLength: 1024
6551                       minLength: 1
6552                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
6553                       type: string
6554                     status:
6555                       description: status of the condition, one of True, False, Unknown.
6556                       enum:
6557                       - "True"
6558                       - "False"
6559                       - Unknown
6560                       type: string
6561                     type:
6562                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
6563                         --- Many .condition.type values are consistent across resources
6564                         like Available, but because arbitrary conditions can be useful
6565                         (see .node.status.conditions), the ability to deconflict is
6566                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
6567                       maxLength: 316
6568                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
6569                       type: string
6570                   required:
6571                   - lastTransitionTime
6572                   - message
6573                   - reason
6574                   - status
6575                   - type
6576                   type: object
6577                 type: array
6578               observedGeneration:
6579                 description: ObservedGeneration is the last observed generation.
6580                 format: int64
6581                 type: integer
6582             type: object
6583         type: object
6584     served: true
6585     storage: false
6586     subresources:
6587       status: {}
6588   - additionalPrinterColumns:
6589     - jsonPath: .metadata.creationTimestamp
6590       name: Age
6591       type: date
6592     - jsonPath: .status.conditions[?(@.type=="Ready")].status
6593       name: Ready
6594       type: string
6595     - jsonPath: .status.conditions[?(@.type=="Ready")].message
6596       name: Status
6597       type: string
6598     name: v1beta2
6599     schema:
6600       openAPIV3Schema:
6601         description: Alert is the Schema for the alerts API
6602         properties:
6603           apiVersion:
6604             description: 'APIVersion defines the versioned schema of this representation
6605               of an object. Servers should convert recognized schemas to the latest
6606               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
6607             type: string
6608           kind:
6609             description: 'Kind is a string value representing the REST resource this
6610               object represents. Servers may infer this from the endpoint the client
6611               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
6612             type: string
6613           metadata:
6614             type: object
6615           spec:
6616             description: AlertSpec defines an alerting rule for events involving a
6617               list of objects.
6618             properties:
6619               eventMetadata:
6620                 additionalProperties:
6621                   type: string
6622                 description: EventMetadata is an optional field for adding metadata
6623                   to events dispatched by the controller. This can be used for enhancing
6624                   the context of the event. If a field would override one already
6625                   present on the original event as generated by the emitter, then
6626                   the override doesn't happen, i.e. the original value is preserved,
6627                   and an info log is printed.
6628                 type: object
6629               eventSeverity:
6630                 default: info
6631                 description: EventSeverity specifies how to filter events based on
6632                   severity. If set to 'info' no events will be filtered.
6633                 enum:
6634                 - info
6635                 - error
6636                 type: string
6637               eventSources:
6638                 description: EventSources specifies how to filter events based on
6639                   the involved object kind, name and namespace.
6640                 items:
6641                   description: CrossNamespaceObjectReference contains enough information
6642                     to let you locate the typed referenced object at cluster level
6643                   properties:
6644                     apiVersion:
6645                       description: API version of the referent
6646                       type: string
6647                     kind:
6648                       description: Kind of the referent
6649                       enum:
6650                       - Bucket
6651                       - GitRepository
6652                       - Kustomization
6653                       - HelmRelease
6654                       - HelmChart
6655                       - HelmRepository
6656                       - ImageRepository
6657                       - ImagePolicy
6658                       - ImageUpdateAutomation
6659                       - OCIRepository
6660                       type: string
6661                     matchLabels:
6662                       additionalProperties:
6663                         type: string
6664                       description: MatchLabels is a map of {key,value} pairs. A single
6665                         {key,value} in the matchLabels map is equivalent to an element
6666                         of matchExpressions, whose key field is "key", the operator
6667                         is "In", and the values array contains only "value". The requirements
6668                         are ANDed. MatchLabels requires the name to be set to `*`.
6669                       type: object
6670                     name:
6671                       description: Name of the referent If multiple resources are
6672                         targeted `*` may be set.
6673                       maxLength: 53
6674                       minLength: 1
6675                       type: string
6676                     namespace:
6677                       description: Namespace of the referent
6678                       maxLength: 53
6679                       minLength: 1
6680                       type: string
6681                   required:
6682                   - kind
6683                   - name
6684                   type: object
6685                 type: array
6686               exclusionList:
6687                 description: ExclusionList specifies a list of Golang regular expressions
6688                   to be used for excluding messages.
6689                 items:
6690                   type: string
6691                 type: array
6692               inclusionList:
6693                 description: InclusionList specifies a list of Golang regular expressions
6694                   to be used for including messages.
6695                 items:
6696                   type: string
6697                 type: array
6698               providerRef:
6699                 description: ProviderRef specifies which Provider this Alert should
6700                   use.
6701                 properties:
6702                   name:
6703                     description: Name of the referent.
6704                     type: string
6705                 required:
6706                 - name
6707                 type: object
6708               summary:
6709                 description: Summary holds a short description of the impact and affected
6710                   cluster.
6711                 maxLength: 255
6712                 type: string
6713               suspend:
6714                 description: Suspend tells the controller to suspend subsequent events
6715                   handling for this Alert.
6716                 type: boolean
6717             required:
6718             - eventSources
6719             - providerRef
6720             type: object
6721           status:
6722             default:
6723               observedGeneration: -1
6724             description: AlertStatus defines the observed state of the Alert.
6725             properties:
6726               conditions:
6727                 description: Conditions holds the conditions for the Alert.
6728                 items:
6729                   description: "Condition contains details for one aspect of the current
6730                     state of this API Resource. --- This struct is intended for direct
6731                     use as an array at the field path .status.conditions.  For example,
6732                     \n type FooStatus struct{ // Represents the observations of a
6733                     foo's current state. // Known .status.conditions.type are: \"Available\",
6734                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
6735                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
6736                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
6737                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
6738                   properties:
6739                     lastTransitionTime:
6740                       description: lastTransitionTime is the last time the condition
6741                         transitioned from one status to another. This should be when
6742                         the underlying condition changed.  If that is not known, then
6743                         using the time when the API field changed is acceptable.
6744                       format: date-time
6745                       type: string
6746                     message:
6747                       description: message is a human readable message indicating
6748                         details about the transition. This may be an empty string.
6749                       maxLength: 32768
6750                       type: string
6751                     observedGeneration:
6752                       description: observedGeneration represents the .metadata.generation
6753                         that the condition was set based upon. For instance, if .metadata.generation
6754                         is currently 12, but the .status.conditions[x].observedGeneration
6755                         is 9, the condition is out of date with respect to the current
6756                         state of the instance.
6757                       format: int64
6758                       minimum: 0
6759                       type: integer
6760                     reason:
6761                       description: reason contains a programmatic identifier indicating
6762                         the reason for the condition's last transition. Producers
6763                         of specific condition types may define expected values and
6764                         meanings for this field, and whether the values are considered
6765                         a guaranteed API. The value should be a CamelCase string.
6766                         This field may not be empty.
6767                       maxLength: 1024
6768                       minLength: 1
6769                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
6770                       type: string
6771                     status:
6772                       description: status of the condition, one of True, False, Unknown.
6773                       enum:
6774                       - "True"
6775                       - "False"
6776                       - Unknown
6777                       type: string
6778                     type:
6779                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
6780                         --- Many .condition.type values are consistent across resources
6781                         like Available, but because arbitrary conditions can be useful
6782                         (see .node.status.conditions), the ability to deconflict is
6783                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
6784                       maxLength: 316
6785                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
6786                       type: string
6787                   required:
6788                   - lastTransitionTime
6789                   - message
6790                   - reason
6791                   - status
6792                   - type
6793                   type: object
6794                 type: array
6795               lastHandledReconcileAt:
6796                 description: LastHandledReconcileAt holds the value of the most recent
6797                   reconcile request value, so a change of the annotation value can
6798                   be detected.
6799                 type: string
6800               observedGeneration:
6801                 description: ObservedGeneration is the last observed generation.
6802                 format: int64
6803                 type: integer
6804             type: object
6805         type: object
6806     served: true
6807     storage: true
6808     subresources:
6809       status: {}
6810 ---
6811 apiVersion: apiextensions.k8s.io/v1
6812 kind: CustomResourceDefinition
6813 metadata:
6814   annotations:
6815     controller-gen.kubebuilder.io/version: v0.12.0
6816   labels:
6817     app.kubernetes.io/component: notification-controller
6818     app.kubernetes.io/instance: flux-system
6819     app.kubernetes.io/part-of: flux
6820     app.kubernetes.io/version: v2.1.2
6821   name: providers.notification.toolkit.fluxcd.io
6822 spec:
6823   group: notification.toolkit.fluxcd.io
6824   names:
6825     kind: Provider
6826     listKind: ProviderList
6827     plural: providers
6828     singular: provider
6829   scope: Namespaced
6830   versions:
6831   - additionalPrinterColumns:
6832     - jsonPath: .metadata.creationTimestamp
6833       name: Age
6834       type: date
6835     - jsonPath: .status.conditions[?(@.type=="Ready")].status
6836       name: Ready
6837       type: string
6838     - jsonPath: .status.conditions[?(@.type=="Ready")].message
6839       name: Status
6840       type: string
6841     name: v1beta1
6842     schema:
6843       openAPIV3Schema:
6844         description: Provider is the Schema for the providers API
6845         properties:
6846           apiVersion:
6847             description: 'APIVersion defines the versioned schema of this representation
6848               of an object. Servers should convert recognized schemas to the latest
6849               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
6850             type: string
6851           kind:
6852             description: 'Kind is a string value representing the REST resource this
6853               object represents. Servers may infer this from the endpoint the client
6854               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
6855             type: string
6856           metadata:
6857             type: object
6858           spec:
6859             description: ProviderSpec defines the desired state of Provider
6860             properties:
6861               address:
6862                 description: HTTP/S webhook address of this provider
6863                 pattern: ^(http|https)://
6864                 type: string
6865               certSecretRef:
6866                 description: CertSecretRef can be given the name of a secret containing
6867                   a PEM-encoded CA certificate (`caFile`)
6868                 properties:
6869                   name:
6870                     description: Name of the referent.
6871                     type: string
6872                 required:
6873                 - name
6874                 type: object
6875               channel:
6876                 description: Alert channel for this provider
6877                 type: string
6878               proxy:
6879                 description: HTTP/S address of the proxy
6880                 pattern: ^(http|https)://
6881                 type: string
6882               secretRef:
6883                 description: Secret reference containing the provider webhook URL
6884                   using "address" as data key
6885                 properties:
6886                   name:
6887                     description: Name of the referent.
6888                     type: string
6889                 required:
6890                 - name
6891                 type: object
6892               suspend:
6893                 description: This flag tells the controller to suspend subsequent
6894                   events handling. Defaults to false.
6895                 type: boolean
6896               timeout:
6897                 description: Timeout for sending alerts to the provider.
6898                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
6899                 type: string
6900               type:
6901                 description: Type of provider
6902                 enum:
6903                 - slack
6904                 - discord
6905                 - msteams
6906                 - rocket
6907                 - generic
6908                 - generic-hmac
6909                 - github
6910                 - gitlab
6911                 - bitbucket
6912                 - azuredevops
6913                 - googlechat
6914                 - webex
6915                 - sentry
6916                 - azureeventhub
6917                 - telegram
6918                 - lark
6919                 - matrix
6920                 - opsgenie
6921                 - alertmanager
6922                 - grafana
6923                 - githubdispatch
6924                 type: string
6925               username:
6926                 description: Bot username for this provider
6927                 type: string
6928             required:
6929             - type
6930             type: object
6931           status:
6932             default:
6933               observedGeneration: -1
6934             description: ProviderStatus defines the observed state of Provider
6935             properties:
6936               conditions:
6937                 items:
6938                   description: "Condition contains details for one aspect of the current
6939                     state of this API Resource. --- This struct is intended for direct
6940                     use as an array at the field path .status.conditions.  For example,
6941                     \n type FooStatus struct{ // Represents the observations of a
6942                     foo's current state. // Known .status.conditions.type are: \"Available\",
6943                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
6944                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
6945                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
6946                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
6947                   properties:
6948                     lastTransitionTime:
6949                       description: lastTransitionTime is the last time the condition
6950                         transitioned from one status to another. This should be when
6951                         the underlying condition changed.  If that is not known, then
6952                         using the time when the API field changed is acceptable.
6953                       format: date-time
6954                       type: string
6955                     message:
6956                       description: message is a human readable message indicating
6957                         details about the transition. This may be an empty string.
6958                       maxLength: 32768
6959                       type: string
6960                     observedGeneration:
6961                       description: observedGeneration represents the .metadata.generation
6962                         that the condition was set based upon. For instance, if .metadata.generation
6963                         is currently 12, but the .status.conditions[x].observedGeneration
6964                         is 9, the condition is out of date with respect to the current
6965                         state of the instance.
6966                       format: int64
6967                       minimum: 0
6968                       type: integer
6969                     reason:
6970                       description: reason contains a programmatic identifier indicating
6971                         the reason for the condition's last transition. Producers
6972                         of specific condition types may define expected values and
6973                         meanings for this field, and whether the values are considered
6974                         a guaranteed API. The value should be a CamelCase string.
6975                         This field may not be empty.
6976                       maxLength: 1024
6977                       minLength: 1
6978                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
6979                       type: string
6980                     status:
6981                       description: status of the condition, one of True, False, Unknown.
6982                       enum:
6983                       - "True"
6984                       - "False"
6985                       - Unknown
6986                       type: string
6987                     type:
6988                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
6989                         --- Many .condition.type values are consistent across resources
6990                         like Available, but because arbitrary conditions can be useful
6991                         (see .node.status.conditions), the ability to deconflict is
6992                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
6993                       maxLength: 316
6994                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
6995                       type: string
6996                   required:
6997                   - lastTransitionTime
6998                   - message
6999                   - reason
7000                   - status
7001                   - type
7002                   type: object
7003                 type: array
7004               observedGeneration:
7005                 description: ObservedGeneration is the last reconciled generation.
7006                 format: int64
7007                 type: integer
7008             type: object
7009         type: object
7010     served: true
7011     storage: false
7012     subresources:
7013       status: {}
7014   - additionalPrinterColumns:
7015     - jsonPath: .metadata.creationTimestamp
7016       name: Age
7017       type: date
7018     - jsonPath: .status.conditions[?(@.type=="Ready")].status
7019       name: Ready
7020       type: string
7021     - jsonPath: .status.conditions[?(@.type=="Ready")].message
7022       name: Status
7023       type: string
7024     name: v1beta2
7025     schema:
7026       openAPIV3Schema:
7027         description: Provider is the Schema for the providers API.
7028         properties:
7029           apiVersion:
7030             description: 'APIVersion defines the versioned schema of this representation
7031               of an object. Servers should convert recognized schemas to the latest
7032               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
7033             type: string
7034           kind:
7035             description: 'Kind is a string value representing the REST resource this
7036               object represents. Servers may infer this from the endpoint the client
7037               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
7038             type: string
7039           metadata:
7040             type: object
7041           spec:
7042             description: ProviderSpec defines the desired state of the Provider.
7043             properties:
7044               address:
7045                 description: Address specifies the endpoint, in a generic sense, to
7046                   where alerts are sent. What kind of endpoint depends on the specific
7047                   Provider type being used. For the generic Provider, for example,
7048                   this is an HTTP/S address. For other Provider types this could be
7049                   a project ID or a namespace.
7050                 maxLength: 2048
7051                 type: string
7052               certSecretRef:
7053                 description: "CertSecretRef specifies the Secret containing a PEM-encoded
7054                   CA certificate (in the `ca.crt` key). \n Note: Support for the `caFile`
7055                   key has been deprecated."
7056                 properties:
7057                   name:
7058                     description: Name of the referent.
7059                     type: string
7060                 required:
7061                 - name
7062                 type: object
7063               channel:
7064                 description: Channel specifies the destination channel where events
7065                   should be posted.
7066                 maxLength: 2048
7067                 type: string
7068               interval:
7069                 description: Interval at which to reconcile the Provider with its
7070                   Secret references.
7071                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7072                 type: string
7073               proxy:
7074                 description: Proxy the HTTP/S address of the proxy server.
7075                 maxLength: 2048
7076                 pattern: ^(http|https)://.*$
7077                 type: string
7078               secretRef:
7079                 description: SecretRef specifies the Secret containing the authentication
7080                   credentials for this Provider.
7081                 properties:
7082                   name:
7083                     description: Name of the referent.
7084                     type: string
7085                 required:
7086                 - name
7087                 type: object
7088               suspend:
7089                 description: Suspend tells the controller to suspend subsequent events
7090                   handling for this Provider.
7091                 type: boolean
7092               timeout:
7093                 description: Timeout for sending alerts to the Provider.
7094                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
7095                 type: string
7096               type:
7097                 description: Type specifies which Provider implementation to use.
7098                 enum:
7099                 - slack
7100                 - discord
7101                 - msteams
7102                 - rocket
7103                 - generic
7104                 - generic-hmac
7105                 - github
7106                 - gitlab
7107                 - gitea
7108                 - bitbucket
7109                 - azuredevops
7110                 - googlechat
7111                 - googlepubsub
7112                 - webex
7113                 - sentry
7114                 - azureeventhub
7115                 - telegram
7116                 - lark
7117                 - matrix
7118                 - opsgenie
7119                 - alertmanager
7120                 - grafana
7121                 - githubdispatch
7122                 - pagerduty
7123                 - datadog
7124                 type: string
7125               username:
7126                 description: Username specifies the name under which events are posted.
7127                 maxLength: 2048
7128                 type: string
7129             required:
7130             - type
7131             type: object
7132           status:
7133             default:
7134               observedGeneration: -1
7135             description: ProviderStatus defines the observed state of the Provider.
7136             properties:
7137               conditions:
7138                 description: Conditions holds the conditions for the Provider.
7139                 items:
7140                   description: "Condition contains details for one aspect of the current
7141                     state of this API Resource. --- This struct is intended for direct
7142                     use as an array at the field path .status.conditions.  For example,
7143                     \n type FooStatus struct{ // Represents the observations of a
7144                     foo's current state. // Known .status.conditions.type are: \"Available\",
7145                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
7146                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
7147                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
7148                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
7149                   properties:
7150                     lastTransitionTime:
7151                       description: lastTransitionTime is the last time the condition
7152                         transitioned from one status to another. This should be when
7153                         the underlying condition changed.  If that is not known, then
7154                         using the time when the API field changed is acceptable.
7155                       format: date-time
7156                       type: string
7157                     message:
7158                       description: message is a human readable message indicating
7159                         details about the transition. This may be an empty string.
7160                       maxLength: 32768
7161                       type: string
7162                     observedGeneration:
7163                       description: observedGeneration represents the .metadata.generation
7164                         that the condition was set based upon. For instance, if .metadata.generation
7165                         is currently 12, but the .status.conditions[x].observedGeneration
7166                         is 9, the condition is out of date with respect to the current
7167                         state of the instance.
7168                       format: int64
7169                       minimum: 0
7170                       type: integer
7171                     reason:
7172                       description: reason contains a programmatic identifier indicating
7173                         the reason for the condition's last transition. Producers
7174                         of specific condition types may define expected values and
7175                         meanings for this field, and whether the values are considered
7176                         a guaranteed API. The value should be a CamelCase string.
7177                         This field may not be empty.
7178                       maxLength: 1024
7179                       minLength: 1
7180                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
7181                       type: string
7182                     status:
7183                       description: status of the condition, one of True, False, Unknown.
7184                       enum:
7185                       - "True"
7186                       - "False"
7187                       - Unknown
7188                       type: string
7189                     type:
7190                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
7191                         --- Many .condition.type values are consistent across resources
7192                         like Available, but because arbitrary conditions can be useful
7193                         (see .node.status.conditions), the ability to deconflict is
7194                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
7195                       maxLength: 316
7196                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
7197                       type: string
7198                   required:
7199                   - lastTransitionTime
7200                   - message
7201                   - reason
7202                   - status
7203                   - type
7204                   type: object
7205                 type: array
7206               lastHandledReconcileAt:
7207                 description: LastHandledReconcileAt holds the value of the most recent
7208                   reconcile request value, so a change of the annotation value can
7209                   be detected.
7210                 type: string
7211               observedGeneration:
7212                 description: ObservedGeneration is the last reconciled generation.
7213                 format: int64
7214                 type: integer
7215             type: object
7216         type: object
7217     served: true
7218     storage: true
7219     subresources:
7220       status: {}
7221 ---
7222 apiVersion: apiextensions.k8s.io/v1
7223 kind: CustomResourceDefinition
7224 metadata:
7225   annotations:
7226     controller-gen.kubebuilder.io/version: v0.12.0
7227   labels:
7228     app.kubernetes.io/component: notification-controller
7229     app.kubernetes.io/instance: flux-system
7230     app.kubernetes.io/part-of: flux
7231     app.kubernetes.io/version: v2.1.2
7232   name: receivers.notification.toolkit.fluxcd.io
7233 spec:
7234   group: notification.toolkit.fluxcd.io
7235   names:
7236     kind: Receiver
7237     listKind: ReceiverList
7238     plural: receivers
7239     singular: receiver
7240   scope: Namespaced
7241   versions:
7242   - additionalPrinterColumns:
7243     - jsonPath: .metadata.creationTimestamp
7244       name: Age
7245       type: date
7246     - jsonPath: .status.conditions[?(@.type=="Ready")].status
7247       name: Ready
7248       type: string
7249     - jsonPath: .status.conditions[?(@.type=="Ready")].message
7250       name: Status
7251       type: string
7252     name: v1
7253     schema:
7254       openAPIV3Schema:
7255         description: Receiver is the Schema for the receivers API.
7256         properties:
7257           apiVersion:
7258             description: 'APIVersion defines the versioned schema of this representation
7259               of an object. Servers should convert recognized schemas to the latest
7260               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
7261             type: string
7262           kind:
7263             description: 'Kind is a string value representing the REST resource this
7264               object represents. Servers may infer this from the endpoint the client
7265               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
7266             type: string
7267           metadata:
7268             type: object
7269           spec:
7270             description: ReceiverSpec defines the desired state of the Receiver.
7271             properties:
7272               events:
7273                 description: Events specifies the list of event types to handle, e.g.
7274                   'push' for GitHub or 'Push Hook' for GitLab.
7275                 items:
7276                   type: string
7277                 type: array
7278               interval:
7279                 default: 10m
7280                 description: Interval at which to reconcile the Receiver with its
7281                   Secret references.
7282                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7283                 type: string
7284               resources:
7285                 description: A list of resources to be notified about changes.
7286                 items:
7287                   description: CrossNamespaceObjectReference contains enough information
7288                     to let you locate the typed referenced object at cluster level
7289                   properties:
7290                     apiVersion:
7291                       description: API version of the referent
7292                       type: string
7293                     kind:
7294                       description: Kind of the referent
7295                       enum:
7296                       - Bucket
7297                       - GitRepository
7298                       - Kustomization
7299                       - HelmRelease
7300                       - HelmChart
7301                       - HelmRepository
7302                       - ImageRepository
7303                       - ImagePolicy
7304                       - ImageUpdateAutomation
7305                       - OCIRepository
7306                       type: string
7307                     matchLabels:
7308                       additionalProperties:
7309                         type: string
7310                       description: MatchLabels is a map of {key,value} pairs. A single
7311                         {key,value} in the matchLabels map is equivalent to an element
7312                         of matchExpressions, whose key field is "key", the operator
7313                         is "In", and the values array contains only "value". The requirements
7314                         are ANDed. MatchLabels requires the name to be set to `*`.
7315                       type: object
7316                     name:
7317                       description: Name of the referent If multiple resources are
7318                         targeted `*` may be set.
7319                       maxLength: 53
7320                       minLength: 1
7321                       type: string
7322                     namespace:
7323                       description: Namespace of the referent
7324                       maxLength: 53
7325                       minLength: 1
7326                       type: string
7327                   required:
7328                   - kind
7329                   - name
7330                   type: object
7331                 type: array
7332               secretRef:
7333                 description: SecretRef specifies the Secret containing the token used
7334                   to validate the payload authenticity.
7335                 properties:
7336                   name:
7337                     description: Name of the referent.
7338                     type: string
7339                 required:
7340                 - name
7341                 type: object
7342               suspend:
7343                 description: Suspend tells the controller to suspend subsequent events
7344                   handling for this receiver.
7345                 type: boolean
7346               type:
7347                 description: Type of webhook sender, used to determine the validation
7348                   procedure and payload deserialization.
7349                 enum:
7350                 - generic
7351                 - generic-hmac
7352                 - github
7353                 - gitlab
7354                 - bitbucket
7355                 - harbor
7356                 - dockerhub
7357                 - quay
7358                 - gcr
7359                 - nexus
7360                 - acr
7361                 type: string
7362             required:
7363             - resources
7364             - secretRef
7365             - type
7366             type: object
7367           status:
7368             default:
7369               observedGeneration: -1
7370             description: ReceiverStatus defines the observed state of the Receiver.
7371             properties:
7372               conditions:
7373                 description: Conditions holds the conditions for the Receiver.
7374                 items:
7375                   description: "Condition contains details for one aspect of the current
7376                     state of this API Resource. --- This struct is intended for direct
7377                     use as an array at the field path .status.conditions.  For example,
7378                     \n type FooStatus struct{ // Represents the observations of a
7379                     foo's current state. // Known .status.conditions.type are: \"Available\",
7380                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
7381                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
7382                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
7383                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
7384                   properties:
7385                     lastTransitionTime:
7386                       description: lastTransitionTime is the last time the condition
7387                         transitioned from one status to another. This should be when
7388                         the underlying condition changed.  If that is not known, then
7389                         using the time when the API field changed is acceptable.
7390                       format: date-time
7391                       type: string
7392                     message:
7393                       description: message is a human readable message indicating
7394                         details about the transition. This may be an empty string.
7395                       maxLength: 32768
7396                       type: string
7397                     observedGeneration:
7398                       description: observedGeneration represents the .metadata.generation
7399                         that the condition was set based upon. For instance, if .metadata.generation
7400                         is currently 12, but the .status.conditions[x].observedGeneration
7401                         is 9, the condition is out of date with respect to the current
7402                         state of the instance.
7403                       format: int64
7404                       minimum: 0
7405                       type: integer
7406                     reason:
7407                       description: reason contains a programmatic identifier indicating
7408                         the reason for the condition's last transition. Producers
7409                         of specific condition types may define expected values and
7410                         meanings for this field, and whether the values are considered
7411                         a guaranteed API. The value should be a CamelCase string.
7412                         This field may not be empty.
7413                       maxLength: 1024
7414                       minLength: 1
7415                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
7416                       type: string
7417                     status:
7418                       description: status of the condition, one of True, False, Unknown.
7419                       enum:
7420                       - "True"
7421                       - "False"
7422                       - Unknown
7423                       type: string
7424                     type:
7425                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
7426                         --- Many .condition.type values are consistent across resources
7427                         like Available, but because arbitrary conditions can be useful
7428                         (see .node.status.conditions), the ability to deconflict is
7429                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
7430                       maxLength: 316
7431                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
7432                       type: string
7433                   required:
7434                   - lastTransitionTime
7435                   - message
7436                   - reason
7437                   - status
7438                   - type
7439                   type: object
7440                 type: array
7441               lastHandledReconcileAt:
7442                 description: LastHandledReconcileAt holds the value of the most recent
7443                   reconcile request value, so a change of the annotation value can
7444                   be detected.
7445                 type: string
7446               observedGeneration:
7447                 description: ObservedGeneration is the last observed generation of
7448                   the Receiver object.
7449                 format: int64
7450                 type: integer
7451               webhookPath:
7452                 description: WebhookPath is the generated incoming webhook address
7453                   in the format of '/hook/sha256sum(token+name+namespace)'.
7454                 type: string
7455             type: object
7456         type: object
7457     served: true
7458     storage: true
7459     subresources:
7460       status: {}
7461   - additionalPrinterColumns:
7462     - jsonPath: .metadata.creationTimestamp
7463       name: Age
7464       type: date
7465     - jsonPath: .status.conditions[?(@.type=="Ready")].status
7466       name: Ready
7467       type: string
7468     - jsonPath: .status.conditions[?(@.type=="Ready")].message
7469       name: Status
7470       type: string
7471     deprecated: true
7472     deprecationWarning: v1beta1 Receiver is deprecated, upgrade to v1
7473     name: v1beta1
7474     schema:
7475       openAPIV3Schema:
7476         description: Receiver is the Schema for the receivers API
7477         properties:
7478           apiVersion:
7479             description: 'APIVersion defines the versioned schema of this representation
7480               of an object. Servers should convert recognized schemas to the latest
7481               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
7482             type: string
7483           kind:
7484             description: 'Kind is a string value representing the REST resource this
7485               object represents. Servers may infer this from the endpoint the client
7486               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
7487             type: string
7488           metadata:
7489             type: object
7490           spec:
7491             description: ReceiverSpec defines the desired state of Receiver
7492             properties:
7493               events:
7494                 description: A list of events to handle, e.g. 'push' for GitHub or
7495                   'Push Hook' for GitLab.
7496                 items:
7497                   type: string
7498                 type: array
7499               resources:
7500                 description: A list of resources to be notified about changes.
7501                 items:
7502                   description: CrossNamespaceObjectReference contains enough information
7503                     to let you locate the typed referenced object at cluster level
7504                   properties:
7505                     apiVersion:
7506                       description: API version of the referent
7507                       type: string
7508                     kind:
7509                       description: Kind of the referent
7510                       enum:
7511                       - Bucket
7512                       - GitRepository
7513                       - Kustomization
7514                       - HelmRelease
7515                       - HelmChart
7516                       - HelmRepository
7517                       - ImageRepository
7518                       - ImagePolicy
7519                       - ImageUpdateAutomation
7520                       - OCIRepository
7521                       type: string
7522                     matchLabels:
7523                       additionalProperties:
7524                         type: string
7525                       description: MatchLabels is a map of {key,value} pairs. A single
7526                         {key,value} in the matchLabels map is equivalent to an element
7527                         of matchExpressions, whose key field is "key", the operator
7528                         is "In", and the values array contains only "value". The requirements
7529                         are ANDed.
7530                       type: object
7531                     name:
7532                       description: Name of the referent
7533                       maxLength: 53
7534                       minLength: 1
7535                       type: string
7536                     namespace:
7537                       description: Namespace of the referent
7538                       maxLength: 53
7539                       minLength: 1
7540                       type: string
7541                   required:
7542                   - name
7543                   type: object
7544                 type: array
7545               secretRef:
7546                 description: Secret reference containing the token used to validate
7547                   the payload authenticity
7548                 properties:
7549                   name:
7550                     description: Name of the referent.
7551                     type: string
7552                 required:
7553                 - name
7554                 type: object
7555               suspend:
7556                 description: This flag tells the controller to suspend subsequent
7557                   events handling. Defaults to false.
7558                 type: boolean
7559               type:
7560                 description: Type of webhook sender, used to determine the validation
7561                   procedure and payload deserialization.
7562                 enum:
7563                 - generic
7564                 - generic-hmac
7565                 - github
7566                 - gitlab
7567                 - bitbucket
7568                 - harbor
7569                 - dockerhub
7570                 - quay
7571                 - gcr
7572                 - nexus
7573                 - acr
7574                 type: string
7575             required:
7576             - resources
7577             - type
7578             type: object
7579           status:
7580             default:
7581               observedGeneration: -1
7582             description: ReceiverStatus defines the observed state of Receiver
7583             properties:
7584               conditions:
7585                 items:
7586                   description: "Condition contains details for one aspect of the current
7587                     state of this API Resource. --- This struct is intended for direct
7588                     use as an array at the field path .status.conditions.  For example,
7589                     \n type FooStatus struct{ // Represents the observations of a
7590                     foo's current state. // Known .status.conditions.type are: \"Available\",
7591                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
7592                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
7593                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
7594                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
7595                   properties:
7596                     lastTransitionTime:
7597                       description: lastTransitionTime is the last time the condition
7598                         transitioned from one status to another. This should be when
7599                         the underlying condition changed.  If that is not known, then
7600                         using the time when the API field changed is acceptable.
7601                       format: date-time
7602                       type: string
7603                     message:
7604                       description: message is a human readable message indicating
7605                         details about the transition. This may be an empty string.
7606                       maxLength: 32768
7607                       type: string
7608                     observedGeneration:
7609                       description: observedGeneration represents the .metadata.generation
7610                         that the condition was set based upon. For instance, if .metadata.generation
7611                         is currently 12, but the .status.conditions[x].observedGeneration
7612                         is 9, the condition is out of date with respect to the current
7613                         state of the instance.
7614                       format: int64
7615                       minimum: 0
7616                       type: integer
7617                     reason:
7618                       description: reason contains a programmatic identifier indicating
7619                         the reason for the condition's last transition. Producers
7620                         of specific condition types may define expected values and
7621                         meanings for this field, and whether the values are considered
7622                         a guaranteed API. The value should be a CamelCase string.
7623                         This field may not be empty.
7624                       maxLength: 1024
7625                       minLength: 1
7626                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
7627                       type: string
7628                     status:
7629                       description: status of the condition, one of True, False, Unknown.
7630                       enum:
7631                       - "True"
7632                       - "False"
7633                       - Unknown
7634                       type: string
7635                     type:
7636                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
7637                         --- Many .condition.type values are consistent across resources
7638                         like Available, but because arbitrary conditions can be useful
7639                         (see .node.status.conditions), the ability to deconflict is
7640                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
7641                       maxLength: 316
7642                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
7643                       type: string
7644                   required:
7645                   - lastTransitionTime
7646                   - message
7647                   - reason
7648                   - status
7649                   - type
7650                   type: object
7651                 type: array
7652               observedGeneration:
7653                 description: ObservedGeneration is the last observed generation.
7654                 format: int64
7655                 type: integer
7656               url:
7657                 description: Generated webhook URL in the format of '/hook/sha256sum(token+name+namespace)'.
7658                 type: string
7659             type: object
7660         type: object
7661     served: true
7662     storage: false
7663     subresources:
7664       status: {}
7665   - additionalPrinterColumns:
7666     - jsonPath: .metadata.creationTimestamp
7667       name: Age
7668       type: date
7669     - jsonPath: .status.conditions[?(@.type=="Ready")].status
7670       name: Ready
7671       type: string
7672     - jsonPath: .status.conditions[?(@.type=="Ready")].message
7673       name: Status
7674       type: string
7675     deprecated: true
7676     deprecationWarning: v1beta2 Receiver is deprecated, upgrade to v1
7677     name: v1beta2
7678     schema:
7679       openAPIV3Schema:
7680         description: Receiver is the Schema for the receivers API.
7681         properties:
7682           apiVersion:
7683             description: 'APIVersion defines the versioned schema of this representation
7684               of an object. Servers should convert recognized schemas to the latest
7685               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
7686             type: string
7687           kind:
7688             description: 'Kind is a string value representing the REST resource this
7689               object represents. Servers may infer this from the endpoint the client
7690               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
7691             type: string
7692           metadata:
7693             type: object
7694           spec:
7695             description: ReceiverSpec defines the desired state of the Receiver.
7696             properties:
7697               events:
7698                 description: Events specifies the list of event types to handle, e.g.
7699                   'push' for GitHub or 'Push Hook' for GitLab.
7700                 items:
7701                   type: string
7702                 type: array
7703               interval:
7704                 description: Interval at which to reconcile the Receiver with its
7705                   Secret references.
7706                 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
7707                 type: string
7708               resources:
7709                 description: A list of resources to be notified about changes.
7710                 items:
7711                   description: CrossNamespaceObjectReference contains enough information
7712                     to let you locate the typed referenced object at cluster level
7713                   properties:
7714                     apiVersion:
7715                       description: API version of the referent
7716                       type: string
7717                     kind:
7718                       description: Kind of the referent
7719                       enum:
7720                       - Bucket
7721                       - GitRepository
7722                       - Kustomization
7723                       - HelmRelease
7724                       - HelmChart
7725                       - HelmRepository
7726                       - ImageRepository
7727                       - ImagePolicy
7728                       - ImageUpdateAutomation
7729                       - OCIRepository
7730                       type: string
7731                     matchLabels:
7732                       additionalProperties:
7733                         type: string
7734                       description: MatchLabels is a map of {key,value} pairs. A single
7735                         {key,value} in the matchLabels map is equivalent to an element
7736                         of matchExpressions, whose key field is "key", the operator
7737                         is "In", and the values array contains only "value". The requirements
7738                         are ANDed. MatchLabels requires the name to be set to `*`.
7739                       type: object
7740                     name:
7741                       description: Name of the referent If multiple resources are
7742                         targeted `*` may be set.
7743                       maxLength: 53
7744                       minLength: 1
7745                       type: string
7746                     namespace:
7747                       description: Namespace of the referent
7748                       maxLength: 53
7749                       minLength: 1
7750                       type: string
7751                   required:
7752                   - kind
7753                   - name
7754                   type: object
7755                 type: array
7756               secretRef:
7757                 description: SecretRef specifies the Secret containing the token used
7758                   to validate the payload authenticity.
7759                 properties:
7760                   name:
7761                     description: Name of the referent.
7762                     type: string
7763                 required:
7764                 - name
7765                 type: object
7766               suspend:
7767                 description: Suspend tells the controller to suspend subsequent events
7768                   handling for this receiver.
7769                 type: boolean
7770               type:
7771                 description: Type of webhook sender, used to determine the validation
7772                   procedure and payload deserialization.
7773                 enum:
7774                 - generic
7775                 - generic-hmac
7776                 - github
7777                 - gitlab
7778                 - bitbucket
7779                 - harbor
7780                 - dockerhub
7781                 - quay
7782                 - gcr
7783                 - nexus
7784                 - acr
7785                 type: string
7786             required:
7787             - resources
7788             - type
7789             type: object
7790           status:
7791             default:
7792               observedGeneration: -1
7793             description: ReceiverStatus defines the observed state of the Receiver.
7794             properties:
7795               conditions:
7796                 description: Conditions holds the conditions for the Receiver.
7797                 items:
7798                   description: "Condition contains details for one aspect of the current
7799                     state of this API Resource. --- This struct is intended for direct
7800                     use as an array at the field path .status.conditions.  For example,
7801                     \n type FooStatus struct{ // Represents the observations of a
7802                     foo's current state. // Known .status.conditions.type are: \"Available\",
7803                     \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
7804                     // +listType=map // +listMapKey=type Conditions []metav1.Condition
7805                     `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
7806                     protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
7807                   properties:
7808                     lastTransitionTime:
7809                       description: lastTransitionTime is the last time the condition
7810                         transitioned from one status to another. This should be when
7811                         the underlying condition changed.  If that is not known, then
7812                         using the time when the API field changed is acceptable.
7813                       format: date-time
7814                       type: string
7815                     message:
7816                       description: message is a human readable message indicating
7817                         details about the transition. This may be an empty string.
7818                       maxLength: 32768
7819                       type: string
7820                     observedGeneration:
7821                       description: observedGeneration represents the .metadata.generation
7822                         that the condition was set based upon. For instance, if .metadata.generation
7823                         is currently 12, but the .status.conditions[x].observedGeneration
7824                         is 9, the condition is out of date with respect to the current
7825                         state of the instance.
7826                       format: int64
7827                       minimum: 0
7828                       type: integer
7829                     reason:
7830                       description: reason contains a programmatic identifier indicating
7831                         the reason for the condition's last transition. Producers
7832                         of specific condition types may define expected values and
7833                         meanings for this field, and whether the values are considered
7834                         a guaranteed API. The value should be a CamelCase string.
7835                         This field may not be empty.
7836                       maxLength: 1024
7837                       minLength: 1
7838                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
7839                       type: string
7840                     status:
7841                       description: status of the condition, one of True, False, Unknown.
7842                       enum:
7843                       - "True"
7844                       - "False"
7845                       - Unknown
7846                       type: string
7847                     type:
7848                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
7849                         --- Many .condition.type values are consistent across resources
7850                         like Available, but because arbitrary conditions can be useful
7851                         (see .node.status.conditions), the ability to deconflict is
7852                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
7853                       maxLength: 316
7854                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
7855                       type: string
7856                   required:
7857                   - lastTransitionTime
7858                   - message
7859                   - reason
7860                   - status
7861                   - type
7862                   type: object
7863                 type: array
7864               lastHandledReconcileAt:
7865                 description: LastHandledReconcileAt holds the value of the most recent
7866                   reconcile request value, so a change of the annotation value can
7867                   be detected.
7868                 type: string
7869               observedGeneration:
7870                 description: ObservedGeneration is the last observed generation of
7871                   the Receiver object.
7872                 format: int64
7873                 type: integer
7874               url:
7875                 description: 'URL is the generated incoming webhook address in the
7876                   format of ''/hook/sha256sum(token+name+namespace)''. Deprecated:
7877                   Replaced by WebhookPath.'
7878                 type: string
7879               webhookPath:
7880                 description: WebhookPath is the generated incoming webhook address
7881                   in the format of '/hook/sha256sum(token+name+namespace)'.
7882                 type: string
7883             type: object
7884         type: object
7885     served: true
7886     storage: false
7887     subresources:
7888       status: {}
7889 ---
7890 apiVersion: v1
7891 kind: ServiceAccount
7892 metadata:
7893   labels:
7894     app.kubernetes.io/component: notification-controller
7895     app.kubernetes.io/instance: flux-system
7896     app.kubernetes.io/part-of: flux
7897     app.kubernetes.io/version: v2.1.2
7898   name: notification-controller
7899   namespace: flux-system
7900 ---
7901 apiVersion: v1
7902 kind: Service
7903 metadata:
7904   labels:
7905     app.kubernetes.io/component: notification-controller
7906     app.kubernetes.io/instance: flux-system
7907     app.kubernetes.io/part-of: flux
7908     app.kubernetes.io/version: v2.1.2
7909     control-plane: controller
7910   name: notification-controller
7911   namespace: flux-system
7912 spec:
7913   ports:
7914   - name: http
7915     port: 80
7916     protocol: TCP
7917     targetPort: http
7918   selector:
7919     app: notification-controller
7920   type: ClusterIP
7921 ---
7922 apiVersion: v1
7923 kind: Service
7924 metadata:
7925   labels:
7926     app.kubernetes.io/component: notification-controller
7927     app.kubernetes.io/instance: flux-system
7928     app.kubernetes.io/part-of: flux
7929     app.kubernetes.io/version: v2.1.2
7930     control-plane: controller
7931   name: webhook-receiver
7932   namespace: flux-system
7933 spec:
7934   ports:
7935   - name: http
7936     port: 80
7937     protocol: TCP
7938     targetPort: http-webhook
7939   selector:
7940     app: notification-controller
7941   type: ClusterIP
7942 ---
7943 apiVersion: apps/v1
7944 kind: Deployment
7945 metadata:
7946   labels:
7947     app.kubernetes.io/component: notification-controller
7948     app.kubernetes.io/instance: flux-system
7949     app.kubernetes.io/part-of: flux
7950     app.kubernetes.io/version: v2.1.2
7951     control-plane: controller
7952   name: notification-controller
7953   namespace: flux-system
7954 spec:
7955   replicas: 1
7956   selector:
7957     matchLabels:
7958       app: notification-controller
7959   template:
7960     metadata:
7961       annotations:
7962         prometheus.io/port: "8080"
7963         prometheus.io/scrape: "true"
7964       labels:
7965         app: notification-controller
7966     spec:
7967       containers:
7968       - args:
7969         - --watch-all-namespaces=true
7970         - --log-level=info
7971         - --log-encoding=json
7972         - --enable-leader-election
7973         env:
7974         - name: RUNTIME_NAMESPACE
7975           valueFrom:
7976             fieldRef:
7977               fieldPath: metadata.namespace
7978         image: ghcr.io/fluxcd/notification-controller:v1.1.0
7979         imagePullPolicy: IfNotPresent
7980         livenessProbe:
7981           httpGet:
7982             path: /healthz
7983             port: healthz
7984         name: manager
7985         ports:
7986         - containerPort: 9090
7987           name: http
7988           protocol: TCP
7989         - containerPort: 9292
7990           name: http-webhook
7991           protocol: TCP
7992         - containerPort: 8080
7993           name: http-prom
7994           protocol: TCP
7995         - containerPort: 9440
7996           name: healthz
7997           protocol: TCP
7998         readinessProbe:
7999           httpGet:
8000             path: /readyz
8001             port: healthz
8002         resources:
8003           limits:
8004             cpu: 1000m
8005             memory: 1Gi
8006           requests:
8007             cpu: 100m
8008             memory: 64Mi
8009         securityContext:
8010           allowPrivilegeEscalation: false
8011           capabilities:
8012             drop:
8013             - ALL
8014           readOnlyRootFilesystem: true
8015           runAsNonRoot: true
8016           seccompProfile:
8017             type: RuntimeDefault
8018         volumeMounts:
8019         - mountPath: /tmp
8020           name: temp
8021       nodeSelector:
8022         kubernetes.io/os: linux
8023       securityContext:
8024         fsGroup: 1337
8025       serviceAccountName: notification-controller
8026       terminationGracePeriodSeconds: 10
8027       volumes:
8028       - emptyDir: {}
8029         name: temp